2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-44284 | MEDIUM | 5.4 | 0.5% | Nov 28, 2022 | Dinstar FXO Analog VoIP Gateway DAG2000-16O is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-44283 | CRITICAL | 9.8 | 1.1% | Nov 28, 2022 | AVS Audio Converter 10.3 is vulnerable to Buffer Overflow. |
| CVE-2022-41957 | HIGH | 7.5 | 0.9% | Nov 28, 2022 | Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. The package muhammara... |
| CVE-2022-41944 | MEDIUM | 4.3 | 0.4% | Nov 28, 2022 | Discourse is an open-source discussion platform. In stable versions prior to 2.8.12 and beta or tests-passed versions pr... |
| CVE-2022-41921 | MEDIUM | 4.3 | 0.5% | Nov 28, 2022 | Discourse is an open-source discussion platform. Prior to version 2.9.0.beta13, users can post chat messages of an unlim... |
| CVE-2022-41912 | CRITICAL | 9.8 | 2.2% | Nov 28, 2022 | The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML respon... |
| CVE-2022-31877 | HIGH | 8.8 | 0.4% | Nov 28, 2022 | An issue in the component MSI.TerminalServer.exe of MSI Center v1.0.41.0 allows attackers to escalate privileges via a c... |
| CVE-2022-3865 | HIGH | 8.8 | 1.1% | Nov 28, 2022 | The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a ... |
| CVE-2022-3850 | MEDIUM | 4.3 | 0.3% | Nov 28, 2022 | The Find and Replace All WordPress plugin before 1.3 does not have CSRF check when replacing string, which could allow a... |
| CVE-2022-3849 | HIGH | 8.8 | 1.1% | Nov 28, 2022 | The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a ... |
| CVE-2022-3848 | HIGH | 8.8 | 1.1% | Nov 28, 2022 | The WP User Merger WordPress plugin before 1.5.3 does not properly sanitise and escape a parameter before using it in a ... |
| CVE-2022-3847 | MEDIUM | 6.1 | 0.3% | Nov 28, 2022 | The Showing URL in QR Code WordPress plugin through 0.0.1 does not have CSRF check when updating its settings, and is mi... |
| CVE-2022-3839 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Analytics for WP WordPress plugin through 1.5.1 does not sanitise and escape some of its settings, which could allow... |
| CVE-2022-3834 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high... |
| CVE-2022-3833 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Fancier Author Box by ThematoSoup WordPress plugin through 1.4 does not sanitise and escape some of its settings, wh... |
| CVE-2022-3831 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The reCAPTCHA WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high pri... |
| CVE-2022-3828 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allo... |
| CVE-2022-3824 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could ... |
| CVE-2022-3823 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Beautiful Cookie Consent Banner WordPress plugin before 2.9.1 does not sanitise and escape some of its settings, whi... |
| CVE-2022-3822 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Donations via PayPal WordPress plugin before 1.9.9 does not sanitise and escape some of its settings, which could al... |
| CVE-2022-3769 | HIGH | 8.8 | 1.1% | Nov 28, 2022 | The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL... |
| CVE-2022-3768 | HIGH | 8.8 | 3.7% | Nov 28, 2022 | The WPSmartContracts WordPress plugin before 1.3.12 does not properly sanitise and escape a parameter before using it in... |
| CVE-2022-3689 | HIGH | 7.2 | 1.8% | Nov 28, 2022 | The HTML Forms WordPress plugin before 1.3.25 does not properly properly escape a parameter before using it in a SQL sta... |
| CVE-2022-3610 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Jeeng Push Notifications WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which coul... |
| CVE-2022-3603 | CRITICAL | 9.8 | 1.1% | Nov 28, 2022 | The Export customers list csv for WooCommerce, WordPress users csv, export Guest customer list WordPress plugin before 2... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now