2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2022-46857HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in SiteAlert plugin <= 1.9.7 versions.
CVE-2022-45828HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in NooTheme Noo Timetable plugin <= 2.1.3 versions.
CVE-2022-38062HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Metagauss Download Theme plugin <= 1.0.9 versions.
CVE-2022-36424HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Nikola Loncar Easy Appointments plugin <= 3.11.9 versions.
CVE-2022-47172HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.6.2 versions.
CVE-2022-4952HIGH7.5A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. ...
CVE-2022-24834HIGH8.8Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a he...
CVE-2022-45855HIGH8.8SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user t...
CVE-2022-42009HIGH8.8SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to ...
CVE-2022-23447HIGH7.5An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtende...
CVE-2022-31810HIGH7.5A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8). Affected server applications improp...
CVE-2022-29561HIGH8.8A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versio...
CVE-2022-45823HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in GalleryPlugins Video Contest WordPress plugin <= 3.2 versions.
CVE-2022-48520HIGH7.5Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confi...
CVE-2022-48519HIGH7.5Unauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confi...
CVE-2022-48517HIGH7.5Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will aff...
CVE-2022-48516HIGH7.5Vulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation o...
CVE-2022-48515HIGH7.5Vulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect se...
CVE-2022-48514HIGH7.5The Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerabi...
CVE-2022-48508HIGH7.5 Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect ...
CVE-2022-48507HIGH7.5Vulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerabili...
CVE-2022-42175HIGH8.8Insecure Direct Object Reference vulnerability in WHMCS module SolusVM 1 4.1.2 allows an attacker to change the password...
CVE-2022-32666HIGH7.5In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote...
CVE-2022-44719HIGH7.5An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions.
CVE-2022-26899HIGH8.8Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now