2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-27505 | MEDIUM | 6.1 | 0.5% | Apr 13, 2022 | Reflected cross site scripting (XSS) |
| CVE-2022-27503 | MEDIUM | 6.1 | 0.5% | Apr 13, 2022 | Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU... |
| CVE-2022-22961 | MEDIUM | 5.3 | 0.8% | Apr 13, 2022 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an information disclosure vulnerability du... |
| CVE-2022-22959 | MEDIUM | 4.3 | 0.5% | Apr 13, 2022 | VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a cross site request forgery vulnerability... |
| CVE-2022-1337 | MEDIUM | 6.5 | 0.9% | Apr 13, 2022 | The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied imag... |
| CVE-2022-1333 | MEDIUM | 6.5 | 0.7% | Apr 13, 2022 | Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allow... |
| CVE-2022-1332 | MEDIUM | 4.3 | 0.6% | Apr 13, 2022 | One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authe... |
| CVE-2022-1280 | MEDIUM | 6.3 | 0.3% | Apr 13, 2022 | A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a r... |
| CVE-2022-0221 | MEDIUM | 5.5 | 0.9% | Apr 13, 2022 | A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information d... |
| CVE-2022-27256 | MEDIUM | 6.1 | 1.4% | Apr 13, 2022 | A PHP Local File inclusion vulnerability in the Redbasic theme for Hubzilla before version 7.2 allows remote attackers t... |
| CVE-2022-26643 | MEDIUM | 5.3 | 1.2% | Apr 13, 2022 | An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application. |
| CVE-2022-26144 | MEDIUM | 6.1 | 0.8% | Apr 13, 2022 | An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary ... |
| CVE-2022-24308 | MEDIUM | 5.5 | 0.2% | Apr 13, 2022 | Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to ob... |
| CVE-2022-27475 | MEDIUM | 6.1 | 0.7% | Apr 13, 2022 | Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when... |
| CVE-2022-22279 | MEDIUM | 4.9 | 1.0% | Apr 13, 2022 | A post-authentication arbitrary file read vulnerability impacting end-of-life Secure Remote Access (SRA) products and ol... |
| CVE-2022-26589 | MEDIUM | 6.5 | 0.5% | Apr 13, 2022 | A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages. |
| CVE-2022-1330 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss . |
| CVE-2022-0436 | MEDIUM | 5.5 | 0.6% | Apr 12, 2022 | Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2. |
| CVE-2022-29052 | MEDIUM | 4.3 | 0.7% | Apr 12, 2022 | Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files o... |
| CVE-2022-29051 | MEDIUM | 4.3 | 0.7% | Apr 12, 2022 | Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permissi... |
| CVE-2022-29049 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not validate the names of promotions ... |
| CVE-2022-29048 | MEDIUM | 4.3 | 1.7% | Apr 12, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Subversion Plugin 2.15.3 and earlier allows attackers to co... |
| CVE-2022-29047 | MEDIUM | 5.3 | 1.1% | Apr 12, 2022 | Jenkins Pipeline: Shared Groovy Libraries Plugin 564.ve62a_4eb_b_e039 and earlier, except 2.21.3, allows attackers able ... |
| CVE-2022-29046 | MEDIUM | 5.4 | 2.3% | Apr 12, 2022 | Jenkins Subversion Plugin 2.15.3 and earlier does not escape the name and description of List Subversion tags (and more)... |
| CVE-2022-29045 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins promoted builds Plugin 873.v6149db_d64130 and earlier, except 3.10.1, does not escape the name and description o... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now