2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1310 | HIGH | 8.8 | 0.9% | Jul 25, 2022 | Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially e... |
| CVE-2022-1309 | CRITICAL | 9.6 | 0.7% | Jul 25, 2022 | Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to ... |
| CVE-2022-1308 | HIGH | 8.8 | 0.8% | Jul 25, 2022 | Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap ... |
| CVE-2022-1307 | MEDIUM | 4.3 | 0.6% | Jul 25, 2022 | Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker... |
| CVE-2022-1306 | MEDIUM | 4.3 | 0.6% | Jul 25, 2022 | Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof t... |
| CVE-2022-1305 | HIGH | 8.8 | 0.7% | Jul 25, 2022 | Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap ... |
| CVE-2022-1232 | HIGH | 8.8 | 16.5% | Jul 25, 2022 | Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corru... |
| CVE-2022-0670 | CRITICAL | 9.1 | 0.9% | Jul 25, 2022 | A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manil... |
| CVE-2022-2341 | MEDIUM | 4.8 | 0.6% | Jul 25, 2022 | The Simple Page Transition WordPress plugin through 1.4.1 does not sanitise and escape some of its settings, which could... |
| CVE-2022-2340 | MEDIUM | 4.8 | 0.6% | Jul 25, 2022 | The W-DALIL WordPress plugin through 2.0 does not sanitise and escape some of its fields, which could allow high privile... |
| CVE-2022-2299 | MEDIUM | 5.4 | 0.5% | Jul 25, 2022 | The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a ro... |
| CVE-2022-2240 | HIGH | 8.8 | 1.2% | Jul 25, 2022 | The Request a Quote WordPress plugin through 2.3.7 does not validate uploaded CSV files, allowing unauthenticated users ... |
| CVE-2022-2239 | MEDIUM | 4.8 | 0.5% | Jul 25, 2022 | The Request a Quote WordPress plugin before 2.3.9 does not sanitise and escape some of its settings, allowing high privi... |
| CVE-2022-2219 | HIGH | 7.2 | 1.4% | Jul 25, 2022 | The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page... |
| CVE-2022-2189 | MEDIUM | 6.1 | 0.5% | Jul 25, 2022 | The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputt... |
| CVE-2022-2115 | MEDIUM | 6.1 | 0.5% | Jul 25, 2022 | The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a... |
| CVE-2022-2072 | MEDIUM | 6.1 | 0.5% | Jul 25, 2022 | The Name Directory WordPress plugin before 1.25.3 does not sanitise and escape a parameter before outputting it back in ... |
| CVE-2022-2071 | MEDIUM | 6.1 | 0.3% | Jul 25, 2022 | The Name Directory WordPress plugin before 1.25.4 does not have CSRF check when importing names, and is also lacking san... |
| CVE-2022-1551 | MEDIUM | 6.5 | 0.8% | Jul 25, 2022 | The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad ac... |
| CVE-2022-1539 | HIGH | 8.8 | 1.2% | Jul 25, 2022 | The Exports and Reports WordPress plugin before 0.9.2 does not sanitize and validate data when generating the CSV to exp... |
| CVE-2022-0899 | MEDIUM | 6.1 | 1.0% | Jul 25, 2022 | The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back... |
| CVE-2022-0594 | MEDIUM | 5.3 | 1.5% | Jul 25, 2022 | The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper author... |
| CVE-2022-29709 | HIGH | 7.5 | 1.3% | Jul 25, 2022 | CommuniLink Internet Limited CLink Office v2.0 was discovered to contain multiple SQL injection vulnerabilities via the ... |
| CVE-2022-36450 | CRITICAL | 9.8 | 19.6% | Jul 25, 2022 | Obsidian 0.14.x and 0.15.x before 0.15.5 allows obsidian://hook-get-address remote code execution because window.open is... |
| CVE-2022-36446 | CRITICAL | 9.8 | 96.0% | Jul 25, 2022 | software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now