2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-51020 | MEDIUM | 5.9 | 0.1% | Oct 12, 2026 | Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the... |
| CVE-2022-42917 | MEDIUM | 6.7 | 0.1% | Sep 14, 2026 | In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the config... |
| CVE-2022-26962 | MEDIUM | 5.4 | 0.2% | Sep 10, 2026 | Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=... |
| CVE-2022-51018 | MEDIUM | 6.5 | 0.4% | Sep 7, 2026 | PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title len... |
| CVE-2022-51016 | MEDIUM | 6.1 | 0.2% | Sep 7, 2026 | PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify ... |
| CVE-2022-51015 | MEDIUM | 6.5 | 0.7% | Sep 7, 2026 | PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK action... |
| CVE-2022-51014 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when pro... |
| CVE-2022-51013 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received fro... |
| CVE-2022-51012 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transac... |
| CVE-2022-51011 | MEDIUM | 4.3 | 0.4% | Sep 7, 2026 | PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by n... |
| CVE-2022-51010 | MEDIUM | 6.5 | 0.5% | Sep 7, 2026 | PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. Atta... |
| CVE-2022-51008 | MEDIUM | 5.3 | 0.3% | Sep 6, 2026 | PocketMine-MP before 4.12.3 fails to limit unauthenticated sessions, allowing attackers to exhaust player slots by creat... |
| CVE-2022-26961 | MEDIUM | 5.4 | 0.1% | Sep 4, 2026 | Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NP_IBCF-NATUP-01/NMSCI-WebGui/backup_restore.jsp and ... |
| CVE-2022-35497 | MEDIUM | 5.4 | 0.3% | Sep 4, 2026 | In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid se... |
| CVE-2022-30983 | MEDIUM | 6.1 | 0.2% | Aug 24, 2026 | A cross-site scripting (XSS) vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows rem... |
| CVE-2022-4996 | MEDIUM | 5.3 | 0.5% | Aug 20, 2026 | A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can l... |
| CVE-2022-47150 | MEDIUM | 4.3 | 0.1% | Jun 11, 2026 | Cross-Site request forgery (CSRF) vulnerability in weDevs WooCommerce Conversion Tracking allows Cross Site Request Forg... |
| CVE-2022-45813 | MEDIUM | 5.4 | 0.2% | Jun 11, 2026 | Missing Authorization vulnerability in BeRocket Advanced AJAX Product Filters allows Exploiting Incorrectly Configured A... |
| CVE-2022-44630 | MEDIUM | 4.6 | 0.1% | Jun 11, 2026 | Cross-Site request forgery (CSRF) vulnerability in YITH YITH WooCommerce Product Slider Carousel allows Cross Site Reque... |
| CVE-2022-42479 | MEDIUM | 5.4 | 0.2% | Jun 11, 2026 | Missing Authorization vulnerability in TemplateHouse Soledad allows Accessing Functionality Not Properly Constrained by ... |
| CVE-2022-50953 | MEDIUM | 6.9 | 0.3% | Jun 8, 2026 | WordPress Plugin admin-word-count-column 2.2 contains a local file read vulnerability that allows unauthenticated attack... |
| CVE-2022-31114 | MEDIUM | 5.1 | 0.3% | Jun 3, 2026 | backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages tha... |
| CVE-2022-41656 | MEDIUM | 4.3 | 0.2% | May 27, 2026 | Missing Authorization vulnerability in Bizswoop Account Manager for WooCommerce allows Exploiting Incorrectly Configured... |
| CVE-2022-50970 | MEDIUM | 5.4 | 0.2% | May 10, 2026 | WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers t... |
| CVE-2022-50969 | MEDIUM | 6.1 | 0.3% | May 10, 2026 | uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module. The d... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now