2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-48963MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix memory leak in ipc_mux_init() ...
CVE-2022-48961MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net: mdio: fix unbalanced fwnode reference count in...
CVE-2022-48959MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix memory leak in sja1105_setup...
CVE-2022-48958MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: ethernet: aeroflex: fix potential skb leak in greth...
CVE-2022-48957MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix memory leak in dpaa2_switch_acl_e...
CVE-2022-48955MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: fix memory leak in tbnet_open() ...
CVE-2022-48953MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: rtc: cmos: Fix event handler registration ordering ...
CVE-2022-48952MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: PCI: mt7621: Add sentinel to quirks table Current ...
CVE-2022-48949MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: igb: Initialize mailbox message for VF reset When ...
CVE-2022-48947MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix u8 overflow By keep sending ...
CVE-2022-48946MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect exten...
CVE-2022-4974MEDIUM6.3The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request For...
CVE-2022-4973MEDIUM5.4WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploite...
CVE-2022-4971MEDIUM6.1The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'urls' parameter cal...
CVE-2022-4534MEDIUM5.3The Limit Login Attempts (Spam Protection) plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, ...
CVE-2022-4541MEDIUM6.1The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value...
CVE-2022-49041MEDIUM4.4Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in backup task management functiona...
CVE-2022-49040MEDIUM4.4Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in connection management functional...
CVE-2022-49039MEDIUM6.7Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 al...
CVE-2022-49037MEDIUM6.5Insertion of sensitive information into log file vulnerability in proxy settings component in Synology Drive Client befo...
CVE-2022-48945MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syz...
CVE-2022-4533MEDIUM5.3The Limit Login Attempts Plus plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including...
CVE-2022-25768MEDIUM6.5The logic in place to facilitate the update process via the user interface lacks access control to verify if permission ...
CVE-2022-25777MEDIUM6.5Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses ...
CVE-2022-25776MEDIUM6.5Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now