2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-29044 | MEDIUM | 5.4 | 0.6% | Apr 12, 2022 | Jenkins Node and Label parameter Plugin 1.10.3 and earlier does not escape the name and description of Node and Label pa... |
| CVE-2022-29043 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins Mask Passwords Plugin 3.0 and earlier does not escape the name and description of Non-Stored Password parameters... |
| CVE-2022-29042 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins Job Generator Plugin 1.22 and earlier does not escape the name and description of Generator Parameter and Genera... |
| CVE-2022-29041 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins Jira Plugin 3.7 and earlier, except 3.6.1, does not escape the name and description of Jira Issue and Jira Relea... |
| CVE-2022-29040 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins Git Parameter Plugin 0.9.15 and earlier does not escape the name and description of Git parameters on views disp... |
| CVE-2022-29039 | MEDIUM | 5.4 | 0.8% | Apr 12, 2022 | Jenkins Gerrit Trigger Plugin 2.35.2 and earlier does not escape the name and description of Base64 Encoded String param... |
| CVE-2022-29038 | MEDIUM | 5.4 | 0.6% | Apr 12, 2022 | Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the name and description of Exte... |
| CVE-2022-29037 | MEDIUM | 5.4 | 0.6% | Apr 12, 2022 | Jenkins CVS Plugin 2.19 and earlier does not escape the name and description of CVS Symbolic Name parameters on views di... |
| CVE-2022-29036 | MEDIUM | 5.4 | 81.5% | Apr 12, 2022 | Jenkins Credentials Plugin 1111.v35a_307992395 and earlier, except 1087.1089.v2f1b_9a_b_040e4, 1074.1076.v39c30cecb_0e2,... |
| CVE-2022-27419 | MEDIUM | 5.5 | 0.6% | Apr 12, 2022 | rtl_433 21.12 was discovered to contain a stack overflow in the function acurite_00275rm_decode at /devices/acurite.c. T... |
| CVE-2022-23163 | MEDIUM | 5.5 | 0.2% | Apr 12, 2022 | Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious... |
| CVE-2022-23160 | MEDIUM | 4.3 | 0.5% | Apr 12, 2022 | Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An... |
| CVE-2022-23159 | MEDIUM | 6.5 | 0.6% | Apr 12, 2022 | Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An a... |
| CVE-2022-22560 | MEDIUM | 5.5 | 0.2% | Apr 12, 2022 | Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the c... |
| CVE-2022-22550 | MEDIUM | 6.7 | 0.2% | Apr 12, 2022 | Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local atta... |
| CVE-2022-28795 | MEDIUM | 6.5 | 1.0% | Apr 12, 2022 | A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visi... |
| CVE-2022-28770 | MEDIUM | 6.1 | 0.8% | Apr 12, 2022 | Due to insufficient input validation, SAPUI5 library(vbm) - versions 750, 753, 754, 755, 75, allows an unauthenticated a... |
| CVE-2022-28216 | MEDIUM | 6.1 | 0.8% | Apr 12, 2022 | SAP BusinessObjects Business Intelligence Platform (BI Workspace) - version 420, is susceptible to a Cross-Site Scriptin... |
| CVE-2022-28215 | MEDIUM | 4.7 | 0.8% | Apr 12, 2022 | SAP NetWeaver ABAP Server and ABAP Platform - versions 740, 750, 787, allows an unauthenticated attacker to redirect use... |
| CVE-2022-27671 | MEDIUM | 6.5 | 1.2% | Apr 12, 2022 | A CSRF token visible in the URL may possibly lead to information disclosure vulnerability. |
| CVE-2022-27670 | MEDIUM | 6.5 | 0.9% | Apr 12, 2022 | SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywh... |
| CVE-2022-27655 | MEDIUM | 6.5 | 1.1% | Apr 12, 2022 | When a user opens a manipulated Universal 3D (.u3d, 3difr.x3d) received from untrusted sources in SAP 3D Visual Enterpri... |
| CVE-2022-27654 | MEDIUM | 6.5 | 1.1% | Apr 12, 2022 | When a user opens a manipulated Photoshop Document (.psd, 2d.x3d) received from untrusted sources in SAP 3D Visual Enter... |
| CVE-2022-26109 | MEDIUM | 6.5 | 0.9% | Apr 12, 2022 | When a user opens a manipulated Portable Document Format (.pdf, PDFView.x3d) received from untrusted sources in SAP 3D V... |
| CVE-2022-26108 | MEDIUM | 6.5 | 0.8% | Apr 12, 2022 | When a user opens a manipulated Picture Exchange (.pcx, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterpr... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now