2022 CVE Vulnerabilities

27,563 CVEs published in 2022.

Filter:MEDIUMClear
CVE IDSeverityCVSSDescription
CVE-2022-26054MEDIUM4.3Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacke...
CVE-2022-26051MEDIUM4.3Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attac...
CVE-2022-2290MEDIUM6.1Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.
CVE-2022-34912MEDIUM6.1An issue was discovered in MediaWiki before 1.37.3 and 1.38.x before 1.38.1. The contributions-title, used on Special:Co...
CVE-2022-34911MEDIUM6.1An issue was discovered in MediaWiki before 1.35.7, 1.36.x and 1.37.x before 1.37.3, and 1.38.x before 1.38.1. XSS can o...
CVE-2022-34903MEDIUM6.5GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyrin...
CVE-2022-32325MEDIUM6.5JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim...
CVE-2022-25896MEDIUM4.8This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of b...
CVE-2022-25876MEDIUM5.5The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to...
CVE-2022-22373MEDIUM5.4An improper validation vulnerability in IBM InfoSphere Information Server 11.7 Pack for SAP Apps and BW Packs may lead t...
CVE-2022-22367MEDIUM5.5IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a l...
CVE-2022-22366MEDIUM4.4IBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 stores user credentials in plain clear text which ca...
CVE-2022-1954MEDIUM5.3A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5,...
CVE-2022-0167MEDIUM6.1An issue has been discovered in GitLab affecting all versions starting from 14.0 before 14.4.5, all versions starting fr...
CVE-2022-31113MEDIUM6.1Canarytokens is an open source tool which helps track activity and actions on your network. A Cross-Site Scripting vulne...
CVE-2022-2270MEDIUM5.3An issue has been discovered in GitLab affecting all versions starting from 12.4 before 14.10.5, all versions starting f...
CVE-2022-2228MEDIUM6.5Information exposure in GitLab EE affecting all versions from 12.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prio...
CVE-2022-1999MEDIUM5.3An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, an...
CVE-2022-1963MEDIUM5.3An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions star...
CVE-2022-2281MEDIUM5.3An information disclosure vulnerability in GitLab EE affecting all versions from 12.5 prior to 14.10.5, 15.0 prior to 15...
CVE-2022-2254MEDIUM4.8A user with administrative privileges in Distributed Data Systems WebHMI 4.1.1.7662 can store a script that could impact...
CVE-2022-2250MEDIUM6.1An open redirect vulnerability in GitLab EE/CE affecting all versions from 11.1 prior to 14.10.5, 15.0 prior to 15.0.4, ...
CVE-2022-2244MEDIUM4.3An improper authorization vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to...
CVE-2022-2243MEDIUM4.3An access control vulnerability in GitLab EE/CE affecting all versions from 14.8 prior to 14.10.5, 15.0 prior to 15.0.4,...
CVE-2022-2235MEDIUM5.4Insufficient sanitization in GitLab EE's external issue tracker affecting all versions from 14.5 prior to 14.10.5, 15.0 ...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now