2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1950 | CRITICAL | 9.8 | 4.1% | Aug 1, 2022 | The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement vi... |
| CVE-2022-1906 | MEDIUM | 6.1 | 0.9% | Aug 1, 2022 | The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via... |
| CVE-2022-1600 | MEDIUM | 5.3 | 0.6% | Aug 1, 2022 | The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOT... |
| CVE-2022-1585 | HIGH | 7.5 | 0.9% | Aug 1, 2022 | The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download func... |
| CVE-2022-1561 | MEDIUM | 4.3 | 0.5% | Aug 1, 2022 | Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters ... |
| CVE-2022-1324 | MEDIUM | 4.8 | 0.5% | Aug 1, 2022 | The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-pri... |
| CVE-2022-0598 | MEDIUM | 4.8 | 0.6% | Aug 1, 2022 | The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow... |
| CVE-2022-27255 | CRITICAL | 9.8 | 37.1% | Aug 1, 2022 | In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer over... |
| CVE-2022-36799 | HIGH | 7.2 | 44.6% | Aug 1, 2022 | This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has ... |
| CVE-2022-35716 | MEDIUM | 6.5 | 0.5% | Aug 1, 2022 | IBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.16, 7.0.0.0 through 7.0.5.11, 7.1.0.0 through 7.1.2.7, and 7.2.0.0 thro... |
| CVE-2022-34338 | MEDIUM | 6.5 | 0.5% | Aug 1, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege... |
| CVE-2022-33169 | MEDIUM | 6.5 | 0.5% | Aug 1, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for user... |
| CVE-2022-32750 | MEDIUM | 5.4 | 0.4% | Aug 1, 2022 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21... |
| CVE-2022-31776 | HIGH | 8.8 | 0.4% | Aug 1, 2022 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21... |
| CVE-2022-31775 | CRITICAL | 9.1 | 1.0% | Aug 1, 2022 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21... |
| CVE-2022-31774 | MEDIUM | 5.4 | 0.4% | Aug 1, 2022 | IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21... |
| CVE-2022-30616 | HIGH | 7.2 | 0.8% | Aug 1, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to elevate their privilege to pl... |
| CVE-2022-2591 | HIGH | 7.5 | 6.4% | Aug 1, 2022 | A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the fil... |
| CVE-2022-22505 | HIGH | 7.5 | 0.7% | Aug 1, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentia... |
| CVE-2022-22334 | MEDIUM | 4.3 | 0.4% | Aug 1, 2022 | IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a user to access information from a tenant of whic... |
| CVE-2022-22326 | LOW | 3.3 | 0.2% | Aug 1, 2022 | IBM Datapower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.5, and 2018.4.1.0 through 2018.4.1.18 could all... |
| CVE-2022-33994 | LOW | 3 | 0.6% | Jul 30, 2022 | The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "... |
| CVE-2022-36336 | HIGH | 7.8 | 0.5% | Jul 30, 2022 | A link following vulnerability in the scanning function of Trend Micro Apex One and Worry-Free Business Security agents ... |
| CVE-2022-35234 | HIGH | 7.1 | 0.3% | Jul 30, 2022 | Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerabilit... |
| CVE-2022-33158 | HIGH | 7.8 | 0.3% | Jul 30, 2022 | Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders i... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now