2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-37332 | HIGH | 7.8 | 1.4% | Nov 21, 2022 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A s... |
| CVE-2022-32774 | HIGH | 7.8 | 1.0% | Nov 21, 2022 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By ... |
| CVE-2022-4096 | MEDIUM | 6.5 | 1.4% | Nov 21, 2022 | Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2. |
| CVE-2022-45017 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in the Overview Page settings module of WBCE CMS v1.5.4 allows attackers to e... |
| CVE-2022-45016 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute ... |
| CVE-2022-45015 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute ... |
| CVE-2022-45014 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute ... |
| CVE-2022-45013 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in the Show Advanced Option module of WBCE CMS v1.5.4 allows attackers to exe... |
| CVE-2022-45012 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | A cross-site scripting (XSS) vulnerability in the Modify Page module of WBCE CMS v1.5.4 allows attackers to execute arbi... |
| CVE-2022-44169 | HIGH | 7.5 | 0.8% | Nov 21, 2022 | Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function formSetVirtualSer. |
| CVE-2022-44168 | HIGH | 7.5 | 0.8% | Nov 21, 2022 | Tenda AC15 V15.03.05.18 is vulnerable to Buffer Overflow via function fromSetRouteStatic.. |
| CVE-2022-44167 | HIGH | 7.5 | 0.8% | Nov 21, 2022 | Tenda AC15 V15.03.05.18 is avulnerable to Buffer Overflow via function formSetPPTPServer. |
| CVE-2022-3861 | HIGH | 8.8 | 2.0% | Nov 21, 2022 | The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via des... |
| CVE-2022-3763 | HIGH | 8.1 | 0.4% | Nov 21, 2022 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, B... |
| CVE-2022-3762 | MEDIUM | 6.5 | 0.9% | Nov 21, 2022 | The Booster for WooCommerce WordPress plugin before 5.6.7, Booster Plus for WooCommerce WordPress plugin before 5.6.5, B... |
| CVE-2022-3753 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | The Evaluate WordPress plugin through 1.0 does not sanitize and escapes some of its settings, which could allow high-pri... |
| CVE-2022-3750 | MEDIUM | 4.7 | 0.4% | Nov 21, 2022 | The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation. |
| CVE-2022-3720 | HIGH | 7.2 | 1.0% | Nov 21, 2022 | The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL st... |
| CVE-2022-3691 | HIGH | 7.5 | 0.9% | Nov 21, 2022 | The DeepL Pro API translation plugin WordPress plugin before 1.7.5 discloses sensitive information (including the DeepL ... |
| CVE-2022-3690 | MEDIUM | 4.8 | 0.6% | Nov 21, 2022 | The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allo... |
| CVE-2022-3688 | HIGH | 8.8 | 0.5% | Nov 21, 2022 | The WPQA Builder WordPress plugin before 5.9 does not have CSRF check when following and unfollowing users, which could ... |
| CVE-2022-3634 | CRITICAL | 9.8 | 3.6% | Nov 21, 2022 | The Contact Form 7 Database Addon WordPress plugin before 1.2.6.5 does not validate data when output it back in a CSV fi... |
| CVE-2022-3618 | MEDIUM | 4.8 | 0.5% | Nov 21, 2022 | The Spacer WordPress plugin before 3.0.7 does not sanitize and escapes some of its settings, which could allow high-priv... |
| CVE-2022-3600 | CRITICAL | 9.8 | 1.2% | Nov 21, 2022 | The Easy Digital Downloads WordPress plugin before 3.1.0.2 does not validate data when its output in a CSV file, which c... |
| CVE-2022-3336 | MEDIUM | 4.3 | 0.3% | Nov 21, 2022 | The Event Monster WordPress plugin before 1.2.0 does not have CSRF check when deleting visitors, which could allow attac... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now