2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-0763 | MEDIUM | 4.8 | 0.6% | Feb 26, 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3. |
| CVE-2022-0762 | MEDIUM | 4.3 | 0.6% | Feb 26, 2022 | Incorrect Authorization in GitHub repository microweber/microweber prior to 1.3. |
| CVE-2022-24710 | MEDIUM | 5.4 | 0.7% | Feb 25, 2022 | Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutrali... |
| CVE-2022-25261 | MEDIUM | 6.1 | 0.5% | Feb 25, 2022 | JetBrains TeamCity before 2021.2.2 was vulnerable to reflected XSS. |
| CVE-2022-25259 | MEDIUM | 6.1 | 0.5% | Feb 25, 2022 | JetBrains Hub before 2021.1.14276 was vulnerable to reflected XSS. |
| CVE-2022-24347 | MEDIUM | 5.4 | 0.6% | Feb 25, 2022 | JetBrains YouTrack before 2021.4.36872 was vulnerable to stored XSS via a project icon. |
| CVE-2022-24344 | MEDIUM | 5.4 | 0.6% | Feb 25, 2022 | JetBrains YouTrack before 2021.4.31698 was vulnerable to stored XSS on the Notification templates page. |
| CVE-2022-24343 | MEDIUM | 4.3 | 0.6% | Feb 25, 2022 | In JetBrains YouTrack before 2021.4.31698, a custom logo could be set by a user who has read-only permissions. |
| CVE-2022-24339 | MEDIUM | 5.4 | 0.4% | Feb 25, 2022 | JetBrains TeamCity before 2021.2.1 was vulnerable to stored XSS. |
| CVE-2022-24338 | MEDIUM | 6.1 | 0.5% | Feb 25, 2022 | JetBrains TeamCity before 2021.2.1 was vulnerable to reflected XSS. |
| CVE-2022-24337 | MEDIUM | 6.5 | 0.7% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2, health items of pull requests were shown to users who lacked appropriate permission... |
| CVE-2022-24336 | MEDIUM | 5.3 | 0.7% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.1, an unauthenticated attacker can cancel running builds via an XML-RPC request to t... |
| CVE-2022-24334 | MEDIUM | 5.3 | 0.7% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server. |
| CVE-2022-24333 | MEDIUM | 6.5 | 0.7% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible. |
| CVE-2022-24332 | MEDIUM | 5.3 | 0.6% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie. |
| CVE-2022-24330 | MEDIUM | 6.1 | 0.6% | Feb 25, 2022 | In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. |
| CVE-2022-24329 | MEDIUM | 5.3 | 2.2% | Feb 25, 2022 | In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects. |
| CVE-2022-24328 | MEDIUM | 6.5 | 0.8% | Feb 25, 2022 | In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS. |
| CVE-2022-24612 | MEDIUM | 5.4 | 0.5% | Feb 25, 2022 | An authenticated user can upload an XML file containing an XSS via the ITSM module of EyesOfNetwork 5.3.11, resulting in... |
| CVE-2022-24594 | MEDIUM | 5.3 | 0.8% | Feb 25, 2022 | In waline 1.6.1, an attacker can submit messages using X-Forwarded-For to forge any IP address. |
| CVE-2022-25327 | MEDIUM | 5.5 | 0.1% | Feb 25, 2022 | The PAM module for fscrypt doesn't adequately validate fscrypt metadata files, allowing users to create malicious metada... |
| CVE-2022-25326 | MEDIUM | 5.5 | 0.1% | Feb 25, 2022 | fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged... |
| CVE-2022-0247 | MEDIUM | 5.5 | 0.1% | Feb 25, 2022 | An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker co... |
| CVE-2022-24948 | MEDIUM | 6.1 | 2.2% | Feb 25, 2022 | A carefully crafted user preferences for submission could trigger an XSS vulnerability on Apache JSPWiki, related to the... |
| CVE-2022-0746 | MEDIUM | 4.3 | 0.9% | Feb 25, 2022 | Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0. |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now