2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1503 | MEDIUM | 5.4 | 0.6% | Apr 27, 2022 | A vulnerability, which was classified as problematic, has been found in GetSimple CMS. Affected by this issue is the fil... |
| CVE-2022-29810 | MEDIUM | 5.5 | 0.4% | Apr 27, 2022 | The Hashicorp go-getter library before 1.5.11 does not redact an SSH key from a URL query parameter. |
| CVE-2022-27331 | MEDIUM | 4.3 | 0.7% | Apr 27, 2022 | An access control issue in Zammad v5.0.3 broadcasts administrative configuration changes to all users who have an active... |
| CVE-2022-27888 | MEDIUM | 5.5 | 0.2% | Apr 26, 2022 | Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive informati... |
| CVE-2022-26564 | MEDIUM | 6.1 | 2.7% | Apr 26, 2022 | HotelDruid Hotel Management Software v3.0.3 contains a cross-site scripting (XSS) vulnerability via the prezzoperiodo4 p... |
| CVE-2022-28522 | MEDIUM | 5.4 | 0.6% | Apr 26, 2022 | ZCMS v20170206 was discovered to contain a stored cross-site scripting (XSS) vulnerability via index.php?m=home&c=messag... |
| CVE-2022-28450 | MEDIUM | 5.4 | 0.7% | Apr 26, 2022 | nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS) via the "Text" parameter (forums) when creating a new pos... |
| CVE-2022-28449 | MEDIUM | 6.1 | 0.7% | Apr 26, 2022 | nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). At Apply for vendor account feature, an attacker can upl... |
| CVE-2022-28448 | MEDIUM | 5.4 | 0.5% | Apr 26, 2022 | nopCommerce 4.50.1 is vulnerable to Cross Site Scripting (XSS). An attacker (role customer) can inject javascript code t... |
| CVE-2022-27854 | MEDIUM | 5.4 | 0.5% | Apr 26, 2022 | Stored Cross-Site Scripting (XSS) vulnerability in Alexander Ustimenko's Psychological tests & quizzes plugin <= 0.21.19... |
| CVE-2022-24866 | MEDIUM | 4.3 | 0.6% | Apr 26, 2022 | Discourse Assign is a plugin for assigning users to a topic in Discourse, an open-source messaging platform. Prior to ve... |
| CVE-2022-1466 | MEDIUM | 6.5 | 1.0% | Apr 26, 2022 | Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be ... |
| CVE-2022-28218 | MEDIUM | 5.5 | 0.2% | Apr 26, 2022 | An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (... |
| CVE-2022-1173 | MEDIUM | 5.4 | 1.5% | Apr 26, 2022 | stored xss in GitHub repository getgrav/grav prior to 1.7.33. |
| CVE-2022-24880 | MEDIUM | 5.3 | 1.1% | Apr 25, 2022 | flask-session-captcha is a package which allows users to extend Flask by adding an image based captcha stored in a serve... |
| CVE-2022-29418 | MEDIUM | 4.8 | 0.5% | Apr 25, 2022 | Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) in Mark Daniels Night Mode plugin <= 1.0.0 on Word... |
| CVE-2022-29417 | MEDIUM | 4.3 | 0.6% | Apr 25, 2022 | Plugin Settings Update vulnerability in ShortPixel's ShortPixel Adaptive Images plugin <= 3.3.1 at WordPress allows an a... |
| CVE-2022-28290 | MEDIUM | 6.1 | 1.4% | Apr 25, 2022 | Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload execut... |
| CVE-2022-0477 | MEDIUM | 4.9 | 0.9% | Apr 25, 2022 | An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting fr... |
| CVE-2022-27375 | MEDIUM | 6.5 | 0.4% | Apr 25, 2022 | Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_422168 at ... |
| CVE-2022-27374 | MEDIUM | 6.5 | 0.4% | Apr 25, 2022 | Tenda AX12 V22.03.01.21_CN was discovered to contain a Cross-Site Request Forgery (CSRF) via the function sub_42E328 at ... |
| CVE-2022-26597 | MEDIUM | 6.1 | 0.7% | Apr 25, 2022 | Cross-site scripting (XSS) vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7... |
| CVE-2022-26596 | MEDIUM | 6.1 | 0.7% | Apr 25, 2022 | Cross-site scripting (XSS) vulnerability in Journal module's web content display configuration page in Liferay Portal 7.... |
| CVE-2022-1396 | MEDIUM | 4.8 | 1.0% | Apr 25, 2022 | The Donorbox WordPress plugin before 7.1.7 does not sanitise and escape its Campaign URL settings before outputting it i... |
| CVE-2022-1228 | MEDIUM | 4.8 | 0.6% | Apr 25, 2022 | The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now