2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23180 | MEDIUM | 4.3 | 0.5% | Jan 16, 2024 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks... |
| CVE-2022-23179 | MEDIUM | 4.8 | 0.5% | Jan 16, 2024 | The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields bef... |
| CVE-2022-1760 | MEDIUM | 4.3 | 0.3% | Jan 16, 2024 | The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which coul... |
| CVE-2022-1618 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The Coru LFMember WordPress plugin through 1.0.2 does not have CSRF check in place when adding a new game, and is lackin... |
| CVE-2022-1617 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacki... |
| CVE-2022-1563 | MEDIUM | 5.3 | 0.7% | Jan 16, 2024 | The WPGraphQL WooCommerce WordPress plugin before 0.12.4 does not prevent unauthenticated attackers from enumerating a s... |
| CVE-2022-0775 | MEDIUM | 4.3 | 0.7% | Jan 16, 2024 | The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which coul... |
| CVE-2022-0402 | MEDIUM | 6.1 | 0.3% | Jan 16, 2024 | The Super Forms - Drag & Drop Form Builder WordPress plugin before 6.0.4 does not escape the bob_czy_panstwa_sprawa_zost... |
| CVE-2022-4962 | MEDIUM | 4.3 | 0.5% | Jan 12, 2024 | A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic. Affected by this issue is some unknown fu... |
| CVE-2022-4960 | MEDIUM | 5.4 | 0.5% | Jan 12, 2024 | A vulnerability, which was classified as problematic, has been found in cloudfavorites favorites-web 1.3.0. Affected by ... |
| CVE-2022-48619 | MEDIUM | 5.5 | 0.2% | Jan 12, 2024 | An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of s... |
| CVE-2022-4959 | MEDIUM | 6.1 | 0.4% | Jan 11, 2024 | A vulnerability classified as problematic was found in qkmc-rk redbbs 1.0. Affected by this vulnerability is an unknown ... |
| CVE-2022-4958 | MEDIUM | 5.4 | 0.4% | Jan 11, 2024 | A vulnerability classified as problematic has been found in qkmc-rk redbbs 1.0. Affected is an unknown function of the c... |
| CVE-2022-40361 | MEDIUM | 6.1 | 0.4% | Jan 11, 2024 | Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language param... |
| CVE-2022-48577 | MEDIUM | 5.5 | 0.2% | Jan 10, 2024 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be ... |
| CVE-2022-48504 | MEDIUM | 5.5 | 0.2% | Jan 10, 2024 | The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13. An app may be able to... |
| CVE-2022-46710 | MEDIUM | 5.5 | 0.2% | Jan 10, 2024 | A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. L... |
| CVE-2022-42816 | MEDIUM | 5.5 | 0.2% | Jan 10, 2024 | A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able ... |
| CVE-2022-32931 | MEDIUM | 5.5 | 0.2% | Jan 10, 2024 | This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app with root privil... |
| CVE-2022-32919 | MEDIUM | 4.7 | 0.5% | Jan 10, 2024 | The issue was addressed with improved UI handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. ... |
| CVE-2022-28975 | MEDIUM | 5.4 | 0.4% | Jan 9, 2024 | A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary w... |
| CVE-2022-3864 | MEDIUM | 4.5 | 0.4% | Jan 4, 2024 | A vulnerability exists in the Relion update package signature validation. A tampered update package could cause the IED... |
| CVE-2022-46486 | MEDIUM | 5.5 | 0.3% | Dec 30, 2023 | A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attacke... |
| CVE-2022-43675 | MEDIUM | 6.1 | 0.4% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn... |
| CVE-2022-41762 | MEDIUM | 6.1 | 0.4% | Dec 25, 2023 | An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manage... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now