2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43342 | MEDIUM | 5.4 | 0.5% | Nov 14, 2022 | A stored cross-site scripting (XSS) vulnerability in the Add function of Eramba GRC Software c2.8.1 allows attackers to ... |
| CVE-2022-43288 | HIGH | 8.8 | 0.8% | Nov 14, 2022 | Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the order_by parameter at /rukovoditel/in... |
| CVE-2022-3632 | MEDIUM | 6.5 | 0.3% | Nov 14, 2022 | The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not have CSRF checks in some places, which could ... |
| CVE-2022-3631 | MEDIUM | 4.8 | 0.5% | Nov 14, 2022 | The OAuth Client by DigitialPixies WordPress plugin through 1.1.0 does not sanitize and escapes some of its settings, wh... |
| CVE-2022-3578 | MEDIUM | 6.1 | 0.9% | Nov 14, 2022 | The ProfileGrid WordPress plugin before 5.1.1 does not sanitise and escape a parameter before outputting it back in the ... |
| CVE-2022-3574 | CRITICAL | 9.8 | 1.3% | Nov 14, 2022 | The WPForms Pro WordPress plugin before 1.7.7 does not validate its form data when generating the exported CSV, which co... |
| CVE-2022-3539 | MEDIUM | 4.8 | 0.5% | Nov 14, 2022 | The Testimonials WordPress plugin before 2.7, super-testimonial-pro WordPress plugin before 1.0.8 do not sanitize and es... |
| CVE-2022-3538 | MEDIUM | 6.5 | 0.3% | Nov 14, 2022 | The Webmaster Tools Verification WordPress plugin through 1.2 does not have authorisation and CSRF checks when disabling... |
| CVE-2022-3484 | MEDIUM | 6.1 | 0.9% | Nov 14, 2022 | The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leadi... |
| CVE-2022-3477 | CRITICAL | 9.8 | 3.5% | Nov 14, 2022 | The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordPress theme before 12.1 and Newsmag WordP... |
| CVE-2022-3469 | MEDIUM | 4.8 | 0.5% | Nov 14, 2022 | The WP Attachments WordPress plugin before 5.0.5 does not sanitize and escapes some of its settings, which could allow h... |
| CVE-2022-3415 | MEDIUM | 6.1 | 0.5% | Nov 14, 2022 | The Chat Bubble WordPress plugin before 2.3 does not sanitise and escape some contact parameters, which could allow unau... |
| CVE-2022-2450 | MEDIUM | 4.3 | 0.5% | Nov 14, 2022 | The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 lacks authorization in va... |
| CVE-2022-2449 | MEDIUM | 6.5 | 0.3% | Nov 14, 2022 | The reSmush.it : the only free Image Optimizer & compress plugin WordPress plugin before 0.4.4 does not perform CSRF che... |
| CVE-2022-45378 | CRITICAL | 9.8 | 2.3% | Nov 14, 2022 | In the default configuration of Apache SOAP, an RPCRouterServlet is available without authentication. This gives an atta... |
| CVE-2022-3988 | MEDIUM | 6.1 | 0.6% | Nov 14, 2022 | A vulnerability was found in Frappe. It has been rated as problematic. Affected by this issue is some unknown functional... |
| CVE-2022-40127 | HIGH | 8.8 | 85.7% | Nov 14, 2022 | A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arb... |
| CVE-2022-27949 | HIGH | 7.5 | 1.7% | Nov 14, 2022 | A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for task... |
| CVE-2022-45184 | HIGH | 7.2 | 1.9% | Nov 14, 2022 | The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the conf... |
| CVE-2022-45183 | HIGH | 8.8 | 0.8% | Nov 14, 2022 | Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with ... |
| CVE-2022-37290 | MEDIUM | 5.5 | 0.3% | Nov 14, 2022 | GNOME Nautilus 42.2 allows a NULL pointer dereference and get_basename application crash via a pasted ZIP archive. |
| CVE-2022-45199 | HIGH | 7.5 | 1.1% | Nov 14, 2022 | Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL. |
| CVE-2022-45198 | HIGH | 7.5 | 1.2% | Nov 14, 2022 | Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification). |
| CVE-2022-31630 | HIGH | 7.1 | 2.2% | Nov 14, 2022 | In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible ... |
| CVE-2022-3979 | HIGH | 8.1 | 1.0% | Nov 13, 2022 | A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAut... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now