2022 CVE Vulnerabilities

27,557 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-46807MEDIUM4.3Missing Authorization vulnerability in Lauri Karisola / WP Trio Stock Sync for WooCommerce allows Exploiting Incorrectly...
CVE-2022-46796MEDIUM6.5Missing Authorization vulnerability in VillaTheme CURCY allows Exploiting Incorrectly Configured Access Control Security...
CVE-2022-46795MEDIUM6.5Missing Authorization vulnerability in Tyche Softwares Print Invoice & Delivery Notes for WooCommerce allows Exploiting ...
CVE-2022-45841MEDIUM5.4Missing Authorization vulnerability in RoboSoft Robo Gallery allows Exploiting Incorrectly Configured Access Control Sec...
CVE-2022-45840MEDIUM6.5Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Acce...
CVE-2022-45826MEDIUM5.4Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access C...
CVE-2022-45819LOW3.5Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control S...
CVE-2022-45806CRITICAL9.8Missing Authorization vulnerability in Strategy11 Form Builder Team Formidable Forms allows Exploiting Incorrectly Confi...
CVE-2022-44578MEDIUM5.3Missing Authorization vulnerability in Pierre JEHAN Owl Carousel allows Exploiting Incorrectly Configured Access Control...
CVE-2022-43472MEDIUM4.3Missing Authorization vulnerability in StylemixThemes eRoom – Zoom Meetings & Webinar allows Exploiting Incorrectly Conf...
CVE-2022-29974MEDIUM4.3AMI (aka American Megatrends) NTFS driver 1.0.0 (fixed in late 2021 or early 2022) has a buffer overflow. This driver is...
CVE-2022-38946CRITICAL9.8Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signup_com.php, allows attackers to e...
CVE-2022-38947CRITICAL9.8SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in product_title parameter, allows attackers ...
CVE-2022-41137HIGH8.3Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and f...
CVE-2022-33860——Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-43775. Reason: This record is a duplicate...
CVE-2022-33862MEDIUM6.7IPP software prior to v1.71 is vulnerable to default credential vulnerability. This could lead attackers to identify and...
CVE-2022-33861MEDIUM5.1IPP software versions prior to v1.71 do not sufficiently verify the authenticity of data, in a way that causes it to acc...
CVE-2022-26324MEDIUM5.4Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.
CVE-2022-43937MEDIUM5.5Possible information exposure through log file vulnerability where sensitive fields are recorded in the debug-enabled lo...
CVE-2022-43936MEDIUM4.9Brocade SANnav versions before 2.2.2 log Brocade Fabric OS switch passwords when debugging is enabled.
CVE-2022-43935MEDIUM4.4An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Broca...
CVE-2022-43934HIGH7.5Brocade SANnav before Brocade SANnav 2.2.2 supports key exchange algorithms, which are considered weak on ports 24, 6514...
CVE-2022-43933MEDIUM4.4An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where confi...
CVE-2022-47424HIGH8.8Cross-Site Request Forgery (CSRF) vulnerability in Repute InfoSystems ARMember, Repute InfoSystems ARMember Premium allo...
CVE-2022-20633MEDIUM5.3A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now