2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-22237 | MEDIUM | 6.5 | 0.4% | Oct 18, 2022 | An Improper Authentication vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated, network-b... |
| CVE-2022-22234 | MEDIUM | 5.5 | 0.2% | Oct 18, 2022 | An Improper Preservation of Consistency Between Independent Representations of Shared State vulnerability in the Packet ... |
| CVE-2022-22233 | MEDIUM | 5.5 | 0.2% | Oct 18, 2022 | An Unchecked Return Value to NULL Pointer Dereference vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks... |
| CVE-2022-22230 | MEDIUM | 6.5 | 0.3% | Oct 18, 2022 | An Improper Input Validation vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos O... |
| CVE-2022-22227 | MEDIUM | 5.3 | 0.6% | Oct 18, 2022 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper N... |
| CVE-2022-22226 | MEDIUM | 6.5 | 0.3% | Oct 18, 2022 | In VxLAN scenarios on EX4300-MP, EX4600, QFX5000 Series devices an Uncontrolled Memory Allocation vulnerability in the P... |
| CVE-2022-22225 | MEDIUM | 5.9 | 0.4% | Oct 18, 2022 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networ... |
| CVE-2022-22224 | MEDIUM | 6.5 | 0.3% | Oct 18, 2022 | An Improper Check or Handling of Exceptional Conditions vulnerability in the processing of a malformed OSPF TLV in Junip... |
| CVE-2022-22220 | MEDIUM | 5.9 | 0.4% | Oct 18, 2022 | A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks J... |
| CVE-2022-22219 | MEDIUM | 5.9 | 0.6% | Oct 18, 2022 | Due to the Improper Handling of an Unexpected Data Type in the processing of EVPN routes on Juniper Networks Junos OS an... |
| CVE-2022-22208 | MEDIUM | 5.9 | 0.4% | Oct 18, 2022 | A Use After Free vulnerability in the Routing Protocol Daemon (rdp) of Juniper Networks Junos OS and Junos OS Evolved al... |
| CVE-2022-42147 | MEDIUM | 6.1 | 0.4% | Oct 17, 2022 | kkFileView 4.0 is vulnerable to Cross Site Scripting (XSS) via controller\ Filecontroller.java. |
| CVE-2022-41431 | MEDIUM | 5.4 | 0.6% | Oct 17, 2022 | xzs v3.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /admin/question/edit. T... |
| CVE-2022-40606 | MEDIUM | 6.1 | 0.4% | Oct 17, 2022 | MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a differ... |
| CVE-2022-41139 | MEDIUM | 5.4 | 0.5% | Oct 17, 2022 | MITRE CALDERA 4.1.0 allows stored XSS via app.contact.gist (aka the gist contact configuration field), leading to execut... |
| CVE-2022-40605 | MEDIUM | 6.1 | 0.4% | Oct 17, 2022 | MITRE CALDERA before 4.1.0 allows XSS in the Operations tab and/or Debrief plugin via a crafted operation name, a differ... |
| CVE-2022-3567 | MEDIUM | 6.4 | 0.3% | Oct 17, 2022 | A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function in... |
| CVE-2022-3563 | MEDIUM | 5.7 | 0.4% | Oct 17, 2022 | A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_ca... |
| CVE-2022-26375 | MEDIUM | 4.8 | 0.4% | Oct 17, 2022 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology AB Press Optimizer plugin <= 1.1.1 on Wor... |
| CVE-2022-3540 | MEDIUM | 6.5 | 0.4% | Oct 17, 2022 | An issue has been discovered in hunter2 affecting all versions before 2.1.0. Improper handling of auto-completion input ... |
| CVE-2022-3351 | MEDIUM | 4.3 | 0.7% | Oct 17, 2022 | An issue has been discovered in GitLab EE affecting all versions starting from 13.7 before 15.2.5, all versions starting... |
| CVE-2022-3331 | MEDIUM | 4.3 | 0.6% | Oct 17, 2022 | An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting... |
| CVE-2022-3330 | MEDIUM | 4.3 | 0.5% | Oct 17, 2022 | It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions fr... |
| CVE-2022-3325 | MEDIUM | 4.3 | 0.4% | Oct 17, 2022 | Improper access control in the GitLab CE/EE API affecting all versions starting from 12.8 before 15.2.5, all versions st... |
| CVE-2022-3293 | MEDIUM | 4.3 | 0.5% | Oct 17, 2022 | Email addresses were leaked in WebHook logs in GitLab EE affecting all versions from 9.3 prior to 15.2.5, 15.3 prior to ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now