2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1001 | MEDIUM | 4.8 | 4.2% | Apr 18, 2022 | The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" set... |
| CVE-2022-0994 | MEDIUM | 4.8 | 2.8% | Apr 18, 2022 | The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privi... |
| CVE-2022-0879 | MEDIUM | 6.1 | 1.2% | Apr 18, 2022 | The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the cf-api parameter before outputting it b... |
| CVE-2022-0780 | MEDIUM | 6.1 | 0.8% | Apr 18, 2022 | The SearchIQ WordPress plugin before 3.9 contains a flag to disable the verification of CSRF nonces, granting unauthenti... |
| CVE-2022-0765 | MEDIUM | 5.4 | 4.0% | Apr 18, 2022 | The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source tran... |
| CVE-2022-0737 | MEDIUM | 4.8 | 0.8% | Apr 18, 2022 | The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privil... |
| CVE-2022-0707 | MEDIUM | 4.3 | 0.5% | Apr 18, 2022 | The Easy Digital Downloads WordPress plugin before 2.11.6 does not have CSRF check in place when inserting payment notes... |
| CVE-2022-0706 | MEDIUM | 4.8 | 0.6% | Apr 18, 2022 | The Easy Digital Downloads WordPress plugin before 2.11.6 does not sanitise and escape the Downloadable File Name in the... |
| CVE-2022-27853 | MEDIUM | 4.8 | 0.5% | Apr 18, 2022 | Authenticated (author or higher role) Stored Cross-Site Scripting (XSS) in Contest Gallery (WordPress plugin) <= 13.1.0.... |
| CVE-2022-27652 | MEDIUM | 5.3 | 0.2% | Apr 18, 2022 | A flaw was found in cri-o, where containers were incorrectly started with non-empty default permissions. A vulnerability... |
| CVE-2022-23975 | MEDIUM | 6.5 | 0.5% | Apr 18, 2022 | Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any insta... |
| CVE-2022-28810 | MEDIUM | 6.8 | 70.4% | Apr 18, 2022 | Zoho ManageEngine ADSelfService Plus before build 6122 allows a remote authenticated administrator to execute arbitrary ... |
| CVE-2022-1383 | MEDIUM | 6.1 | 0.7% | Apr 18, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data ... |
| CVE-2022-1382 | MEDIUM | 5.5 | 0.7% | Apr 18, 2022 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making ... |
| CVE-2022-28966 | MEDIUM | 5.5 | 0.6% | Apr 16, 2022 | Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in ... |
| CVE-2022-26777 | MEDIUM | 5.3 | 2.0% | Apr 16, 2022 | Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details. |
| CVE-2022-26653 | MEDIUM | 5.3 | 2.0% | Apr 16, 2022 | Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username... |
| CVE-2022-1380 | MEDIUM | 5.4 | 0.8% | Apr 16, 2022 | Stored Cross Site Scripting vulnerability in Item name parameter in GitHub repository snipe/snipe-it prior to v5.4.3. Th... |
| CVE-2022-29287 | MEDIUM | 4.9 | 0.9% | Apr 16, 2022 | Kentico CMS before 13.0.66 has an Insecure Direct Object Reference vulnerability. It allows an attacker with user manage... |
| CVE-2022-29020 | MEDIUM | 6.1 | 0.5% | Apr 16, 2022 | ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar. |
| CVE-2022-1365 | MEDIUM | 6.5 | 1.1% | Apr 15, 2022 | Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1... |
| CVE-2022-27425 | MEDIUM | 6.1 | 0.6% | Apr 15, 2022 | Chamilo LMS v1.11.13 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /blog/blog.p... |
| CVE-2022-27422 | MEDIUM | 6.1 | 0.6% | Apr 15, 2022 | A reflected cross-site scripting (XSS) vulnerability in Chamilo LMS v1.11.13 allows attackers to execute arbitrary web s... |
| CVE-2022-26920 | MEDIUM | 5.5 | 0.8% | Apr 15, 2022 | Windows Graphics Component Information Disclosure Vulnerability |
| CVE-2022-26911 | MEDIUM | 6.5 | 3.2% | Apr 15, 2022 | Skype for Business Information Disclosure Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now