2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-20892 | HIGH | 7.2 | 0.9% | Jul 22, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W... |
| CVE-2022-0977 | CRITICAL | 9.6 | 0.7% | Jul 21, 2022 | Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced... |
| CVE-2022-0976 | HIGH | 8.8 | 0.8% | Jul 21, 2022 | Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap... |
| CVE-2022-0975 | HIGH | 8.8 | 0.7% | Jul 21, 2022 | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap cor... |
| CVE-2022-0974 | HIGH | 8.8 | 0.7% | Jul 21, 2022 | Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convince... |
| CVE-2022-0973 | CRITICAL | 9.6 | 0.7% | Jul 21, 2022 | Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit ... |
| CVE-2022-0972 | HIGH | 8.8 | 0.7% | Jul 21, 2022 | Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install ... |
| CVE-2022-0971 | HIGH | 8.8 | 1.1% | Jul 21, 2022 | Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compr... |
| CVE-2022-20891 | HIGH | 7.2 | 1.0% | Jul 21, 2022 | Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W... |
| CVE-2022-34487 | MEDIUM | 5.3 | 2.6% | Jul 21, 2022 | Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress. |
| CVE-2022-33198 | MEDIUM | 5.3 | 2.6% | Jul 21, 2022 | Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress. |
| CVE-2022-31475 | MEDIUM | 4.9 | 0.7% | Jul 21, 2022 | Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.... |
| CVE-2022-30536 | MEDIUM | 4.8 | 0.6% | Jul 21, 2022 | Authenticated Stored Cross-Site Scripting (XSS) vulnerability in Florent Maillefaud's WP Maintenance plugin <= 6.0.7 at ... |
| CVE-2022-28700 | HIGH | 7.2 | 1.4% | Jul 21, 2022 | Authenticated Arbitrary File Creation via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress... |
| CVE-2022-35899 | HIGH | 7.8 | 0.9% | Jul 21, 2022 | There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local... |
| CVE-2022-30337 | MEDIUM | 4.3 | 0.3% | Jul 21, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in JoomUnited WP Meta SEO plugin <= 4.4.8 at WordPress allows an attacke... |
| CVE-2022-28666 | MEDIUM | 5.3 | 1.2% | Jul 21, 2022 | Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leadi... |
| CVE-2022-36313 | MEDIUM | 5.5 | 0.4% | Jul 21, 2022 | An issue was discovered in the file-type package before 16.5.4 and 17.x before 17.1.3 for Node.js. A malformed MKV file ... |
| CVE-2022-34767 | CRITICAL | 9.8 | 0.5% | Jul 21, 2022 | Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the passwor... |
| CVE-2022-32430 | HIGH | 7.5 | 3.4% | Jul 21, 2022 | An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions w... |
| CVE-2022-32289 | MEDIUM | 4.3 | 0.3% | Jul 21, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.0 at WordPress leading to popup s... |
| CVE-2022-30628 | MEDIUM | 5.5 | 0.2% | Jul 21, 2022 | It was possible to download all receipts without authentication. Must first access the API https://XXXX.supersmart.me/se... |
| CVE-2022-28877 | MEDIUM | 6.7 | 0.3% | Jul 21, 2022 | This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can ... |
| CVE-2022-28861 | MEDIUM | 5.9 | 0.4% | Jul 21, 2022 | The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Ax... |
| CVE-2022-28860 | MEDIUM | 5.9 | 0.7% | Jul 21, 2022 | An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now