2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-28153 | MEDIUM | 5.4 | 0.8% | Mar 29, 2022 | Jenkins SiteMonitor Plugin 0.6 and earlier does not escape URLs of sites to monitor in tooltips, resulting in a stored c... |
| CVE-2022-28152 | MEDIUM | 4.3 | 0.6% | Mar 29, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows att... |
| CVE-2022-28151 | MEDIUM | 4.3 | 0.7% | Mar 29, 2022 | A missing permission check in Jenkins Job and Node ownership Plugin 0.13.0 and earlier allows attackers with Item/Read p... |
| CVE-2022-28149 | MEDIUM | 5.4 | 0.8% | Mar 29, 2022 | Jenkins Job and Node ownership Plugin 0.13.0 and earlier does not escape the names of the secondary owners, resulting in... |
| CVE-2022-28148 | MEDIUM | 6.5 | 1.8% | Mar 29, 2022 | The file browser in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier may interpret some paths to fil... |
| CVE-2022-28147 | MEDIUM | 4.3 | 0.7% | Mar 29, 2022 | A missing permission check in Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with... |
| CVE-2022-28146 | MEDIUM | 6.5 | 1.8% | Mar 29, 2022 | Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to ... |
| CVE-2022-28145 | MEDIUM | 5.4 | 0.8% | Mar 29, 2022 | Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to r... |
| CVE-2022-28144 | MEDIUM | 6.5 | 0.8% | Mar 29, 2022 | Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attacke... |
| CVE-2022-28143 | MEDIUM | 6.5 | 0.5% | Mar 29, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connec... |
| CVE-2022-28141 | MEDIUM | 6.5 | 0.9% | Mar 29, 2022 | Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml fil... |
| CVE-2022-28139 | MEDIUM | 4.3 | 0.7% | Mar 29, 2022 | A missing permission check in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attackers with Overall/Read p... |
| CVE-2022-28138 | MEDIUM | 4.3 | 0.6% | Mar 29, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins RocketChat Notifier Plugin 1.4.10 and earlier allows attack... |
| CVE-2022-28137 | MEDIUM | 4.3 | 0.7% | Mar 29, 2022 | A missing permission check in Jenkins JiraTestResultReporter Plugin 165.v817928553942 and earlier allows attackers with ... |
| CVE-2022-28135 | MEDIUM | 6.5 | 0.9% | Mar 29, 2022 | Jenkins instant-messaging Plugin 1.41 and earlier stores passwords for group chats unencrypted in the global configurati... |
| CVE-2022-28134 | MEDIUM | 5.4 | 0.6% | Mar 29, 2022 | Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoin... |
| CVE-2022-28133 | MEDIUM | 5.4 | 0.8% | Mar 29, 2022 | Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth cons... |
| CVE-2022-23903 | MEDIUM | 5.4 | 0.6% | Mar 29, 2022 | A Cross Site Scripting (XSS) vulnerability exists in pearadmin pear-admin-think <=5.0.6, which allows a login account to... |
| CVE-2022-23059 | MEDIUM | 4.8 | 0.6% | Mar 29, 2022 | A Stored Cross Site Scripting (XSS) vulnerability exists in Shopizer versions 2.0 through 2.17.0 via the “Manage Images”... |
| CVE-2022-1087 | MEDIUM | 5.4 | 0.9% | Mar 29, 2022 | A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profil... |
| CVE-2022-1086 | MEDIUM | 5.4 | 0.6% | Mar 29, 2022 | A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Ma... |
| CVE-2022-1085 | MEDIUM | 6.1 | 0.6% | Mar 29, 2022 | A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is th... |
| CVE-2022-1081 | MEDIUM | 6.1 | 0.7% | Mar 29, 2022 | A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. Thi... |
| CVE-2022-1079 | MEDIUM | 6.1 | 0.5% | Mar 29, 2022 | A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are mu... |
| CVE-2022-1076 | MEDIUM | 6.1 | 0.5% | Mar 29, 2022 | A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This ... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now