2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43516 | CRITICAL | 9.8 | 0.9% | Dec 5, 2022 | A Firewall Rule which allows all incoming TCP connections to all programs from any source and to all ports is created in... |
| CVE-2022-43097 | MEDIUM | 5.4 | 0.5% | Dec 5, 2022 | Phpgurukul User Registration & User Management System v3.0 was discovered to contain multiple stored cross-site scriptin... |
| CVE-2022-23467 | MEDIUM | 4.6 | 0.4% | Dec 5, 2022 | OpenRazer is an open source driver and user-space daemon to control Razer device lighting and other features on GNU/Linu... |
| CVE-2022-4293 | MEDIUM | 5.5 | 0.5% | Dec 5, 2022 | Floating Point Comparison with Incorrect Operator in GitHub repository vim/vim prior to 9.0.0804. |
| CVE-2022-4292 | HIGH | 7.8 | 0.7% | Dec 5, 2022 | Use After Free in GitHub repository vim/vim prior to 9.0.0882. |
| CVE-2022-43515 | CRITICAL | 9.8 | 1.2% | Dec 5, 2022 | Zabbix Frontend provides a feature that allows admins to maintain the installation and ensure that only certain IP addre... |
| CVE-2022-3926 | MEDIUM | 6.5 | 0.3% | Dec 5, 2022 | The WP OAuth Server (OAuth Authentication) WordPress plugin before 3.4.2 does not have CSRF check when regenerating secr... |
| CVE-2022-3909 | MEDIUM | 4.8 | 0.5% | Dec 5, 2022 | The Add Comments WordPress plugin through 1.0.1 does not sanitise and escape some of its settings, which could allow hig... |
| CVE-2022-3907 | HIGH | 7.5 | 0.9% | Dec 5, 2022 | The Clerk WordPress plugin before 4.0.0 is affected by time-based attacks in the validation function for all API request... |
| CVE-2022-3892 | MEDIUM | 4.8 | 0.5% | Dec 5, 2022 | The WP OAuth Server (OAuth Authentication) WordPress plugin before 4.2.2 does not sanitize and escape Client IDs, which ... |
| CVE-2022-3858 | HIGH | 7.2 | 1.0% | Dec 5, 2022 | The Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line, WeChat, Email, SMS, Call Button WordPress plugin befo... |
| CVE-2022-3856 | HIGH | 7.2 | 1.0% | Dec 5, 2022 | The Comic Book Management System WordPress plugin before 2.2.0 does not sanitize and escape a parameter before using it ... |
| CVE-2022-3846 | HIGH | 7.5 | 0.8% | Dec 5, 2022 | The Workreap WordPress theme before 2.6.3 has a vulnerability with the notifications feature as it's possible to read an... |
| CVE-2022-3838 | MEDIUM | 4.8 | 0.5% | Dec 5, 2022 | The WPUpper Share Buttons WordPress plugin through 3.42 does not sanitise and escape some of its settings, which could a... |
| CVE-2022-3837 | MEDIUM | 4.8 | 0.5% | Dec 5, 2022 | The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow hig... |
| CVE-2022-3830 | MEDIUM | 4.8 | 0.5% | Dec 5, 2022 | The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow ... |
| CVE-2022-3694 | HIGH | 7.5 | 0.8% | Dec 5, 2022 | The Syncee WordPress plugin before 1.0.10 leaks the administrator token that can be used to take over the administrator'... |
| CVE-2022-3677 | MEDIUM | 6.5 | 0.4% | Dec 5, 2022 | The Advanced Import WordPress plugin before 1.3.8 does not have CSRF check when installing and activating plugins, which... |
| CVE-2022-3426 | MEDIUM | 4.8 | 0.6% | Dec 5, 2022 | The Advanced WP Columns WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could al... |
| CVE-2022-3249 | HIGH | 7.2 | 1.0% | Dec 5, 2022 | The WP CSV Exporter WordPress plugin before 1.3.7 does not properly sanitise and escape some parameters before using the... |
| CVE-2022-1540 | HIGH | 7.2 | 1.0% | Dec 5, 2022 | The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privileg... |
| CVE-2022-4269 | MEDIUM | 5.5 | 0.2% | Dec 5, 2022 | A flaw was found in the Linux kernel Traffic Control (TC) subsystem. Using a specific networking configuration (redirect... |
| CVE-2022-45478 | MEDIUM | 5.9 | 0.3% | Dec 5, 2022 | Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (... |
| CVE-2022-45477 | CRITICAL | 9.8 | 2.2% | Dec 5, 2022 | Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any pre... |
| CVE-2022-45315 | CRITICAL | 9.8 | 1.3% | Dec 5, 2022 | Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerabi... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now