2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34115 | CRITICAL | 9.8 | 1.0% | Jul 22, 2022 | DataEase v1.11.1 was discovered to contain a arbitrary file write vulnerability via the parameter dataSourceId. |
| CVE-2022-34114 | HIGH | 8.8 | 0.8% | Jul 22, 2022 | Dataease v1.11.1 was discovered to contain a SQL injection vulnerability via the parameter dataSourceId. |
| CVE-2022-34113 | CRITICAL | 9.8 | 1.1% | Jul 22, 2022 | An issue in the component /api/plugin/upload of Dataease v1.11.1 allows attackers to execute arbitrary code via a crafte... |
| CVE-2022-34112 | MEDIUM | 6.5 | 0.5% | Jul 22, 2022 | An access control issue in the component /api/plugin/uninstall Dataease v1.11.1 allows attackers to arbitrarily uninstal... |
| CVE-2022-36408 | — | — | — | Jul 22, 2022 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-31181. Reason: This candidate is a duplicate of ... |
| CVE-2022-25759 | CRITICAL | 9.8 | 9.0% | Jul 22, 2022 | The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the... |
| CVE-2022-34853 | MEDIUM | 5.4 | 0.4% | Jul 22, 2022 | Multiple Authenticated (contributor or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in wpWax ... |
| CVE-2022-34839 | CRITICAL | 9.8 | 0.9% | Jul 22, 2022 | Authentication Bypass vulnerability in CodexShaper's WP OAuth2 Server plugin <= 1.0.1 at WordPress. |
| CVE-2022-34650 | MEDIUM | 5.4 | 0.4% | Jul 22, 2022 | Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team... |
| CVE-2022-33960 | HIGH | 8.8 | 0.8% | Jul 22, 2022 | Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by ... |
| CVE-2022-33901 | HIGH | 7.5 | 2.1% | Jul 22, 2022 | Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress. |
| CVE-2022-33191 | MEDIUM | 5.4 | 0.4% | Jul 22, 2022 | Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Chinmoy Paul's Testim... |
| CVE-2022-30998 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in WooPlugins.co's Homepage... |
| CVE-2022-29495 | MEDIUM | 4.3 | 0.4% | Jul 22, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacke... |
| CVE-2022-27235 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress. |
| CVE-2022-0980 | HIGH | 8.8 | 0.5% | Jul 22, 2022 | Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to instal... |
| CVE-2022-0979 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convince... |
| CVE-2022-0978 | HIGH | 8.8 | 0.7% | Jul 22, 2022 | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2022-2511 | MEDIUM | 6.1 | 0.4% | Jul 22, 2022 | Cross-site Scripting (XSS) vulnerability in the "commonuserinterface" component of BlueSpice allows an attacker to injec... |
| CVE-2022-2510 | MEDIUM | 6.1 | 0.4% | Jul 22, 2022 | Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to ... |
| CVE-2022-28879 | HIGH | 7.5 | 0.4% | Jul 22, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the... |
| CVE-2022-28878 | HIGH | 7.5 | 0.4% | Jul 22, 2022 | A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scannin... |
| CVE-2022-34983 | CRITICAL | 9.8 | 1.2% | Jul 22, 2022 | The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party. |
| CVE-2022-34982 | CRITICAL | 9.8 | 1.1% | Jul 22, 2022 | The eziod package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party. |
| CVE-2022-34981 | CRITICAL | 9.8 | 1.2% | Jul 22, 2022 | The PyCrowdTangle package in PyPI before v0.0.1 included a code execution backdoor inserted by a third party. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now