2022 CVE Vulnerabilities
27,563 CVEs published in 2022.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2022-45129 | HIGH | 7.5 | 1.3% | Nov 10, 2022 | Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different... |
| CVE-2022-3867 | MEDIUM | 4.3 | 0.5% | Nov 10, 2022 | HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates u... |
| CVE-2022-3866 | MEDIUM | 4.3 | 0.5% | Nov 10, 2022 | HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths... |
| CVE-2022-39398 | MEDIUM | 6.1 | 0.5% | Nov 10, 2022 | tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross... |
| CVE-2022-39396 | CRITICAL | 9.8 | 41.2% | Nov 10, 2022 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Versions prior t... |
| CVE-2022-3819 | MEDIUM | 4.3 | 0.4% | Nov 10, 2022 | An improper authorization issue in GitLab CE/EE affecting all versions from 15.0 prior to 15.3.5, 15.4 prior to 15.4.4, ... |
| CVE-2022-3818 | MEDIUM | 5.3 | 0.7% | Nov 10, 2022 | An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.... |
| CVE-2022-3793 | MEDIUM | 5.3 | 0.5% | Nov 10, 2022 | An improper authorization issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, ... |
| CVE-2022-3726 | CRITICAL | 9 | 0.8% | Nov 10, 2022 | Lack of sand-boxing of OpenAPI documents in GitLab CE/EE affecting all versions from 12.6 prior to 15.3.5, 15.4 prior to... |
| CVE-2022-3706 | MEDIUM | 4.3 | 0.5% | Nov 10, 2022 | Improper authorization in GitLab CE/EE affecting all versions from 7.14 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 ... |
| CVE-2022-3413 | MEDIUM | 4.3 | 0.5% | Nov 10, 2022 | Incorrect authorization during display of Audit Events in GitLab EE affecting all versions from 14.5 prior to 15.3.5, 15... |
| CVE-2022-39368 | HIGH | 8.2 | 0.6% | Nov 10, 2022 | Eclipse Californium is a Java implementation of RFC7252 - Constrained Application Protocol for IoT Cloud services. In ve... |
| CVE-2022-3486 | MEDIUM | 6.1 | 0.7% | Nov 9, 2022 | An open redirect vulnerability in GitLab EE/CE affecting all versions from 9.3 prior to 15.3.5, 15.4 prior to 15.4.4, an... |
| CVE-2022-3483 | MEDIUM | 5.4 | 0.7% | Nov 9, 2022 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 15.3.5, all versions start... |
| CVE-2022-3285 | HIGH | 7.5 | 0.8% | Nov 9, 2022 | Bypass of healthcheck endpoint allow list affecting all versions from 12.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15... |
| CVE-2022-3280 | MEDIUM | 6.1 | 0.5% | Nov 9, 2022 | An open redirect in GitLab CE/EE affecting all versions from 10.1 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior ... |
| CVE-2022-3265 | MEDIUM | 5.4 | 86.3% | Nov 9, 2022 | A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 1... |
| CVE-2022-39307 | MEDIUM | 5.3 | 0.7% | Nov 9, 2022 | Grafana is an open-source platform for monitoring and observability. When using the forget password on the login page, a... |
| CVE-2022-2761 | MEDIUM | 5.3 | 0.7% | Nov 9, 2022 | An information disclosure issue in GitLab CE/EE affecting all versions from 14.4 prior to 15.3.5, 15.4 prior to 15.4.4, ... |
| CVE-2022-44590 | MEDIUM | 5.4 | 0.5% | Nov 9, 2022 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in James Lao's Simple Video Embedder plugin <= 2.2 ... |
| CVE-2022-44244 | MEDIUM | 6.6 | 1.0% | Nov 9, 2022 | An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator. |
| CVE-2022-41128 | HIGH | 8.8 | 24.6% | Nov 9, 2022 | Windows Scripting Languages Remote Code Execution Vulnerability |
| CVE-2022-41125 | HIGH | 7.8 | 3.0% | Nov 9, 2022 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
| CVE-2022-41123 | HIGH | 7.8 | 0.6% | Nov 9, 2022 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
| CVE-2022-41122 | MEDIUM | 6.5 | 1.5% | Nov 9, 2022 | Microsoft SharePoint Server Spoofing Vulnerability |
Check if your code is affected by 2022 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now