2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-46819MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin ...
CVE-2022-46817MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Flyzoo Flyzoo Chat plugin <= 2.3.3 versions.
CVE-2022-33961MEDIUM4.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WaspThemes Visual CSS Style Editor plugin <= 7.5.8 ver...
CVE-2022-32970MEDIUM5.4Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Themify Themify Portfolio Post plugin <= 1.2.4 versio...
CVE-2022-4008MEDIUM5.5In affected versions of Octopus Deploy it is possible to upload a zipbomb file as a task which results in Denial of Serv...
CVE-2022-46864MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor Wit...
CVE-2022-46858MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Amin A.Rezapour Product Specifications for Woocommerce plu...
CVE-2022-46844MEDIUM5.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PixelGrade PixFields plugin <= 0.7.0 versions.
CVE-2022-46822MEDIUM6.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in JC Development Team WooCommerce JazzCash Gateway Plugin pl...
CVE-2022-41640MEDIUM5.4Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <= 2.1.5 ver...
CVE-2022-4537MEDIUM6.5The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and ...
CVE-2022-48389MEDIUM4.4In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local...
CVE-2022-48387MEDIUM4.4the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial...
CVE-2022-48386MEDIUM4.4the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service wi...
CVE-2022-48385MEDIUM4.4In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia...
CVE-2022-48382MEDIUM4.4In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o...
CVE-2022-48381MEDIUM4.4In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local...
CVE-2022-48380MEDIUM4.4In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local...
CVE-2022-48379MEDIUM5.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi...
CVE-2022-48378MEDIUM5.5In engineermode service, there is a possible missing permission check. This could lead to local denial of service with n...
CVE-2022-48377MEDIUM5.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi...
CVE-2022-48376MEDIUM5.5In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi...
CVE-2022-48375MEDIUM5.5In contacts service, there is a possible missing permission check. This could lead to local denial of service with no ad...
CVE-2022-48374MEDIUM4.4In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o...
CVE-2022-48373MEDIUM4.4In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now