2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-39975 | MEDIUM | 4.3 | 0.5% | Sep 22, 2022 | The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before updat... |
| CVE-2022-35896 | MEDIUM | 6 | 0.3% | Sep 22, 2022 | An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5... |
| CVE-2022-28982 | MEDIUM | 6.1 | 0.4% | Sep 22, 2022 | A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service p... |
| CVE-2022-28979 | MEDIUM | 6.1 | 0.5% | Sep 22, 2022 | Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before serv... |
| CVE-2022-28978 | MEDIUM | 5.4 | 0.5% | Sep 22, 2022 | Stored cross-site scripting (XSS) vulnerability in the Site module's user membership administration page in Liferay Port... |
| CVE-2022-3233 | MEDIUM | 4.3 | 0.3% | Sep 21, 2022 | Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| CVE-2022-38073 | MEDIUM | 5.4 | 0.5% | Sep 21, 2022 | Multiple Authenticated (custom specific plugin role) Persistent Cross-Site Scripting (XSS) vulnerability in Awesome Supp... |
| CVE-2022-36390 | MEDIUM | 5.4 | 0.5% | Sep 21, 2022 | Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar pl... |
| CVE-2022-36383 | MEDIUM | 5.4 | 0.4% | Sep 21, 2022 | Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Word Search Puzzles game ... |
| CVE-2022-36365 | MEDIUM | 5.4 | 0.6% | Sep 21, 2022 | Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in WHA Crossword plugin <= 1.1.1... |
| CVE-2022-40219 | MEDIUM | 4.3 | 0.2% | Sep 21, 2022 | Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin s... |
| CVE-2022-35621 | MEDIUM | 5.3 | 0.7% | Sep 21, 2022 | Access control vulnerability in Evoh NFT EvohClaimable contract with sha256 hash code fa2084d5abca91a62ed1d2f1cad3ec318e... |
| CVE-2022-29800 | MEDIUM | 4.7 | 6.4% | Sep 21, 2022 | A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists bec... |
| CVE-2022-29799 | MEDIUM | 5.5 | 11.7% | Sep 21, 2022 | A vulnerability was found in networkd-dispatcher. This flaw exists because no functions are sanitized by the Operational... |
| CVE-2022-23951 | MEDIUM | 5.5 | 0.4% | Sep 21, 2022 | In Keylime before 6.3.0, quote responses from the agent can contain possibly untrusted ZIP data which can lead to zip bo... |
| CVE-2022-40029 | MEDIUM | 4.8 | 0.6% | Sep 21, 2022 | SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via... |
| CVE-2022-40028 | MEDIUM | 4.8 | 0.6% | Sep 21, 2022 | SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via... |
| CVE-2022-40027 | MEDIUM | 6.1 | 0.7% | Sep 21, 2022 | SourceCodester Simple Task Managing System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via... |
| CVE-2022-3251 | MEDIUM | 5.3 | 0.5% | Sep 21, 2022 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2. |
| CVE-2022-3250 | MEDIUM | 5.3 | 0.4% | Sep 21, 2022 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| CVE-2022-41255 | MEDIUM | 6.5 | 0.7% | Sep 21, 2022 | Jenkins CONS3RT Plugin 1.0.0 and earlier stores Cons3rt API token unencrypted in job config.xml files on the Jenkins con... |
| CVE-2022-41254 | MEDIUM | 6.5 | 0.7% | Sep 21, 2022 | Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allow attackers with Overall/Read permission to co... |
| CVE-2022-41252 | MEDIUM | 4.3 | 0.5% | Sep 21, 2022 | Missing permission checks in Jenkins CONS3RT Plugin 1.0.0 and earlier allows users with Overall/Read permission to enume... |
| CVE-2022-41251 | MEDIUM | 4.3 | 0.5% | Sep 21, 2022 | A missing permission check in Jenkins Apprenda Plugin 2.2.0 and earlier allows users with Overall/Read permission to enu... |
| CVE-2022-41250 | MEDIUM | 6.5 | 0.5% | Sep 21, 2022 | A missing permission check in Jenkins SCM HttpClient Plugin 1.5 and earlier allows attackers with Overall/Read permissio... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now