2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-47894MEDIUM5.3Improper Input Validation vulnerability in Apache Zeppelin SAP.This issue affects Apache Zeppelin SAP: from 0.8.0 before...
CVE-2022-47153MEDIUM6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPJobBoard Jobeleo...
CVE-2022-45850MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in Nickys Image Map Pro allows Stored XSS.This issue affects Image Map P...
CVE-2022-45847MEDIUM6.1Cross-Site Request Forgery (CSRF) vulnerability in WPAssist.Me WordPress Countdown Widget allows Cross-Site Scripting (X...
CVE-2022-45851MEDIUM5.4Missing Authorization vulnerability in ShareThis ShareThis Dashboard for Google Analytics.This issue affects ShareThis D...
CVE-2022-45352MEDIUM4.3Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-45351MEDIUM5.4Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-45349MEDIUM4.3Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.
CVE-2022-44626MEDIUM6.3Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO...
CVE-2022-32754MEDIUM4.8IBM Security Verify Directory 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb...
CVE-2022-32753MEDIUM6.5IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to ...
CVE-2022-32751MEDIUM5.3IBM Security Verify Directory 10.0.0 could disclose sensitive server information that could be used in further attacks a...
CVE-2022-44595MEDIUM5.3Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n...
CVE-2022-43855MEDIUM5.5IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaus...
CVE-2022-46091MEDIUM4.7Cross Site Scripting (XSS) vulnerability in the feedback form of Online Flight Booking Management System v1.0 allows att...
CVE-2022-46089MEDIUM6.1Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows ...
CVE-2022-22399MEDIUM6.5IBM Aspera Faspex 5.0.0 and 5.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the ...
CVE-2022-46088MEDIUM6.1Online Flight Booking Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via th...
CVE-2022-48630MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - fix infinite loop on requests no...
CVE-2022-48629MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is co...
CVE-2022-43880MEDIUM4.4IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force...
CVE-2022-48628MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When ...
CVE-2022-48627MEDIUM5.5In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in t...
CVE-2022-36677MEDIUM6.1Obsidian Mind Map v1.1.0 allows attackers to execute arbitrary code via a crafted payload injected into an uploaded docu...
CVE-2022-34357MEDIUM6.5IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or a...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now