CVE-2022 records published in January 2022
This page lists the 736 CVE-2022 records published in January 2022, newest first. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists six of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 719.6% of these records
- Listed in CISA KEV
- 60.8% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 172.3% of these records
- Exploit code
- 405.4% of these records
- Actionable vendor fix
- 66289.9% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in January 2022 have had from about 57 months to about 58 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-24266 | Cuppacms SQL injection | 7.5v3.1 | 6.4% | 2022-01-31 | Nuclei |
| CVE-2022-24265 | Cuppacms SQL injection | 7.5v3.1 | 6.7% | 2022-01-31 | Nuclei |
| CVE-2022-24264 | Cuppacms SQL injection | 7.5v3.1 | 6.7% | 2022-01-31 | Nuclei |
| CVE-2022-24263 | PHPGurukul Hospital Management System SQL injection | 9.8v3.1 | 8.2% | 2022-01-31 | Exploit code |
| CVE-2022-24130 | Invisible-island Xterm buffer overflow | 5.5v3.1 | 1.7% | 2022-01-31 | Fix |
| CVE-2022-23872 | emlog cross-site scripting | 4.8v3.1 | 0.6% | 2022-01-31 | |
| CVE-2022-23409 | ethercreative logs path traversal | 4.9v3.1 | 13.8% | 2022-01-31 | Exploit codeFix |
| CVE-2022-21659 | Observable response discrepancy in Flask-AppBuilder | 5.3CNA v3.1 | 1.0% | 2022-01-31 | Fix |
| CVE-2022-0414 | Improper validation of specified quantity in input in Dolibarr/Dolibarr | 4.3v3.1 | 0.9% | 2022-01-31 | Fix |
| CVE-2022-0286 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.5% | 2022-01-31 | Fix |
| CVE-2022-24032 | Adenza Axiomsl Controllerview observable discrepancy | 5.3v3.1 | 1.0% | 2022-01-30 | |
| CVE-2022-22919 | Adenza Axiomsl Controllerview open redirect | 6.1v3.1 | 0.6% | 2022-01-30 | |
| CVE-2022-0413 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.4% | 2022-01-30 | Fix |
| CVE-2022-0408 | Stack-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.5% | 2022-01-30 | Fix |
| CVE-2022-0407 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.2% | 2022-01-30 | Fix |
| CVE-2022-0339 | Server-side request forgery (SSRF) in janeczku/Calibre-Web | 9.8v3.1 | 1.0% | 2022-01-30 | Fix |
| CVE-2022-0273 | Improper access control in janeczku/Calibre-Web | 6.5v3.1 | 0.7% | 2022-01-30 | Fix |
| CVE-2022-24124 | SQL injection in Casdoor | 7.5v3.1 | 55.3% | 2022-01-29 | NucleiExploit codeFix |
| CVE-2022-24123 | MarkText cross-site scripting | 9.0v3.1 | 1.9% | 2022-01-29 | |
| CVE-2022-24122 | Linux kernel use-after-free | 7.8v3.1 | 1.0% | 2022-01-29 | Exploit codeFix |
| CVE-2022-24071 | NAVER Whale browser incorrect use of privileged APIs | 4.3v3.1 | 0.7% | 2022-01-28 | Fix |
| CVE-2022-23979 | Ultimate Reviews WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-01-28 | Fix |
| CVE-2022-23889 | YzmCMS uncontrolled recursion | 5.3v3.1 | 1.1% | 2022-01-28 | |
| CVE-2022-23888 | YzmCMS cross-site request forgery | 8.8v3.1 | 0.8% | 2022-01-28 | |
| CVE-2022-23887 | YzmCMS cross-site request forgery | 6.5v3.1 | 0.7% | 2022-01-28 | |
| CVE-2022-23863 | Zoho ManageEngine Desktop Central password change function vulnerability | 6.5v3.1 | 1.9% | 2022-01-28 | Fix |
| CVE-2022-23727 | LG webOS some privilege escalation | 7.8v3.1 | 0.2% | 2022-01-28 | Fix |
| CVE-2022-23599 | Plone cross-site scripting and open redirect in Products.ATContentTypes | 4.3CNA v3.1 | 0.8% | 2022-01-28 | Fix |
| CVE-2022-23598 | Reflected XSS vulnerability when rendering error messages in laminas-form | 6.1CNA v3.1 | 1.0% | 2022-01-28 | Fix |
| CVE-2022-23456 | HP Support Assistant arbitrary file deletion | 5.5NVD v3.1 | 0.3% | 2022-01-28 | Fix |
| CVE-2022-23098 | Intel ConnMan infinite loop | 7.5v3.1 | 2.5% | 2022-01-28 | Fix |
| CVE-2022-23097 | Intel ConnMan out-of-bounds read | 9.1v3.1 | 2.4% | 2022-01-28 | Fix |
| CVE-2022-23096 | Intel ConnMan out-of-bounds read | 9.1v3.1 | 2.6% | 2022-01-28 | Fix |
| CVE-2022-22994 | Western Digital My Cloud internet connectivity check insufficient verification of data authenticity | 8.8CNA v3.1 | 1.9% | 2022-01-28 | Fix |
| CVE-2022-22993 | Limited server-side request forgery vulnerability on Western Digital My Cloud devices | 7.8CNA v3.1 | 0.8% | 2022-01-28 | Fix |
| CVE-2022-22992 | Command injection remote code execution vulnerability on Western Digital My Cloud devices | 7.8CNA v3.1 | 2.3% | 2022-01-28 | Fix |
| CVE-2022-22938 | VMware Workstation denial of service | 6.5v3.1 | 0.4% | 2022-01-28 | Fix |
| CVE-2022-22868 | gibbonedu gibbon cross-site scripting | 4.8v3.1 | 0.9% | 2022-01-28 | |
| CVE-2022-22791 | Synel eHarmony Authenticated Blind and stored XSS | 5.4v3.1 | 0.4% | 2022-01-28 | |
| CVE-2022-22790 | Synel eHarmony directory traversal | 7.5v3.1 | 1.0% | 2022-01-28 | |
| CVE-2022-22294 | Zfaka SQL injection | 9.8v3.1 | 1.1% | 2022-01-28 | |
| CVE-2022-21801 | Reolink RLC-410W netserver recv_command functionality denial of service | 7.5v3.1 | 1.1% | 2022-01-28 | |
| CVE-2022-21796 | Reolink RLC-410W netserver parse_command_list functionality memory corruption | 8.2NVD v3.1 | 1.1% | 2022-01-28 | |
| CVE-2022-21721 | DOS vulnerability in next.js | 5.9CNA v3.1 | 2.2% | 2022-01-28 | Fix |
| CVE-2022-21720 | SQL injection using custom CSS administration form in GLPI | 4.9CNA v3.1 | 1.1% | 2022-01-28 | Fix |
| CVE-2022-21719 | Reflected XSS using reload button in GLPI | 6.1CNA v3.1 | 1.0% | 2022-01-28 | Fix |
| CVE-2022-21236 | Reolink RLC-410W information disclosure | 7.5v3.1 | 1.8% | 2022-01-28 | |
| CVE-2022-21217 | Reolink RLC-410W device TestEmail functionality out-of-bounds write | 9.8v3.1 | 1.2% | 2022-01-28 | |
| CVE-2022-21199 | Reolink RLC-410W hard-coded cryptographic key | 5.9NVD v3.1 | 0.9% | 2022-01-28 | |
| CVE-2022-21134 | Reolink RLC-410W improper signature verification | 7.5v3.1 | 0.9% | 2022-01-28 | |
| CVE-2022-0395 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.6% | 2022-01-28 | Fix |
| CVE-2022-0394 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.5% | 2022-01-28 | Fix |
| CVE-2022-0393 | Out-of-bounds read in Vim/Vim | 7.1v3.1 | 1.4% | 2022-01-28 | Fix |
| CVE-2022-0392 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.5% | 2022-01-28 | Fix |
| CVE-2022-0352 | Cross-site scripting (XSS) Reflected in janeczku/Calibre-Web | 6.1NVD v3.1 | 0.9% | 2022-01-28 | Fix |
| CVE-2022-23181 | Apache Tomcat local privilege escalation with FileStore | 7.0v3.1 | 0.7% | 2022-01-27 | Fix |
| CVE-2022-22828 | Synametrics Synaman insecure direct object reference | 7.5v3.1 | 2.1% | 2022-01-27 | Exploit codeFix |
| CVE-2022-21723 | Out-of-bounds read in multipart parsing in PJSIP | 9.1CNA v3.1 | 4.4% | 2022-01-27 | Fix |
| CVE-2022-21722 | Potential out-of-bound read during RTP/RTCP parsing in PJSIP | 9.1CNA v3.1 | 2.3% | 2022-01-27 | Fix |
| CVE-2022-0387 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.6% | 2022-01-27 | Fix |
| CVE-2022-0372 | Cross-site scripting (XSS) Stored in crater-invoice/crater | 5.4NVD v3.1 | 0.6% | 2022-01-27 | Fix |
| CVE-2022-0370 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4NVD v3.1 | 0.8% | 2022-01-27 | Fix |
| CVE-2022-0348 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.6% | 2022-01-27 | Fix |
| CVE-2022-23993 | pfSense Plus cross-site scripting | 6.1v3.1 | 1.5% | 2022-01-26 | |
| CVE-2022-23990 | libexpat integer overflow | 7.5NVD v3.1 | 4.7% | 2022-01-26 | Exploit codeFix |
| CVE-2022-23968 | Xerox Versalink B400 infinite loop | 7.5v3.1 | 1.9% | 2022-01-26 | |
| CVE-2022-23959 | varnish-software Varnish Cache HTTP request smuggling | 9.1v3.1 | 2.0% | 2022-01-26 | Fix |
| CVE-2022-22932 | Apache Karaf path traversal flaws | 5.3v3.1 | 2.8% | 2022-01-26 | Exploit codeFix |
| CVE-2022-22852 | Hospitals Patient Records Management System stored cross-site scripting | 5.4v3.1 | 0.8% | 2022-01-26 | Exploit code |
| CVE-2022-22851 | Hospitals Patient Records Management System stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-01-26 | Exploit code |
| CVE-2022-22850 | Hospitals Patient Records Management System stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2022-01-26 | |
| CVE-2022-21944 | Watchman: Chown in watchman@.socket unit allows symlink attack | 7.8CNA v3.1 | 0.3% | 2022-01-26 | Fix |
| CVE-2022-21686 | Server Side Twig template injection in PrestaShop | 9.0CNA v3.1 | 1.8% | 2022-01-26 | Fix |
| CVE-2022-0379 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4NVD v3.1 | 0.9% | 2022-01-26 | Fix |
| CVE-2022-0378 | Cross-site scripting (XSS) Reflected in microweber/microweber | 5.4NVD v3.1 | 3.9% | 2022-01-26 | NucleiFix |
| CVE-2022-0375 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 4.8v3.1 | 0.7% | 2022-01-26 | Fix |
| CVE-2022-0374 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.7% | 2022-01-26 | Fix |
| CVE-2022-0368 | Out-of-bounds read in Vim/Vim | 7.8v3.1 | 1.5% | 2022-01-26 | Fix |
| CVE-2022-0362 | SQL injection in star7th/ShowDoc | 9.8v3.1 | 1.5% | 2022-01-26 | Fix |
| CVE-2022-0361 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.6% | 2022-01-26 | Fix |
| CVE-2022-0359 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.3% | 2022-01-26 | Fix |
| CVE-2022-0355 | Improper removal of sensitive information before storage or transfer in feross/Simple-get | 7.5v3.1 | 2.0% | 2022-01-26 | Fix |
| CVE-2022-0251 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4NVD v3.1 | 0.7% | 2022-01-26 | Fix |
| CVE-2022-0203 | Improper access control in crater-invoice/crater | 5.3NVD v3.1 | 1.2% | 2022-01-26 | Fix |
| CVE-2022-23945 | Apache ShenYu missing authentication allows gateway registration | 7.5v3.1 | 3.8% | 2022-01-25 | Fix |
| CVE-2022-23944 | Apache ShenYu improper access control | 9.1v3.1 | 79.0% | 2022-01-25 | NucleiFix |
| CVE-2022-23935 | Exiftool OS command injection | 7.8v3.1 | 7.6% | 2022-01-25 | Exploit codeFix |
| CVE-2022-23258 | Microsoft Edge for Android spoofing | 4.3CNA v3.1 | 1.6% | 2022-01-25 | Fix |
| CVE-2022-23223 | Apache ShenYu password leakage | 7.5v3.1 | 4.3% | 2022-01-25 | Fix |
| CVE-2022-23035 | Xen incomplete cleanup | 4.6v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2022-23034 | Xen integer underflow | 5.5v3.1 | 0.3% | 2022-01-25 | Fix |
| CVE-2022-23033 | Xen improper resource release | 7.8v3.1 | 0.3% | 2022-01-25 | Fix |
| CVE-2022-23032 | BIG-IP Edge Client origin validation error | 5.3v3.1 | 0.4% | 2022-01-25 | Fix |
| CVE-2022-23031 | BIG-IP FPS XML external entity injection | 4.9v3.1 | 0.8% | 2022-01-25 | Fix |
| CVE-2022-23030 | BIG-IP resource exhaustion | 5.3v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23029 | BIG-IP time-of-check time-of-use race condition | 5.3v3.1 | 0.7% | 2022-01-25 | Fix |
| CVE-2022-23028 | BIG-IP AFM incorrect calculation | 5.3v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23027 | BIG-IP incorrect comparison | 5.3v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23026 | BIG-IP ASM and Advanced WAF unrestricted file upload | 4.3v3.1 | 0.7% | 2022-01-25 | Fix |
| CVE-2022-23025 | BIG-IP null pointer dereference | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23024 | BIG-IP AFM resource exhaustion | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23023 | BIG-IP, BIG-IQ resource exhaustion | 6.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23022 | BIG-IP null pointer dereference | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23021 | BIG-IP null pointer dereference | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23020 | BIG-IP null pointer dereference | 7.5v3.1 | 1.0% | 2022-01-25 | Fix |
| CVE-2022-23019 | BIG-IP improper input validation | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23018 | BIG-IP AFM improper exception handling | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23017 | BIG-IP null pointer dereference | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23016 | BIG-IP null pointer dereference | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23015 | BIG-IP resource exhaustion | 7.5v3.1 | 0.6% | 2022-01-25 | Fix |
| CVE-2022-23014 | BIG-IP APM improper input validation | 6.5v3.1 | 0.8% | 2022-01-25 | Fix |
| CVE-2022-23013 | BIG-IP DNS and GTM cross-site scripting | 8.8v3.1 | 0.8% | 2022-01-25 | Fix |
| CVE-2022-23012 | F5 BIG-IP HTTP/2 profile double free | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23011 | BIG-IP incorrect calculation | 7.5v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-23010 | BIG-IP improper resource release | 7.5v3.1 | 1.0% | 2022-01-25 | Fix |
| CVE-2022-23009 | BIG-IQ Centralized Management incorrect authorization | 7.2v3.1 | 1.1% | 2022-01-25 | Fix |
| CVE-2022-23008 | NGINX Controller API Management code injection | 5.4v3.1 | 0.5% | 2022-01-25 | Fix |
| CVE-2022-22789 | Charactell FormStorm Enterprise Account Take over | 7.8v3.1 | 0.2% | 2022-01-25 | |
| CVE-2022-21697 | jupyterhub jupyter-server-proxy SSRF vulnerability (requires authentication) | 6.3CNA v3.1 | 1.1% | 2022-01-25 | Fix |
| CVE-2022-0351 | Access of memory location before start of buffer in Vim/Vim | 7.8NVD v3.1 | 0.6% | 2022-01-25 | Fix |
| CVE-2022-0338 | Insertion of sensitive information into log file in delgan/Loguru | 4.3v3.1 | 0.8% | 2022-01-25 | Fix |
| CVE-2022-0335 | Cross-site request forgery in Moodle | 8.8NVD v3.1 | 0.6% | 2022-01-25 | Fix |
| CVE-2022-0334 | Insufficient user authorization in Moodle | 4.3NVD v3.1 | 0.7% | 2022-01-25 | Fix |
| CVE-2022-0333 | Insufficient user authorization in Moodle | 3.8NVD v3.1 | 0.6% | 2022-01-25 | Fix |
| CVE-2022-0332 | SQL injection in Moodle | 9.8NVD v3.1 | 44.9% | 2022-01-25 | Exploit codeFix |
| CVE-2022-0270 | Improper header sanitization in bored-agent causes escalation of privilege | 8.8CNA v3.1 | 0.9% | 2022-01-25 | Fix |
| CVE-2022-0268 | Cross-site scripting (XSS) Stored in getgrav/grav | 5.4v3.1 | 1.4% | 2022-01-25 | Fix |
| CVE-2022-23858 | Starwindsoftware Command Center privilege escalation | 8.8v3.1 | 1.1% | 2022-01-24 | Fix |
| CVE-2022-23857 | SQL injection in github.com/navidrome/navidrome | 6.5v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2022-23856 | Saviynt Enterprise Identity Cloud insecure direct object reference | 5.3v3.1 | 1.0% | 2022-01-24 | |
| CVE-2022-23855 | Saviynt Enterprise Identity Cloud weak password recovery | 9.8v3.1 | 1.7% | 2022-01-24 | |
| CVE-2022-23852 | libexpat integer overflow | 9.8NVD v3.1 | 5.1% | 2022-01-24 | Exploit codeFix |
| CVE-2022-23437 | Infinite loop within Apache XercesJ XML parser | 6.5NVD v3.1 | 11.6% | 2022-01-24 | Fix |
| CVE-2022-23126 | Teslamate improper authentication | 9.8v3.1 | 2.2% | 2022-01-24 | Fix |
| CVE-2022-22554 | DellEMC System Update plaintext password storage | 8.2CNA v3.1 | 0.2% | 2022-01-24 | Fix |
| CVE-2022-22296 | Hospitals Patient Records Management System incorrect default permissions | 5.3NVD v3.1 | 1.0% | 2022-01-24 | |
| CVE-2022-21715 | Cross-site scripting vulnerability in CodeIgniter4 | 5.4CNA v3.1 | 1.0% | 2022-01-24 | Fix |
| CVE-2022-21711 | elfspirit ELF parser out-of-bounds read | 7.1CNA v3.1 | 0.9% | 2022-01-24 | Fix |
| CVE-2022-21710 | Cross-site scripting in ShortDescription extension | 4.7CNA v3.1 | 1.0% | 2022-01-24 | Fix |
| CVE-2022-0269 | Cross-site request forgery (CSRF) in yetiforcecompany/yetiforcecrm | 8.0v3.1 | 0.5% | 2022-01-24 | Fix |
| CVE-2022-23850 | EPUB2TXT out-of-bounds write | 7.8v3.1 | 0.9% | 2022-01-23 | |
| CVE-2022-23808 | Cross-site scripting in phpMyAdmin | 6.1NVD v3.1 | 7.9% | 2022-01-22 | NucleiFix |
| CVE-2022-23807 | Improper authentication in phpMyAdmin | 4.3v3.1 | 0.7% | 2022-01-22 | Fix |
| CVE-2022-23837 | Denial of service in sidekiq | 7.5v3.1 | 5.3% | 2022-01-21 | Fix |
| CVE-2022-23728 | LG mobile devices incorrect behavior | 6.1v3.1 | 0.1% | 2022-01-21 | Fix |
| CVE-2022-23366 | HMS patientlogin.php SQL injection | 9.8v3.1 | 6.7% | 2022-01-21 | Exploit code |
| CVE-2022-23365 | HMS doctorlogin.php SQL injection | 9.8v3.1 | 1.2% | 2022-01-21 | |
| CVE-2022-23364 | HMS adminlogin.php SQL injection | 9.8v3.1 | 1.3% | 2022-01-21 | |
| CVE-2022-23363 | Online Banking System SQL injection | 9.8v3.1 | 1.0% | 2022-01-21 | |
| CVE-2022-23315 | Arbitrary file upload in Mingsoft MCMS | 9.8v3.1 | 1.8% | 2022-01-21 | |
| CVE-2022-23314 | Mingsoft MCMS SQL injection | 9.8v3.1 | 1.6% | 2022-01-21 | |
| CVE-2022-23220 | Usbview missing authentication | 7.8v3.1 | 0.5% | 2022-01-21 | Fix |
| CVE-2022-23130 | Mitsubishi Electric GENESIS64 buffer over-read | 5.9CNA v3.1 | 1.0% | 2022-01-21 | Fix |
| CVE-2022-23129 | Mitsubishi Electric MC Works64 plaintext password storage | 5.5v3.1 | 0.2% | 2022-01-21 | Fix |
| CVE-2022-23128 | Mitsubishi Electric MC Works64 incomplete denylist | 9.8v3.1 | 2.9% | 2022-01-21 | Fix |
| CVE-2022-23127 | Mitsubishi Electric MC Works64 cross-site scripting | 6.1v3.1 | 1.6% | 2022-01-21 | Fix |
| CVE-2022-22930 | RCE in Mingsoft MCMS | 9.8v3.1 | 23.7% | 2022-01-21 | Fix |
| CVE-2022-22929 | Arbitrary file upload in Mingsoft MCMS | 9.8v3.1 | 2.6% | 2022-01-21 | |
| CVE-2022-22928 | Mingsoft MCMS hard-coded credentials | 9.8v3.1 | 2.5% | 2022-01-21 | |
| CVE-2022-22895 | JerryScript out-of-bounds write | 7.8v3.1 | 0.8% | 2022-01-21 | |
| CVE-2022-22894 | JerryScript out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-21 | |
| CVE-2022-22893 | JerryScript out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-21 | |
| CVE-2022-22892 | JerryScript reachable assertion | 5.5v3.1 | 0.6% | 2022-01-21 | |
| CVE-2022-22891 | Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c. | 5.5v3.1 | 0.6% | 2022-01-21 | |
| CVE-2022-22553 | Dell AppSync missing brute-force protection | 8.1CNA v3.1 | 1.1% | 2022-01-21 | Fix |
| CVE-2022-22552 | Dell AppSync clickjacking | 6.9CNA v3.1 | 0.7% | 2022-01-21 | Fix |
| CVE-2022-22551 | Dell AppSync sensitive query strings | 8.3CNA v3.1 | 0.4% | 2022-01-21 | Fix |
| CVE-2022-21933 | ASUS VivoMini/Mini PC improper input validation | 7.8v3.1 | 0.3% | 2022-01-21 | Fix |
| CVE-2022-21708 | Denial of service in graphql-go | 6.5CNA v3.1 | 1.2% | 2022-01-21 | Fix |
| CVE-2022-21707 | Incorrect authorization in wasmCloud | 6.3CNA v3.1 | 0.8% | 2022-01-21 | Fix |
| CVE-2022-0326 | Null pointer dereference in mruby/mruby | 5.5v3.1 | 0.8% | 2022-01-21 | Fix |
| CVE-2022-0323 | Improper neutralization of special elements used in a template engine in bobthecow/Mustache.php | 8.8v3.1 | 0.7% | 2022-01-21 | Fix |
| CVE-2022-0319 | Out-of-bounds read in Vim/Vim | 5.5v3.1 | 1.4% | 2022-01-21 | Fix |
| CVE-2022-0318 | Heap-based buffer overflow in Vim/Vim | 9.8v3.1 | 2.1% | 2022-01-21 | Fix |
| CVE-2022-23120 | Trend Micro Deep Security Agent code injection | 7.8v3.1 | 6.4% | 2022-01-20 | Fix |
| CVE-2022-23119 | Trend Micro Deep Security Agent path traversal | 7.5v3.1 | 22.3% | 2022-01-20 | Fix |
| CVE-2022-22890 | JerryScript reachable assertion | 5.5v3.1 | 0.8% | 2022-01-20 | |
| CVE-2022-22888 | JerryScript out-of-bounds write | 7.8v3.1 | 0.7% | 2022-01-20 | |
| CVE-2022-22820 | LINE improper input validation | 5.5v3.1 | 0.8% | 2022-01-20 | |
| CVE-2022-22733 | Apache ShardingSphere ElasticJob-UI Access-Token in ElasticJob UI causes password disclosure | 6.5v3.1 | 37.6% | 2022-01-20 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2022-21658 | rust-lang rust race condition in std::fs::remove_dir_all in rustlang | 7.3CNA v3.1 | 1.4% | 2022-01-20 | Exploit codeFix |
| CVE-2022-0285 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 1.5% | 2022-01-20 | Fix |
| CVE-2022-0282 | Cross-site scripting in microweber/microweber | 7.5v3.1 | 1.4% | 2022-01-20 | Fix |
| CVE-2022-0281 | Exposure of sensitive information to an unauthorized actor in microweber/microweber | 7.5v3.1 | 10.5% | 2022-01-20 | NucleiFix |
| CVE-2022-0278 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4NVD v3.1 | 0.7% | 2022-01-20 | Fix |
| CVE-2022-0277 | Incorrect permission assignment for critical resource in microweber/microweber | 6.5v3.1 | 1.1% | 2022-01-20 | Fix |
| CVE-2022-0219 | Improper restriction of XML external entity reference in skylot/jadx | 5.5v3.1 | 1.1% | 2022-01-20 | Exploit codeFix |
| CVE-2022-23435 | android-gif-drawable vulerable to denial of service due to unrestricted comment length | 7.5v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-23221 | Arbitrary code execution in H2 Console | 9.8v3.1 | 64.8% | 2022-01-19 | Exploit codeFix |
| CVE-2022-23046 | PhpIPAM SQL injection | 7.2v3.1 | 25.2% | 2022-01-19 | Exploit codeFix |
| CVE-2022-23045 | PhpIPAM cross-site scripting | 4.8v3.1 | 0.6% | 2022-01-19 | Fix |
| CVE-2022-22769 | TIBCO EBX Web server stored cross-site scripting | 8.0CNA v3.1 | 0.9% | 2022-01-19 | |
| CVE-2022-22310 | IBM WebSphere Application Server unauthorized access | 4.8CNA v3.0 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-22180 | Juniper Networks Junos OS An improper check for exceptional conditions | 7.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-22179 | Junos OS: Jdhcpd crashes upon receiving a specific DHCP packet | 6.5CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22178 | Juniper Networks Junos OS flow processing daemon stack-based buffer overflow | 7.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-22177 | Juniper Networks Junos OS snmpd daemon vulnerability | 5.3CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-22176 | Juniper Networks Junos OS An improper syntax validation | 7.4CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22175 | Juniper Networks Junos OS SIP ALG improper locking | 7.5CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-22174 | Juniper Networks Junos OS IPv6 packet processing memory leak | 7.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-22173 | Junos OS: CRL failing to download causes a memory leak and ultimately a DoS | 7.5CNA v3.1 | 0.6% | 2022-01-19 | Fix |
| CVE-2022-22172 | Juniper Networks Junos OS Layer-2 control protocols daemon memory leak | 6.5CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22171 | Junos OS: Specific packets over VXLAN cause FPC reset | 7.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-22170 | Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset | 7.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-22169 | Juniper Networks Junos OS routing protocol daemon improper initialization | 5.9CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-22168 | Junos OS: VMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot | 6.5CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22167 | Juniper Networks Junos OS Juniper Deep Packet Inspection incorrect authorization | 7.2CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-22166 | Juniper Networks Junos OS An improper input validation | 6.5CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22164 | Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled | 6.5CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-22163 | Junos OS: Jdhcpd crashes upon receipt of a specific DHCPv6 packet | 7.4CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22162 | Juniper Networks Junos OS CLI information disclosure through error messages | 7.3CNA v3.1 | 0.2% | 2022-01-19 | Fix |
| CVE-2022-22161 | Juniper Networks Junos OS kernel resource exhaustion | 7.5CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-22160 | Juniper Networks Junos OS subscriber management daemon unchecked error condition | 6.5CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22159 | Junos OS: An attacker sending crafted packets can cause a traffic and CPU denial of service (DoS) | 7.5CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-22157 | Junos OS: SRX Series: Traffic classification vulnerability when no-syn-check is enabled | 7.2CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-22156 | Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL | 6.5CNA v3.1 | 0.6% | 2022-01-19 | Fix |
| CVE-2022-22155 | Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps | 6.5CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-22154 | Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS | 6.8CNA v3.1 | 0.2% | 2022-01-19 | Fix |
| CVE-2022-22153 | Juniper Networks Junos OS flow processing daemon resource exhaustion | 7.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-22152 | Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface | 7.7CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21704 | Incorrect default permissions in log4js-node | 5.5CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2022-21701 | Istio Kubernetes Gateway API privilege escalation | 5.0CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21699 | Execution with unnecessary privileges in ipython | 8.2CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21679 | Authorization Policy bypass in Istio | 6.8CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21403 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 6.6CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21402 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 4.8CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21401 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 6.6CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21400 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21399 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 6.6CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21398 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21397 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21396 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21395 | Oracle Communications Operations Monitor Mediation Engine component takeover | 7.2CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-21394 | Oracle VM VirtualBox Core component unauthorized data access | 6.5CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21393 | Oracle Database denial of service | 4.3CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21392 | Oracle Enterprise Manager Base Platform Policy Framework component unauthorized data access | 8.8CNA v3.1 | 0.6% | 2022-01-19 | Exploit codeFix |
| CVE-2022-21391 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 9.9CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-21390 | Oracle Communications Billing and Revenue Management Webservices Manager component takeover | 10.0CNA v3.1 | 2.4% | 2022-01-19 | Fix |
| CVE-2022-21389 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 10.0CNA v3.1 | 1.9% | 2022-01-19 | Fix |
| CVE-2022-21388 | Oracle Communications Pricing Design Center On Premise Install component information disclosure | 3.3CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2022-21387 | Oracle Commerce Platform Dynamo Application Framework component information disclosure | 5.3CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21386 | Oracle WebLogic Server Web Container component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21383 | Oracle Enterprise Session Border Controller Log component denial of service | 4.3CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21382 | Oracle Enterprise Session Border Controller WebUI component unauthorized data modification | 7.7CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21381 | Oracle Enterprise Session Border Controller WebUI component unauthorized data modification | 6.4CNA v3.1 | 0.6% | 2022-01-19 | Fix |
| CVE-2022-21380 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 3.0% | 2022-01-19 | Fix |
| CVE-2022-21379 | Oracle MySQL Server Group Replication plugin component denial of service | 4.9CNA v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2022-21378 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-21377 | Oracle Primavera Portfolio Management Web API component unauthorized data modification | 5.4CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21376 | Oracle Primavera Portfolio Management Web Access component unauthorized data modification | 5.4CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21375 | Oracle Solaris Kernel component denial of service | 5.5CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2022-21374 | Oracle MySQL Server Information Schema component denial of service | 4.9CNA v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2022-21373 | Oracle E-Business Suite Partner Management Reseller Locator component unauthorized data modification | 6.1CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21372 | Oracle MySQL Server Security Encryption component denial of service | 2.7CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21371 | Oracle WebLogic Server Web Container component unauthorized data access | 7.5CNA v3.1 | 92.6% | 2022-01-19 | NucleiExploit codeFix |
| CVE-2022-21370 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21369 | Oracle PeopleSoft Enterprise PeopleTools Rich Text Editor component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21368 | Oracle MySQL Server components services component unauthorized data modification | 4.7CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21367 | Oracle MySQL Server Compiling component unauthorized data modification | 5.5CNA v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2022-21366 | Oracle Java SE, Oracle GraalVM Enterprise Edition ImageIO component denial of service | 5.3CNA v3.1 | 3.2% | 2022-01-19 | Fix |
| CVE-2022-21365 | Oracle Java SE, Oracle GraalVM Enterprise Edition ImageIO component denial of service | 5.3CNA v3.1 | 3.5% | 2022-01-19 | Fix |
| CVE-2022-21364 | Oracle PeopleSoft Enterprise PeopleTools Weblogic component information disclosure | 5.3CNA v3.1 | 1.5% | 2022-01-19 | Fix |
| CVE-2022-21363 | Oracle improper handling of insufficient permissions or privileges in MySQL Connectors Java | 6.6CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21362 | Oracle MySQL Server Information Schema component denial of service | 4.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21361 | Oracle WebLogic Server Sample apps component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21360 | Oracle Java SE, Oracle GraalVM Enterprise Edition ImageIO component denial of service | 5.3CNA v3.1 | 3.5% | 2022-01-19 | Fix |
| CVE-2022-21359 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21358 | Oracle MySQL Server Security Encryption component denial of service | 6.5CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-21357 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21356 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21355 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21354 | Oracle E-Business Suite iStore User interface component unauthorized data modification | 6.1CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21353 | Oracle WebLogic Server Core component unauthorized data modification | 6.5CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-21352 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.9CNA v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2022-21351 | Oracle MySQL Server Optimizer component unauthorized data modification | 7.1CNA v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2022-21350 | Oracle WebLogic Server Core component unauthorized data modification | 6.5CNA v3.1 | 3.6% | 2022-01-19 | Exploit codeFix |
| CVE-2022-21349 | Oracle Java SE, Oracle GraalVM Enterprise Edition 2D component denial of service | 5.3CNA v3.1 | 3.3% | 2022-01-19 | Fix |
| CVE-2022-21348 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21347 | Oracle WebLogic Server Core component unauthorized data modification | 6.5CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-21346 | Oracle BI Publisher BI Publisher Security component unauthorized data access | 7.5CNA v3.1 | 2.2% | 2022-01-19 | Fix |
| CVE-2022-21345 | Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data access | 6.5CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21344 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 1.5% | 2022-01-19 | Fix |
| CVE-2022-21342 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21341 | Oracle Java SE, Oracle GraalVM Enterprise Edition Serialization component denial of service | 5.3CNA v3.1 | 3.8% | 2022-01-19 | Fix |
| CVE-2022-21340 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component denial of service | 5.3CNA v3.1 | 7.7% | 2022-01-19 | Exploit codeFix |
| CVE-2022-21339 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2022-01-19 | Fix |
| CVE-2022-21338 | Oracle Communications Convergence General Framework component unauthorized data modification | 4.6CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21337 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21336 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21335 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21334 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.8% | 2022-01-19 | Fix |
| CVE-2022-21333 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21332 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21331 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21330 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 3.2% | 2022-01-19 | Fix |
| CVE-2022-21329 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21328 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21327 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.8% | 2022-01-19 | Fix |
| CVE-2022-21326 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21325 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21324 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21323 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.6% | 2022-01-19 | Fix |
| CVE-2022-21322 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21321 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21320 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21319 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21318 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21317 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21316 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21315 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.5% | 2022-01-19 | Fix |
| CVE-2022-21314 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.5% | 2022-01-19 | Fix |
| CVE-2022-21313 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.6% | 2022-01-19 | Fix |
| CVE-2022-21312 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21311 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.6% | 2022-01-19 | Fix |
| CVE-2022-21310 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21309 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.6% | 2022-01-19 | Fix |
| CVE-2022-21308 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21307 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.5% | 2022-01-19 | Fix |
| CVE-2022-21306 | Oracle WebLogic Server Core component takeover | 9.8CNA v3.1 | 4.1% | 2022-01-19 | Fix |
| CVE-2022-21305 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component unauthorized data modification | 5.3CNA v3.1 | 2.8% | 2022-01-19 | Fix |
| CVE-2022-21304 | Oracle MySQL Server parser component denial of service | 4.9CNA v3.1 | 1.8% | 2022-01-19 | Fix |
| CVE-2022-21303 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.8% | 2022-01-19 | Fix |
| CVE-2022-21302 | Oracle MySQL Server InnoDB component denial of service | 5.3CNA v3.1 | 1.5% | 2022-01-19 | Fix |
| CVE-2022-21301 | Oracle MySQL Server DML component unauthorized data modification | 5.5CNA v3.1 | 1.7% | 2022-01-19 | Fix |
| CVE-2022-21300 | Oracle PeopleSoft Enterprise CS SA Integration Pack unauthorized data access | 7.5CNA v3.1 | 1.6% | 2022-01-19 | Fix |
| CVE-2022-21299 | Oracle Java SE, Oracle GraalVM Enterprise Edition JAXP component denial of service | 5.3CNA v3.1 | 3.5% | 2022-01-19 | Fix |
| CVE-2022-21298 | Oracle Solaris Install component unauthorized data modification | 3.9CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2022-21297 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2022-01-19 | Fix |
| CVE-2022-21296 | Oracle Java SE, Oracle GraalVM Enterprise Edition JAXP component information disclosure | 5.3CNA v3.1 | 2.8% | 2022-01-19 | Fix |
| CVE-2022-21295 | Oracle VM VirtualBox Core component information disclosure | 3.8CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-21294 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component denial of service | 5.3CNA v3.1 | 3.4% | 2022-01-19 | Fix |
| CVE-2022-21293 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component denial of service | 5.3CNA v3.1 | 8.3% | 2022-01-19 | Fix |
| CVE-2022-21292 | Oracle WebLogic Server Samples component unauthorized data access | 7.5CNA v3.1 | 1.7% | 2022-01-19 | Fix |
| CVE-2022-21291 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component unauthorized data modification | 5.3CNA v3.1 | 2.9% | 2022-01-19 | Fix |
| CVE-2022-21290 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 3.1% | 2022-01-19 | Fix |
| CVE-2022-21289 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21288 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21287 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21286 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21285 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21284 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 2.7% | 2022-01-19 | Fix |
| CVE-2022-21283 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component denial of service | 5.3CNA v3.1 | 3.8% | 2022-01-19 | Fix |
| CVE-2022-21282 | Oracle Java SE, Oracle GraalVM Enterprise Edition JAXP component information disclosure | 5.3CNA v3.1 | 2.9% | 2022-01-19 | Fix |
| CVE-2022-21281 | Oracle Primavera Portfolio Management Web Access component unauthorized data modification | 4.8CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21280 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 76.5% | 2022-01-19 | Fix |
| CVE-2022-21279 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 79.0% | 2022-01-19 | Fix |
| CVE-2022-21278 | Oracle MySQL Server Optimizer component unauthorized data modification | 7.1CNA v3.1 | 1.2% | 2022-01-19 | Fix |
| CVE-2022-21277 | Oracle Java SE, Oracle GraalVM Enterprise Edition ImageIO component denial of service | 5.3CNA v3.1 | 3.1% | 2022-01-19 | Fix |
| CVE-2022-21276 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 9.9CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21275 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 10.0CNA v3.1 | 1.8% | 2022-01-19 | Fix |
| CVE-2022-21274 | Oracle E-Business Suite Sourcing Intelligence, RFx Creation component unauthorized data access | 8.1CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-21273 | Oracle E-Business Suite Project Costing unauthorized data access | 8.1CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-21272 | Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21271 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component denial of service | 5.3CNA v3.1 | 2.8% | 2022-01-19 | Fix |
| CVE-2022-21270 | Oracle MySQL Server Federated component denial of service | 4.9CNA v3.1 | 1.9% | 2022-01-19 | Fix |
| CVE-2022-21269 | Oracle Primavera Portfolio Management Web Access component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21268 | Oracle Communications Billing and Revenue Management information disclosure | 3.3CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2022-21267 | Oracle Communications Billing and Revenue Management information disclosure | 3.3CNA v3.1 | 0.3% | 2022-01-19 | Fix |
| CVE-2022-21266 | Oracle Communications Billing and Revenue Management unauthorized data access | 7.5CNA v3.1 | 1.7% | 2022-01-19 | Fix |
| CVE-2022-21265 | Oracle MySQL Server Optimizer component unauthorized data modification | 3.8CNA v3.1 | 1.5% | 2022-01-19 | Fix |
| CVE-2022-21264 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2022-01-19 | Fix |
| CVE-2022-21263 | Oracle Solaris Fault Management Architecture component unauthorized data modification | 4.8CNA v3.1 | 0.4% | 2022-01-19 | Fix |
| CVE-2022-21262 | Oracle WebLogic Server Samples component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21261 | Oracle WebLogic Server Samples component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21260 | Oracle WebLogic Server Samples component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21259 | Oracle WebLogic Server Samples component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21258 | Oracle WebLogic Server Samples component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21257 | Oracle WebLogic Server Samples component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21256 | Oracle MySQL Server Group Replication plugin component denial of service | 4.9CNA v3.1 | 2.0% | 2022-01-19 | Fix |
| CVE-2022-21255 | Oracle E-Business Suite Configurator UI Servlet component unauthorized data access | 8.1CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21254 | Oracle MySQL Server Optimizer component denial of service | 5.3CNA v3.1 | 1.7% | 2022-01-19 | Fix |
| CVE-2022-21253 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 2.0% | 2022-01-19 | Fix |
| CVE-2022-21252 | Oracle WebLogic Server Samples component unauthorized data modification | 6.5CNA v3.1 | 1.0% | 2022-01-19 | Fix |
| CVE-2022-21251 | Oracle E-Business Suite Installed Base Instance Main component denial of service | 7.5CNA v3.1 | 1.3% | 2022-01-19 | Fix |
| CVE-2022-21250 | Oracle E-Business Suite Trade Management GL Accounts component unauthorized data access | 8.1CNA v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-21249 | Oracle MySQL Server DDL component denial of service | 2.7CNA v3.1 | 1.7% | 2022-01-19 | Fix |
| CVE-2022-21248 | Oracle Java SE, Oracle GraalVM Enterprise Edition unauthorized data modification | 3.7CNA v3.1 | 3.8% | 2022-01-19 | Fix |
| CVE-2022-21247 | Oracle Database Server Core RDBMS information disclosure | 2.7CNA v3.1 | 0.7% | 2022-01-19 | Fix |
| CVE-2022-21246 | Oracle Communications Operations Monitor Mediation Engine component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-21245 | Oracle MySQL Server Security Privileges component unauthorized data modification | 4.3CNA v3.1 | 1.5% | 2022-01-19 | Fix |
| CVE-2022-21244 | Oracle Primavera Portfolio Management Web Access component unauthorized data modification | 4.3CNA v3.1 | 0.9% | 2022-01-19 | Fix |
| CVE-2022-21243 | Oracle Primavera Portfolio Management Web Access component denial of service | 4.3CNA v3.1 | 0.8% | 2022-01-19 | Fix |
| CVE-2022-21242 | Oracle Primavera Portfolio Management Web Access component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-01-19 | Fix |
| CVE-2022-0274 | Cross-site scripting (XSS) Stored in orchardcms/OrchardCore | 5.4v3.1 | 0.6% | 2022-01-19 | Fix |
| CVE-2022-0266 | Authorization bypass through user-controlled key in livehelperchat/livehelperchat | 6.6v3.1 | 1.1% | 2022-01-19 | Fix |
| CVE-2022-0243 | Cross-site scripting (XSS) Stored in orchardcms/OrchardCore | 5.4NVD v3.1 | 0.6% | 2022-01-19 | Fix |
| CVE-2022-0166 | Privilege escalation vulnerability in McAfee Agent | 7.8CNA v3.1 | 2.9% | 2022-01-19 | Fix |
| CVE-2022-23408 | wolfSSL insufficient randomness | 9.1v3.1 | 1.4% | 2022-01-18 | Fix |
| CVE-2022-23307 | A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution | 8.8v3.1 | 54.4% | 2022-01-18 | Fix |
| CVE-2022-23305 | SQL injection in JDBC Appender in Apache Log4j V1 | 9.8NVD v3.1 | 66.5% | 2022-01-18 | Exploit codeFix |
| CVE-2022-23302 | Deserialization of untrusted data in JMSSink in Apache Log4j 1.x | 8.8v3.1 | 63.6% | 2022-01-18 | Fix |
| CVE-2022-23083 | NetMaster Network Management for TCP/IP and NetMaster File Transfer Management cross-site scripting | 6.1v3.1 | 0.7% | 2022-01-18 | Fix |
| CVE-2022-22691 | Umbraco Password Reset URL Poison | 7.4v3.1 | 1.0% | 2022-01-18 | Fix |
| CVE-2022-22690 | Umbraco Remote ApplicationURL Overwrite | 7.5v3.1 | 1.1% | 2022-01-18 | Fix |
| CVE-2022-21700 | Memory leak in micronaut-core | 5.3CNA v3.1 | 1.2% | 2022-01-18 | Fix |
| CVE-2022-21696 | Username spoofing in OnionShare | 4.3CNA v3.1 | 0.7% | 2022-01-18 | Fix |
| CVE-2022-21695 | Improper access control in Onionshare | 4.3CNA v3.1 | 0.9% | 2022-01-18 | Fix |
| CVE-2022-21694 | Incorrect permission assignment for critical resource in OnionShare | 3.7CNA v3.1 | 1.3% | 2022-01-18 | Fix |
| CVE-2022-21693 | Path traversal in Onionshare | 6.3CNA v3.1 | 1.2% | 2022-01-18 | Fix |
| CVE-2022-21692 | Improper access control in Onionshare | 4.3CNA v3.1 | 0.8% | 2022-01-18 | Fix |
| CVE-2022-21691 | Improper access control in Onionshare | 4.3CNA v3.1 | 0.7% | 2022-01-18 | Fix |
| CVE-2022-21690 | Cross-site scripting in Onionshare | 8.7CNA v3.1 | 0.8% | 2022-01-18 | Fix |
| CVE-2022-21689 | Denial of service in Onionshare | 7.5CNA v3.1 | 1.3% | 2022-01-18 | Fix |
| CVE-2022-21688 | Out-of-bounds read in Onionshare | 7.5CNA v3.1 | 0.8% | 2022-01-18 | Fix |
| CVE-2022-21683 | Comment reply notifications sent to incorrect users in wagtail | 3.5CNA v3.1 | 1.0% | 2022-01-18 | Fix |
| CVE-2022-21673 | OAuth Identity token exposure in Grafana | 4.3CNA v3.1 | 2.0% | 2022-01-18 | Fix |
| CVE-2022-0263 | Unrestricted upload of file with dangerous type in pimcore/pimcore | 7.8v3.1 | 1.1% | 2022-01-18 | Fix |
| CVE-2022-0262 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 6.1v3.1 | 1.5% | 2022-01-18 | Fix |
| CVE-2022-0261 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.7% | 2022-01-18 | Fix |
| CVE-2022-0260 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.7% | 2022-01-18 | Fix |
| CVE-2022-0245 | Cross-site request forgery (CSRF) in livehelperchat/livehelperchat | 4.3v3.1 | 0.4% | 2022-01-18 | Fix |
| CVE-2022-0244 | GitLab files accessible to external parties | 8.6CNA v3.1 | 1.7% | 2022-01-18 | Fix |
| CVE-2022-0236 | WP Import Export (Lite) unauthenticated sensitive data disclosure | 7.5v3.1 | 4.3% | 2022-01-18 | Exploit codeFix |
| CVE-2022-0233 | Metagauss ProfileGrid profile avatar and cover image upload stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-01-18 | Fix |
| CVE-2022-0232 | User Registration, Login and Landing Pages LeadMagic Admin+ stored cross-site scripting | 4.8v3.1 | 0.9% | 2022-01-18 | |
| CVE-2022-0215 | Login/Signup Popup WordPress plugin cross-site request forgery | 8.8v3.1 | 0.8% | 2022-01-18 | Fix |
| CVE-2022-0210 | Random Banner Admin+ stored cross-site scripting | 4.8v3.1 | 4.4% | 2022-01-18 | Fix |
| CVE-2022-0172 | GitLab GraphQL API vulnerability | 5.3CNA v3.1 | 0.8% | 2022-01-18 | Fix |
| CVE-2022-0154 | GitLab cross-site request forgery | 7.5CNA v3.1 | 0.5% | 2022-01-18 | Fix |
| CVE-2022-0152 | GitLab missing authorization | 6.5CNA v3.1 | 1.1% | 2022-01-18 | Fix |
| CVE-2022-0151 | GitLab denial of service | 6.5CNA v3.1 | 1.1% | 2022-01-18 | Fix |
| CVE-2022-0125 | GitLab missing authorization | 4.3CNA v3.1 | 0.9% | 2022-01-18 | Fix |
| CVE-2022-0124 | GitLab improper output encoding | 4.3CNA v3.1 | 1.0% | 2022-01-18 | Fix |
| CVE-2022-0093 | GitLab information disclosure | 3.5CNA v3.1 | 0.9% | 2022-01-18 | Fix |
| CVE-2022-0090 | GitLab improper privilege management | 6.5CNA v3.1 | 1.3% | 2022-01-18 | Fix |
| CVE-2022-23304 | w1.fi wpa_supplicant observable discrepancy | 9.8v3.1 | 1.9% | 2022-01-17 | Fix |
| CVE-2022-23303 | w1.fi wpa_supplicant observable discrepancy | 9.8NVD v3.1 | 3.1% | 2022-01-17 | Fix |
| CVE-2022-22703 | Stormshield Network Security sensitive information in log files | 5.5v3.1 | 0.2% | 2022-01-17 | Fix |
| CVE-2022-0258 | SQL injection in pimcore/pimcore | 8.8v3.1 | 1.7% | 2022-01-17 | Fix |
| CVE-2022-0257 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 1.5% | 2022-01-17 | Fix |
| CVE-2022-0256 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.6% | 2022-01-17 | Fix |
| CVE-2022-0253 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4NVD v3.1 | 0.8% | 2022-01-17 | |
| CVE-2022-0242 | Unrestricted upload of file with dangerous type in crater-invoice/crater | 7.2v3.1 | 1.4% | 2022-01-17 | Fix |
| CVE-2022-0240 | Null pointer dereference in mruby/mruby | 7.5v3.1 | 1.0% | 2022-01-17 | Fix |
| CVE-2022-0239 | Improper restriction of XML external entity reference in stanfordnlp/Corenlp | 9.8v3.1 | 1.2% | 2022-01-17 | Fix |
| CVE-2022-0184 | KING JIM TEPRA PRO 'TEPRA' PRO SR5900P Ver.1.080 insufficiently protected credentials | 4.3v3.1 | 0.3% | 2022-01-17 | Fix |
| CVE-2022-0183 | KING JIM MIRUPASS missing encryption | 4.6v3.1 | 0.1% | 2022-01-17 | Fix |
| CVE-2022-0182 | ExpressTech Quiz And Survey Master stored cross-site scripting | 5.4v3.1 | 1.0% | 2022-01-17 | Fix |
| CVE-2022-0181 | ExpressTech Quiz And Survey Master reflected cross-site scripting | 6.1v3.1 | 1.3% | 2022-01-17 | Fix |
| CVE-2022-0180 | ExpressTech Quiz And Survey Master cross-site request forgery | 8.8v3.1 | 0.7% | 2022-01-17 | Fix |
| CVE-2022-0131 | Jimoty App hard-coded credentials | 3.3v3.1 | 0.2% | 2022-01-17 | Fix |
| CVE-2022-0238 | Cross-site request forgery (CSRF) in phoronix-test-suite/phoronix-test-suite | 4.3v3.1 | 0.8% | 2022-01-16 | Fix |
| CVE-2022-0235 | Exposure of sensitive information to an unauthorized actor in node-fetch/node-fetch | 6.1NVD v3.1 | 1.7% | 2022-01-16 | Fix |
| CVE-2022-23178 | Crestron Hd-md4x2-4k-e improper authentication | 9.8v3.1 | 75.7% | 2022-01-15 | NucleiExploit code |
| CVE-2022-23095 | Opendesign Drawings Software Development Kit out-of-bounds write | 7.8v3.1 | 1.1% | 2022-01-15 | Fix |
| CVE-2022-23094 | libreswan null pointer dereference | 7.5v3.1 | 2.5% | 2022-01-15 | Fix |
| CVE-2022-23227 | NUUO NVRmini2 Devices missing authentication | 9.8v3.1 | 48.5% | 2022-01-14 | KEVEmerging Threats |
| CVE-2022-23222 | Linux kernel null pointer dereference | 7.8v3.1 | 1.9% | 2022-01-14 | Exploit codeFix |
| CVE-2022-23219 | GNU glibc buffer overflow | 9.8NVD v3.1 | 4.7% | 2022-01-14 | Fix |
| CVE-2022-23218 | GNU glibc buffer overflow | 9.8NVD v3.1 | 5.3% | 2022-01-14 | Fix |
| CVE-2022-22531 | SAP S/4HANA Create Single Payment application vulnerability | 8.1v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-22530 | SAP S/4HANA Create Single Payment application vulnerability | 8.1v3.1 | 0.9% | 2022-01-14 | Fix |
| CVE-2022-22529 | SAP Enterprise Threat Detection cross-site scripting | 6.1v3.1 | 0.6% | 2022-01-14 | Fix |
| CVE-2022-22290 | Samsung Mobile Samsung Internet spoofing | 6.5CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-22056 | Le-yan Co., Ltd. Dental Management System hard-coded credentials | 9.8v3.1 | 2.3% | 2022-01-14 | Fix |
| CVE-2022-22055 | Le-yan Co., Ltd. Dental Management System SQL injection | 9.8v3.1 | 2.5% | 2022-01-14 | Fix |
| CVE-2022-22054 | ASUS RT-AX56U path traversal | 6.5v3.1 | 0.5% | 2022-01-14 | Fix |
| CVE-2022-21685 | Integer underflow in Frontier | 6.5CNA v3.1 | 1.3% | 2022-01-14 | Fix |
| CVE-2022-21681 | Exponential catastrophic backtracking (ReDoS) in marked | 7.5CNA v3.1 | 2.8% | 2022-01-14 | Fix |
| CVE-2022-21680 | Cubic catastrophic backtracking (ReDoS) in marked | 7.5CNA v3.1 | 2.9% | 2022-01-14 | Fix |
| CVE-2022-21677 | discourse group advanced search option may leak group and group's members visibility | 4.3CNA v3.1 | 1.2% | 2022-01-14 | Fix |
| CVE-2022-21137 | Omron CX-One project file parser stack-based buffer overflow | 7.8v3.1 | 9.3% | 2022-01-14 | Fix |
| CVE-2022-20698 | Cisco Clam AntiVirus (ClamAV) denial of service | 7.5CNA v3.1 | 3.1% | 2022-01-14 | Fix |
| CVE-2022-20660 | Cisco IP Phones information disclosure | 4.6CNA v3.1 | 0.4% | 2022-01-14 | Fix |
| CVE-2022-20658 | Cisco Unified Contact Center Domain Manager client-side enforcement of server-side security | 9.6CNA v3.1 | 1.4% | 2022-01-14 | Fix |
| CVE-2022-20647 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20646 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20645 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20644 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20643 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20642 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20641 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20640 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20639 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20638 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20637 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20636 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-20635 | Cisco Security Manager cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-01-14 | Fix |
| CVE-2022-0231 | Cross-site request forgery (CSRF) in livehelperchat/livehelperchat | 6.5v3.1 | 0.5% | 2022-01-14 | Fix |
| CVE-2022-0226 | Cross-site request forgery (CSRF) in livehelperchat/livehelperchat | 4.3v3.1 | 0.4% | 2022-01-14 | Fix |
| CVE-2022-0224 | SQL injection in Dolibarr/Dolibarr | 9.8v3.1 | 2.0% | 2022-01-14 | Fix |
| CVE-2022-0213 | Heap-based buffer overflow in Vim/Vim | 6.6NVD v3.1 | 1.2% | 2022-01-14 | Fix |
| CVE-2022-0130 | Tenable.sc remote code execution | 8.1NVD v3.1 | 1.6% | 2022-01-14 | |
| CVE-2022-23134 | Zabbix Frontend improper access control | 3.7CNA v3.1 | 95.3% | 2022-01-13 | KEVNucleiExploit codeFix |
| CVE-2022-23133 | Stored XSS in host groups configuration window in Zabbix Frontend | 6.3CNA v3.1 | 1.0% | 2022-01-13 | Fix |
| CVE-2022-23132 | Incorrect permissions of [/var/run/Zabbix] forces dac_override | 3.3CNA v3.1 | 0.8% | 2022-01-13 | Fix |
| CVE-2022-23131 | Zabbix Frontend authentication bypass | 9.1CNA v3.1 | 95.7% | 2022-01-13 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-22991 | Command injection through unsecured HTTP calls on Western Digital My Cloud devices | 7.8CNA v3.1 | 1.3% | 2022-01-13 | Fix |
| CVE-2022-22990 | Limited authentication bypass vulnerability on Western Digital My Cloud devices | 7.8CNA v3.1 | 2.1% | 2022-01-13 | Fix |
| CVE-2022-22989 | Western Digital My Cloud pre-authenticated stack overflow vulnerability on FTP service | 9.8CNA v3.1 | 1.3% | 2022-01-13 | Fix |
| CVE-2022-22988 | Insecure file and directory permissions on EdgeRover | 7.7CNA v3.1 | 0.7% | 2022-01-13 | Fix |
| CVE-2022-22125 | Halo CMS stored cross-site scripting (XSS) in Article's Tag | 4.8CNA v3.1 | 0.8% | 2022-01-13 | |
| CVE-2022-22124 | Halo CMS stored cross-site scripting (XSS) in Profile Image | 5.4CNA v3.1 | 0.7% | 2022-01-13 | |
| CVE-2022-22123 | Halo CMS stored cross-site scripting (XSS) in Article's Title | 5.4v3.1 | 0.7% | 2022-01-13 | |
| CVE-2022-22113 | DayByDay CRM insufficient session expiration after Password Change | 8.8v3.1 | 1.0% | 2022-01-13 | |
| CVE-2022-22112 | DayByDay CRM Application-Wide Client-Side template injection (CSTI) | 5.4CNA v3.1 | 0.6% | 2022-01-13 | |
| CVE-2022-21684 | User can bypass approval when invited to Discourse | 4.3CNA v3.1 | 0.8% | 2022-01-13 | Fix |
| CVE-2022-21682 | flatpak-builder can access files outside the build directory | 7.7CNA v3.1 | 1.7% | 2022-01-13 | Fix |
| CVE-2022-21678 | User's bio visible even if profile is restricted in Discourse | 4.3CNA v3.1 | 0.8% | 2022-01-13 | Fix |
| CVE-2022-0198 | Improper restriction of XML external entity reference in stanfordnlp/Corenlp | 7.1v3.1 | 0.7% | 2022-01-13 | Fix |
| CVE-2022-0197 | Cross-site request forgery (CSRF) in phoronix-test-suite/phoronix-test-suite | 8.8v3.1 | 0.8% | 2022-01-13 | Fix |
| CVE-2022-0196 | Cross-site request forgery (CSRF) in phoronix-test-suite/phoronix-test-suite | 8.8v3.1 | 0.7% | 2022-01-13 | Fix |
| CVE-2022-0178 | Missing authorization in snipe/Snipe-IT | 5.4v3.1 | 0.6% | 2022-01-13 | Fix |
| CVE-2022-23118 | Agent-to-controller security bypass in Jenkins Debian Package Builder Plugin | 8.8v3.1 | 1.6% | 2022-01-12 | Fix |
| CVE-2022-23117 | Jenkins Conjur Secrets Plugin insufficiently protected credentials | 7.5v3.1 | 1.3% | 2022-01-12 | Fix |
| CVE-2022-23116 | Agent-to-controller security bypass in Jenkins Conjur Secrets Plugin allows decrypting secrets | 7.5v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2022-23115 | CSRF vulnerability in Jenkins Batch Task Plugin | 5.4v3.1 | 0.6% | 2022-01-12 | Fix |
| CVE-2022-23114 | Password stored in plain text by Jenkins Publish Over SSH Plugin | 3.3v3.1 | 0.3% | 2022-01-12 | Fix |
| CVE-2022-23113 | Path traversal vulnerability in Jenkins Publish Over SSH Plugin | 4.3v3.1 | 1.5% | 2022-01-12 | Fix |
| CVE-2022-23112 | Missing permission check in Jenkins Publish Over SSH Plugin | 6.5v3.1 | 0.9% | 2022-01-12 | Fix |
| CVE-2022-23111 | CSRF vulnerability and missing permission checks in Jenkins Publish Over SSH Plugin | 4.3v3.1 | 26.5% | 2022-01-12 | Fix |
| CVE-2022-23110 | Stored XSS vulnerability in Jenkins Publish Over SSH Plugin | 4.8v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2022-23109 | Improper credentials masking in Jenkins HashiCorp Vault Plugin | 6.5v3.1 | 1.0% | 2022-01-12 | Fix |
| CVE-2022-23108 | Stored XSS vulnerability in Jenkins Badge Plugin | 5.4v3.1 | 0.8% | 2022-01-12 | Fix |
| CVE-2022-23107 | Path traversal in Jenkins Warnings Next Generation Plugin | 8.1v3.1 | 1.9% | 2022-01-12 | Fix |
| CVE-2022-23106 | Observable discrepancy and observable timing discrepancy in Jenkins Configuration As Code Plugin | 5.3v3.1 | 1.1% | 2022-01-12 | Fix |
| CVE-2022-23105 | User passwords transmitted in plain text by Jenkins Active Directory Plugin | 6.5v3.1 | 0.4% | 2022-01-12 | Fix |
| CVE-2022-21676 | Uncaught exception in engine.io | 7.5CNA v3.1 | 2.8% | 2022-01-12 | Fix |
| CVE-2022-21675 | Bytecode Viewer archive extraction path traversal | 9.9CNA v3.1 | 2.5% | 2022-01-12 | Fix |
| CVE-2022-20621 | Access key stored in plain text by Jenkins Metrics Plugin | 5.5v3.1 | 0.3% | 2022-01-12 | Fix |
| CVE-2022-20620 | Missing permission checks in SSH Agent Plugin allow enumerating credentials IDs | 4.3v3.1 | 0.7% | 2022-01-12 | Fix |
| CVE-2022-20619 | Cross-site request forgery in Jenkins Bitbucket Branch Source Plugin | 7.1v3.1 | 0.7% | 2022-01-12 | Fix |
| CVE-2022-20618 | Incorrect permission assignment for critical resource in Jenkins Bitbucket Branch Source Plugin | 4.3v3.1 | 0.9% | 2022-01-12 | Fix |
| CVE-2022-20617 | OS command execution vulnerability in Jenkins Docker Commons Plugin | 8.8v3.1 | 2.3% | 2022-01-12 | Exploit codeFix |
| CVE-2022-20616 | Incorrect permission assignment for critical resource in Jenkins Credentials Binding Plugin | 4.3v3.1 | 0.9% | 2022-01-12 | Fix |
| CVE-2022-20615 | Stored XSS vulnerability in Matrix Project Plugin | 5.4v3.1 | 81.8% | 2022-01-12 | Fix |
| CVE-2022-20614 | Incorrect permission assignment for critical resource in Jenkins Mailer Plugin | 4.3v3.1 | 1.1% | 2022-01-12 | Fix |
| CVE-2022-20613 | Cross-site request forgery in Jenkins Mailer Plugin | 4.3v3.1 | 1.0% | 2022-01-12 | Fix |
| CVE-2022-20612 | Cross-site request forgery in Jenkins | 4.3v3.1 | 1.8% | 2022-01-12 | Fix |
| CVE-2022-0179 | Missing authorization in snipe/Snipe-IT | 5.4v3.1 | 0.6% | 2022-01-12 | Fix |
| CVE-2022-0159 | Cross-site scripting (XSS) Stored in orchardcms/OrchardCore | 5.4NVD v3.1 | 0.6% | 2022-01-12 | Fix |
| CVE-2022-0087 | Cross-site scripting (XSS) Reflected in keystonejs/keystone | 6.1NVD v3.1 | 2.6% | 2022-01-12 | NucleiFix |
| CVE-2022-0015 | Cortex XDR Agent: An uncontrolled search path element leads to local privilege escalation (PE) | 7.8CNA v3.1 | 0.2% | 2022-01-12 | Fix |
| CVE-2022-0014 | Cortex XDR Agent: Unintended Program Execution when using Live Terminal Session | 6.7CNA v3.1 | 0.3% | 2022-01-12 | Fix |
| CVE-2022-0013 | Cortex XDR Agent: File information exposure vulnerability when Generating Support file | 5.0CNA v3.1 | 0.2% | 2022-01-12 | Fix |
| CVE-2022-0012 | Cortex XDR Agent: Local arbitrary file deletion | 6.1CNA v3.1 | 0.2% | 2022-01-12 | Fix |
| CVE-2022-21970 | Microsoft Edge (Chromium-based) elevation of privilege | 6.1CNA v3.1 | 2.5% | 2022-01-11 | Exploit codeFix |
| CVE-2022-21969 | Microsoft Exchange Server remote code execution | 9.0CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21964 | Microsoft Windows Remote Desktop Licensing Diagnoser information disclosure | 5.5CNA v3.1 | 1.0% | 2022-01-11 | Fix |
| CVE-2022-21963 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.4CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21962 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21961 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21960 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21959 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21958 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21954 | Microsoft Edge (Chromium-based) elevation of privilege | 6.1CNA v3.1 | 1.5% | 2022-01-11 | Fix |
| CVE-2022-21932 | Microsoft Dynamics 365 Customer Engagement cross-site scripting | 7.6CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21931 | Microsoft Edge (Chromium-based) remote code execution | 4.2CNA v3.1 | 1.2% | 2022-01-11 | Fix |
| CVE-2022-21930 | Microsoft Edge (Chromium-based) remote code execution | 4.2CNA v3.1 | 1.2% | 2022-01-11 | Fix |
| CVE-2022-21929 | Microsoft Edge (Chromium-based) remote code execution | 2.5CNA v3.1 | 1.5% | 2022-01-11 | Fix |
| CVE-2022-21928 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.3CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21925 | Microsoft Windows BackupKey Remote protocol security feature bypass | 5.3CNA v3.1 | 2.9% | 2022-01-11 | Fix |
| CVE-2022-21924 | Microsoft Windows workstation Service Remote protocol security feature bypass | 5.3CNA v3.1 | 2.9% | 2022-01-11 | Fix |
| CVE-2022-21922 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.8% | 2022-01-11 | Fix |
| CVE-2022-21921 | Microsoft Windows Defender Credential Guard security feature bypass | 4.4CNA v3.1 | 0.9% | 2022-01-11 | Fix |
| CVE-2022-21920 | Microsoft Windows Kerberos elevation of privilege | 8.8CNA v3.1 | 2.8% | 2022-01-11 | Fix |
| CVE-2022-21919 | Microsoft Windows User Profile service privilege escalation | 7.0CNA v3.1 | 2.4% | 2022-01-11 | KEVFix |
| CVE-2022-21918 | Microsoft Windows DirectX Graphics Kernel file denial of service | 6.5CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21917 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 3.6% | 2022-01-11 | Fix |
| CVE-2022-21916 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-01-11 | Fix |
| CVE-2022-21915 | Microsoft Windows GDI+ information disclosure | 6.5CNA v3.1 | 2.8% | 2022-01-11 | Fix |
| CVE-2022-21914 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21913 | Microsoft Windows Local Security Authority (Domain Policy) Remote protocol security feature bypass | 5.3CNA v3.1 | 2.7% | 2022-01-11 | Fix |
| CVE-2022-21912 | Microsoft Windows DirectX Graphics Kernel remote code execution | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21911 | NET Framework denial of service | 7.5CNA v3.1 | 3.1% | 2022-01-11 | Fix |
| CVE-2022-21910 | Microsoft Cluster Port driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21908 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-01-11 | Fix |
| CVE-2022-21907 | Microsoft Windows HTTP Protocol Stack remote code execution | 9.8CNA v3.1 | 92.8% | 2022-01-11 | Reported exploitedEmerging ThreatsExploit codeFix |
| CVE-2022-21906 | Microsoft Windows Defender Application Control security feature bypass | 5.5CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21905 | Microsoft Windows Hyper-V security feature bypass | 4.6CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21904 | Microsoft Windows GDI information disclosure | 7.5CNA v3.1 | 3.5% | 2022-01-11 | Fix |
| CVE-2022-21903 | Microsoft Windows GDI elevation of privilege | 7.0CNA v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2022-21902 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21901 | Microsoft Windows Hyper-V elevation of privilege | 9.0CNA v3.1 | 0.9% | 2022-01-11 | Fix |
| CVE-2022-21900 | Microsoft Windows Hyper-V security feature bypass | 4.6CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21899 | Microsoft Windows Extensible firmware interface security feature bypass | 5.5CNA v3.1 | 1.4% | 2022-01-11 | Fix |
| CVE-2022-21898 | Microsoft Windows DirectX Graphics Kernel remote code execution | 7.8CNA v3.1 | 2.4% | 2022-01-11 | Fix |
| CVE-2022-21897 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21896 | Microsoft Windows DWM Core library elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21895 | Microsoft Windows User Profile service elevation of privilege | 7.8CNA v3.1 | 1.2% | 2022-01-11 | Fix |
| CVE-2022-21894 | Microsoft Windows secure Boot security feature bypass | 4.4CNA v3.1 | 6.8% | 2022-01-11 | Exploit codeKCVFix |
| CVE-2022-21893 | Microsoft Windows remote Desktop protocol remote code execution | 8.0CNA v3.1 | 7.9% | 2022-01-11 | Fix |
| CVE-2022-21892 | Microsoft Windows Resilient File System (ReFS) remote code execution | 6.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21891 | Microsoft Dynamics 365 (on-premises) spoofing | 7.6CNA v3.1 | 1.5% | 2022-01-11 | Fix |
| CVE-2022-21890 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 3.0% | 2022-01-11 | Fix |
| CVE-2022-21889 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 3.0% | 2022-01-11 | Fix |
| CVE-2022-21888 | Microsoft Windows Modern Execution Server remote code execution | 7.8CNA v3.1 | 2.5% | 2022-01-11 | Fix |
| CVE-2022-21887 | Microsoft Windows win32k elevation of privilege | 7.0CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21885 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21884 | Microsoft Windows local Security Authority subsystem service elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21883 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 4.4% | 2022-01-11 | Fix |
| CVE-2022-21882 | Microsoft Win32k privilege escalation | 7.0CNA v3.1 | 59.2% | 2022-01-11 | KEVExploit codeFix |
| CVE-2022-21881 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 24.2% | 2022-01-11 | Exploit codeFix |
| CVE-2022-21880 | Microsoft Windows GDI+ information disclosure | 7.5CNA v3.1 | 3.9% | 2022-01-11 | Fix |
| CVE-2022-21879 | Microsoft Windows Kernel elevation of privilege | 5.5CNA v3.1 | 1.0% | 2022-01-11 | Fix |
| CVE-2022-21878 | Microsoft Windows Geolocation service remote code execution | 7.8CNA v3.1 | 2.7% | 2022-01-11 | Fix |
| CVE-2022-21877 | Microsoft Windows storage Spaces controller information disclosure | 5.5CNA v3.1 | 2.9% | 2022-01-11 | Exploit codeFix |
| CVE-2022-21876 | Microsoft Windows win32k information disclosure | 5.5CNA v3.1 | 1.3% | 2022-01-11 | Fix |
| CVE-2022-21875 | Microsoft Windows Storage elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21874 | Microsoft Windows Security Center API remote code execution | 7.8CNA v3.1 | 2.3% | 2022-01-11 | Fix |
| CVE-2022-21873 | Microsoft Windows Tile Data Repository elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21872 | Microsoft Windows Event Tracing elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21871 | Microsoft Diagnostics Hub Standard Collector Runtime elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21870 | Microsoft Tablet Windows User interface Application Core elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21869 | Microsoft Windows clipboard User service elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21868 | Microsoft Windows Devices Human interface elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21867 | Microsoft Windows Push Notifications Apps elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21866 | Microsoft Windows System Launcher elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21865 | Microsoft Windows connected Devices Platform service elevation of privilege | 7.0CNA v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2022-21864 | Microsoft Windows UI Immersive Server API elevation of privilege | 7.0CNA v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2022-21863 | Microsoft Windows StateRepository API Server file elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21862 | Microsoft Windows Application Model Core API elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21861 | Microsoft Windows Task Flow Data Engine elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21860 | Microsoft Windows AppContracts API server elevation of privilege | 7.0CNA v3.1 | 0.8% | 2022-01-11 | Fix |
| CVE-2022-21859 | Microsoft Windows Accounts Control elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21858 | Microsoft Windows Bind Filter driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21857 | Microsoft Windows active Directory Domain services elevation of privilege | 8.8CNA v3.1 | 2.5% | 2022-01-11 | Fix |
| CVE-2022-21855 | Microsoft Exchange Server remote code execution | 9.0CNA v3.1 | 0.9% | 2022-01-11 | Fix |
| CVE-2022-21852 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21851 | Remote Desktop client remote code execution | 8.8CNA v3.1 | 2.8% | 2022-01-11 | Fix |
| CVE-2022-21850 | Remote Desktop client remote code execution | 8.8CNA v3.1 | 2.8% | 2022-01-11 | Fix |
| CVE-2022-21849 | Microsoft Windows Internet Key Exchange (IKE) protocol extensions remote code execution | 9.8CNA v3.1 | 6.2% | 2022-01-11 | Fix |
| CVE-2022-21848 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 4.2% | 2022-01-11 | Fix |
| CVE-2022-21847 | Microsoft Windows Hyper-V denial of service | 6.5CNA v3.1 | 1.0% | 2022-01-11 | Fix |
| CVE-2022-21846 | Microsoft Exchange Server remote code execution | 9.0CNA v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-21843 | Microsoft Windows Internet Key Exchange (IKE) protocol extensions remote code execution | 7.5CNA v3.1 | 3.4% | 2022-01-11 | Fix |
| CVE-2022-21842 | Microsoft Word remote code execution | 7.8CNA v3.1 | 2.3% | 2022-01-11 | Fix |
| CVE-2022-21841 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.6% | 2022-01-11 | Fix |
| CVE-2022-21840 | Microsoft Office remote code execution | 8.8CNA v3.1 | 3.1% | 2022-01-11 | Fix |
| CVE-2022-21839 | Microsoft Windows Event Tracing Discretionary Access Control List denial of service | 6.1CNA v3.1 | 1.5% | 2022-01-11 | Fix |
| CVE-2022-21838 | Microsoft Windows Cleanup Manager elevation of privilege | 5.5CNA v3.1 | 1.5% | 2022-01-11 | Fix |
| CVE-2022-21837 | Microsoft SharePoint server remote code execution | 8.3CNA v3.1 | 3.0% | 2022-01-11 | Fix |
| CVE-2022-21836 | Microsoft Windows Certificate spoofing | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21835 | Microsoft Cryptographic services elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-01-11 | Fix |
| CVE-2022-21834 | Microsoft Windows User-mode Driver Framework Reflector driver elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21833 | Microsoft Windows Virtual Machine IDE Drive elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-01-11 | Fix |
| CVE-2022-21671 | Potential exposure of Replit tokens to an Unauthorized Actor in @replit/crosis | 8.1CNA v3.1 | 1.0% | 2022-01-11 | Fix |
| CVE-2022-21669 | pudding-bot bot token exposed in main.py | 9.1CNA v3.1 | 1.0% | 2022-01-11 | |
| CVE-2022-21646 | Lookup operations do not take into account wildcards in SpiceDB | 8.1CNA v3.1 | 1.3% | 2022-01-11 | Fix |
| CVE-2022-0173 | Out-of-bounds read in radareorg/radare2 | 5.5NVD v3.1 | 1.1% | 2022-01-11 | Fix |
| CVE-2022-0170 | Improper access control in chocobozzz/PeerTube | 4.3v3.1 | 0.7% | 2022-01-11 | |
| CVE-2022-0144 | Improper privilege management in Shelljs/Shelljs | 7.1NVD v3.1 | 0.4% | 2022-01-11 | Fix |
| CVE-2022-0129 | DLL Highjack vulnerability in McAfee TechCheck utility | 7.4CNA v3.1 | 0.3% | 2022-01-11 | Fix |
| CVE-2022-22847 | Formpipe Lasernet file inclusion | 9.8v3.1 | 1.2% | 2022-01-10 | Fix |
| CVE-2022-22846 | Dnslib has DNS reply verification issue | 5.3NVD v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2022-22845 | Qxip Homer Webapp hard-coded credentials | 9.8v3.1 | 3.8% | 2022-01-10 | Exploit code |
| CVE-2022-22844 | libtiff out-of-bounds read | 5.5v3.1 | 1.3% | 2022-01-10 | Fix |
| CVE-2022-22836 | Core FTP path traversal | 6.5v3.1 | 5.4% | 2022-01-10 | Exploit codeFix |
| CVE-2022-22821 | NVIDIA NeMo path traversal in nemo-toolkit | 4.4v3.1 | 0.3% | 2022-01-10 | Fix |
| CVE-2022-22817 | Arbitrary expression injection in Pillow | 9.8v3.1 | 3.4% | 2022-01-10 | Fix |
| CVE-2022-22816 | Out-of-bounds read in Pillow | 6.5v3.1 | 2.0% | 2022-01-10 | Fix |
| CVE-2022-22815 | Improper initialization in Pillow | 6.5v3.1 | 2.6% | 2022-01-10 | Fix |
| CVE-2022-22702 | PartKeepr server-side request forgery | 4.3v3.1 | 0.7% | 2022-01-10 | |
| CVE-2022-22701 | PartKeepr information disclosure | 6.5v3.1 | 1.0% | 2022-01-10 | |
| CVE-2022-22289 | Samsung Mobile S Assistant improper access control | 5.3CNA v3.1 | 0.8% | 2022-01-10 | Fix |
| CVE-2022-22288 | Samsung Mobile Galaxy Store improper authorization | 7.5CNA v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2022-22287 | Samsung Mobile Samsung Email improper input validation | 3.9CNA v3.1 | 0.2% | 2022-01-10 | Fix |
| CVE-2022-22286 | Samsung Mobile Bixby Routines code injection | 4.4CNA v3.1 | 0.3% | 2022-01-10 | Fix |
| CVE-2022-22285 | Samsung Mobile Reminder code injection | 4.4CNA v3.1 | 0.3% | 2022-01-10 | Fix |
| CVE-2022-22284 | Samsung Mobile Samsung Internet improper authentication | 5.7CNA v3.1 | 0.2% | 2022-01-10 | Fix |
| CVE-2022-22283 | Samsung Mobile Samsung Health improper authentication | 2.8CNA v3.1 | 0.2% | 2022-01-10 | Fix |
| CVE-2022-22272 | Samsung Mobile Devices TelephonyManager improper authorization | 4.0CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22271 | Samsung Mobile Devices out-of-bounds read | 5.5CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22270 | Samsung Mobile Devices code injection | 4.4CNA v3.1 | 0.2% | 2022-01-10 | Fix |
| CVE-2022-22269 | Samsung Mobile Devices improper authorization | 4.0CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22268 | Samsung Mobile Devices improper authorization | 6.1CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22267 | Samsung Mobile Devices improper authorization | 4.0CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22266 | Samsung Mobile Devices improper privilege management | 4.0CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22265 | Samsung Mobile Devices use-after-free | 5.0CNA v3.1 | 0.4% | 2022-01-10 | KEVFix |
| CVE-2022-22264 | Samsung Mobile Devices Dressroom improper neutralization | 7.7CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22263 | Samsung Mobile Devices improper privilege management | 4.0CNA v3.1 | 0.1% | 2022-01-10 | Fix |
| CVE-2022-22121 | NocoDB CSV injection in User Management | 8.0CNA v3.1 | 1.2% | 2022-01-10 | |
| CVE-2022-22120 | NocoDB observable discrepancy in the password-reset feature | 5.3CNA v3.1 | 1.4% | 2022-01-10 | |
| CVE-2022-22117 | Directus stored cross-site scripting (XSS) in Profile Avatar Image | 5.4CNA v3.1 | 0.6% | 2022-01-10 | |
| CVE-2022-22116 | Directus stored cross-site scripting (XSS) via SVG file upload | 5.4CNA v3.1 | 0.6% | 2022-01-10 | |
| CVE-2022-22115 | Teedy stored cross-site scripting (XSS) in Tag Name | 9.0v3.1 | 1.0% | 2022-01-10 | |
| CVE-2022-22114 | Teedy reflected cross-site scripting (XSS) in the Search Functionality | 9.6v3.1 | 1.3% | 2022-01-10 | |
| CVE-2022-21823 | Ivanti Workspace Control insecure storage of sensitive information | 5.5v3.1 | 0.3% | 2022-01-10 | Fix |
| CVE-2022-21672 | /etc/pki/TLS and /etc/SSL/certs include distrusted certificates in make-ca | 6.5CNA v3.1 | 0.7% | 2022-01-10 | Fix |
| CVE-2022-21670 | Uncontrolled resource consumption in markdown-it | 5.3CNA v3.1 | 2.3% | 2022-01-10 | Fix |
| CVE-2022-21668 | Pipenv's requirements.txt parsing allows malicious index URL in comments | 8.0CNA v3.1 | 3.9% | 2022-01-10 | Exploit codeFix |
| CVE-2022-21667 | Denial of service in soketi | 7.5CNA v3.1 | 1.6% | 2022-01-10 | Fix |
| CVE-2022-21666 | Aaron-Junker USOC SQL injection in useredit.php | 7.2CNA v3.1 | 1.2% | 2022-01-10 | Fix |
| CVE-2022-0174 | Improper validation of specified quantity in input in Dolibarr/Dolibarr | 4.3v3.1 | 0.9% | 2022-01-10 | Fix |
| CVE-2022-0158 | Heap-based buffer overflow in Vim/Vim | 3.3NVD v3.1 | 1.7% | 2022-01-10 | Fix |
| CVE-2022-0157 | Cross-site scripting (XSS) Stored in phoronix-test-suite/phoronix-test-suite | 5.4v3.1 | 1.1% | 2022-01-10 | Fix |
| CVE-2022-0156 | vim/vim use-after-free | 5.5v3.1 | 1.7% | 2022-01-10 | Fix |
| CVE-2022-0155 | Exposure of sensitive information in follow-redirects | 6.5NVD v3.1 | 2.4% | 2022-01-10 | Fix |
| CVE-2022-0133 | Improper access control in chocobozzz/PeerTube | 7.5v3.1 | 1.2% | 2022-01-10 | |
| CVE-2022-0132 | Server-side request forgery (SSRF) in chocobozzz/PeerTube | 7.5v3.1 | 0.9% | 2022-01-10 | |
| CVE-2022-22827 | libexpat integer overflow | 8.8NVD v3.1 | 3.0% | 2022-01-08 | Fix |
| CVE-2022-22826 | libexpat integer overflow | 8.8NVD v3.1 | 3.0% | 2022-01-08 | Fix |
| CVE-2022-22825 | libexpat integer overflow | 8.8NVD v3.1 | 2.8% | 2022-01-08 | Fix |
| CVE-2022-22824 | libexpat integer overflow | 9.8NVD v3.1 | 3.6% | 2022-01-08 | Fix |
| CVE-2022-22823 | libexpat integer overflow | 9.8NVD v3.1 | 3.6% | 2022-01-08 | Fix |
| CVE-2022-22822 | libexpat integer overflow | 9.8NVD v3.1 | 5.1% | 2022-01-08 | Exploit codeFix |
| CVE-2022-22707 | lighttpd out-of-bounds write | 5.9v3.1 | 9.0% | 2022-01-06 | Fix |
| CVE-2022-22704 | Zabbix-agent2 missing resource initialization | 9.8v3.1 | 1.3% | 2022-01-06 | |
| CVE-2022-21664 | wordpress-develop SQL injection in WordPress | 7.4CNA v3.1 | 3.8% | 2022-01-06 | Fix |
| CVE-2022-21663 | wordpress-develop authenticated object injection in Multisites in WordPress | 6.6CNA v3.1 | 3.7% | 2022-01-06 | Fix |
| CVE-2022-21662 | wordpress-develop stored XSS in WordPress | 8.0CNA v3.1 | 64.5% | 2022-01-06 | Fix |
| CVE-2022-21661 | wordpress-develop SQL injection in WordPress | 8.0CNA v3.1 | 97.8% | 2022-01-06 | NucleiExploit codeFix |
| CVE-2022-0128 | Out-of-bounds read in Vim/Vim | 7.8v3.1 | 1.7% | 2022-01-06 | Fix |
| CVE-2022-0122 | Open redirect in digitalbazaar/forge | 6.1v3.1 | 0.8% | 2022-01-06 | Fix |
| CVE-2022-0121 | Cross-site scripting in hoppscotch/hoppscotch | 8.0v3.1 | 1.2% | 2022-01-06 | Fix |
| CVE-2022-22111 | Bottelet DaybydayCRM DayByDay CRM missing authorization when Changing Password | 8.8v3.1 | 1.0% | 2022-01-05 | Fix |
| CVE-2022-22110 | Bottelet DaybydayCRM DayByDay CRM weak password requirements in Update User | 7.5v3.1 | 1.1% | 2022-01-05 | Fix |
| CVE-2022-22109 | Bottelet DaybydayCRM DayByDay CRM stored cross-site scripting (XSS) in Task Title | 5.4v3.1 | 0.5% | 2022-01-05 | Fix |
| CVE-2022-22108 | Bottelet DaybydayCRM DayByDay CRM missing authorization when Viewing Absences | 4.3v3.1 | 0.7% | 2022-01-05 | Fix |
| CVE-2022-22107 | Bottelet DaybydayCRM DayByDay CRM missing authorization when Viewing Appointments | 4.3v3.1 | 0.7% | 2022-01-05 | Fix |
| CVE-2022-21653 | Typelevel jawn resource exhaustion | 5.9CNA v3.1 | 0.8% | 2022-01-05 | Fix |
| CVE-2022-21652 | Insufficient session expiration in shopware | 3.5CNA v3.1 | 0.8% | 2022-01-05 | Fix |
| CVE-2022-21651 | Open redirect in shopware | 6.8CNA v3.1 | 0.8% | 2022-01-05 | Fix |
| CVE-2022-21642 | Exposure of whisper participants in discourse | 4.3CNA v3.1 | 0.7% | 2022-01-05 | Fix |
| CVE-2022-21650 | Stored XSS via html file upload in Convos | 7.6CNA v3.1 | 0.8% | 2022-01-04 | Fix |
| CVE-2022-21649 | Stored XSS via attribute in Convos | 7.6CNA v3.1 | 0.9% | 2022-01-04 | Fix |
| CVE-2022-21648 | Sandbox bypass in Latte templates | 8.2CNA v3.1 | 0.8% | 2022-01-04 | Fix |
| CVE-2022-21647 | Deserialization of untrusted data in CodeIgniter4 | 7.7CNA v3.1 | 37.7% | 2022-01-04 | Fix |
| CVE-2022-21644 | SQL injection via search in USOC | 9.1CNA v3.1 | 1.0% | 2022-01-04 | |
| CVE-2022-21643 | SQL injection in USOC | 10.0CNA v3.1 | 1.2% | 2022-01-04 | |
| CVE-2022-20023 | MediaTek chipsets expected behavior violation in Bluetooth | 6.5v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2022-20022 | MediaTek chipsets expected behavior violation in Bluetooth | 6.5v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2022-20021 | MediaTek chipsets expected behavior violation in Bluetooth | 6.5v3.1 | 0.3% | 2022-01-04 | Fix |
| CVE-2022-20020 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in libvcodecdrv | 5.5v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20019 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in libMtkOmxGsmDec | 5.5v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20018 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in seninf driver | 4.4v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20016 | MediaTek chipsets vow driver memory corruption | 6.7v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20015 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in kd_camera_hw driver | 4.4v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20014 | MediaTek chipsets improper input validation in vow driver | 6.7v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20013 | MediaTek chipsets time-of-check time-of-use (toctou) race condition in vow driver | 6.4v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-20012 | MediaTek chipsets integer overflow or wraparound in mdp driver | 7.8v3.1 | 0.1% | 2022-01-04 | Fix |
| CVE-2022-0086 | Server-side request forgery (SSRF) in transloadit/uppy | 9.8v3.1 | 1.2% | 2022-01-04 | Fix |
| CVE-2022-0083 | Generation of error message containing sensitive information in livehelperchat/livehelperchat | 5.3NVD v3.1 | 0.9% | 2022-01-04 | Fix |
| CVE-2022-0079 | Generation of error message containing sensitive information in star7th/ShowDoc | 5.3v3.1 | 1.0% | 2022-01-03 | Fix |
| CVE-2022-22293 | Cross-site scripting in Dolibarr | 5.4v3.1 | 0.7% | 2022-01-02 | Fix |
| CVE-2022-0080 | Heap-based buffer overflow in mruby/mruby | 9.8v3.1 | 1.4% | 2022-01-02 | Fix |