2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0422 | MEDIUM | 6.1 | 8.1% | Mar 7, 2022 | The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_custom_js] parameter b... |
| CVE-2022-0389 | MEDIUM | 4.8 | 0.6% | Mar 7, 2022 | The WP Time Slots Booking Form WordPress plugin before 1.1.63 does not sanitise and escape Calendar names, allowing high... |
| CVE-2022-0384 | MEDIUM | 4.3 | 1.0% | Mar 7, 2022 | The Video Conferencing with Zoom WordPress plugin before 3.8.17 does not have authorisation in its vczapi_get_wp_users A... |
| CVE-2022-0347 | MEDIUM | 6.1 | 0.8% | Mar 7, 2022 | The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter... |
| CVE-2022-0205 | MEDIUM | 5.4 | 0.6% | Mar 7, 2022 | The YOP Poll WordPress plugin before 6.3.5 does not sanitise and escape some of the settings (available to users with a ... |
| CVE-2022-0163 | MEDIUM | 6.5 | 1.0% | Mar 7, 2022 | The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX a... |
| CVE-2022-0697 | MEDIUM | 6.1 | 0.6% | Mar 6, 2022 | Open Redirect in GitHub repository archivy/archivy prior to 1.7.0. |
| CVE-2022-0868 | MEDIUM | 6.1 | 0.7% | Mar 6, 2022 | Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10. |
| CVE-2022-0869 | MEDIUM | 6.1 | 2.6% | Mar 6, 2022 | Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3. |
| CVE-2022-0849 | MEDIUM | 5.5 | 0.7% | Mar 5, 2022 | Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6. |
| CVE-2022-25106 | MEDIUM | 5.5 | 8.6% | Mar 4, 2022 | D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnera... |
| CVE-2022-26484 | MEDIUM | 4.9 | 2.6% | Mar 4, 2022 | An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch... |
| CVE-2022-26483 | MEDIUM | 4.8 | 0.4% | Mar 4, 2022 | An issue was discovered in Veritas InfoScale Operations Manager (VIOM) before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch... |
| CVE-2022-0855 | MEDIUM | 6.1 | 1.0% | Mar 4, 2022 | Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4. |
| CVE-2022-23232 | MEDIUM | 4.9 | 0.7% | Mar 4, 2022 | StorageGRID (formerly StorageGRID Webscale) versions prior to 11.6.0 are susceptible to a vulnerability which when succe... |
| CVE-2022-26336 | MEDIUM | 5.5 | 1.5% | Mar 4, 2022 | A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception.... |
| CVE-2022-22946 | MEDIUM | 5.5 | 4.7% | Mar 4, 2022 | In spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 and no key store or ... |
| CVE-2022-23397 | MEDIUM | 6.1 | 0.9% | Mar 4, 2022 | The Cedar Gate EZ-NET portal 6.5.5 6.8.0 Internet portal has a call to display messages to users which does not properly... |
| CVE-2022-0832 | MEDIUM | 5.4 | 66.6% | Mar 4, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. |
| CVE-2022-0831 | MEDIUM | 5.4 | 1.3% | Mar 4, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3. |
| CVE-2022-0752 | MEDIUM | 6.1 | 1.0% | Mar 4, 2022 | Cross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9. |
| CVE-2022-0838 | MEDIUM | 6.1 | 1.1% | Mar 4, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10. |
| CVE-2022-25220 | MEDIUM | 4.8 | 0.5% | Mar 3, 2022 | PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descr... |
| CVE-2022-24725 | MEDIUM | 5.5 | 0.5% | Mar 3, 2022 | Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home d... |
| CVE-2022-23710 | MEDIUM | 6.1 | 0.7% | Mar 3, 2022 | A cross-site-scripting (XSS) vulnerability was discovered in the Data Preview Pane (previously known as Index Pattern Pr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now