2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26655 | HIGH | 7.5 | 1.0% | Jul 17, 2022 | Pexip Infinity 27.x before 27.3 has Improper Input Validation. The client API allows remote attackers to trigger a softw... |
| CVE-2022-26654 | HIGH | 7.5 | 1.0% | Jul 17, 2022 | Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP. |
| CVE-2022-25357 | MEDIUM | 5.3 | 0.6% | Jul 17, 2022 | Pexip Infinity 27.x before 27.2 has Improper Access Control. An attacker can sometimes join a conference (call join) if ... |
| CVE-2022-31260 | MEDIUM | 6.5 | 1.5% | Jul 17, 2022 | In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collectio... |
| CVE-2022-30550 | HIGH | 8.8 | 1.7% | Jul 17, 2022 | An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entrie... |
| CVE-2022-35861 | HIGH | 7.8 | 0.3% | Jul 17, 2022 | pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working direc... |
| CVE-2022-32320 | HIGH | 8.8 | 0.4% | Jul 17, 2022 | A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read... |
| CVE-2022-2222 | MEDIUM | 4.9 | 0.9% | Jul 17, 2022 | The Download Monitor WordPress plugin before 4.5.91 does not ensure that files to be downloaded are inside the blog fold... |
| CVE-2022-2194 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Accept Stripe Payments WordPress plugin before 2.0.64 does not sanitize and escape some of its settings, allowing hi... |
| CVE-2022-2187 | MEDIUM | 6.1 | 1.3% | Jul 17, 2022 | The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before ou... |
| CVE-2022-2186 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Simple Post Notes WordPress plugin before 1.7.6 does not sanitise and escape its settings, allowing high privilege u... |
| CVE-2022-2173 | MEDIUM | 6.1 | 0.7% | Jul 17, 2022 | The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting th... |
| CVE-2022-2169 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Loading Page with Loading Screen WordPress plugin before 1.0.83 does not escape its settings, allowing high privileg... |
| CVE-2022-2168 | MEDIUM | 6.1 | 1.1% | Jul 17, 2022 | The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attr... |
| CVE-2022-2151 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Best Contact Management Software WordPress plugin through 3.7.3 does not sanitise and escape its settings, allowing ... |
| CVE-2022-2149 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Very Simple Breadcrumb WordPress plugin through 1.0 does not sanitise and escape its settings, allowing high privile... |
| CVE-2022-2148 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high pri... |
| CVE-2022-2146 | MEDIUM | 6.1 | 0.3% | Jul 17, 2022 | The Import CSV Files WordPress plugin through 1.0 does not sanitise and escaped imported data before outputting them bac... |
| CVE-2022-2144 | MEDIUM | 4.3 | 0.4% | Jul 17, 2022 | The Jquery Validation For Contact Form 7 WordPress plugin before 5.3 does not have CSRF check in place when updating its... |
| CVE-2022-2133 | MEDIUM | 5.3 | 1.0% | Jul 17, 2022 | The OAuth Single Sign On WordPress plugin before 6.22.6 doesn't validate that OAuth access token requests are legitimate... |
| CVE-2022-2118 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The 404s WordPress plugin before 3.5.1 does not sanitise and escape its fields, allowing high privilege users such as ad... |
| CVE-2022-2114 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Data Tables Generator by Supsystic WordPress plugin before 1.10.20 does not sanitise and escape some of its Table se... |
| CVE-2022-2100 | MEDIUM | 4.8 | 0.5% | Jul 17, 2022 | The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege user... |
| CVE-2022-2099 | MEDIUM | 4.8 | 0.6% | Jul 17, 2022 | The WooCommerce WordPress plugin before 6.6.0 is vulnerable to stored HTML injection due to lack of escaping and sanitiz... |
| CVE-2022-2090 | MEDIUM | 6.1 | 0.7% | Jul 17, 2022 | The Discount Rules for WooCommerce WordPress plugin before 2.4.2 does not escape a parameter before outputting it back i... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now