2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27851 | MEDIUM | 4.3 | 0.4% | Apr 15, 2022 | Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API k... |
| CVE-2022-27850 | MEDIUM | 4.3 | 0.4% | Apr 15, 2022 | Cross-Site Request Forgery (CSRF) in Simple Ajax Chat (WordPress plugin) <= 20220115 allows an attacker to clear the cha... |
| CVE-2022-27258 | MEDIUM | 6.1 | 0.7% | Apr 15, 2022 | Multiple Cross-Site Scripting (XSS) vulnerabilities in Hubzilla 7.0.3 and earlier allows remote attacker to include arbi... |
| CVE-2022-26594 | MEDIUM | 6.1 | 0.7% | Apr 15, 2022 | Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.5 through 7.4.0, and Liferay DXP 7.3 before se... |
| CVE-2022-20761 | MEDIUM | 6.5 | 0.4% | Apr 15, 2022 | A vulnerability in the integrated wireless access point (AP) packet processing of the Cisco 1000 Series Connected Grid R... |
| CVE-2022-20758 | MEDIUM | 6.8 | 1.1% | Apr 15, 2022 | A vulnerability in the implementation of the Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functionality in Cisco IO... |
| CVE-2022-20747 | MEDIUM | 6.5 | 0.9% | Apr 15, 2022 | A vulnerability in the History API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to gai... |
| CVE-2022-20735 | MEDIUM | 6.5 | 0.5% | Apr 15, 2022 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, r... |
| CVE-2022-20731 | MEDIUM | 6.8 | 0.2% | Apr 15, 2022 | Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches c... |
| CVE-2022-20727 | MEDIUM | 6.7 | 1.0% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20725 | MEDIUM | 4.8 | 0.6% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20724 | MEDIUM | 5.3 | 1.2% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20722 | MEDIUM | 4.9 | 1.2% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20721 | MEDIUM | 4.9 | 1.2% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20717 | MEDIUM | 5.5 | 0.2% | Apr 15, 2022 | A vulnerability in the NETCONF process of Cisco SD-WAN vEdge Routers could allow an authenticated, local attacker to cau... |
| CVE-2022-20694 | MEDIUM | 6.8 | 1.1% | Apr 15, 2022 | A vulnerability in the implementation of the Resource Public Key Infrastructure (RPKI) feature of Cisco IOS XE Software ... |
| CVE-2022-20692 | MEDIUM | 6.5 | 1.1% | Apr 15, 2022 | A vulnerability in the NETCONF over SSH feature of Cisco IOS XE Software could allow a low-privileged, authenticated, re... |
| CVE-2022-20684 | MEDIUM | 6.5 | 0.5% | Apr 15, 2022 | A vulnerability in Simple Network Management Protocol (SNMP) trap generation for wireless clients of Cisco IOS XE Wirele... |
| CVE-2022-20677 | MEDIUM | 6.7 | 0.6% | Apr 15, 2022 | Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an att... |
| CVE-2022-20676 | MEDIUM | 6.7 | 0.3% | Apr 15, 2022 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS XE Software could allow an authenticated, lo... |
| CVE-2022-20661 | MEDIUM | 4.6 | 0.2% | Apr 15, 2022 | Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches c... |
| CVE-2022-1231 | MEDIUM | 6.1 | 1.8% | Apr 15, 2022 | XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the c... |
| CVE-2022-28049 | MEDIUM | 5.5 | 0.8% | Apr 15, 2022 | NGINX NJS 0.7.2 was discovered to contain a NULL pointer dereference via the component njs_vmcode_array at /src/njs_vmco... |
| CVE-2022-28041 | MEDIUM | 6.5 | 2.0% | Apr 15, 2022 | stb_image.h v2.27 was discovered to contain an integer overflow via the function stbi__jpeg_decode_block_prog_dc. This v... |
| CVE-2022-28870 | MEDIUM | 4.3 | 0.4% | Apr 15, 2022 | A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing atta... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now