2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-43376 | MEDIUM | 6.1 | 0.4% | Apr 18, 2023 | A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists t... |
| CVE-2022-34755 | MEDIUM | 6.7 | 0.2% | Apr 18, 2023 | A CWE-427 - Uncontrolled Search Path Element vulnerability exists that could allow an attacker with a local privileged ... |
| CVE-2022-45836 | MEDIUM | 6.1 | 0.7% | Apr 18, 2023 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in W3 Eden, Inc. Download Manager plugin <= 3.2.59 versions. |
| CVE-2022-44632 | MEDIUM | 4.8 | 0.4% | Apr 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Denis Buka Content Repeater – Custom Posts Simplified ... |
| CVE-2022-45839 | MEDIUM | 5.4 | 0.4% | Apr 18, 2023 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions. |
| CVE-2022-45838 | MEDIUM | 6.1 | 0.4% | Apr 18, 2023 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARForms Form Builder plugin <= 1.5.5 versi... |
| CVE-2022-44735 | MEDIUM | 4.8 | 0.4% | Apr 18, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gus Sevilla WP Clictracker plugin <= 1.0.5 versions. |
| CVE-2022-46389 | MEDIUM | 6.1 | 0.6% | Apr 17, 2023 | There exists a reflected XSS within the logout functionality of ServiceNow versions lower than Quebec Patch 10 Hotfix 11... |
| CVE-2022-44726 | MEDIUM | 5.4 | 0.4% | Apr 17, 2023 | The TouchDown Timesheet tracking component 4.1.4 for Jira allows XSS in the calendar view. |
| CVE-2022-45849 | MEDIUM | 5.4 | 0.5% | Apr 16, 2023 | Auth. (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Silkalns Activello theme <= 1.4.4 versions. |
| CVE-2022-44734 | MEDIUM | 4.8 | 0.4% | Apr 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Car Rental by BestWebSoft plugin <= 1.1.2 ... |
| CVE-2022-43480 | MEDIUM | 4.8 | 0.4% | Apr 16, 2023 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versi... |
| CVE-2022-43458 | MEDIUM | 5.4 | 0.4% | Apr 16, 2023 | Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Code Tides Advanced Floating Content plugin <= 1.2.1 ve... |
| CVE-2022-48314 | MEDIUM | 6.5 | 0.2% | Apr 16, 2023 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitat... |
| CVE-2022-48313 | MEDIUM | 6.5 | 0.2% | Apr 16, 2023 | The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitat... |
| CVE-2022-34125 | MEDIUM | 6.5 | 4.6% | Apr 16, 2023 | front/icon.send.php in the CMDB plugin before 3.0.3 for GLPI allows attackers to gain read access to sensitive informati... |
| CVE-2022-30076 | MEDIUM | 5.3 | 3.5% | Apr 16, 2023 | ENTAB ERP 1.0 allows attackers to discover users' full names via a brute force attack with a series of student usernames... |
| CVE-2022-28353 | MEDIUM | 6.1 | 0.6% | Apr 16, 2023 | In the External Redirect Warning Plugin 1.3 for MyBB, the redirect URL (aka external.php?url=) is vulnerable to XSS. |
| CVE-2022-37306 | MEDIUM | 6.1 | 0.6% | Apr 16, 2023 | OX App Suite before 7.10.6-rev30 allows XSS via an upsell trigger. |
| CVE-2022-37186 | MEDIUM | 5.9 | 0.7% | Apr 16, 2023 | In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the time... |
| CVE-2022-37705 | MEDIUM | 6.7 | 1.2% | Apr 16, 2023 | A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerab... |
| CVE-2022-37704 | MEDIUM | 6.7 | 0.5% | Apr 16, 2023 | Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/ru... |
| CVE-2022-43699 | MEDIUM | 4.3 | 0.5% | Apr 15, 2023 | OX App Suite before 7.10.6-rev30 allows SSRF because e-mail account discovery disregards the deny-list and thus can be a... |
| CVE-2022-43698 | MEDIUM | 4.3 | 0.5% | Apr 15, 2023 | OX App Suite before 7.10.6-rev30 allows SSRF because changing a POP3 account disregards the deny-list. |
| CVE-2022-43697 | MEDIUM | 6.1 | 0.4% | Apr 15, 2023 | OX App Suite before 7.10.6-rev30 allows XSS via an activity tracking adapter defined by jslob. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now