2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-24072 | MEDIUM | 6.1 | 0.6% | Mar 17, 2022 | The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into th... |
| CVE-2022-25516 | MEDIUM | 6.5 | 0.9% | Mar 17, 2022 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function stbtt__find_table at stb_truetype... |
| CVE-2022-25515 | MEDIUM | 6.5 | 0.9% | Mar 17, 2022 | stb_truetype.h v1.26 was discovered to contain a heap-buffer-overflow via the function ttULONG() at stb_truetype.h. NOTE... |
| CVE-2022-26295 | MEDIUM | 5.4 | 0.6% | Mar 16, 2022 | A stored cross-site scripting (XSS) vulnerability in /ptms/?page=user of Online Project Time Management System v1.0 allo... |
| CVE-2022-24728 | MEDIUM | 5.4 | 1.2% | Mar 16, 2022 | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HT... |
| CVE-2022-25248 | MEDIUM | 5.3 | 0.9% | Mar 16, 2022 | When connecting to a certain port Axeda agent (All versions) and Axeda Desktop Server for Windows (All versions) supplie... |
| CVE-2022-23234 | MEDIUM | 5.5 | 0.2% | Mar 16, 2022 | SnapCenter versions prior to 4.5 are susceptible to a vulnerability which could allow a local authenticated attacker to ... |
| CVE-2022-0959 | MEDIUM | 6.5 | 0.9% | Mar 16, 2022 | A malicious, but authorised and authenticated user can construct an HTTP request using their existing CSRF token and ses... |
| CVE-2022-0986 | MEDIUM | 6.1 | 0.9% | Mar 16, 2022 | Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11. |
| CVE-2022-0705 | MEDIUM | 5.4 | 0.5% | Mar 16, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. |
| CVE-2022-21946 | MEDIUM | 5.3 | 0.3% | Mar 16, 2022 | A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUS... |
| CVE-2022-21945 | MEDIUM | 6.1 | 0.2% | Mar 16, 2022 | A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen a... |
| CVE-2022-0704 | MEDIUM | 5.4 | 1.3% | Mar 16, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. |
| CVE-2022-0911 | MEDIUM | 5.4 | 0.8% | Mar 16, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0. |
| CVE-2022-27225 | MEDIUM | 6.5 | 0.5% | Mar 16, 2022 | Gradle Enterprise before 2021.4.3 relies on cleartext data transmission in some situations. It uses Keycloak for identit... |
| CVE-2022-25497 | MEDIUM | 5.3 | 3.6% | Mar 15, 2022 | CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function. |
| CVE-2022-25493 | MEDIUM | 6.1 | 0.8% | Mar 15, 2022 | HMS v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via treatmentrecord.php. |
| CVE-2022-25489 | MEDIUM | 5.4 | 1.5% | Mar 15, 2022 | Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /w... |
| CVE-2022-27218 | MEDIUM | 4.3 | 0.7% | Mar 15, 2022 | Jenkins incapptic connect uploader Plugin 1.15 and earlier stores tokens unencrypted in job config.xml files on the Jenk... |
| CVE-2022-27217 | MEDIUM | 6.5 | 0.9% | Mar 15, 2022 | Jenkins Vmware vRealize CodeStream Plugin 1.2 and earlier stores passwords unencrypted in job config.xml files on the Je... |
| CVE-2022-27216 | MEDIUM | 6.5 | 0.9% | Mar 15, 2022 | Jenkins dbCharts Plugin 0.5.2 and earlier stores JDBC connection passwords unencrypted in its global configuration file ... |
| CVE-2022-27215 | MEDIUM | 4.3 | 0.7% | Mar 15, 2022 | A missing permission check in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers with Overall/Read permiss... |
| CVE-2022-27214 | MEDIUM | 4.3 | 0.5% | Mar 15, 2022 | A cross-site request forgery (CSRF) vulnerability in Jenkins Release Helper Plugin 1.3.3 and earlier allows attackers to... |
| CVE-2022-27213 | MEDIUM | 5.4 | 0.8% | Mar 15, 2022 | Jenkins Environment Dashboard Plugin 1.1.10 and earlier does not escape the Environment order and the Component order co... |
| CVE-2022-27212 | MEDIUM | 5.4 | 0.8% | Mar 15, 2022 | Jenkins List Git Branches Parameter Plugin 0.0.9 and earlier does not escape the name of the 'List Git branches (and mor... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now