2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-26291 | MEDIUM | 5.5 | 0.9% | Mar 28, 2022 | lrzip v0.641 was discovered to contain a multiple concurrency use-after-free between the functions zpaq_decompress_buf()... |
| CVE-2022-26280 | MEDIUM | 6.5 | 1.9% | Mar 28, 2022 | Libarchive v3.6.0 was discovered to contain an out-of-bounds read via the component zipx_lzma_alone_init. |
| CVE-2022-24789 | HIGH | 7.6 | 0.7% | Mar 28, 2022 | C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user... |
| CVE-2022-26278 | CRITICAL | 9.8 | 1.7% | Mar 28, 2022 | Tenda AC9 v15.03.2.21_cn was discovered to contain a stack overflow via the time parameter in the PowerSaveSet function. |
| CVE-2022-27658 | HIGH | 7.5 | 0.9% | Mar 28, 2022 | Under certain conditions, SAP Innovation management - version 2.0, allows an attacker to access information which could ... |
| CVE-2022-26980 | MEDIUM | 6.1 | 1.1% | Mar 28, 2022 | Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO. |
| CVE-2022-1056 | MEDIUM | 5.5 | 1.1% | Mar 28, 2022 | Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff f... |
| CVE-2022-0751 | HIGH | 8.8 | 1.4% | Mar 28, 2022 | Inaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to ... |
| CVE-2022-0738 | HIGH | 7.5 | 0.8% | Mar 28, 2022 | An issue has been discovered in GitLab affecting all versions starting from 14.6 before 14.6.5, all versions starting fr... |
| CVE-2022-0735 | CRITICAL | 9.8 | 13.2% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions star... |
| CVE-2022-0549 | MEDIUM | 6.5 | 0.9% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 befor... |
| CVE-2022-0488 | MEDIUM | 4.3 | 0.7% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigg... |
| CVE-2022-0427 | HIGH | 8.8 | 0.8% | Mar 28, 2022 | Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows a... |
| CVE-2022-0371 | MEDIUM | 4.3 | 0.9% | Mar 28, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 before 14.5.4, all versions start... |
| CVE-2022-0344 | MEDIUM | 4.3 | 1.1% | Mar 28, 2022 | An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting fr... |
| CVE-2022-0283 | MEDIUM | 6.1 | 0.7% | Mar 28, 2022 | An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab... |
| CVE-2022-0249 | CRITICAL | 9.1 | 1.1% | Mar 28, 2022 | A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since re... |
| CVE-2022-0136 | HIGH | 8.1 | 0.8% | Mar 28, 2022 | A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnera... |
| CVE-2022-0123 | MEDIUM | 6.8 | 0.4% | Mar 28, 2022 | An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 an... |
| CVE-2022-0846 | CRITICAL | 9.8 | 8.8% | Mar 28, 2022 | The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before usi... |
| CVE-2022-0833 | MEDIUM | 4.3 | 0.5% | Mar 28, 2022 | The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as r... |
| CVE-2022-0818 | MEDIUM | 6.1 | 0.9% | Mar 28, 2022 | The WooCommerce Affiliate Plugin WordPress plugin before 4.16.4.5 does not have authorization and CSRF checks on a speci... |
| CVE-2022-0787 | CRITICAL | 9.8 | 8.9% | Mar 28, 2022 | The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters befo... |
| CVE-2022-0784 | CRITICAL | 9.8 | 10.4% | Mar 28, 2022 | The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and escape the id parameter before using it i... |
| CVE-2022-0770 | HIGH | 8.8 | 0.6% | Mar 28, 2022 | The Translate WordPress with GTranslate WordPress plugin before 2.9.9 does not have CSRF check in some files, and write ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now