CVE-2022 records published in February 2022
This page lists the 1,078 CVE-2022 records published in February 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 17316.0% of these records
- Listed in CISA KEV
- 151.4% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 494.5% of these records
- Exploit code
- 605.6% of these records
- Actionable vendor fix
- 86480.1% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in February 2022 have had from about 56 months to about 57 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-26315 | Qrcp path traversal | 5.3v3.1 | 1.2% | 2022-02-28 | |
| CVE-2022-26181 | dropbox Lepton out-of-bounds write | 7.8v3.1 | 0.9% | 2022-02-28 | |
| CVE-2022-26159 | Ametys forced browsing | 5.3v3.1 | 13.4% | 2022-02-28 | NucleiExploit codeFix |
| CVE-2022-26158 | Cherwell Service Management open redirect | 6.1v3.1 | 0.7% | 2022-02-28 | Fix |
| CVE-2022-26157 | Cherwell Service Management missing encryption | 5.3v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2022-26156 | Cherwell Service Management open redirect | 6.1v3.1 | 0.7% | 2022-02-28 | Fix |
| CVE-2022-26155 | Cherwell Service Management cross-site scripting | 6.1v3.1 | 0.7% | 2022-02-28 | Fix |
| CVE-2022-25642 | Obyte cross-site scripting | 6.1v3.1 | 1.5% | 2022-02-28 | Fix |
| CVE-2022-25413 | Max-3000 MaxSite CMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-28 | |
| CVE-2022-25412 | Max-3000 MaxSite CMS path traversal | 8.1v3.1 | 1.1% | 2022-02-28 | |
| CVE-2022-25411 | Max-3000 MaxSite CMS unrestricted file upload | 9.8v3.1 | 3.0% | 2022-02-28 | |
| CVE-2022-25410 | Max-3000 MaxSite CMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-28 | |
| CVE-2022-25409 | Hospital Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-28 | |
| CVE-2022-25408 | Hospital Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-28 | |
| CVE-2022-25407 | Hospital Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-28 | |
| CVE-2022-25028 | Home Owners Collection Management System cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-28 | |
| CVE-2022-25023 | Audio File out-of-bounds write | 8.8v3.1 | 1.2% | 2022-02-28 | |
| CVE-2022-25015 | IceHrm stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-02-28 | |
| CVE-2022-25014 | IceHrm cross-site scripting | 6.1v3.1 | 0.7% | 2022-02-28 | |
| CVE-2022-25013 | IceHrm cross-site scripting | 6.1v3.1 | 0.7% | 2022-02-28 | |
| CVE-2022-24712 | Cross-site request forgery (CSRF) Protection Bypass vulnerability in CodeIgniter4 | 6.3CNA v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2022-24711 | Remote CLI command execution vulnerability in CodeIgniter4 | 9.4CNA v3.1 | 1.2% | 2022-02-28 | Fix |
| CVE-2022-24685 | HashiCorp Nomad vulnerable to allocation of resources without limits or throttling | 7.5v3.1 | 1.5% | 2022-02-28 | Fix |
| CVE-2022-24572 | Car Driving School Management System cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-28 | |
| CVE-2022-24571 | Car Driving School Management System SQL injection | 9.8v3.1 | 1.6% | 2022-02-28 | |
| CVE-2022-23988 | WS Form WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 2.2% | 2022-02-28 | Exploit codeFix |
| CVE-2022-23987 | WS Form WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2022-23912 | AP Custom Testimonial WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-28 | Fix |
| CVE-2022-23911 | AP Custom Testimonial WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.5% | 2022-02-28 | Fix |
| CVE-2022-23907 | CMS Made Simple cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-28 | |
| CVE-2022-23906 | CMS Made Simple unrestricted file upload | 7.2v3.1 | 2.2% | 2022-02-28 | |
| CVE-2022-0768 | Server-side request forgery (SSRF) in rudloff/alltube | 9.1v3.1 | 1.6% | 2022-02-28 | Fix |
| CVE-2022-0743 | Cross-site scripting (XSS) Stored in getgrav/grav | 4.6v3.1 | 1.4% | 2022-02-28 | Fix |
| CVE-2022-0412 | TI WooCommerce Wishlist WordPress plugin unauthenticated blind SQL injection | 9.8NVD v3.1 | 74.0% | 2022-02-28 | Reported exploitedNucleiFix |
| CVE-2022-0411 | Asgaros Forum WordPress plugin Subscriber+ blind SQL injection | 8.8NVD v3.1 | 1.5% | 2022-02-28 | Fix |
| CVE-2022-0385 | Crazy Bone WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 1.4% | 2022-02-28 | |
| CVE-2022-0383 | WP Review Slider WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.5% | 2022-02-28 | Fix |
| CVE-2022-0377 | LearnPress WordPress plugin arbitrary Image Renaming | 4.3NVD v3.1 | 3.2% | 2022-02-28 | Exploit codeFix |
| CVE-2022-0360 | WP Ultimate CSV Importer WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-28 | Fix |
| CVE-2022-0345 | Customize WordPress Emails and Alerts user search AJAX action cross-site request forgery | 4.3NVD v3.1 | 0.4% | 2022-02-28 | Fix |
| CVE-2022-0328 | Simple Membership WordPress plugin arbitrary Member deletion via CSRF | 4.7NVD v3.1 | 0.5% | 2022-02-28 | Fix |
| CVE-2022-0189 | WP RSS Aggregator WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.2% | 2022-02-28 | NucleiFix |
| CVE-2022-0150 | WP Accessibility Helper (WAH) WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.7% | 2022-02-28 | NucleiFix |
| CVE-2022-0772 | Cross-site scripting (XSS) Stored in librenms/librenms | 4.8v3.1 | 0.6% | 2022-02-27 | Fix |
| CVE-2022-26149 | Unrestricted upload of file with dangerous type in Modx Revolution | 7.2v3.1 | 9.3% | 2022-02-26 | Exploit codeFix |
| CVE-2022-26146 | Tricentis Qtest cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-26 | Fix |
| CVE-2022-25359 | Iclinks Scadaflex Ii missing authentication | 9.1v3.1 | 37.3% | 2022-02-26 | Exploit code |
| CVE-2022-25096 | Home Owners Collection Management System SQL injection | 9.8v3.1 | 2.1% | 2022-02-26 | |
| CVE-2022-25095 | Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request. | 9.8v3.1 | 1.4% | 2022-02-26 | |
| CVE-2022-25094 | Home Owners Collection Management System remote code execution | 8.8v3.1 | 23.3% | 2022-02-26 | |
| CVE-2022-24986 | KDE Kcron race condition | 7.8v3.1 | 0.3% | 2022-02-26 | Fix |
| CVE-2022-23308 | libxml2 use-after-free | 7.5NVD v3.1 | 5.1% | 2022-02-26 | Fix |
| CVE-2022-22908 | Sangfor Vdi Client insufficiently protected credentials | 5.5v3.1 | 0.3% | 2022-02-26 | |
| CVE-2022-21706 | Multi-use invitations can grant access to other organizations in Zulip | 7.2CNA v3.1 | 1.2% | 2022-02-26 | Fix |
| CVE-2022-0764 | Arbitrary command injection in strapi/strapi | 6.7v3.1 | 0.7% | 2022-02-26 | Fix |
| CVE-2022-0763 | Cross-site scripting (XSS) Stored in microweber/microweber | 4.8v3.1 | 0.6% | 2022-02-26 | Fix |
| CVE-2022-0762 | Incorrect authorization in microweber/microweber | 4.3v3.1 | 0.7% | 2022-02-26 | Fix |
| CVE-2022-0723 | Cross-site scripting (XSS) Reflected in microweber/microweber | 5.4NVD v3.1 | 0.9% | 2022-02-26 | Fix |
| CVE-2022-25374 | HashiCorp Terraform Enterprise sensitive information in log files | 7.5v3.1 | 1.0% | 2022-02-25 | Fix |
| CVE-2022-25328 | Google privilege escalation through command injection in fscrypt | 5.0CNA v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2022-25327 | Google local denial of service in fscrypt PAM module | 5.5CNA v3.1 | 0.1% | 2022-02-25 | Fix |
| CVE-2022-25326 | Google denial of service in fscrypt | 5.5CNA v3.1 | 0.1% | 2022-02-25 | Fix |
| CVE-2022-25264 | JetBrains TeamCity insecure storage of sensitive information | 7.5v3.1 | 1.0% | 2022-02-25 | Fix |
| CVE-2022-25263 | JetBrains TeamCity OS command injection | 9.8v3.1 | 2.0% | 2022-02-25 | Fix |
| CVE-2022-25262 | JetBrains Hub insufficient verification of data authenticity | 9.8v3.1 | 1.4% | 2022-02-25 | Exploit codeFix |
| CVE-2022-25261 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-25260 | JetBrains Hub server-side request forgery | 9.1v3.1 | 2.4% | 2022-02-25 | Exploit codeFix |
| CVE-2022-25259 | JetBrains Hub cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-25170 | FATEK Automation FvDesigner project file parser stack-based buffer overflow | 7.8v3.1 | 1.0% | 2022-02-25 | |
| CVE-2022-25064 | TP-Link Tl-wr840n OS command injection | 9.8v3.1 | 36.2% | 2022-02-25 | Emerging ThreatsExploit code |
| CVE-2022-25062 | TP-Link Tl-wr840n integer overflow | 7.5v3.1 | 3.5% | 2022-02-25 | Exploit code |
| CVE-2022-25061 | TP-Link Tl-wr840n OS command injection | 9.8v3.1 | 59.3% | 2022-02-25 | NucleiExploit code |
| CVE-2022-25060 | TP-Link Tl-wr840n OS command injection | 9.8v3.1 | 39.9% | 2022-02-25 | Exploit code |
| CVE-2022-24948 | Apache JSPWiki cross-site scripting vulnerability on User Preferences screen | 6.1v3.1 | 2.3% | 2022-02-25 | Fix |
| CVE-2022-24947 | Apache JSPWiki CSRF account takeover | 8.8v3.1 | 1.2% | 2022-02-25 | Fix |
| CVE-2022-24710 | Cross-site scripting in Weblate | 5.4CNA v3.1 | 0.8% | 2022-02-25 | Fix |
| CVE-2022-24612 | EyesOfNetwork cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-25 | |
| CVE-2022-24594 | Waline missing authorization | 5.3v3.1 | 0.8% | 2022-02-25 | |
| CVE-2022-24442 | JetBrains YouTrack code injection | 9.8v3.1 | 3.7% | 2022-02-25 | Exploit codeFix |
| CVE-2022-24347 | JetBrains YouTrack cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-24346 | JetBrains IntelliJ IDEA code execution | 7.8v3.1 | 0.4% | 2022-02-25 | Fix |
| CVE-2022-24345 | JetBrains IntelliJ IDEA code execution | 7.8v3.1 | 0.4% | 2022-02-25 | Fix |
| CVE-2022-24344 | JetBrains YouTrack cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-24343 | JetBrains YouTrack incorrect default permissions | 4.3v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-24342 | JetBrains TeamCity cross-site request forgery | 8.8v3.1 | 3.3% | 2022-02-25 | Exploit codeFix |
| CVE-2022-24341 | JetBrains TeamCity insufficient session expiration | 7.5v3.1 | 0.8% | 2022-02-25 | Fix |
| CVE-2022-24340 | JetBrains TeamCity XML external entity injection | 9.8v3.1 | 1.0% | 2022-02-25 | Fix |
| CVE-2022-24339 | JetBrains TeamCity cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-25 | Fix |
| CVE-2022-24338 | JetBrains TeamCity cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-24337 | JetBrains TeamCity incorrect default permissions | 6.5v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2022-24336 | JetBrains TeamCity XML-RPC API vulnerability | 5.3v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2022-24335 | JetBrains TeamCity time-of-check time-of-use race condition | 8.1v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2022-24334 | JetBrains TeamCity Agent Push vulnerability | 5.3v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2022-24333 | JetBrains TeamCity server-side request forgery | 6.5v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2022-24332 | JetBrains TeamCity insufficient session expiration | 5.3v3.1 | 0.7% | 2022-02-25 | Fix |
| CVE-2022-24331 | JetBrains TeamCity GitLab authentication vulnerability | 9.8v3.1 | 1.1% | 2022-02-25 | Fix |
| CVE-2022-24330 | JetBrains TeamCity open redirect | 6.1v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-24329 | Improper locking in JetBrains Kotlin | 5.3v3.1 | 2.2% | 2022-02-25 | Fix |
| CVE-2022-24328 | JetBrains Hub denial of service | 6.5v3.1 | 0.8% | 2022-02-25 | Fix |
| CVE-2022-24327 | JetBrains Hub incorrect permission assignment | 7.5v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2022-24288 | Apache Airflow: RCE in example DAGs | 8.8v3.1 | 77.9% | 2022-02-25 | NucleiFix |
| CVE-2022-23985 | Fatek FvDesigner out-of-bounds write | 7.8v3.1 | 2.0% | 2022-02-25 | |
| CVE-2022-23921 | Proficy CIMPLICITY privilege escalation | 7.8v3.1 | 0.2% | 2022-02-25 | Fix |
| CVE-2022-23835 | Visual Voicemail resource exposure | 8.1v3.1 | 1.4% | 2022-02-25 | |
| CVE-2022-21798 | GE CIMPLICITY cleartext transmission of sensitive information | 9.8v3.1 | 0.6% | 2022-02-25 | Fix |
| CVE-2022-21209 | Fatek FvDesigner project file parser out-of-bounds read | 7.8v3.1 | 2.0% | 2022-02-25 | |
| CVE-2022-0746 | Business Logic Errors in Dolibarr/Dolibarr | 4.3v3.1 | 0.9% | 2022-02-25 | Fix |
| CVE-2022-0615 | ESET, spol. s r.o Endpoint Antivirus use-after-free | 5.9CNA v3.1 | 0.8% | 2022-02-25 | Fix |
| CVE-2022-0247 | Google Write access to VMO data through copy-on-write in Fuchsia | 7.5CNA v3.1 | 0.1% | 2022-02-25 | Fix |
| CVE-2022-25838 | Laravel Fortify authentication bypass by replay | 8.1v3.1 | 0.9% | 2022-02-24 | Fix |
| CVE-2022-25809 | Amazon Echo Dot improper neutralization | 9.8v3.1 | 3.3% | 2022-02-24 | |
| CVE-2022-25643 | Seatd resource exposure | 9.8v3.1 | 2.1% | 2022-02-24 | Fix |
| CVE-2022-25640 | wolfSSL improper certificate validation | 7.5v3.1 | 1.4% | 2022-02-24 | Exploit codeFix |
| CVE-2022-25638 | wolfSSL improper certificate validation | 6.5v3.1 | 0.6% | 2022-02-24 | Fix |
| CVE-2022-25636 | Linux kernel improper privilege management | 7.8NVD v3.1 | 2.6% | 2022-02-24 | Exploit codeFix |
| CVE-2022-25418 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.8% | 2022-02-24 | |
| CVE-2022-25417 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.8% | 2022-02-24 | |
| CVE-2022-25414 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 10.4% | 2022-02-24 | |
| CVE-2022-25406 | Tongda2000 SQL injection | 9.8v3.1 | 1.0% | 2022-02-24 | |
| CVE-2022-25405 | Tongda2000 SQL injection | 9.8v3.1 | 1.0% | 2022-02-24 | |
| CVE-2022-25404 | Tongda2000 SQL injection | 9.8v3.1 | 1.0% | 2022-02-24 | |
| CVE-2022-25403 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-02-24 | |
| CVE-2022-25402 | Hospital Management System HMS v1.0 improper access control | 9.1v3.1 | 1.6% | 2022-02-24 | |
| CVE-2022-25401 | Cuppa CMS file manager copy function vulnerability | 7.5v3.1 | 2.3% | 2022-02-24 | |
| CVE-2022-25363 | WatchGuard Fireware out-of-bounds write | 6.5v3.1 | 0.9% | 2022-02-24 | Fix |
| CVE-2022-25360 | WatchGuard Fireware unrestricted file upload | 8.8v3.1 | 1.3% | 2022-02-24 | Fix |
| CVE-2022-25355 | EC-CUBE improperly handles HTTP host header values | 5.3v3.1 | 1.2% | 2022-02-24 | Fix |
| CVE-2022-25331 | Trend Micro ServerProtect for Storage crash | 7.5v3.1 | 3.1% | 2022-02-24 | Fix |
| CVE-2022-25330 | Trend Micro ServerProtect for Storage integer overflow | 9.8v3.1 | 5.2% | 2022-02-24 | Fix |
| CVE-2022-25329 | Trend Micro ServerProtect for Storage hard-coded credentials | 9.8v3.1 | 2.7% | 2022-02-24 | Fix |
| CVE-2022-25307 | WP Statistics Unauthenticated stored cross-site scripting via platform | 6.1NVD v3.1 | 1.4% | 2022-02-24 | Fix |
| CVE-2022-25306 | WP Statistics Unauthenticated stored cross-site scripting via browser | 6.1NVD v3.1 | 1.4% | 2022-02-24 | Fix |
| CVE-2022-25305 | WP Statistics Unauthenticated stored cross-site scripting via IP | 6.1NVD v3.1 | 78.9% | 2022-02-24 | Fix |
| CVE-2022-25293 | WatchGuard Fireware systemd stack-based buffer overflow | 8.8v3.1 | 2.1% | 2022-02-24 | Fix |
| CVE-2022-25292 | WatchGuard Fireware wgagent stack-based buffer overflow | 8.8v3.1 | 2.1% | 2022-02-24 | Fix |
| CVE-2022-25291 | WatchGuard Fireware An integer overflow | 8.8v3.1 | 1.8% | 2022-02-24 | Fix |
| CVE-2022-25290 | WatchGuard Fireware certificate private key retrieval information disclosure | 6.5v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2022-25149 | WP Statistics Unauthenticated blind SQL injection via IP | 7.5NVD v3.1 | 77.5% | 2022-02-24 | NucleiFix |
| CVE-2022-25148 | WP Statistics Unauthenticated blind SQL injection via current_page_id | 7.5NVD v3.1 | 80.9% | 2022-02-24 | NucleiExploit codeFix |
| CVE-2022-25104 | Horizontcms files accessible to external parties | 7.5v3.1 | 1.1% | 2022-02-24 | |
| CVE-2022-25101 | WBCE_CMS arbitrary code execution | 7.8v3.1 | 1.2% | 2022-02-24 | |
| CVE-2022-25099 | WBCE_CMS arbitrary code execution | 7.8v3.1 | 1.2% | 2022-02-24 | |
| CVE-2022-25098 | Arbitrary file delete in Ectouch/Ectouch | 9.1v3.1 | 1.0% | 2022-02-24 | |
| CVE-2022-25084 | TOTOLINK T6 OS command injection | 9.8v3.1 | 21.8% | 2022-02-24 | |
| CVE-2022-25083 | TOTOLINK A860R OS command injection | 9.8v3.1 | 3.1% | 2022-02-24 | |
| CVE-2022-25082 | TOTOLINK A950RG OS command injection | 9.8v3.1 | 13.7% | 2022-02-24 | Nuclei |
| CVE-2022-25081 | TOTOLINK T10 V2 OS command injection | 9.8v3.1 | 3.1% | 2022-02-24 | |
| CVE-2022-25080 | TOTOLINK A830R OS command injection | 9.8v3.1 | 3.2% | 2022-02-24 | |
| CVE-2022-25079 | TOTOLINK A810R Firmware OS command injection | 9.8v3.1 | 3.2% | 2022-02-24 | |
| CVE-2022-25078 | TOTOLINK A3600R Firmware OS command injection | 9.8v3.1 | 3.2% | 2022-02-24 | |
| CVE-2022-25077 | TOTOLINK A3100R OS command injection | 9.8v3.1 | 30.4% | 2022-02-24 | |
| CVE-2022-25076 | TOTOLINK A800R OS command injection | 9.8v3.1 | 3.2% | 2022-02-24 | |
| CVE-2022-25075 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 56.2% | 2022-02-24 | Emerging Threats |
| CVE-2022-25074 | TP-Link TL-WR902AC out-of-bounds write | 9.8v3.1 | 13.0% | 2022-02-24 | |
| CVE-2022-25073 | TP-Link TL-WR841N out-of-bounds write | 9.8v3.1 | 13.0% | 2022-02-24 | |
| CVE-2022-25072 | TP-Link Archer A54 out-of-bounds write | 9.8v3.1 | 13.0% | 2022-02-24 | |
| CVE-2022-25004 | Hospitals Patient Records Management System SQL injection | 9.8v3.1 | 1.6% | 2022-02-24 | |
| CVE-2022-25003 | Hospitals Patient Records Management System SQL injection | 9.8v3.1 | 1.6% | 2022-02-24 | |
| CVE-2022-24709 | Cross-site scripting in @Awsui/components-react | 8.8CNA v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2022-24708 | Stored XSS vulnerability in anuko/timetracker | 6.5CNA v3.1 | 0.6% | 2022-02-24 | Fix |
| CVE-2022-24707 | SQL injection in anuko timetracker | 7.4CNA v3.1 | 7.2% | 2022-02-24 | Exploit codeFix |
| CVE-2022-24687 | HashiCorp Consul Ingress Gateway panic can Shutdown Servers | 6.5v3.1 | 1.4% | 2022-02-24 | Fix |
| CVE-2022-24680 | Trend Micro Apex One security link following | 7.8v3.1 | 0.5% | 2022-02-24 | Fix |
| CVE-2022-24679 | Trend Micro Apex One security link following | 7.8v3.1 | 0.5% | 2022-02-24 | Fix |
| CVE-2022-24678 | Trend Micro Apex One security agent resource exhaustion | 7.5v3.1 | 2.3% | 2022-02-24 | Fix |
| CVE-2022-24671 | Trend Micro Antivirus link following | 7.8v3.1 | 0.4% | 2022-02-24 | Fix |
| CVE-2022-24633 | FileCloud information disclosure | 5.3v3.1 | 0.8% | 2022-02-24 | Fix |
| CVE-2022-24620 | Piwigo cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-24 | |
| CVE-2022-24615 | Uncaught exception in zip4j | 5.5v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2022-24614 | Allocation of resources without limits or throttling in Metadata-extractor | 5.5v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2022-24613 | Improper handling of exceptional conditions inn Metadata-extractor | 5.5v3.1 | 0.8% | 2022-02-24 | Fix |
| CVE-2022-24610 | Alecto Dvc-215ip insufficiently protected credentials | 8.6v3.1 | 1.0% | 2022-02-24 | Fix |
| CVE-2022-24599 | Audiofile memory leak | 6.5v3.1 | 1.7% | 2022-02-24 | Fix |
| CVE-2022-24582 | Accounting Journal Management cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-24 | |
| CVE-2022-24566 | Checkmk cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-24 | Fix |
| CVE-2022-24565 | Checkmk cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-24 | Fix |
| CVE-2022-24435 | Dojin Club MICMNIS phpUploader cross-site scripting | 6.1v3.1 | 0.9% | 2022-02-24 | Fix |
| CVE-2022-24374 | appleple a-blog cms cross-site scripting | 6.1v3.1 | 0.9% | 2022-02-24 | Fix |
| CVE-2022-24232 | Hospitals Patient Records Management System local file inclusion | 7.8v3.1 | 1.5% | 2022-02-24 | |
| CVE-2022-23986 | Dojin Club MICMNIS phpUploader SQL injection | 7.5v3.1 | 1.7% | 2022-02-24 | Fix |
| CVE-2022-23922 | WIN-911 2021 incorrect default permissions | 7.8v3.1 | 0.2% | 2022-02-24 | Fix |
| CVE-2022-23916 | appleple a-blog cms cross-site scripting | 6.1v3.1 | 0.8% | 2022-02-24 | Fix |
| CVE-2022-23810 | appleple a-blog cms Template Engine) vulnerability server-side template injection | 6.5v3.1 | 1.1% | 2022-02-24 | Fix |
| CVE-2022-23701 | HPE Integrated Lights-Out 4 (iLO 4) host header injection | 5.3v3.1 | 0.7% | 2022-02-24 | Fix |
| CVE-2022-23655 | Missing server signature validation in OctoberCMS | 4.8CNA v3.1 | 0.6% | 2022-02-24 | Fix |
| CVE-2022-23176 | WatchGuard Firebox and XTM privilege escalation | 8.8v3.1 | 10.8% | 2022-02-24 | KEVFix |
| CVE-2022-23135 | ZTE Zxhn F477 some home gateway products path traversal | 6.5v3.1 | 1.4% | 2022-02-24 | Fix |
| CVE-2022-23104 | WIN-911 2021 incorrect default permissions | 7.8v3.1 | 0.2% | 2022-02-24 | Fix |
| CVE-2022-23043 | File upload restriction bypass in Zenario CMS | 7.2v3.1 | 1.5% | 2022-02-24 | Fix |
| CVE-2022-22794 | Cybonet PineApp Mail Relay Unauthenticated SQL injection | 9.8v3.1 | 1.0% | 2022-02-24 | |
| CVE-2022-22793 | Cybonet PineApp Mail Relay local file inclusion | 7.5v3.1 | 0.7% | 2022-02-24 | |
| CVE-2022-22349 | IBM Sterling External Authentication Server path traversal | 4.3CNA v3.0 | 1.0% | 2022-02-24 | Fix |
| CVE-2022-21824 | Node.js Node modification of assumed-immutable data | 8.2v3.1 | 21.5% | 2022-02-24 | Fix |
| CVE-2022-21179 | EC-CUBE plugin 'Mail Magazine Management Plugin' cross-site request forgery | 4.3v3.1 | 0.5% | 2022-02-24 | Fix |
| CVE-2022-21142 | appleple a-blog cms authentication bypass | 9.8v3.1 | 1.5% | 2022-02-24 | Fix |
| CVE-2022-0732 | 1Byte Copy9 insecure direct object reference | 7.5v3.1 | 2.5% | 2022-02-24 | |
| CVE-2022-0710 | Header Footer Code Manager reflected XSS | 6.1v3.1 | 2.4% | 2022-02-24 | Fix |
| CVE-2022-0695 | Denial of service in radareorg/radare2 | 5.5v3.1 | 1.0% | 2022-02-24 | Fix |
| CVE-2022-0683 | Essential Addons for Elementor Lite reflected cross-site scripting | 6.1v3.1 | 3.2% | 2022-02-24 | Fix |
| CVE-2022-0653 | Profile Builder User Profile and User Registration forms reflected cross-site scripting | 6.1v3.1 | 2.7% | 2022-02-24 | NucleiFix |
| CVE-2022-0651 | WP Statistics Unauthenticated blind SQL injection via current_page_type | 7.5NVD v3.1 | 32.2% | 2022-02-24 | NucleiFix |
| CVE-2022-0546 | Blender integer overflow | 7.8NVD v3.1 | 1.2% | 2022-02-24 | Fix |
| CVE-2022-0545 | Blender processing of loaded integer overflow | 7.8NVD v3.1 | 1.2% | 2022-02-24 | Fix |
| CVE-2022-0544 | Blender DDS loader integer underflow | 5.5NVD v3.1 | 1.2% | 2022-02-24 | Fix |
| CVE-2022-24409 | Dell BSAFE SSL-J timing side channel | 5.9CNA v3.1 | 1.0% | 2022-02-23 | Fix |
| CVE-2022-24407 | cyrusimap Cyrus-sasl SQL injection | 8.8NVD v3.1 | 4.1% | 2022-02-23 | Fix |
| CVE-2022-23653 | Backblaze B2_Command_Line_Tool B2 Command Line Tool TOCTOU application key disclosure | 4.7CNA v3.1 | 0.2% | 2022-02-23 | Fix |
| CVE-2022-23651 | b2-sdk-python TOCTOU application key disclosure | 4.7CNA v3.1 | 0.2% | 2022-02-23 | Fix |
| CVE-2022-22336 | IBM Sterling Secure Proxy memory leak | 7.5CNA v3.0 | 2.0% | 2022-02-23 | Fix |
| CVE-2022-22333 | IBM Sterling Secure Proxy buffer overflow | 6.5CNA v3.0 | 0.6% | 2022-02-23 | Fix |
| CVE-2022-21705 | Authenticated remote code execution in octobercms | 7.2CNA v3.1 | 8.7% | 2022-02-23 | NucleiFix |
| CVE-2022-20650 | Cisco NX-OS Software NX-API command injection | 8.8CNA v3.1 | 14.6% | 2022-02-23 | Fix |
| CVE-2022-20625 | Cisco FXOS and NX-OS Software Cisco Discovery protocol service denial of service | 4.3CNA v3.1 | 3.3% | 2022-02-23 | Fix |
| CVE-2022-20624 | Cisco NX-OS Software Cisco Fabric services over IP denial of service | 8.6CNA v3.1 | 12.4% | 2022-02-23 | Fix |
| CVE-2022-20623 | Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection denial of service | 8.6CNA v3.1 | 11.9% | 2022-02-23 | Fix |
| CVE-2022-0736 | Insecure temporary file in MLflow/MLflow | 7.5v3.1 | 1.6% | 2022-02-23 | Fix |
| CVE-2022-0731 | Improper access control (IDOR) in Dolibarr/Dolibarr | 6.5v3.1 | 1.0% | 2022-02-23 | Fix |
| CVE-2022-0729 | vim/vim GitHub repository out-of-range pointer offset | 8.8v3.1 | 1.6% | 2022-02-23 | Fix |
| CVE-2022-0727 | Improper access control in chocobozzz/PeerTube | 5.4v3.1 | 0.7% | 2022-02-23 | Fix |
| CVE-2022-0726 | Missing authorization in chocobozzz/PeerTube | 5.4v3.1 | 0.7% | 2022-02-23 | Fix |
| CVE-2022-0724 | Insecure storage of sensitive information in microweber/microweber | 6.5NVD v3.1 | 1.3% | 2022-02-23 | Fix |
| CVE-2022-0721 | Insertion of sensitive information into debugging code in microweber/microweber | 6.5NVD v3.1 | 1.4% | 2022-02-23 | Fix |
| CVE-2022-0719 | Cross-site scripting (XSS) Reflected in microweber/microweber | 5.4NVD v3.1 | 0.9% | 2022-02-23 | Fix |
| CVE-2022-0717 | Out-of-bounds read in mruby/mruby | 9.1v3.1 | 0.9% | 2022-02-23 | Fix |
| CVE-2022-0654 | Exposure of sensitive information to an unauthorized actor in fgribreau/Node-request-retry | 7.5v3.1 | 1.4% | 2022-02-23 | Fix |
| CVE-2022-0476 | Denial of service in radareorg/radare2 | 5.5NVD v3.1 | 1.0% | 2022-02-23 | Fix |
| CVE-2022-23654 | Improper write access check in Requarks/wiki | 8.1CNA v3.1 | 0.7% | 2022-02-22 | Fix |
| CVE-2022-23652 | clastix capsule-proxy privilege escalation using hop-by-hop Connection header | 8.8CNA v3.1 | 1.4% | 2022-02-22 | Fix |
| CVE-2022-23635 | Unauthenticated control plane denial of service attack in Istio | 7.5CNA v3.1 | 1.7% | 2022-02-22 | Fix |
| CVE-2022-23612 | Directory traversal in OpenMRS Startup Filter | 7.5CNA v3.1 | 1.9% | 2022-02-22 | Fix |
| CVE-2022-23608 | Teluu PJSIP dialog set hash table use-after-free | 8.1CNA v3.1 | 4.0% | 2022-02-22 | Fix |
| CVE-2022-23606 | Crash when a cluster is deleted in Envoy | 4.4CNA v3.1 | 1.0% | 2022-02-22 | Fix |
| CVE-2022-21657 | X.509 Extended Key Usage and Trust Purposes bypass in Envoy | 6.8CNA v3.1 | 0.5% | 2022-02-22 | Fix |
| CVE-2022-21656 | X.509 subjectAltName matching bypass in Envoy | 7.4CNA v3.1 | 0.7% | 2022-02-22 | Fix |
| CVE-2022-21655 | Incorrect handling of internal redirects results in crash in Envoy | 7.5CNA v3.1 | 1.1% | 2022-02-22 | Fix |
| CVE-2022-21654 | Incorrect configuration handling allows TLS session re-use without re-validation in Envoy | 7.4CNA v3.1 | 1.1% | 2022-02-22 | Fix |
| CVE-2022-0714 | Heap-based buffer overflow in Vim/Vim | 5.5NVD v3.1 | 12.7% | 2022-02-22 | Fix |
| CVE-2022-0713 | Heap-based buffer overflow in radareorg/radare2 | 7.1v3.1 | 1.0% | 2022-02-22 | Fix |
| CVE-2022-0712 | Null pointer dereference in radareorg/radare2 | 5.5v3.1 | 1.0% | 2022-02-22 | Fix |
| CVE-2022-0676 | Heap-based buffer overflow in radareorg/radare2 | 7.8v3.1 | 1.2% | 2022-02-22 | Fix |
| CVE-2022-0665 | Path traversal in pimcore/pimcore | 6.5v3.1 | 1.5% | 2022-02-22 | Fix |
| CVE-2022-25599 | Spiffy Calendar WordPress plugin Event deletion via cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2022-02-21 | Fix |
| CVE-2022-25297 | drogonframework/drogon arbitrary file write | 8.8v3.1 | 1.9% | 2022-02-21 | Fix |
| CVE-2022-24564 | Checkmk cross-site scripting | 6.1v3.1 | 0.7% | 2022-02-21 | Fix |
| CVE-2022-24553 | Zfaka unrestricted file upload | 9.8v3.1 | 2.7% | 2022-02-21 | |
| CVE-2022-24295 | Okta Advanced Server Access Client code injection | 8.8v3.1 | 16.6% | 2022-02-21 | Fix |
| CVE-2022-23984 | wpDiscuz WordPress plugin sensitive information disclosure | 7.5v3.1 | 1.1% | 2022-02-21 | Fix |
| CVE-2022-23983 | wp-buy WP Content Copy Protection and No Right Click settings cross-site request forgery | 8.8v3.1 | 0.4% | 2022-02-21 | Fix |
| CVE-2022-22308 | IBM Planning Analytics inclusion of untrusted functionality | 7.1CNA v3.0 | 0.7% | 2022-02-21 | Fix |
| CVE-2022-0708 | Mattermost Team Creator's Email Address is disclosed to Team Members via one of the APIs | 4.3CNA v3.1 | 0.8% | 2022-02-21 | |
| CVE-2022-0696 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 1.5% | 2022-02-21 | Fix |
| CVE-2022-0692 | Open redirect on Rudloff/alltube in rudloff/alltube | 6.1v3.1 | 3.4% | 2022-02-21 | NucleiFix |
| CVE-2022-0691 | Authorization bypass through user-controlled key in unshiftio/url-parse | 9.8v3.1 | 2.2% | 2022-02-21 | Fix |
| CVE-2022-0564 | Qlik Sense Enterprise Domain User enumeration | 5.3v3.1 | 1.4% | 2022-02-21 | Fix |
| CVE-2022-0563 | util-linux information disclosure through error messages | 5.5NVD v3.1 | 0.4% | 2022-02-21 | Fix |
| CVE-2022-0313 | Float Menu WordPress plugin arbitrary Menu deletion via CSRF | 4.3NVD v3.1 | 0.5% | 2022-02-21 | Fix |
| CVE-2022-0288 | Ad Inserter WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.1% | 2022-02-21 | NucleiFix |
| CVE-2022-0279 | AnyComment WordPress plugin comment Rating Increase/Decrease via race condition | 3.1NVD v3.1 | 0.5% | 2022-02-21 | Fix |
| CVE-2022-0255 | Database Backup for WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-02-21 | Fix |
| CVE-2022-0252 | GiveWP Give import tool reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-21 | Fix |
| CVE-2022-0234 | WOOCS WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.8% | 2022-02-21 | NucleiFix |
| CVE-2022-0228 | Popup Builder WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 5.9% | 2022-02-21 | NucleiFix |
| CVE-2022-0211 | Shield Security WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-02-21 | Fix |
| CVE-2022-0199 | wpdevart Coming soon and Maintenance mode email notification feature cross-site request forgery | 4.3NVD v3.1 | 0.5% | 2022-02-21 | Fix |
| CVE-2022-0186 | Image Photo Gallery Final Tiles Grid WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-02-21 | Fix |
| CVE-2022-0164 | Coming soon and Maintenance mode WordPress plugin arbitrary email Sending to Subscribed users | 4.3NVD v3.1 | 0.3% | 2022-02-21 | Fix |
| CVE-2022-0134 | AnyComment WordPress plugin arbitrary HyperComments Import/Revert via CSRF | 8.8NVD v3.1 | 0.6% | 2022-02-21 | Fix |
| CVE-2022-25375 | Linux kernel improper quantity validation | 5.5v3.1 | 1.1% | 2022-02-20 | Exploit codeFix |
| CVE-2022-25372 | pritunl-client-electron improper privilege management | 7.8v3.1 | 0.6% | 2022-02-20 | Fix |
| CVE-2022-23848 | Command injection in Alluxio | 9.8v3.1 | 1.2% | 2022-02-20 | Fix |
| CVE-2022-23054 | Openmct XSS via the Summary widget | 6.1v3.1 | 0.6% | 2022-02-20 | |
| CVE-2022-23053 | Openmct XSS via the Condition widget | 6.1v3.1 | 0.6% | 2022-02-20 | |
| CVE-2022-22126 | Openmct XSS via the Web page element | 6.1v3.1 | 0.6% | 2022-02-20 | |
| CVE-2022-0688 | Business Logic Errors in microweber/microweber | 4.9NVD v3.1 | 0.9% | 2022-02-20 | Fix |
| CVE-2022-0686 | Authorization bypass through user-controlled key in unshiftio/url-parse | 9.1v3.1 | 1.8% | 2022-02-20 | Fix |
| CVE-2022-0685 | vim/vim GitHub repository out-of-range pointer offset | 7.8v3.1 | 1.7% | 2022-02-20 | Fix |
| CVE-2022-25366 | cryptomator untrusted search path | 7.8v3.1 | 0.6% | 2022-02-19 | |
| CVE-2022-25365 | Docker Desktop before 4.5.1 on Windows allows attackers to move arbitrary files. NOTE: this issue exists because of an incomplete fix for CVE-2022-23774. | 7.8v3.1 | 0.8% | 2022-02-19 | Exploit codeFix |
| CVE-2022-25256 | Sas Web Report Studio cross-site scripting | 6.1v3.1 | 1.2% | 2022-02-19 | Exploit codeFix |
| CVE-2022-25137 | TOTOLINK T10 function recvSlaveUpgstatus command injection | 9.8v3.1 | 2.2% | 2022-02-19 | |
| CVE-2022-25136 | TOTOLINK T10 function meshSlaveUpdate command injection | 9.8v3.1 | 2.2% | 2022-02-19 | |
| CVE-2022-25135 | TOTOLINK T6 function recv_mesh_info_sync command injection | 9.8v3.1 | 2.9% | 2022-02-19 | |
| CVE-2022-25134 | TOTOLINK T6 function setUpgradeFW command injection | 9.8v3.1 | 3.0% | 2022-02-19 | |
| CVE-2022-25133 | TOTOLINK T6 function isAssocPriDevice command injection | 9.8v3.1 | 2.9% | 2022-02-19 | |
| CVE-2022-25132 | TOTOLINK T10 function meshSlaveDlfw command injection | 9.8v3.1 | 2.9% | 2022-02-19 | |
| CVE-2022-25131 | TOTOLINK T10 function recvSlaveCloudCheckStatus command injection | 9.8v3.1 | 2.2% | 2022-02-19 | |
| CVE-2022-25130 | TOTOLINK T10 function updateWifiInfo command injection | 9.8v3.1 | 2.2% | 2022-02-19 | |
| CVE-2022-24980 | SSRF in Kitodo.presentation | 7.5v3.1 | 1.2% | 2022-02-19 | Fix |
| CVE-2022-24979 | Mittwald Varnish Cache insecure direct object reference | 5.3v3.1 | 0.8% | 2022-02-19 | Fix |
| CVE-2022-23376 | WikiDocs cross-site scripting | 6.1v3.1 | 0.9% | 2022-02-19 | |
| CVE-2022-23375 | WikiDocs unrestricted file upload | 8.8v3.1 | 19.9% | 2022-02-19 | |
| CVE-2022-0690 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1NVD v3.1 | 1.1% | 2022-02-19 | Fix |
| CVE-2022-0689 | Business Logic Errors in microweber | 5.3v3.1 | 1.0% | 2022-02-19 | Fix |
| CVE-2022-0678 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1v3.1 | 2.3% | 2022-02-19 | NucleiFix |
| CVE-2022-0632 | Null pointer dereference in mruby/mruby | 5.5v3.1 | 0.8% | 2022-02-19 | Fix |
| CVE-2022-0630 | Out-of-bounds read in mruby/mruby | 7.1v3.1 | 1.0% | 2022-02-19 | Fix |
| CVE-2022-0409 | Unrestricted upload of file with dangerous type in star7th/ShowDoc | 7.8v3.1 | 0.9% | 2022-02-19 | Fix |
| CVE-2022-25358 | Awful-salmonella-tar path traversal | 5.3v3.1 | 1.1% | 2022-02-18 | |
| CVE-2022-25337 | ibexa Ez Platform Kernel code injection in ezsystems/ezpublish-kernel | 9.8v3.1 | 1.1% | 2022-02-18 | Fix |
| CVE-2022-25336 | ibexa Ez Platform Kernel exposure of resource to wrong sphere in ezsystems/ezplatform-kernel | 5.3v3.1 | 0.7% | 2022-02-18 | Fix |
| CVE-2022-25335 | Rigoblock Drago incorrect authorization | 7.5v3.1 | 1.3% | 2022-02-18 | |
| CVE-2022-25323 | Zerof Web Server cross-site scripting | 6.1v3.1 | 3.2% | 2022-02-18 | Nuclei |
| CVE-2022-25322 | Zerof Web Server SQL injection | 9.8v3.1 | 8.3% | 2022-02-18 | Nuclei |
| CVE-2022-25321 | Cerebrate cross-site scripting | 6.1v3.1 | 1.1% | 2022-02-18 | |
| CVE-2022-25320 | An issue was discovered in Cerebrate through 1.4. Username enumeration could occur. | 5.3v3.1 | 0.9% | 2022-02-18 | |
| CVE-2022-25319 | An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled. | 5.3v3.1 | 1.3% | 2022-02-18 | |
| CVE-2022-25318 | Cerebrate incorrect authorization | 4.3v3.1 | 0.6% | 2022-02-18 | |
| CVE-2022-25317 | Cerebrate cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-18 | |
| CVE-2022-25315 | libexpat integer overflow | 9.8NVD v3.1 | 4.8% | 2022-02-18 | Fix |
| CVE-2022-25314 | libexpat integer overflow | 7.5NVD v3.1 | 4.8% | 2022-02-18 | Exploit codeFix |
| CVE-2022-25313 | libexpat uncontrolled recursion | 6.5NVD v3.1 | 3.3% | 2022-02-18 | Fix |
| CVE-2022-25299 | cesanta/mongoose arbitrary file write | 7.5NVD v3.1 | 1.4% | 2022-02-18 | Fix |
| CVE-2022-25298 | sprinfall/webcc path traversal | 7.5v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2022-24971 | Foxit PDF Reader out-of-bounds read | 8.8v3.1 | 2.7% | 2022-02-18 | Fix |
| CVE-2022-24370 | Foxit PDF Reader out-of-bounds read | 6.5v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2022-24369 | Foxit PDF Reader out-of-bounds write | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24368 | Foxit PDF Reader use-after-free | 6.5v3.1 | 2.1% | 2022-02-18 | Fix |
| CVE-2022-24367 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24366 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24365 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24364 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24363 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24362 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24361 | Foxit PDF Reader out-of-bounds write | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24360 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24359 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24358 | Foxit PDF Reader out-of-bounds read | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24357 | Foxit PDF Reader use-after-free | 8.8v3.1 | 2.5% | 2022-02-18 | Fix |
| CVE-2022-24356 | Foxit PDF Reader out-of-bounds read | 8.8v3.1 | 2.3% | 2022-02-18 | Fix |
| CVE-2022-24355 | TP-Link TL-WR940N stack-based buffer overflow | 8.8v3.1 | 2.1% | 2022-02-18 | |
| CVE-2022-24354 | TP-Link AC1750 integer overflow | 8.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24064 | Sante DICOM Viewer Pro out-of-bounds write | 7.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24063 | Sante DICOM Viewer Pro memory corruption | 7.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24062 | Sante DICOM Viewer Pro use-after-free | 7.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24061 | Sante DICOM Viewer Pro use-after-free | 5.5v3.1 | 1.5% | 2022-02-18 | |
| CVE-2022-24060 | Sante DICOM Viewer Pro out-of-bounds read | 5.5v3.1 | 1.5% | 2022-02-18 | |
| CVE-2022-24059 | Sante DICOM Viewer Pro out-of-bounds write | 7.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24058 | Sante DICOM Viewer Pro out-of-bounds write | 7.8v3.1 | 2.9% | 2022-02-18 | |
| CVE-2022-24057 | Sante DICOM Viewer Pro out-of-bounds write | 7.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24056 | Sante DICOM Viewer Pro out-of-bounds write | 7.8v3.1 | 1.8% | 2022-02-18 | |
| CVE-2022-24055 | Sante DICOM Viewer Pro out-of-bounds read | 5.5v3.1 | 1.5% | 2022-02-18 | |
| CVE-2022-24052 | MariaDB heap-based buffer overflow | 7.8v3.1 | 0.7% | 2022-02-18 | Fix |
| CVE-2022-24051 | MariaDB format string | 7.8v3.1 | 0.7% | 2022-02-18 | Fix |
| CVE-2022-24050 | MariaDB use-after-free | 7.8v3.1 | 0.6% | 2022-02-18 | Fix |
| CVE-2022-24049 | Sonos One Speaker stack-based buffer overflow | 9.8v3.1 | 7.2% | 2022-02-18 | |
| CVE-2022-24048 | MariaDB stack-based buffer overflow | 7.8v3.1 | 0.7% | 2022-02-18 | Fix |
| CVE-2022-24047 | BMC Track-It! authentication bypass | 9.8v3.1 | 1.9% | 2022-02-18 | Fix |
| CVE-2022-24046 | Sonos One Speaker integer underflow | 8.8NVD v3.1 | 4.1% | 2022-02-18 | |
| CVE-2022-23982 | Perfect Brands for WooCommerce WordPress plugin server information exposure | 7.5v3.1 | 1.2% | 2022-02-18 | Fix |
| CVE-2022-23981 | Perfect Brands for WooCommerce WordPress plugin Set Featured Brand vulnerability | 4.3v3.1 | 0.6% | 2022-02-18 | Fix |
| CVE-2022-23650 | Gravitl Netmaker hard-coded cryptographic key | 7.2CNA v3.1 | 1.6% | 2022-02-18 | Fix |
| CVE-2022-23649 | Improper certificate validation in Cosign | 3.3CNA v3.1 | 0.2% | 2022-02-18 | Fix |
| CVE-2022-23647 | Cross-site scripting in Prism | 7.5CNA v3.1 | 1.5% | 2022-02-18 | Fix |
| CVE-2022-23645 | Out-of-bounds read in swtpm | 6.2CNA v3.1 | 0.4% | 2022-02-18 | Fix |
| CVE-2022-23642 | Code injection in Sourcegraph | 8.8CNA v3.1 | 74.3% | 2022-02-18 | MetasploitExploit codeFix |
| CVE-2022-23228 | Pexip Infinity resource exhaustion | 7.5v3.1 | 1.3% | 2022-02-18 | |
| CVE-2022-22922 | TP-Link Tl-wa850re insufficient randomness | 9.8v3.1 | 1.3% | 2022-02-18 | Fix |
| CVE-2022-21800 | Airspan Networks Mimosa use of a broken or risky cryptographic algorithm | 6.5v3.1 | 0.5% | 2022-02-18 | Fix |
| CVE-2022-21215 | Airspan Networks Mimosa server-side request forgery (SSRF) | 9.8v3.1 | 1.4% | 2022-02-18 | Fix |
| CVE-2022-21196 | Airspan Networks Mimosa improper authorization | 9.8v3.1 | 3.7% | 2022-02-18 | Fix |
| CVE-2022-21176 | Airspan Networks Mimosa SQL injection | 7.5v3.1 | 1.1% | 2022-02-18 | Fix |
| CVE-2022-21143 | Airspan Networks Mimosa OS command injection | 9.8v3.1 | 1.2% | 2022-02-18 | Fix |
| CVE-2022-21141 | Airspan Networks Mimosa incorrect authorization | 9.8v3.1 | 3.2% | 2022-02-18 | Fix |
| CVE-2022-0673 | Path traversal in LemMinX | 6.5NVD v3.1 | 1.0% | 2022-02-18 | Fix |
| CVE-2022-0672 | Exposure of sensitive information to an unauthorized actor in LemMinX | 5.5NVD v3.1 | 0.3% | 2022-02-18 | Fix |
| CVE-2022-0671 | vscode-xml server-side request forgery and uncontrolled resource consumption in LemMinX | 9.1NVD v3.1 | 1.3% | 2022-02-18 | Fix |
| CVE-2022-0666 | CRLF injection in microweber | 7.5v3.1 | 44.3% | 2022-02-18 | NucleiExploit codeFix |
| CVE-2022-0664 | gravitl/netmaker Go github.com/ hard-coded cryptographic key | 9.8v3.1 | 1.7% | 2022-02-18 | Fix |
| CVE-2022-0660 | Generation of error message containing sensitive information in microweber/microweber | 7.5NVD v3.1 | 6.9% | 2022-02-18 | NucleiFix |
| CVE-2022-0646 | Linux kernel flaw use-after-free | 7.8NVD v3.1 | 0.4% | 2022-02-18 | Fix |
| CVE-2022-0631 | Heap-based buffer overflow in mruby/mruby | 9.8v3.1 | 0.9% | 2022-02-18 | Fix |
| CVE-2022-0585 | Wireshark excessive iteration | 4.3CNA v3.1 | 2.4% | 2022-02-18 | Fix |
| CVE-2022-0543 | Debian-specific Redis Server Lua sandbox escape | 10.0v3.1 | 99.4% | 2022-02-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-0451 | Google Auth bypass in Dark SDK | 6.5CNA v3.1 | 1.0% | 2022-02-18 | Fix |
| CVE-2022-0138 | Airspan Networks Mimosa deserialization of untrusted data | 7.5v3.1 | 1.0% | 2022-02-18 | Fix |
| CVE-2022-25270 | Incorrect authorization in Drupal Core | 6.5v3.1 | 0.8% | 2022-02-17 | Fix |
| CVE-2022-24953 | Crypt_GPG does not prevent additional options in GPG calls | 5.3v3.1 | 0.9% | 2022-02-17 | Fix |
| CVE-2022-24683 | HashiCorp Nomad arbitrary file read | 7.5v3.1 | 1.5% | 2022-02-17 | Fix |
| CVE-2022-23646 | Improper CSP in Image Optimization API for Next.js | 5.9CNA v3.1 | 1.8% | 2022-02-17 | Fix |
| CVE-2022-23632 | Traefik skips the router TLS configuration when the host header is an FQDN | 7.4CNA v3.1 | 1.7% | 2022-02-17 | Fix |
| CVE-2022-23319 | PCF2BDF improper quantity validation | 5.5v3.1 | 0.7% | 2022-02-17 | Fix |
| CVE-2022-23318 | PCF2BDF out-of-bounds write | 7.1v3.1 | 0.8% | 2022-02-17 | Fix |
| CVE-2022-22916 | Zoneland O2OA remote code execution | 9.8v3.1 | 38.4% | 2022-02-17 | Exploit code |
| CVE-2022-22914 | Ovidentia component FileManager improper access control | 7.5v3.1 | 1.4% | 2022-02-17 | |
| CVE-2022-22912 | Prototype pollution in Plist can cause denial of service | 9.8v3.1 | 2.6% | 2022-02-17 | Fix |
| CVE-2022-22901 | JerryScript reachable assertion | 5.5v3.1 | 0.7% | 2022-02-17 | |
| CVE-2022-22899 | Core FTP out-of-bounds write | 5.5v3.1 | 0.9% | 2022-02-17 | Fix |
| CVE-2022-20750 | Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP denial of service | 5.3CNA v3.1 | 1.1% | 2022-02-17 | Fix |
| CVE-2022-20659 | Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | 6.1CNA v3.1 | 1.2% | 2022-02-17 | Fix |
| CVE-2022-20653 | Cisco Email Security Appliance DNS verification denial of service | 7.5CNA v3.1 | 1.8% | 2022-02-17 | Fix |
| CVE-2022-0639 | Authorization bypass through user-controlled key in unshiftio/url-parse | 5.3v3.1 | 1.5% | 2022-02-17 | Fix |
| CVE-2022-0638 | Cross-site request forgery (CSRF) in microweber/microweber | 4.3v3.1 | 0.4% | 2022-02-17 | Fix |
| CVE-2022-0633 | UpdraftPlus backup download feature incorrect authorization | 6.5NVD v3.1 | 2.1% | 2022-02-17 | Fix |
| CVE-2022-0629 | Stack-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.8% | 2022-02-17 | Fix |
| CVE-2022-0623 | Out-of-bounds read in mruby/mruby | 9.1v3.1 | 1.6% | 2022-02-17 | Fix |
| CVE-2022-0622 | Generation of error message containing sensitive information in snipe/Snipe-IT | 5.3v3.1 | 1.0% | 2022-02-17 | Fix |
| CVE-2022-25271 | Improper input validation in Drupal Core | 7.5v3.1 | 1.3% | 2022-02-16 | Fix |
| CVE-2022-25265 | Linux kernel improper control of dynamic code | 7.8v3.1 | 1.1% | 2022-02-16 | Exploit codeFix |
| CVE-2022-25258 | Linux kernel null pointer dereference | 4.6v3.1 | 0.9% | 2022-02-16 | Exploit codeFix |
| CVE-2022-25255 | In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execute a binary from the current working directory when not found in the PATH. | 7.8v3.1 | 0.3% | 2022-02-16 | Fix |
| CVE-2022-25242 | FileCloud cross-site request forgery | 8.8v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2022-25241 | FileCloud cross-site request forgery | 8.8v3.1 | 3.3% | 2022-02-16 | Exploit codeFix |
| CVE-2022-25236 | libexpat resource exposure | 9.8NVD v3.1 | 35.3% | 2022-02-16 | Fix |
| CVE-2022-25235 | libexpat improper output encoding | 9.8NVD v3.1 | 5.0% | 2022-02-16 | Fix |
| CVE-2022-24985 | Jqueryform authentication bypass | 8.8v3.1 | 2.3% | 2022-02-16 | |
| CVE-2022-24984 | Jqueryform unrestricted file upload | 9.8v3.1 | 2.6% | 2022-02-16 | |
| CVE-2022-24983 | Jqueryform path traversal | 7.5v3.1 | 2.7% | 2022-02-16 | |
| CVE-2022-24982 | Jqueryform insufficiently protected credentials | 6.5v3.1 | 1.2% | 2022-02-16 | |
| CVE-2022-24981 | Jqueryform forms generated by reflected cross-site scripting | 6.1v3.1 | 1.0% | 2022-02-16 | |
| CVE-2022-24665 | PHP Everywhere WordPress plugin remote code execution by by Contributor+ users | 8.8NVD v3.1 | 2.6% | 2022-02-16 | Fix |
| CVE-2022-24664 | PHP Everywhere WordPress plugin remote code execution by by Contributor+ users via WordPress metabox | 8.8NVD v3.1 | 1.7% | 2022-02-16 | Fix |
| CVE-2022-24663 | PHP Everywhere WordPress plugin remote code execution by Subscriber+ users via WordPress shortcode | 8.8NVD v3.1 | 2.1% | 2022-02-16 | Fix |
| CVE-2022-24086 | Adobe Commerce and Magento Open Source improper input validation | 9.8CNA v3.1 | 99.2% | 2022-02-16 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-23804 | KiCad stack-based buffer overflow | 7.8v3.1 | 1.6% | 2022-02-16 | Fix |
| CVE-2022-23803 | KiCad stack-based buffer overflow | 7.8v3.1 | 1.6% | 2022-02-16 | Fix |
| CVE-2022-23644 | Server-side request forgery in BookWyrm | 8.8CNA v3.1 | 0.9% | 2022-02-16 | Fix |
| CVE-2022-23636 | Invalid drop of partially-initialized instances in wasmtime | 5.1CNA v3.1 | 0.8% | 2022-02-16 | Fix |
| CVE-2022-23358 | EasyCMS SQL injection | 9.8v3.1 | 1.2% | 2022-02-16 | |
| CVE-2022-23204 | Adobe Premiere Rush JPEG File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23203 | Adobe Photoshop buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 4.9% | 2022-02-16 | Fix |
| CVE-2022-23202 | Adobe Creative Cloud Desktop uncontrolled search path element arbitrary code execution | 7.0CNA v3.1 | 2.2% | 2022-02-16 | Fix |
| CVE-2022-23200 | Adobe After Effects 3GP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 3.0% | 2022-02-16 | Fix |
| CVE-2022-23199 | Adobe Illustrator null pointer dereference application denial of service | 5.5CNA v3.1 | 1.7% | 2022-02-16 | Fix |
| CVE-2022-23198 | Adobe Illustrator null pointer dereference application denial of service | 5.5CNA v3.1 | 1.7% | 2022-02-16 | Fix |
| CVE-2022-23197 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23196 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23195 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23194 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23193 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 2.2% | 2022-02-16 | Fix |
| CVE-2022-23192 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 2.8% | 2022-02-16 | Fix |
| CVE-2022-23191 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23190 | Adobe Illustrator out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 1.9% | 2022-02-16 | Fix |
| CVE-2022-23189 | Adobe Illustrator null pointer dereference application denial of service | 5.5CNA v3.1 | 1.7% | 2022-02-16 | Fix |
| CVE-2022-23188 | Adobe Illustrator buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 4.4% | 2022-02-16 | Fix |
| CVE-2022-23186 | Adobe Illustrator out-of-bounds write could lead to arbitrary code execution | 7.8CNA v3.1 | 2.3% | 2022-02-16 | Fix |
| CVE-2022-22945 | VMware NSX Edge OS command injection | 7.8v3.1 | 0.4% | 2022-02-16 | Fix |
| CVE-2022-22885 | Improper certificate validation in Hutool | 9.8v3.1 | 1.3% | 2022-02-16 | Fix |
| CVE-2022-22881 | JeecgBoot SQL injection in Jeecg-boot | 9.8v3.1 | 1.4% | 2022-02-16 | |
| CVE-2022-22880 | JeecgBoot SQL injection in Jeecg-boot | 9.8v3.1 | 1.4% | 2022-02-16 | |
| CVE-2022-22853 | Hospitals Patient Records Management System stored cross-site scripting | 5.4v3.1 | 0.8% | 2022-02-16 | |
| CVE-2022-22792 | MobiSoft MobiPlus User Take over and Improper Handling of URL parameters | 7.5v3.1 | 0.6% | 2022-02-16 | |
| CVE-2022-0617 | Linux kernel flaw null pointer dereference | 5.5NVD v3.1 | 0.5% | 2022-02-16 | Fix |
| CVE-2022-0614 | mruby/mruby Homebrew out-of-range pointer offset | 5.5NVD v3.1 | 0.9% | 2022-02-16 | Fix |
| CVE-2022-0613 | Authorization bypass through user-controlled key in medialize/uri.js | 6.5v3.1 | 1.6% | 2022-02-16 | Fix |
| CVE-2022-0612 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.6% | 2022-02-16 | Fix |
| CVE-2022-0611 | Missing authorization in snipe/Snipe-IT | 8.8v3.1 | 1.2% | 2022-02-16 | Fix |
| CVE-2022-0559 | radareorg/radare2 GitHub repository use-after-free | 9.8v3.1 | 1.3% | 2022-02-16 | Fix |
| CVE-2022-0513 | WP Statistics Unauthenticated blind SQL injection via exclusion_reason | 7.5NVD v3.1 | 53.5% | 2022-02-16 | Fix |
| CVE-2022-25212 | CSRF vulnerability in Jenkins Swamp Plugin allows capturing credentials | 8.8v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25211 | Missing permission check in Jenkins Swamp Plugin allows capturing credentials | 8.8v3.1 | 1.1% | 2022-02-15 | Fix |
| CVE-2022-25210 | Improper synchronization in Jenkins Convertigo Mobile Platform Plugin | 6.5v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-25209 | Improper restriction of XML external entity reference in Jenkins Chef Sinatra | 8.8v3.1 | 1.1% | 2022-02-15 | Fix |
| CVE-2022-25208 | Missing permission checks in Jenkins Chef Sinatra Plugin allow XXE | 8.8v3.1 | 1.1% | 2022-02-15 | Fix |
| CVE-2022-25207 | CSRF vulnerability in Jenkins Chef Sinatra Plugin allow XXE | 8.8v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25206 | Missing authorization in Jenkins dbCharts Plugin | 8.8v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-25205 | Cross-site request forgery in Jenkins dbCharts Plugin | 8.8v3.1 | 0.5% | 2022-02-15 | Fix |
| CVE-2022-25204 | Protection mechanism failure in Jenkins Doktor Plugin | 5.4v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-25203 | Stored cross-site scripting vulnerability in Jenkins Team Views Plugin | 5.4v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-25202 | Stored cross-site scripting vulnerability in Jenkins Promoted Builds (simple) Plugin | 4.8v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-25201 | Missing permission checks in Jenkins Checkmarx Plugin allow capturing credentials | 6.5v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25200 | CSRF vulnerability in Jenkins Checkmarx Plugin allow capturing credentials | 8.8v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-25199 | Missing permission check in Jenkins SCP publisher Plugin | 8.8v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-25198 | CSRF vulnerability in Jenkins SCP publisher Plugin | 8.8v3.1 | 0.5% | 2022-02-15 | Fix |
| CVE-2022-25197 | Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files | 6.5v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-25196 | Open redirect vulnerability in Jenkins GitLab Authentication Plugin | 5.4v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25195 | Missing permission check in Jenkins Autonomiq Plugin | 4.3v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-25194 | CSRF vulnerability in Jenkins Autonomiq Plugin | 8.8v3.1 | 0.5% | 2022-02-15 | Fix |
| CVE-2022-25193 | Jenkins Snow Commander Plugin vulnerable to missing authorization | 6.5v3.1 | 0.9% | 2022-02-15 | Fix |
| CVE-2022-25192 | Jenkins Snow Commander Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25191 | Stored cross-site scripting vulnerability in Jenkins Agent Server Parameter Plugin | 5.4v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-25190 | Missing permission check in Jenkins Conjur Secrets Plugin allows enumerating credentials IDs | 4.3v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25189 | Stored cross-site scripting vulnerability in Jenkins Custom Checkbox Parameter Plugin | 5.4v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-25188 | Path traversal vulnerability in Jenkins Fortify Plugin | 4.3v3.1 | 1.2% | 2022-02-15 | Fix |
| CVE-2022-25187 | Jenkins Support Core Plugin stores sensitive data in plain text | 6.5v3.1 | 1.0% | 2022-02-15 | Fix |
| CVE-2022-25186 | Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin | 6.5v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-25185 | Stored XSS vulnerability in Jenkins Generic Webhook Trigger Plugin | 5.4v3.1 | 0.7% | 2022-02-15 | Fix |
| CVE-2022-25184 | Password parameter default values exposed by Jenkins Pipeline: Build Step Plugin | 6.5v3.1 | 0.9% | 2022-02-15 | Fix |
| CVE-2022-25183 | Jenkins Pipeline: Deprecated Groovy Libraries Plugin protection mechanism failure | 8.8v3.1 | 1.6% | 2022-02-15 | Fix |
| CVE-2022-25182 | Jenkins Pipeline: Deprecated Groovy Libraries Plugin protection mechanism failure | 8.8v3.1 | 1.6% | 2022-02-15 | Fix |
| CVE-2022-25181 | Jenkins Pipeline: Deprecated Groovy Libraries Plugin protection mechanism failure | 8.8v3.1 | 1.6% | 2022-02-15 | Fix |
| CVE-2022-25180 | Jenkins Pipeline: Groovy Plugin has insufficiently protected credentials | 4.3v3.1 | 0.5% | 2022-02-15 | Fix |
| CVE-2022-25179 | Link following in Jenkins Pipeline Multibranch Plugin | 6.5v3.1 | 1.8% | 2022-02-15 | Fix |
| CVE-2022-25178 | Jenkins Pipeline: Shared Groovy Libraries Plugin path traversal | 6.5v3.1 | 1.7% | 2022-02-15 | Fix |
| CVE-2022-25177 | Improper link resolution before file access in Jenkins Pipeline: Shared Groovy Libraries Plugin | 6.5v3.1 | 1.7% | 2022-02-15 | Fix |
| CVE-2022-25176 | Improper link resolution before file access in Jenkins Pipeline: Groovy Plugin | 6.5v3.1 | 1.7% | 2022-02-15 | Fix |
| CVE-2022-25175 | Jenkins Pipeline: Multibranch Plugin vulnerable to OS command injection | 8.8v3.1 | 1.4% | 2022-02-15 | Exploit codeFix |
| CVE-2022-25174 | Jenkins Pipeline: Shared Groovy Libraries Plugin OS command injection | 8.8v3.1 | 1.4% | 2022-02-15 | Exploit codeFix |
| CVE-2022-25173 | Improper neutralization of special elements used in an OS command in Jenkins Pipeline: Groovy Plugin | 8.8v3.1 | 1.4% | 2022-02-15 | Exploit codeFix |
| CVE-2022-24684 | Nomad Spread Job Stanza may Trigger panic in Servers | 6.5v3.1 | 1.4% | 2022-02-15 | Fix |
| CVE-2022-24590 | backdropcms Backdrop Add Link function stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-02-15 | |
| CVE-2022-24589 | Burden cross-site scripting | 6.1v3.1 | 0.8% | 2022-02-15 | |
| CVE-2022-24588 | FlatPress cross-site scripting | 5.4v3.1 | 0.7% | 2022-02-15 | |
| CVE-2022-24587 | PluXml component core/admin/medias.php stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-02-15 | |
| CVE-2022-24586 | PluXml component /core/admin/categories.php stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-02-15 | |
| CVE-2022-24585 | PluXml component /core/admin/comment.php stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-02-15 | |
| CVE-2022-24227 | BoltWire A cross-site scripting | 6.1v3.1 | 2.3% | 2022-02-15 | Exploit code |
| CVE-2022-24226 | PHPGurukul Hospital Management System SQL injection | 7.5v3.1 | 1.7% | 2022-02-15 | |
| CVE-2022-23643 | Side-channel attack in Sourcegraph Code Monitors | 6.5CNA v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-23641 | Denial of service in Discourse | 6.5CNA v3.1 | 1.2% | 2022-02-15 | Fix |
| CVE-2022-23639 | crossbeam-rs crossbeam race condition | 8.1CNA v3.1 | 1.2% | 2022-02-15 | Fix |
| CVE-2022-23604 | Twentysix26 x26-Cogs privilege escalation in Defender | 8.8CNA v3.1 | 1.1% | 2022-02-15 | Fix |
| CVE-2022-23384 | YzmCMS cross-site request forgery | 8.8v3.1 | 0.5% | 2022-02-15 | |
| CVE-2022-23317 | Helpsystems Cobalt Strike improper authentication | 7.5v3.1 | 1.1% | 2022-02-15 | |
| CVE-2022-22770 | TIBCO AuditSafe Web server missing authentication | 9.8CNA v3.1 | 1.1% | 2022-02-15 | |
| CVE-2022-21818 | NVIDIA License System cleartext storage of sensitive information | 5.4CNA v3.1 | 0.3% | 2022-02-15 | Fix |
| CVE-2022-21698 | prometheus client_golang uncontrolled resource consumption in promhttp | 7.5CNA v3.1 | 6.0% | 2022-02-15 | Fix |
| CVE-2022-0597 | Open redirect in microweber/microweber | 6.1v3.1 | 3.0% | 2022-02-15 | NucleiFix |
| CVE-2022-0596 | Improper validation of specified quantity in input in microweber/microweber | 4.3v3.1 | 0.6% | 2022-02-15 | Fix |
| CVE-2022-0589 | Cross-site scripting (XSS) Stored in librenms/librenms | 5.4v3.1 | 0.8% | 2022-02-15 | Fix |
| CVE-2022-0588 | Missing authorization in librenms/librenms | 6.5NVD v3.1 | 1.1% | 2022-02-15 | Fix |
| CVE-2022-0587 | Improper authorization in librenms/librenms | 6.5NVD v3.1 | 1.0% | 2022-02-15 | Fix |
| CVE-2022-25150 | Malwarebytes Binisoft Windows Firewall Control improper privilege management | 7.8v3.1 | 0.5% | 2022-02-14 | Fix |
| CVE-2022-25139 | F5 Njs use-after-free | 9.8v3.1 | 1.6% | 2022-02-14 | Fix |
| CVE-2022-24988 | Galois 2P8 buffer overflow in galois_2p8 | 9.8v3.1 | 1.1% | 2022-02-14 | Fix |
| CVE-2022-24977 | Path traversal in ImpressCMS | 9.8v3.1 | 6.9% | 2022-02-14 | Fix |
| CVE-2022-24976 | Atheme improper authentication | 9.1v3.1 | 1.8% | 2022-02-14 | Fix |
| CVE-2022-24705 | Buffer overflow via Crafted Ipv6 Prefix Attribute Type client request in Accel-PPP | 9.8v3.1 | 1.2% | 2022-02-14 | |
| CVE-2022-24704 | Buffer overflow via Crafted IPv6 Addr Attribute Type client request in Accel-PPP | 9.8v3.1 | 1.2% | 2022-02-14 | |
| CVE-2022-24686 | HashiCorp Nomad Artifact Download race condition | 5.9v3.1 | 0.9% | 2022-02-14 | Fix |
| CVE-2022-24206 | Tongda2000 Tongda Office Anywhere SQL injection | 9.8v3.1 | 1.2% | 2022-02-14 | |
| CVE-2022-24110 | Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later. | 6.5v3.1 | 0.7% | 2022-02-14 | |
| CVE-2022-23992 | XCOM Data Transport improper input validation | 9.8v3.1 | 2.4% | 2022-02-14 | Fix |
| CVE-2022-23902 | Tongda2000 Tongda Office Anywhere SQL injection | 9.8v3.1 | 1.2% | 2022-02-14 | |
| CVE-2022-23638 | Cross-site scripting in svg-sanitizer | 6.2CNA v3.1 | 0.7% | 2022-02-14 | Fix |
| CVE-2022-23637 | k-box stored cross-site-scripting (XSS) in Markdown Editor | 6.1CNA v3.1 | 0.5% | 2022-02-14 | Fix |
| CVE-2022-23410 | Axis Communications AXIS IP Utility uncontrolled search path | 7.8v3.1 | 0.4% | 2022-02-14 | Fix |
| CVE-2022-23391 | pybbs A cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-14 | |
| CVE-2022-23390 | diyhi Bbs Forum unrestricted file upload | 9.8v3.1 | 1.5% | 2022-02-14 | |
| CVE-2022-23389 | PublicCMS OS command injection | 9.8v3.1 | 22.0% | 2022-02-14 | |
| CVE-2022-23367 | Fulusso cross-site scripting | 6.1v3.1 | 0.9% | 2022-02-14 | |
| CVE-2022-23337 | DedeCMS SQL injection | 9.8v3.1 | 2.3% | 2022-02-14 | |
| CVE-2022-23336 | S-CMS member_pay.php SQL injection | 9.8v3.1 | 1.1% | 2022-02-14 | |
| CVE-2022-23335 | Metinfo SQL injection | 9.8v3.1 | 1.6% | 2022-02-14 | |
| CVE-2022-22854 | Hospitals Patient Records Management System improper access control | 8.8v3.1 | 0.9% | 2022-02-14 | |
| CVE-2022-22295 | Metinfo SQL injection | 9.8v3.1 | 1.6% | 2022-02-14 | |
| CVE-2022-0586 | Wireshark RTMPT protocol dissector infinite loop | 6.3CNA v3.1 | 2.0% | 2022-02-14 | Fix |
| CVE-2022-0583 | Wireshark PVFS protocol dissector crash | 6.3CNA v3.1 | 1.8% | 2022-02-14 | Fix |
| CVE-2022-0582 | Wireshark null pointer dereference | 6.3CNA v3.1 | 2.0% | 2022-02-14 | Fix |
| CVE-2022-0581 | Wireshark CMS protocol dissector crash | 6.3CNA v3.1 | 1.8% | 2022-02-14 | Fix |
| CVE-2022-0580 | Incorrect authorization in librenms/librenms | 8.8v3.1 | 1.2% | 2022-02-14 | Fix |
| CVE-2022-0579 | Missing authorization in snipe/Snipe-IT | 6.5v3.1 | 1.1% | 2022-02-14 | Fix |
| CVE-2022-0576 | Cross-site scripting (XSS) Generic in librenms/librenms | 6.1v3.1 | 1.0% | 2022-02-14 | Fix |
| CVE-2022-0575 | Cross-site scripting (XSS) Stored in librenms/librenms | 5.4v3.1 | 0.8% | 2022-02-14 | Fix |
| CVE-2022-0572 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 26.6% | 2022-02-14 | Fix |
| CVE-2022-0571 | Cross-site scripting (XSS) Reflected in phoronix-test-suite/phoronix-test-suite | 6.1v3.1 | 1.3% | 2022-02-14 | Fix |
| CVE-2022-0570 | Heap-based buffer overflow in mruby/mruby | 9.8v3.1 | 1.2% | 2022-02-14 | Fix |
| CVE-2022-0569 | Observable discrepancy in snipe/Snipe-IT | 4.3v3.1 | 1.0% | 2022-02-14 | Fix |
| CVE-2022-0565 | Cross-site scripting in pimcore/pimcore | 6.4NVD v3.1 | 1.0% | 2022-02-14 | Fix |
| CVE-2022-0512 | Authorization bypass through user-controlled key in unshiftio/url-parse | 5.3NVD v3.1 | 1.8% | 2022-02-14 | Fix |
| CVE-2022-0214 | Popup Custom Popup Builder WordPress plugin unauthenticated denial of service | 7.5NVD v3.1 | 1.6% | 2022-02-14 | Fix |
| CVE-2022-0212 | SpiderCalendar WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.3% | 2022-02-14 | NucleiFix |
| CVE-2022-0208 | MapPress Maps for WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.0% | 2022-02-14 | NucleiFix |
| CVE-2022-0206 | NewStatPress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.5% | 2022-02-14 | NucleiFix |
| CVE-2022-0201 | Permalink Manager WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 3.4% | 2022-02-14 | NucleiFix |
| CVE-2022-0200 | Themify Portfolio Post WordPress plugin reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-02-14 | Fix |
| CVE-2022-0193 | Complianz - GDPR/CCPA Cookie Consent WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-14 | Fix |
| CVE-2022-0190 | Ad Invalid Click Protector (AICP) WordPress plugin authenticated SQL injection | 8.8NVD v3.1 | 1.3% | 2022-02-14 | Fix |
| CVE-2022-0188 | NiteoThemes CMP coming soon page settings missing authentication | 5.3NVD v3.1 | 2.3% | 2022-02-14 | NucleiFix |
| CVE-2022-0176 | PowerPack Lite for Beaver Builder WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-02-14 | Fix |
| CVE-2022-22765 | BD Viper LT System hard-coded credentials | 8.0CNA v3.1 | 0.2% | 2022-02-12 | Fix |
| CVE-2022-0311 | Google Chrome Task Manager heap-based buffer overflow | 8.8v3.1 | 0.9% | 2022-02-12 | Fix |
| CVE-2022-0310 | Google Chrome Task Manager heap-based buffer overflow | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0309 | Google Chrome Autofill inappropriate implementation | 6.5v3.1 | 0.6% | 2022-02-12 | Fix |
| CVE-2022-0308 | Google Chrome Data Transfer use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0307 | Google Chrome Optimization Guide use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0306 | Google Chrome PDFium heap-based buffer overflow | 8.8v3.1 | 85.4% | 2022-02-12 | Fix |
| CVE-2022-0305 | Google Chrome Service Worker API inappropriate implementation | 6.5v3.1 | 0.6% | 2022-02-12 | Fix |
| CVE-2022-0304 | Google Chrome Bookmarks use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0302 | Google Chrome Omnibox use-after-free | 8.8v3.1 | 0.5% | 2022-02-12 | Fix |
| CVE-2022-0301 | Google Chrome DevTools heap-based buffer overflow | 7.8v3.1 | 0.5% | 2022-02-12 | Fix |
| CVE-2022-0300 | Google Chrome Text Input Method Editor use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0298 | Google Chrome Scheduling use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0297 | Google Chrome Vulkan use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0296 | Google Chrome Printing use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0295 | Google Chrome Omnibox use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0294 | Google Chrome Push messaging inappropriate implementation | 6.5v3.1 | 0.7% | 2022-02-12 | Fix |
| CVE-2022-0293 | Google Chrome Web packaging use-after-free | 8.8v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0292 | Google Chrome Fenced Frames inappropriate implementation | 6.5v3.1 | 0.6% | 2022-02-12 | Fix |
| CVE-2022-0291 | Google Chrome Storage inappropriate implementation | 6.5v3.1 | 0.7% | 2022-02-12 | Fix |
| CVE-2022-0290 | Google Chrome Site isolation use-after-free | 9.6v3.1 | 2.0% | 2022-02-12 | Fix |
| CVE-2022-0289 | Google Chrome Safe browsing use-after-free | 8.8v3.1 | 28.2% | 2022-02-12 | Fix |
| CVE-2022-0120 | Google Chrome Passwords inappropriate implementation | 6.5v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0118 | Google Chrome WebShare inappropriate implementation | 4.3v3.1 | 1.1% | 2022-02-12 | Fix |
| CVE-2022-0117 | Google Chrome incorrect authorization | 6.5v3.1 | 1.5% | 2022-02-12 | Fix |
| CVE-2022-0116 | Google Chrome Compositing inappropriate implementation | 4.3v3.1 | 1.2% | 2022-02-12 | Fix |
| CVE-2022-0115 | Google Chrome uninitialized resource use | 8.8v3.1 | 1.5% | 2022-02-12 | Fix |
| CVE-2022-0114 | Google Chrome Blink Serial API out-of-bounds access | 8.1v3.1 | 1.3% | 2022-02-12 | Fix |
| CVE-2022-0113 | Google Chrome Blink inappropriate implementation | 6.5v3.1 | 0.9% | 2022-02-12 | Fix |
| CVE-2022-0112 | Google Chrome Browser UI incorrect security UI | 4.3v3.1 | 1.1% | 2022-02-12 | Fix |
| CVE-2022-0111 | Google Chrome Navigation inappropriate implementation | 6.5v3.1 | 0.8% | 2022-02-12 | Fix |
| CVE-2022-0110 | Google Chrome Autofill incorrect security UI | 4.3v3.1 | 1.1% | 2022-02-12 | Fix |
| CVE-2022-0109 | Google Chrome Autofill inappropriate implementation | 6.5v3.1 | 1.3% | 2022-02-12 | Fix |
| CVE-2022-0108 | Google Chrome Navigation inappropriate implementation | 6.5v3.1 | 1.2% | 2022-02-12 | Fix |
| CVE-2022-0107 | Google Chrome File Manager API use-after-free | 8.8v3.1 | 0.9% | 2022-02-12 | Fix |
| CVE-2022-0106 | Google Chrome Autofill use-after-free | 8.8v3.1 | 1.3% | 2022-02-12 | Fix |
| CVE-2022-0105 | Google Chrome PDF Accessibility use-after-free | 8.8v3.1 | 1.3% | 2022-02-12 | Fix |
| CVE-2022-0104 | Google Chrome ANGLE heap-based buffer overflow | 8.8v3.1 | 1.3% | 2022-02-12 | Fix |
| CVE-2022-0103 | Google Chrome SwiftShader use-after-free | 8.8v3.1 | 1.2% | 2022-02-12 | Fix |
| CVE-2022-0102 | Google Chrome V8 type confusion | 8.8v3.1 | 1.3% | 2022-02-12 | Fix |
| CVE-2022-0101 | Google Chrome Bookmarks heap-based buffer overflow | 8.8v3.1 | 1.4% | 2022-02-12 | Fix |
| CVE-2022-0100 | Google Chrome Media streams API heap-based buffer overflow | 8.8v3.1 | 1.5% | 2022-02-12 | Fix |
| CVE-2022-0099 | Google Chrome Sign-in use-after-free | 8.8v3.1 | 1.2% | 2022-02-12 | Fix |
| CVE-2022-0098 | Google Chrome Screen Capture use-after-free | 8.8v3.1 | 0.9% | 2022-02-12 | Fix |
| CVE-2022-0097 | Google Chrome DevTools inappropriate implementation | 9.6v3.1 | 0.9% | 2022-02-12 | Fix |
| CVE-2022-0096 | Google Chrome Storage use-after-free | 8.8v3.1 | 1.4% | 2022-02-12 | Fix |
| CVE-2022-24975 | Git-scm git resource exposure | 7.5v3.1 | 2.6% | 2022-02-11 | |
| CVE-2022-24968 | Improper validation of certificate with host mismatch in Mellium.im/XMPP/websocket | 5.9v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2022-24961 | Portainer Agent API server vulnerability | 9.8v3.1 | 1.6% | 2022-02-11 | |
| CVE-2022-24959 | Linux kernel memory leak | 5.5v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-24958 | Linux kernel release of an invalid pointer | 7.8v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-24955 | Foxit PDF Editor uncontrolled search path | 9.8v3.1 | 1.1% | 2022-02-11 | Fix |
| CVE-2022-24954 | Foxit PDF Editor out-of-bounds write | 9.8v3.1 | 11.9% | 2022-02-11 | Fix |
| CVE-2022-24927 | Samsung Mobile Samsung Video Player improper privilege management | 4.2CNA v3.1 | 0.3% | 2022-02-11 | Fix |
| CVE-2022-24926 | Samsung Mobile SmartTagPlugin improper input validation | 5.7CNA v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2022-24925 | Samsung Mobile Devices SettingsProvider improper input validation | 4.4CNA v3.1 | 0.3% | 2022-02-11 | Fix |
| CVE-2022-24924 | Samsung Livewallpaperservice An improper access control | 2.2CNA v3.1 | 0.7% | 2022-02-11 | Exploit codeFix |
| CVE-2022-24923 | Samsung Mobile SearchWidget improper access control | 4.0CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2022-24289 | Deserialization of untrusted data in Apache Cayenne | 8.8v3.1 | 2.3% | 2022-02-11 | Fix |
| CVE-2022-24112 | Apache APISIX authentication bypass | 9.8v3.1 | 96.1% | 2022-02-11 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-24003 | Samsung Mobile Bixby Vision information disclosure | 4.0CNA v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2022-24002 | Samsung Mobile Link sharing improper authorization | 4.0CNA v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2022-24001 | Samsung Mobile Devices Edge Panel information disclosure | 3.8CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-24000 | Samsung Mobile Devices improper input validation | 3.9CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23999 | Samsung Mobile Devices improper input validation | 3.9CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23998 | Samsung Mobile Samsung Camera improper access control | 6.2CNA v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2022-23997 | Samsung Mobile Samsung Wearable Devices improper access control | 4.0CNA v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-23996 | Samsung Mobile Samsung Wearable Devices improper access control | 4.0CNA v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-23995 | Samsung Mobile Samsung Wearable Devices improper access control | 4.0CNA v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-23994 | Samsung Mobile Samsung Wearable Devices StBedtimeModeReceiver in Wear OS improper access control | 3.3CNA v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-23853 | KDE Ktexteditor uncontrolled search path | 7.8v3.1 | 0.9% | 2022-02-11 | Fix |
| CVE-2022-23806 | Go unchecked return value | 9.1v3.1 | 3.1% | 2022-02-11 | Fix |
| CVE-2022-23773 | Go interpretation conflict | 7.5v3.1 | 2.7% | 2022-02-11 | Exploit codeFix |
| CVE-2022-23772 | Go math/big package integer overflow | 7.5v3.1 | 2.8% | 2022-02-11 | Fix |
| CVE-2022-23707 | Elastic Kibana cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-11 | Fix |
| CVE-2022-23634 | Information exposure when using Puma with Rails | 8.0CNA v3.1 | 2.1% | 2022-02-11 | Fix |
| CVE-2022-23633 | rails exposure of sensitive information in Action Pack | 7.4CNA v3.1 | 2.2% | 2022-02-11 | Fix |
| CVE-2022-23434 | Samsung Mobile Bixby Vision code injection | 4.4CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2022-23433 | Samsung Mobile Reminder improper access control | 4.3CNA v3.1 | 0.6% | 2022-02-11 | Fix |
| CVE-2022-23432 | Samsung Mobile Devices with Exynos chipsets improper input validation | 6.4CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23431 | Samsung Mobile Devices with Exynos chipsets buffer overflow | 6.4CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23429 | Samsung Mobile Devices out-of-bounds read | 5.3CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23428 | Samsung Mobile Devices with Exynos chipsets buffer overflow | 8.4CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2022-23427 | Samsung Mobile Devices improper input validation | 3.9CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23426 | Samsung Mobile Devices code injection | 4.4CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-23425 | Samsung Exynos improper input validation | 8.6CNA v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-22766 | BD Pyxis Products hard-coded credentials | 7.0CNA v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2022-22292 | Samsung Mobile Devices improper handling of insufficient permissions | 7.1CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-22291 | Samsung Mobile Devices telephony excessive logging | 5.5CNA v3.1 | 0.1% | 2022-02-11 | Fix |
| CVE-2022-0562 | libtiff null pointer dereference | 5.5CNA v3.1 | 1.3% | 2022-02-11 | Fix |
| CVE-2022-0561 | libtiff null pointer dereference | 5.5CNA v3.1 | 1.3% | 2022-02-11 | Fix |
| CVE-2022-0560 | Open redirect in microweber/microweber | 6.1v3.1 | 1.0% | 2022-02-11 | Fix |
| CVE-2022-0557 | OS command injection in microweber/microweber | 7.2v3.1 | 51.2% | 2022-02-11 | Exploit codeFix |
| CVE-2022-0483 | Acronis VSS Doctor local privilege escalation due to insecure folder permissions | 7.8v3.1 | 0.2% | 2022-02-11 | Fix |
| CVE-2022-0382 | Linux kernel An information disclosure | 5.5NVD v3.1 | 0.4% | 2022-02-11 | Fix |
| CVE-2022-0185 | Linux Kernel heap-based buffer overflow | 8.4NVD v3.1 | 25.2% | 2022-02-11 | KEVExploit codeFix |
| CVE-2022-24916 | Optimism l2geth contract self-destruct handling vulnerability | 7.5v3.1 | 1.6% | 2022-02-10 | |
| CVE-2022-24647 | Cuppacms path traversal | 8.1v3.1 | 1.0% | 2022-02-10 | |
| CVE-2022-24646 | PHPGurukul Hospital Management System SQL injection | 7.5v3.1 | 1.7% | 2022-02-10 | |
| CVE-2022-24568 | xxyopen Novel-Plus server-side request forgery | 9.8v3.1 | 1.2% | 2022-02-10 | |
| CVE-2022-24111 | Mahara missing authentication | 5.3v3.1 | 0.8% | 2022-02-10 | Fix |
| CVE-2022-23630 | Dependency verification bypass in Gradle | 7.5CNA v3.1 | 1.3% | 2022-02-10 | Fix |
| CVE-2022-23321 | Xerox Xmpie Ustore cross-site scripting | 4.8v3.1 | 0.6% | 2022-02-10 | Fix |
| CVE-2022-20749 | Cisco Small Business RV Series Routers buffer overflow | 10.0CNA v3.1 | 4.0% | 2022-02-10 | Fix |
| CVE-2022-20738 | Cisco Umbrella Secure Web Gateway File Inspection Bypass vulnerability | 5.8CNA v3.1 | 1.1% | 2022-02-10 | Fix |
| CVE-2022-20712 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 3.0% | 2022-02-10 | Fix |
| CVE-2022-20711 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 4.9% | 2022-02-10 | Fix |
| CVE-2022-20710 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 2.4% | 2022-02-10 | Fix |
| CVE-2022-20709 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 3.8% | 2022-02-10 | Fix |
| CVE-2022-20708 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 14.9% | 2022-02-10 | KEVFix |
| CVE-2022-20707 | Cisco Small Business RV Series routers stack-based buffer overflow | 10.0CNA v3.1 | 75.3% | 2022-02-10 | MetasploitExploit codeKCVFix |
| CVE-2022-20706 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 5.6% | 2022-02-10 | Fix |
| CVE-2022-20705 | Cisco Small Business RV Series routers stack-based buffer overflow | 10.0CNA v3.1 | 80.0% | 2022-02-10 | MetasploitExploit codeKCVFix |
| CVE-2022-20704 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 2.3% | 2022-02-10 | Fix |
| CVE-2022-20703 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 9.2% | 2022-02-10 | KEVFix |
| CVE-2022-20702 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 4.6% | 2022-02-10 | Fix |
| CVE-2022-20701 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 9.7% | 2022-02-10 | KEVFix |
| CVE-2022-20700 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 5.7% | 2022-02-10 | KEVFix |
| CVE-2022-20699 | Cisco Small Business RV Series Routers stack-based buffer overflow | 10.0CNA v3.1 | 72.5% | 2022-02-10 | KEVMetasploitExploit codeFix |
| CVE-2022-20680 | Cisco Prime Service Catalog information disclosure | 4.3CNA v3.1 | 1.1% | 2022-02-10 | Fix |
| CVE-2022-20630 | Cisco DNA Center information disclosure | 4.4CNA v3.1 | 0.2% | 2022-02-10 | Fix |
| CVE-2022-0558 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4NVD v3.1 | 0.9% | 2022-02-10 | Fix |
| CVE-2022-0554 | vim/vim GitHub repository out-of-range pointer offset | 7.8v3.1 | 1.6% | 2022-02-10 | Fix |
| CVE-2022-0021 | GlobalProtect App: Information exposure vulnerability when using Connect before Logon | 3.3CNA v3.1 | 0.2% | 2022-02-10 | Fix |
| CVE-2022-0020 | Cortex XSOAR: Stored cross-site scripting (XSS) vulnerability in Web interface | 6.8CNA v3.1 | 1.7% | 2022-02-10 | Exploit codeFix |
| CVE-2022-0019 | GlobalProtect App: Insufficiently protected credentials vulnerability on Linux | 4.7CNA v3.1 | 0.2% | 2022-02-10 | Fix |
| CVE-2022-0018 | Palo Alto Networks GlobalProtect App An information disclosure | 6.1CNA v3.1 | 0.7% | 2022-02-10 | Fix |
| CVE-2022-0017 | GlobalProtect App: Improper Link Resolution vulnerability leads to local privilege escalation | 7.0CNA v3.1 | 0.3% | 2022-02-10 | Fix |
| CVE-2022-0016 | GlobalProtect App: Privilege escalation vulnerability when using Connect before Logon | 7.4CNA v3.1 | 0.2% | 2022-02-10 | Fix |
| CVE-2022-0011 | PAN-OS: URL Category Exceptions Match More URLs than Intended in URL Filtering | 6.5CNA v3.1 | 0.7% | 2022-02-10 | Fix |
| CVE-2022-24694 | Mahara files accessible to external parties | 4.3v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) cross-site scripting | 6.1v3.1 | 30.9% | 2022-02-09 | KEVNucleiFix |
| CVE-2022-24677 | Hyphp Hybbs2 remote code execution | 9.8v3.1 | 2.5% | 2022-02-09 | |
| CVE-2022-24676 | Hyphp Hybbs2 unrestricted file upload | 8.8v3.1 | 1.5% | 2022-02-09 | |
| CVE-2022-24668 | swift-nio-http2 vulnerable to denial of service via ALTSVC or ORIGIN frames | 7.5v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2022-24667 | swift-nio-http2 vulnerable to denial of service | 7.5v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2022-24666 | swift-nio-http2 vulnerable to denial of service via invalid HTTP/2 HEADERS frame length | 7.5v3.1 | 1.4% | 2022-02-09 | Fix |
| CVE-2022-24321 | ClearSCADA improper check for exceptional conditions | 7.5v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2022-24320 | ClearSCADA improper certificate validation | 5.9v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2022-24319 | ClearSCADA improper certificate validation | 5.9v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-24318 | ClearSCADA inadequate encryption strength | 7.5v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2022-24317 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) missing authorization | 7.5v3.1 | 1.2% | 2022-02-09 | Fix |
| CVE-2022-24316 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) improper initialization | 7.5v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2022-24315 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) out-of-bounds read | 7.5v3.1 | 19.3% | 2022-02-09 | Fix |
| CVE-2022-24314 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) out-of-bounds read | 7.5v3.1 | 18.2% | 2022-02-09 | Fix |
| CVE-2022-24313 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) buffer overflow | 9.8v3.1 | 44.6% | 2022-02-09 | Fix |
| CVE-2022-24312 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) path traversal | 9.8v3.1 | 3.5% | 2022-02-09 | Fix |
| CVE-2022-24311 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) path traversal | 9.8v3.1 | 3.5% | 2022-02-09 | Fix |
| CVE-2022-24310 | Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) integer overflow | 9.8v3.1 | 2.2% | 2022-02-09 | Fix |
| CVE-2022-23631 | Prototype pollution leading to remote code execution in superjson | 9.1CNA v3.1 | 2.3% | 2022-02-09 | Fix |
| CVE-2022-23628 | Array literal misordering in github.com/open-policy-agent/opa | 6.3CNA v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2022-23622 | Cross-site scripting in registration template in xwiki-platform | 7.4CNA v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2022-23621 | Missing authorization in xwiki-platform | 5.5CNA v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-23620 | xwiki-platform path traversal in xwiki-platform-skin-skinx | 6.8CNA v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2022-23619 | Information exposure in xwiki-platform | 5.3CNA v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2022-23618 | Open redirect in xwiki-platform | 4.7CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-23617 | Missing authorization in xwiki-platform | 6.5CNA v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-23616 | Remote code execution in xwiki-platform | 8.8CNA v3.1 | 2.1% | 2022-02-09 | Fix |
| CVE-2022-23615 | Partial authorization bypass on document save in xwiki-platform | 5.4CNA v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2022-23378 | TastyIgniter cross-site scripting | 5.4v3.1 | 1.1% | 2022-02-09 | Exploit code |
| CVE-2022-23312 | Siemens Spectrum Power 4 cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-23280 | Microsoft Outlook for Mac security feature bypass | 5.3CNA v3.1 | 2.4% | 2022-02-09 | Fix |
| CVE-2022-23276 | Microsoft SQL Server for Linux Containers elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2022-23274 | Microsoft Dynamics GP remote code execution | 8.8CNA v3.1 | 2.1% | 2022-02-09 | Fix |
| CVE-2022-23273 | Microsoft Dynamics GP elevation of privilege | 7.1CNA v3.1 | 2.2% | 2022-02-09 | Fix |
| CVE-2022-23272 | Microsoft Dynamics GP elevation of privilege | 8.1CNA v3.1 | 2.6% | 2022-02-09 | Fix |
| CVE-2022-23271 | Microsoft Dynamics GP elevation of privilege | 6.5CNA v3.1 | 3.8% | 2022-02-09 | Fix |
| CVE-2022-23269 | Microsoft Dynamics GP spoofing | 5.4CNA v3.1 | 1.2% | 2022-02-09 | Fix |
| CVE-2022-23256 | Microsoft Azure Data Explorer spoofing | 8.1CNA v3.1 | 1.6% | 2022-02-09 | Fix |
| CVE-2022-23255 | Microsoft OneDrive for Android security feature bypass | 5.9CNA v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-23254 | Microsoft Power BI information disclosure | 4.9CNA v3.1 | 2.6% | 2022-02-09 | Fix |
| CVE-2022-23252 | Microsoft Office information disclosure | 5.5CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-23102 | Siemens SINEMA Remote Connect Server open redirect | 6.1v3.1 | 5.3% | 2022-02-09 | NucleiFix |
| CVE-2022-23049 | Exponent CMS cross-site scripting | 5.4v3.1 | 3.0% | 2022-02-09 | |
| CVE-2022-23048 | Exponent CMS unrestricted file upload | 7.2v3.1 | 2.1% | 2022-02-09 | |
| CVE-2022-23047 | Exponent CMS cross-site scripting | 4.8v3.1 | 2.9% | 2022-02-09 | |
| CVE-2022-22813 | Easergy P40 Series model numbers with Ethernet option bit as Q hard-coded credentials | 9.8v3.1 | 1.1% | 2022-02-09 | |
| CVE-2022-22812 | spaceLYnk (V2.6.2 and prior) cross-site scripting | 6.1v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-22811 | spaceLYnk (V2.6.2 and prior) cross-site request forgery | 8.1v3.1 | 0.4% | 2022-02-09 | Fix |
| CVE-2022-22810 | spaceLYnk (V2.6.2 and prior) missing brute-force protection | 9.8v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2022-22809 | spaceLYnk (V2.6.2 and prior) missing authentication | 5.3v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-22808 | EcoStruxure EV Charging Expert cross-site request forgery | 8.8v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2022-22807 | EcoStruxure EV Charging Expert clickjacking | 7.4v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-22780 | Zoom Chat Susceptible to Zip Bombing | 4.7CNA v3.1 | 1.7% | 2022-02-09 | Fix |
| CVE-2022-22779 | Retained exploded messages in Keybase clients for macOS and Windows | 3.7CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-22718 | Microsoft Windows Print Spooler privilege escalation | 7.8CNA v3.1 | 18.5% | 2022-02-09 | KEVExploit codeFix |
| CVE-2022-22717 | Microsoft Windows Print Spooler elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2022-22716 | Microsoft Excel information disclosure | 5.5CNA v3.1 | 4.6% | 2022-02-09 | Fix |
| CVE-2022-22715 | Microsoft Windows Named Pipe File System elevation of privilege | 7.8CNA v3.1 | 13.5% | 2022-02-09 | Exploit codeFix |
| CVE-2022-22712 | Microsoft Windows Hyper-V denial of service | 5.6CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-22710 | Microsoft Windows Common Log File System driver denial of service | 5.5CNA v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-22709 | Microsoft VP9 Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-02-09 | Fix |
| CVE-2022-22567 | Dell CPG BIOS insufficient verification of data authenticity | 4.7CNA v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-22566 | Dell CPG BIOS arbitrary code execution | 6.9CNA v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-22546 | SAP Business Objects Web Intelligence (BI Launchpad) cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-09 | Fix |
| CVE-2022-22545 | SAP NetWeaver Application Server ABAP and ABAP Platform information disclosure | 4.9v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-22544 | SAP Solution Manager information disclosure | 9.1v3.1 | 1.4% | 2022-02-09 | Fix |
| CVE-2022-22543 | SAP NetWeaver Application Server for ABAP (Kernel) and ABAP Platform (Kernel) denial of service | 7.5v3.1 | 1.4% | 2022-02-09 | Fix |
| CVE-2022-22542 | SAP S/4HANA information disclosure | 6.5v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-22540 | SAP NetWeaver AS ABAP (Workplace Server) SQL injection | 7.5v3.1 | 1.2% | 2022-02-09 | Fix |
| CVE-2022-22539 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2022-22538 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2022-22537 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-22536 | SAP Multiple Products HTTP request smuggling | 10.0v3.1 | 97.9% | 2022-02-09 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-22535 | SAP ERP HCM (Portugal) missing authorization | 6.5v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-22534 | SAP NetWeaver cross-site scripting | 6.1v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-22533 | SAP NetWeaver Application Server Java Due to improper error handling | 7.5v3.1 | 1.8% | 2022-02-09 | Fix |
| CVE-2022-22532 | SAP NetWeaver Application Server Java HTTP request smuggling | 9.8v3.1 | 2.4% | 2022-02-09 | Fix |
| CVE-2022-22528 | SAP Adaptive Server Enterprise uncontrolled search path | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-22005 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 16.5% | 2022-02-09 | Fix |
| CVE-2022-22004 | Microsoft Office ClickToRun remote code execution | 7.8CNA v3.1 | 2.6% | 2022-02-09 | Fix |
| CVE-2022-22003 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 2.4% | 2022-02-09 | Fix |
| CVE-2022-22002 | Microsoft Windows User Account Profile Picture denial of service | 5.5CNA v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2022-22001 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-22000 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 4.3% | 2022-02-09 | Fix |
| CVE-2022-21999 | Microsoft Windows Print Spooler privilege escalation | 7.8CNA v3.1 | 41.0% | 2022-02-09 | KEVExploit codeFix |
| CVE-2022-21998 | Microsoft Windows Common Log File System driver information disclosure | 5.5CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-21997 | Microsoft Windows Print Spooler elevation of privilege | 7.1CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-21996 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 3.0% | 2022-02-09 | Fix |
| CVE-2022-21995 | Microsoft Windows Hyper-V remote code execution | 7.9CNA v3.1 | 1.0% | 2022-02-09 | Fix |
| CVE-2022-21994 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 4.2% | 2022-02-09 | Fix |
| CVE-2022-21993 | Microsoft Windows services for NFS ONCRPC XDR driver information disclosure | 7.5CNA v3.1 | 43.6% | 2022-02-09 | Fix |
| CVE-2022-21992 | Microsoft Windows Mobile Device Management remote code execution | 7.8CNA v3.1 | 2.5% | 2022-02-09 | Fix |
| CVE-2022-21991 | Microsoft Visual Studio Code Remote Development extension remote code execution | 8.1CNA v3.1 | 2.1% | 2022-02-09 | Fix |
| CVE-2022-21989 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 3.2% | 2022-02-09 | Fix |
| CVE-2022-21988 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 2.9% | 2022-02-09 | Fix |
| CVE-2022-21987 | Microsoft SharePoint server spoofing | 8.0CNA v3.1 | 2.0% | 2022-02-09 | Fix |
| CVE-2022-21986 | NET denial of service | 7.5CNA v3.1 | 3.7% | 2022-02-09 | Fix |
| CVE-2022-21985 | Microsoft Windows Remote Access Connection Manager information disclosure | 5.5CNA v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-21984 | Microsoft Windows DNS server remote code execution | 8.8CNA v3.1 | 4.8% | 2022-02-09 | Fix |
| CVE-2022-21981 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-21974 | Microsoft Windows roaming Security Rights Management services remote code execution | 7.8CNA v3.1 | 5.0% | 2022-02-09 | Exploit codeFix |
| CVE-2022-21971 | Microsoft Windows Runtime remote code execution | 7.8CNA v3.1 | 53.8% | 2022-02-09 | KEVExploit codeFix |
| CVE-2022-21968 | Microsoft SharePoint server security feature bypass | 4.3CNA v3.1 | 2.1% | 2022-02-09 | Fix |
| CVE-2022-21965 | Microsoft Teams denial of service | 7.5CNA v3.1 | 3.0% | 2022-02-09 | Fix |
| CVE-2022-21957 | Microsoft Dynamics 365 On-Premises remote code execution | 7.2CNA v3.1 | 2.7% | 2022-02-09 | Fix |
| CVE-2022-21927 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-02-09 | Fix |
| CVE-2022-21926 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-02-09 | Fix |
| CVE-2022-21844 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-02-09 | Fix |
| CVE-2022-21825 | Citrix Workspace App An improper access control | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2022-21660 | Missing authorization in gin-vue-admin | 8.1CNA v3.1 | 1.1% | 2022-02-09 | Exploit codeFix |
| CVE-2022-21226 | Intel(R) Trace Analyzer and Collector out-of-bounds read | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-21220 | Intel(R) Quartus(R) Prime Pro Edition XML external entity injection | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2022-21218 | Intel(R) Trace Analyzer and Collector improper error handling | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-21205 | Intel(R) Quartus(R) Prime Pro Edition DSP Builder Pro XML external entity injection | 7.5v3.1 | 1.1% | 2022-02-09 | Fix |
| CVE-2022-21204 | Intel(R) Quartus(R) Prime Pro Edition incorrect default permissions | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2022-21203 | Intel(R) Quartus(R) Prime Standard Edition SafeNet Sentinel driver improper permissions | 7.8v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2022-21174 | Intel(R) Quartus(R) Prime Pro Edition third-party component improper access control | 7.8v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-21157 | Intel(R) Smart Campus Android application improper access control | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-21156 | Intel(R) Trace Analyzer and Collector uninitialized pointer access | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2022-21153 | Intel(R) Capital Global Summit Android application improper access control | 5.5v3.1 | 0.3% | 2022-02-09 | Fix |
| CVE-2022-21133 | Intel(R) Trace Analyzer and Collector out-of-bounds read | 5.5v3.1 | 0.2% | 2022-02-09 | Fix |
| CVE-2022-20046 | MediaTek chipsets missing release of memory after effective lifetime in Bluetooth | 5.5v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20045 | MediaTek chipsets use-after-free in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20044 | MediaTek chipsets use-after-free in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20043 | MediaTek chipsets improper privilege management in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20042 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in Bluetooth | 5.5v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20041 | MediaTek chipsets improper privilege management in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20040 | MediaTek chipsets stack-based buffer overflow in power_hal_manager_service | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20039 | MediaTek chipsets integer overflow or wraparound in ccu driver | 6.7v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20038 | MediaTek chipsets ccu driver memory corruption | 6.7v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20037 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in ion driver | 5.5v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20036 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in ion driver | 5.5v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20035 | MediaTek chipsets use-after-free in vcu driver | 4.4v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20034 | MediaTek chipsets improper authentication in Preloader XFLASH | 6.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20033 | MediaTek chipsets out-of-bounds read in camera driver | 4.4v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20032 | MediaTek chipsets out-of-bounds read in vow driver | 4.1v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20031 | MediaTek chipsets use-after-free in fb driver | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20030 | MediaTek chipsets stack-based buffer overflow in vow driver | 6.7v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20029 | MediaTek chipsets out-of-bounds read in cmdq driver | 4.4v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20028 | MediaTek chipsets stack-based buffer overflow in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20027 | MediaTek chipsets stack-based buffer overflow in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20026 | MediaTek chipsets stack-based buffer overflow in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20025 | MediaTek chipsets stack-based buffer overflow in Bluetooth | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20024 | MediaTek chipsets improper input validation in system service | 7.8v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-20017 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in ion driver | 5.5v3.1 | 0.1% | 2022-02-09 | Fix |
| CVE-2022-0539 | Cross-site scripting (XSS) Stored in ptrofimov/beanstalk_console | 5.4v3.1 | 0.6% | 2022-02-09 | Fix |
| CVE-2022-0538 | DoS vulnerability in bundled XStream library in Jenkins Core | 7.5v3.1 | 3.9% | 2022-02-09 | Fix |
| CVE-2022-0536 | Exposure of sensitive information to an unauthorized actor in follow-redirects | 5.9v3.1 | 1.3% | 2022-02-09 | Fix |
| CVE-2022-0534 | htmldoc out-of-bounds read | 5.5NVD v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-0532 | Incorrect permission assignment for critical resource in CRI-O | 4.2v3.1 | 0.8% | 2022-02-09 | Fix |
| CVE-2022-0530 | unzip out-of-bounds write | 5.5NVD v3.1 | 2.1% | 2022-02-09 | Fix |
| CVE-2022-0529 | unzip out-of-bounds write | 5.5NVD v3.1 | 2.4% | 2022-02-09 | Exploit codeFix |
| CVE-2022-0527 | Cross-site scripting (XSS) Stored in chatwoot/chatwoot | 6.1v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-0526 | Cross-site scripting (XSS) Stored in chatwoot/chatwoot | 6.1NVD v3.1 | 0.9% | 2022-02-09 | Fix |
| CVE-2022-0525 | Out-of-bounds read in mruby/mruby | 9.1v3.1 | 1.2% | 2022-02-09 | Fix |
| CVE-2022-0391 | Python urllib.parse injection | 7.5NVD v3.1 | 8.5% | 2022-02-09 | Fix |
| CVE-2022-0162 | TP-Link TL-WR841N web management interface vulnerability | 9.8v3.1 | 0.7% | 2022-02-09 | Fix |
| CVE-2022-24450 | Incorrect authorization in Nats nats-server | 8.8v3.1 | 1.3% | 2022-02-08 | Fix |
| CVE-2022-23627 | Inadequate access verification when using proxy commands in ArchiSteamFarm | 5.0CNA v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-23626 | Insufficient file checks in m1k1o/Blog | 8.5CNA v3.1 | 9.9% | 2022-02-08 | Exploit codeFix |
| CVE-2022-23340 | Joplin vulnerable to code injection | 9.8v3.1 | 1.5% | 2022-02-08 | Fix |
| CVE-2022-23331 | dataease unauthorized access | 8.8v3.1 | 1.2% | 2022-02-08 | |
| CVE-2022-22146 | TAGAWA Takao TransmitMail cross-site scripting | 6.1v3.1 | 0.8% | 2022-02-08 | Fix |
| CVE-2022-22142 | econosys system php_mailform checkbox reflected cross-site scripting | 6.1v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-21805 | econosys system php_mailform attached file name reflected cross-site scripting | 6.1v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-21799 | ELECOM Wrc-300febk-r Firmware ELECOM LAN router cross-site scripting | 5.2v3.1 | 0.4% | 2022-02-08 | Fix |
| CVE-2022-21713 | Exposure of sensitive information in Grafana | 4.3CNA v3.1 | 1.2% | 2022-02-08 | Fix |
| CVE-2022-21703 | Cross-site request forgery in Grafana | 6.3CNA v3.1 | 2.3% | 2022-02-08 | Fix |
| CVE-2022-21702 | Cross-site scripting in Grafana proxy | 6.5CNA v3.1 | 2.3% | 2022-02-08 | Fix |
| CVE-2022-21241 | Plus one CSV+ cross-site scripting | 9.6v3.1 | 3.2% | 2022-02-08 | Exploit codeFix |
| CVE-2022-21193 | TAGAWA Takao TransmitMail path traversal | 7.5v3.1 | 2.0% | 2022-02-08 | Fix |
| CVE-2022-21173 | ELECOM LAN routers hidden functionality | 8.8v3.1 | 0.4% | 2022-02-08 | Fix |
| CVE-2022-0524 | Business Logic Errors in publify/publify | 7.5v3.1 | 1.6% | 2022-02-08 | Fix |
| CVE-2022-0523 | radareorg/radare2 GitHub repository use-after-free | 7.8v3.1 | 1.1% | 2022-02-08 | Fix |
| CVE-2022-0522 | Access of memory location before start of buffer in radareorg/radare2 | 7.1v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-0521 | Access of memory location after end of buffer in radareorg/radare2 | 7.1v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-0520 | radareorg/radare2 NPM use-after-free | 7.8v3.1 | 1.1% | 2022-02-08 | Fix |
| CVE-2022-0519 | Buffer access with incorrect length value in radareorg/radare2 | 7.1v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-0518 | Heap-based buffer overflow in radareorg/radare2 | 7.1v3.1 | 1.0% | 2022-02-08 | Fix |
| CVE-2022-0510 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 5.4v3.1 | 0.6% | 2022-02-08 | Fix |
| CVE-2022-0509 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 1.4% | 2022-02-08 | Fix |
| CVE-2022-0508 | Server-side request forgery (SSRF) in chocobozzz/PeerTube | 5.3v3.1 | 0.9% | 2022-02-08 | Fix |
| CVE-2022-0506 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4NVD v3.1 | 0.6% | 2022-02-08 | Fix |
| CVE-2022-0505 | Cross-site request forgery (CSRF) in microweber/microweber | 6.5v3.1 | 0.7% | 2022-02-08 | Fix |
| CVE-2022-0504 | Generation of error message containing sensitive information in microweber/microweber | 6.5v3.1 | 1.2% | 2022-02-08 | Fix |
| CVE-2022-0139 | radareorg/radare2 GitHub repository use-after-free | 9.8v3.1 | 1.2% | 2022-02-08 | Fix |
| CVE-2022-23624 | frourio-express request validators improper input validation | 8.1CNA v3.1 | 1.2% | 2022-02-07 | Fix |
| CVE-2022-23623 | frourio request validators improper input validation | 8.1CNA v3.1 | 1.2% | 2022-02-07 | Fix |
| CVE-2022-23613 | Privilege escalation on xrdp | 7.8CNA v3.1 | 0.5% | 2022-02-07 | Fix |
| CVE-2022-23320 | Xerox Xmpie Ustore improper authentication | 7.5v3.1 | 1.6% | 2022-02-07 | Fix |
| CVE-2022-23263 | Microsoft Edge (Chromium-based) elevation of privilege | 7.7CNA v3.1 | 0.8% | 2022-02-07 | Fix |
| CVE-2022-23262 | Microsoft Edge (Chromium-based) elevation of privilege | 6.3CNA v3.1 | 1.2% | 2022-02-07 | Fix |
| CVE-2022-23261 | Microsoft Edge (Chromium-based) tampering | 5.3CNA v3.1 | 1.6% | 2022-02-07 | Fix |
| CVE-2022-23184 | Octopus Deploy Octopus Server open redirect | 6.1v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2022-22931 | Path traversal in Apache James | 4.3v3.1 | 1.8% | 2022-02-07 | Exploit codeFix |
| CVE-2022-22680 | Synology DiskStation Manager (DSM) Web Server information disclosure | 5.3CNA v3.1 | 1.1% | 2022-02-07 | Fix |
| CVE-2022-22679 | Synology DiskStation Manager (DSM) path traversal | 6.5CNA v3.1 | 1.2% | 2022-02-07 | Fix |
| CVE-2022-21816 | NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming denial of service | 5.5CNA v3.1 | 0.2% | 2022-02-07 | Fix |
| CVE-2022-21815 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.2% | 2022-02-07 | Fix |
| CVE-2022-21814 | NVIDIA GPU Display Driver improper handling of insufficient permissions | 6.1CNA v3.1 | 0.2% | 2022-02-07 | Fix |
| CVE-2022-21813 | NVIDIA GPU Display Driver improper handling of insufficient permissions | 6.1CNA v3.1 | 0.2% | 2022-02-07 | Fix |
| CVE-2022-21712 | Cookie and header exposure in twisted | 7.5CNA v3.1 | 1.4% | 2022-02-07 | Fix |
| CVE-2022-0474 | OTRSCustomContactFields disclosure of mail addresses | 2.4CNA v3.1 | 0.6% | 2022-02-07 | Fix |
| CVE-2022-0473 | OTRS dynamic field error message is vulnerable to XSS | 3.8CNA v3.1 | 0.5% | 2022-02-07 | Fix |
| CVE-2022-0149 | WooCommerce Store Exporter WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 2.3% | 2022-02-07 | NucleiFix |
| CVE-2022-0148 | All-in-one Floating Contact Form WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4NVD v3.1 | 1.6% | 2022-02-07 | NucleiFix |
| CVE-2022-24552 | Starwindsoftware Nas OS command injection | 9.8v3.1 | 1.3% | 2022-02-06 | Fix |
| CVE-2022-24551 | Starwindsoftware Nas improper authentication | 8.8v3.1 | 0.9% | 2022-02-06 | |
| CVE-2022-23206 | Server-side request forgery in Traffic Ops endpoint POST /user/login/oauth | 7.5v3.1 | 2.0% | 2022-02-06 | Fix |
| CVE-2022-22833 | Servisnet Tessa information disclosure | 7.5v3.1 | 11.5% | 2022-02-06 | Exploit codeFix |
| CVE-2022-22832 | Servisnet Tessa insecure direct object reference | 9.8v3.1 | 14.1% | 2022-02-06 | Exploit code |
| CVE-2022-22831 | Servisnet Tessa improper authentication | 9.8v3.1 | 11.4% | 2022-02-06 | Exploit code |
| CVE-2022-0502 | Cross-site scripting (XSS) Stored in livehelperchat/livehelperchat | 5.4v3.1 | 0.6% | 2022-02-06 | Fix |
| CVE-2022-0501 | Cross-site scripting (XSS) Reflected in ptrofimov/beanstalk_console | 6.1NVD v3.1 | 0.9% | 2022-02-05 | Fix |
| CVE-2022-0437 | Cross-site scripting (XSS) DOM in karma-runner/karma | 6.1v3.1 | 15.2% | 2022-02-05 | NucleiFix |
| CVE-2022-24448 | Linux kernel improper exception handling | 3.3v3.1 | 0.4% | 2022-02-04 | Fix |
| CVE-2022-24348 | argoproj argo-cd path traversal and dereference of symlinks in Argo CD | 7.7NVD v3.1 | 2.7% | 2022-02-04 | Fix |
| CVE-2022-24262 | Voipmonitor unrestricted file upload | 8.8v3.1 | 1.8% | 2022-02-04 | Fix |
| CVE-2022-24260 | Voipmonitor A SQL injection | 9.8v3.1 | 50.9% | 2022-02-04 | NucleiFix |
| CVE-2022-24259 | Voipmonitor improper authentication | 9.8v3.1 | 2.0% | 2022-02-04 | Fix |
| CVE-2022-24249 | gpac null pointer dereference | 5.5v3.1 | 0.6% | 2022-02-04 | Fix |
| CVE-2022-24172 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24171 | Tendacn G1 command injection | 9.8v3.1 | 3.0% | 2022-02-04 | |
| CVE-2022-24170 | Tendacn G1 command injection | 9.8v3.1 | 3.0% | 2022-02-04 | |
| CVE-2022-24169 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24168 | Tendacn G1 command injection | 9.8v3.1 | 3.0% | 2022-02-04 | |
| CVE-2022-24167 | Tendacn G1 command injection | 9.8v3.1 | 3.0% | 2022-02-04 | |
| CVE-2022-24166 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24165 | Tendacn G1 command injection | 9.8v3.1 | 3.0% | 2022-02-04 | |
| CVE-2022-24164 | Tendacn G1 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24163 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24162 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24161 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24160 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24159 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24158 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24157 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24156 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24155 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24154 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24153 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24152 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24151 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24150 | Tenda AX3 command injection | 9.8v3.1 | 2.7% | 2022-02-04 | |
| CVE-2022-24149 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24148 | Tenda AX3 command injection | 9.8v3.1 | 2.7% | 2022-02-04 | |
| CVE-2022-24147 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24146 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24145 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24144 | Tenda AX3 command injection | 9.8v3.1 | 18.5% | 2022-02-04 | |
| CVE-2022-24143 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24142 | Tenda AX3 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-24129 | Shibboleth OIDC Op server-side request forgery | 8.2v3.1 | 6.1% | 2022-02-04 | NucleiFix |
| CVE-2022-24115 | Acronis Cyber Protect Home Office and True Image library loading improper signature verification | 7.8v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2022-24114 | Acronis Cyber Protect Home Office and True Image application startup race condition | 7.0v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2022-24113 | Acronis Cyber Protect and True Image child processes privilege escalation | 7.8v3.1 | 0.2% | 2022-02-04 | Fix |
| CVE-2022-23980 | Yasr Yet Another Stars Rating WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23947 | Kicad Eda stack-based buffer overflow | 7.8v3.1 | 1.5% | 2022-02-04 | Fix |
| CVE-2022-23946 | Kicad Eda stack-based buffer overflow | 7.8v3.1 | 1.7% | 2022-02-04 | Fix |
| CVE-2022-23913 | Apache ActiveMQ Artemis DoS | 7.5v3.1 | 2.7% | 2022-02-04 | Fix |
| CVE-2022-23805 | Trend Micro Worry-Free Business Security out-of-bounds read | 7.1v3.1 | 0.7% | 2022-02-04 | Fix |
| CVE-2022-23614 | Code injection in Twig | 8.8CNA v3.1 | 8.2% | 2022-02-04 | Exploit codeFix |
| CVE-2022-23611 | OS command injection in iTunesRPC-Remastered | 8.1CNA v3.1 | 1.4% | 2022-02-04 | |
| CVE-2022-23609 | iTunesRPC-Remastered path traversal | 8.3CNA v3.1 | 1.0% | 2022-02-04 | |
| CVE-2022-23605 | Expired Ephemeral messages not reliably removed in wire-webapp | 4.4CNA v3.1 | 0.3% | 2022-02-04 | Fix |
| CVE-2022-23600 | fleetdm fleet limited ability to spoof SAML authentication with missing audience verification | 5.3CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23595 | Null pointer dereference in TensorFlow | 5.3CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23594 | Out-of-bounds read in TensorFlow | 8.8CNA v3.1 | 0.1% | 2022-02-04 | Fix |
| CVE-2022-23593 | Google TensorFlow MLIR-TFRT broadcast simplification denial of service | 5.9CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23592 | Out-of-bounds read in TensorFlow | 8.1CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23591 | Stack overflow in TensorFlow | 7.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23590 | Crash due to erroneous `StatusOr` in TensorFlow | 5.9CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2022-23589 | Null pointer dereference in Grappler's `IsConstant` in TensorFlow | 6.5CNA v3.1 | 1.1% | 2022-02-04 | Fix |
| CVE-2022-23588 | `CHECK`-fails due to attempting to build a reference tensor in TensorFlow | 6.5CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23587 | Integer overflow in TensorFlow | 8.8CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23586 | tensorflow multiple `CHECK`-fails in `function.cc` in TensowFlow | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23585 | Memory leak in decoding PNG images in TensorFlow | 4.3CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2022-23584 | tensorflow use-after-free in `DecodePng` kernel | 7.6CNA v3.1 | 0.7% | 2022-02-04 | Fix |
| CVE-2022-23583 | `CHECK`-failures in binary ops in TensorFlow | 6.5CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23582 | `CHECK`-failures in `TensorByteSize` in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23581 | `CHECK`-failures during Grappler's `IsSimplifiableReshape` in TensorFlow | 6.5CNA v3.1 | 1.2% | 2022-02-04 | Fix |
| CVE-2022-23580 | Abort caused by allocating a vector that is too large in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23579 | `CHECK`-failures during Grappler's `SafeToRemoveIdentity` in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23578 | Memory leak in TensorFlow | 4.3CNA v3.1 | 0.7% | 2022-02-04 | Fix |
| CVE-2022-23577 | Google TensorFlow GetInitOp null pointer dereference | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23576 | Integer overflow in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23575 | Integer overflow in TensorFlow | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23574 | Out-of-bounds read and write in TensorFlow | 8.8CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23573 | Uninitialized variable access in TensorFlow | 7.6CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23572 | Crash when type cannot be specialized in TensorFlow | 6.5CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2022-23571 | Reachable assertion in TensorFlow | 6.5CNA v3.1 | 0.5% | 2022-02-04 | Fix |
| CVE-2022-23570 | Google TensorFlow protobuf tensor decoding null pointer dereference | 6.5CNA v3.1 | 1.0% | 2022-02-04 | Fix |
| CVE-2022-23566 | Out-of-bounds write in TensorFlow | 8.8CNA v3.1 | 0.9% | 2022-02-04 | Fix |
| CVE-2022-23565 | Google TensorFlow SavedModel loading reachable assertion | 6.5CNA v3.1 | 0.5% | 2022-02-04 | Fix |
| CVE-2022-23564 | Reachable assertion in TensorFlow | 6.5CNA v3.1 | 0.5% | 2022-02-04 | Fix |
| CVE-2022-23563 | Insecure temporary file in TensorFlow | 7.1CNA v3.1 | 0.1% | 2022-02-04 | Fix |
| CVE-2022-23562 | Integer overflow in TensorFlow | 7.6CNA v3.1 | 0.6% | 2022-02-04 | Fix |
| CVE-2022-23561 | tensorflow out-of-bounds write in TFLite | 8.8CNA v3.1 | 0.5% | 2022-02-04 | Fix |
| CVE-2022-23560 | tensorflow read and Write outside of bounds in TFLite | 8.8CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23559 | tensorflow integer overflow in TFLite | 8.8CNA v3.1 | 1.2% | 2022-02-04 | Fix |
| CVE-2022-23558 | tensorflow integer overflow in TFLite array creation | 7.6CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23557 | tensorflow division by zero in TFLite | 6.5CNA v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-23379 | Emlog getblogidsfromtagid SQL injection | 9.8v3.1 | 1.4% | 2022-02-04 | |
| CVE-2022-23330 | jpress HelloWorldAddonController.java remote code execution | 8.8v3.1 | 1.9% | 2022-02-04 | |
| CVE-2022-23329 | Ujcms Jspxcms unrestricted file upload | 9.8v3.1 | 14.4% | 2022-02-04 | |
| CVE-2022-23316 | Taogogo taoCMS files accessible to external parties | 4.9v3.1 | 1.0% | 2022-02-04 | |
| CVE-2022-22987 | Advantech ADAM-3600 hard-coded cryptographic key | 9.8v3.1 | 1.2% | 2022-02-04 | |
| CVE-2022-22939 | VMware Cloud Foundation sensitive information in log files | 4.9v3.1 | 0.8% | 2022-02-04 | Fix |
| CVE-2022-22804 | EcoStruxure Power Monitoring Expert cross-site scripting | 5.4v3.1 | 0.5% | 2022-02-04 | Fix |
| CVE-2022-22727 | EcoStruxure Power Monitoring Expert improper input validation | 8.8v3.1 | 1.2% | 2022-02-04 | Fix |