2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-41248 | MEDIUM | 5.3 | 0.3% | Sep 21, 2022 | Jenkins BigPanda Notifier Plugin 1.4.0 and earlier does not mask the BigPanda API key on the global configuration form, ... |
| CVE-2022-41247 | MEDIUM | 4.3 | 0.4% | Sep 21, 2022 | Jenkins BigPanda Notifier Plugin 1.4.0 and earlier stores the BigPanda API key unencrypted in its global configuration f... |
| CVE-2022-41246 | MEDIUM | 6.5 | 0.6% | Sep 21, 2022 | A missing permission check in Jenkins Worksoft Execution Manager Plugin 10.0.3.503 and earlier allows attackers with Ove... |
| CVE-2022-41242 | MEDIUM | 5.4 | 0.4% | Sep 21, 2022 | A missing permission check in Jenkins extreme-feedback Plugin 1.7 and earlier allows attackers with Overall/Read permiss... |
| CVE-2022-41240 | MEDIUM | 5.4 | 0.5% | Sep 21, 2022 | Jenkins Walti Plugin 1.0.1 and earlier does not escape the information provided by the Walti API, resulting in a stored ... |
| CVE-2022-41239 | MEDIUM | 5.4 | 0.6% | Sep 21, 2022 | Jenkins DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications... |
| CVE-2022-41235 | MEDIUM | 5.3 | 0.6% | Sep 21, 2022 | Jenkins WildFly Deployer Plugin 1.0.2 and earlier implements functionality that allows agent processes to read arbitrary... |
| CVE-2022-41233 | MEDIUM | 4.3 | 0.5% | Sep 21, 2022 | Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, a... |
| CVE-2022-41231 | MEDIUM | 5.7 | 1.2% | Sep 21, 2022 | Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any... |
| CVE-2022-41230 | MEDIUM | 4.3 | 0.5% | Sep 21, 2022 | Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attack... |
| CVE-2022-41229 | MEDIUM | 5.4 | 0.5% | Sep 21, 2022 | Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.134 and earlier does not escape configuration options of th... |
| CVE-2022-41225 | MEDIUM | 5.4 | 0.6% | Sep 21, 2022 | Jenkins Anchore Container Image Scanner Plugin 1.0.24 and earlier does not escape content provided by the Anchore engine... |
| CVE-2022-41224 | MEDIUM | 5.4 | 0.9% | Sep 21, 2022 | Jenkins 2.367 through 2.369 (both inclusive) does not escape tooltips of the l:helpIcon UI component used for some help ... |
| CVE-2022-37246 | MEDIUM | 5.4 | 0.4% | Sep 21, 2022 | Craft CMS 4.2.0.1 is affected by Cross Site Scripting (XSS) in the file src/web/assets/cp/src/js/BaseElementSelectInput.... |
| CVE-2022-3255 | MEDIUM | 4.8 | 0.6% | Sep 21, 2022 | If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise t... |
| CVE-2022-2888 | MEDIUM | 4.4 | 0.3% | Sep 21, 2022 | If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can... |
| CVE-2022-2795 | MEDIUM | 5.3 | 1.8% | Sep 21, 2022 | By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's pe... |
| CVE-2022-2872 | MEDIUM | 5.4 | 0.5% | Sep 21, 2022 | Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3. |
| CVE-2022-40754 | MEDIUM | 6.1 | 1.4% | Sep 21, 2022 | In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint. |
| CVE-2022-41218 | MEDIUM | 5.5 | 0.8% | Sep 21, 2022 | In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount rac... |
| CVE-2022-35090 | MEDIUM | 5.5 | 0.3% | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer overflow via __asan_memcpy at /asan/asan_interceptors_m... |
| CVE-2022-35089 | MEDIUM | 5.5 | 0.3% | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap-buffer-overflow via getTransparentColor at /home/bupt/Desktop/... |
| CVE-2022-35088 | MEDIUM | 5.5 | 0.3% | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a heap buffer-overflow via getGifDelayTime at /home/bupt/Desktop/swft... |
| CVE-2022-35087 | MEDIUM | 5.5 | 0.3% | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via MovieAddFrame at /src/gif2swf.c. |
| CVE-2022-35086 | MEDIUM | 5.5 | 0.3% | Sep 21, 2022 | SWFTools commit 772e55a2 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now