2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-37907 | HIGH | 7.5 | 0.6% | Dec 12, 2022 | A vulnerability exists in the ArubaOS bootloader on 7xxx series controllers which can result in a denial of service (DoS... |
| CVE-2022-37906 | HIGH | 8.1 | 0.8% | Dec 12, 2022 | An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of t... |
| CVE-2022-37905 | HIGH | 8.8 | 0.8% | Dec 12, 2022 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code du... |
| CVE-2022-37904 | HIGH | 8.8 | 0.8% | Dec 12, 2022 | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code du... |
| CVE-2022-37903 | HIGH | 8.8 | 0.8% | Dec 12, 2022 | A vulnerability exists that allows an authenticated attacker to overwrite an arbitrary file with attacker-controlled con... |
| CVE-2022-37902 | HIGH | 7.2 | 1.8% | Dec 12, 2022 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2022-37901 | HIGH | 7.2 | 1.8% | Dec 12, 2022 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2022-37900 | HIGH | 7.2 | 1.8% | Dec 12, 2022 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2022-37899 | HIGH | 7.2 | 1.8% | Dec 12, 2022 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2022-37898 | HIGH | 7.2 | 1.5% | Dec 12, 2022 | Authenticated command injection vulnerabilities exist in the ArubaOS command line interface. Successful exploitation of ... |
| CVE-2022-37897 | CRITICAL | 9.8 | 1.8% | Dec 12, 2022 | There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially... |
| CVE-2022-37018 | HIGH | 8.4 | 0.2% | Dec 12, 2022 | A potential vulnerability has been identified in the system BIOS for certain HP PC products which may allow escalation o... |
| CVE-2022-34318 | MEDIUM | 6.1 | 0.6% | Dec 12, 2022 | IBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to v... |
| CVE-2022-32537 | MEDIUM | 4.8 | 0.3% | Dec 12, 2022 | A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pai... |
| CVE-2022-2794 | HIGH | 7.5 | 0.9% | Dec 12, 2022 | Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack. |
| CVE-2022-23511 | MEDIUM | 6.8 | 0.5% | Dec 12, 2022 | A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and ... |
| CVE-2022-22488 | MEDIUM | 4.9 | 0.5% | Dec 12, 2022 | IBM OpenBMC OP910 and OP940 could allow a privileged user to cause a denial of service by uploading or deleting too many... |
| CVE-2022-1038 | HIGH | 7.8 | 0.2% | Dec 12, 2022 | A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of pri... |
| CVE-2022-3485 | CRITICAL | 9.8 | 0.9% | Dec 12, 2022 | In IFM Moneo Appliance with version up to 1.9.3 an unauthenticated remote attacker can reset the administrator password ... |
| CVE-2022-46688 | MEDIUM | 6.5 | 0.4% | Dec 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Sonar Gerrit Plugin 377.v8f3808963dc5 and earlier allows at... |
| CVE-2022-46687 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Jenkins Spring Config Plugin 2.0.0 and earlier does not escape build display names shown on the Spring Config view, resu... |
| CVE-2022-46686 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Jenkins Custom Build Properties Plugin 2.79.vc095ccc85094 and earlier does not escape property values and build display ... |
| CVE-2022-46685 | MEDIUM | 4.3 | 0.3% | Dec 12, 2022 | In Jenkins Gitea Plugin 1.4.4 and earlier, the implementation of Gitea personal access tokens did not support credential... |
| CVE-2022-46684 | MEDIUM | 5.4 | 0.5% | Dec 12, 2022 | Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inse... |
| CVE-2022-46683 | MEDIUM | 6.1 | 0.5% | Dec 12, 2022 | Jenkins Google Login Plugin 1.4 through 1.6 (both inclusive) improperly determines that a redirect URL after login is le... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now