2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-30968 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins vboxwrapper Plugin 1.3 and earlier does not escape the name and description of VBox node parameters on views dis... |
| CVE-2022-30967 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Selection tasks Plugin 1.0 and earlier does not escape the name and description of Script Selection task variabl... |
| CVE-2022-30966 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Random String Parameter Plugin 1.0 and earlier does not escape the name and description of Random String paramet... |
| CVE-2022-30965 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name and description of Promotion Level para... |
| CVE-2022-30964 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Multiselect parameter Plugin 1.3 and earlier does not escape the name and description of Multiselect parameters ... |
| CVE-2022-30963 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins JDK Parameter Plugin 1.0 and earlier does not escape the name and description of JDK parameters on views display... |
| CVE-2022-30962 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Global Variable String Parameter Plugin 1.2 and earlier does not escape the name and description of Global Varia... |
| CVE-2022-30961 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Autocomplete Parameter Plugin 1.1 and earlier does not escape the name of Dropdown Autocomplete and Auto Complet... |
| CVE-2022-30960 | MEDIUM | 5.4 | 0.7% | May 17, 2022 | Jenkins Application Detector Plugin 1.0.8 and earlier does not escape the name of Chois Application Version parameters o... |
| CVE-2022-30959 | MEDIUM | 6.5 | 0.8% | May 17, 2022 | A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to conn... |
| CVE-2022-30957 | MEDIUM | 4.3 | 0.7% | May 17, 2022 | A missing permission check in Jenkins SSH Plugin 2.6.1 and earlier allows attackers with Overall/Read permission to enum... |
| CVE-2022-30956 | MEDIUM | 5.4 | 71.3% | May 17, 2022 | Jenkins Rundeck Plugin 3.6.10 and earlier does not restrict URL schemes in Rundeck webhook submissions, resulting in a s... |
| CVE-2022-30955 | MEDIUM | 6.5 | 0.8% | May 17, 2022 | Jenkins GitLab Plugin 1.5.31 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers wit... |
| CVE-2022-30954 | MEDIUM | 6.5 | 0.8% | May 17, 2022 | Jenkins Blue Ocean Plugin 1.25.3 and earlier does not perform a permission check in several HTTP endpoints, allowing att... |
| CVE-2022-30953 | MEDIUM | 6.5 | 0.6% | May 17, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Blue Ocean Plugin 1.25.3 and earlier allows attackers to co... |
| CVE-2022-30952 | MEDIUM | 6.5 | 0.9% | May 17, 2022 | Jenkins Pipeline SCM API for Blue Ocean Plugin 1.25.3 and earlier allows attackers with Job/Configure permission to acce... |
| CVE-2022-30949 | MEDIUM | 5.3 | 1.0% | May 17, 2022 | Jenkins REPO Plugin 1.14.0 and earlier allows attackers able to configure pipelines to check out some SCM repositories s... |
| CVE-2022-30946 | MEDIUM | 4.3 | 0.6% | May 17, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier al... |
| CVE-2022-30110 | MEDIUM | 6.1 | 0.5% | May 17, 2022 | The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scrip... |
| CVE-2022-29332 | MEDIUM | 6.5 | 1.4% | May 17, 2022 | D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the F... |
| CVE-2022-1753 | MEDIUM | 4.3 | 0.9% | May 17, 2022 | A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is re... |
| CVE-2022-23670 | MEDIUM | 6.5 | 1.0% | May 16, 2022 | A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s):... |
| CVE-2022-23668 | MEDIUM | 4.9 | 0.9% | May 16, 2022 | A remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba ClearPass Policy Manager... |
| CVE-2022-23659 | MEDIUM | 6.1 | 0.5% | May 16, 2022 | A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s):... |
| CVE-2022-30126 | MEDIUM | 5.5 | 2.5% | May 16, 2022 | In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lea... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now