2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-24462MEDIUM5.5Microsoft Word Security Feature Bypass Vulnerability
CVE-2022-23297MEDIUM5.5Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability
CVE-2022-23281MEDIUM5.5Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2022-23278MEDIUM5.9Microsoft Defender for Endpoint Spoofing Vulnerability
CVE-2022-23253MEDIUM6.5Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
CVE-2022-22010MEDIUM4.4Media Foundation Information Disclosure Vulnerability
CVE-2022-21975MEDIUM4.7Windows Hyper-V Denial of Service Vulnerability
CVE-2022-21973MEDIUM5.5Windows Media Center Update Denial of Service Vulnerability
CVE-2022-0881MEDIUM6.5Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.
CVE-2022-26319MEDIUM6.5An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a loca...
CVE-2022-24739MEDIUM6.1alltube is an html front end for youtube-dl. On releases prior to 3.0.3, an attacker could craft a special HTML page to ...
CVE-2022-24714MEDIUM5.3Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Installations of Icinga 2...
CVE-2022-0877MEDIUM5.4Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
CVE-2022-26317MEDIUM6.5A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the ...
CVE-2022-24737MEDIUM6.5HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently sto...
CVE-2022-0756MEDIUM6.5Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
CVE-2022-0755MEDIUM4.3Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
CVE-2022-0754MEDIUM6.5SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.
CVE-2022-0535MEDIUM4.8The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings, which could allow high priv...
CVE-2022-0533MEDIUM6.1The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (X...
CVE-2022-0448MEDIUM4.8The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow h...
CVE-2022-0445MEDIUM6.5The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CS...
CVE-2022-0442MEDIUM4.3The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make su...
CVE-2022-0429MEDIUM6.1The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable befor...
CVE-2022-0426MEDIUM5.4The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before output...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now