2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3898 | MEDIUM | 6.5 | 0.4% | Nov 29, 2022 | The WP Affiliate Platform plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includ... |
| CVE-2022-3897 | MEDIUM | 4.8 | 0.5% | Nov 29, 2022 | The WP Affiliate Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in ve... |
| CVE-2022-3896 | MEDIUM | 6.1 | 0.6% | Nov 29, 2022 | The WP Affiliate Platform plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via $_SERVER["REQUEST_URI... |
| CVE-2022-3751 | CRITICAL | 9.8 | 0.9% | Nov 29, 2022 | SQL Injection in GitHub repository owncast/owncast prior to 0.0.13. |
| CVE-2022-3747 | MEDIUM | 6.5 | 0.8% | Nov 29, 2022 | The Becustom plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5.2.... |
| CVE-2022-3384 | HIGH | 7.2 | 2.7% | Nov 29, 2022 | The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 ... |
| CVE-2022-3383 | HIGH | 7.2 | 2.8% | Nov 29, 2022 | The Ultimate Member plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.5.0 ... |
| CVE-2022-3361 | MEDIUM | 4.3 | 2.5% | Nov 29, 2022 | The Ultimate Member plugin for WordPress is vulnerable to directory traversal in versions up to, and including 2.5.0 due... |
| CVE-2022-36964 | HIGH | 8.8 | 16.8% | Nov 29, 2022 | SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversa... |
| CVE-2022-36962 | HIGH | 7.2 | 9.0% | Nov 29, 2022 | SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete con... |
| CVE-2022-36960 | HIGH | 8.8 | 0.9% | Nov 29, 2022 | SolarWinds Platform was susceptible to Improper Input Validation. This vulnerability allows a remote adversary with vali... |
| CVE-2022-44279 | MEDIUM | 6.1 | 0.6% | Nov 29, 2022 | Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php. |
| CVE-2022-4172 | MEDIUM | 6.5 | 0.4% | Nov 29, 2022 | An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of ... |
| CVE-2022-4144 | MEDIUM | 6.5 | 0.3% | Nov 29, 2022 | An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not ... |
| CVE-2022-46150 | MEDIUM | 4.3 | 0.5% | Nov 29, 2022 | Discourse is an open-source discussion platform. Prior to version 2.8.13 of the `stable` branch and version 2.9.0.beta14... |
| CVE-2022-46152 | HIGH | 8.8 | 0.5% | Nov 29, 2022 | OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior t... |
| CVE-2022-46148 | MEDIUM | 5.4 | 0.5% | Nov 29, 2022 | Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the `stable` branch and versions 2.9.0.b... |
| CVE-2022-44356 | HIGH | 7.5 | 2.8% | Nov 29, 2022 | WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 and M31G3.V5030.200325 has an access contr... |
| CVE-2022-44355 | MEDIUM | 6.1 | 1.6% | Nov 29, 2022 | SolarView Compact 7.0 is vulnerable to Cross-site Scripting (XSS) via /network_test.php. |
| CVE-2022-44354 | CRITICAL | 9.8 | 2.1% | Nov 29, 2022 | SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file. |
| CVE-2022-25848 | HIGH | 7.5 | 1.0% | Nov 29, 2022 | This affects all versions of package static-dev-server. This is because when paths from users to the root directory are ... |
| CVE-2022-21126 | HIGH | 7.8 | 0.7% | Nov 29, 2022 | The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insec... |
| CVE-2022-45343 | HIGH | 7.8 | 0.3% | Nov 29, 2022 | GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /g... |
| CVE-2022-44635 | HIGH | 8.8 | 68.8% | Nov 29, 2022 | Apache Fineract allowed an authenticated user to perform remote code execution due to a path traversal vulnerability in ... |
| CVE-2022-46146 | HIGH | 8.8 | 1.2% | Nov 29, 2022 | Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now