2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27333 | HIGH | 7.5 | 0.8% | Mar 21, 2022 | idcCMS v1.10 was discovered to contain an issue which allows attackers to arbitrarily delete the install.lock file, resu... |
| CVE-2022-27090 | MEDIUM | 5.4 | 0.4% | Mar 21, 2022 | Cscms Music Portal System v4.2 was discovered to contain a redirection vulnerability via the backurl parameter. |
| CVE-2022-26184 | CRITICAL | 9.8 | 1.8% | Mar 21, 2022 | Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in une... |
| CVE-2022-26183 | HIGH | 8.8 | 1.6% | Mar 21, 2022 | PNPM v6.15.1 and below was discovered to contain an untrusted search path which causes the application to behave in unex... |
| CVE-2022-26174 | CRITICAL | 9.8 | 2.3% | Mar 21, 2022 | A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a ... |
| CVE-2022-26148 | CRITICAL | 9.8 | 53.4% | Mar 21, 2022 | An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the a... |
| CVE-2022-23352 | HIGH | 7.5 | 2.0% | Mar 21, 2022 | An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS). |
| CVE-2022-23350 | MEDIUM | 5.4 | 0.8% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability. |
| CVE-2022-23349 | HIGH | 8.8 | 0.7% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF). |
| CVE-2022-23348 | MEDIUM | 5.3 | 3.4% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes. |
| CVE-2022-23347 | HIGH | 7.5 | 13.1% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks. |
| CVE-2022-23346 | HIGH | 8.8 | 1.6% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues. |
| CVE-2022-23345 | HIGH | 7.5 | 1.7% | Mar 21, 2022 | BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control. |
| CVE-2022-24775 | HIGH | 7.5 | 2.4% | Mar 21, 2022 | guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header par... |
| CVE-2022-24766 | CRITICAL | 9.8 | 1.6% | Mar 21, 2022 | mitmproxy is an interactive, SSL/TLS-capable intercepting proxy. In mitmproxy 7.0.4 and below, a malicious client or ser... |
| CVE-2022-0760 | CRITICAL | 9.8 | 10.8% | Mar 21, 2022 | The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using ... |
| CVE-2022-0747 | CRITICAL | 9.8 | 15.3% | Mar 21, 2022 | The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the post_id parameter before using it i... |
| CVE-2022-0739 | CRITICAL | 9.8 | 37.2% | Mar 21, 2022 | The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in ... |
| CVE-2022-0694 | CRITICAL | 9.8 | 1.8% | Mar 21, 2022 | The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before u... |
| CVE-2022-0687 | HIGH | 8.8 | 1.4% | Mar 21, 2022 | The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user... |
| CVE-2022-0681 | MEDIUM | 6.5 | 0.5% | Mar 21, 2022 | The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which ... |
| CVE-2022-0640 | MEDIUM | 6.1 | 0.9% | Mar 21, 2022 | The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputt... |
| CVE-2022-0628 | MEDIUM | 6.1 | 0.9% | Mar 21, 2022 | The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it bac... |
| CVE-2022-0627 | MEDIUM | 6.1 | 0.8% | Mar 21, 2022 | The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in a... |
| CVE-2022-0616 | MEDIUM | 4.3 | 0.4% | Mar 21, 2022 | The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now