2022 CVE Vulnerabilities
27,557 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22488 | MEDIUM | 4.9 | 0.5% | Dec 12, 2022 | IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many... |
| CVE-2022-46688 | MEDIUM | 6.5 | 0.4% | Dec 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows at... |
| CVE-2022-46687 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resu... |
| CVE-2022-46686 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display ... |
| CVE-2022-46685 | MEDIUM | 4.3 | 0.3% | Dec 12, 2022 | In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credential... |
| CVE-2022-46684 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inse... |
| CVE-2022-46683 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is le... |
| CVE-2022-20691 | MEDIUM | 6.5 | 0.6% | Dec 12, 2022 | A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Adaptive Telephone Adapter firmwar... |
| CVE-2022-20688 | MEDIUM | 5.3 | 0.9% | Dec 12, 2022 | A vulnerability in the Cisco Discovery Protocol functionality of Cisco ATA 190 Series Analog Telephone Adapter firmware ... |
| CVE-2022-20687 | MEDIUM | 5.3 | 0.9% | Dec 12, 2022 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph... |
| CVE-2022-20686 | MEDIUM | 5.3 | 0.9% | Dec 12, 2022 | Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) functionality of Cisco ATA 190 Series Analog Teleph... |
| CVE-2022-31596 | MEDIUM | 6 | 0.7% | Dec 12, 2022 | Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Networ... |
| CVE-2022-45758 | MEDIUM | 5.4 | 0.3% | Dec 12, 2022 | SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister. |
| CVE-2022-45756 | MEDIUM | 6.1 | 0.3% | Dec 12, 2022 | SENS v1.0 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2022-44637 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization ... |
| CVE-2022-44031 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Redmine before 4.2.9 and 5.0.x before 5.0.4 allows persistent XSS in its Textile formatter due to improper sanitization ... |
| CVE-2022-4414 | MEDIUM | 6.1 | 0.4% | Dec 12, 2022 | Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13. |
| CVE-2022-4413 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13. |
| CVE-2022-4408 | MEDIUM | 5.4 | 0.5% | Dec 11, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.9. |
| CVE-2022-4407 | MEDIUM | 6.1 | 4.4% | Dec 11, 2022 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9. |
| CVE-2022-4401 | MEDIUM | 5.4 | 0.4% | Dec 11, 2022 | A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected... |
| CVE-2022-4400 | MEDIUM | 6.1 | 0.4% | Dec 11, 2022 | A vulnerability was found in zbl1996 FS-Blog and classified as problematic. This issue affects some unknown processing o... |
| CVE-2022-4397 | MEDIUM | 6.5 | 0.2% | Dec 10, 2022 | A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown f... |
| CVE-2022-4396 | MEDIUM | 5.4 | 0.6% | Dec 10, 2022 | A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function _get_option o... |
| CVE-2022-45292 | MEDIUM | 5.3 | 0.5% | Dec 9, 2022 | User invites for Funkwhale v1.2.8 do not permanently expire after being used for signup and can be used again after an a... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now