2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0620 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it ... |
| CVE-2022-0619 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it bac... |
| CVE-2022-0600 | MEDIUM | 6.1 | 0.8% | Mar 28, 2022 | The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting ... |
| CVE-2022-0599 | MEDIUM | 6.1 | 1.7% | Mar 28, 2022 | The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id par... |
| CVE-2022-0595 | MEDIUM | 5.4 | 13.6% | Mar 28, 2022 | The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via th... |
| CVE-2022-0493 | MEDIUM | 4.9 | 1.4% | Mar 28, 2022 | The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowi... |
| CVE-2022-0450 | MEDIUM | 5.4 | 0.6% | Mar 28, 2022 | The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving me... |
| CVE-2022-0397 | MEDIUM | 5.4 | 0.6% | Mar 28, 2022 | The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter befo... |
| CVE-2022-0388 | MEDIUM | 4.8 | 0.6% | Mar 28, 2022 | The Interactive Medical Drawing of Human Body WordPress plugin before 2.6 does not sanitise and escape the Link field, a... |
| CVE-2022-27950 | MEDIUM | 5.5 | 0.4% | Mar 28, 2022 | In drivers/hid/hid-elo.c in the Linux kernel before 5.16.11, a memory leak exists for a certain hid_parse error conditio... |
| CVE-2022-26254 | MEDIUM | 5.3 | 0.8% | Mar 27, 2022 | WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows ... |
| CVE-2022-26252 | MEDIUM | 6.5 | 1.8% | Mar 27, 2022 | aaPanel v6.8.21 was discovered to be vulnerable to directory traversal. This vulnerability allows attackers to obtain th... |
| CVE-2022-27948 | MEDIUM | 4.3 | 1.4% | Mar 27, 2022 | Certain Tesla vehicles through 2022-03-26 allow attackers to open the charging port via a 315 MHz RF signal containing a... |
| CVE-2022-27943 | MEDIUM | 5.5 | 0.9% | Mar 26, 2022 | libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new. |
| CVE-2022-27939 | MEDIUM | 5.5 | 1.0% | Mar 26, 2022 | tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c. |
| CVE-2022-27938 | MEDIUM | 5.5 | 0.6% | Mar 26, 2022 | stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__... |
| CVE-2022-26197 | MEDIUM | 5.4 | 0.6% | Mar 25, 2022 | Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table. |
| CVE-2022-24643 | MEDIUM | 5.4 | 1.2% | Mar 25, 2022 | A stored cross-site scripting (XSS) issue was discovered in the OpenEMR Hospital Information Management System version 6... |
| CVE-2022-27920 | MEDIUM | 6.1 | 0.9% | Mar 25, 2022 | libkiwix 10.0.0 and 10.0.1 allows XSS in the built-in webserver functionality via the search suggestions URL parameter. ... |
| CVE-2022-27906 | MEDIUM | 5.9 | 1.0% | Mar 25, 2022 | Mendelson OFTP2 before 1.1 b43 is affected by directory traversal. To access the vulnerable code path, the attacker has ... |
| CVE-2022-27887 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/vod/data.h... |
| CVE-2022-27886 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/ulog/index... |
| CVE-2022-27885 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/w... |
| CVE-2022-27884 | MEDIUM | 6.1 | 0.5% | Mar 25, 2022 | Maccms v10 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in /admin.php/admin/plog/index... |
| CVE-2022-26573 | MEDIUM | 6.1 | 0.6% | Mar 25, 2022 | Maccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now