2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-32602 | MEDIUM | 5.5 | 0.1% | Nov 8, 2022 | In keyinstall, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio... |
| CVE-2022-32601 | HIGH | 7.8 | 0.1% | Nov 8, 2022 | In telephony, there is a possible permission bypass due to a parcel format mismatch. This could lead to local escalation... |
| CVE-2022-26446 | HIGH | 7.5 | 1.1% | Nov 8, 2022 | In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of ... |
| CVE-2022-21778 | MEDIUM | 6.7 | 0.1% | Nov 8, 2022 | In vpu, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation... |
| CVE-2022-39377 | HIGH | 7.8 | 1.1% | Nov 8, 2022 | sysstat is a set of system performance tools for the Linux operating system. On 32 bit systems, in versions 9.1.16 and n... |
| CVE-2022-33322 | MEDIUM | 6.1 | 0.8% | Nov 8, 2022 | Cross-site scripting vulnerability in Mitsubishi Electric consumer electronics products (Air Conditioning, Wi-Fi Interfa... |
| CVE-2022-33321 | CRITICAL | 9.8 | 0.9% | Nov 8, 2022 | Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connection... |
| CVE-2022-44741 | HIGH | 8.8 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Cross-Site Scripting (XSS) in David Anderson Testimonial Slid... |
| CVE-2022-43491 | MEDIUM | 4.3 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.5 on WordPress... |
| CVE-2022-43481 | MEDIUM | 4.3 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Coupons for WooCommerce Coupons plugin <= 4.5 on WordPress l... |
| CVE-2022-42494 | MEDIUM | 6.5 | 0.6% | Nov 8, 2022 | Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress. |
| CVE-2022-41980 | MEDIUM | 4.8 | 0.4% | Nov 8, 2022 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress. |
| CVE-2022-41136 | HIGH | 8.8 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Vladimir Anokhin's Short... |
| CVE-2022-40632 | MEDIUM | 5.4 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 on WordPress leading to to... |
| CVE-2022-40223 | MEDIUM | 4.3 | 0.4% | Nov 8, 2022 | Nonce token leakage and missing authorization in SearchWP premium plugin <= 4.2.5 on WordPress leading to plugin setting... |
| CVE-2022-40206 | MEDIUM | 4.3 | 0.5% | Nov 8, 2022 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers... |
| CVE-2022-40205 | MEDIUM | 4.3 | 0.5% | Nov 8, 2022 | Insecure direct object references (IDOR) vulnerability in the wpForo Forum plugin <= 2.0.5 on WordPress allows attackers... |
| CVE-2022-40128 | MEDIUM | 6.5 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Advanced Order Export For WooCommerce plugin <= 3.3.2 on WordPress le... |
| CVE-2022-38137 | HIGH | 8.8 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Analytify plugin <= 4.2.2 on WordPress. |
| CVE-2022-32776 | MEDIUM | 4.8 | 0.4% | Nov 8, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Advanced Ads GmbH Advanced Ads – Ad Manager & AdSense ... |
| CVE-2022-32587 | MEDIUM | 4.3 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in CodeAndMore WP Page Widget plugin <= 3.9 on WordPress leading to plug... |
| CVE-2022-30545 | MEDIUM | 4.8 | 0.4% | Nov 8, 2022 | Auth. Reflected Cross-Site Scripting (XSS) vulnerability in 5 Anker Connect plugin <= 1.2.6 on WordPress. |
| CVE-2022-27914 | MEDIUM | 6.1 | 0.5% | Nov 8, 2022 | An issue was discovered in Joomla! 4.0.0 through 4.2.4. Inadequate filtering of potentially malicious user input leads t... |
| CVE-2022-27858 | CRITICAL | 9.8 | 0.8% | Nov 8, 2022 | CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress. |
| CVE-2022-27855 | MEDIUM | 4.3 | 0.3% | Nov 8, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Fatcat Apps Analytics Cat plugin <= 1.0.9 on WordPress allows Plugin ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now