2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-23189 | MEDIUM | 5.5 | 1.7% | Feb 16, 2022 | Adobe Illustrator versions 25.4.3 (and earlier) and 26.0.2 (and earlier) are affected by a Null pointer dereference vuln... |
| CVE-2022-0617 | MEDIUM | 5.5 | 0.5% | Feb 16, 2022 | A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf... |
| CVE-2022-0614 | MEDIUM | 5.5 | 0.9% | Feb 16, 2022 | Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2. |
| CVE-2022-0613 | MEDIUM | 6.5 | 1.6% | Feb 16, 2022 | Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8. |
| CVE-2022-0612 | MEDIUM | 5.4 | 0.6% | Feb 16, 2022 | Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v. |
| CVE-2022-23643 | MEDIUM | 6.5 | 0.8% | Feb 15, 2022 | Sourcegraph is a code search and navigation engine. Sourcegraph versions 3.35 and 3.36 reintroduced a previously fixed s... |
| CVE-2022-23641 | MEDIUM | 6.5 | 1.1% | Feb 15, 2022 | Discourse is an open source discussion platform. In versions prior to 2.8.1 in the `stable` branch, 2.9.0.beta2 in the `... |
| CVE-2022-24589 | MEDIUM | 6.1 | 0.8% | Feb 15, 2022 | Burden v3.0 was discovered to contain a stored cross-site scripting (XSS) in the Add Category function. This vulnerabili... |
| CVE-2022-25210 | MEDIUM | 6.5 | 0.8% | Feb 15, 2022 | Jenkins Convertigo Mobile Platform Plugin 1.1 and earlier uses static fields to store job configuration information, all... |
| CVE-2022-25204 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the cont... |
| CVE-2022-25203 | MEDIUM | 5.4 | 0.8% | Feb 15, 2022 | Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting (XSS)... |
| CVE-2022-25202 | MEDIUM | 4.8 | 0.6% | Feb 15, 2022 | Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting i... |
| CVE-2022-25201 | MEDIUM | 6.5 | 0.7% | Feb 15, 2022 | Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission ... |
| CVE-2022-25197 | MEDIUM | 6.5 | 0.8% | Feb 15, 2022 | Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to rea... |
| CVE-2022-25196 | MEDIUM | 5.4 | 0.7% | Feb 15, 2022 | Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameter... |
| CVE-2022-25195 | MEDIUM | 4.3 | 0.5% | Feb 15, 2022 | A missing permission check in Jenkins autonomiq Plugin 1.15 and earlier allows attackers with Overall/Read permission to... |
| CVE-2022-25193 | MEDIUM | 6.5 | 0.9% | Feb 15, 2022 | Missing permission checks in Jenkins Snow Commander Plugin 1.10 and earlier allow attackers with Overall/Read permission... |
| CVE-2022-25191 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Jenkins Agent Server Parameter Plugin 1.0 and earlier does not escape parameter names of agent server parameters, result... |
| CVE-2022-25190 | MEDIUM | 4.3 | 0.7% | Feb 15, 2022 | A missing permission check in Jenkins Conjur Secrets Plugin 1.0.11 and earlier allows attackers with Overall/Read permis... |
| CVE-2022-25189 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Jenkins Custom Checkbox Parameter Plugin 1.1 and earlier does not escape parameter names of custom checkbox parameters, ... |
| CVE-2022-25188 | MEDIUM | 4.3 | 1.2% | Feb 15, 2022 | Jenkins Fortify Plugin 20.2.34 and earlier does not sanitize the appName and appVersion parameters of its Pipeline steps... |
| CVE-2022-25187 | MEDIUM | 6.5 | 1.0% | Feb 15, 2022 | Jenkins Support Core Plugin 2.79 and earlier does not redact some sensitive information in the support bundle. |
| CVE-2022-25186 | MEDIUM | 6.5 | 0.8% | Feb 15, 2022 | Jenkins HashiCorp Vault Plugin 3.8.0 and earlier implements functionality that allows agent processes to retrieve any Va... |
| CVE-2022-25185 | MEDIUM | 5.4 | 0.6% | Feb 15, 2022 | Jenkins Generic Webhook Trigger Plugin 1.81 and earlier does not escape the build cause when using the webhook, resultin... |
| CVE-2022-25184 | MEDIUM | 6.5 | 0.9% | Feb 15, 2022 | Jenkins Pipeline: Build Step Plugin 2.15 and earlier reveals password parameter default values when generating a pipelin... |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now