2022 CVE Vulnerabilities
27,632 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23358 | CRITICAL | 9.8 | 1.2% | Feb 16, 2022 | EasyCMS v1.6 allows for SQL injection via ArticlemAction.class.php. In the background, search terms provided by the user... |
| CVE-2022-0559 | CRITICAL | 9.8 | 1.2% | Feb 16, 2022 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
| CVE-2022-0614 | MEDIUM | 5.5 | 0.9% | Feb 16, 2022 | Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2. |
| CVE-2022-0613 | MEDIUM | 6.5 | 1.6% | Feb 16, 2022 | Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8. |
| CVE-2022-0612 | MEDIUM | 5.4 | 0.6% | Feb 16, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-25242 | HIGH | 8.8 | 0.4% | Feb 16, 2022 | In FileCloud before 21.3, file upload is not protected against Cross-Site Request Forgery (CSRF). |
| CVE-2022-25241 | HIGH | 8.8 | 3.3% | Feb 16, 2022 | In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF). |
| CVE-2022-25236 | CRITICAL | 9.8 | 34.2% | Feb 16, 2022 | xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace... |
| CVE-2022-25235 | CRITICAL | 9.8 | 5.0% | Feb 16, 2022 | xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UT... |
| CVE-2022-0611 | HIGH | 8.8 | 1.2% | Feb 16, 2022 | Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11. |
| CVE-2022-23643 | MEDIUM | 6.5 | 0.8% | Feb 15, 2022 | Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed s... |
| CVE-2022-23641 | MEDIUM | 6.5 | 1.1% | Feb 15, 2022 | Discourse is an open source discussion platform. In versions prior to 2.8.1 in the `stable` branch, 2.9.0.beta2 in the `... |
| CVE-2022-24589 | MEDIUM | 6.1 | 0.8% | Feb 15, 2022 | Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function. This vulnerabili... |
| CVE-2022-23639 | HIGH | 8.1 | 1.2% | Feb 15, 2022 | crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent program... |
| CVE-2022-22770 | CRITICAL | 9.8 | 1.1% | Feb 15, 2022 | The Web Server component of TIBCO Software Inc.'s TIBCO AuditSafe contains an easily exploitable vulnerability that allo... |
| CVE-2022-25212 | HIGH | 8.8 | 0.7% | Feb 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers to connect ... |
| CVE-2022-25211 | HIGH | 8.8 | 1.1% | Feb 15, 2022 | A missing permission check in Jenkins SWAMP Plugin 1.2.6 and earlier allows attackers with Overall/Read permission to co... |
| CVE-2022-25210 | MEDIUM | 6.5 | 0.8% | Feb 15, 2022 | Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, all... |
| CVE-2022-25209 | HIGH | 8.8 | 1.1% | Feb 15, 2022 | Jenkins Chef Sinatra Plugin 1.20 and earlier does not configure its XML parser to prevent XML external entity (XXE) atta... |
| CVE-2022-25208 | HIGH | 8.8 | 1.1% | Feb 15, 2022 | A missing permission check in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers with Overall/Read permission... |
| CVE-2022-25207 | HIGH | 8.8 | 0.7% | Feb 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to ha... |
| CVE-2022-25206 | HIGH | 8.8 | 0.8% | Feb 15, 2022 | A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to... |
| CVE-2022-25205 | HIGH | 8.8 | 0.5% | Feb 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to conne... |
| CVE-2022-25204 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the cont... |
| CVE-2022-25203 | MEDIUM | 5.4 | 0.8% | Feb 15, 2022 | Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting (XSS)... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now