2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-2437 | CRITICAL | 9.8 | 1.3% | Jul 18, 2022 | The Feed Them Social – for Twitter feed, Youtube and more plugin for WordPress is vulnerable to deserialization of untru... |
| CVE-2022-2435 | HIGH | 8.8 | 0.5% | Jul 18, 2022 | The AnyMind Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1... |
| CVE-2022-2224 | MEDIUM | 4.3 | 0.3% | Jul 18, 2022 | The WordPress plugin Gallery for Social Photo is vulnerable to Cross-Site Request Forgery in versions up to, and includi... |
| CVE-2022-2223 | MEDIUM | 4.3 | 0.3% | Jul 18, 2022 | The WordPress plugin Image Slider is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.1.121 d... |
| CVE-2022-2117 | MEDIUM | 5.3 | 0.9% | Jul 18, 2022 | The GiveWP plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.20... |
| CVE-2022-2108 | MEDIUM | 5.3 | 0.7% | Jul 18, 2022 | The plugin Wbcom Designs – BuddyPress Group Reviews for WordPress is vulnerable to unauthorized settings changes and rev... |
| CVE-2022-2101 | MEDIUM | 5.4 | 0.8% | Jul 18, 2022 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `file[files][]` parameter... |
| CVE-2022-2039 | HIGH | 8.8 | 0.5% | Jul 18, 2022 | The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and inclu... |
| CVE-2022-2001 | HIGH | 8.8 | 0.5% | Jul 18, 2022 | The DX Share Selection plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including... |
| CVE-2022-23745 | HIGH | 7.5 | 14.9% | Jul 18, 2022 | A potential memory corruption issue was found in Capsule Workspace Android app (running on GrapheneOS). This could resul... |
| CVE-2022-22304 | MEDIUM | 6.1 | 0.5% | Jul 18, 2022 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAuthenticator OWA Agent fo... |
| CVE-2022-1912 | HIGH | 8.8 | 0.5% | Jul 18, 2022 | The Button Widget Smartsoft plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and incl... |
| CVE-2022-1565 | HIGH | 7.2 | 11.3% | Jul 18, 2022 | The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_impo... |
| CVE-2022-35741 | CRITICAL | 9.8 | 6.7% | Jul 18, 2022 | Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vul... |
| CVE-2022-34902 | HIGH | 7.8 | 0.3% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39... |
| CVE-2022-34901 | HIGH | 7.8 | 0.3% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39... |
| CVE-2022-34900 | HIGH | 7.8 | 0.4% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39... |
| CVE-2022-34899 | HIGH | 7.8 | 0.2% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39... |
| CVE-2022-34892 | HIGH | 7.8 | 0.2% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel... |
| CVE-2022-34891 | HIGH | 7.8 | 0.3% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallel... |
| CVE-2022-34890 | HIGH | 8.8 | 0.3% | Jul 18, 2022 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Deskt... |
| CVE-2022-34889 | HIGH | 8.2 | 0.3% | Jul 18, 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (... |
| CVE-2022-2400 | MEDIUM | 5.3 | 0.9% | Jul 18, 2022 | External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0. |
| CVE-2022-23142 | MEDIUM | 5.3 | 0.6% | Jul 18, 2022 | ZXEN CG200 has a DoS vulnerability. An attacker could construct and send a large number of HTTP GET requests in a short ... |
| CVE-2022-35404 | HIGH | 8.2 | 3.8% | Jul 18, 2022 | ManageEngine Password Manager Pro 12100 and prior and OPManager 126100 and prior are vulnerable to unauthorized file and... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now