2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-3601 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could... |
| CVE-2022-3511 | MEDIUM | 6.5 | 0.7% | Nov 28, 2022 | The Awesome Support WordPress plugin before 6.1.2 does not ensure that the exported tickets archive to be downloaded bel... |
| CVE-2022-3490 | HIGH | 7.2 | 1.1% | Nov 28, 2022 | The Checkout Field Editor (Checkout Manager) for WooCommerce WordPress plugin before 1.8.0 unserializes user input provi... |
| CVE-2022-2983 | MEDIUM | 4.8 | 0.5% | Nov 28, 2022 | The Salat Times WordPress plugin before 3.2.2 does not sanitize and escapes its settings, allowing high-privilege users ... |
| CVE-2022-2311 | MEDIUM | 6.1 | 0.5% | Nov 28, 2022 | The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page ... |
| CVE-2022-4020 | HIGH | 8.2 | 0.2% | Nov 28, 2022 | Vulnerability in the HQSwSmiDxe DXE driver on some consumer Acer Notebook devices may allow an attacker with elevated pr... |
| CVE-2022-38900 | HIGH | 7.5 | 24.9% | Nov 28, 2022 | decode-uri-component 0.2.0 is vulnerable to Improper Input Validation resulting in DoS. |
| CVE-2022-36193 | CRITICAL | 9.8 | 1.4% | Nov 28, 2022 | SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent chang... |
| CVE-2022-43590 | MEDIUM | 5.5 | 0.3% | Nov 28, 2022 | A null pointer dereference vulnerability exists in the handle_ioctl_0x830a0_systembuffer functionality of Callback techn... |
| CVE-2022-43589 | MEDIUM | 5.5 | 0.3% | Nov 28, 2022 | A null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Fi... |
| CVE-2022-43588 | MEDIUM | 5.5 | 0.3% | Nov 28, 2022 | A null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Fi... |
| CVE-2022-45939 | HIGH | 7.8 | 0.6% | Nov 28, 2022 | GNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, ... |
| CVE-2022-45934 | HIGH | 7.8 | 0.8% | Nov 27, 2022 | An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an intege... |
| CVE-2022-43705 | CRITICAL | 9.1 | 0.4% | Nov 27, 2022 | In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was i... |
| CVE-2022-45933 | CRITICAL | 9.8 | 51.7% | Nov 27, 2022 | KubeView through 0.1.31 allows attackers to obtain control of a Kubernetes cluster because api/scrape/kube-system does n... |
| CVE-2022-45932 | HIGH | 7.5 | 0.6% | Nov 27, 2022 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/... |
| CVE-2022-45931 | HIGH | 7.5 | 0.5% | Nov 27, 2022 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/... |
| CVE-2022-45930 | HIGH | 7.5 | 0.7% | Nov 27, 2022 | A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/... |
| CVE-2022-45919 | HIGH | 7 | 0.3% | Nov 27, 2022 | An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free... |
| CVE-2022-45914 | MEDIUM | 6.5 | 0.7% | Nov 27, 2022 | The ESL (Electronic Shelf Label) protocol, as implemented by (for example) the OV80e934802 RF transceiver on the ETAG-21... |
| CVE-2022-24999 | HIGH | 7.5 | 14.7% | Nov 26, 2022 | qs before 6.10.3, as used in Express before 4.17.3 and other products, allows attackers to cause a Node process hang for... |
| CVE-2022-45909 | CRITICAL | 9.1 | 1.0% | Nov 26, 2022 | drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request. |
| CVE-2022-45908 | CRITICAL | 9.8 | 1.3% | Nov 26, 2022 | In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on ... |
| CVE-2022-45907 | CRITICAL | 9.8 | 1.2% | Nov 26, 2022 | In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is ... |
| CVE-2022-45225 | MEDIUM | 6.1 | 0.5% | Nov 25, 2022 | Book Store Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in /bsms_ci/index... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now