2022 CVE Vulnerabilities

27,632 CVEs published in 2022.

CVE IDSeverityCVSSDescription
CVE-2022-30947HIGH7.5Jenkins Git Plugin 4.11.1 and earlier allows attackers able to configure pipelines to check out some SCM repositories st...
CVE-2022-30946MEDIUM4.3A cross-site request forgery (CSRF) vulnerability in Jenkins Script Security Plugin 1158.v7c1b_73a_69a_08 and earlier al...
CVE-2022-30945HIGH8.5Jenkins Pipeline: Groovy Plugin 2689.v434009a_31b_f1 and earlier allows loading any Groovy source files on the classpath...
CVE-2022-30110MEDIUM6.1The file preview functionality in Jirafeau < 4.4.0, which is enabled by default, could be exploited for cross site scrip...
CVE-2022-29332MEDIUM6.5D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the F...
CVE-2022-1711HIGH7.5Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.
CVE-2022-1723HIGH7.5Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.
CVE-2022-26650HIGH7.5In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realDa...
CVE-2022-1753MEDIUM4.3A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is re...
CVE-2022-23670MEDIUM6.5A remote authenticated information disclosure vulnerability was discovered in Aruba ClearPass Policy Manager version(s):...
CVE-2022-23668MEDIUM4.9A remote authenticated server-side request forgery (ssrf) vulnerability was discovered in Aruba ClearPass Policy Manager...
CVE-2022-23667HIGH7.2A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-1587CRITICAL9.1An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the...
CVE-2022-1586CRITICAL9.1An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of...
CVE-2022-23666CRITICAL9.1A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-23665CRITICAL9.1A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-23664CRITICAL9.1A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-23663CRITICAL9.1A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-23662CRITICAL9.1A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-23661CRITICAL9.1A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10...
CVE-2022-23660CRITICAL10A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and bel...
CVE-2022-23659MEDIUM6.1A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager version(s):...
CVE-2022-23658CRITICAL10A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and bel...
CVE-2022-23657CRITICAL10A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and bel...
CVE-2022-1731CRITICAL9.8Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO...

Check if your code is affected by 2022 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now