2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-34173 | MEDIUM | 5.4 | 1.4% | Jun 23, 2022 | In Jenkins 2.340 through 2.355 (both inclusive) the tooltip of the build button in list views supports HTML without esca... |
| CVE-2022-34172 | MEDIUM | 5.4 | 1.4% | Jun 23, 2022 | In Jenkins 2.340 through 2.355 (both inclusive) symbol-based icons unescape previously escaped values of 'tooltip' param... |
| CVE-2022-34171 | MEDIUM | 5.4 | 1.4% | Jun 23, 2022 | In Jenkins 2.321 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the HTML output gen... |
| CVE-2022-34170 | MEDIUM | 5.4 | 1.4% | Jun 23, 2022 | In Jenkins 2.320 through 2.355 (both inclusive) and LTS 2.332.1 through LTS 2.332.3 (both inclusive) the help icon does ... |
| CVE-2022-34013 | MEDIUM | 4.3 | 0.5% | Jun 23, 2022 | OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Logo parameter under... |
| CVE-2022-34012 | MEDIUM | 6.5 | 0.5% | Jun 23, 2022 | Insecure permissions in OneBlog v2.3.4 allows low-level administrators to reset the passwords of high-level administrato... |
| CVE-2022-34011 | MEDIUM | 4.3 | 0.5% | Jun 23, 2022 | OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the parameter entryUrls. |
| CVE-2022-33124 | MEDIUM | 5.5 | 0.7% | Jun 23, 2022 | AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS). NOTE: mu... |
| CVE-2022-33113 | MEDIUM | 5.4 | 0.5% | Jun 23, 2022 | Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the keyw... |
| CVE-2022-33070 | MEDIUM | 5.5 | 1.1% | Jun 23, 2022 | Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parse_tag_and_wiretype in proto... |
| CVE-2022-33069 | MEDIUM | 5.5 | 0.6% | Jun 23, 2022 | Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment() at SMTEncoder.cpp. |
| CVE-2022-33068 | MEDIUM | 5.5 | 1.1% | Jun 23, 2022 | An integer overflow in the component hb-ot-shape-fallback.cc of Harfbuzz v4.3.0 allows attackers to cause a Denial of Se... |
| CVE-2022-33067 | MEDIUM | 5.5 | 0.6% | Jun 23, 2022 | Lrzip v0.651 was discovered to contain multiple invalid arithmetic shifts via the functions get_magic in lrzip.c and Pre... |
| CVE-2022-32131 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /index/notic... |
| CVE-2022-32130 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/dow... |
| CVE-2022-32129 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/acc... |
| CVE-2022-32128 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/ser... |
| CVE-2022-32127 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company/vie... |
| CVE-2022-32126 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /company. |
| CVE-2022-32125 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the path /job. |
| CVE-2022-32124 | MEDIUM | 6.1 | 0.6% | Jun 23, 2022 | 74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /index/... |
| CVE-2022-29526 | MEDIUM | 5.3 | 2.6% | Jun 23, 2022 | Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags paramet... |
| CVE-2022-34305 | MEDIUM | 6.1 | 6.7% | Jun 23, 2022 | In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentic... |
| CVE-2022-31009 | MEDIUM | 6.5 | 0.6% | Jun 23, 2022 | wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partner... |
| CVE-2022-23080 | MEDIUM | 5 | 0.8% | Jun 22, 2022 | In directus versions v9.0.0-beta.2 through 9.6.0 are vulnerable to server-side request forgery (SSRF) in the media uploa... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now