2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43500 | MEDIUM | 6.1 | 0.7% | Dec 5, 2022 | Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje... |
| CVE-2022-43499 | MEDIUM | 5.4 | 0.8% | Dec 5, 2022 | Stored cross-site scripting vulnerability in SHIRASAGI versions prior to v1.16.2 allows a remote authenticated attacker ... |
| CVE-2022-43497 | MEDIUM | 6.1 | 1.0% | Dec 5, 2022 | Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inje... |
| CVE-2022-43487 | MEDIUM | 6.1 | 0.8% | Dec 5, 2022 | Cross-site scripting vulnerability in Salon booking system versions prior to 7.9 allows a remote unauthenticated attacke... |
| CVE-2022-43484 | HIGH | 7.8 | 0.4% | Dec 5, 2022 | TERASOLUNA Global Framework 1.0.0 (Public review version) and TERASOLUNA Server Framework for Java (Rich) 2.0.0.2 to 2.0... |
| CVE-2022-43479 | MEDIUM | 6.1 | 0.9% | Dec 5, 2022 | Open redirect vulnerability in SHIRASAGI v1.14.4 to v1.15.0 allows a remote unauthenticated attacker to redirect users t... |
| CVE-2022-43470 | HIGH | 7.3 | 0.2% | Dec 5, 2022 | Cross-site request forgery (CSRF) vulnerability in +F FS040U software versions v2.3.4 and earlier, +F FS020W software ve... |
| CVE-2022-43442 | MEDIUM | 4.6 | 0.3% | Dec 5, 2022 | Plaintext storage of a password vulnerability exists in +F FS040U software versions v2.3.4 and earlier, which may allow ... |
| CVE-2022-42496 | CRITICAL | 9.8 | 2.1% | Dec 5, 2022 | OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a... |
| CVE-2022-41830 | MEDIUM | 4.8 | 0.8% | Dec 5, 2022 | Stored cross-site scripting vulnerability in Kyocera Document Solutions MFPs and printers allows a remote authenticated ... |
| CVE-2022-41807 | MEDIUM | 6.5 | 0.5% | Dec 5, 2022 | Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-ad... |
| CVE-2022-41798 | MEDIUM | 6.5 | 0.6% | Dec 5, 2022 | Session information easily guessable vulnerability exists in Kyocera Document Solutions MFPs and printers, which may all... |
| CVE-2022-41777 | HIGH | 7.5 | 1.5% | Dec 5, 2022 | Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Versi... |
| CVE-2022-41642 | CRITICAL | 9.8 | 2.1% | Dec 5, 2022 | OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an ... |
| CVE-2022-40968 | MEDIUM | 6.1 | 0.4% | Dec 4, 2022 | Reflected Cross-Site Scripting (XSS) vulnerability in 2kb Amazon Affiliates Store plugin <=2.1.5 on WordPress. |
| CVE-2022-35730 | MEDIUM | 6.5 | 0.2% | Dec 4, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Oceanwp sticky header plugin <= 1.0.8 on WordPress. |
| CVE-2022-35508 | CRITICAL | 9.8 | 1.2% | Dec 4, 2022 | Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests betw... |
| CVE-2022-35507 | HIGH | 7.1 | 1.4% | Dec 4, 2022 | A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) w... |
| CVE-2022-46414 | CRITICAL | 9.8 | 1.3% | Dec 4, 2022 | An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticate... |
| CVE-2022-46413 | HIGH | 8.8 | 1.4% | Dec 4, 2022 | An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated ... |
| CVE-2022-46412 | HIGH | 8.8 | 0.7% | Dec 4, 2022 | An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell... |
| CVE-2022-46411 | HIGH | 8.8 | 0.6% | Dec 4, 2022 | An issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default pass... |
| CVE-2022-46410 | HIGH | 8.8 | 0.6% | Dec 4, 2022 | An issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate p... |
| CVE-2022-44721 | — | — | — | Dec 4, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2841. Reason: This issue was MERGED into CVE-202... |
| CVE-2022-46405 | HIGH | 7.5 | 0.9% | Dec 4, 2022 | Mastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now