2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1148 | MEDIUM | 6.5 | 1.1% | Apr 4, 2022 | Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8... |
| CVE-2022-1121 | MEDIUM | 5.3 | 1.0% | Apr 4, 2022 | A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8... |
| CVE-2022-1120 | MEDIUM | 6.5 | 1.0% | Apr 4, 2022 | Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and ... |
| CVE-2022-1105 | MEDIUM | 4.3 | 0.7% | Apr 4, 2022 | An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior t... |
| CVE-2022-1100 | MEDIUM | 4.3 | 0.9% | Apr 4, 2022 | A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 pr... |
| CVE-2022-1099 | MEDIUM | 4.3 | 0.9% | Apr 4, 2022 | Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.... |
| CVE-2022-0740 | MEDIUM | 4.3 | 1.0% | Apr 4, 2022 | Incorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting f... |
| CVE-2022-24814 | MEDIUM | 6.1 | 1.0% | Apr 4, 2022 | Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.7.0, unauthorized Ja... |
| CVE-2022-24813 | MEDIUM | 5.3 | 1.0% | Apr 4, 2022 | CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. Without the patch for this issue, anonymou... |
| CVE-2022-1170 | MEDIUM | 6.1 | 1.8% | Apr 4, 2022 | In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS vulnerability as the input for the search... |
| CVE-2022-1169 | MEDIUM | 6.1 | 0.9% | Apr 4, 2022 | There is a XSS vulnerability in Careerfy. |
| CVE-2022-1168 | MEDIUM | 6.1 | 1.8% | Apr 4, 2022 | There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch WordPress plugin before 1.5.1. |
| CVE-2022-1167 | MEDIUM | 6.1 | 1.1% | Apr 4, 2022 | There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme befo... |
| CVE-2022-1166 | MEDIUM | 5.3 | 1.5% | Apr 4, 2022 | The JobMonster Theme was vulnerable to Directory Listing in the /wp-content/uploads/jobmonster/ folder, as it did not in... |
| CVE-2022-1164 | MEDIUM | 6.1 | 0.8% | Apr 4, 2022 | The Wyzi Theme was affected by reflected XSS vulnerabilities in the business search feature |
| CVE-2022-0958 | MEDIUM | 4.8 | 0.6% | Apr 4, 2022 | The Mark Posts WordPress plugin before 2.0.1 does not escape new markers, allowing high privilege users such as admin to... |
| CVE-2022-0901 | MEDIUM | 6.1 | 3.6% | Apr 4, 2022 | The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputtin... |
| CVE-2022-0884 | MEDIUM | 4.8 | 0.6% | Apr 4, 2022 | The Profile Builder WordPress plugin before 3.6.8 does not sanitise and escape Form Fields titles and description, which... |
| CVE-2022-0864 | MEDIUM | 6.1 | 6.4% | Apr 4, 2022 | The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not sanitise and escape the updraft_interval... |
| CVE-2022-0837 | MEDIUM | 5.4 | 0.6% | Apr 4, 2022 | The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing ... |
| CVE-2022-0830 | MEDIUM | 6.5 | 0.5% | Apr 4, 2022 | The FormBuilder WordPress plugin through 1.08 does not have CSRF checks in place when creating/updating and deleting for... |
| CVE-2022-0825 | MEDIUM | 5.4 | 0.8% | Apr 4, 2022 | The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any cu... |
| CVE-2022-0431 | MEDIUM | 6.1 | 0.9% | Apr 4, 2022 | The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before ... |
| CVE-2022-0404 | MEDIUM | 6.5 | 1.0% | Apr 4, 2022 | The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option me... |
| CVE-2022-28063 | MEDIUM | 4.9 | 1.1% | Apr 4, 2022 | Simple Bakery Shop Management System v1.0 contains a file disclosure via /bsms/?page=products. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now