CVE-2022 records published in March 2022
This page lists the 1,318 CVE-2022 records published in March 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 28821.9% of these records
- Listed in CISA KEV
- 151.1% of these records
- Reported exploited
- 30.2% of these records
- Detection signal
- 785.9% of these records
- Exploit code
- 715.4% of these records
- Actionable vendor fix
- 96072.8% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in March 2022 have had from about 55 months to about 56 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-28128 | HiBARA Software AttacheCase untrusted search path | 7.8v3.1 | 0.4% | 2022-03-31 | Fix |
| CVE-2022-27966 | NetSarang Xshell unquoted search path | 6.5v3.1 | 0.5% | 2022-03-31 | Fix |
| CVE-2022-27965 | NetSarang Xlpd unquoted search path | 6.5v3.1 | 0.5% | 2022-03-31 | Fix |
| CVE-2022-27964 | NetSarang Xmanager unquoted search path | 6.5v3.1 | 0.5% | 2022-03-31 | Fix |
| CVE-2022-27963 | NetSarang XFTP unquoted search path | 6.5v3.1 | 0.5% | 2022-03-31 | Fix |
| CVE-2022-27496 | Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors. | 6.1v3.1 | 0.7% | 2022-03-31 | Fix |
| CVE-2022-27052 | Freesshd freeFTPd unquoted search path | 7.8v3.1 | 0.3% | 2022-03-31 | |
| CVE-2022-27050 | Bitcomet unquoted search path | 7.8v3.1 | 0.4% | 2022-03-31 | |
| CVE-2022-27049 | Raidrive log files vulnerability | 2.0v3.1 | 0.3% | 2022-03-31 | |
| CVE-2022-26546 | Hospital Management System missing authorization | 9.1v3.1 | 1.4% | 2022-03-31 | |
| CVE-2022-26019 | pfSense CE and pfSense Plus improper access control | 8.8v3.1 | 4.5% | 2022-03-31 | Fix |
| CVE-2022-25915 | ELECOM LAN routers improper access control | 8.8v3.1 | 0.4% | 2022-03-31 | Fix |
| CVE-2022-25348 | HiBARA Software AttacheCase untrusted search path | 7.8v3.1 | 0.4% | 2022-03-31 | Fix |
| CVE-2022-24798 | Insufficient password hash filtering in some IRRd queries and exports | 7.5CNA v3.1 | 1.4% | 2022-03-31 | Fix |
| CVE-2022-24797 | Exposure of sensitive information in Pomerium | 6.5CNA v3.1 | 1.4% | 2022-03-31 | Fix |
| CVE-2022-24796 | Remote command injection in RaspberryMatic | 10.0CNA v3.1 | 3.7% | 2022-03-31 | Fix |
| CVE-2022-24794 | Open redirect in express-openid-connect | 7.5CNA v3.1 | 0.7% | 2022-03-31 | Fix |
| CVE-2022-24791 | Bytecode Alliance Wasmtime Cranelift compiler use-after-free | 8.1CNA v3.1 | 1.2% | 2022-03-31 | Fix |
| CVE-2022-24758 | Insertion of sensitive information into log file affects Jupyter Notebook | 7.5CNA v3.1 | 1.1% | 2022-03-31 | Fix |
| CVE-2022-24299 | pfSense CE and pfSense Plus improper input validation | 8.8v3.1 | 1.9% | 2022-03-31 | Fix |
| CVE-2022-24136 | Hospital Management System unrestricted file upload | 9.8v3.1 | 1.9% | 2022-03-31 | |
| CVE-2022-23183 | Delicious Brains Advanced Custom Fields missing authorization | 6.5v3.1 | 1.5% | 2022-03-31 | Fix |
| CVE-2022-22986 | NTT East Netcommunity OG410X and OG810X series config file OS command injection | 8.8v3.1 | 0.7% | 2022-03-31 | Fix |
| CVE-2022-22311 | IBM Security Verify Access man-in-the-middle | 4.8CNA v3.0 | 0.7% | 2022-03-31 | Fix |
| CVE-2022-1191 | SSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchat | 8.1v3.1 | 1.0% | 2022-03-31 | Fix |
| CVE-2022-1176 | Loose comparison causes IDOR on multiple endpoints in livehelperchat/livehelperchat | 7.5v3.1 | 1.3% | 2022-03-31 | Fix |
| CVE-2022-0350 | Cross-site scripting (XSS) Stored in vanessa219/vditor | 5.4v3.1 | 0.5% | 2022-03-31 | Fix |
| CVE-2022-28223 | Tekon Kio unrestricted file upload | 7.2NVD v3.1 | 1.1% | 2022-03-30 | |
| CVE-2022-28209 | MediaWiki AntiSpoof extension vulnerability | 9.8v3.1 | 1.3% | 2022-03-30 | Fix |
| CVE-2022-28206 | MediaWiki FileImporter extension vulnerability | 9.8v3.1 | 1.5% | 2022-03-30 | Fix |
| CVE-2022-28205 | MediaWiki CentralAuth extension vulnerability | 9.8v3.1 | 1.5% | 2022-03-30 | Fix |
| CVE-2022-28202 | mediawiki An cross-site scripting | 6.1v3.1 | 1.2% | 2022-03-30 | Fix |
| CVE-2022-27907 | Sonatype Nexus Repository Manager server-side request forgery | 4.3v3.1 | 0.7% | 2022-03-30 | Fix |
| CVE-2022-27816 | Data Loss/denial of service in Swhkd | 7.1v3.1 | 0.5% | 2022-03-30 | Fix |
| CVE-2022-27815 | Insecure temporary file in Swhkd | 7.8v3.1 | 0.5% | 2022-03-30 | Fix |
| CVE-2022-27772 | VMware Spring Boot resource exposure | 7.8v3.1 | 0.6% | 2022-03-30 | Exploit codeFix |
| CVE-2022-27432 | pluck-cms Pluck A cross-site request forgery | 8.8v3.1 | 0.6% | 2022-03-30 | |
| CVE-2022-26951 | RSA Archer cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-26950 | RSA Archer open redirect | 6.1v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-26949 | RSA Archer improper access control | 6.5v3.1 | 1.0% | 2022-03-30 | Fix |
| CVE-2022-26948 | RSA Archer insufficiently protected credentials | 7.5v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-26947 | RSA Archer cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-26646 | oretnom23 Banking System local file inclusion | 9.8v3.1 | 1.2% | 2022-03-30 | |
| CVE-2022-26645 | oretnom23 Banking System Online remote code execution | 9.8v3.1 | 2.5% | 2022-03-30 | |
| CVE-2022-26644 | oretnom23 Banking System cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-30 | |
| CVE-2022-26244 | Hospitals Patient Records Management System stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-30 | |
| CVE-2022-25620 | Profelis IT Consultancy SambaBox stored cross-site scripting (XSS) | 3.8CNA v3.1 | 0.4% | 2022-03-30 | Fix |
| CVE-2022-25619 | Profelis IT Consultancy SambaBox authenticated command injection to RCE | 3.8CNA v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2022-25598 | Apache DolphinScheduler user registration is vulnerable to ReDoS attacks | 7.5v3.1 | 2.0% | 2022-03-30 | Fix |
| CVE-2022-25008 | TOTOLINK EX1200T missing authentication | 8.8v3.1 | 4.4% | 2022-03-30 | |
| CVE-2022-24790 | HTTP request smuggling in puma | 9.1CNA v3.1 | 2.2% | 2022-03-30 | Fix |
| CVE-2022-24763 | Infinite loop in PJSIP | 7.5CNA v3.1 | 2.1% | 2022-03-30 | Fix |
| CVE-2022-24693 | Baicells NEUTRINO430 hard-coded credentials | 9.8v3.1 | 3.3% | 2022-03-30 | Exploit codeFix |
| CVE-2022-24135 | Qingscan cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-30 | |
| CVE-2022-24132 | phpshe denial of service | 7.5v3.1 | 1.1% | 2022-03-30 | |
| CVE-2022-24131 | Douco DouPHP cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-30 | |
| CVE-2022-23869 | RuoYi incorrect permission assignment | 6.5v3.1 | 0.7% | 2022-03-30 | |
| CVE-2022-23868 | RuoYi log export CSV injection | 7.8v3.1 | 0.7% | 2022-03-30 | |
| CVE-2022-23801 | Joomla! CMS core XSS attack vector through SVG | 6.1v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-23800 | Core Inadequate content filtering within the filter code | 6.1v3.1 | 0.7% | 2022-03-30 | Fix |
| CVE-2022-23799 | Joomla! CMS core variable tampering on JInput $_REQUEST data | 9.8v3.1 | 1.2% | 2022-03-30 | Fix |
| CVE-2022-23798 | Joomla! CMS core Inadequate validation of internal URLs | 6.1v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-23797 | Joomla! CMS Core Inadequate filtering on the selected Ids | 9.8v3.1 | 1.1% | 2022-03-30 | Fix |
| CVE-2022-23796 | Joomla! CMS core Missing input validation within com_fields class inputs | 6.1v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-23795 | Joomla! CMS core User row are not bound to a authentication mechanism | 9.8v3.1 | 1.1% | 2022-03-30 | Fix |
| CVE-2022-23794 | Core path disclosure within filesystem error messages | 5.3v3.1 | 0.9% | 2022-03-30 | Fix |
| CVE-2022-23793 | Joomla! CMS Core Zip Slip within the Tar extractor | 7.5v3.1 | 2.1% | 2022-03-30 | Fix |
| CVE-2022-23136 | ZTE ZXHN F680 There is a stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-30 | Fix |
| CVE-2022-22996 | SanDisk Professional G-RAID 4/8 Software Utility, privilege escalation | 7.8CNA v3.1 | 0.3% | 2022-03-30 | Fix |
| CVE-2022-22772 | TIBCO Managed File Transfer Platform Server remote code execution | 8.5CNA v3.1 | 2.3% | 2022-03-30 | Fix |
| CVE-2022-20002 | Android incfs privilege escalation | 7.8v3.1 | 0.1% | 2022-03-30 | Fix |
| CVE-2022-1181 | Stored cross-site scripting in openemr/openemr | 5.4NVD v3.1 | 51.5% | 2022-03-30 | Fix |
| CVE-2022-1180 | Reflected cross-site scripting in openemr/openemr | 3.5NVD v3.1 | 0.6% | 2022-03-30 | Fix |
| CVE-2022-1179 | Non-Privilege User can Created New Rule and lead to stored cross-site scripting in openemr/openemr | 5.4v3.1 | 76.9% | 2022-03-30 | Fix |
| CVE-2022-1178 | Stored cross-site scripting in openemr/openemr | 5.4NVD v3.1 | 51.6% | 2022-03-30 | Fix |
| CVE-2022-1177 | Accounting User can Download Patient Reports in openemr in openemr/openemr | 4.3v3.1 | 0.9% | 2022-03-30 | Fix |
| CVE-2022-1172 | Null pointer dereference caused Segmentation Fault in gpac/gpac | 5.0v3.1 | 0.8% | 2022-03-30 | Fix |
| CVE-2022-1163 | Cross-site scripting (XSS) Stored in mineweb/Minewebcms | 4.8v3.1 | 3.5% | 2022-03-30 | Exploit code |
| CVE-2022-1160 | Heap buffer overflow in get_one_sourceline in Vim/Vim | 7.8v3.1 | 1.3% | 2022-03-30 | Fix |
| CVE-2022-1155 | Old sessions are not blocked by the login enable function. in snipe/Snipe-IT | 7.4v3.1 | 1.0% | 2022-03-30 | Fix |
| CVE-2022-1154 | vim/vim utf_ptr2char in GitHub repository use-after-free | 7.8v3.1 | 1.5% | 2022-03-30 | Fix |
| CVE-2022-0998 | Linux kernel An integer overflow | 7.8NVD v3.1 | 0.4% | 2022-03-30 | Fix |
| CVE-2022-28160 | Arbitrary file read vulnerability in Jenkins Tests Selector Plugin | 6.5v3.1 | 1.1% | 2022-03-29 | Fix |
| CVE-2022-28159 | Stored cross-site scripting vulnerability in Jenkins Tests Selector Plugin | 5.4v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28158 | Missing permission Jenkins Pipeline Phoenix AutoTest Plugin | 6.5v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28157 | Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin | 6.5v3.1 | 1.4% | 2022-03-29 | Fix |
| CVE-2022-28156 | Path traversal in Jenkins Phoenix AutoTest Plugin | 6.5v3.1 | 1.6% | 2022-03-29 | Fix |
| CVE-2022-28155 | XML external entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin | 8.1v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28154 | Enkins Coverage/complexity Scatter Plot Plugin XML external entity Reference | 8.1v3.1 | 1.0% | 2022-03-29 | Fix |
| CVE-2022-28153 | Cross-site scripting in Jenkins SiteMonitor Plugin | 5.4v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28152 | CSRF vulnerability in Jenkins Job And Node Ownership Plugin | 4.3v3.1 | 0.6% | 2022-03-29 | Fix |
| CVE-2022-28151 | Missing permission check in Jenkins Job And Node Ownership Plugin | 4.3v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28150 | Cross-site request forgery in Jenkins Job And Node Ownership Plugin | 8.8v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28149 | Stored cross-site scripting vulnerability in Jenkins Job And Node Ownership Plugin | 5.4v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28148 | Path traversal vulnerability on Windows in Jenkins Continuous Integration With Toad Edge Plugin | 6.5v3.1 | 1.8% | 2022-03-29 | Fix |
| CVE-2022-28147 | Missing permission check in Jenkins Continuous Integration With Toad Edge Plugin | 4.3v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28146 | Arbitrary file read vulnerability in Jenkins Continuous Integration With Toad Edge Plugin | 6.5v3.1 | 1.8% | 2022-03-29 | Fix |
| CVE-2022-28145 | Cross-site scripting (XSS) vulnerability in Jenkins Continuous Integration With Toad Edge Plugin | 5.4v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28144 | Missing permission checks in Jenkins Proxmox Plugin | 6.5v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-28143 | CSRF vulnerability in Proxmox Plugin | 6.5v3.1 | 0.5% | 2022-03-29 | Fix |
| CVE-2022-28142 | SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin | 7.5v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28141 | Password stored in plain text by Jenkins Proxmox Plugin | 6.5v3.1 | 0.9% | 2022-03-29 | Fix |
| CVE-2022-28140 | XXE vulnerability in Jenkins Flaky Test Handler Plugin | 8.1v3.1 | 1.0% | 2022-03-29 | Fix |
| CVE-2022-28139 | Missing permission check in Jenkins RocketChat Notifier Plugin | 4.3v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28138 | CSRF vulnerability in Jenkins RocketChat Notifier Plugin | 4.3v3.1 | 0.6% | 2022-03-29 | Fix |
| CVE-2022-28137 | Missing permission check in Jenkins JiraTestResultReporter Plugin | 4.3v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28136 | CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin | 8.8v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28135 | Plaintext storage in Jenkins Instant-messaging Plugin | 6.5v3.1 | 0.9% | 2022-03-29 | Fix |
| CVE-2022-28134 | Missing permission checks in Jekins Bitbucket Server Integration Plugin | 5.4v3.1 | 0.7% | 2022-03-29 | Fix |
| CVE-2022-28133 | Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin | 5.4v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-27175 | Delta Electronics DIAEnergie SQL injection in GetCalcTagList | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26887 | Delta Electronics DIAEnergie SQL injection in DIAE_HandlerTag_KID.ashx | 9.8v3.1 | 9.5% | 2022-03-29 | Fix |
| CVE-2022-26871 | Trend Micro Apex Central arbitrary file upload | 9.8v3.1 | 19.6% | 2022-03-29 | KEVFix |
| CVE-2022-26839 | Delta Electronics DIAEnergie incorrect default permissions | 7.8v3.1 | 0.2% | 2022-03-29 | Fix |
| CVE-2022-26836 | Delta Electronics DIAEnergie SQL injection in HandlerExport.ashx/Calendar.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26667 | Delta Electronics DIAEnergie SQL injection in GetDemandAnalysisData | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26666 | Delta Electronics DIAEnergie SQL injection in HandlerDialogECC.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26514 | Delta Electronics DIAEnergie SQL injection in DIAE_tagHandler.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26349 | Delta Electronics DIAEnergie SQL injection in DIAE_eccoefficientHandler.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26338 | Delta Electronics DIAEnergie SQL injection in DIAE_hierarchyHandler.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26269 | Suzuki Connect CAN messages vulnerability | 4.6v3.1 | 0.4% | 2022-03-29 | Exploit codeFix |
| CVE-2022-26069 | Delta Electronics DIAEnergie SQL injection in HandlerPage_KID.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26065 | Delta Electronics DIAEnergie SQL injection in GetLatestDemandNode and GetDemandAnalysisData | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26059 | Delta Electronics DIAEnergie SQL injection in GetQueryData | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-26013 | Delta Electronics DIAEnergie SQL injection in DIAE_dmdsetHandler.ashx | 9.8v3.1 | 8.9% | 2022-03-29 | Fix |
| CVE-2022-25980 | Delta Electronics DIAEnergie SQL injection in HandlerCommon.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-25880 | Delta Electronics DIAEnergie SQL injection in DIAE_hierarchyHandler.ashx | 9.8v3.1 | 1.2% | 2022-03-29 | Fix |
| CVE-2022-25521 | NUUO Network Video Recorder Firmware hard-coded credentials | 9.8v3.1 | 1.7% | 2022-03-29 | |
| CVE-2022-25420 | Nttr Goo Blog injection | 9.8v3.1 | 2.6% | 2022-03-29 | |
| CVE-2022-25347 | Delta Electronics DIAEnergie path traversal | 7.5NVD v3.1 | 11.4% | 2022-03-29 | Fix |
| CVE-2022-24957 | Dhc-vision Eqms cross-site scripting | 5.4v3.1 | 0.7% | 2022-03-29 | |
| CVE-2022-24956 | shopware B2B Suite SQL injection | 6.5v3.1 | 1.4% | 2022-03-29 | |
| CVE-2022-23937 | Wind River Vxworks out-of-bounds read | 7.5v3.1 | 1.0% | 2022-03-29 | Fix |
| CVE-2022-23903 | Pear Admin Think cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-29 | |
| CVE-2022-23901 | re2c out-of-bounds write | 9.8v3.1 | 1.6% | 2022-03-29 | Fix |
| CVE-2022-23059 | Shopizer stored XSS in Manage Images | 4.8CNA v3.1 | 0.6% | 2022-03-29 | Fix |
| CVE-2022-22948 | VMware vCenter Server incorrect default permissions | 6.5NVD v3.1 | 13.3% | 2022-03-29 | KEVFix |
| CVE-2022-22941 | SaltStack Salt permissions bypass | 8.8v3.1 | 1.3% | 2022-03-29 | Fix |
| CVE-2022-22936 | SaltStack Salt authentication bypass by capture-replay | 8.8v3.1 | 0.8% | 2022-03-29 | Fix |
| CVE-2022-22935 | SaltStack Salt improper authentication via man in the middle Attack | 3.7v3.1 | 1.6% | 2022-03-29 | Fix |
| CVE-2022-22934 | SaltStack improper verification of cryptographic signature | 8.8v3.1 | 0.9% | 2022-03-29 | Fix |
| CVE-2022-21821 | NVIDIA CUDA Toolkit improper index validation | 7.8CNA v3.1 | 2.1% | 2022-03-29 | Fix |
| CVE-2022-1122 | openjpeg2 improper initialization | 5.5NVD v3.1 | 1.1% | 2022-03-29 | Fix |
| CVE-2022-1087 | Htmly Edit Profile module cross-site scripting | 5.4v3.1 | 0.9% | 2022-03-29 | |
| CVE-2022-1086 | DolphinPHP user management page cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-29 | |
| CVE-2022-1085 | Cltphp POST parameter cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-29 | |
| CVE-2022-1084 | SourceCodester One Church Management System Session userregister.php improper authentication | 9.8v3.1 | 1.0% | 2022-03-29 | |
| CVE-2022-1083 | Microfinance Management System SQL injection | 9.8v3.1 | 0.9% | 2022-03-29 | |
| CVE-2022-1082 | SourceCodester Microfinance Management System Login page login.php SQL injection | 9.8v3.1 | 0.9% | 2022-03-29 | |
| CVE-2022-1081 | SourceCodester Microfinance Management System addcustomerHandler.php cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-29 | |
| CVE-2022-1080 | SourceCodester One Church Management System attendancy.php SQL injection | 9.8v3.1 | 0.7% | 2022-03-29 | |
| CVE-2022-1079 | SourceCodester One Church Management System churchprofile.php cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-29 | |
| CVE-2022-1078 | SourceCodester College Website Management System SQL injection | 9.8v3.1 | 0.8% | 2022-03-29 | |
| CVE-2022-1077 | TEM FLEX-1080/FLEX-1085 Log information disclosure | 7.5v3.1 | 2.5% | 2022-03-29 | Exploit code |
| CVE-2022-1076 | Automatic Question Paper Generator System My Account page login.php cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-29 | |
| CVE-2022-1075 | College Website Management System Contact cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-29 | |
| CVE-2022-1074 | TEM FLEX-1085 injection | 5.4v3.1 | 0.4% | 2022-03-29 | |
| CVE-2022-1073 | Automatic Question Paper Generator weak password recovery | 9.8v3.1 | 0.8% | 2022-03-29 | |
| CVE-2022-1055 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.5% | 2022-03-29 | Fix |
| CVE-2022-1050 | QEMU paravirtual RDMA device use-after-free | 8.8NVD v3.1 | 0.4% | 2022-03-29 | Fix |
| CVE-2022-1032 | Insecure deserialization of not validated module file in crater-invoice/crater | 7.2v3.1 | 1.6% | 2022-03-29 | Fix |
| CVE-2022-0923 | Delta Electronics DIAEnergie SQL injection in HandlerDialog_KID.ashx | 9.8v3.1 | 1.0% | 2022-03-29 | Fix |
| CVE-2022-0343 | Google Local Priviledge escalation in Perfetto Dev Scripts | 3.3CNA v3.1 | 0.1% | 2022-03-29 | Fix |
| CVE-2022-0331 | Sophos Firewall Webadmin information disclosure | 5.3CNA v3.1 | 1.5% | 2022-03-29 | Fix |
| CVE-2022-27950 | Linux kernel memory leak | 5.5v3.1 | 0.4% | 2022-03-28 | Fix |
| CVE-2022-27658 | SAP Innovation management missing authorization | 7.5v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2022-26980 | Cross-site scripting in TeamPass | 6.1v3.1 | 1.1% | 2022-03-28 | Fix |
| CVE-2022-26642 | TP-Link Tl-wr840n buffer overflow | 7.2v3.1 | 1.3% | 2022-03-28 | |
| CVE-2022-26641 | TP-Link Tl-wr840n buffer overflow | 7.2v3.1 | 1.3% | 2022-03-28 | |
| CVE-2022-26640 | TP-Link Tl-wr840n buffer overflow | 7.2v3.1 | 1.3% | 2022-03-28 | |
| CVE-2022-26639 | TP-Link Tl-wr840n buffer overflow | 7.2v3.1 | 1.3% | 2022-03-28 | |
| CVE-2022-26296 | Boom-core Risvc-boom side-channel information leak | 5.5v3.1 | 0.4% | 2022-03-28 | |
| CVE-2022-26291 | Long Range ZIP use-after-free | 5.5v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2022-26280 | libarchive out-of-bounds read | 6.5v3.1 | 1.9% | 2022-03-28 | Fix |
| CVE-2022-26278 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-28 | |
| CVE-2022-26273 | EyouCMS shop.php vulnerability | 9.8v3.1 | 1.2% | 2022-03-28 | |
| CVE-2022-26271 | 74CMS files accessible to external parties | 7.5v3.1 | 4.5% | 2022-03-28 | Nuclei |
| CVE-2022-26268 | Xiaohuanxiong SQL injection | 9.8v3.1 | 1.0% | 2022-03-28 | |
| CVE-2022-26259 | Xiongmaitech Ahb80n32f4-lme buffer overflow | 7.8v3.1 | 2.4% | 2022-03-28 | Emerging ThreatsFix |
| CVE-2022-26258 | D-Link DIR-820L remote code execution | 9.8v3.1 | 92.0% | 2022-03-28 | KEVEmerging Threats |
| CVE-2022-26255 | Clash cross-site scripting | 9.8v3.1 | 1.8% | 2022-03-28 | |
| CVE-2022-25757 | Apache APISIX: The body_schema check in request-validation plugin can be bypassed | 9.8v3.1 | 2.5% | 2022-03-28 | Fix |
| CVE-2022-24789 | Deserialization of untrusted data in C1 CMS | 7.6CNA v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-24303 | Path traversal in Pillow | 9.1v3.1 | 2.9% | 2022-03-28 | Fix |
| CVE-2022-23884 | Minecraft Bedrock Server integer overflow | 9.8v3.1 | 2.6% | 2022-03-28 | Exploit code |
| CVE-2022-23882 | TuziCMS SQL injection | 9.8v3.1 | 1.1% | 2022-03-28 | |
| CVE-2022-1056 | libtiff tiffcrop out-of-bounds read | 5.5CNA v3.1 | 1.1% | 2022-03-28 | Fix |
| CVE-2022-0846 | SpeakOut! Email Petitions WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 8.8% | 2022-03-28 | NucleiFix |
| CVE-2022-0833 | Church Admin WordPress plugin unauthenticated Plugin's Backup disclosure | 4.3NVD v3.1 | 0.5% | 2022-03-28 | Fix |
| CVE-2022-0818 | YITHEMES WooCommerce Affiliate settings page stored cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2022-0787 | The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections | 9.8NVD v3.1 | 7.5% | 2022-03-28 | NucleiFix |
| CVE-2022-0784 | Title Experiments Free WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 10.1% | 2022-03-28 | NucleiFix |
| CVE-2022-0770 | Translate WordPress with GTranslate plugin CSRF to account takeover | 8.8NVD v3.1 | 0.6% | 2022-03-28 | Fix |
| CVE-2022-0751 | GitLab arbitrary command execution | 6.5CNA v3.1 | 1.4% | 2022-03-28 | Fix |
| CVE-2022-0738 | GitLab insufficiently protected credentials | 4.2CNA v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2022-0735 | GitLab information disclosure | 10.0CNA v3.1 | 13.2% | 2022-03-28 | NucleiFix |
| CVE-2022-0720 | Tms-outsource Amelia appointment management incorrect authorization | 5.4NVD v3.1 | 0.6% | 2022-03-28 | Fix |
| CVE-2022-0680 | Plezi WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2022-0679 | Narnoo Distributor WordPress plugin unauthenticated LFI to arbitrary file read / RCE | 9.8NVD v3.1 | 47.8% | 2022-03-28 | Nuclei |
| CVE-2022-0647 | Bulk Creator WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | |
| CVE-2022-0643 | Bank Mellat WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-0641 | Popup Like box WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-0621 | dTabs WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | |
| CVE-2022-0620 | Delete Old Orders WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | |
| CVE-2022-0619 | Database Peek WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | |
| CVE-2022-0600 | Conference Scheduler WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-0599 | Mapping Multiple URLs Redirect Same Page WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-03-28 | Nuclei |
| CVE-2022-0595 | Drag and Drop Multiple File Upload - Contact Form 7 WordPress plugin unauthenticated stored XSS | 5.4NVD v3.1 | 13.6% | 2022-03-28 | NucleiFix |
| CVE-2022-0549 | GitLab REST API group membership vulnerability | 6.5CNA v3.1 | 0.9% | 2022-03-28 | Fix |
| CVE-2022-0499 | Sermon Browser WordPress plugin arbitrary file upload via CSRF | 8.8NVD v3.1 | 0.6% | 2022-03-28 | |
| CVE-2022-0493 | String Locator WordPress plugin Admin+ arbitrary file read | 4.9NVD v3.1 | 1.4% | 2022-03-28 | Fix |
| CVE-2022-0488 | GitLab resource exhaustion | 3.5CNA v3.1 | 0.7% | 2022-03-28 | Fix |
| CVE-2022-0479 | Popup Builder WordPress plugin SQL injection to reflected cross-site scripting | 9.8NVD v3.1 | 43.8% | 2022-03-28 | NucleiFix |
| CVE-2022-0450 | Menu Image, Icons made easy WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-28 | Fix |
| CVE-2022-0427 | GitLab cross-site request forgery | 7.7CNA v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-0397 | WPC Smart Wishlist for WooCommerce WordPress plugin reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-28 | Fix |
| CVE-2022-0388 | Interactive Medical Drawing of Human Body WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-03-28 | Fix |
| CVE-2022-0371 | GitLab search vulnerability | 4.3CNA v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-0344 | GitLab issue system notes vulnerability | 3.1CNA v3.1 | 1.1% | 2022-03-28 | Fix |
| CVE-2022-0342 | Zyxel USG/ZyWALL series firmware CGI program authentication bypass | 9.8CNA v3.1 | 95.1% | 2022-03-28 | NucleiEmerging ThreatsFix |
| CVE-2022-0283 | GitLab open redirect | 4.7CNA v3.1 | 0.8% | 2022-03-28 | Fix |
| CVE-2022-0249 | GitLab server-side request forgery | 3.1CNA v3.1 | 1.3% | 2022-03-28 | Fix |
| CVE-2022-0136 | GitLab server-side request forgery | 5.4CNA v3.1 | 1.0% | 2022-03-28 | Fix |
| CVE-2022-0123 | GitLab improper certificate validation | 5.9CNA v3.1 | 0.4% | 2022-03-28 | Fix |
| CVE-2022-27948 | Tesla Model 3 missing authorization | 4.3NVD v3.1 | 1.4% | 2022-03-27 | |
| CVE-2022-26254 | WoWonder insecure direct object reference | 5.3v3.1 | 0.8% | 2022-03-27 | |
| CVE-2022-26252 | Aapanel path traversal | 6.5v3.1 | 1.8% | 2022-03-27 | |
| CVE-2022-26245 | Open-falcon Falcon-plus SQL injection | 9.8v3.1 | 14.8% | 2022-03-27 | |
| CVE-2022-26205 | Marky display text fields code injection | 9.8v3.1 | 2.0% | 2022-03-27 | |
| CVE-2022-26198 | Notable arbitrary code execution | 9.8v3.1 | 1.7% | 2022-03-27 | |
| CVE-2022-1106 | mruby/mruby mrb_vm_exec in GitHub repository use-after-free | 9.1v3.1 | 1.0% | 2022-03-27 | Fix |
| CVE-2022-27947 | NETGEAR R8500 OS command injection | 8.8v3.1 | 2.9% | 2022-03-26 | |
| CVE-2022-27946 | NETGEAR R8500 OS command injection | 8.8v3.1 | 3.2% | 2022-03-26 | |
| CVE-2022-27945 | NETGEAR R8500 OS command injection | 8.8v3.1 | 2.9% | 2022-03-26 | |
| CVE-2022-27943 | GNU GCC uncontrolled recursion | 5.5NVD v3.1 | 1.0% | 2022-03-26 | Fix |
| CVE-2022-27942 | Broadcom tcpreplay out-of-bounds read | 7.8v3.1 | 1.1% | 2022-03-26 | Fix |
| CVE-2022-27941 | Broadcom tcpreplay out-of-bounds read | 7.8v3.1 | 1.1% | 2022-03-26 | Fix |
| CVE-2022-27940 | Broadcom tcpreplay out-of-bounds read | 7.8v3.1 | 1.1% | 2022-03-26 | Fix |
| CVE-2022-27939 | Broadcom tcpreplay reachable assertion | 5.5v3.1 | 1.0% | 2022-03-26 | Fix |
| CVE-2022-27938 | libsixel reachable assertion | 5.5v3.1 | 0.6% | 2022-03-26 | |
| CVE-2022-1071 | User after free in mrb_vm_exec in mruby/mruby | 8.2v3.1 | 0.9% | 2022-03-26 | Fix |
| CVE-2022-27920 | Kiwix Libkiwix cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-25 | Fix |
| CVE-2022-27919 | gradle Enterprise incorrect default permissions | 9.8v3.1 | 1.8% | 2022-03-25 | Fix |
| CVE-2022-27906 | Mendelson OFTP2 path traversal | 5.9v3.1 | 1.1% | 2022-03-25 | Fix |
| CVE-2022-27887 | MacCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-27886 | MacCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-27885 | MacCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-27884 | MacCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-27882 | OpenBSD incorrect numeric conversion | 7.5v3.1 | 1.9% | 2022-03-25 | Fix |
| CVE-2022-27881 | OpenBSD buffer overflow | 7.5v3.1 | 1.9% | 2022-03-25 | Fix |
| CVE-2022-27227 | PowerDNS Authoritative Server and Recursor IXFR zone transfers vulnerability | 7.5v3.1 | 5.0% | 2022-03-25 | Fix |
| CVE-2022-26659 | Docker Desktop link following | 7.1v3.1 | 0.4% | 2022-03-25 | Fix |
| CVE-2022-26573 | MacCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-26263 | Yonyou U8+ cross-site scripting | 6.1v3.1 | 41.5% | 2022-03-25 | Nuclei |
| CVE-2022-26197 | Joget Dx cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-25612 | Simple Event Planner WordPress plugin Multiple authenticated persistent cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-03-25 | Fix |
| CVE-2022-25611 | Simple Event Planner WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-03-25 | Fix |
| CVE-2022-25610 | Simple Ajax Chat WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-03-25 | Fix |
| CVE-2022-25606 | WP-DownloadManager WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-03-25 | Fix |
| CVE-2022-25590 | SurveyKing insufficient session expiration | 6.5v3.1 | 1.3% | 2022-03-25 | |
| CVE-2022-25582 | ClassCMS Column module stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-25577 | Alf-banco hard-coded credentials | 9.1v3.1 | 1.2% | 2022-03-25 | |
| CVE-2022-25574 | Douco DouPHP upload function of /admin/show.php stored cross-site scripting | 4.8v3.1 | 0.4% | 2022-03-25 | |
| CVE-2022-25523 | Typesettercms Typesetter cross-site request forgery | 8.8v3.1 | 0.6% | 2022-03-25 | |
| CVE-2022-24784 | Discoverability of user password hash in Statamic CMS | 3.7CNA v3.1 | 1.0% | 2022-03-25 | Fix |
| CVE-2022-24783 | Sandbox bypass leading to arbitrary code execution in Deno | 10.0CNA v3.1 | 1.1% | 2022-03-25 | Fix |
| CVE-2022-24778 | Incorrect authorization in imgcrypt | 7.5CNA v3.1 | 2.7% | 2022-03-25 | Fix |
| CVE-2022-24777 | Denial of service via reachable assertion in grpc-swift | 7.5CNA v3.1 | 1.2% | 2022-03-25 | Fix |
| CVE-2022-24643 | openemr A stored cross-site scripting | 5.4v3.1 | 1.3% | 2022-03-25 | |
| CVE-2022-22995 | Western Digital My Cloud Netatalk arbitrary file write | 10.0CNA v3.1 | 2.7% | 2022-03-25 | Fix |
| CVE-2022-22688 | Synology DiskStation Manager (DSM) command improper neutralization | 8.8CNA v3.1 | 1.6% | 2022-03-25 | Fix |
| CVE-2022-22687 | Synology DiskStation Manager (DSM) Authentication functionality buffer overflow | 9.8CNA v3.1 | 2.4% | 2022-03-25 | Fix |
| CVE-2022-22274 | SonicWall SonicOS stack-based buffer overflow | 9.8v3.1 | 75.5% | 2022-03-25 | Reported exploitedEmerging ThreatsExploit codeFix |
| CVE-2022-1064 | SQL injection through marking blog comments on bulk as spam in forkcms/forkcms | 8.8NVD v3.1 | 1.2% | 2022-03-25 | Fix |
| CVE-2022-1049 | ClusterLabs/pcs improper authentication | 8.8v3.1 | 2.0% | 2022-03-25 | Fix |
| CVE-2022-1040 | Sophos Firewall authentication bypass | 9.8CNA v3.1 | 99.8% | 2022-03-25 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-0995 | Linux Kernel out-of-bounds write | 7.8NVD v3.1 | 8.8% | 2022-03-25 | KEVExploit codeFix |
| CVE-2022-0988 | Delta Electronics DIAEnergie CLEARTEXT transmission of sensitive information | 7.5v3.1 | 0.5% | 2022-03-25 | Fix |
| CVE-2022-0983 | SQL injection in Moodle | 8.8NVD v3.1 | 0.9% | 2022-03-25 | Fix |
| CVE-2022-0897 | libvirt improper locking | 4.3v3.1 | 1.0% | 2022-03-25 | Fix |
| CVE-2022-0759 | Improper certificate validation in kubeclient | 8.1NVD v3.1 | 0.9% | 2022-03-25 | Fix |
| CVE-2022-0500 | Linux kernel eBPF BTF loader out-of-bounds write | 7.8NVD v3.1 | 0.4% | 2022-03-25 | Fix |
| CVE-2022-0494 | kernel information disclosure | 4.4NVD v3.1 | 0.4% | 2022-03-25 | Fix |
| CVE-2022-0435 | Linux kernel A stack-based buffer overflow | 8.8NVD v3.1 | 67.8% | 2022-03-25 | Exploit codeFix |
| CVE-2022-0330 | kernel improper preservation of permissions | 7.8NVD v3.1 | 0.4% | 2022-03-25 | Fix |
| CVE-2022-0322 | kernel incorrect numeric conversion | 5.5NVD v3.1 | 0.3% | 2022-03-25 | Fix |
| CVE-2022-27820 | Improper certificate validation in OWASP ZAP | 4.0v3.1 | 0.7% | 2022-03-24 | Fix |
| CVE-2022-27811 | GNOME Ocrfeeder OS command injection | 9.8v3.1 | 2.8% | 2022-03-24 | Fix |
| CVE-2022-27083 | Tenda M3 command injection | 9.8v3.1 | 2.8% | 2022-03-24 | |
| CVE-2022-27082 | Tenda M3 command injection | 9.8v3.1 | 2.7% | 2022-03-24 | |
| CVE-2022-27081 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-27080 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-27079 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-27078 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-27077 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-27076 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-26629 | Splus Soroushplus incorrect authorization | 9.1v3.1 | 3.2% | 2022-03-24 | Exploit code |
| CVE-2022-26536 | Tenda M3 command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-26301 | Yejiao TuziCMS SQL injection | 9.8v3.1 | 1.1% | 2022-03-24 | |
| CVE-2022-26290 | Tenda M3 OS command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-26289 | Tenda M3 OS command injection | 9.8v3.1 | 2.6% | 2022-03-24 | |
| CVE-2022-26279 | EyouCMS forced browsing | 9.8v3.1 | 1.8% | 2022-03-24 | Fix |
| CVE-2022-26272 | Ionizecms Ionize A remote code execution | 9.8v3.1 | 22.5% | 2022-03-24 | |
| CVE-2022-26249 | SurveyKing CSV injection | 9.8v3.1 | 1.9% | 2022-03-24 | |
| CVE-2022-25576 | Cross-site request forgery in Anchor CMS | 4.5v3.1 | 0.4% | 2022-03-24 | |
| CVE-2022-25575 | Hongmen Parking Management System 停车场管理系统 Parking Management System v1.0 cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-24 | |
| CVE-2022-25571 | Bluedon Internet Access Detector information disclosure | 7.5v3.1 | 1.0% | 2022-03-24 | |
| CVE-2022-25568 | MotionEye allows attackers to access sensitive information | 7.5v3.1 | 6.8% | 2022-03-24 | NucleiFix |
| CVE-2022-24782 | Secure category names leaked via user activity export in Discourse | 4.3CNA v3.1 | 1.0% | 2022-03-24 | Fix |
| CVE-2022-24781 | math-geon Geon malicious users can take over the session of other players | 7.1CNA v3.1 | 0.9% | 2022-03-24 | Fix |
| CVE-2022-24776 | Open redirect in Flask-AppBuilder | 6.1CNA v3.1 | 1.0% | 2022-03-24 | Fix |
| CVE-2022-24769 | Default inheritable capabilities for linux container should be empty | 5.9CNA v3.1 | 0.5% | 2022-03-24 | Fix |
| CVE-2022-22374 | IBM Power 9 AC922 BMC firmware vulnerability | 6.5CNA v3.0 | 1.0% | 2022-03-24 | Fix |
| CVE-2022-21820 | NVIDIA Data Center GPU Manager code execution | 6.3CNA v3.1 | 16.5% | 2022-03-24 | Fix |
| CVE-2022-1061 | Heap buffer overflow in parseDragons in radareorg/radare2 | 7.5v3.1 | 1.0% | 2022-03-24 | Fix |
| CVE-2022-1058 | Open redirect on login in go-gitea/Gitea | 6.1NVD v3.1 | 53.2% | 2022-03-24 | NucleiFix |
| CVE-2022-1052 | Heap buffer overflow in iterate_chained_fixups in radareorg/radare2 | 5.5NVD v3.1 | 0.4% | 2022-03-24 | Fix |
| CVE-2022-0955 | Cross-site scripting (XSS) Stored in pimcore/data-hub | 4.8v3.1 | 0.6% | 2022-03-24 | Fix |
| CVE-2022-0551 | Authenticated RCE on project configuration import in Guardian/CMC | 8.6CNA v4.0 | 0.9% | 2022-03-24 | Fix |
| CVE-2022-0550 | Authenticated RCE on logo report upload in Guardian/CMC | 8.6CNA v4.0 | 0.9% | 2022-03-24 | Fix |
| CVE-2022-0315 | Insecure temporary file in Horovod/Horovod | 7.5v3.1 | 1.0% | 2022-03-24 | Fix |
| CVE-2022-0153 | SQL injection in forkcms/forkcms | 7.5NVD v3.1 | 1.1% | 2022-03-24 | Fix |
| CVE-2022-0145 | Cross-site scripting (XSS) Stored in forkcms/forkcms | 5.4v3.1 | 0.7% | 2022-03-24 | Fix |
| CVE-2022-27666 | Linux kernel A heap-based buffer overflow | 7.8v3.1 | 5.5% | 2022-03-23 | Exploit codeFix |
| CVE-2022-27254 | Honda Civic 2018 authentication bypass by replay | 5.3v3.1 | 1.0% | 2022-03-23 | Exploit code |
| CVE-2022-27192 | Asseco Dvs Avilys sensitive information in log files | 7.5v3.1 | 1.1% | 2022-03-23 | Fix |
| CVE-2022-26243 | Tendacn AC10 buffer overflow | 7.5v3.1 | 1.2% | 2022-03-23 | |
| CVE-2022-25609 | Yoo Slider WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-03-23 | Fix |
| CVE-2022-25608 | Yoo Slider WordPress plugin cross-site request forgery | 5.4v3.1 | 0.3% | 2022-03-23 | Fix |
| CVE-2022-25269 | Passwork cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-23 | |
| CVE-2022-25268 | Passwork cross-site request forgery | 8.8v3.1 | 0.4% | 2022-03-23 | |
| CVE-2022-25267 | Passwork path traversal | 8.8v3.1 | 1.5% | 2022-03-23 | |
| CVE-2022-25266 | Passwork path traversal | 4.3v3.1 | 1.0% | 2022-03-23 | |
| CVE-2022-25223 | Money Transfer Management System SQL injection | 4.3v3.1 | 0.8% | 2022-03-23 | |
| CVE-2022-25222 | Money Transfer Management System SQL injection | 9.8v3.1 | 1.6% | 2022-03-23 | |
| CVE-2022-25221 | Money Transfer Management System cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-23 | |
| CVE-2022-25041 | openemr improper access control | 4.3v3.1 | 0.8% | 2022-03-23 | |
| CVE-2022-24934 | WPS Office remote code execution | 9.8NVD v3.1 | 20.5% | 2022-03-23 | Exploit code |
| CVE-2022-24768 | argoproj argo-cd improper access control allows admin privilege escalation in Argo CD | 9.9CNA v3.1 | 1.3% | 2022-03-23 | Fix |
| CVE-2022-24757 | Sensitive Auth and Cookie data stored in Jupyter server logs | 7.5CNA v3.1 | 1.3% | 2022-03-23 | Fix |
| CVE-2022-24731 | argoproj argo-cd path traversal allows leaking out-of-bound files from Argo CD repo-server | 6.8CNA v3.1 | 1.0% | 2022-03-23 | Fix |
| CVE-2022-24730 | Argo CD repo-server path traversal | 7.7CNA v3.1 | 0.9% | 2022-03-23 | Fix |
| CVE-2022-24293 | HP LaserJet Pro Printers information disclosure | 9.8v3.1 | 7.0% | 2022-03-23 | Fix |
| CVE-2022-24292 | HP LaserJet Pro Printers information disclosure | 9.8v3.1 | 7.0% | 2022-03-23 | Fix |
| CVE-2022-24291 | HP LaserJet Pro Printers information disclosure | 7.5v3.1 | 4.7% | 2022-03-23 | Fix |
| CVE-2022-23881 | Zzzcms Zzzphp remote command execution | 9.8v3.1 | 56.5% | 2022-03-23 | Nuclei |
| CVE-2022-23880 | Taogogo taoCMS File Management function module arbitrary file upload | 9.8v3.1 | 1.7% | 2022-03-23 | |
| CVE-2022-23242 | TeamViewer Linux Deletion command not properly executed after process crash | 4.2v3.1 | 0.2% | 2022-03-23 | Fix |
| CVE-2022-22952 | VMware Carbon Black App Control (AppC) unrestricted file upload | 9.1v3.1 | 1.5% | 2022-03-23 | Fix |
| CVE-2022-22951 | VMware Carbon Black App Control (AppC) OS command injection | 9.1v3.1 | 20.3% | 2022-03-23 | Fix |
| CVE-2022-22819 | NXP LPC55S66JBD100 buffer overflow | 7.8v3.1 | 1.4% | 2022-03-23 | |
| CVE-2022-22316 | IBM MQ Appliance denial of service | 5.3CNA v3.0 | 1.0% | 2022-03-23 | Fix |
| CVE-2022-1033 | Unrestricted upload of file with dangerous type in crater-invoice/crater | 7.8v3.1 | 0.9% | 2022-03-23 | Fix |
| CVE-2022-1030 | Okta Advanced Server Access Client OS command injection | 8.8v3.1 | 1.5% | 2022-03-23 | Fix |
| CVE-2022-0996 | 389-ds-base improper authentication | 6.5v3.1 | 1.5% | 2022-03-23 | Fix |
| CVE-2022-0981 | quarkus incorrect authorization | 8.8v3.1 | 1.2% | 2022-03-23 | Fix |
| CVE-2022-0889 | Ninja Forms - File Uploads Extension WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-23 | Fix |
| CVE-2022-0888 | Ninja Forms - File Uploads Extension WordPress plugin arbitrary file upload | 9.8v3.1 | 39.4% | 2022-03-23 | Fix |
| CVE-2022-0862 | McAfee ePolicy Orchestrator password change API vulnerability | 3.1CNA v3.1 | 0.7% | 2022-03-23 | Fix |
| CVE-2022-0861 | ePO XML extended entity vulnerability | 3.5CNA v3.1 | 0.5% | 2022-03-23 | Fix |
| CVE-2022-0859 | McAfee ePolicy Orchestrator server restoration insufficiently protected credentials | 6.5CNA v3.1 | 0.2% | 2022-03-23 | Fix |
| CVE-2022-0858 | Cross-site scripting vulnerability in ePO | 4.3CNA v3.1 | 0.8% | 2022-03-23 | Fix |
| CVE-2022-0857 | ePO reflected cross-site scripting | 5.4CNA v3.1 | 0.7% | 2022-03-23 | Fix |
| CVE-2022-0854 | Linux kernel A memory leak | 5.5NVD v3.1 | 0.5% | 2022-03-23 | Fix |
| CVE-2022-0842 | ePO blind SQL injection | 5.4CNA v3.1 | 0.8% | 2022-03-23 | Fix |
| CVE-2022-0834 | Amelia WordPress plugin stored cross-site scripting via lastName | 5.4NVD v3.1 | 0.5% | 2022-03-23 | Fix |
| CVE-2022-0750 | Photoswipe Masonry Gallery stored cross-site scripting | 5.4v3.1 | 4.4% | 2022-03-23 | Fix |
| CVE-2022-0635 | ISC BIND reachable assertion | 7.5CNA v3.1 | 1.3% | 2022-03-23 | Fix |
| CVE-2022-0396 | ISC BIND DoS from specifically crafted TCP packets | 5.3CNA v3.1 | 2.7% | 2022-03-23 | Fix |
| CVE-2022-27228 | Bitrix24 arbitrary code execution | 9.8v3.1 | 20.3% | 2022-03-22 | Reported exploitedNuclei |
| CVE-2022-26260 | Prototype pollution in Simple-plist | 9.8v3.1 | 1.3% | 2022-03-22 | Fix |
| CVE-2022-26189 | TOTOLINK N600R command injection | 9.8v3.1 | 3.4% | 2022-03-22 | Emerging Threats |
| CVE-2022-26188 | TOTOLINK N600R command injection | 9.8v3.1 | 3.4% | 2022-03-22 | Emerging Threats |
| CVE-2022-26187 | TOTOLINK N600R command injection | 9.8v3.1 | 19.6% | 2022-03-22 | Emerging Threats |
| CVE-2022-26186 | TOTOLINK N600R command injection | 9.8v3.1 | 3.9% | 2022-03-22 | Emerging Threats |
| CVE-2022-25518 | Tecnoteca CMDBuild sensitive information in log files | 6.5v3.1 | 0.8% | 2022-03-22 | Fix |
| CVE-2022-25517 | baomidou Mybatis-plus SQL injection | 9.8v3.1 | 1.9% | 2022-03-22 | |
| CVE-2022-25484 | Broadcom tcpreplay reachable assertion | 5.5v3.1 | 0.6% | 2022-03-22 | Fix |
| CVE-2022-24774 | Improper input validation leading to path traversal in CycloneDX BOM Repository Server | 7.1CNA v3.1 | 1.5% | 2022-03-22 | Fix |
| CVE-2022-24764 | Stack buffer overflow in pjproject | 7.5CNA v3.1 | 2.4% | 2022-03-22 | Fix |
| CVE-2022-21718 | Renderers can obtain access to random bluetooth device without permission in Electron | 3.4CNA v3.1 | 0.9% | 2022-03-22 | Fix |
| CVE-2022-1036 | Integer overflow or wraparound in Microweber | 7.5v3.1 | 1.2% | 2022-03-22 | Fix |
| CVE-2022-1034 | There is a unrestricted upload of file vulnerability in ShowDoc in star7th/ShowDoc | 7.2NVD v3.1 | 1.5% | 2022-03-22 | Fix |
| CVE-2022-1031 | radareorg/radare2 op_is_set_bp in GitHub repository use-after-free | 7.8v3.1 | 1.0% | 2022-03-22 | Fix |
| CVE-2022-0667 | ISC BIND assertion failure on delayed DS lookup | 7.5CNA v3.1 | 1.3% | 2022-03-22 | Fix |
| CVE-2022-0652 | Sophos UTM sensitive information in log files | 3.3CNA v3.1 | 0.2% | 2022-03-22 | Fix |
| CVE-2022-0386 | Sophos UTM Mail Manager potentially SQL injection | 8.8CNA v3.1 | 1.2% | 2022-03-22 | Fix |
| CVE-2022-27607 | Axiosys Bento4 out-of-bounds read | 8.1v3.1 | 1.0% | 2022-03-21 | |
| CVE-2022-27333 | idcCMS install.lock file vulnerability | 7.5v3.1 | 0.8% | 2022-03-21 | |
| CVE-2022-27090 | chshcms Cscms open redirect | 5.4v3.1 | 0.4% | 2022-03-21 | |
| CVE-2022-26960 | Path traversal in Studio-42 elFinder | 9.1v3.1 | 51.0% | 2022-03-21 | NucleiFix |
| CVE-2022-26494 | Primekey Signserver Admin Web interface cross-site scripting | 4.8v3.1 | 0.7% | 2022-03-21 | |
| CVE-2022-26285 | Simple Client Management System SQL injection | 9.8v3.1 | 2.0% | 2022-03-21 | |
| CVE-2022-26284 | Simple Client Management System SQL injection | 9.8v3.1 | 2.0% | 2022-03-21 | |
| CVE-2022-26283 | oretnom23 Simple Subscription Website SQL injection | 9.8v3.1 | 1.6% | 2022-03-21 | |
| CVE-2022-26184 | Poetry contains untrusted search path | 9.8v3.1 | 1.9% | 2022-03-21 | Fix |
| CVE-2022-26183 | Untrusted search path in PNPM | 8.8v3.1 | 1.6% | 2022-03-21 | Fix |
| CVE-2022-26174 | Beekeeper Studio A remote code execution | 9.8v3.1 | 2.4% | 2022-03-21 | |
| CVE-2022-26148 | Grafana cleartext storage of sensitive information | 9.8v3.1 | 53.4% | 2022-03-21 | NucleiFix |
| CVE-2022-25766 | ungit remote code execution (RCE) | 8.8v3.1 | 33.9% | 2022-03-21 | Fix |
| CVE-2022-25570 | Click Studios Passwordstate incorrect default permissions | 6.5v3.1 | 0.8% | 2022-03-21 | Fix |
| CVE-2022-25505 | Taogogo taoCMS SQL injection | 9.8v3.1 | 1.1% | 2022-03-21 | |
| CVE-2022-25481 | Exposure of resource to wrong sphere in ThinkPHP Framework | 7.5v3.1 | 4.7% | 2022-03-21 | NucleiFix |
| CVE-2022-24775 | Improper input validation in guzzlehttp/psr7 | 7.5CNA v3.1 | 2.5% | 2022-03-21 | Fix |
| CVE-2022-24766 | Insufficient Protection against HTTP request smuggling in mitmproxy | 9.8CNA v3.1 | 1.6% | 2022-03-21 | Fix |
| CVE-2022-24656 | HexoEditor cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-21 | |
| CVE-2022-24237 | Snapt Aria OS command injection | 8.8v3.1 | 25.3% | 2022-03-21 | Fix |
| CVE-2022-24236 | Snapt Aria An insecure permissions | 3.5v3.1 | 0.6% | 2022-03-21 | Fix |
| CVE-2022-24235 | Snapt Aria management portal cross-site request forgery | 8.8v3.1 | 0.7% | 2022-03-21 | Fix |
| CVE-2022-23352 | BigAntSoft BigAnt Server infinite loop | 7.5v3.1 | 1.6% | 2022-03-21 | |
| CVE-2022-23350 | BigAntSoft BigAnt Server cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-21 | |
| CVE-2022-23349 | BigAntSoft BigAnt Server cross-site request forgery | 8.8v3.1 | 0.7% | 2022-03-21 | |
| CVE-2022-23348 | BigAntSoft BigAnt Server weak password hash | 5.3v3.1 | 3.3% | 2022-03-21 | Nuclei |
| CVE-2022-23347 | BigAntSoft BigAnt Server path traversal | 7.5v3.1 | 13.7% | 2022-03-21 | Nuclei |
| CVE-2022-23346 | BigAntSoft BigAnt Server unrestricted file upload | 8.8v3.1 | 1.4% | 2022-03-21 | |
| CVE-2022-23345 | BigAntSoft BigAnt Server missing authentication | 7.5v3.1 | 1.6% | 2022-03-21 | |
| CVE-2022-22394 | The IBM Spectrum Protect 8.1.14.000 server could allow a remote attacker to bypass security restrictions, caused by improper enforcement of access controls. By signing in, an attacker could exploit this vulnerability to bypass security and gain unauthorized administrator or node access to the vulner | 7.5CNA v3.0 | 2.2% | 2022-03-21 | Fix |
| CVE-2022-1035 | Segmentation Fault caused by MP4Box -lsr in gpac/gpac | 5.5v3.1 | 0.8% | 2022-03-21 | Fix |
| CVE-2022-1004 | OTRS information disclosure in the External interface | 4.3CNA v3.1 | 0.6% | 2022-03-21 | Fix |
| CVE-2022-0760 | Simple Link Directory WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 10.8% | 2022-03-21 | NucleiFix |
| CVE-2022-0747 | Infographic Maker - iList WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 14.9% | 2022-03-21 | NucleiFix |
| CVE-2022-0739 | BookingPress WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 37.2% | 2022-03-21 | MetasploitExploit codeFix |
| CVE-2022-0694 | Advanced Booking Calendar WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.8% | 2022-03-21 | Fix |
| CVE-2022-0687 | Amelia WordPress plugin Manager+ RCE | 8.8NVD v3.1 | 1.5% | 2022-03-21 | Fix |
| CVE-2022-0681 | Simple Membership WordPress plugin arbitrary Transaction deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2022-03-21 | Fix |
| CVE-2022-0640 | AP Pricing Tables Lite WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-03-21 | Fix |
| CVE-2022-0628 | AP Mega Menu WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-03-21 | Fix |
| CVE-2022-0627 | Amelia WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-21 | Fix |
| CVE-2022-0616 | Tms-outsource Amelia customer deletion cross-site request forgery | 4.3NVD v3.1 | 0.4% | 2022-03-21 | Fix |
| CVE-2022-0591 | Formcraft3 WordPress plugin unauthenticated SSRF | 9.1NVD v3.1 | 20.2% | 2022-03-21 | NucleiExploit codeFix |
| CVE-2022-0590 | BulletProof Security WordPress plugin Admin+ stored cross-site scripting (XSS) | 4.8NVD v3.1 | 0.6% | 2022-03-21 | Fix |
| CVE-2022-0515 | Cross-site request forgery (CSRF) in crater-invoice/crater | 4.3v3.1 | 0.4% | 2022-03-21 | Fix |
| CVE-2022-0514 | Business Logic Errors in crater-invoice/crater | 6.5v3.1 | 1.0% | 2022-03-21 | Fix |
| CVE-2022-0475 | OTRS possible XSS attack via translation | 3.5CNA v3.1 | 0.4% | 2022-03-21 | Fix |
| CVE-2022-0423 | 3D FlipBook WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-21 | Fix |
| CVE-2022-0415 | Remote command execution in uploading repository file in gogs/gogs | 8.8NVD v3.1 | 65.2% | 2022-03-21 | NucleiFix |
| CVE-2022-0364 | Modern Events Calendar Lite WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 69.6% | 2022-03-21 | Fix |
| CVE-2022-0229 | miniOrange's Google Authenticator WordPress plugin unauthenticated arbitrary options deletion | 8.1NVD v3.1 | 0.6% | 2022-03-21 | Fix |
| CVE-2022-26555 | Eova Add a Button function stored cross-site scripting | 5.4v3.1 | 0.4% | 2022-03-20 | |
| CVE-2022-26247 | Teamwork Management System incorrect permission assignment | 5.9v3.1 | 0.8% | 2022-03-20 | |
| CVE-2022-26246 | TMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-20 | |
| CVE-2022-25464 | Html-js DoraCMS component /admin/contenttemp stored cross-site scripting | 4.8v3.1 | 0.4% | 2022-03-20 | |
| CVE-2022-25462 | Yafu denial of service | 7.5v3.1 | 0.9% | 2022-03-20 | |
| CVE-2022-24126 | Fromsoftware Dark Souls Iii buffer overflow | 9.8v3.1 | 4.7% | 2022-03-20 | KCV |
| CVE-2022-24125 | FromSoftware Dark Souls III matchmaking servers vulnerability | 8.8v3.1 | 2.7% | 2022-03-20 | Exploit codeKCV |
| CVE-2022-27226 | Irz RL01 /api/crontab cross-site request forgery | 8.8v3.1 | 33.7% | 2022-03-19 | Emerging ThreatsExploit code |
| CVE-2022-0991 | Insufficient session expiration in Admidio/Admidio | 7.1v3.1 | 1.0% | 2022-03-19 | Fix |
| CVE-2022-27250 | Unisoc Chipset information disclosure | 9.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-27246 | MISP cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-18 | |
| CVE-2022-27245 | MISP server-side request forgery | 8.8v3.1 | 0.9% | 2022-03-18 | |
| CVE-2022-27244 | MISP cross-site scripting | 4.8v3.1 | 0.5% | 2022-03-18 | |
| CVE-2022-27243 | MISP local file inclusion | 7.8v3.1 | 1.2% | 2022-03-18 | |
| CVE-2022-27240 | Glewlwyd SSO Server buffer overflow | 9.8v3.1 | 1.6% | 2022-03-18 | Fix |
| CVE-2022-27191 | Golang.org/x/crypto/SSH denial of service via crafted Signer | 7.5v3.1 | 3.9% | 2022-03-18 | Fix |
| CVE-2022-26965 | pluck-cms Pluck unrestricted file upload | 7.2v3.1 | 36.3% | 2022-03-18 | Exploit code |
| CVE-2022-26267 | Piwigo missing authentication | 7.5v3.1 | 1.5% | 2022-03-18 | |
| CVE-2022-26266 | Piwigo SQL injection | 8.8v3.1 | 1.3% | 2022-03-18 | |
| CVE-2022-26265 | Remote code execution in Contao Managed Edition | 9.8v3.1 | 30.4% | 2022-03-18 | Exploit codeFix |
| CVE-2022-25607 | FV Flowplayer Video Player WordPress plugin SQL injection (SQLi) | 7.2v3.1 | 0.8% | 2022-03-18 | Fix |
| CVE-2022-25605 | WP-DownloadManager WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-03-18 | Fix |
| CVE-2022-25604 | Price Table WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-03-18 | |
| CVE-2022-25603 | MaxGalleria WordPress plugin stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-03-18 | Fix |
| CVE-2022-25602 | ExpressTech Responsive Menu information disclosure | 8.8v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-25581 | ClassCMS unrestricted file upload | 7.8v3.1 | 1.2% | 2022-03-18 | Exploit code |
| CVE-2022-25578 | Taogogo taoCMS code injection | 9.8v3.1 | 1.8% | 2022-03-18 | |
| CVE-2022-25461 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25460 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25459 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25458 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25457 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25456 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25455 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25454 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25453 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25452 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25451 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25450 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 11.6% | 2022-03-18 | |
| CVE-2022-25449 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25448 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25447 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25446 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25445 | Tenda AC6 out-of-bounds write | 9.8v3.1 | 9.0% | 2022-03-18 | |
| CVE-2022-25441 | Tenda AC9 OS command injection | 9.8v3.1 | 4.9% | 2022-03-18 | |
| CVE-2022-25440 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25439 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25438 | Tenda AC9 OS command injection | 9.8v3.1 | 4.9% | 2022-03-18 | |
| CVE-2022-25437 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25435 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25434 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 9.1% | 2022-03-18 | |
| CVE-2022-25433 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25431 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25429 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25428 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25427 | Tenda AC9 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-25390 | Dcnglobal DCME-520 remote command execution | 9.8v3.1 | 3.3% | 2022-03-18 | |
| CVE-2022-25389 | Dcnglobal DCME-520 arbitrary file read | 7.5v3.1 | 1.0% | 2022-03-18 | |
| CVE-2022-24773 | digitalbazaar forge improper verification of cryptographic signature in `node-forge` | 5.3CNA v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-24772 | digitalbazaar forge improper verification of cryptographic signature in `node-forge` | 7.5CNA v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-24771 | digitalbazaar forge improper verification of cryptographic signature in node-forge | 7.5CNA v3.1 | 0.8% | 2022-03-18 | Fix |
| CVE-2022-24655 | NETGEAR DC112A upnpd service stack-based buffer overflow | 7.8v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-24637 | Improper privilege management in Open Web Analytics | 9.8v3.1 | 99.1% | 2022-03-18 | NucleiMetasploitExploit codeFix |
| CVE-2022-24595 | Kooky Koi afb-daemon improper access control | 9.8v3.1 | 1.7% | 2022-03-18 | |
| CVE-2022-24092 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 4.5% | 2022-03-18 | Fix |
| CVE-2022-24091 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 4.1% | 2022-03-18 | Fix |
| CVE-2022-22671 | Apple iOS lock screen vulnerability | 4.6v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22670 | An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed. | 3.3v3.1 | 0.7% | 2022-03-18 | Fix |
| CVE-2022-22669 | Apple macOS use-after-free | 7.8v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22667 | Apple iOS and iPadOS use-after-free | 7.8v3.1 | 1.1% | 2022-03-18 | KCVFix |
| CVE-2022-22666 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-22665 | Apple macOS logic flaw | 7.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22664 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22661 | Apple macOS type confusion | 7.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22660 | Apple macOS system notifications spoofing | 5.5v3.1 | 0.6% | 2022-03-18 | Fix |
| CVE-2022-22659 | Apple iOS and iPadOS logic flaw | 6.5v3.1 | 0.9% | 2022-03-18 | Fix |
| CVE-2022-22657 | Apple macOS improper initialization | 7.8v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22656 | Apple macOS improper authentication | 3.3v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22654 | Apple Safari spoofing | 4.3v3.1 | 0.9% | 2022-03-18 | Fix |
| CVE-2022-22653 | Apple iOS and iPadOS logic flaw | 7.5v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22652 | Apple iOS and iPadOS missing authentication | 6.1v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22651 | Apple macOS out-of-bounds write | 7.5v3.1 | 1.9% | 2022-03-18 | Fix |
| CVE-2022-22650 | Apple macOS improper preservation of permissions | 5.5v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22648 | This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to read restricted memory. | 5.5v3.1 | 0.4% | 2022-03-18 | Fix |
| CVE-2022-22647 | Apple macOS Login Window authentication bypass | 4.6v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22644 | Apple macOS Contacts information disclosure | 5.5v3.1 | 0.7% | 2022-03-18 | Fix |
| CVE-2022-22643 | Apple iOS FaceTime vulnerability | 7.5v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-22642 | Apple iOS Emergency SOS vulnerability | 9.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22641 | Apple macOS use-after-free | 9.8v3.1 | 1.4% | 2022-03-18 | Fix |
| CVE-2022-22640 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22639 | Apple macOS logic flaw | 7.8v3.1 | 8.1% | 2022-03-18 | Exploit codeFix |
| CVE-2022-22638 | Apple macOS null pointer dereference | 6.5v3.1 | 1.9% | 2022-03-18 | Fix |
| CVE-2022-22636 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22635 | Apple tvOS out-of-bounds write | 9.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22634 | Apple tvOS buffer overflow | 7.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22633 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22632 | Apple macOS logic flaw | 9.8v3.1 | 1.5% | 2022-03-18 | Fix |
| CVE-2022-22631 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22627 | Apple macOS out-of-bounds read | 7.1v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22626 | Apple macOS out-of-bounds read | 7.1v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22625 | Apple macOS out-of-bounds read | 7.1v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22622 | Apple iOS keyboard suggestions information disclosure | 4.6v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22621 | Apple iOS keyboard suggestions information disclosure | 4.6v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit use-after-free | 8.8v3.1 | 16.3% | 2022-03-18 | KEVExploit codeFix |
| CVE-2022-22618 | Apple iOS Emergency SOS vulnerability | 7.8v3.1 | 0.4% | 2022-03-18 | Fix |
| CVE-2022-22617 | Apple macOS logic flaw | 7.8v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22615 | Apple macOS use-after-free | 7.8v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-22614 | Apple macOS use-after-free | 7.8v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-22613 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.2% | 2022-03-18 | Fix |
| CVE-2022-22612 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.8% | 2022-03-18 | Fix |
| CVE-2022-22611 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22609 | Apple iOS and macOS application settings vulnerability | 7.5v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-22608 | Apple Xcode out-of-bounds read | 7.8v3.1 | 0.9% | 2022-03-18 | Fix |
| CVE-2022-22607 | Apple Xcode out-of-bounds read | 7.8v3.1 | 0.9% | 2022-03-18 | Fix |
| CVE-2022-22606 | Apple Xcode out-of-bounds read | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22605 | Apple Xcode out-of-bounds read | 7.8v3.1 | 0.8% | 2022-03-18 | Fix |
| CVE-2022-22604 | Apple Xcode out-of-bounds read | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22603 | Apple Xcode out-of-bounds read | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22602 | Apple Xcode out-of-bounds read | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22601 | Apple Xcode out-of-bounds read | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-22600 | Apple iOS and macOS privacy preferences vulnerability | 5.5v3.1 | 1.7% | 2022-03-18 | Exploit codeFix |
| CVE-2022-22599 | Apple macOS insecure permissions | 2.4v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22598 | Apple iOS and iPadOS camera metadata vulnerability | 3.3v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22597 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.3% | 2022-03-18 | Fix |
| CVE-2022-22596 | Apple watchOS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-03-18 | Fix |
| CVE-2022-22594 | Apple macOS origin validation error | 6.5v3.1 | 0.9% | 2022-03-18 | Fix |
| CVE-2022-22593 | Apple macOS buffer overflow | 7.8v3.1 | 1.5% | 2022-03-18 | Fix |
| CVE-2022-22592 | Apple macOS logic flaw | 6.5v3.1 | 1.6% | 2022-03-18 | Fix |
| CVE-2022-22591 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2022-03-18 | Fix |
| CVE-2022-22590 | Apple macOS use-after-free | 8.8v3.1 | 1.6% | 2022-03-18 | Fix |
| CVE-2022-22589 | A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, Safari 15.3, macOS Monterey 12.2. Processing a maliciously crafted mail message may lead to running arbitrary javascript. | 6.1v3.1 | 2.0% | 2022-03-18 | Fix |
| CVE-2022-22588 | Apple iOS and iPadOS resource exhaustion | 5.5v3.1 | 9.4% | 2022-03-18 | Fix |
| CVE-2022-22587 | Apple memory corruption | 9.8v3.1 | 11.6% | 2022-03-18 | KEVFix |
| CVE-2022-22586 | Apple macOS out-of-bounds write | 9.8v3.1 | 2.0% | 2022-03-18 | Fix |
| CVE-2022-22585 | Apple macOS link following | 7.5v3.1 | 1.7% | 2022-03-18 | Fix |
| CVE-2022-22584 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.6% | 2022-03-18 | Fix |
| CVE-2022-22583 | Apple macOS insecure permissions | 5.5v3.1 | 1.7% | 2022-03-18 | Fix |
| CVE-2022-22579 | Apple macOS information disclosure | 7.8v3.1 | 1.8% | 2022-03-18 | Fix |
| CVE-2022-22578 | Apple macOS logic flaw | 7.8v3.1 | 1.0% | 2022-03-18 | Fix |
| CVE-2022-1011 | Linux kernel A use-after-free | 7.8NVD v3.1 | 1.2% | 2022-03-18 | Exploit codeFix |
| CVE-2022-1003 | Mattermost sysadmin can override existing configs and bypass restrictions like EnableUploads | 3.3CNA v3.1 | 0.5% | 2022-03-18 | |
| CVE-2022-1002 | Mattermost HTML injection while inviting Guests | 2.0CNA v3.1 | 0.7% | 2022-03-18 | |
| CVE-2022-0742 | Memory leak in ICMP6 in Linux Kernel | 7.5NVD v3.1 | 5.0% | 2022-03-18 | Fix |
| CVE-2022-0547 | OpenVPN authentication bypass | 9.8v3.1 | 3.6% | 2022-03-18 | Fix |
| CVE-2022-26534 | FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal nodes to change view excessively and stop generating blocks. | 7.5v3.1 | 1.0% | 2022-03-17 | |
| CVE-2022-26526 | conda Miniconda3 incorrect permission assignment | 7.8v3.1 | 0.3% | 2022-03-17 | Fix |
| CVE-2022-26511 | KINGSOFT JAPAN WPS Presentation uncontrolled search path | 7.8v3.1 | 0.6% | 2022-03-17 | Fix |
| CVE-2022-26504 | Veeam Backup and Replication improper authentication | 8.8v3.1 | 2.6% | 2022-03-17 | Fix |
| CVE-2022-26503 | Veeam deserialization of untrusted data | 7.8v3.1 | 0.7% | 2022-03-17 | Exploit codeFix |
| CVE-2022-26501 | Veeam Backup & Replication remote code execution | 9.8v3.1 | 4.1% | 2022-03-17 | KEVFix |
| CVE-2022-26500 | Veeam Backup & Replication remote code execution | 8.8v3.1 | 5.8% | 2022-03-17 | KEVFix |
| CVE-2022-26300 | Eosio Project EOS out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-17 | |
| CVE-2022-26081 | KINGSOFT JAPAN The installer of WPS Office uncontrolled search path | 7.8v3.1 | 0.8% | 2022-03-17 | Fix |
| CVE-2022-25969 | KINGSOFT JAPAN The installer of WPS Office uncontrolled search path | 7.8v3.1 | 0.8% | 2022-03-17 | Fix |
| CVE-2022-25949 | KINGSOFT JAPAN KINGSOFT Internet Security 9 Plus stack-based buffer overflow | 7.8v3.1 | 0.8% | 2022-03-17 | Exploit codeFix |
| CVE-2022-25760 | accesslog arbitrary code injection | 9.8v3.1 | 1.6% | 2022-03-17 | |
| CVE-2022-25516 | nothings Stb Truetype.h out-of-bounds write | 6.5v3.1 | 0.9% | 2022-03-17 | |
| CVE-2022-25515 | nothings Stb Truetype.h out-of-bounds write | 6.5v3.1 | 0.9% | 2022-03-17 | |
| CVE-2022-25514 | nothings Stb Truetype.h buffer overflow | 7.5v3.1 | 1.0% | 2022-03-17 | |
| CVE-2022-25364 | gradle Enterprise incorrect default permissions | 8.1v3.1 | 1.0% | 2022-03-17 | Fix |
| CVE-2022-25354 | Prototype pollution in set-in | 9.8v3.1 | 1.9% | 2022-03-17 | Fix |
| CVE-2022-25352 | libnested prototype pollution | 9.8v3.1 | 2.1% | 2022-03-17 | Fix |
| CVE-2022-25296 | bodymen prototype pollution | 7.3v3.1 | 1.0% | 2022-03-17 | |
| CVE-2022-24770 | Improper neutralization of formula elements in a CSV file in Gradio Flagging | 8.8CNA v3.1 | 1.3% | 2022-03-17 | Fix |
| CVE-2022-24761 | HTTP request smuggling in Waitress | 7.5CNA v3.1 | 1.8% | 2022-03-17 | Fix |
| CVE-2022-24759 | Failure to validate signature during handshake in @ChainSafe/libp2p-noise | 8.1CNA v3.1 | 0.5% | 2022-03-17 | Fix |
| CVE-2022-24302 | Race condition in Paramiko | 5.9v3.1 | 2.1% | 2022-03-17 | Fix |
| CVE-2022-24075 | NAVER Whale browser files accessible to external parties | 6.5v3.1 | 0.9% | 2022-03-17 | Fix |
| CVE-2022-24074 | NAVER Whale browser resource exposure | 9.8v3.1 | 1.1% | 2022-03-17 | Fix |
| CVE-2022-24073 | NAVER Whale browser incorrect use of privileged APIs | 7.1v3.1 | 0.6% | 2022-03-17 | Fix |
| CVE-2022-24072 | NAVER Whale browser improper privilege management | 6.1v3.1 | 0.6% | 2022-03-17 | Fix |
| CVE-2022-22273 | SonicWall SRA/SMA100 OS command injection | 9.8v3.1 | 1.9% | 2022-03-17 | Fix |
| CVE-2022-21822 | NVIDIA FLARE allocation of resources without limits or throttling in nvflare | 7.5CNA v3.1 | 1.1% | 2022-03-17 | Fix |
| CVE-2022-21221 | github.com/valyala/fasthttp directory traversal | 7.5v3.1 | 2.5% | 2022-03-17 | Fix |
| CVE-2022-1000 | Path traversal in prasathmani/TinyFileManager | 9.8v3.1 | 1.9% | 2022-03-17 | Fix |
| CVE-2022-0758 | Rapid7 Nexpose reflected XSS | 3.3CNA v3.1 | 0.4% | 2022-03-17 | |
| CVE-2022-0757 | Rapid7 Nexpose SQL injection | 5.5CNA v3.1 | 1.2% | 2022-03-17 | Fix |
| CVE-2022-0749 | SinGooCMS.Utility deserialization of untrusted data | 9.8v3.1 | 1.7% | 2022-03-17 | |
| CVE-2022-0748 | post-loader arbitrary code execution | 9.8v3.1 | 2.1% | 2022-03-17 | |
| CVE-2022-0237 | Rapid7 Insight Agent privilege escalation | 4.0CNA v3.1 | 0.5% | 2022-03-17 | |
| CVE-2022-27225 | gradle Enterprise missing encryption | 6.5v3.1 | 0.5% | 2022-03-16 | Fix |
| CVE-2022-27223 | Linux kernel improper array index validation | 8.8v3.1 | 2.2% | 2022-03-16 | Fix |
| CVE-2022-26660 | Robotronic Runasspc hard-coded credentials | 7.5v3.1 | 0.6% | 2022-03-16 | Fix |
| CVE-2022-26354 | qemu-kvm missing resource release | 3.2NVD v3.1 | 0.4% | 2022-03-16 | Fix |
| CVE-2022-26353 | qemu-kvm missing resource release | 7.5NVD v3.1 | 2.7% | 2022-03-16 | Fix |
| CVE-2022-26295 | Online Project Time Management System /ptms/?page=user stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-16 | |
| CVE-2022-26293 | Online Project Time Management System SQL injection | 9.8v3.1 | 2.2% | 2022-03-16 | |
| CVE-2022-25252 | PTC Axeda agent and Axeda Desktop Server improper check or handling of exceptional conditions | 7.5v3.1 | 1.6% | 2022-03-16 | Fix |
| CVE-2022-25251 | PTC Axeda agent and Axeda Desktop Server missing authentication for critical function | 9.8v3.1 | 1.9% | 2022-03-16 | Fix |
| CVE-2022-25250 | PTC Axeda agent and Axeda Desktop Server missing authentication for critical function | 7.5v3.1 | 1.7% | 2022-03-16 | Fix |
| CVE-2022-25249 | PTC Axeda agent and Axeda Desktop Server path traversal | 7.5v3.1 | 2.5% | 2022-03-16 | Fix |
| CVE-2022-25248 | PTC Axeda agent and Axeda Desktop Server information exposure | 5.3v3.1 | 0.9% | 2022-03-16 | Fix |
| CVE-2022-25247 | PTC Axeda agent and Axeda Desktop Server missing authentication for critical function | 9.8v3.1 | 4.1% | 2022-03-16 | Fix |
| CVE-2022-25246 | PTC Axeda agent and Axeda Desktop Server use of hard-coded credentials | 8.8NVD v3.1 | 1.8% | 2022-03-16 | Fix |
| CVE-2022-24751 | Race condition in Zulip | 5.4CNA v3.1 | 1.0% | 2022-03-16 | Fix |
| CVE-2022-24729 | ckeditor4 regular expression denial of service in dialog plugin | 6.5CNA v3.1 | 2.5% | 2022-03-16 | Fix |
| CVE-2022-24728 | Cross-site scripting in CKEditor4 | 5.4CNA v3.1 | 1.2% | 2022-03-16 | Fix |
| CVE-2022-23812 | Embedded malicious code in node-ipc | 9.8NVD v3.1 | 4.2% | 2022-03-16 | Fix |
| CVE-2022-23610 | Improper verification of cryptographic signature in wire-server | 9.1CNA v3.1 | 0.7% | 2022-03-16 | Fix |
| CVE-2022-23234 | SnapCenter cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2022-21946 | Suddoers configuration for Cscreen not restrictive enough | 5.3CNA v3.1 | 0.3% | 2022-03-16 | Fix |
| CVE-2022-21945 | Cscreen: Usage of fixed path /tmp/Cscreen.debug | 5.1CNA v3.1 | 0.2% | 2022-03-16 | Fix |
| CVE-2022-21164 | node-lmdb denial of service (DoS) | 7.5v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2022-0986 | Reflected cross-site scripting (XSS) vulnerability in hestiacp/hestiacp | 6.1v3.1 | 0.9% | 2022-03-16 | Fix |
| CVE-2022-0982 | Buffer overflow via crafted client request in Accel-PPP | 9.8v3.1 | 1.2% | 2022-03-16 | |
| CVE-2022-0959 | pgAdmin 4 path traversal | 6.5NVD v3.1 | 1.0% | 2022-03-16 | Fix |
| CVE-2022-0918 | 389-ds-base denial of service | 7.5v3.1 | 5.9% | 2022-03-16 | Exploit codeFix |
| CVE-2022-0911 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.8% | 2022-03-16 | Fix |
| CVE-2022-0811 | Code injection in CRI-O | 8.8v3.1 | 18.6% | 2022-03-16 | Exploit codeFix |
| CVE-2022-0705 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2022-03-16 | Fix |
| CVE-2022-0704 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 1.3% | 2022-03-16 | Fix |
| CVE-2022-27218 | Personal tokens stored in plain text by Jenkins Incapptic Connect Uploader Plugin | 4.3v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-27217 | Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin | 6.5v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-27216 | Passwords stored in plain text by Jenkins dbCharts Plugin | 6.5v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-27215 | Missing permission checks in Jenkins Release Helper Plugin | 4.3v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-27214 | CSRF vulnerability in Jenkins Release Helper Plugin | 4.3v3.1 | 0.5% | 2022-03-15 | Fix |
| CVE-2022-27213 | Stored cross-site scripting vulnerability in Jenkins Environment Dashboard Plugin | 5.4v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-27212 | Stored cross-site scripting vulnerability in Jenkins List Git Branches Parameter Plugin | 5.4v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-27211 | Jenkins Kubernetes Continuous Deploy Plugin A missing authorization | 6.5v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-27210 | CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials | 6.5v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-27209 | Missing permission checks in Jenkins kubernetes-cd Plugin allow enumerating credentials IDs | 6.5v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-27208 | Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin | 6.5v3.1 | 1.8% | 2022-03-15 | Fix |
| CVE-2022-27207 | Stored cross-site scripting vulnerability in Jenkins Global-build-stats Plugin | 4.8v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-27206 | Client Secret stored in plain text by Jenkins GitLab Authentication Plugin | 6.5v3.1 | 1.0% | 2022-03-15 | Fix |
| CVE-2022-27205 | CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF | 4.3v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-27204 | Jenkins Extended Choice Parameter Plugin cross-site request forgery | 8.8v3.1 | 0.6% | 2022-03-15 | Fix |
| CVE-2022-27203 | Arbitrary JSON and property file read vulnerability in Jenkins Extended Choice Parameter Plugin | 6.5v3.1 | 1.6% | 2022-03-15 | Fix |
| CVE-2022-27202 | Stored cross-site scripting vulnerability in Jenkins Extended Choice Parameter Plugin | 5.4v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-27201 | Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin | 6.5v3.1 | 1.4% | 2022-03-15 | Fix |
| CVE-2022-27200 | Jenkins Folder-based Authorization Strategy Plugin stored cross-site scripting in folder-auth plugin | 4.8v3.1 | 0.6% | 2022-03-15 | Fix |
| CVE-2022-27199 | Missing permission checks in AWS Credentials Plugin | 4.3v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-27198 | CSRF vulnerability in Jenkins CloudBees AWS Credentials Plugin | 8.0v3.1 | 0.5% | 2022-03-15 | Fix |
| CVE-2022-27197 | Stored cross-site scripting vulnerability in Jenkins Dashboard View Plugin | 5.4v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-27196 | Stored cross-site scripting vulnerability in Jenkins Favorite Plugin | 5.4v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-27195 | Sensitive parameter values captured in build metadata files by Jenkins Parameterized Trigger Plugin | 5.5v3.1 | 0.4% | 2022-03-15 | Fix |
| CVE-2022-27193 | XML external entities vulnerability in CVRF-CSAF-Converter | 5.5v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-27005 | TOTOLINK A7000R OS command injection | 9.8v3.1 | 5.5% | 2022-03-15 | |
| CVE-2022-27004 | TOTOLINK A7000R OS command injection | 9.8v3.1 | 2.9% | 2022-03-15 | |
| CVE-2022-27003 | TOTOLINK A7000R OS command injection | 9.8v3.1 | 2.9% | 2022-03-15 | |
| CVE-2022-27002 | CommScope Arris TR3300 command injection | 9.8v3.1 | 5.1% | 2022-03-15 | Emerging Threats |
| CVE-2022-27001 | CommScope Arris TR3300 command injection | 9.8v3.1 | 3.4% | 2022-03-15 | |
| CVE-2022-27000 | CommScope Arris TR3300 command injection | 9.8v3.1 | 3.4% | 2022-03-15 | |
| CVE-2022-26999 | CommScope Arris TR3300 command injection | 9.8v3.1 | 3.4% | 2022-03-15 | |
| CVE-2022-26998 | CommScope Arris TR3300 command injection | 9.8v3.1 | 3.4% | 2022-03-15 | |
| CVE-2022-26997 | CommScope Arris TR3300 command injection | 9.8v3.1 | 3.4% | 2022-03-15 | |
| CVE-2022-26996 | CommScope Arris TR3300 command injection | 9.8v3.1 | 2.9% | 2022-03-15 | |
| CVE-2022-26995 | CommScope Arris TR3300 command injection | 9.8v3.1 | 2.9% | 2022-03-15 | |
| CVE-2022-26994 | Arris Sbr-ac1200p OS command injection | 9.8v3.1 | 3.0% | 2022-03-15 | |
| CVE-2022-26993 | Arris Sbr-ac1200p OS command injection | 9.8v3.1 | 2.7% | 2022-03-15 | |
| CVE-2022-26992 | Arris Sbr-ac1200p OS command injection | 9.8v3.1 | 2.9% | 2022-03-15 | |
| CVE-2022-26991 | Arris Sbr-ac1200p OS command injection | 9.8v3.1 | 2.7% | 2022-03-15 | |
| CVE-2022-26990 | Arris Sbr-ac1200p OS command injection | 9.8v3.1 | 2.9% | 2022-03-15 | |
| CVE-2022-26779 | Apache CloudStack insecure random number generation affects project email invitation | 7.5v3.1 | 2.9% | 2022-03-15 | Fix |
| CVE-2022-26214 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.8% | 2022-03-15 | |
| CVE-2022-26213 | TOTOLINK X5000R Firmware OS command injection | 9.8v3.1 | 25.6% | 2022-03-15 | |
| CVE-2022-26212 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.8% | 2022-03-15 | |
| CVE-2022-26211 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.8% | 2022-03-15 | |
| CVE-2022-26210 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 5.7% | 2022-03-15 | Emerging Threats |
| CVE-2022-26209 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.2% | 2022-03-15 | |
| CVE-2022-26208 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.8% | 2022-03-15 | |
| CVE-2022-26207 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.2% | 2022-03-15 | |
| CVE-2022-26206 | TOTOLINK A3000RU OS command injection | 9.8v3.1 | 2.2% | 2022-03-15 | |
| CVE-2022-25498 | Cuppacms code injection | 9.8v3.1 | 3.1% | 2022-03-15 | |
| CVE-2022-25497 | Cuppacms files accessible to external parties | 5.3v3.1 | 3.6% | 2022-03-15 | Reported exploitedNuclei |
| CVE-2022-25495 | Cuppacms unrestricted file upload | 9.8v3.1 | 2.2% | 2022-03-15 | |
| CVE-2022-25494 | Online Banking System SQL injection | 9.8v3.1 | 1.1% | 2022-03-15 | |
| CVE-2022-25493 | Hospital Management System cross-site scripting | 6.1v3.1 | 0.8% | 2022-03-15 | |
| CVE-2022-25492 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-03-15 | |
| CVE-2022-25491 | Hospital Management System SQL injection | 7.5v3.1 | 1.5% | 2022-03-15 | |
| CVE-2022-25490 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-03-15 | |
| CVE-2022-25489 | Thedigitalcraft Atom CMS cross-site scripting | 5.4v3.1 | 1.5% | 2022-03-15 | Nuclei |
| CVE-2022-25488 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 7.1% | 2022-03-15 | Nuclei |
| CVE-2022-25487 | Thedigitalcraft Atom CMS unrestricted file upload | 9.8v3.1 | 54.8% | 2022-03-15 | Nuclei |
| CVE-2022-25486 | Cuppacms inclusion of untrusted functionality | 7.8v3.1 | 10.0% | 2022-03-15 | Nuclei |
| CVE-2022-25485 | Cuppacms inclusion of untrusted functionality | 7.8v3.1 | 7.9% | 2022-03-15 | Nuclei |
| CVE-2022-24756 | Missing release of memory after effective lifetime in Bareos Director | 7.5CNA v3.1 | 1.9% | 2022-03-15 | Fix |
| CVE-2022-24755 | Incorrect authorization in Bareos Director | 8.1CNA v3.1 | 2.0% | 2022-03-15 | Fix |
| CVE-2022-24752 | SQL injection through sorting parameters in SyliusGridBundle | 9.8CNA v3.1 | 1.4% | 2022-03-15 | Fix |
| CVE-2022-24721 | cometd incorrect authorization in org.cometd.oort | 8.1CNA v3.1 | 1.1% | 2022-03-15 | Fix |
| CVE-2022-23989 | Stormshield Network Security denial of service | 7.5v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-22771 | TIBCO JasperReports Library directory traversal | 9.9CNA v3.0 | 2.5% | 2022-03-15 | Fix |
| CVE-2022-0970 | Cross-site scripting (XSS) Stored in getgrav/grav | 5.4NVD v3.1 | 1.8% | 2022-03-15 | Fix |
| CVE-2022-0968 | Integer overflow in microweber | 5.5NVD v3.1 | 3.7% | 2022-03-15 | NucleiFix |
| CVE-2022-0967 | Stored XSS via file upload in star7th/ShowDoc in star7th/ShowDoc in star7th/ShowDoc | 5.4v3.1 | 3.3% | 2022-03-15 | Exploit codeFix |
| CVE-2022-0966 | Stored XSS via file upload in star7th/ShowDoc in star7th/ShowDoc | 5.4v3.1 | 0.5% | 2022-03-15 | Fix |
| CVE-2022-0965 | Stored XSS viva .ofd file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-0964 | Stored XSS viva .webmv file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-0963 | Unrestricted XML files leads to stored XSS in microweber/microweber | 5.4v3.1 | 1.9% | 2022-03-15 | NucleiFix |
| CVE-2022-0961 | Denial of service in microweber | 5.5NVD v3.1 | 1.0% | 2022-03-15 | Fix |
| CVE-2022-0957 | Stored XSS via file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-0956 | Stored XSS via file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-0954 | Stored cross-site scripting in Microweber | 5.4v3.1 | 3.2% | 2022-03-15 | NucleiFix |
| CVE-2022-0951 | File upload Restriction Bypass leading to stored XSS vulnerability in star7th/ShowDoc | 6.1NVD v3.1 | 0.9% | 2022-03-15 | Fix |
| CVE-2022-0950 | Unrestricted upload of file with dangerous type in star7th/ShowDoc | 5.4v3.1 | 0.6% | 2022-03-15 | Fix |
| CVE-2022-0945 | Stored XSS viva axd and cshtml file upload in star7th/ShowDoc in star7th/ShowDoc | 5.4NVD v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-0944 | Template injection in connection test endpoint leads to RCE in Sqlpad/Sqlpad | 7.2NVD v3.1 | 8.7% | 2022-03-15 | Exploit codeFix |
| CVE-2022-0942 | Stored XSS due to unrestricted file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-0894 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4NVD v3.1 | 0.7% | 2022-03-15 | Fix |
| CVE-2022-0893 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.8% | 2022-03-15 | Fix |
| CVE-2022-0778 | OpenSSL infinite loop in BN_mod_sqrt reachable when parsing certificates | 7.5NVD v3.1 | 73.2% | 2022-03-15 | Emerging ThreatsExploit codeFix |
| CVE-2022-0430 | Exposure of sensitive information to an unauthorized actor in httpie/httpie | 5.3v3.1 | 1.3% | 2022-03-15 | Fix |
| CVE-2022-26320 | Rambus Safezone Basic Crypto Module insufficient randomness | 9.1v3.1 | 1.0% | 2022-03-14 | |
| CVE-2022-24762 | Exposure of sensitive information to an unauthorized actor in sysend.js | 6.5CNA v3.1 | 0.7% | 2022-03-14 | Fix |
| CVE-2022-24749 | Basic cross-site scripting and unrestricted upload of file with dangerous type in Sylius | 6.1CNA v3.1 | 1.1% | 2022-03-14 | Fix |
| CVE-2022-24743 | Insufficient session expiration in Sylius | 7.1CNA v3.1 | 1.3% | 2022-03-14 | Fix |
| CVE-2022-24742 | Exposure of sensitive information due to incompatible policies in Sylius | 5.0CNA v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-24740 | Improper authentication in Volto | 5.0CNA v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-24733 | Improper restriction of rendered UI layers or frames in Sylius | 6.1CNA v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-24578 | gpac out-of-bounds write | 7.8v3.1 | 1.0% | 2022-03-14 | Fix |
| CVE-2022-24577 | gpac null pointer dereference | 7.8v3.1 | 1.2% | 2022-03-14 | Fix |
| CVE-2022-24576 | GPAC MP4Box use-after-free | 5.5v3.1 | 0.7% | 2022-03-14 | Fix |
| CVE-2022-24575 | gpac out-of-bounds write | 7.8v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-24574 | gpac null pointer dereference | 5.5v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-24387 | File upload and overwrite to app_data/Config in SmarterTrack | 7.2NVD v3.1 | 2.1% | 2022-03-14 | Fix |
| CVE-2022-24386 | Stored XSS in SmarterTrack | 6.1NVD v3.1 | 0.7% | 2022-03-14 | Fix |
| CVE-2022-24385 | Information disclosure via direct object access on SmarterTrack | 6.5v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-24384 | Reflective XSS on SmarterTrack | 6.1NVD v3.1 | 4.1% | 2022-03-14 | NucleiFix |
| CVE-2022-23943 | Apache HTTP Server mod_sed: Read/write beyond bounds | 9.8v3.1 | 50.4% | 2022-03-14 | Fix |
| CVE-2022-22735 | Simple Quotation WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.3% | 2022-03-14 | |
| CVE-2022-22734 | Simple Quotation WordPress plugin Quote Creation/Edition via CSRF to stored cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | |
| CVE-2022-22721 | Apache HTTP Server core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody | 9.1v3.1 | 41.9% | 2022-03-14 | Fix |
| CVE-2022-22720 | HTTP request smuggling vulnerability in Apache HTTP Server | 9.8v3.1 | 28.2% | 2022-03-14 | Exploit codeFix |
| CVE-2022-22719 | Apache HTTP Server mod_lua Use of uninitialized value of in r:parsebody | 7.5v3.1 | 69.8% | 2022-03-14 | Fix |
| CVE-2022-22354 | IBM Spectrum Copy Data Management denial of service | 6.2CNA v3.0 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-22353 | IBM Big SQL on Cloud Pak for Data information disclosure | 5.3CNA v3.0 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-22348 | IBM Spectrum Protect Operations Center cross-site request forgery | 4.0CNA v3.0 | 0.2% | 2022-03-14 | Fix |
| CVE-2022-22346 | IBM Spectrum Protect Operations Center cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2022-03-14 | Fix |
| CVE-2022-22344 | IBM Spectrum Copy Data Management HTTP header injection | 4.8CNA v3.0 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-21187 | libvcs command injection | 9.8v3.1 | 3.6% | 2022-03-14 | Fix |
| CVE-2022-20001 | fish git prompt integration vulnerability | 7.8CNA v3.1 | 1.5% | 2022-03-14 | Fix |
| CVE-2022-0962 | Stored XSS viva .webma file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-0960 | Stored XSS viva .properties file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-0946 | Stored XSS viva cshtm file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-0943 | Heap-based buffer overflow occurs in Vim in Vim/Vim | 7.8v3.1 | 0.7% | 2022-03-14 | Fix |
| CVE-2022-0941 | Stored XSS due to unrestricted file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-0940 | Stored XSS due to unrestricted file upload in star7th/ShowDoc | 5.4v3.1 | 0.5% | 2022-03-14 | Fix |
| CVE-2022-0938 | Stored XSS via file upload in star7th/ShowDoc | 5.4NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-0937 | Stored XSS in ShowDoc through file upload in star7th/ShowDoc | 5.4v3.1 | 0.5% | 2022-03-14 | Fix |
| CVE-2022-0703 | GD Mylist plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | |
| CVE-2022-0702 | Petfinder Listings WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-0701 | SEO 301 Meta WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | |
| CVE-2022-0700 | Simple Theme Options WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-0684 | WP Home Page Menu WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-03-14 | Fix |
| CVE-2022-0674 | Kunze Law WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-0659 | Sync iCloud COS WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-14 | Fix |
| CVE-2022-0658 | CommonsBooking WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 7.5% | 2022-03-14 | NucleiFix |
| CVE-2022-0648 | Team Circle Image Slider With Lightbox WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-0601 | Countdown and Clock WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-0593 | Login with phone number WordPress plugin unauthenticated remote plugin deletion | 6.5NVD v3.1 | 1.4% | 2022-03-14 | Fix |
| CVE-2022-0503 | Multisite Content Copier/Updater WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-0478 | Event Manager for WooCommerce WordPress plugin Contributor+ SQL injection | 8.8NVD v3.1 | 1.5% | 2022-03-14 | Fix |
| CVE-2022-0449 | Flexi - Guest Submit WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-0399 | Advanced Product Labels for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-0341 | Cross-site scripting (XSS) Stored in vanessa219/vditor | 5.4v3.1 | 0.5% | 2022-03-14 | Fix |
| CVE-2022-0327 | Master Addons for Elementor WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-0321 | WP Voting Contest WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-14 | Fix |
| CVE-2022-0254 | SQL injection in WordPress Zero Spam WordPress plugin | 9.8NVD v3.1 | 2.0% | 2022-03-14 | Fix |
| CVE-2022-0248 | Contact Form Submissions WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 1.7% | 2022-03-14 | Fix |
| CVE-2022-0230 | Better WordPress Google XML Sitemaps plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 1.5% | 2022-03-14 | |
| CVE-2022-0169 | Photo Gallery by 10Web WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 74.6% | 2022-03-14 | NucleiMetasploitExploit codeFix |
| CVE-2022-0165 | Page Builder KingComposer WordPress plugin open redirect | 6.1NVD v3.1 | 4.3% | 2022-03-14 | NucleiExploit code |
| CVE-2022-0161 | ARI Fancy Lightbox WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-03-14 | Fix |
| CVE-2022-0147 | Cookie Information WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.6% | 2022-03-14 | NucleiFix |
| CVE-2022-26981 | liblouis buffer overflow | 7.8v3.1 | 1.5% | 2022-03-13 | Fix |
| CVE-2022-24696 | Mirametrix Glance privilege escalation | 7.8v3.1 | 0.2% | 2022-03-13 | Fix |
| CVE-2022-24128 | timescaledb incorrect authorization | 8.0v3.1 | 0.9% | 2022-03-13 | Fix |
| CVE-2022-26967 | gpac out-of-bounds write | 7.8v3.1 | 1.0% | 2022-03-12 | Fix |
| CVE-2022-26966 | Linux kernel information disclosure | 5.5v3.1 | 0.3% | 2022-03-12 | Fix |
| CVE-2022-26533 | Cross-site scripting in Alist | 6.1v3.1 | 0.7% | 2022-03-12 | Fix |
| CVE-2022-26276 | OneNav path traversal | 5.3v3.1 | 1.2% | 2022-03-12 | |
| CVE-2022-24760 | parse-community parse-server command injection in Parse server | 10.0CNA v3.1 | 49.1% | 2022-03-12 | Exploit codeFix |
| CVE-2022-23960 | Arm Cortex-A57 information disclosure | 5.6NVD v3.1 | 0.5% | 2022-03-12 | Fix |
| CVE-2022-0930 | File upload filter bypass leading to stored XSS in microweber/microweber | 4.8NVD v3.1 | 0.9% | 2022-03-12 | Fix |
| CVE-2022-0929 | XSS on dynamic_text module in microweber/microweber | 6.1v3.1 | 1.1% | 2022-03-12 | Fix |
| CVE-2022-0926 | File upload filter bypass leading to stored XSS in microweber/microweber | 4.8NVD v3.1 | 0.8% | 2022-03-12 | Fix |
| CVE-2022-0880 | Cross-site scripting (XSS) Stored in star7th/ShowDoc | 5.4NVD v3.1 | 0.7% | 2022-03-12 | Fix |
| CVE-2022-26878 | Linux kernel memory leak | 5.5NVD v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2022-26874 | Horde Mime Viewer cross-site scripting | 5.4v3.1 | 1.1% | 2022-03-11 | Fix |
| CVE-2022-25839 | url-js improper input validation | 5.3v3.1 | 0.8% | 2022-03-11 | Fix |
| CVE-2022-25621 | NEC Platforms UNIVERGE DT OS command injection | 9.8v3.1 | 1.4% | 2022-03-11 | Fix |
| CVE-2022-25601 | Contact Form X WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2022-25600 | WP Google Map WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.6% | 2022-03-11 | Fix |
| CVE-2022-25512 | Exposure of sensitive information to an unauthorized actor in FreeTAKServer-UI | 7.5v3.1 | 1.1% | 2022-03-11 | |
| CVE-2022-25511 | Path traversal in FreeTAKServer-UI | 6.5v3.1 | 0.7% | 2022-03-11 | |
| CVE-2022-25510 | Freetakserver-ui hard coded credentials in FreeTAKServer | 8.8v3.1 | 1.1% | 2022-03-11 | Fix |
| CVE-2022-25508 | Freetakserver-ui improper authentication in FreeTAKServer | 7.5v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2022-25507 | Cross-site scripting in FreeTAKServer-UI | 5.4v3.1 | 0.5% | 2022-03-11 | |
| CVE-2022-25506 | SQL injection in FreeTAKServer-UI | 6.5v3.1 | 0.9% | 2022-03-11 | |
| CVE-2022-25216 | DVDFab 12 Player / PlayerFab path traversal | 7.5NVD v3.1 | 13.5% | 2022-03-11 | Nuclei |
| CVE-2022-24754 | Buffer overflow in pjsip | 8.5CNA v3.1 | 2.1% | 2022-03-11 | Fix |
| CVE-2022-24433 | simple-git command injection | 9.8v3.1 | 3.4% | 2022-03-11 | Fix |
| CVE-2022-24421 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2022-24420 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2022-24419 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2022-24416 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2022-24415 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.3% | 2022-03-11 | Fix |
| CVE-2022-24097 | Adobe After Effects out-of-bounds write could lead to arbitrary code execution | 7.8CNA v3.1 | 2.4% | 2022-03-11 | Fix |
| CVE-2022-24096 | Adobe After Effects heap-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-03-11 | Fix |
| CVE-2022-24095 | Adobe After Effects stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-03-11 | Fix |
| CVE-2022-24094 | Adobe After Effects stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 3.9% | 2022-03-11 | Fix |
| CVE-2022-24090 | Adobe Photoshop 2022 out-of-bounds read could lead to memory leak | 5.5CNA v3.1 | 2.0% | 2022-03-11 | Fix |
| CVE-2022-23934 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23933 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23932 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23931 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23930 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.5% | 2022-03-11 | Fix |
| CVE-2022-23929 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23928 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23927 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23926 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23925 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-23924 | HP PC BIOS privilege escalation | 8.2NVD v3.1 | 0.6% | 2022-03-11 | Fix |
| CVE-2022-23731 | LG webOS TV privilege escalation | 7.8v3.1 | 0.6% | 2022-03-11 | Exploit codeFix |
| CVE-2022-23730 | LG webOS TV improper access control | 9.8v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2022-23625 | wireapp wire-ios DoS vulnerability: Malformed Resource Identifiers | 6.5CNA v3.1 | 1.2% | 2022-03-11 | Fix |
| CVE-2022-23402 | Yokogawa Electric CENTUM VP hard-coded credentials | 9.8v3.1 | 1.0% | 2022-03-11 | |
| CVE-2022-23401 | Yokogawa Electric CENTUM CS 3000 uncontrolled search path | 7.8v3.1 | 0.2% | 2022-03-11 | Fix |
| CVE-2022-23187 | Adobe Illustrator 2022 buffer overflow could lead to arbitrary code execution | 7.8CNA v3.1 | 4.3% | 2022-03-11 | Fix |
| CVE-2022-22729 | Yokogawa Electric CENTUM CS 3000 authentication bypass | 8.8v3.1 | 0.9% | 2022-03-11 | |
| CVE-2022-22151 | Yokogawa Electric CENTUM CS 3000 log injection | 8.1v3.1 | 0.8% | 2022-03-11 | |
| CVE-2022-22148 | Yokogawa Electric CENTUM CS 3000 incorrect permission assignment | 7.8v3.1 | 0.2% | 2022-03-11 | Fix |
| CVE-2022-22145 | Yokogawa Electric CENTUM CS 3000 resource exhaustion | 8.1v3.1 | 0.8% | 2022-03-11 | |
| CVE-2022-22141 | Yokogawa Electric CENTUM CS 3000 incorrect permission assignment | 7.8v3.1 | 0.2% | 2022-03-11 | Fix |
| CVE-2022-21819 | NVIDIA Jetson Nano, Jetson Nano 2GB incorrect permission assignment | 7.6CNA v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-21808 | Yokogawa Electric CENTUM CS 3000 path traversal | 8.8v3.1 | 1.1% | 2022-03-11 | |
| CVE-2022-21194 | Yokogawa Electric CENTUM VP hard-coded credentials | 9.8v3.1 | 1.0% | 2022-03-11 | |
| CVE-2022-21177 | Yokogawa Electric CENTUM CS 3000 path traversal | 8.1v3.1 | 0.9% | 2022-03-11 | |
| CVE-2022-0932 | Missing authorization in saleor/saleor | 6.5v3.1 | 1.0% | 2022-03-11 | Fix |
| CVE-2022-0928 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4v3.1 | 2.4% | 2022-03-11 | NucleiFix |
| CVE-2022-0924 | libtiff tiffcp out-of-bounds read | 5.5CNA v3.1 | 1.3% | 2022-03-11 | Fix |
| CVE-2022-0921 | Abusing Backup/Restore feature to achieve remote code execution in microweber/microweber | 6.7NVD v3.1 | 2.2% | 2022-03-11 | Fix |
| CVE-2022-0913 | Integer overflow or wraparound in microweber/microweber | 7.5NVD v3.1 | 1.4% | 2022-03-11 | Fix |
| CVE-2022-0912 | Unrestricted upload of file with dangerous type in microweber/microweber | 4.8v3.1 | 0.5% | 2022-03-11 | Fix |
| CVE-2022-0909 | libtiff tiffcrop divide by zero | 5.5CNA v3.1 | 1.3% | 2022-03-11 | Fix |
| CVE-2022-0908 | TIFF Software Distribution libtiff null pointer dereference | 7.7CNA v3.1 | 1.3% | 2022-03-11 | Fix |
| CVE-2022-0907 | libtiff tiffcrop null pointer dereference | 5.5CNA v3.1 | 1.3% | 2022-03-11 | Fix |
| CVE-2022-0871 | Missing authorization in gogs/gogs | 9.1v3.1 | 1.2% | 2022-03-11 | Fix |
| CVE-2022-0870 | Server-side request forgery (SSRF) in gogs/gogs | 5.3v3.1 | 3.4% | 2022-03-11 | NucleiFix |
| CVE-2022-0860 | Improper authorization in cobbler/cobbler | 9.1v3.1 | 2.3% | 2022-03-11 | Fix |
| CVE-2022-0853 | jboss-client memory leak | 7.5v3.1 | 1.5% | 2022-03-11 | Exploit codeFix |
| CVE-2022-0822 | Cross-site scripting (XSS) Reflected in orchardcms/OrchardCore | 5.4v3.1 | 0.6% | 2022-03-11 | Fix |
| CVE-2022-0821 | Improper authorization in orchardcms/OrchardCore | 6.5NVD v3.1 | 0.7% | 2022-03-11 | Fix |
| CVE-2022-0820 | Cross-site scripting (XSS) Stored in orchardcms/OrchardCore | 6.1v3.1 | 0.7% | 2022-03-11 | Fix |
| CVE-2022-0002 | Intel(R) Processors information disclosure | 6.5v3.1 | 0.4% | 2022-03-11 | Fix |
| CVE-2022-0001 | Intel(R) Processors information disclosure | 6.5NVD v3.1 | 0.5% | 2022-03-11 | Fix |
| CVE-2022-26847 | SPIP missing authentication | 5.3v3.1 | 1.4% | 2022-03-10 | Fix |
| CVE-2022-26846 | SPIP arbitrary code execution | 8.8v3.1 | 3.1% | 2022-03-10 | Fix |
| CVE-2022-26778 | Veritas System Recovery cleartext storage of sensitive information | 6.5v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-26662 | XML entity expansion in trytond and Proteus | 7.5v3.1 | 2.0% | 2022-03-10 | Fix |
| CVE-2022-26661 | Improper restriction of XML external entity reference in trytond and Proteus | 6.5v3.1 | 1.4% | 2022-03-10 | Fix |
| CVE-2022-26652 | Arbitrary file write in nats-server | 6.5v3.1 | 2.3% | 2022-03-10 | Fix |
| CVE-2022-26521 | AbanteCart unrestricted file upload | 7.2v3.1 | 9.6% | 2022-03-10 | Exploit codeFix |
| CVE-2022-26520 | Postgresql Jdbc Driver pgjdbc arbitrary file write | 9.8v3.1 | 3.0% | 2022-03-10 | Fix |
| CVE-2022-26355 | Citrix Federated Authentication Service private key storage vulnerability | 4.4v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-26311 | Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments. | 7.5v3.1 | 1.2% | 2022-03-10 | Fix |
| CVE-2022-26143 | MiCollab, MiVoice Business Express improper access control | 9.8v3.1 | 87.3% | 2022-03-10 | KEVNucleiFix |
| CVE-2022-26131 | Hegemon Electronics PLC4TRUCKS J2497 trailer receivers vulnerability | 9.8v3.1 | 1.3% | 2022-03-10 | |
| CVE-2022-26104 | SAP Financial Consolidation missing authorization | 5.3v3.1 | 0.7% | 2022-03-10 | Fix |
| CVE-2022-26103 | SAP NetWeaver (Real Time Messaging Framework) missing authorization | 5.3v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2022-26102 | SAP NetWeaver Application Server for ABAP missing authorization | 5.4v3.1 | 0.5% | 2022-03-10 | Fix |
| CVE-2022-26101 | SAP Fiori Launchpad cross-site scripting | 6.1v3.1 | 1.4% | 2022-03-10 | Fix |
| CVE-2022-26100 | SAPCAR improper array index validation | 9.8v3.1 | 1.2% | 2022-03-10 | Fix |
| CVE-2022-25922 | Hegemon Electronics PLC4TRUCKS J2497 diagnostic functions missing authentication | 9.1v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25830 | Samsung Mobile Galaxy Watch3 PlugIn information disclosure | 1.9CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25829 | Samsung Mobile Watch Active2 PlugIn information disclosure | 1.9CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25828 | Samsung Mobile Watch Active PlugIn information disclosure | 1.9CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25827 | Samsung Mobile Galaxy Watch PlugIn information disclosure | 1.9CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25826 | Samsung Mobile Galaxy S3 PlugIn information disclosure | 1.9CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25825 | Samsung Mobile Samsung Account improper access control | 6.2CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25824 | Samsung Mobile Bixby Touch improper access control | 4.0CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25823 | Samsung Mobile Galaxy Watch PlugIn information disclosure | 1.9CNA v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-25822 | Samsung Mobile Devices sdp driver use-after-free | 4.0CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25821 | Samsung Mobile Devices out-of-bounds read | 3.3CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25820 | Samsung Mobile Devices missing brute-force protection | 4.2CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25819 | Samsung Mobile Devices with Exynos chipsets hdcp2 device node out-of-bounds read | 5.3CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25818 | Samsung Mobile Devices arbitrary code execution | 6.5CNA v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-25817 | Samsung Mobile Devices One UI Home improper authentication | 4.0CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25816 | Samsung Mobile Devices improper authentication | 4.1CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25815 | Samsung Mobile Devices incorrect default permissions | 5.5CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25814 | Samsung Mobile Devices incorrect default permissions | 5.5CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-25566 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25561 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25560 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25558 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25557 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25556 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25555 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25554 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25553 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25552 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25551 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25550 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25549 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25548 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-25547 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 8.8% | 2022-03-10 | |
| CVE-2022-25546 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 12.3% | 2022-03-10 | |
| CVE-2022-25368 | Spectre BHB is a variant of Spectre-v2 in which malicious code uses the shared branch history (stored in the CPU BHB) to influence mispredicted branches in the victim's hardware context. Speculation caused by these mispredicted branches can then potentially be used to cause cache allocation, which c | 4.7v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-25325 | OMRON CX-Programmer use-after-free | 7.8v3.1 | 1.1% | 2022-03-10 | |
| CVE-2022-25294 | Proofpoint Insider Threat Management arbitrary code execution | 7.8v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-25244 | HashiCorp Vault tokenization key configuration endpoint information disclosure | 6.5v3.1 | 1.0% | 2022-03-10 | Fix |
| CVE-2022-25243 | HashiCorp Vault improper certificate validation | 6.5v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2022-25234 | OMRON CX-Programmer out-of-bounds write | 7.8v3.1 | 1.0% | 2022-03-10 | |
| CVE-2022-25230 | OMRON CX-Programmer use-after-free | 7.8v3.1 | 1.1% | 2022-03-10 | |
| CVE-2022-25225 | Network Olympus SQL injection | 7.2v3.1 | 3.0% | 2022-03-10 | Fix |
| CVE-2022-25219 | Phicomm routers telnetd_startup daemon vulnerability | 8.4NVD v3.1 | 0.8% | 2022-03-10 | |
| CVE-2022-25218 | Phicomm Routers weak cryptographic algorithm | 8.1NVD v3.1 | 1.0% | 2022-03-10 | |
| CVE-2022-25217 | Phicomm Routers hard-coded credentials | 7.8NVD v3.1 | 0.3% | 2022-03-10 | |
| CVE-2022-25215 | Phicomm Routers improper access control | 5.3NVD v3.1 | 1.1% | 2022-03-10 | |
| CVE-2022-25214 | Phicomm Routers improper access control | 7.4NVD v3.1 | 1.5% | 2022-03-10 | |
| CVE-2022-25213 | Phicomm Routers hard-coded credentials | 6.8NVD v3.1 | 0.4% | 2022-03-10 | |
| CVE-2022-25108 | Foxit PDF Reader null pointer dereference | 5.5v3.1 | 0.9% | 2022-03-10 | Fix |
| CVE-2022-25090 | Kofax Printix race condition | 8.1v3.1 | 11.0% | 2022-03-10 | Exploit code |
| CVE-2022-24995 | Tenda AX3 out-of-bounds write | 9.8v3.1 | 13.6% | 2022-03-10 | |
| CVE-2022-24960 | PDFTron SDK use-after-free | 7.8v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2022-24932 | Samsung Mobile Devices Setup wizard process unprotected alternate path | 4.2CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-24931 | Samsung Mobile Devices dynamic receiver in ApkInstaller improper access control | 7.9CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-24930 | Samsung Mobile Samsung Wearable Devices StRetailModeReceiver in Wear OS improper access control | 4.4CNA v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-24929 | Samsung Mobile Devices improper export of Android application components | 4.1CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-24928 | Samsung Mobile Devices RKP vulnerability | 5.9CNA v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-24915 | IPCOMM ipDIO web application configuration upload code injection | 8.8v3.1 | 1.0% | 2022-03-10 | |
| CVE-2022-24750 | Low privilege user is able to exploit the service and gain SYSTEM privileges in UltraVNC server | 8.8CNA v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-24726 | Unauthenticated control plane denial of service attack in Istio | 7.5CNA v3.1 | 1.6% | 2022-03-10 | Fix |
| CVE-2022-24652 | Sentcms unrestricted file upload | 9.8v3.1 | 2.7% | 2022-03-10 | |
| CVE-2022-24651 | Sentcms unrestricted file upload | 9.8v3.1 | 2.7% | 2022-03-10 | |
| CVE-2022-24644 | Zzinc Keymouse download without integrity check | 8.8v3.1 | 1.9% | 2022-03-10 | Exploit code |
| CVE-2022-24618 | Heimdalsecurity Heimdal Premium Security improper preservation of permissions | 7.8v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-24609 | Luocms incorrect authorization | 9.8v3.1 | 1.6% | 2022-03-10 | |
| CVE-2022-24608 | Luocms cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-10 | |
| CVE-2022-24607 | Luocms SQL injection | 9.8v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24606 | Luocms SQL injection | 9.8v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24605 | Luocms SQL injection | 9.8v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24604 | Luocms SQL injection | 9.8v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24603 | Luocms SQL injection | 9.8v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24602 | Luocms SQL injection | 9.8v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24601 | Luocms SQL injection | 7.5v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-24600 | Luocms SQL injection | 9.8v3.1 | 1.3% | 2022-03-10 | |
| CVE-2022-24432 | IPCOMM ipDIO web interface stored cross-site scripting | 5.4v3.1 | 0.7% | 2022-03-10 | |
| CVE-2022-24399 | SAP Focused Run (Real User Monitoring) cross-site scripting | 6.1v3.1 | 1.4% | 2022-03-10 | Fix |
| CVE-2022-24398 | SAP BusinessObjects Business Intelligence Platform information disclosure | 6.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2022-24397 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2022-24396 | SAP Focused Run (Simple Diagnostics Agent) missing authentication | 7.8v3.1 | 0.5% | 2022-03-10 | Fix |
| CVE-2022-24395 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2022-24286 | Acer Quickaccess improper authentication | 7.8v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-24285 | Acer Care Center improper authentication | 7.8v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-24193 | Command injection in CasaOS | 9.8v3.1 | 6.0% | 2022-03-10 | Fix |
| CVE-2022-24177 | Exlibrisgroup Aleph 500 cross-site scripting | 6.1v3.1 | 0.7% | 2022-03-10 | |
| CVE-2022-23940 | salesagility SuiteCRM deserialization of untrusted data | 8.8v3.1 | 53.2% | 2022-03-10 | Exploit codeFix |
| CVE-2022-23383 | YzmCMS improper authentication | 9.1v3.1 | 1.2% | 2022-03-10 | |
| CVE-2022-23042 | Xen race condition | 7.0v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-23041 | Xen race condition | 7.0v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-23040 | Xen race condition | 7.0v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-23039 | Xen race condition | 7.0v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-23038 | Xen race condition | 7.0v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-23037 | Xen race condition | 7.0v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-23036 | Xen race condition | 7.0v3.1 | 0.4% | 2022-03-10 | Fix |
| CVE-2022-22985 | IPCOMM ipDIO web application code injection | 8.8v3.1 | 1.0% | 2022-03-10 | |
| CVE-2022-22835 | Overit Geocall XML external entity injection | 6.5v3.1 | 14.5% | 2022-03-10 | Fix |
| CVE-2022-22834 | Overit Geocall XML injection | 8.8v3.1 | 3.5% | 2022-03-10 | Fix |
| CVE-2022-22814 | ASUS MyASUS privilege escalation | 9.8v3.1 | 2.3% | 2022-03-10 | Exploit codeFix |
| CVE-2022-22795 | Signiant Manager+agents XML external entity (XXE) | 9.1v3.1 | 1.1% | 2022-03-10 | |
| CVE-2022-22547 | SAP Simple Diagnostics Agent information disclosure | 7.5v3.1 | 2.5% | 2022-03-10 | Fix |
| CVE-2022-21219 | OMRON CX-Programmer out-of-bounds read | 7.8v3.1 | 1.0% | 2022-03-10 |