2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-1808 | HIGH | 8.8 | 3.4% | May 31, 2022 | Execution with Unnecessary Privileges in GitHub repository polonel/trudesk prior to 1.2.3. |
| CVE-2022-31011 | HIGH | 7.8 | 0.3% | May 31, 2022 | TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Un... |
| CVE-2022-31007 | HIGH | 7.2 | 26.1% | May 31, 2022 | eLabFTW is an electronic lab notebook manager for research teams. Prior to version 4.3.0, a vulnerability allows an auth... |
| CVE-2022-31005 | HIGH | 7.5 | 1.9% | May 31, 2022 | Vapor is an HTTP web framework for Swift. Users of Vapor prior to version 4.60.3 with FileMiddleware enabled are vulnera... |
| CVE-2022-31003 | CRITICAL | 9.8 | 3.7% | May 31, 2022 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing ... |
| CVE-2022-31001 | HIGH | 7.5 | 2.0% | May 31, 2022 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker c... |
| CVE-2022-31002 | HIGH | 7.5 | 1.8% | May 31, 2022 | Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker c... |
| CVE-2022-29258 | MEDIUM | 6.1 | 0.9% | May 31, 2022 | XWiki Platform Filter UI provides a generic user interface to convert from a XWiki Filter input stream to an output stre... |
| CVE-2022-29245 | MEDIUM | 5.9 | 1.4% | May 31, 2022 | SSH.NET is a Secure Shell (SSH) library for .NET. In versions 2020.0.0 and 2020.0.1, during an `X25519` key exchange, th... |
| CVE-2022-29243 | MEDIUM | 4.3 | 1.4% | May 31, 2022 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Prior to versions 22.2.... |
| CVE-2022-29220 | MEDIUM | 6.5 | 0.5% | May 31, 2022 | github-action-merge-dependabot is an action that automatically approves and merges dependabot pull requests (PRs). Prior... |
| CVE-2022-22361 | MEDIUM | 6.5 | 0.3% | May 31, 2022 | IBM Business Automation Workflow traditional 21.0.1 through 21.0.3, 20.0.0.1 through 20.0.0.2, 19.0.0.1 through 19.0.0.3... |
| CVE-2022-23082 | HIGH | 7.5 | 1.2% | May 31, 2022 | In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to san... |
| CVE-2022-30973 | MEDIUM | 5.5 | 1.9% | May 31, 2022 | We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular express... |
| CVE-2022-1942 | HIGH | 7.8 | 1.6% | May 31, 2022 | Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. |
| CVE-2022-1926 | MEDIUM | 4.9 | 0.9% | May 31, 2022 | Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3. |
| CVE-2022-1934 | HIGH | 7.8 | 0.4% | May 31, 2022 | Use After Free in GitHub repository mruby/mruby prior to 3.2. |
| CVE-2022-1931 | HIGH | 8.1 | 2.0% | May 31, 2022 | Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3. |
| CVE-2022-1646 | MEDIUM | 4.8 | 0.6% | May 30, 2022 | The Simple Real Estate Pack WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which coul... |
| CVE-2022-1645 | MEDIUM | 4.8 | 0.6% | May 30, 2022 | The Amazon Link WordPress plugin through 3.2.10 does not sanitise and escape some of its settings, which could allow hig... |
| CVE-2022-1644 | MEDIUM | 4.8 | 0.6% | May 30, 2022 | The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could a... |
| CVE-2022-1643 | MEDIUM | 4.8 | 0.6% | May 30, 2022 | The Birthdays Widget WordPress plugin through 1.7.18 does not sanitise and escape some of its fields, which could allow ... |
| CVE-2022-1611 | HIGH | 8.8 | 0.6% | May 30, 2022 | The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks... |
| CVE-2022-1589 | HIGH | 7.5 | 0.6% | May 30, 2022 | The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CS... |
| CVE-2022-1583 | MEDIUM | 6.5 | 1.3% | May 30, 2022 | The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" w... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now