2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-21418 | MEDIUM | 5 | 1.1% | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are ... |
| CVE-2022-21417 | MEDIUM | 4.9 | 1.4% | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are ... |
| CVE-2022-21416 | MEDIUM | 5 | 0.3% | Apr 19, 2022 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affect... |
| CVE-2022-21415 | MEDIUM | 4.9 | 1.3% | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are ... |
| CVE-2022-21414 | MEDIUM | 4.9 | 1.3% | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
| CVE-2022-21413 | MEDIUM | 4.9 | 1.3% | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected... |
| CVE-2022-21412 | MEDIUM | 4.9 | 1.4% | Apr 19, 2022 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af... |
| CVE-2022-21411 | MEDIUM | 5.4 | 0.5% | Apr 19, 2022 | Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server. Supported versions t... |
| CVE-2022-21409 | MEDIUM | 6.1 | 0.8% | Apr 19, 2022 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). The supported... |
| CVE-2022-21405 | MEDIUM | 5.5 | 0.3% | Apr 19, 2022 | Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Oracle Explorer). The supported versi... |
| CVE-2022-1385 | MEDIUM | 4.6 | 0.8% | Apr 19, 2022 | Mattermost 6.4.x and earlier fails to properly invalidate pending email invitations when the action is performed from th... |
| CVE-2022-1187 | MEDIUM | 6.1 | 1.3% | Apr 19, 2022 | The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/ad... |
| CVE-2022-1186 | MEDIUM | 5.3 | 1.1% | Apr 19, 2022 | The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visito... |
| CVE-2022-1019 | MEDIUM | 6.1 | 0.6% | Apr 19, 2022 | Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability al... |
| CVE-2022-24825 | MEDIUM | 5.3 | 0.9% | Apr 19, 2022 | Smokescreen is a simple HTTP proxy that fogs over naughty URLs. The primary use case for Smokescreen is to prevent serve... |
| CVE-2022-26595 | MEDIUM | 4.3 | 0.7% | Apr 19, 2022 | Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user... |
| CVE-2022-26593 | MEDIUM | 5.4 | 0.6% | Apr 19, 2022 | Cross-site scripting (XSS) vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through... |
| CVE-2022-0645 | MEDIUM | 6.1 | 0.8% | Apr 19, 2022 | Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to... |
| CVE-2022-24859 | MEDIUM | 5.5 | 1.3% | Apr 18, 2022 | PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF f... |
| CVE-2022-1112 | MEDIUM | 5.4 | 0.3% | Apr 18, 2022 | The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not ... |
| CVE-2022-1091 | MEDIUM | 6.1 | 1.2% | Apr 18, 2022 | The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the... |
| CVE-2022-1090 | MEDIUM | 4.8 | 0.6% | Apr 18, 2022 | The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high... |
| CVE-2022-1088 | MEDIUM | 4.8 | 0.6% | Apr 18, 2022 | The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings, which ... |
| CVE-2022-1063 | MEDIUM | 4.8 | 0.6% | Apr 18, 2022 | The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputti... |
| CVE-2022-1054 | MEDIUM | 5.3 | 3.6% | Apr 18, 2022 | The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now