2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0287 | MEDIUM | 4.3 | 0.8% | Apr 25, 2022 | The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX... |
| CVE-2022-29078 | CRITICAL | 9.8 | 32.4% | Apr 25, 2022 | The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[... |
| CVE-2022-28094 | MEDIUM | 6.1 | 0.9% | Apr 25, 2022 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability vi... |
| CVE-2022-28093 | CRITICAL | 9.8 | 2.8% | Apr 25, 2022 | SCBS Online Sports Venue Reservation System v1.0 was discovered to contain a local file inclusion vulnerability which al... |
| CVE-2022-26111 | HIGH | 8.8 | 4.0% | Apr 25, 2022 | The BeanShell components of IRISNext through 9.8.28 allow execution of arbitrary commands on the target server by creati... |
| CVE-2022-28586 | MEDIUM | 6.1 | 0.6% | Apr 25, 2022 | XSS in edit page of Hoosk 1.8.0 allows attacker to execute javascript code in user browser via edit page with XSS payloa... |
| CVE-2022-28506 | MEDIUM | 5.5 | 1.2% | Apr 25, 2022 | There is a heap-buffer-overflow in GIFLIB 5.2.1 function DumpScreen2RGB() in gif2rgb.c:298:45. |
| CVE-2022-28053 | HIGH | 8.8 | 1.2% | Apr 25, 2022 | Typemill v1.5.3 was discovered to contain an arbitrary file upload vulnerability via the upload function. This vulnerabi... |
| CVE-2022-27429 | CRITICAL | 9.8 | 1.1% | Apr 25, 2022 | Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/upda... |
| CVE-2022-27428 | MEDIUM | 5.4 | 0.5% | Apr 25, 2022 | A stored cross-site scripting (XSS) vulnerability in /index.php/album/add of GalleryCMS v2.0 allows attackers to execute... |
| CVE-2022-27311 | CRITICAL | 9.8 | 1.5% | Apr 25, 2022 | Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL. |
| CVE-2022-27135 | MEDIUM | 5.5 | 1.0% | Apr 25, 2022 | xpdf 4.03 has heap buffer overflow in the function readXRefTable located in XRef.cc. An attacker can exploit this bug to... |
| CVE-2022-27103 | MEDIUM | 6.1 | 0.9% | Apr 25, 2022 | element-plus 2.0.5 is vulnerable to Cross Site Scripting (XSS) via el-table-column. |
| CVE-2022-28871 | HIGH | 7.5 | 0.5% | Apr 25, 2022 | A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain ... |
| CVE-2022-1461 | MEDIUM | 6.5 | 0.9% | Apr 25, 2022 | Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1. |
| CVE-2022-1459 | HIGH | 8.3 | 1.0% | Apr 25, 2022 | Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1. |
| CVE-2022-1458 | MEDIUM | 5.4 | 0.7% | Apr 25, 2022 | Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1. |
| CVE-2022-1457 | MEDIUM | 5.4 | 0.7% | Apr 25, 2022 | Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascript... |
| CVE-2022-29264 | CRITICAL | 9.8 | 1.7% | Apr 25, 2022 | An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur. |
| CVE-2022-29603 | HIGH | 8.1 | 1.4% | Apr 25, 2022 | A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API ... |
| CVE-2022-29546 | HIGH | 7.5 | 1.2% | Apr 25, 2022 | HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability. Crafted input associated with the... |
| CVE-2022-29077 | CRITICAL | 9.8 | 2.1% | Apr 25, 2022 | A heap-based buffer overflow exists in rippled before 1.8.5. The vulnerability allows attackers to cause a crash or exec... |
| CVE-2022-1452 | HIGH | 7.1 | 0.8% | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7... |
| CVE-2022-1451 | HIGH | 7.1 | 0.8% | Apr 24, 2022 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.... |
| CVE-2022-1445 | MEDIUM | 5.4 | 0.7% | Apr 24, 2022 | Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now