2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-24110 | MEDIUM | 6.5 | 0.8% | Feb 14, 2022 | Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later... |
| CVE-2022-0576 | MEDIUM | 6.1 | 1.0% | Feb 14, 2022 | Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0. |
| CVE-2022-0575 | MEDIUM | 5.4 | 0.8% | Feb 14, 2022 | Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0. |
| CVE-2022-0571 | MEDIUM | 6.1 | 1.3% | Feb 14, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2. |
| CVE-2022-0569 | MEDIUM | 4.3 | 1.0% | Feb 14, 2022 | Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9. |
| CVE-2022-0565 | MEDIUM | 6.4 | 1.1% | Feb 14, 2022 | Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1. |
| CVE-2022-0212 | MEDIUM | 6.1 | 2.3% | Feb 14, 2022 | The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape the callback parameter before outputting... |
| CVE-2022-0208 | MEDIUM | 6.1 | 2.0% | Feb 14, 2022 | The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting ... |
| CVE-2022-0206 | MEDIUM | 6.1 | 1.5% | Feb 14, 2022 | The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back... |
| CVE-2022-0201 | MEDIUM | 6.1 | 3.4% | Feb 14, 2022 | The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do no... |
| CVE-2022-0200 | MEDIUM | 5.4 | 0.6% | Feb 14, 2022 | Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outp... |
| CVE-2022-0193 | MEDIUM | 6.1 | 0.9% | Feb 14, 2022 | The Complianz WordPress plugin before 6.0.0 does not escape the s parameter before outputting it back in an attribute in... |
| CVE-2022-0188 | MEDIUM | 5.3 | 2.4% | Feb 14, 2022 | The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page l... |
| CVE-2022-0176 | MEDIUM | 6.1 | 0.9% | Feb 14, 2022 | The PowerPack Lite for Beaver Builder WordPress plugin before 1.2.9.3 does not sanitise and escape the tab parameter bef... |
| CVE-2022-0309 | MEDIUM | 6.5 | 0.6% | Feb 12, 2022 | Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navi... |
| CVE-2022-0305 | MEDIUM | 6.5 | 0.6% | Feb 12, 2022 | Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who ... |
| CVE-2022-0294 | MEDIUM | 6.5 | 0.7% | Feb 12, 2022 | Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had ... |
| CVE-2022-0292 | MEDIUM | 6.5 | 0.6% | Feb 12, 2022 | Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had c... |
| CVE-2022-0291 | MEDIUM | 6.5 | 0.7% | Feb 12, 2022 | Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had comprom... |
| CVE-2022-0120 | MEDIUM | 6.5 | 0.7% | Feb 12, 2022 | Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentiall... |
| CVE-2022-0118 | MEDIUM | 4.3 | 1.1% | Feb 12, 2022 | Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially... |
| CVE-2022-0117 | MEDIUM | 6.5 | 1.5% | Feb 12, 2022 | Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a ... |
| CVE-2022-0116 | MEDIUM | 4.3 | 1.1% | Feb 12, 2022 | Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof th... |
| CVE-2022-0113 | MEDIUM | 6.5 | 0.8% | Feb 12, 2022 | Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-ori... |
| CVE-2022-0112 | MEDIUM | 4.3 | 1.1% | Feb 12, 2022 | Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now