2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-4185 | MEDIUM | 4.3 | 0.8% | Nov 30, 2022 | Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to s... |
| CVE-2022-4184 | MEDIUM | 4.3 | 0.6% | Nov 30, 2022 | Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass ... |
| CVE-2022-4183 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to by... |
| CVE-2022-4182 | MEDIUM | 4.3 | 0.5% | Nov 30, 2022 | Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypas... |
| CVE-2022-4181 | HIGH | 8.8 | 0.7% | Nov 30, 2022 | Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap co... |
| CVE-2022-4180 | HIGH | 8.8 | 0.5% | Nov 30, 2022 | Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a mal... |
| CVE-2022-4179 | HIGH | 8.8 | 0.5% | Nov 30, 2022 | Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a ma... |
| CVE-2022-4178 | HIGH | 8.8 | 23.9% | Nov 30, 2022 | Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the rendere... |
| CVE-2022-4177 | HIGH | 8.8 | 0.5% | Nov 30, 2022 | Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install... |
| CVE-2022-4176 | HIGH | 8.8 | 0.6% | Nov 30, 2022 | Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote ... |
| CVE-2022-4175 | HIGH | 8.8 | 0.7% | Nov 30, 2022 | Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploi... |
| CVE-2022-4174 | HIGH | 8.8 | 0.9% | Nov 30, 2022 | Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2022-46155 | MEDIUM | 6.4 | 0.4% | Nov 29, 2022 | Airtable.js is the JavaScript client for Airtable. Prior to version 0.11.6, Airtable.js had a misconfigured build script... |
| CVE-2022-4036 | MEDIUM | 5.3 | 0.4% | Nov 29, 2022 | The Appointment Hour Booking plugin for WordPress is vulnerable to CAPTCHA bypass in versions up to, and including, 1.3.... |
| CVE-2022-4035 | MEDIUM | 6.1 | 0.7% | Nov 29, 2022 | The Appointment Hour Booking plugin for WordPress is vulnerable to iFrame Injection via the ‘email’ or general field par... |
| CVE-2022-4034 | HIGH | 7.8 | 0.6% | Nov 29, 2022 | The Appointment Hour Booking Plugin for WordPress is vulnerable to CSV Injection in versions up to, and including, 1.3.7... |
| CVE-2022-4033 | MEDIUM | 5.3 | 0.7% | Nov 29, 2022 | The Quiz and Survey Master plugin for WordPress is vulnerable to input validation bypass via the 'question[id]' paramete... |
| CVE-2022-4032 | MEDIUM | 6.1 | 0.7% | Nov 29, 2022 | The Quiz and Survey Master plugin for WordPress is vulnerable to iFrame Injection via the 'question[id]' parameter in ve... |
| CVE-2022-4031 | MEDIUM | 4.9 | 0.7% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to arbitrary file modifications in versions up to, and including, 6.... |
| CVE-2022-4030 | HIGH | 8.1 | 1.6% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 6.8 via the 'fil... |
| CVE-2022-4029 | MEDIUM | 4.7 | 0.6% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'sforum_[md5 hash of the W... |
| CVE-2022-4028 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipula... |
| CVE-2022-4027 | MEDIUM | 5.4 | 0.6% | Nov 29, 2022 | The Simple:Press plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'postitem' parameter manipula... |
| CVE-2022-3995 | MEDIUM | 4.3 | 0.6% | Nov 29, 2022 | The TeraWallet plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, ... |
| CVE-2022-3991 | MEDIUM | 5.4 | 0.6% | Nov 29, 2022 | The Photospace Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its settings parameters sav... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now