2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-36429 | HIGH | 7.2 | 2.0% | Mar 21, 2023 | A command execution vulnerability exists in the ubus backend communications functionality of Netgear Orbi Satellite RBS7... |
| CVE-2022-45635 | HIGH | 7.5 | 0.8% | Mar 21, 2023 | An issue discovered in MEGAFEIS, BOFEI DBD+ Application for IOS & Android v1.4.4 allows attacker to gain access to sensi... |
| CVE-2022-42333 | HIGH | 8.6 | 1.2% | Mar 21, 2023 | x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains wh... |
| CVE-2022-42332 | HIGH | 7.8 | 0.3% | Mar 21, 2023 | x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but H... |
| CVE-2022-45124 | HIGH | 7.5 | 14.5% | Mar 20, 2023 | An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.0... |
| CVE-2022-48425 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before r... |
| CVE-2022-48424 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault ... |
| CVE-2022-48423 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write m... |
| CVE-2022-48422 | HIGH | 7.8 | 0.3% | Mar 19, 2023 | ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libg... |
| CVE-2022-46867 | HIGH | 8.8 | 0.3% | Mar 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version. |
| CVE-2022-46854 | HIGH | 8.8 | 0.3% | Mar 17, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.... |
| CVE-2022-43606 | HIGH | 7.5 | 8.0% | Mar 16, 2023 | A use-of-uninitialized-pointer vulnerability exists in the Forward Open connection_management_entry functionality of EIP... |
| CVE-2022-38063 | HIGH | 8.8 | 0.3% | Mar 16, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Social Login WP plugin <= 5.0.0.0 versions. |
| CVE-2022-4009 | HIGH | 8.8 | 0.7% | Mar 16, 2023 | In affected versions of Octopus Deploy it is possible for a user to introduce code via offline package creation |
| CVE-2022-4313 | HIGH | 8.8 | 1.2% | Mar 15, 2023 | A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that... |
| CVE-2022-44580 | HIGH | 8.8 | 0.6% | Mar 15, 2023 | SQL Injection (SQLi) vulnerability in RichPlugins Plugin for Google Reviews plugin <= 2.2.3 versions. |
| CVE-2022-38456 | HIGH | 7.5 | 0.6% | Mar 15, 2023 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Ernest Marcinko Ajax Search Lite plugin <= 4... |
| CVE-2022-47427 | HIGH | 8.8 | 0.3% | Mar 15, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.3.24.1 versions. |
| CVE-2022-39214 | HIGH | 7.5 | 25.6% | Mar 14, 2023 | Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user wh... |
| CVE-2022-47443 | HIGH | 8.8 | 0.3% | Mar 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions. |
| CVE-2022-47422 | HIGH | 8.8 | 0.3% | Mar 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in HM Plugin Accept Stripe Donation – AidWP plugin <= 3.1.5 versions. |
| CVE-2022-47147 | HIGH | 8.8 | 0.3% | Mar 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Kesz1 Technologies ipBlockList plugin <= 1.0 versions. |
| CVE-2022-47143 | HIGH | 8.8 | 0.3% | Mar 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin – MPG plugin <= 3.3.9 versio... |
| CVE-2022-47141 | HIGH | 8.8 | 0.3% | Mar 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions. |
| CVE-2022-47154 | HIGH | 8.8 | 0.3% | Mar 14, 2023 | Cross-Site Request Forgery (CSRF) vulnerability in Pi Websolution CSS JS Manager, Async JavaScript, Defer Render Blockin... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now