CVE-2022 records published in March 2022
Page two of two: records 1,001 to 1,318 of the 1,318 published in March 2022, newest first. The first page carries the figures for March 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-21170 | Digital Arts i-FILTER, i-FILTER Browser and Cloud MultiAgent improper certificate validation | 3.7v3.1 | 1.0% | 2022-03-10 | Fix |
| CVE-2022-21158 | MarkText stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-10 | Fix |
| CVE-2022-21146 | IPCOMM ipDIO web interface stored cross-site scripting | 6.1v3.1 | 0.9% | 2022-03-10 | |
| CVE-2022-21132 | pfSense-pkg-WireGuard path traversal | 6.5v3.1 | 1.8% | 2022-03-10 | Fix |
| CVE-2022-21124 | OMRON CX-Programmer out-of-bounds write | 7.8v3.1 | 1.5% | 2022-03-10 | |
| CVE-2022-20060 | MediaTek chipsets security flow issues in preloader (usb) | 6.6v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20059 | MediaTek chipsets out-of-bounds write in preloader (usb) | 6.6v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20058 | MediaTek chipsets out-of-bounds write in preloader (usb) | 6.6v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20057 | MediaTek chipsets detection of error condition without action in btif | 6.5v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20056 | MediaTek chipsets out-of-bounds write in preloader (usb) | 6.6v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20055 | MediaTek chipsets out-of-bounds write in preloader (usb) | 6.8v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20054 | MediaTek chipsets missing authorization in ims service | 7.8v3.1 | 0.2% | 2022-03-10 | Fix |
| CVE-2022-20053 | MediaTek chipsets missing authorization in ims service | 7.8v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20051 | MediaTek chipsets incorrect privilege assignment in ims service | 5.5v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20050 | MediaTek chipsets unix symbolic link (symlink) following in connsyslogger | 6.7v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20049 | MediaTek chipsets improper access control in vpu | 6.7v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20048 | MediaTek chipsets out-of-bounds write in video decoder | 7.8v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-20047 | MediaTek chipsets out-of-bounds write in video decoder | 7.8v3.1 | 0.1% | 2022-03-10 | Fix |
| CVE-2022-0906 | Unrestricted file upload leads to stored XSS in microweber/microweber | 4.8v3.1 | 0.6% | 2022-03-10 | Fix |
| CVE-2022-0905 | Missing authorization in go-gitea/Gitea | 7.1v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2022-0904 | Stack overflow in document extractor in Mattermost | 4.3CNA v3.1 | 0.9% | 2022-03-10 | Fix |
| CVE-2022-0903 | Stack overflow in SAML login in Mattermost | 5.3CNA v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2022-0895 | Static code injection in microweber/microweber | 9.8v3.1 | 1.7% | 2022-03-10 | Fix |
| CVE-2022-0891 | libtiff ExtractImageSection function in tiffcrop.c heap-based buffer overflow | 6.1CNA v3.1 | 1.5% | 2022-03-10 | Exploit codeFix |
| CVE-2022-0890 | Null pointer dereference in mruby/mruby | 5.5v3.1 | 0.8% | 2022-03-10 | Fix |
| CVE-2022-0865 | libtiff tiffcp reachable assertion | 5.5CNA v3.1 | 1.5% | 2022-03-10 | Fix |
| CVE-2022-0856 | libcaca divide by zero | 6.5NVD v3.1 | 2.8% | 2022-03-10 | Fix |
| CVE-2022-0847 | Linux Kernel privilege escalation | 7.8NVD v3.1 | 92.8% | 2022-03-10 | KEVExploit codeKCVFix |
| CVE-2022-0815 | McAfee WebAdvisor improper access control | 6.5CNA v3.1 | 1.0% | 2022-03-10 | |
| CVE-2022-0813 | PhpMyAdmin exposure of sensitive information | 7.5v3.1 | 1.3% | 2022-03-10 | Fix |
| CVE-2022-0725 | keepass information disclosure | 7.5NVD v3.1 | 2.5% | 2022-03-10 | Exploit code |
| CVE-2022-0618 | Swift Project SwiftNIO HTTP2 denial of service via HTTP/2 HEADERS frames padding | 7.5v3.1 | 1.3% | 2022-03-10 | Fix |
| CVE-2022-0516 | kernel information disclosure | 7.8NVD v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-0507 | Artica PFMS Pandora FMS vulnerability: Authenticated SQL injection in API | 8.8v3.1 | 1.2% | 2022-03-10 | Fix |
| CVE-2022-0433 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-0280 | McAfee Total Protection (MTP) file deletion | 7.5CNA v3.1 | 0.3% | 2022-03-10 | Fix |
| CVE-2022-0204 | BlueZ heap-based buffer overflow | 8.8NVD v3.1 | 1.8% | 2022-03-10 | Fix |
| CVE-2022-25943 | WPS Office incorrect default permissions | 7.8v3.1 | 0.7% | 2022-03-09 | Exploit codeFix |
| CVE-2022-24919 | Reflected XSS in graph configuration window of Zabbix Frontend | 3.7CNA v3.1 | 1.2% | 2022-03-09 | Fix |
| CVE-2022-24918 | Reflected XSS in item configuration window of Zabbix Frontend | 3.7CNA v3.1 | 1.2% | 2022-03-09 | Fix |
| CVE-2022-24917 | Reflected XSS in service configuration window of Zabbix Frontend | 3.7CNA v3.1 | 1.2% | 2022-03-09 | Fix |
| CVE-2022-24753 | Code injection in Stripe CLI on windows | 7.7CNA v3.1 | 0.3% | 2022-03-09 | Fix |
| CVE-2022-24748 | Shopware API route checks improper authentication | 6.8CNA v3.1 | 0.8% | 2022-03-09 | Fix |
| CVE-2022-24747 | shopware platform HTTP caching is marking private HTTP headers as public | 6.3CNA v3.1 | 1.1% | 2022-03-09 | Fix |
| CVE-2022-24746 | shopware platform HTML injection possibility in voucher code form | 6.1CNA v3.1 | 0.8% | 2022-03-09 | Fix |
| CVE-2022-24745 | Guest session is shared between customers in shopware | 4.8CNA v3.1 | 0.5% | 2022-03-09 | Fix |
| CVE-2022-24744 | Insufficient session expiration in shopware | 2.6CNA v3.1 | 0.5% | 2022-03-09 | Fix |
| CVE-2022-24741 | High memory usage in Nextcloud Server | 3.5CNA v3.1 | 1.6% | 2022-03-09 | Fix |
| CVE-2022-24734 | Remote code execution in mybb | 7.2CNA v3.1 | 77.8% | 2022-03-09 | MetasploitExploit codeFix |
| CVE-2022-24732 | Maddy Mail Server does not implement account expiry | 6.3CNA v3.1 | 0.4% | 2022-03-09 | Fix |
| CVE-2022-24526 | Microsoft Visual Studio Code spoofing | 6.1CNA v3.1 | 1.6% | 2022-03-09 | Fix |
| CVE-2022-24525 | Microsoft Windows Update Stack elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-03-09 | Fix |
| CVE-2022-24522 | Microsoft Skype Extension for Chrome information disclosure | 6.5CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-24520 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24519 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 2.8% | 2022-03-09 | Fix |
| CVE-2022-24518 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 2.8% | 2022-03-09 | Fix |
| CVE-2022-24517 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24515 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 2.8% | 2022-03-09 | Fix |
| CVE-2022-24512 | NET and Visual Studio remote code execution | 6.3CNA v3.1 | 1.6% | 2022-03-09 | Fix |
| CVE-2022-24511 | Microsoft Office Word tampering | 5.5CNA v3.1 | 1.1% | 2022-03-09 | Fix |
| CVE-2022-24510 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 3.0% | 2022-03-09 | Fix |
| CVE-2022-24509 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 3.0% | 2022-03-09 | Fix |
| CVE-2022-24508 | Microsoft Windows win32 file enumeration remote code execution | 8.8CNA v3.1 | 2.5% | 2022-03-09 | Fix |
| CVE-2022-24507 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.8CNA v3.1 | 3.9% | 2022-03-09 | Fix |
| CVE-2022-24506 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 2.8% | 2022-03-09 | Fix |
| CVE-2022-24505 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-03-09 | Fix |
| CVE-2022-24503 | Remote Desktop protocol client information disclosure | 5.4CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24502 | Microsoft Windows HTML Platforms security feature bypass | 4.3CNA v3.1 | 33.1% | 2022-03-09 | Fix |
| CVE-2022-24501 | Microsoft VP9 Video Extensions remote code execution | 7.8CNA v3.1 | 2.6% | 2022-03-09 | Fix |
| CVE-2022-24471 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24470 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24469 | Microsoft Azure Site Recovery elevation of privilege | 8.1CNA v3.1 | 2.8% | 2022-03-09 | Fix |
| CVE-2022-24468 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24467 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-24465 | Microsoft Intune Portal for iOS security feature bypass | 3.3CNA v3.1 | 0.7% | 2022-03-09 | Fix |
| CVE-2022-24464 | Microsoft .NET and Visual Studio denial of service | 7.5CNA v3.1 | 3.6% | 2022-03-09 | Fix |
| CVE-2022-24463 | Microsoft Exchange Server spoofing | 6.5CNA v3.1 | 31.8% | 2022-03-09 | Fix |
| CVE-2022-24462 | Microsoft Word security feature bypass | 5.5CNA v3.1 | 2.0% | 2022-03-09 | Fix |
| CVE-2022-24461 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 3.0% | 2022-03-09 | Fix |
| CVE-2022-24460 | Microsoft Tablet Windows User interface application elevation of privilege | 7.0CNA v3.1 | 2.0% | 2022-03-09 | Fix |
| CVE-2022-24459 | Microsoft Windows Fax and Scan service elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-24457 | Microsoft HEIF Image extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-24456 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-24455 | Microsoft Windows CD-ROM driver elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-03-09 | Fix |
| CVE-2022-24454 | Microsoft Windows Security Support Provider interface elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-24453 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-24452 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-24451 | Microsoft VP9 Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-24349 | Reflected XSS in action configuration window of Zabbix Frontend | 4.6CNA v3.1 | 1.2% | 2022-03-09 | Fix |
| CVE-2022-24323 | Schneider Electric EcoStruxure Process Expert improper check for exceptional conditions | 5.3CNA v3.1 | 0.9% | 2022-03-09 | Fix |
| CVE-2022-24322 | Schneider Electric EcoStruxure Control Expert memory corruption | 5.3CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-23301 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-23300 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-23299 | Microsoft Windows PDEV elevation of privilege | 7.8CNA v3.1 | 7.6% | 2022-03-09 | Fix |
| CVE-2022-23298 | Microsoft Windows NT OS Kernel elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-23297 | Microsoft Windows NT Lan Manager Datagram Receiver driver information disclosure | 5.5CNA v3.1 | 0.8% | 2022-03-09 | Fix |
| CVE-2022-23296 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-03-09 | Fix |
| CVE-2022-23295 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-23294 | Microsoft Windows Event Tracing remote code execution | 8.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-23293 | Microsoft Windows Fast FAT File System driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-03-09 | Fix |
| CVE-2022-23291 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-23290 | Microsoft Windows Inking COM elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-23288 | Microsoft Windows DWM Core library elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-23287 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-23286 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.0CNA v3.1 | 4.3% | 2022-03-09 | Fix |
| CVE-2022-23285 | Microsoft Windows remote Desktop client remote code execution | 8.8CNA v3.1 | 25.6% | 2022-03-09 | Fix |
| CVE-2022-23284 | Microsoft Windows Print Spooler elevation of privilege | 7.2CNA v3.1 | 3.2% | 2022-03-09 | Fix |
| CVE-2022-23283 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-03-09 | Fix |
| CVE-2022-23282 | Microsoft Paint 3D remote code execution | 7.8CNA v3.1 | 2.4% | 2022-03-09 | Fix |
| CVE-2022-23281 | Microsoft Windows Common Log File System driver information disclosure | 5.5CNA v3.1 | 1.1% | 2022-03-09 | Fix |
| CVE-2022-23278 | Microsoft Defender For Endpoint spoofing | 5.9CNA v3.1 | 1.9% | 2022-03-09 | Fix |
| CVE-2022-23277 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 41.1% | 2022-03-09 | MetasploitExploit codeFix |
| CVE-2022-23266 | Microsoft Defender for IoT elevation of privilege | 7.8CNA v3.1 | 1.1% | 2022-03-09 | Fix |
| CVE-2022-23265 | Microsoft Defender for IoT remote code execution | 7.2CNA v3.1 | 2.8% | 2022-03-09 | Fix |
| CVE-2022-23253 | Microsoft Windows Point-to-Point Tunneling protocol denial of service | 6.5CNA v3.1 | 56.4% | 2022-03-09 | Exploit codeFix |
| CVE-2022-22806 | Schneider Electric SmartConnect authentication bypass by replay | 9.8v3.1 | 12.3% | 2022-03-09 | Fix |
| CVE-2022-22805 | Schneider Electric SmartConnect buffer overflow | 9.8v3.1 | 11.7% | 2022-03-09 | Fix |
| CVE-2022-22511 | WAGO PLCs WBM vulnerable to reflected XSS | 5.4v3.1 | 0.6% | 2022-03-09 | Fix |
| CVE-2022-22010 | Microsoft Windows media Foundation information disclosure | 4.4CNA v3.1 | 2.6% | 2022-03-09 | Fix |
| CVE-2022-22007 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-22006 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.3% | 2022-03-09 | Fix |
| CVE-2022-21990 | Remote Desktop client remote code execution | 8.8CNA v3.1 | 18.8% | 2022-03-09 | Fix |
| CVE-2022-21977 | Microsoft Windows media Foundation information disclosure | 3.3CNA v3.1 | 2.5% | 2022-03-09 | Fix |
| CVE-2022-21975 | Microsoft Windows Hyper-V denial of service | 4.7CNA v3.1 | 0.5% | 2022-03-09 | Fix |
| CVE-2022-21973 | Microsoft Windows Media Center Update denial of service | 5.5CNA v3.1 | 0.7% | 2022-03-09 | Fix |
| CVE-2022-21967 | Microsoft Xbox Live Auth Manager for Windows elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-03-09 | Fix |
| CVE-2022-0896 | Improper neutralization of special elements used in a template engine in microweber/microweber | 8.8v3.1 | 1.4% | 2022-03-09 | Fix |
| CVE-2022-0881 | Insecure storage of sensitive information in chocobozzz/PeerTube | 6.5NVD v3.1 | 1.1% | 2022-03-09 | Fix |
| CVE-2022-0715 | Schneider Electric APC Smart-UPS improper authentication | 9.1v3.1 | 5.8% | 2022-03-09 | Fix |
| CVE-2022-0482 | Exposure of private personal information to an unauthorized actor in alextselegidis/easyappointments | 9.1v3.1 | 43.7% | 2022-03-09 | NucleiExploit codeFix |
| CVE-2022-0022 | Palo Alto Networks PAN-OS Usage of a weak cryptographic algorithm | 4.1CNA v3.1 | 0.1% | 2022-03-09 | Fix |
| CVE-2022-26337 | Trend Micro Password Manager uncontrolled search path | 7.8v3.1 | 0.7% | 2022-03-08 | Fix |
| CVE-2022-26319 | Trend Micro Portable Security uncontrolled search path | 6.5v3.1 | 0.3% | 2022-03-08 | Fix |
| CVE-2022-26317 | Siemens Mendix Applications using Mendix 7 insufficient randomness | 6.5v3.1 | 1.0% | 2022-03-08 | Fix |
| CVE-2022-26314 | Siemens Mendix Forgot Password Appstore module missing brute-force protection | 9.8v3.1 | 1.5% | 2022-03-08 | Fix |
| CVE-2022-26313 | Siemens Mendix Forgot Password Appstore module improper access control | 9.8v3.1 | 1.0% | 2022-03-08 | Fix |
| CVE-2022-25311 | Siemens SINEC NMS improper privilege management | 7.3CNA v3.1 | 0.5% | 2022-03-08 | Fix |
| CVE-2022-24739 | Server-side request forgery (SSRF) and URL redirection to untrusted site (open redirect) in alltube | 7.3CNA v3.1 | 0.9% | 2022-03-08 | Fix |
| CVE-2022-24716 | Path traversal in Icinga Web 2 | 7.5CNA v3.1 | 89.4% | 2022-03-08 | NucleiMetasploitExploit codeFix |
| CVE-2022-24715 | Arbitrary code execution for authenticated users in Icinga Web 2 | 8.5CNA v3.1 | 14.7% | 2022-03-08 | Exploit codeFix |
| CVE-2022-24714 | Disclosure of hosts and related data, linked to decommissioned services in Icinga Web 2 | 5.3CNA v3.1 | 1.2% | 2022-03-08 | Fix |
| CVE-2022-24713 | Regular expression denial of service in Rust's regex crate | 7.5CNA v3.1 | 14.5% | 2022-03-08 | Fix |
| CVE-2022-24661 | Siemens Simcenter STAR-CCM+ Viewer memory corruption | 7.8v3.1 | 0.8% | 2022-03-08 | Fix |
| CVE-2022-24408 | Siemens SINUMERIK MC improper privilege management | 7.8v3.1 | 0.2% | 2022-03-08 | Fix |
| CVE-2022-24309 | Siemens Mendix Runtime V7 improper access control | 6.8CNA v3.1 | 0.6% | 2022-03-08 | Fix |
| CVE-2022-24282 | Siemens SINEC NMS deserialization of untrusted data | 7.2CNA v3.1 | 1.4% | 2022-03-08 | Fix |
| CVE-2022-24281 | Siemens SINEC NMS SQL injection | 7.2CNA v3.1 | 3.5% | 2022-03-08 | Fix |
| CVE-2022-0877 | Cross-site scripting (XSS) Stored in bookstackapp/BookStack | 5.4NVD v3.1 | 0.8% | 2022-03-08 | Fix |
| CVE-2022-26488 | Python untrusted search path | 7.0NVD v3.1 | 1.5% | 2022-03-07 | Exploit codeFix |
| CVE-2022-24738 | Tharsis Evmos improper authentication | 8.1CNA v3.1 | 1.1% | 2022-03-07 | Fix |
| CVE-2022-24737 | Exposure of sensitive information to an unauthorized actor in httpie | 6.5CNA v3.1 | 1.7% | 2022-03-07 | Fix |
| CVE-2022-22351 | IBM AIX denial of service | 6.1CNA v3.0 | 1.2% | 2022-03-07 | Fix |
| CVE-2022-0767 | Server-side request forgery (SSRF) in janeczku/Calibre-Web | 9.9v3.1 | 1.0% | 2022-03-07 | Fix |
| CVE-2022-0766 | Server-side request forgery (SSRF) in janeczku/Calibre-Web | 9.8v3.1 | 1.3% | 2022-03-07 | Fix |
| CVE-2022-0756 | Missing authorization in salesagility/SuiteCRM | 6.5v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2022-0755 | Missing authorization in salesagility/SuiteCRM | 4.3NVD v3.1 | 0.7% | 2022-03-07 | Fix |
| CVE-2022-0754 | SQL injection in salesagility/SuiteCRM | 6.5NVD v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2022-0535 | E2Pdf WordPress plugin Admin+ stored cross-site scripting (XSS) | 4.8NVD v3.1 | 1.3% | 2022-03-07 | NucleiFix |
| CVE-2022-0533 | Ditty (formerly Ditty News Ticker) WordPress plugin reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 1.8% | 2022-03-07 | NucleiFix |
| CVE-2022-0448 | CP Blocks WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 5.7% | 2022-03-07 | Exploit codeFix |
| CVE-2022-0445 | WordPress Real Cookie Banner plugin settings reset via CSRF | 6.5NVD v3.1 | 0.5% | 2022-03-07 | Fix |
| CVE-2022-0442 | UsersWP WordPress plugin Subscriber+ user Avatar Override | 4.3NVD v3.1 | 0.7% | 2022-03-07 | Fix |
| CVE-2022-0441 | MasterStudy LMS WordPress plugin unauthenticated admin account creation | 9.8NVD v3.1 | 85.3% | 2022-03-07 | NucleiMetasploitExploit codeFix |
| CVE-2022-0440 | Catch Themes Demo Import WordPress plugin Admin+ remote code execution | 7.2NVD v3.1 | 1.4% | 2022-03-07 | Fix |
| CVE-2022-0439 | Email Subscribers and Newsletters WordPress plugin Subscriber+ blind SQL injection | 8.8NVD v3.1 | 4.2% | 2022-03-07 | NucleiExploit codeFix |
| CVE-2022-0434 | Page Views Count WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 14.8% | 2022-03-07 | NucleiFix |
| CVE-2022-0429 | Cerber Security Activity tab stored cross-site scripting | 6.1NVD v3.1 | 1.2% | 2022-03-07 | NucleiFix |
| CVE-2022-0426 | Product Feed PRO for WooCommerce WordPress plugin reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2022-0422 | White Label MS WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 8.1% | 2022-03-07 | NucleiFix |
| CVE-2022-0420 | RegistrationMagic WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.5% | 2022-03-07 | Fix |
| CVE-2022-0410 | WP Visitor Statistics (Real Time Traffic) WordPress plugin Subscriber+ SQL injection | 8.8NVD v3.1 | 1.3% | 2022-03-07 | Fix |
| CVE-2022-0389 | WP Time Slots Booking Form WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2022-0384 | Video Conferencing with Zoom WordPress plugin E-mail Address disclosure | 4.3NVD v3.1 | 1.0% | 2022-03-07 | Fix |
| CVE-2022-0349 | NotificationX WordPress plugin unauthenticated blind SQL injection | 9.8NVD v3.1 | 34.4% | 2022-03-07 | NucleiFix |
| CVE-2022-0347 | LoginPress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-03-07 | Fix |
| CVE-2022-0267 | AdRotate WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-03-07 | Fix |
| CVE-2022-0205 | YOP Poll WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-03-07 | Fix |
| CVE-2022-0163 | Smart Forms WordPress plugin Subscriber+ form data download | 6.5NVD v3.1 | 1.0% | 2022-03-07 | Fix |
| CVE-2022-26505 | Readymedia authentication bypass by spoofing | 7.4v3.1 | 1.6% | 2022-03-06 | Fix |
| CVE-2022-26496 | Network Block Device out-of-bounds write | 9.8v3.1 | 3.6% | 2022-03-06 | Fix |
| CVE-2022-26495 | Network Block Device integer overflow | 9.8v3.1 | 2.8% | 2022-03-06 | Fix |
| CVE-2022-26490 | Linux kernel buffer overflow | 7.8v3.1 | 0.4% | 2022-03-06 | Fix |
| CVE-2022-0869 | Multiple open redirect in nitely/Spirit | 6.1v3.1 | 2.6% | 2022-03-06 | NucleiFix |
| CVE-2022-0868 | Open redirect in medialize/uri.js | 6.1NVD v3.1 | 0.7% | 2022-03-06 | Fix |
| CVE-2022-0697 | Open redirect in Archivy/Archivy | 6.1v3.1 | 0.6% | 2022-03-06 | Fix |
| CVE-2022-25465 | Espruino out-of-bounds write | 7.8v3.1 | 0.7% | 2022-03-05 | |
| CVE-2022-25312 | Improper restriction of XML external entity reference in ANY23 | 9.1v3.1 | 2.9% | 2022-03-05 | Fix |
| CVE-2022-25069 | MarkText cross-site scripting | 9.6v3.1 | 2.0% | 2022-03-05 | |
| CVE-2022-25044 | Espruino out-of-bounds write | 7.8v3.1 | 0.9% | 2022-03-05 | |
| CVE-2022-24921 | Go uncontrolled recursion | 7.5v3.1 | 3.3% | 2022-03-05 | Fix |
| CVE-2022-0849 | radareorg/radare2 r_reg_get_name_idx in GitHub repository use-after-free | 5.5NVD v3.1 | 0.7% | 2022-03-05 | Fix |
| CVE-2022-0845 | Code injection in pytorchlightning/pytorch-lightning | 9.8v3.1 | 1.0% | 2022-03-05 | Fix |
| CVE-2022-26484 | Veritas Infoscale Operations Manager path traversal | 4.9v3.1 | 2.7% | 2022-03-04 | Fix |
| CVE-2022-26483 | Veritas Infoscale Operations Manager cross-site scripting | 4.8v3.1 | 0.4% | 2022-03-04 | Fix |
| CVE-2022-26336 | Apache poi-scratchpad A carefully crafted TNEF file can cause an out of memory exception | 5.5v3.1 | 1.5% | 2022-03-04 | Fix |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances arbitrary code execution | 9.8v3.1 | 78.2% | 2022-03-04 | KEVMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-26201 | Victor Cms SQL injection | 9.8v3.1 | 1.5% | 2022-03-04 | |
| CVE-2022-25623 | Symantec Management Agent privilege escalation | 7.8NVD v3.1 | 0.3% | 2022-03-04 | Fix |
| CVE-2022-25106 | D-Link DIR-859 out-of-bounds write | 5.5v3.1 | 8.6% | 2022-03-04 | Fix |
| CVE-2022-23915 | Weblate remote code execution (RCE) | 8.8v3.1 | 3.8% | 2022-03-04 | Fix |
| CVE-2022-23729 | LG mobile devices authentication bypass | 7.8v3.1 | 0.1% | 2022-03-04 | Fix |
| CVE-2022-23397 | Cedargate Ez-net Portal cross-site scripting | 6.1v3.1 | 1.0% | 2022-03-04 | Nuclei |
| CVE-2022-23328 | Denial of service in Go-Ethereum | 7.5v3.1 | 1.4% | 2022-03-04 | |
| CVE-2022-23327 | Denial of service in Go-Ethereum | 7.5v3.1 | 1.4% | 2022-03-04 | |
| CVE-2022-23233 | StorageGRID denial of service | 7.5v3.1 | 0.9% | 2022-03-04 | Fix |
| CVE-2022-23232 | NetApp StorageGRID external user account synchronization vulnerability | 4.9v3.1 | 0.8% | 2022-03-04 | Fix |
| CVE-2022-22946 | Spring Cloud Gateway improper certificate validation | 5.5v3.1 | 4.8% | 2022-03-04 | Fix |
| CVE-2022-21828 | Ivanti Incapptic Connect deserialization of untrusted data | 7.2v3.1 | 4.0% | 2022-03-04 | |
| CVE-2022-0855 | Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin | 6.1NVD v3.1 | 1.0% | 2022-03-04 | Fix |
| CVE-2022-0848 | OS command injection in Part-DB/Part-DB | 9.8v3.1 | 35.4% | 2022-03-04 | Exploit codeFix |
| CVE-2022-0839 | Improper restriction of XML external entity reference in Liquibase/Liquibase | 9.8v3.1 | 3.0% | 2022-03-04 | Fix |
| CVE-2022-0838 | Cross-site scripting (XSS) Reflected in hestiacp/hestiacp | 6.1v3.1 | 1.1% | 2022-03-04 | Fix |
| CVE-2022-0832 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 66.6% | 2022-03-04 | Fix |
| CVE-2022-0831 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 1.3% | 2022-03-04 | Fix |
| CVE-2022-0752 | Cross-site scripting (XSS) Generic in hestiacp/hestiacp | 6.1v3.1 | 1.0% | 2022-03-04 | Fix |
| CVE-2022-26129 | FRRouting buffer overflow | 7.8NVD v3.1 | 1.0% | 2022-03-03 | Fix |
| CVE-2022-26128 | FRRouting A buffer overflow | 7.8NVD v3.1 | 1.0% | 2022-03-03 | Fix |
| CVE-2022-26127 | FRRouting A buffer overflow | 7.8NVD v3.1 | 1.0% | 2022-03-03 | Fix |
| CVE-2022-26126 | FRRouting buffer overflow | 7.8NVD v3.1 | 1.1% | 2022-03-03 | Fix |
| CVE-2022-26125 | FRRouting buffer overflow | 7.8NVD v3.1 | 1.0% | 2022-03-03 | Fix |
| CVE-2022-25471 | openemr An insecure direct object reference | 8.1v3.1 | 0.8% | 2022-03-03 | |
| CVE-2022-25220 | PeTeReport cross-site scripting | 4.8v3.1 | 0.6% | 2022-03-03 | |
| CVE-2022-25146 | Liferay Portal and Liferay DXP fails to check origin of event messages | 5.3v3.1 | 0.5% | 2022-03-03 | Fix |
| CVE-2022-25138 | axelor Open Suite cross-site scripting | 5.4v3.1 | 0.6% | 2022-03-03 | |
| CVE-2022-25125 | Mingsoft MCMS SQL injection | 9.8v3.1 | 7.0% | 2022-03-03 | Nuclei |
| CVE-2022-25089 | Kofax Printix improper privilege management | 9.8v3.1 | 18.2% | 2022-03-03 | Exploit code |
| CVE-2022-25031 | Rdpsoft Remote Desktop Commander Suite Agent unquoted search path | 7.8v3.1 | 0.3% | 2022-03-03 | Fix |
| CVE-2022-24725 | Exposure of home directory through shescape on Unix with Bash | 6.2CNA v3.1 | 0.5% | 2022-03-03 | Fix |
| CVE-2022-24724 | GitHub cmark-gfm integer overflow in table parsing extension leads to heap memory corruption | 8.8CNA v3.1 | 4.5% | 2022-03-03 | Fix |
| CVE-2022-24723 | Improper input validation in URI.js | 5.3CNA v3.1 | 1.9% | 2022-03-03 | Fix |
| CVE-2022-24573 | Element-it HTTP Commander admin interface stored cross-site scripting | 6.1v3.1 | 0.6% | 2022-03-03 | Fix |
| CVE-2022-24563 | Cross-site scripting in GeniXCMS | 5.4v3.1 | 0.9% | 2022-03-03 | |
| CVE-2022-23899 | Mingsoft MCMS SQL injection in net.Mingsoft:ms-mcms | 9.8v3.1 | 1.1% | 2022-03-03 | |
| CVE-2022-23898 | Mingsoft MCMS SQL injection in net.Mingsoft:ms-mcms | 9.8v3.1 | 7.7% | 2022-03-03 | Nuclei |
| CVE-2022-23849 | Devolutions Password Hub authentication bypass | 6.6v3.1 | 0.3% | 2022-03-03 | Fix |
| CVE-2022-23710 | Elastic Kibana cross-site scripting | 6.1v3.1 | 0.8% | 2022-03-03 | Fix |
| CVE-2022-23709 | Elastic Kibana access control weakness | 4.3v3.1 | 0.6% | 2022-03-03 | Fix |
| CVE-2022-23708 | Elasticsearch privilege escalation | 4.3v3.1 | 0.9% | 2022-03-03 | Fix |
| CVE-2022-23648 | Insecure handling of image volumes in containerd CRI plugin | 7.5CNA v3.1 | 27.4% | 2022-03-03 | Exploit codeFix |
| CVE-2022-23052 | PeTeReport cross-site request forgery | 6.5v3.1 | 0.4% | 2022-03-03 | |
| CVE-2022-23051 | PeTeReport cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-03 | |
| CVE-2022-22947 | VMware Spring Cloud Gateway code injection | 10.0NVD v3.1 | 98.3% | 2022-03-03 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-22943 | VMware Tools uncontrolled search path | 6.7v3.1 | 1.3% | 2022-03-03 | Fix |
| CVE-2022-22909 | digitaldruid HotelDruid code injection | 8.8v3.1 | 45.4% | 2022-03-03 | Exploit codeFix |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver vulnerability | 7.8v3.1 | 1.1% | 2022-03-03 | KEVFix |
| CVE-2022-22700 | CyberArk Identity insufficient randomness | 5.3v3.1 | 1.1% | 2022-03-03 | Fix |
| CVE-2022-21716 | Buffer overflow in Twisted | 7.5CNA v3.1 | 3.5% | 2022-03-03 | Fix |
| CVE-2022-0841 | OS command injection in ljharb/Npm-lockfile | 9.8v3.1 | 2.5% | 2022-03-03 | Fix |
| CVE-2022-0753 | Cross-site scripting (XSS) Reflected in hestiacp/hestiacp | 6.1v3.1 | 0.8% | 2022-03-03 | Fix |
| CVE-2022-0730 | Cati improper authentication | 9.8NVD v3.1 | 3.5% | 2022-03-03 | Fix |
| CVE-2022-0528 | Server-side request forgery (SSRF) in transloadit/uppy | 7.5v3.1 | 1.0% | 2022-03-03 | Fix |
| CVE-2022-0492 | Linux Kernel improper authentication | 7.8NVD v3.1 | 5.5% | 2022-03-03 | KEVExploit codeFix |
| CVE-2022-0265 | Improper restriction of XML external entity reference in hazelcast/hazelcast | 9.8v3.1 | 2.8% | 2022-03-03 | Exploit codeFix |
| CVE-2022-26171 | Bank Management System SQL injection | 9.8v3.1 | 1.3% | 2022-03-02 | |
| CVE-2022-26170 | Simple Mobile Comparison Website SQL injection | 9.8v3.1 | 1.3% | 2022-03-02 | |
| CVE-2022-26169 | Air Cargo Management System SQL injection | 9.8v3.1 | 1.3% | 2022-03-02 | |
| CVE-2022-25634 | Qt path traversal | 7.5v3.1 | 2.0% | 2022-03-02 | Fix |
| CVE-2022-25399 | Simple Real Estate Portal System SQL injection | 9.8v3.1 | 1.2% | 2022-03-02 | |
| CVE-2022-25398 | Auto Spare Parts Management SQL injection | 9.8v3.1 | 1.2% | 2022-03-02 | |
| CVE-2022-25396 | Cosmetics And Beauty Product Online Store SQL injection | 9.8v3.1 | 1.2% | 2022-03-02 | |
| CVE-2022-25395 | Cosmetics And Beauty Product Online Store cross-site scripting | 9.6v3.1 | 1.0% | 2022-03-02 | |
| CVE-2022-25394 | Medical Store Management System SQL injection | 9.8v3.1 | 1.5% | 2022-03-02 | |
| CVE-2022-25393 | Simple Bakery Shop Management SQL injection | 7.5v3.1 | 1.2% | 2022-03-02 | |
| CVE-2022-25115 | Home Owners Collection Management System remote code execution | 7.8v3.1 | 1.6% | 2022-03-02 | |
| CVE-2022-25114 | Event Management cross-site scripting | 6.1v3.1 | 0.8% | 2022-03-02 | |
| CVE-2022-25051 | rtl_433 cmr113_decode off-by-one error | 5.5v3.1 | 0.8% | 2022-03-02 | Fix |
| CVE-2022-25050 | Rtl 433 Project Rlt 433 out-of-bounds write | 5.5v3.1 | 0.8% | 2022-03-02 | Fix |
| CVE-2022-25045 | Home Owners Collection Management System hard-coded credentials | 9.8v3.1 | 1.3% | 2022-03-02 | |
| CVE-2022-25016 | Home Owners Collection Management System unrestricted file upload | 9.8v3.1 | 2.0% | 2022-03-02 | |
| CVE-2022-24722 | Cross-site scripting in view_component | 8.1CNA v3.1 | 1.1% | 2022-03-02 | Fix |
| CVE-2022-24447 | Zoho ManageEngine Key Manager Plus certificate export vulnerability | 6.5v3.1 | 0.8% | 2022-03-02 | Fix |
| CVE-2022-24306 | Zoho Manageengine Sharepoint Manager Plus incorrect authorization | 9.8v3.1 | 2.4% | 2022-03-02 | Fix |
| CVE-2022-24305 | Zoho Manageengine Sharepoint Manager Plus information disclosure | 9.8v3.1 | 2.6% | 2022-03-02 | Fix |
| CVE-2022-23958 | HP ProBook 440 G8 Notebook PC denial of service | 5.5NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-23957 | HP ProBook 440 G8 Notebook PC denial of service | 5.5NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-23956 | HP ProBook 440 G8 Notebook PC denial of service | 5.5NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-23955 | HP ProBook 440 G8 Notebook PC denial of service | 5.5NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-23954 | HP ProBook 440 G8 Notebook PC denial of service | 5.5NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-23953 | HP ProBook 440 G8 Notebook PC denial of service | 5.5NVD v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-23878 | Seacms arbitrary code execution | 9.8v3.1 | 2.2% | 2022-03-02 | |
| CVE-2022-23779 | Zoho Manageengine Desktop Central information disclosure | 5.3NVD v3.1 | 13.2% | 2022-03-02 | NucleiExploit codeFix |
| CVE-2022-23656 | Cross-site scripting vulnerability in Zulip Server | 4.6CNA v3.1 | 0.6% | 2022-03-02 | Fix |
| CVE-2022-23640 | Improper restriction of XML external entity reference in Excel-Streaming-Reader | 9.8CNA v3.1 | 1.3% | 2022-03-02 | Fix |
| CVE-2022-23395 | Prototype pollution in Jquery.cookie | 6.1v3.1 | 1.1% | 2022-03-02 | Fix |
| CVE-2022-22944 | VMware Workspace ONE Boxer cross-site scripting | 5.4v3.1 | 0.5% | 2022-03-02 | Fix |
| CVE-2022-22350 | IBM AIX denial of service | 6.2CNA v3.0 | 0.2% | 2022-03-02 | Fix |
| CVE-2022-22303 | Fortinet FortiManager system information disclosure | 2.8CNA v3.1 | 0.2% | 2022-03-02 | Fix |
| CVE-2022-22301 | Fortinet FortiAP-C OS command injection | 7.8CNA v3.1 | 0.3% | 2022-03-02 | Fix |
| CVE-2022-0829 | Improper authorization in Webmin/Webmin | 8.1v3.1 | 1.3% | 2022-03-02 | Fix |
| CVE-2022-0824 | Improper access control to remote code execution in Webmin/Webmin | 8.8v3.1 | 97.0% | 2022-03-02 | NucleiMetasploitExploit codeFix |
| CVE-2022-0819 | Code injection in Dolibarr/Dolibarr | 8.8v3.1 | 42.7% | 2022-03-02 | Fix |
| CVE-2022-0711 | haproxy infinite loop | 7.5NVD v3.1 | 16.6% | 2022-03-02 | Fix |
| CVE-2022-0675 | Puppet Firewall Module may Leave Unmanaged Rules | 9.8v3.1 | 0.9% | 2022-03-02 | Fix |
| CVE-2022-0577 | Exposure of sensitive information to an unauthorized actor in scrapy/scrapy | 6.5NVD v3.1 | 1.3% | 2022-03-02 | Fix |
| CVE-2022-26332 | Cross-site scripting in Cipi | 5.4v3.1 | 0.7% | 2022-03-01 | Fix |
| CVE-2022-25022 | HTMLy A cross-site scripting | 5.4NVD v3.1 | 1.1% | 2022-03-01 | |
| CVE-2022-25020 | PluXml A cross-site scripting | 5.4v3.1 | 1.2% | 2022-03-01 | Exploit code |
| CVE-2022-25018 | PluXml code injection | 8.8v3.1 | 2.7% | 2022-03-01 | Exploit code |
| CVE-2022-25012 | Argussurveillance DVR inadequate encryption strength | 5.5v3.1 | 0.3% | 2022-03-01 | Exploit code |
| CVE-2022-25010 | Stepmania incorrect permission assignment | 9.1v3.1 | 1.0% | 2022-03-01 | |
| CVE-2022-24720 | Improper input validation in image_processing | 9.8CNA v3.1 | 2.7% | 2022-03-01 | Fix |
| CVE-2022-24719 | Unauthorized forwarding of confidential headers in fluture-node | 2.6CNA v3.1 | 0.8% | 2022-03-01 | Fix |
| CVE-2022-24718 | Path traversal in ssr-pages | 7.6CNA v3.1 | 1.1% | 2022-03-01 | Fix |
| CVE-2022-24717 | Cross-site scripting (XSS) in ssr-pages | 6.1CNA v3.1 | 0.9% | 2022-03-01 | Fix |
| CVE-2022-24446 | An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if no SSH server or user is associated to the operator. | 4.3v3.1 | 0.9% | 2022-03-01 | Fix |
| CVE-2022-24255 | Extensis Portfolio hard-coded credentials | 8.8v3.1 | 1.4% | 2022-03-01 | |
| CVE-2022-24254 | Extensis Portfolio Backup/Restore Archive component arbitrary file upload | 8.8v3.1 | 2.6% | 2022-03-01 | |
| CVE-2022-24253 | Extensis Portfolio unrestricted file upload | 8.8v3.1 | 1.3% | 2022-03-01 | |
| CVE-2022-24252 | Extensis Portfolio FileTransferServlet component arbitrary file upload | 8.8v3.1 | 2.3% | 2022-03-01 | Emerging Threats |
| CVE-2022-24251 | Extensis Portfolio unrestricted file upload | 8.8v3.1 | 1.3% | 2022-03-01 | |
| CVE-2022-23387 | taoCMS SQL injection | 7.5v3.1 | 1.2% | 2022-03-01 | |
| CVE-2022-23380 | Taogogo taoCMS background SQL injection | 8.8v3.1 | 1.0% | 2022-03-01 | |
| CVE-2022-23377 | Keep Archeevo files accessible to external parties | 7.5v3.1 | 2.2% | 2022-03-01 | |
| CVE-2022-22321 | IBM MQ Appliance inadequate encryption strength | 5.1CNA v3.0 | 0.2% | 2022-03-01 | Fix |
| CVE-2022-22300 | Fortinet FortiManager, FortiAnalyzer improper handling of insufficient permissions | 4.3CNA v3.1 | 0.9% | 2022-03-01 | Fix |
| CVE-2022-22262 | ASUS Armoury Crate and Aura Creator Installer ROG Live Service temp file deletion link following | 7.7v3.1 | 0.3% | 2022-03-01 | Fix |
| CVE-2022-0777 | Weak password recovery mechanism for forgotten password in microweber/microweber | 7.5v3.1 | 1.2% | 2022-03-01 | Fix |
| CVE-2022-0776 | Cross-site scripting (XSS) DOM in hakimel/reveal.js | 6.1v3.1 | 3.7% | 2022-03-01 | NucleiFix |