2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45179 | MEDIUM | 5.4 | 0.4% | Feb 21, 2024 | An issue was discovered in LIVEBOX Collaboration vDesk through v031. A basic XSS vulnerability exists under the /api/v1/... |
| CVE-2022-45169 | MEDIUM | 5.4 | 0.3% | Feb 21, 2024 | An issue was discovered in LIVEBOX Collaboration vDesk through v031. A URL Redirection to an Untrusted Site (Open Redire... |
| CVE-2022-45320 | MEDIUM | 6.3 | 0.5% | Feb 20, 2024 | Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 all... |
| CVE-2022-41737 | MEDIUM | 6.5 | 0.1% | Feb 17, 2024 | IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate conne... |
| CVE-2022-23093 | MEDIUM | 6.5 | 2.4% | Feb 15, 2024 | ping reads raw IP packets from the network to process responses in the pr_pack() function. As part of processing a resp... |
| CVE-2022-23091 | MEDIUM | 4 | 0.2% | Feb 15, 2024 | A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, bu... |
| CVE-2022-23089 | MEDIUM | 4.7 | 0.2% | Feb 15, 2024 | When dumping core and saving process information, proc_getargv() might return an sbuf which have a sbuf_len() of 0 or -1... |
| CVE-2022-48220 | MEDIUM | 6.4 | 0.3% | Feb 14, 2024 | Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which ... |
| CVE-2022-48219 | MEDIUM | 6.4 | 0.3% | Feb 14, 2024 | Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which ... |
| CVE-2022-22506 | MEDIUM | 4.6 | 0.3% | Feb 12, 2024 | IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants. ... |
| CVE-2022-34311 | MEDIUM | 4.3 | 0.4% | Feb 12, 2024 | IBM CICS TX Standard and Advanced 11.1 could allow a user with physical access to the web browser to gain access to the ... |
| CVE-2022-38714 | MEDIUM | 4.9 | 0.6% | Feb 12, 2024 | IBM DataStage on Cloud Pak for Data 4.0.6 to 4.5.2 stores sensitive credential information that can be read by a privile... |
| CVE-2022-40744 | MEDIUM | 5.4 | 0.3% | Feb 2, 2024 | IBM Aspera Faspex 5.0.6 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary... |
| CVE-2022-4964 | MEDIUM | 5.5 | 0.3% | Jan 24, 2024 | Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set. |
| CVE-2022-47160 | MEDIUM | 6.5 | 0.6% | Jan 19, 2024 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wpmet Wp Social Login and Register Social Co... |
| CVE-2022-41695 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5... |
| CVE-2022-41619 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8. |
| CVE-2022-40702 | MEDIUM | 4.3 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in Zorem Advanced Local Pickup for WooCommerce.This issue affects Advanced Local Pic... |
| CVE-2022-38141 | MEDIUM | 6.5 | 0.4% | Jan 17, 2024 | Missing Authorization vulnerability in Zorem Sales Report Email for WooCommerce.This issue affects Sales Report Email fo... |
| CVE-2022-31021 | MEDIUM | 5.3 | 0.4% | Jan 16, 2024 | Ursa is a cryptographic library for use with blockchains. A weakness in the Hyperledger AnonCreds specification that is ... |
| CVE-2022-3836 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high ... |
| CVE-2022-3829 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Font Awesome 4 Menus WordPress plugin through 4.7.0 does not sanitise and escape some of its settings, which could a... |
| CVE-2022-3739 | MEDIUM | 5.4 | 0.7% | Jan 16, 2024 | The WP Best Quiz WordPress plugin through 1.0 does not sanitize and escape some parameters, which could allow users with... |
| CVE-2022-3194 | MEDIUM | 5.4 | 0.5% | Jan 16, 2024 | The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allo... |
| CVE-2022-2413 | MEDIUM | 5.4 | 0.5% | Jan 16, 2024 | The Slide Anything WordPress plugin before 2.3.47 does not properly sanitize or escape the slide title before outputting... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now