2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1075 | MEDIUM | 5.4 | 0.4% | Mar 29, 2022 | A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue... |
| CVE-2022-1074 | MEDIUM | 5.4 | 0.4% | Mar 29, 2022 | A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection<... |
| CVE-2022-24957 | MEDIUM | 5.4 | 0.7% | Mar 29, 2022 | DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit ... |
| CVE-2022-24956 | MEDIUM | 6.5 | 1.3% | Mar 29, 2022 | An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2bord... |
| CVE-2022-26269 | MEDIUM | 4.6 | 0.4% | Mar 29, 2022 | Suzuki Connect v1.0.15 allows attackers to tamper with displayed messages via spoofed CAN messages. |
| CVE-2022-0331 | MEDIUM | 5.3 | 1.4% | Mar 29, 2022 | An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial ... |
| CVE-2022-26296 | MEDIUM | 5.5 | 0.4% | Mar 28, 2022 | BOOM: The Berkeley Out-of-Order RISC-V Processor commit d77c2c3 was discovered to allow unauthorized disclosure of infor... |
| CVE-2022-26291 | MEDIUM | 5.5 | 0.9% | Mar 28, 2022 | lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf()... |
| CVE-2022-26280 | MEDIUM | 6.5 | 1.9% | Mar 28, 2022 | Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init. |
| CVE-2022-26980 | MEDIUM | 6.1 | 1.1% | Mar 28, 2022 | Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO. |
| CVE-2022-1056 | MEDIUM | 5.5 | 1.1% | Mar 28, 2022 | Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff f... |
| CVE-2022-0549 | MEDIUM | 6.5 | 0.9% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 befor... |
| CVE-2022-0488 | MEDIUM | 4.3 | 0.7% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigg... |
| CVE-2022-0371 | MEDIUM | 4.3 | 0.9% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions start... |
| CVE-2022-0344 | MEDIUM | 4.3 | 1.1% | Mar 28, 2022 | An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting fr... |
| CVE-2022-0283 | MEDIUM | 6.1 | 0.7% | Mar 28, 2022 | An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab... |
| CVE-2022-0123 | MEDIUM | 6.8 | 0.4% | Mar 28, 2022 | An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 an... |
| CVE-2022-0833 | MEDIUM | 4.3 | 0.5% | Mar 28, 2022 | The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as r... |
| CVE-2022-0818 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a speci... |
| CVE-2022-0720 | MEDIUM | 5.4 | 0.6% | Mar 28, 2022 | The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any cu... |
| CVE-2022-0680 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configurati... |
| CVE-2022-0647 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the post_type parameter before outputting i... |
| CVE-2022-0643 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it b... |
| CVE-2022-0641 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting... |
| CVE-2022-0621 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an ad... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now