CVE-2022 records published in April 2022
This page lists the 1,543 CVE-2022 records published in April 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 16 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 24015.6% of these records
- Listed in CISA KEV
- 161.0% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 664.3% of these records
- Exploit code
- 664.3% of these records
- Actionable vendor fix
- 1,21578.7% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in April 2022 have had from about 54 months to about 55 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-29265 | Apache NiFi improper Restriction of XML external entity References in multiple components | 7.5v3.1 | 2.6% | 2022-04-30 | Fix |
| CVE-2022-28323 | MediaWiki SecurePoll extension vulnerability | 7.5v3.1 | 1.3% | 2022-04-30 | Fix |
| CVE-2022-29967 | Glewlwyd path traversal | 7.5v3.1 | 1.6% | 2022-04-29 | Fix |
| CVE-2022-29947 | Woodpecker allows cross-site scripting (XSS) via build logs | 6.1v3.1 | 0.7% | 2022-04-29 | Fix |
| CVE-2022-29945 | DJI Air 2 cleartext transmission of sensitive information | 7.5v3.1 | 0.7% | 2022-04-29 | |
| CVE-2022-29937 | Usu Oracle Optimization OS command injection | 8.8v3.1 | 1.5% | 2022-04-29 | |
| CVE-2022-29936 | Usu Oracle Optimization deserialization of untrusted data | 8.8v3.1 | 2.1% | 2022-04-29 | |
| CVE-2022-29935 | USU Oracle Optimization agent installer vulnerability | 7.5v3.1 | 1.1% | 2022-04-29 | |
| CVE-2022-29934 | Usu Oracle Optimization missing authentication | 7.8v3.1 | 0.3% | 2022-04-29 | |
| CVE-2022-29907 | mediawiki cross-site scripting | 6.1v3.1 | 0.7% | 2022-04-29 | Fix |
| CVE-2022-29906 | mediawiki missing authorization | 9.8v3.1 | 1.3% | 2022-04-29 | Fix |
| CVE-2022-29905 | mediawiki cross-site request forgery | 4.3v3.1 | 0.4% | 2022-04-29 | Fix |
| CVE-2022-29904 | mediawiki SQL injection | 9.8v3.1 | 16.3% | 2022-04-29 | Fix |
| CVE-2022-29903 | mediawiki cross-site request forgery | 4.3v3.1 | 0.3% | 2022-04-29 | Fix |
| CVE-2022-29856 | Automationanywhere Automation 360 hard-coded cryptographic key | 7.5v3.1 | 1.5% | 2022-04-29 | Exploit codeFix |
| CVE-2022-29451 | raratheme Rara One Click Demo Import (WordPress plugin) cross-site request forgery | 8.8v3.1 | 0.6% | 2022-04-29 | Fix |
| CVE-2022-29414 | Subscribe To Comments Reloaded WordPress plugin Multiple cross-site request forgery (CSRF) | 5.4v3.1 | 0.4% | 2022-04-29 | Fix |
| CVE-2022-28994 | Smallsrv Small HTTP Server buffer overflow | 9.8v3.1 | 2.2% | 2022-04-29 | |
| CVE-2022-28480 | Allmediaserver buffer overflow | 9.8v3.1 | 1.7% | 2022-04-29 | |
| CVE-2022-28452 | Redplanetcomputers Laundry Management System SQL injection | 9.8v3.1 | 17.3% | 2022-04-29 | Exploit codeFix |
| CVE-2022-28198 | NVIDIA Omniverse Nucleus incorrectly resolved name or reference | 6.6CNA v3.1 | 0.3% | 2022-04-29 | Fix |
| CVE-2022-25854 | @yaireo/tagify cross-site scripting (XSS) | 5.4v3.1 | 1.0% | 2022-04-29 | Fix |
| CVE-2022-24900 | Absolute path traversal due to incorrect use of `send_file` call in Piano LED Visualizer | 9.9CNA v3.1 | 8.4% | 2022-04-29 | Nuclei |
| CVE-2022-1543 | Improper handling of Length parameter in Erudika/scoold | 8.8NVD v3.1 | 1.1% | 2022-04-29 | Fix |
| CVE-2022-1536 | Automad Dashboard cross-site scripting | 5.4v3.1 | 0.7% | 2022-04-29 | |
| CVE-2022-1534 | Buffer over-read at parse_rawml.c:1416 in bfabiszewski/Libmobi | 7.1v3.1 | 0.3% | 2022-04-29 | Fix |
| CVE-2022-1533 | Buffer over-read in bfabiszewski/Libmobi | 7.8v3.1 | 0.4% | 2022-04-29 | Fix |
| CVE-2022-1531 | SQL injection vulnerability in ARAX-UI Synonym Lookup functionality in rtxteam/Rtx | 9.8v3.1 | 3.6% | 2022-04-29 | Fix |
| CVE-2022-1530 | Cross-site scripting (XSS) in livehelperchat/livehelperchat | 6.1v3.1 | 0.6% | 2022-04-29 | Fix |
| CVE-2022-1526 | Emlog Pro POST parameter cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-29 | |
| CVE-2022-1403 | Delta Electronics ASDA-Soft out-of-bounds write | 7.8v3.1 | 0.8% | 2022-04-29 | Fix |
| CVE-2022-1402 | Delta Electronics ASDA-Soft out-of-bounds read | 7.1v3.1 | 0.8% | 2022-04-29 | Fix |
| CVE-2022-1353 | Linux kernel PF_KEY socket handler information disclosure | 7.1NVD v3.1 | 0.4% | 2022-04-29 | Fix |
| CVE-2022-1249 | pesign A null pointer dereference | 3.3NVD v3.1 | 0.2% | 2022-04-29 | |
| CVE-2022-1227 | Podman publishes a malicious image to public registries | 8.8NVD v3.1 | 4.2% | 2022-04-29 | Exploit codeFix |
| CVE-2022-1195 | kernel race condition | 5.5NVD v3.1 | 0.2% | 2022-04-29 | Fix |
| CVE-2022-1114 | ImageMagick heap- use-after-free | 7.1NVD v3.1 | 1.2% | 2022-04-29 | Fix |
| CVE-2022-1048 | Linux kernel A use-after-free | 7.0NVD v3.1 | 0.2% | 2022-04-29 | Fix |
| CVE-2022-1015 | kernel out-of-bounds write | 6.6NVD v3.1 | 1.5% | 2022-04-29 | Exploit codeFix |
| CVE-2022-0985 | Improper authentication in Moodle | 4.3NVD v3.1 | 0.6% | 2022-04-29 | Fix |
| CVE-2022-0984 | Missing authorization in Moodle | 4.3NVD v3.1 | 0.6% | 2022-04-29 | Fix |
| CVE-2022-29869 | Samba cifs-utils sensitive information in log files | 5.3v3.1 | 1.9% | 2022-04-28 | Fix |
| CVE-2022-29821 | JetBrains Rider code injection | 6.9CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29820 | JetBrains PyCharm debugger vulnerability | 3.0CNA v3.1 | 0.4% | 2022-04-28 | Fix |
| CVE-2022-29819 | JetBrains IntelliJ IDEA code injection | 6.9CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29818 | JetBrains IntelliJ IDEA origin validation error | 3.9CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29817 | JetBrains IntelliJ IDEA cross-site scripting | 3.9CNA v3.1 | 0.4% | 2022-04-28 | Fix |
| CVE-2022-29816 | JetBrains IntelliJ IDEA HTML injection | 2.8CNA v3.1 | 0.3% | 2022-04-28 | Fix |
| CVE-2022-29815 | JetBrains IntelliJ IDEA code injection | 6.9CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29814 | JetBrains IntelliJ IDEA code injection | 6.9CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29813 | JetBrains IntelliJ IDEA code injection | 6.9CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29812 | JetBrains IntelliJ IDEA improper Unicode handling | 2.3CNA v3.1 | 0.2% | 2022-04-28 | Fix |
| CVE-2022-29811 | JetBrains Hub cross-site scripting | 6.1CNA v3.1 | 0.5% | 2022-04-28 | Fix |
| CVE-2022-29585 | Mahara incorrect default permissions | 7.5v3.1 | 1.0% | 2022-04-28 | Fix |
| CVE-2022-29584 | Mahara cross-site scripting | 5.4v3.1 | 0.5% | 2022-04-28 | Fix |
| CVE-2022-29556 | Northern.tech Mender server-side request forgery | 9.8v3.1 | 1.0% | 2022-04-28 | Fix |
| CVE-2022-29555 | Northern.tech Mender cross-site request forgery | 8.8v3.1 | 0.5% | 2022-04-28 | Fix |
| CVE-2022-29415 | Ravpage WordPress plugin unauthenticated reflected cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-04-28 | Fix |
| CVE-2022-29413 | Hermit 音乐播放器 WordPress plugin cross-site request forgery leading to stored cross-site scripting | 6.1v3.1 | 0.4% | 2022-04-28 | |
| CVE-2022-29412 | Hermit 音乐播放器 WordPress plugin Multiple cross-site request forgery (CSRF) | 5.4v3.1 | 0.4% | 2022-04-28 | |
| CVE-2022-29411 | Hermit 音乐播放器 WordPress plugin unauthenticated SQL injection SQLi) | 9.8v3.1 | 1.1% | 2022-04-28 | |
| CVE-2022-29410 | Hermit 音乐播放器 WordPress plugin authenticated SQL injection (SQLi) | 8.8v3.1 | 0.9% | 2022-04-28 | |
| CVE-2022-29152 | Ericom Powerterm Webconnect cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-28 | Fix |
| CVE-2022-29081 | Zoho ManageEngine Access Manager Plus path traversal | 9.8v3.1 | 83.3% | 2022-04-28 | NucleiEmerging ThreatsFix |
| CVE-2022-28892 | Mahara cross-site request forgery | 8.8v3.1 | 0.5% | 2022-04-28 | Fix |
| CVE-2022-28719 | Hammock AssetView missing authentication | 9.8v3.1 | 4.5% | 2022-04-28 | |
| CVE-2022-28477 | WBCE_CMS cross-site scripting | 6.1v3.1 | 1.0% | 2022-04-28 | |
| CVE-2022-28454 | Limbas cross-site scripting | 6.1v3.1 | 1.1% | 2022-04-28 | Exploit code |
| CVE-2022-28117 | Naviwebs Navigate CMS feed_parser class server-side request forgery | 4.9v3.1 | 22.0% | 2022-04-28 | NucleiExploit codeFix |
| CVE-2022-28114 | DSCMS arbitrary file deletion | 9.1v3.1 | 1.1% | 2022-04-28 | |
| CVE-2022-28102 | PHP Mysql Admin Panel Generator cross-site scripting | 5.4v3.1 | 0.5% | 2022-04-28 | |
| CVE-2022-28101 | Lyonbros Turtl cross-site scripting | 9.0v3.1 | 1.0% | 2022-04-28 | |
| CVE-2022-28060 | Victor Cms SQL injection | 7.5v3.1 | 1.6% | 2022-04-28 | |
| CVE-2022-27860 | Footer Text WordPress plugin cross-site request forgery (CSRF) leading to cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-04-28 | |
| CVE-2022-24935 | Lexmark missing authentication | 7.5v3.1 | 0.8% | 2022-04-28 | Fix |
| CVE-2022-24898 | xwiki-commons arbitrary file access through XML parsing in org.xwiki.Commons:xwiki-commons-xml | 4.9CNA v3.1 | 1.5% | 2022-04-28 | Fix |
| CVE-2022-24892 | Multiple valid tokens for password reset in Shopware | 6.4CNA v3.1 | 0.9% | 2022-04-28 | Fix |
| CVE-2022-24879 | shopware malfunction of cross-site request forgery token validation | 7.5CNA v3.1 | 0.6% | 2022-04-28 | Fix |
| CVE-2022-24873 | Non-stored cross-site scripting in Shopware storefront | 5.4CNA v3.1 | 0.8% | 2022-04-28 | Fix |
| CVE-2022-24449 | Rt-solar Solar Appscreener XML external entity injection | 9.8v3.1 | 1.9% | 2022-04-28 | Exploit codeFix |
| CVE-2022-22783 | Process memory exposure in Zoom on-premise Meeting services | 6.5CNA v3.1 | 1.0% | 2022-04-28 | |
| CVE-2022-22782 | Local privilege escalation in Windows Zoom Clients | 7.9CNA v3.1 | 0.4% | 2022-04-28 | Fix |
| CVE-2022-22781 | Zoom Client for Meetings update process vulnerability | 7.5CNA v3.1 | 0.4% | 2022-04-28 | Fix |
| CVE-2022-22443 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-04-28 | Fix |
| CVE-2022-22441 | IBM InfoSphere Information Server privilege escalation | 6.5CNA v3.0 | 0.9% | 2022-04-28 | Fix |
| CVE-2022-22427 | IBM InfoSphere Information Server cross-site scripting | 5.2CNA v3.0 | 0.6% | 2022-04-28 | Fix |
| CVE-2022-22322 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-04-28 | Fix |
| CVE-2022-1514 | Stored XSS via upload plugin functionality in zip format in NeoRazorX/Facturascripts | 5.4NVD v3.1 | 0.8% | 2022-04-28 | Fix |
| CVE-2022-1511 | Missing authorization in snipe/Snipe-IT | 6.5v3.1 | 1.0% | 2022-04-28 | Fix |
| CVE-2022-1509 | Command injection vulnerability in hestiacp/hestiacp | 8.8NVD v3.1 | 4.5% | 2022-04-28 | Fix |
| CVE-2022-29859 | AMB1 SDK DHCP client vulnerability | 9.8v3.1 | 1.3% | 2022-04-27 | |
| CVE-2022-29810 | Insertion of sensitive information into log file in HashiCorp go-getter | 5.5v3.1 | 0.4% | 2022-04-27 | Fix |
| CVE-2022-29701 | zammad resource exhaustion | 7.5v3.1 | 1.0% | 2022-04-27 | Fix |
| CVE-2022-29700 | zammad weak password requirements | 7.5v3.1 | 1.0% | 2022-04-27 | Fix |
| CVE-2022-29505 | LINE injection | 7.8v3.1 | 0.5% | 2022-04-27 | |
| CVE-2022-28464 | Apifox cross-site scripting | 9.0v3.1 | 1.2% | 2022-04-27 | |
| CVE-2022-28197 | NVIDIA Jetson AGX Xavier series, Jetson Xavier NX integer overflow | 5.0CNA v3.1 | 0.2% | 2022-04-27 | Fix |
| CVE-2022-28196 | NVIDIA Jetson AGX Xavier series buffer overflow | 4.6CNA v3.1 | 0.2% | 2022-04-27 | Fix |
| CVE-2022-28195 | NVIDIA Jetson AGX Xavier series, Jetson Xavier NX integer overflow | 5.7CNA v3.1 | 0.2% | 2022-04-27 | Fix |
| CVE-2022-28194 | NVIDIA Jetson AGX Xavier series, Jetson Xavier NX buffer overflow | 7.3CNA v3.1 | 0.3% | 2022-04-27 | Fix |
| CVE-2022-28193 | NVIDIA Jetson AGX Xavier series, Jetson Xavier NX buffer overflow | 5.6CNA v3.1 | 0.3% | 2022-04-27 | Fix |
| CVE-2022-28085 | htmldoc out-of-bounds write | 7.8v3.1 | 1.1% | 2022-04-27 | Fix |
| CVE-2022-27905 | Controlup unquoted search path | 7.2v3.1 | 1.1% | 2022-04-27 | Fix |
| CVE-2022-27336 | Seacms remote code execution | 9.8v3.1 | 20.5% | 2022-04-27 | |
| CVE-2022-27332 | zammad An improper access control | 9.1v3.1 | 1.1% | 2022-04-27 | Fix |
| CVE-2022-27331 | zammad An improper access control | 4.3v3.1 | 0.7% | 2022-04-27 | Fix |
| CVE-2022-27239 | Samba cifs-utils out-of-bounds write | 7.8v3.1 | 0.6% | 2022-04-27 | Fix |
| CVE-2022-24891 | Cross-site scripting in org.OWASP.esapi:esapi -- antisamy-esapi.xml configuration file | 5.4CNA v3.1 | 1.7% | 2022-04-27 | Fix |
| CVE-2022-24889 | Insufficient verification of data authenticity in Nextcloud Server | 2.4CNA v3.1 | 0.7% | 2022-04-27 | Fix |
| CVE-2022-24888 | Possible injection in Nextcloud Server | 4.3CNA v3.1 | 1.3% | 2022-04-27 | Fix |
| CVE-2022-24887 | Open redirect in Nextcloud Talk | 4.3CNA v3.1 | 0.9% | 2022-04-27 | Fix |
| CVE-2022-24886 | Nextcloud Android app contacts permission handling information disclosure | 2.2CNA v3.1 | 0.4% | 2022-04-27 | Fix |
| CVE-2022-24885 | Improper authentication in Nextcloud Android files | 2.0CNA v3.1 | 0.5% | 2022-04-27 | Fix |
| CVE-2022-24736 | A Malformed Lua script can crash Redis | 3.3CNA v3.1 | 1.5% | 2022-04-27 | Fix |
| CVE-2022-24735 | Lua scripts can be manipulated to overcome ACL rules in Redis | 3.9CNA v3.1 | 2.3% | 2022-04-27 | Fix |
| CVE-2022-24372 | Linksys MR9600 link following | 4.6v3.1 | 0.5% | 2022-04-27 | Fix |
| CVE-2022-23822 | AMD-Xilinx Zynq-7000 SoC FSBL incorrect authorization | 6.8v3.1 | 0.3% | 2022-04-27 | Fix |
| CVE-2022-22521 | Privilege escalation in Miele Benchmark Programming Tool | 7.3v3.1 | 0.5% | 2022-04-27 | Fix |
| CVE-2022-22345 | IBM QRadar SIEM cross-site scripting | 4.8CNA v3.0 | 1.8% | 2022-04-27 | Fix |
| CVE-2022-22323 | IBM Security Verify Password Synchronization Plug-in out-of-bounds write | 5.7CNA v3.0 | 1.1% | 2022-04-27 | Fix |
| CVE-2022-22315 | IBM UrbanCode Deploy privilege escalation | 5.0CNA v3.0 | 0.7% | 2022-04-27 | Fix |
| CVE-2022-22312 | IBM Security Verify Password Synchronization Plug-in out-of-bounds write | 5.7CNA v3.0 | 1.1% | 2022-04-27 | Fix |
| CVE-2022-22278 | SonicWall SonicOS resource exhaustion | 7.5v3.1 | 0.9% | 2022-04-27 | Fix |
| CVE-2022-22277 | SonicWall SonicOS information disclosure | 5.3v3.1 | 0.8% | 2022-04-27 | Fix |
| CVE-2022-22276 | SonicWall SonicOS information disclosure | 5.3v3.1 | 0.8% | 2022-04-27 | Fix |
| CVE-2022-22275 | SonicWall SonicOS denial of service | 7.5v3.1 | 1.1% | 2022-04-27 | Fix |
| CVE-2022-1507 | Chafa GIF decoder null pointer dereference | 5.5v3.1 | 0.9% | 2022-04-27 | Fix |
| CVE-2022-1504 | XSS in /demo/module/?module=HERE in microweber/microweber | 6.1v3.1 | 1.0% | 2022-04-27 | Fix |
| CVE-2022-1503 | GetSimple CMS Content module edit.php cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-27 | |
| CVE-2022-29806 | zoneminder path traversal | 9.8v3.1 | 67.1% | 2022-04-26 | MetasploitExploit codeFix |
| CVE-2022-29499 | Mitel MiVoice Connect improper input validation | 9.8v3.1 | 54.3% | 2022-04-26 | KEVEmerging ThreatsFix |
| CVE-2022-28918 | Njtech GreenCMS arbitrary file deletion | 8.1v3.1 | 1.1% | 2022-04-26 | |
| CVE-2022-28528 | bloofoxCMS unrestricted file upload | 8.8v3.1 | 1.2% | 2022-04-26 | |
| CVE-2022-28527 | Dhcms path traversal | 8.1v3.1 | 1.1% | 2022-04-26 | |
| CVE-2022-28525 | Ed01-cms unrestricted file upload | 8.8v3.1 | 1.0% | 2022-04-26 | |
| CVE-2022-28524 | Ed01-cms SQL injection | 9.8v3.1 | 0.9% | 2022-04-26 | |
| CVE-2022-28523 | Hongcms path traversal | 8.1v3.1 | 1.1% | 2022-04-26 | |
| CVE-2022-28522 | ZCMS cross-site scripting | 5.4v3.1 | 0.6% | 2022-04-26 | |
| CVE-2022-28521 | ZCMS index.php file inclusion | 9.8v3.1 | 1.6% | 2022-04-26 | |
| CVE-2022-28450 | nopCommerce cross-site scripting | 5.4v3.1 | 0.7% | 2022-04-26 | |
| CVE-2022-28449 | nopCommerce cross-site scripting | 6.1v3.1 | 0.7% | 2022-04-26 | |
| CVE-2022-28448 | nopCommerce cross-site scripting | 5.4v3.1 | 0.5% | 2022-04-26 | |
| CVE-2022-28218 | Ciphermail Webmail Messenger incorrect default permissions | 5.5v3.1 | 0.2% | 2022-04-26 | Fix |
| CVE-2022-28059 | Verydows path traversal | 8.1v3.1 | 1.2% | 2022-04-26 | |
| CVE-2022-28058 | Verydows path traversal | 8.1v3.1 | 1.2% | 2022-04-26 | |
| CVE-2022-27985 | Cuppacms SQL injection | 9.8v3.1 | 6.6% | 2022-04-26 | Nuclei |
| CVE-2022-27984 | Cuppacms SQL injection | 9.8v3.1 | 6.8% | 2022-04-26 | Nuclei |
| CVE-2022-27888 | The Foundry Issues service was found to be logging in a manner that captured session tokens | 5.5CNA v3.1 | 0.2% | 2022-04-26 | |
| CVE-2022-27854 | Psychological tests and quizzes WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-04-26 | |
| CVE-2022-27469 | Monsta FTP server-side request forgery | 9.8v3.1 | 1.4% | 2022-04-26 | |
| CVE-2022-27468 | Monsta FTP unrestricted file upload | 9.8v3.1 | 2.0% | 2022-04-26 | |
| CVE-2022-27299 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-04-26 | |
| CVE-2022-26564 | digitaldruid HotelDruid cross-site scripting | 6.1v3.1 | 2.8% | 2022-04-26 | NucleiFix |
| CVE-2022-24883 | FreeRDP Server authentication might allow invalid credentials to pass | 7.4CNA v3.1 | 2.3% | 2022-04-26 | Fix |
| CVE-2022-24882 | Server side NTLM does not properly check parameters in FreeRDP | 9.1CNA v3.1 | 2.8% | 2022-04-26 | Fix |
| CVE-2022-24881 | Command injection in Ballcat Codegen | 8.8CNA v3.1 | 3.2% | 2022-04-26 | Fix |
| CVE-2022-24866 | Exposure of sensitive information to an unauthorized actor in Discourse Assign | 4.3CNA v3.1 | 0.7% | 2022-04-26 | Fix |
| CVE-2022-24706 | Apache CouchDB insecure default initialization of Resource | 9.8NVD v3.1 | 92.5% | 2022-04-26 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-23942 | Apache Doris hard-coded cryptography initialization | 7.5v3.1 | 3.4% | 2022-04-26 | Fix |
| CVE-2022-1466 | Improper authorization in Keycloak | 6.5v3.1 | 1.1% | 2022-04-26 | Fix |
| CVE-2022-1173 | Stored XSS in getgrav/grav | 5.4NVD v3.1 | 1.5% | 2022-04-26 | Fix |
| CVE-2022-29603 | Universis-api SQL injection | 8.1v3.1 | 1.4% | 2022-04-25 | |
| CVE-2022-29546 | htmlunit OutOfMemory Exception by specifically crafted processing instruction in NekoHtml parser | 7.5v3.1 | 1.2% | 2022-04-25 | Fix |
| CVE-2022-29419 | 3xSocializer WordPress plugin authenticated SQL injection (SQLi) | 8.8v3.1 | 0.8% | 2022-04-25 | |
| CVE-2022-29418 | Night Mode WordPress plugin authenticated persistent cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-04-25 | Fix |
| CVE-2022-29417 | ShortPixel Adaptive Images WordPress plugin Subscriber+ plugin settings update vulnerability | 4.3v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-29264 | Coreboot arbitrary code execution | 9.8v3.1 | 1.8% | 2022-04-25 | Fix |
| CVE-2022-29078 | Ejs template injection | 9.8NVD v3.1 | 32.8% | 2022-04-25 | NucleiExploit codeFix |
| CVE-2022-29077 | Rippled A heap-based buffer overflow | 9.8v3.1 | 2.2% | 2022-04-25 | Fix |
| CVE-2022-28871 | F-Secure Atlant fsicapd denial of service | 7.5v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-28586 | Hoosk edit page cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-25 | |
| CVE-2022-28506 | giflib out-of-bounds write | 5.5v3.1 | 1.3% | 2022-04-25 | Fix |
| CVE-2022-28290 | WordPress Country Selector Plugin Reflective cross-site scripting | 6.1v3.1 | 1.4% | 2022-04-25 | NucleiFix |
| CVE-2022-28094 | Online Sports Complex Booking System cross-site scripting | 6.1v3.1 | 0.7% | 2022-04-25 | |
| CVE-2022-28093 | Online Sports Complex Booking System local file inclusion | 9.8v3.1 | 1.8% | 2022-04-25 | |
| CVE-2022-28053 | typemill unrestricted file upload | 8.8v3.1 | 1.2% | 2022-04-25 | |
| CVE-2022-27429 | jizhiCMS server-side request forgery | 9.8v3.1 | 1.1% | 2022-04-25 | |
| CVE-2022-27428 | Gallerycms /index.php/album/add stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-04-25 | |
| CVE-2022-27375 | Tenda AX12 cross-site request forgery | 6.5v3.1 | 0.5% | 2022-04-25 | |
| CVE-2022-27374 | Tenda AX12 cross-site request forgery | 6.5v3.1 | 0.4% | 2022-04-25 | |
| CVE-2022-27311 | Server side request forgery in gibbon | 9.8v3.1 | 1.5% | 2022-04-25 | Fix |
| CVE-2022-27135 | Xpdfreader Xpdf out-of-bounds write | 5.5v3.1 | 1.0% | 2022-04-25 | Fix |
| CVE-2022-27103 | Element-plus vulnerable to cross-site scripting (XSS) via el-table-column | 6.1v3.1 | 0.9% | 2022-04-25 | Fix |
| CVE-2022-26597 | Liferay Portal and Liferay DXP allows arbitrary injection via the site name | 6.1v3.1 | 0.7% | 2022-04-25 | Fix |
| CVE-2022-26596 | Liferay portal and Liferay DXP allows arbitrary injection via web content template names | 6.1v3.1 | 0.7% | 2022-04-25 | Fix |
| CVE-2022-26111 | Canon Irisnext expression language injection | 8.8v3.1 | 4.1% | 2022-04-25 | |
| CVE-2022-25866 | czproject/git-php command injection | 9.8v3.1 | 3.9% | 2022-04-25 | Fix |
| CVE-2022-24880 | Potential Captcha Validate Bypass in flask-session-captcha | 5.3CNA v3.1 | 1.2% | 2022-04-25 | Fix |
| CVE-2022-24792 | Potential infinite loop when parsing WAV format file in PJSIP | 7.5CNA v3.1 | 2.1% | 2022-04-25 | Fix |
| CVE-2022-23457 | Path traversal in ESAPI | 7.5CNA v3.1 | 2.8% | 2022-04-25 | Fix |
| CVE-2022-22392 | IBM Planning Analytics Workspace unrestricted file upload | 6.8CNA v3.0 | 2.1% | 2022-04-25 | Fix |
| CVE-2022-1461 | Non Privilege User can Enable or Disable Registered in openemr/openemr | 6.5NVD v3.1 | 0.9% | 2022-04-25 | Fix |
| CVE-2022-1459 | Non-Privilege User can View Patient’s Disclosures in openemr/openemr | 8.3v3.1 | 1.0% | 2022-04-25 | Fix |
| CVE-2022-1458 | Stored XSS leads to session hijacking in openemr/openemr | 5.4NVD v3.1 | 0.7% | 2022-04-25 | Fix |
| CVE-2022-1457 | Cross-site scripting in Facturascripts | 5.4NVD v3.1 | 0.8% | 2022-04-25 | Fix |
| CVE-2022-1441 | GPAC buffer overflow | 7.8NVD v3.1 | 1.0% | 2022-04-25 | Fix |
| CVE-2022-1396 | Donorbox WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 1.0% | 2022-04-25 | Fix |
| CVE-2022-1392 | Videos sync PDF WordPress plugin unauthenticated LFI | 7.5NVD v3.1 | 11.3% | 2022-04-25 | Nuclei |
| CVE-2022-1391 | Cab fare calculator WordPress plugin unauthenticated LFI | 9.8NVD v3.1 | 15.1% | 2022-04-25 | NucleiFix |
| CVE-2022-1390 | Admin Word Count Column WordPress plugin unauthenticated arbitrary file read | 9.8NVD v3.1 | 21.9% | 2022-04-25 | Nuclei |
| CVE-2022-1228 | Opensea WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-1156 | Books and Papers WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-1153 | LayerSlider WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 3.1% | 2022-04-25 | Fix |
| CVE-2022-1152 | Menubar WordPress plugin reflected cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-1094 | Amr Users WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-1092 | myCred WordPress plugin Subscriber+ Import/Export to email Address disclosure | 4.3NVD v3.1 | 0.4% | 2022-04-25 | Fix |
| CVE-2022-1027 | Page Restriction WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-0953 | Anti-Malware Security and Brute-Force Firewall WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 3.1% | 2022-04-25 | Fix |
| CVE-2022-0876 | Social comments by WpDevArt WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-25 | Fix |
| CVE-2022-0782 | Donations WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.7% | 2022-04-25 | |
| CVE-2022-0769 | Users Ultra WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 8.3% | 2022-04-25 | Nuclei |
| CVE-2022-0693 | Master Elements WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 6.9% | 2022-04-25 | Nuclei |
| CVE-2022-0657 | 5 Stars Rating Funnel WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.7% | 2022-04-25 | Fix |
| CVE-2022-0656 | uDraw udraw_convert_url_to_base64 AJAX action arbitrary file read | 7.5NVD v3.1 | 7.9% | 2022-04-25 | NucleiFix |
| CVE-2022-0634 | ThirstyAffiliates WordPress plugin Subscriber+ unauthorized image upload + CSRF | 4.3NVD v3.1 | 0.3% | 2022-04-25 | Fix |
| CVE-2022-0541 | Flothemes Flo Launch site cloning missing authentication | 9.8NVD v3.1 | 1.7% | 2022-04-25 | Fix |
| CVE-2022-0477 | GitLab denial of service | 4.9CNA v3.1 | 0.9% | 2022-04-25 | Fix |
| CVE-2022-0398 | ThirstyAffiliates Affiliate Link Manager WordPress plugin arbitrary Affiliate Links creation | 5.4NVD v3.1 | 0.3% | 2022-04-25 | Fix |
| CVE-2022-0363 | myCred WordPress plugin Subscriber+ arbitrary post creation | 4.3NVD v3.1 | 0.3% | 2022-04-25 | Fix |
| CVE-2022-0287 | Mycred WordPress plugin Subscriber+ user E-mail Addresses disclosure | 4.3NVD v3.1 | 0.8% | 2022-04-25 | Fix |
| CVE-2022-1452 | Out-of-bounds read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2 | 7.1v3.1 | 0.8% | 2022-04-24 | Fix |
| CVE-2022-1451 | Out-of-bounds read in r_bin_java_constant_value_attr_new function in radareorg/radare2 | 7.1v3.1 | 0.8% | 2022-04-24 | Fix |
| CVE-2022-1445 | Stored cross-site scripting vulnerability in the checked_out_to parameter in snipe/Snipe-IT | 5.4NVD v3.1 | 0.8% | 2022-04-24 | Fix |
| CVE-2022-1444 | Heap-use-after-free in radareorg/radare2 | 5.5NVD v3.1 | 0.8% | 2022-04-23 | Fix |
| CVE-2022-1427 | Out-of-bounds read in mrb_obj_is_kind_of in in mruby/mruby | 7.8v3.1 | 0.4% | 2022-04-23 | Fix |
| CVE-2022-29589 | Crypt-server cross-site scripting | 6.1v3.1 | 0.7% | 2022-04-22 | Fix |
| CVE-2022-29583 | service untrusted search path | 7.8v3.1 | 0.3% | 2022-04-22 | |
| CVE-2022-29582 | Linux kernel race condition | 7.0v3.1 | 0.8% | 2022-04-22 | Exploit codeFix |
| CVE-2022-28074 | fit2cloud Halo cross-site scripting | 4.8v3.1 | 0.4% | 2022-04-22 | |
| CVE-2022-27406 | FreeType out-of-bounds read | 7.5v3.1 | 3.3% | 2022-04-22 | Fix |
| CVE-2022-27405 | FreeType out-of-bounds read | 7.5v3.1 | 2.8% | 2022-04-22 | Fix |
| CVE-2022-27404 | FreeType out-of-bounds write | 9.8v3.1 | 2.7% | 2022-04-22 | Fix |
| CVE-2022-27342 | Link-admin SQL injection | 9.8v3.1 | 1.1% | 2022-04-22 | |
| CVE-2022-27341 | JFinalCMS SQL injection | 9.8v3.1 | 1.2% | 2022-04-22 | |
| CVE-2022-27340 | Cross-site request forgery in Mingsoft MCMS | 8.8v3.1 | 0.7% | 2022-04-22 | |
| CVE-2022-26674 | ASUS RT-AX88U format string | 9.8CNA v3.1 | 2.8% | 2022-04-22 | Fix |
| CVE-2022-26673 | ASUS RT-AX88U stored XSS | 5.4CNA v3.1 | 0.6% | 2022-04-22 | Fix |
| CVE-2022-26672 | ASUS WebStorage use of hard-coded credentials | 9.8v3.1 | 1.2% | 2022-04-22 | Fix |
| CVE-2022-1440 | Command injection vulnerability in Git-interface@ in yarkeev/Git-interface | 9.8v3.1 | 3.9% | 2022-04-22 | Fix |
| CVE-2022-1439 | Reflected XSS on demo.microweber.org/demo/module/ in microweber/microweber | 6.1v3.1 | 3.3% | 2022-04-22 | NucleiFix |
| CVE-2022-1437 | Heap-based buffer overflow in radareorg/radare2 | 7.1v3.1 | 0.8% | 2022-04-22 | Fix |
| CVE-2022-1429 | SQL injection in GridHelperService.php in pimcore/pimcore | 7.5v3.1 | 63.9% | 2022-04-22 | Fix |
| CVE-2022-1108 | Lenovo ThinkPad BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2022-04-22 | Fix |
| CVE-2022-1107 | Lenovo ThinkPad BIOS privilege escalation | 6.7CNA v3.1 | 0.3% | 2022-04-22 | Fix |
| CVE-2022-0636 | Lenovo Thin Installer buffer overflow | 5.0CNA v3.1 | 0.2% | 2022-04-22 | Fix |
| CVE-2022-0354 | Lenovo System Update privilege escalation | 7.3CNA v3.1 | 0.3% | 2022-04-22 | Fix |
| CVE-2022-0192 | Lenovo PC Manager uncontrolled search path | 7.3CNA v3.1 | 0.2% | 2022-04-22 | Fix |
| CVE-2022-29577 | Cross-site scripting in OWASP AntiSamy | 6.1NVD v3.1 | 1.3% | 2022-04-21 | Fix |
| CVE-2022-29566 | Bulletproofs inadequate encryption strength | 8.1v3.1 | 0.7% | 2022-04-21 | |
| CVE-2022-29548 | WSO2 Identity Server Analytics Management console of several reflected cross-site scripting | 6.1v3.1 | 41.1% | 2022-04-21 | NucleiExploit codeFix |
| CVE-2022-29547 | mediawiki Createredirect incorrect default permissions | 7.5v3.1 | 1.0% | 2022-04-21 | Fix |
| CVE-2022-29498 | SQL injection in Blazer | 7.5v3.1 | 0.9% | 2022-04-21 | Fix |
| CVE-2022-28820 | Adobe Consulting services reflected cross-site scripting arbitrary code execution | 6.1CNA v3.1 | 1.1% | 2022-04-21 | Fix |
| CVE-2022-28743 | Foscam R2C time-of-check time-of-use race condition | 6.6NVD v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28445 | Kitesky Kitecms files accessible to external parties | 6.5v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28444 | UCMS path traversal | 7.5v3.1 | 1.5% | 2022-04-21 | |
| CVE-2022-28443 | UCMS arbitrary file deletion | 9.1v3.1 | 1.0% | 2022-04-21 | |
| CVE-2022-28440 | UCMS An arbitrary file upload | 8.8v3.1 | 1.6% | 2022-04-21 | |
| CVE-2022-28439 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28438 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28437 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28436 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28435 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28434 | Janobe Baby Care System SQL injection | 9.8v3.1 | 0.9% | 2022-04-21 | |
| CVE-2022-28433 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28432 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28431 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28429 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28427 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28426 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28425 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28424 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28423 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28422 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28421 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28420 | Janobe Baby Care System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28417 | Home Owners Collection Management System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28416 | Home Owners Collection Management System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28415 | Home Owners Collection Management System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28414 | Home Owners Collection Management System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28413 | Car Driving School Management System SQL injection | 9.8v3.1 | 1.5% | 2022-04-21 | |
| CVE-2022-28412 | Car Driving School Management System SQL injection | 9.8v3.1 | 1.5% | 2022-04-21 | |
| CVE-2022-28411 | Simple Real Estate Portal System SQL injection | 9.8v3.1 | 1.5% | 2022-04-21 | |
| CVE-2022-28410 | Simple Real Estate Portal System SQL injection | 9.8v3.1 | 1.5% | 2022-04-21 | |
| CVE-2022-28367 | Cross-site scripting in OWASP AntiSamy | 6.1v3.1 | 1.0% | 2022-04-21 | Exploit codeFix |
| CVE-2022-28366 | Cyberneko HTML denial of service in HtmlUnit-Neko | 7.5v3.1 | 2.2% | 2022-04-21 | Fix |
| CVE-2022-28030 | Simple Real Estate Portal System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28029 | Simple Real Estate Portal System SQL injection | 9.8v3.1 | 1.3% | 2022-04-21 | |
| CVE-2022-28028 | Simple Real Estate Portal System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28026 | oretnom23 Student Grading System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28025 | oretnom23 Student Grading System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28024 | oretnom23 Student Grading System SQL injection | 9.8v3.1 | 1.2% | 2022-04-21 | |
| CVE-2022-28023 | Purchase Order Management System SQL injection | 9.8v3.1 | 2.6% | 2022-04-21 | |
| CVE-2022-28022 | Purchase Order Management System SQL injection | 9.8v3.1 | 2.6% | 2022-04-21 | |
| CVE-2022-28021 | Purchase Order Management System unrestricted file upload | 9.8v3.1 | 24.3% | 2022-04-21 | |
| CVE-2022-28020 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28019 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28018 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28017 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28016 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28015 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28014 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28013 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28012 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28011 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28010 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28009 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28008 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28007 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.1% | 2022-04-21 | |
| CVE-2022-28006 | Attendance and Payroll System SQL injection | 8.8v3.1 | 1.4% | 2022-04-21 | |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting (XSS) | 6.1v3.1 | 17.6% | 2022-04-21 | KEVNucleiFix |
| CVE-2022-27478 | Victor Cms unrestricted file upload | 8.8v3.1 | 20.0% | 2022-04-21 | |
| CVE-2022-27237 | NI Static Test Software Suite NI Web Server component installed cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-21 | Fix |
| CVE-2022-26856 | Dell Repository Manager (DRM) insufficiently protected credentials | 8.2CNA v3.1 | 0.2% | 2022-04-21 | Fix |
| CVE-2022-24875 | Potential Secrets being logged to disk in CVEProject/cve-services | 5.3CNA v3.1 | 1.0% | 2022-04-21 | |
| CVE-2022-24870 | Stored cross-site scripting in Combodo iTop | 8.7CNA v3.1 | 0.9% | 2022-04-21 | Fix |
| CVE-2022-24869 | Cross-site scripting in GLPI | 4.6CNA v3.1 | 0.8% | 2022-04-21 | Fix |
| CVE-2022-24868 | Cross-site scripting via SVG file upload in GLPI | 7.3CNA v3.1 | 0.6% | 2022-04-21 | Fix |
| CVE-2022-24867 | LDAP password exposure in glpi | 7.5CNA v3.1 | 1.3% | 2022-04-21 | Fix |
| CVE-2022-24424 | Dell AppSync path traversal | 7.5CNA v3.1 | 1.7% | 2022-04-21 | Fix |
| CVE-2022-24423 | Integrated Dell Remote Access Controller 8 denial of service | 5.3CNA v3.1 | 1.6% | 2022-04-21 | Fix |
| CVE-2022-24272 | MongoDB Server (mongod) may crash in response to unexpected requests | 6.5CNA v3.1 | 0.9% | 2022-04-21 | Fix |
| CVE-2022-23711 | Elastic Kibana information disclosure | 5.3v3.1 | 0.9% | 2022-04-21 | Fix |
| CVE-2022-22969 | Denial of service in Spring Security OAuth2 | 6.5v3.1 | 1.2% | 2022-04-21 | Fix |
| CVE-2022-22558 | Dell PowerEdge Platform denial of service | 5.7CNA v3.1 | 0.2% | 2022-04-21 | Fix |
| CVE-2022-22436 | IBM Maximo Asset Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-04-21 | Fix |
| CVE-2022-22435 | IBM Maximo Asset Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-04-21 | Fix |
| CVE-2022-20805 | Cisco Umbrella Secure Web Gateway File Decryption Bypass vulnerability | 4.1CNA v3.1 | 0.2% | 2022-04-21 | Fix |
| CVE-2022-20804 | Cisco Unified Communications Products denial of service | 5.3CNA v3.1 | 0.4% | 2022-04-21 | Fix |
| CVE-2022-20795 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software denial of service | 5.8CNA v3.1 | 0.7% | 2022-04-21 | Fix |
| CVE-2022-20790 | Cisco Unified Communications Products arbitrary file read | 6.5CNA v3.1 | 1.9% | 2022-04-21 | Fix |
| CVE-2022-20789 | Cisco Unified Communications Products arbitrary file write | 4.9CNA v3.1 | 1.4% | 2022-04-21 | Fix |
| CVE-2022-20788 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-04-21 | Fix |
| CVE-2022-20787 | Cisco Unified Communications Products cross-site request forgery | 5.7CNA v3.1 | 0.5% | 2022-04-21 | Fix |
| CVE-2022-20786 | Cisco Unified Communications Manager IM and Presence Service SQL injection | 5.4CNA v3.1 | 0.8% | 2022-04-21 | Fix |
| CVE-2022-20783 | Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 denial of service | 7.5CNA v3.1 | 1.4% | 2022-04-21 | Fix |
| CVE-2022-20778 | Cisco Webex Meetings cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-04-21 | Fix |
| CVE-2022-20773 | Cisco Umbrella Virtual Appliance Static SSH Host Key vulnerability | 7.5CNA v3.1 | 1.2% | 2022-04-21 | Fix |
| CVE-2022-20732 | Cisco Virtualized Infrastructure Manager privilege escalation | 7.8CNA v3.1 | 0.2% | 2022-04-21 | Fix |
| CVE-2022-1420 | vim/vim GitHub repository out-of-range pointer offset | 5.5v3.1 | 1.4% | 2022-04-21 | Fix |
| CVE-2022-1022 | Cross-site scripting (XSS) Stored in chatwoot/chatwoot | 5.4NVD v3.1 | 4.5% | 2022-04-21 | Fix |
| CVE-2022-0272 | Improper restriction of XML external entity reference in Detekt/Detekt | 9.8v3.1 | 1.4% | 2022-04-21 | Fix |
| CVE-2022-29537 | gpac out-of-bounds read | 5.5v3.1 | 0.6% | 2022-04-20 | Fix |
| CVE-2022-29536 | GNOME Epiphany out-of-bounds write | 7.5v3.1 | 2.0% | 2022-04-20 | Fix |
| CVE-2022-29534 | MISP improper authentication | 7.5v3.1 | 1.6% | 2022-04-20 | |
| CVE-2022-29533 | MISP cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-20 | |
| CVE-2022-29532 | MISP cross-site scripting | 4.8v3.1 | 0.8% | 2022-04-20 | |
| CVE-2022-29531 | MISP cross-site scripting | 5.4v3.1 | 0.8% | 2022-04-20 | |
| CVE-2022-29530 | MISP cross-site scripting | 5.4v3.1 | 0.8% | 2022-04-20 | |
| CVE-2022-29529 | MISP cross-site scripting | 5.4v3.1 | 0.8% | 2022-04-20 | |
| CVE-2022-29528 | MISP deserialization of untrusted data | 9.8v3.1 | 2.2% | 2022-04-20 | |
| CVE-2022-29527 | amazon-ssm-agent race condition | 7.0v3.1 | 0.3% | 2022-04-20 | Fix |
| CVE-2022-29266 | Apisix/jwt-auth may leak secrets in error response | 7.5v3.1 | 7.8% | 2022-04-20 | Fix |
| CVE-2022-28327 | Go crypto/elliptic package denial of service | 7.5v3.1 | 4.2% | 2022-04-20 | Fix |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) arbitrary file upload | 7.2NVD v3.1 | 98.7% | 2022-04-20 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) command injection | 7.5NVD v3.1 | 93.9% | 2022-04-20 | KEVNucleiFix |
| CVE-2022-27629 | videowhisper MicroPayments cross-site request forgery | 8.8v3.1 | 0.8% | 2022-04-20 | Fix |
| CVE-2022-27536 | Go improper certificate validation | 7.5v3.1 | 1.5% | 2022-04-20 | Fix |
| CVE-2022-27179 | Red Lion DA50N configuration file credential exposure | 6.5v3.1 | 0.5% | 2022-04-20 | |
| CVE-2022-26519 | Interlogix Hills ComNav improper restriction of excessive authentication attempts | 5.5v3.1 | 0.2% | 2022-04-20 | Fix |
| CVE-2022-26516 | Red Lion DA50N insufficient verification of data authenticity | 7.8v3.1 | 0.3% | 2022-04-20 | |
| CVE-2022-26133 | Atlassian Bitbucket Data Center deserialization of untrusted data | 9.8NVD v3.1 | 70.4% | 2022-04-20 | Exploit codeFix |
| CVE-2022-25344 | Olivetti D-color MF3555 cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-20 | |
| CVE-2022-25343 | Olivetti D-color MF3555 denial of service | 7.5v3.1 | 1.3% | 2022-04-20 | |
| CVE-2022-25342 | Olivetti D-color MF3555 missing authorization | 8.1v3.1 | 1.0% | 2022-04-20 | |
| CVE-2022-24872 | Improper access control in shopware | 8.1CNA v3.1 | 1.1% | 2022-04-20 | Fix |
| CVE-2022-24871 | Server-side request forgery (SSRF) in Shopware | 7.2CNA v3.1 | 1.1% | 2022-04-20 | Fix |
| CVE-2022-24865 | Improper access control in humhub | 6.5CNA v3.1 | 1.2% | 2022-04-20 | Fix |
| CVE-2022-24864 | Malicious Javascript injection in OriginProtocol/origin-website | 4.1CNA v3.1 | 0.7% | 2022-04-20 | |
| CVE-2022-24862 | Server-side request forgery in Databasir | 7.7CNA v3.1 | 1.0% | 2022-04-20 | Fix |
| CVE-2022-24861 | Remote code execution in Databasir | 9.9CNA v3.1 | 3.0% | 2022-04-20 | Fix |
| CVE-2022-24860 | Databasir has use of hard-coded cryptographic key | 7.4CNA v3.1 | 1.7% | 2022-04-20 | |
| CVE-2022-24826 | Git LFS can execute a binary from the current directory on Windows | 9.8CNA v3.1 | 2.2% | 2022-04-20 | Fix |
| CVE-2022-24799 | Cross-site scripting in Wire Webapp | 9.6CNA v3.1 | 1.0% | 2022-04-20 | Fix |
| CVE-2022-24675 | Go uncontrolled recursion | 7.5v3.1 | 10.0% | 2022-04-20 | Exploit codeFix |
| CVE-2022-1318 | Hills ComNav inadequate encryption strength | 5.5v3.1 | 0.1% | 2022-04-20 | Fix |
| CVE-2022-1254 | McAfee Secure Web Gateway SWG URL redirection | 6.1CNA v3.1 | 0.8% | 2022-04-20 | Fix |
| CVE-2022-1039 | Red Lion DA50N web user interface weak password requirements | 9.8v3.1 | 1.2% | 2022-04-20 | |
| CVE-2022-0567 | ovn-kubernetes information disclosure | 9.1NVD v3.1 | 1.0% | 2022-04-20 | Fix |
| CVE-2022-0540 | Atlassian Jira Service Management Server improper authentication | 9.8v3.1 | 88.1% | 2022-04-20 | NucleiExploit codeFix |
| CVE-2022-29315 | Invicti Acunetix CSV injection | 8.8v3.1 | 1.4% | 2022-04-19 | |
| CVE-2022-29153 | HashiCorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector | 7.5v3.1 | 8.7% | 2022-04-19 | NucleiFix |
| CVE-2022-28222 | CleanTalk AntiSpam reflected XSS | 6.1v3.1 | 2.9% | 2022-04-19 | Fix |
| CVE-2022-28221 | CleanTalk AntiSpam reflected XSS | 6.1v3.1 | 2.4% | 2022-04-19 | Fix |
| CVE-2022-28108 | Selenium Server (Grid) CSRF | 8.8v3.1 | 22.2% | 2022-04-19 | NucleiExploit codeFix |
| CVE-2022-27927 | Microfinance Management System SQL injection | 9.8v3.1 | 13.8% | 2022-04-19 | NucleiExploit code |
| CVE-2022-27863 | VikBooking Hotel Booking Engine and PMS WordPress plugin sensitive data exposure | 5.3v3.1 | 1.1% | 2022-04-19 | Fix |
| CVE-2022-27862 | VikBooking Hotel Booking Engine and PMS WordPress plugin arbitrary file upload leading to RCE | 9.8v3.1 | 1.7% | 2022-04-19 | Fix |
| CVE-2022-27527 | Navisworks out-of-bounds write | 7.8v3.1 | 0.5% | 2022-04-19 | Fix |
| CVE-2022-27104 | Forma LMS SQL injection | 9.8v3.1 | 1.2% | 2022-04-19 | Fix |
| CVE-2022-27055 | Ecjia Daojia incorrect authorization | 7.5v3.1 | 1.6% | 2022-04-19 | |
| CVE-2022-26595 | Liferay Portal and Liferay DXP fails to check permissions to view sites/groups | 4.3v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-26593 | Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category | 5.4v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2022-25788 | Autodesk Advanced Steel out-of-bounds write | 7.8NVD v3.1 | 1.6% | 2022-04-19 | Fix |
| CVE-2022-25648 | git command injection | 9.8v3.1 | 4.9% | 2022-04-19 | Fix |
| CVE-2022-24858 | nextauthjs next-auth default redirect callback vulnerable to open redirects | 6.1CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-24825 | Smokescreen SSRF via deny list bypass | 5.8CNA v3.1 | 0.9% | 2022-04-19 | Fix |
| CVE-2022-21498 | Oracle Database Server Java VM vulnerability | 6.5CNA v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-21497 | Oracle Web Services Manager Web Services Security component unauthorized data access | 8.1CNA v3.1 | 1.7% | 2022-04-19 | Fix |
| CVE-2022-21496 | Oracle Java SE, Oracle GraalVM Enterprise Edition JNDI component unauthorized data modification | 5.3CNA v3.1 | 2.8% | 2022-04-19 | Fix |
| CVE-2022-21494 | Oracle Solaris Kernel component denial of service | 4.0CNA v3.1 | 0.3% | 2022-04-19 | Fix |
| CVE-2022-21493 | Oracle Solaris Kernel component denial of service | 5.9CNA v3.1 | 0.3% | 2022-04-19 | Fix |
| CVE-2022-21492 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-04-19 | Fix |
| CVE-2022-21491 | Oracle VM VirtualBox Core component takeover | 7.8CNA v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-21490 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 78.7% | 2022-04-19 | Fix |
| CVE-2022-21489 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 78.9% | 2022-04-19 | Fix |
| CVE-2022-21488 | Oracle VM VirtualBox Core component unauthorized data modification | 3.8CNA v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-21487 | Oracle VM VirtualBox Core component information disclosure | 3.8CNA v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-21486 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.7% | 2022-04-19 | Fix |
| CVE-2022-21485 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.8% | 2022-04-19 | Fix |
| CVE-2022-21484 | Oracle MySQL Cluster General component denial of service | 2.9CNA v3.1 | 1.7% | 2022-04-19 | Fix |
| CVE-2022-21483 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 3.0% | 2022-04-19 | Fix |
| CVE-2022-21482 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 3.1% | 2022-04-19 | Fix |
| CVE-2022-21481 | Oracle PeopleSoft Enterprise FIN Cash Management unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-04-19 | Fix |
| CVE-2022-21480 | Oracle Supply Chain Transportation Management unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-21479 | Oracle MySQL Server Optimizer component denial of service | 5.5CNA v3.1 | 1.6% | 2022-04-19 | Fix |
| CVE-2022-21478 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21477 | Oracle E-Business Suite Applications Framework unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-04-19 | Fix |
| CVE-2022-21476 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data access | 7.5CNA v3.1 | 4.0% | 2022-04-19 | Fix |
| CVE-2022-21475 | Oracle Financial Services Applications Banking Payments unauthorized data modification | 5.9CNA v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2022-21474 | Oracle Financial Services Applications Banking Trade Finance unauthorized data modification | 5.9CNA v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2022-21473 | Oracle Financial Services Applications Banking Treasury Management unauthorized data modification | 5.9CNA v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2022-21472 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data modification | 5.9CNA v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2022-21471 | Oracle VM VirtualBox Core component denial of service | 6.5CNA v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-21470 | Oracle PeopleSoft Enterprise PeopleTools Process Scheduler component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-21469 | Oracle Enterprise Manager Base Platform UI Framework component unauthorized data modification | 4.7CNA v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-21468 | Oracle E-Business Suite Applications Framework Popups component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-04-19 | Fix |
| CVE-2022-21467 | Oracle Supply Chain Agile PLM Attachments component unauthorized data access | 6.5CNA v3.1 | 0.9% | 2022-04-19 | Fix |
| CVE-2022-21466 | Oracle Commerce Guided Search tools and Frameworks component unauthorized data access | 7.5CNA v3.1 | 1.8% | 2022-04-19 | Fix |
| CVE-2022-21465 | Oracle VM VirtualBox Core component unauthorized data modification | 6.7CNA v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-21464 | Oracle JD Edwards EnterpriseOne Tools Business Logic Infra SEC component denial of service | 8.2CNA v3.1 | 2.1% | 2022-04-19 | Fix |
| CVE-2022-21463 | Oracle Solaris Kernel component denial of service | 5.5CNA v3.1 | 0.2% | 2022-04-19 | Fix |
| CVE-2022-21462 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21461 | Oracle Solaris Kernel component unauthorized data access | 5.5CNA v3.1 | 0.3% | 2022-04-19 | Fix |
| CVE-2022-21460 | Oracle MySQL Server Logging component unauthorized data access | 4.4CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21459 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.1% | 2022-04-19 | Fix |
| CVE-2022-21458 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-21457 | Oracle MySQL Server PAM Auth plugin component unauthorized data access | 5.9CNA v3.1 | 2.1% | 2022-04-19 | Fix |
| CVE-2022-21456 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-21454 | Oracle MySQL Server Group Replication plugin component denial of service | 6.5CNA v3.1 | 1.4% | 2022-04-19 | Fix |
| CVE-2022-21453 | Oracle WebLogic Server console component unauthorized data modification | 6.1CNA v3.1 | 0.9% | 2022-04-19 | Fix |
| CVE-2022-21452 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21451 | Oracle MySQL Server InnoDB component denial of service | 4.4CNA v3.1 | 1.2% | 2022-04-19 | Fix |
| CVE-2022-21450 | Oracle PeopleSoft Enterprise PRTL Interaction Hub My Links component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-04-19 | Fix |
| CVE-2022-21449 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification | 7.5CNA v3.1 | 77.2% | 2022-04-19 | Emerging ThreatsExploit codeFix |
| CVE-2022-21448 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-21447 | Oracle PeopleSoft Enterprise CS Academic Advisement unauthorized data access | 6.5CNA v3.1 | 0.9% | 2022-04-19 | Fix |
| CVE-2022-21446 | Oracle Solaris utility component unauthorized data modification | 8.2CNA v3.1 | 1.5% | 2022-04-19 | Fix |
| CVE-2022-21445 | Oracle ADF Faces deserialization of untrusted data | 9.8CNA v3.1 | 62.5% | 2022-04-19 | KEVExploit codeKCVFix |
| CVE-2022-21444 | Oracle MySQL Server DDL component denial of service | 4.4CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21443 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component denial of service | 3.7CNA v3.1 | 2.7% | 2022-04-19 | Fix |
| CVE-2022-21442 | Oracle GoldenGate OGG core library vulnerability | 8.8CNA v3.1 | 0.3% | 2022-04-19 | Fix |
| CVE-2022-21441 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 1.4% | 2022-04-19 | Fix |
| CVE-2022-21440 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.1% | 2022-04-19 | Fix |
| CVE-2022-21438 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21437 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21436 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21435 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21434 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification | 5.3CNA v3.1 | 2.5% | 2022-04-19 | Fix |
| CVE-2022-21431 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 10.0CNA v3.1 | 2.1% | 2022-04-19 | Fix |
| CVE-2022-21430 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 8.5CNA v3.1 | 1.2% | 2022-04-19 | Fix |
| CVE-2022-21427 | Oracle MySQL Server FTS component denial of service | 4.9CNA v3.1 | 2.0% | 2022-04-19 | Fix |
| CVE-2022-21426 | Oracle Java SE, Oracle GraalVM Enterprise Edition JAXP component denial of service | 5.3CNA v3.1 | 3.2% | 2022-04-19 | Fix |
| CVE-2022-21425 | Oracle MySQL Server DDL component unauthorized data modification | 5.5CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21424 | Oracle Communications Billing and Revenue Management unauthorized data access | 8.3CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21423 | Oracle MySQL Server InnoDB component denial of service | 2.7CNA v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-21422 | Oracle Communications Billing and Revenue Management Connection Manager component takeover | 7.5CNA v3.1 | 1.0% | 2022-04-19 | Fix |
| CVE-2022-21421 | Oracle Business Intelligence Enterprise Edition unauthorized data access | 7.5CNA v3.1 | 1.6% | 2022-04-19 | Fix |
| CVE-2022-21420 | Oracle Coherence Core component takeover | 9.8CNA v3.1 | 1.5% | 2022-04-19 | Fix |
| CVE-2022-21419 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 6.1CNA v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-21418 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.0CNA v3.1 | 1.1% | 2022-04-19 | Fix |
| CVE-2022-21417 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.5% | 2022-04-19 | Fix |
| CVE-2022-21416 | Oracle Solaris utility component unauthorized data modification | 5.0CNA v3.1 | 0.3% | 2022-04-19 | Fix |
| CVE-2022-21415 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 1.4% | 2022-04-19 | Fix |
| CVE-2022-21414 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2022-04-19 | Fix |
| CVE-2022-21413 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 1.4% | 2022-04-19 | Fix |
| CVE-2022-21412 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.5% | 2022-04-19 | Fix |
| CVE-2022-21411 | Oracle Database Server RDBMS Gateway ODBC connectivity vulnerability | 5.4CNA v3.1 | 0.6% | 2022-04-19 | Fix |
| CVE-2022-21410 | Oracle Database takeover | 7.2CNA v3.1 | 1.2% | 2022-04-19 | Fix |
| CVE-2022-21409 | Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data modification | 6.1CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-21405 | Oracle OSS Support Tools Oracle Explorer component unauthorized data access | 5.5CNA v3.1 | 0.3% | 2022-04-19 | Fix |
| CVE-2022-21404 | Oracle Helidon Reactive WebServer component takeover | 8.1CNA v3.1 | 1.9% | 2022-04-19 | Fix |
| CVE-2022-1385 | Mattermost invitation Email is resent as a Reminder after invalidating pending email invites | 3.7CNA v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-1384 | Mattermost authorized users are allowed to install old plugin versions from the Marketplace | 4.7CNA v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-1329 | Elementor Website Builder - missing authorization to remote code execution | 8.8v3.1 | 92.7% | 2022-04-19 | NucleiMetasploitExploit codeFix |
| CVE-2022-1187 | WP YouTube Live WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.3% | 2022-04-19 | Fix |
| CVE-2022-1186 | Be POPIA Compliant WordPress plugin sensitive information exposure | 5.3v3.1 | 1.1% | 2022-04-19 | Fix |
| CVE-2022-1119 | Simple File List WordPress plugin arbitrary file download | 7.5v3.1 | 20.0% | 2022-04-19 | NucleiExploit codeFix |
| CVE-2022-1065 | Multi Factor authentication bypass in various versions of Abacus ERP | 8.8v3.1 | 2.8% | 2022-04-19 | Fix |
| CVE-2022-1019 | Automated Logic WebCtrl Server open redirection | 6.1v3.1 | 0.7% | 2022-04-19 | Fix |
| CVE-2022-0993 | SiteGround Security WordPress plugin authorization Weakness to authentication bypass | 9.8v3.1 | 7.3% | 2022-04-19 | Fix |
| CVE-2022-0992 | SiteGround Security WordPress plugin authentication bypass via 2FA Setup | 9.8v3.1 | 2.8% | 2022-04-19 | Fix |
| CVE-2022-0645 | Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in PostHog/PostHog | 6.1v3.1 | 0.8% | 2022-04-19 | Fix |
| CVE-2022-0071 | Amazon Web Services Hotdog execution with unnecessary privileges | 8.8NVD v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-0070 | Amazon Log4j hotpatch package privilege escalation | 8.8NVD v3.1 | 0.4% | 2022-04-19 | Fix |
| CVE-2022-29464 | WSO2 Multiple Products unrestricted file upload | 9.8NVD v3.1 | 100.0% | 2022-04-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-29458 | Invisible-island ncurses out-of-bounds read | 7.1v3.1 | 1.3% | 2022-04-18 | Fix |
| CVE-2022-29457 | Zoho ManageEngine ADAudit Plus insufficiently protected credentials | 8.8v3.1 | 7.9% | 2022-04-18 | Exploit codeFix |
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus remote code execution | 6.8v3.1 | 71.0% | 2022-04-18 | KEVMetasploitExploit codeFix |
| CVE-2022-27908 | Zoho ManageEngine OpManager SQL injection | 8.8v3.1 | 36.5% | 2022-04-18 | Fix |
| CVE-2022-27853 | Contest Gallery WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-04-18 | Fix |
| CVE-2022-27652 | Incorrect default permissions in CRI-O | 5.3v3.1 | 0.2% | 2022-04-18 | Fix |
| CVE-2022-27530 | Autodesk Advanced Steel out-of-bounds write | 7.8v3.1 | 0.8% | 2022-04-18 | Fix |
| CVE-2022-27529 | Autodesk Advanced Steel out-of-bounds write | 7.8v3.1 | 0.8% | 2022-04-18 | Fix |
| CVE-2022-27526 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 1.5% | 2022-04-18 | Fix |
| CVE-2022-27525 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 1.6% | 2022-04-18 | Fix |
| CVE-2022-26665 | Tylertech Odyssey Portal insecure direct object reference | 7.5v3.1 | 1.8% | 2022-04-18 | Fix |
| CVE-2022-26631 | Automatic Question Paper Generator SQL injection | 9.8v3.1 | 1.2% | 2022-04-18 | |
| CVE-2022-25226 | ThinVNC authentication bypass | 10.0v3.1 | 11.0% | 2022-04-18 | NucleiExploit code |
| CVE-2022-24863 | Denial of service in http-swagger | 7.5CNA v3.1 | 2.4% | 2022-04-18 | Fix |
| CVE-2022-24859 | Manipulated inline images can cause infinite loop in PyPDF2 | 6.2CNA v3.1 | 1.3% | 2022-04-18 | Fix |
| CVE-2022-24841 | Improper authorization in github.com/fleetdm/fleet | 6.5CNA v3.1 | 0.8% | 2022-04-18 | Fix |
| CVE-2022-23976 | Access Demo Importer WordPress plugin cross-site request forgery vulnerability leading to data reset | 8.1v3.1 | 0.5% | 2022-04-18 | Fix |
| CVE-2022-23975 | AccessPress Themes Access Demo Importer (WordPress plugin) cross-site request forgery | 6.5v3.1 | 0.5% | 2022-04-18 | Fix |
| CVE-2022-1383 | Heap-based buffer overflow in radareorg/radare2 | 6.1v3.1 | 0.7% | 2022-04-18 | Fix |
| CVE-2022-1382 | Null pointer dereference in radareorg/radare2 | 5.5v3.1 | 0.7% | 2022-04-18 | Fix |
| CVE-2022-1381 | Global heap buffer overflow in skip_range in Vim/Vim | 7.8v3.1 | 3.1% | 2022-04-18 | Fix |
| CVE-2022-1341 | bwm-ng null pointer dereference | 7.5NVD v3.1 | 1.2% | 2022-04-18 | Fix |
| CVE-2022-1112 | Autolinks WordPress plugin stored cross-site scripting via CSRF | 5.4NVD v3.1 | 0.3% | 2022-04-18 | |
| CVE-2022-1091 | Safe SVG WordPress plugin SVG Sanitisation bypass | 6.1NVD v3.1 | 1.2% | 2022-04-18 | Fix |
| CVE-2022-1090 | Good and Bad Comments WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-18 | |
| CVE-2022-1088 | Page Security and Membership WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-18 | |
| CVE-2022-1063 | Thank Me Later WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-04-18 | |
| CVE-2022-1054 | RSVP and Event Management WordPress plugin unauthenticated Entries export | 5.3NVD v3.1 | 4.2% | 2022-04-18 | NucleiFix |
| CVE-2022-1037 | EXMAGE WordPress plugin Admin+ blind SSRF | 7.2NVD v3.1 | 1.3% | 2022-04-18 | Fix |
| CVE-2022-1020 | Woo Product Table WordPress plugin unauthenticated arbitrary function Call | 9.8NVD v3.1 | 25.9% | 2022-04-18 | NucleiFix |
| CVE-2022-1001 | WP Downgrade WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 4.9% | 2022-04-18 | Fix |
| CVE-2022-0994 | Hummingbird WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 2.8% | 2022-04-18 | Fix |
| CVE-2022-0879 | Caldera Forms WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.2% | 2022-04-18 | NucleiFix |
| CVE-2022-0785 | Daily Prayer Time WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 9.0% | 2022-04-18 | NucleiFix |
| CVE-2022-0780 | SearchIQ WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.9% | 2022-04-18 | Fix |
| CVE-2022-0765 | Loco Translate WordPress plugin authenticated stored cross-site scripting | 5.4NVD v3.1 | 3.8% | 2022-04-18 | NucleiFix |
| CVE-2022-0737 | Text Hover WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-04-18 | Fix |
| CVE-2022-0707 | Easy Digital Downloads WordPress plugin arbitrary Payment Note Insertion via CSRF | 4.3NVD v3.1 | 0.5% | 2022-04-18 | Fix |
| CVE-2022-0706 | Easy Digital Downloads WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-04-18 | Fix |
| CVE-2022-0661 | Ad Injection WordPress plugin Admin+ stored cross-site scripting and RCE | 7.2NVD v3.1 | 40.2% | 2022-04-18 | |
| CVE-2022-29287 | Kentico Xperience insecure direct object reference | 4.9v3.1 | 0.9% | 2022-04-16 | Fix |
| CVE-2022-29020 | ForestBlog cross-site scripting | 6.1v3.1 | 0.5% | 2022-04-16 | |
| CVE-2022-28966 | wasm3 out-of-bounds write | 5.5v3.1 | 0.6% | 2022-04-16 | |
| CVE-2022-26777 | Zoho Manageengine Remote Access Plus forced browsing | 5.3v3.1 | 2.1% | 2022-04-16 | Fix |
| CVE-2022-26653 | Zoho Manageengine Remote Access Plus forced browsing | 5.3v3.1 | 2.1% | 2022-04-16 | Fix |
| CVE-2022-1380 | Stored cross-site scripting vulnerability in Item name parameter in snipe/Snipe-IT | 5.4NVD v3.1 | 0.8% | 2022-04-16 | Fix |
| CVE-2022-29281 | Notable path traversal | 8.8v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2022-29072 | 7-Zip out-of-bounds write | 7.8NVD v3.1 | 1.5% | 2022-04-15 | Exploit code |
| CVE-2022-28870 | Address bar spoofing vulnerability in F-Secure SAFE Browser for Android | 4.3v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-28869 | Address bar spoofing vulnerability in F-Secure SAFE Browser for Android | 4.3v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-28868 | Address bar spoofing vulnerability in F-Secure SAFE Browser for Android | 4.3v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-28345 | Signal URL rendering injection | 7.5v3.1 | 2.5% | 2022-04-15 | |
| CVE-2022-28113 | Fantec Mwid25-ds Firmware cookie reliance without validation | 7.2v3.1 | 3.7% | 2022-04-15 | Exploit code |
| CVE-2022-28109 | Selenium Grid cross-site request forgery | 8.8v3.1 | 1.0% | 2022-04-15 | |
| CVE-2022-28049 | F5 Njs null pointer dereference | 5.5v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-28048 | stb incorrect calculation | 8.8v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2022-28044 | Irzip out-of-bounds write | 9.8v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-28042 | nothings Stb Image.h use-after-free | 8.8v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2022-28041 | nothings Stb Image.h integer overflow | 6.5v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-27852 | KB Support WordPress plugin Multiple Unauth. stored cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-27851 | Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key. | 4.3v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-27850 | Simple Ajax Chat WordPress plugin Multiple cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-27849 | Simple Ajax Chat WordPress plugin sensitive information disclosure | 7.5v3.1 | 4.6% | 2022-04-15 | NucleiFix |
| CVE-2022-27474 | salesagility SuiteCRM remote code execution | 7.2v3.1 | 23.1% | 2022-04-15 | Fix |
| CVE-2022-27426 | chamilo-lms server-side request forgery | 8.8v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-27425 | Chamilo cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-27423 | chamilo-lms SQL injection | 9.8v3.1 | 1.0% | 2022-04-15 | Fix |
| CVE-2022-27422 | chamilo-lms reflected cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-27421 | chamilo-lms privilege escalation | 7.2v3.1 | 1.0% | 2022-04-15 | Fix |
| CVE-2022-27369 | chshcms Cscms SQL injection | 7.2v3.1 | 0.9% | 2022-04-15 | |
| CVE-2022-27368 | chshcms Cscms SQL injection | 7.2v3.1 | 0.8% | 2022-04-15 | |
| CVE-2022-27367 | chshcms Cscms SQL injection | 7.2v3.1 | 0.8% | 2022-04-15 | |
| CVE-2022-27366 | chshcms Cscms SQL injection | 7.2v3.1 | 0.8% | 2022-04-15 | |
| CVE-2022-27365 | chshcms Cscms SQL injection | 7.2v3.1 | 0.9% | 2022-04-15 | |
| CVE-2022-27258 | Hubzilla Multiple cross-site scripting | 6.1v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-27257 | Hubzilla default Redbasic theme local file inclusion | 7.5v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-27188 | Yokogawa CENTUM VP and B/M9000 VP Graphic Builder OS command injection | 7.8v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-27158 | PHP pearweb deserialization of untrusted data | 9.8v3.1 | 1.3% | 2022-04-15 | |
| CVE-2022-27157 | PHP pearweb weak password recovery | 9.8v3.1 | 1.2% | 2022-04-15 | |
| CVE-2022-27048 | Moxa Mgate MB3170 man-in-the-middle | 7.4v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-27043 | Yearning path traversal | 7.5v3.1 | 6.3% | 2022-04-15 | Nuclei |
| CVE-2022-26924 | Microsoft YARP denial of service | 7.5CNA v3.1 | 3.5% | 2022-04-15 | Fix |
| CVE-2022-26921 | Microsoft Visual Studio Code elevation of privilege | 7.3CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-26920 | Microsoft Windows Graphics component information disclosure | 5.5CNA v3.1 | 0.9% | 2022-04-15 | Fix |
| CVE-2022-26919 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.1CNA v3.1 | 2.6% | 2022-04-15 | Fix |
| CVE-2022-26918 | Microsoft Windows Fax Compose form remote code execution | 7.8CNA v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-26917 | Microsoft Windows Fax Compose form remote code execution | 7.8CNA v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-26916 | Microsoft Windows Fax Compose form remote code execution | 7.8CNA v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-26915 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 3.6% | 2022-04-15 | Fix |
| CVE-2022-26914 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26911 | Skype for Business information disclosure | 6.5CNA v3.1 | 3.6% | 2022-04-15 | Fix |
| CVE-2022-26910 | Microsoft Skype for Business and Lync spoofing | 5.3CNA v3.1 | 2.5% | 2022-04-15 | Fix |
| CVE-2022-26907 | Microsoft Azure SDK for .NET information disclosure | 5.3CNA v3.1 | 2.3% | 2022-04-15 | Fix |
| CVE-2022-26904 | Microsoft Windows User Profile service privilege escalation | 7.0CNA v3.1 | 16.9% | 2022-04-15 | KEVExploit codeFix |
| CVE-2022-26903 | Microsoft Windows Graphics component remote code execution | 7.8CNA v3.1 | 2.7% | 2022-04-15 | Fix |
| CVE-2022-26901 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.5% | 2022-04-15 | Fix |
| CVE-2022-26898 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.2% | 2022-04-15 | Fix |
| CVE-2022-26897 | Microsoft Azure Site Recovery information disclosure | 4.9CNA v3.1 | 2.5% | 2022-04-15 | Fix |
| CVE-2022-26896 | Microsoft Azure Site Recovery information disclosure | 4.9CNA v3.1 | 2.5% | 2022-04-15 | Fix |
| CVE-2022-26832 | NET Framework denial of service | 7.5CNA v3.1 | 3.6% | 2022-04-15 | Fix |
| CVE-2022-26831 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service | 7.5CNA v3.1 | 3.3% | 2022-04-15 | Fix |
| CVE-2022-26830 | Microsoft Windows DiskUsage.exe remote code execution | 7.5CNA v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2022-26829 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-26828 | Microsoft Windows Bluetooth driver elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-26827 | Microsoft Windows File Server Resource Management service elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-26826 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 4.0% | 2022-04-15 | Fix |
| CVE-2022-26825 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.6% | 2022-04-15 | Fix |
| CVE-2022-26824 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.5% | 2022-04-15 | Fix |
| CVE-2022-26823 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.5% | 2022-04-15 | Fix |
| CVE-2022-26822 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-26821 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-26820 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-26819 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-26818 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 2.3% | 2022-04-15 | Fix |
| CVE-2022-26817 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2022-26816 | Microsoft Windows DNS server information disclosure | 6.5CNA v3.1 | 2.5% | 2022-04-15 | Fix |
| CVE-2022-26815 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.8% | 2022-04-15 | Fix |
| CVE-2022-26814 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2022-26813 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.8% | 2022-04-15 | Fix |
| CVE-2022-26812 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.8% | 2022-04-15 | Fix |
| CVE-2022-26811 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.6% | 2022-04-15 | Fix |
| CVE-2022-26810 | Microsoft Windows File Server Resource Management service elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-26809 | Microsoft Windows remote Procedure Call Runtime remote code execution | 9.8CNA v3.1 | 91.0% | 2022-04-15 | Exploit codeFix |
| CVE-2022-26808 | Microsoft Windows File Explorer elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-26807 | Microsoft Windows Work Folder service elevation of privilege | 7.0CNA v3.1 | 0.3% | 2022-04-15 | Fix |
| CVE-2022-26803 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-04-15 | Fix |
| CVE-2022-26802 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26801 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26798 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-04-15 | Fix |
| CVE-2022-26797 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-26796 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26795 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-26794 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-26793 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-26792 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26791 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26790 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-26789 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26788 | PowerShell elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-26787 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26786 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-26785 | Microsoft Windows Hyper-V Shared Virtual Hard Disks information disclosure | 6.5CNA v3.1 | 2.4% | 2022-04-15 | Fix |
| CVE-2022-26784 | Microsoft Windows Cluster Shared Volume (CSV) denial of service | 6.5CNA v3.1 | 2.4% | 2022-04-15 | Fix |
| CVE-2022-26783 | Microsoft Windows Hyper-V Shared Virtual Hard Disks information disclosure | 6.5CNA v3.1 | 2.8% | 2022-04-15 | Fix |
| CVE-2022-26651 | Digium Certified Asterisk SQL injection | 9.8v3.1 | 7.0% | 2022-04-15 | Fix |
| CVE-2022-26594 | Liferay Portal and Liferay DXP allows arbitrary injection via form field | 6.1v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-26499 | Digium asterisk An server-side request forgery | 9.1v3.1 | 7.7% | 2022-04-15 | Fix |
| CVE-2022-26498 | Digium asterisk resource exhaustion | 7.5v3.1 | 16.4% | 2022-04-15 | Fix |
| CVE-2022-26034 | Yokogawa Electric CENTUM VP series with VP6E5000 installed and B/M9000 VP improper authentication | 9.1v3.1 | 1.0% | 2022-04-15 | Fix |
| CVE-2022-24857 | Multi factor authentication bypass in django-mfa3 | 7.3CNA v3.1 | 1.2% | 2022-04-15 | Fix |
| CVE-2022-24851 | Stored XSS and path traversal in LDAPAccountManager/lam | 8.1CNA v3.1 | 1.1% | 2022-04-15 | Fix |
| CVE-2022-24550 | Microsoft Windows Telephony Server elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-04-15 | Fix |
| CVE-2022-24549 | Microsoft Windows AppX Package Manager elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-24548 | Microsoft Defender denial of service | 5.5CNA v3.1 | 3.0% | 2022-04-15 | Fix |
| CVE-2022-24547 | Microsoft Windows Digital Media Receiver elevation of privilege | 7.8CNA v3.1 | 6.0% | 2022-04-15 | Fix |
| CVE-2022-24546 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-24545 | Microsoft Windows Kerberos remote code execution | 8.1CNA v3.1 | 2.2% | 2022-04-15 | Fix |
| CVE-2022-24544 | Microsoft Windows Kerberos elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-24543 | Microsoft Windows Upgrade Assistant remote code execution | 7.8CNA v3.1 | 2.5% | 2022-04-15 | Fix |
| CVE-2022-24542 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 9.2% | 2022-04-15 | Fix |
| CVE-2022-24541 | Microsoft Windows Server service remote code execution | 8.8CNA v3.1 | 3.0% | 2022-04-15 | Fix |
| CVE-2022-24540 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-24539 | Microsoft Windows Hyper-V Shared Virtual Hard Disks information disclosure | 8.1CNA v3.1 | 3.0% | 2022-04-15 | Fix |
| CVE-2022-24538 | Microsoft Windows Cluster Shared Volume (CSV) denial of service | 6.5CNA v3.1 | 2.4% | 2022-04-15 | Fix |
| CVE-2022-24537 | Microsoft Windows Hyper-V remote code execution | 7.8CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-24536 | Microsoft Windows DNS server remote code execution | 7.2CNA v3.1 | 3.8% | 2022-04-15 | Fix |
| CVE-2022-24534 | Microsoft Windows win32 Stream Enumeration remote code execution | 7.5CNA v3.1 | 1.9% | 2022-04-15 | Fix |
| CVE-2022-24533 | Microsoft Windows remote Desktop protocol remote code execution | 8.0CNA v3.1 | 5.6% | 2022-04-15 | Fix |
| CVE-2022-24532 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.7% | 2022-04-15 | Fix |
| CVE-2022-24530 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-24528 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.6% | 2022-04-15 | Fix |
| CVE-2022-24527 | Microsoft Endpoint Configuration Manager elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-24521 | Microsoft Windows CLFS driver privilege escalation | 7.8CNA v3.1 | 7.1% | 2022-04-15 | KEVExploit codeFix |
| CVE-2022-24513 | Visual Studio elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-24500 | Microsoft Windows SMB remote code execution | 8.8CNA v3.1 | 38.0% | 2022-04-15 | Exploit codeFix |
| CVE-2022-24499 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-04-15 | Fix |
| CVE-2022-24498 | Microsoft Windows iSCSI Target service information disclosure | 6.5CNA v3.1 | 2.6% | 2022-04-15 | Fix |
| CVE-2022-24497 | Microsoft Windows Network File System remote code execution | 9.8CNA v3.1 | 34.8% | 2022-04-15 | Fix |
| CVE-2022-24496 | Microsoft Windows Local Security Authority (LSA) elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-24495 | Microsoft Windows Direct Show remote code execution | 7.0CNA v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-24494 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.8CNA v3.1 | 1.9% | 2022-04-15 | Exploit codeFix |
| CVE-2022-24493 | Microsoft Local Security Authority (LSA) server information disclosure | 5.5CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-24492 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 3.1% | 2022-04-15 | Fix |
| CVE-2022-24491 | Microsoft Windows Network File System remote code execution | 9.8CNA v3.1 | 33.5% | 2022-04-15 | Fix |
| CVE-2022-24490 | Microsoft Windows Hyper-V Shared Virtual Hard Disks information disclosure | 8.1CNA v3.1 | 3.3% | 2022-04-15 | Fix |
| CVE-2022-24489 | Microsoft Windows Cluster Client Failover (CCF) elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-24488 | Microsoft Windows Desktop Bridge elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-24487 | Microsoft Windows Local Security Authority subsystem Service (LSASS) remote code execution | 8.8CNA v3.1 | 2.2% | 2022-04-15 | Fix |
| CVE-2022-24486 | Microsoft Windows Kerberos elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-24485 | Microsoft Windows win32 file enumeration remote code execution | 7.5CNA v3.1 | 1.7% | 2022-04-15 | Fix |
| CVE-2022-24484 | Microsoft Windows Cluster Shared Volume (CSV) denial of service | 5.5CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-24483 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 2.3% | 2022-04-15 | Exploit codeFix |
| CVE-2022-24482 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 0.3% | 2022-04-15 | Fix |
| CVE-2022-24481 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 16.6% | 2022-04-15 | Exploit codeFix |
| CVE-2022-24479 | Microsoft Windows Connected User Experiences and Telemetry elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-04-15 | Fix |
| CVE-2022-24474 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 6.5% | 2022-04-15 | Fix |
| CVE-2022-24473 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-24472 | Microsoft SharePoint server spoofing | 8.0CNA v3.1 | 2.0% | 2022-04-15 | Fix |
| CVE-2022-24279 | madlib-object-utils prototype pollution | 7.5v3.1 | 1.4% | 2022-04-15 | Fix |
| CVE-2022-23865 | Wecul Nyron SQL injection | 9.8v3.1 | 1.5% | 2022-04-15 | |
| CVE-2022-23292 | Microsoft Power BI spoofing | 3.7CNA v3.1 | 0.8% | 2022-04-15 | Fix |
| CVE-2022-23268 | Microsoft Windows Hyper-V denial of service | 6.5CNA v3.1 | 0.7% | 2022-04-15 | Fix |
| CVE-2022-23259 | Microsoft Dynamics 365 On-Premises remote code execution | 8.8CNA v3.1 | 2.9% | 2022-04-15 | Fix |
| CVE-2022-23257 | Microsoft Windows Hyper-V remote code execution | 8.8CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-22009 | Microsoft Windows Hyper-V remote code execution | 7.8CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-22008 | Microsoft Windows Hyper-V remote code execution | 7.8CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-21983 | Microsoft Windows win32 Stream Enumeration remote code execution | 7.5CNA v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-21159 | MZ Automation libiec61850 parseNormalModeParameters functionality denial of service | 7.5v3.1 | 1.8% | 2022-04-15 | |
| CVE-2022-20761 | Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point denial of service | 7.4CNA v3.1 | 0.4% | 2022-04-15 | Fix |
| CVE-2022-20758 | Cisco IOS XR Software Border Gateway Protocol Ethernet VPN denial of service | 6.8CNA v3.1 | 1.2% | 2022-04-15 | Fix |
| CVE-2022-20747 | Cisco SD-WAN vManage software information disclosure | 6.5CNA v3.1 | 0.9% | 2022-04-15 | Fix |
| CVE-2022-20739 | Cisco SD-WAN vManage software privilege escalation | 7.3CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-20735 | Cisco SD-WAN vManage software cross-site request forgery | 6.5CNA v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-20731 | Cisco Catalyst Digital Building Series Switches boot process denial of service | 4.6CNA v3.1 | 0.2% | 2022-04-15 | Fix |
| CVE-2022-20727 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 1.1% | 2022-04-15 | Fix |
| CVE-2022-20726 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 1.1% | 2022-04-15 | Fix |
| CVE-2022-20725 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-20724 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-20723 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 2.1% | 2022-04-15 | Fix |
| CVE-2022-20722 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-20721 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-20720 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2022-20719 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 2.7% | 2022-04-15 | Fix |
| CVE-2022-20718 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 2.4% | 2022-04-15 | Fix |
| CVE-2022-20717 | Cisco SD-WAN vEdge Routers denial of service | 5.5CNA v3.0 | 0.2% | 2022-04-15 | Fix |
| CVE-2022-20716 | Cisco SD-WAN Solution improper access control | 7.8CNA v3.1 | 0.2% | 2022-04-15 | Fix |
| CVE-2022-20714 | Cisco IOS XR Software for ASR 9000 Series Routers Lightspeed-Plus Line Cards denial of service | 8.6CNA v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2022-20697 | Cisco IOS and IOS XE Software Web services denial of service | 8.6CNA v3.1 | 1.2% | 2022-04-15 | Fix |
| CVE-2022-20695 | Cisco Wireless LAN Controller Management interface authentication bypass | 10.0CNA v3.1 | 19.8% | 2022-04-15 | Fix |
| CVE-2022-20694 | Cisco IOS XE Software Border Gateway Protocol Resource Public Key Infrastructure denial of service | 6.8CNA v3.1 | 1.2% | 2022-04-15 | Fix |
| CVE-2022-20693 | Cisco IOS XE Software Web UI API injection | 4.7CNA v3.1 | 1.6% | 2022-04-15 | Fix |
| CVE-2022-20692 | Cisco IOS XE Software NETCONF over SSH denial of service | 7.7CNA v3.1 | 1.1% | 2022-04-15 | Fix |
| CVE-2022-20684 | Cisco IOS XE Wireless controller Software for the Catalyst 9000 Family SNMP Trap denial of service | 7.4CNA v3.1 | 0.5% | 2022-04-15 | Fix |
| CVE-2022-20683 | Cisco IOS XE Software Application Visibility and Control feature denial of service | 8.6CNA v3.1 | 1.5% | 2022-04-15 | Fix |
| CVE-2022-20682 | Cisco IOS XE Wireless controller Software for the Catalyst 9000 Family CAPWAP denial of service | 8.6CNA v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-20681 | Cisco IOS XE Software CLI privilege escalation | 7.8CNA v3.1 | 0.2% | 2022-04-15 | Fix |
| CVE-2022-20679 | Cisco IOS XE Software IPSec denial of service | 6.8CNA v3.1 | 1.3% | 2022-04-15 | Fix |
| CVE-2022-20678 | Cisco IOS XE Software AppNav-XE denial of service | 8.6CNA v3.1 | 1.0% | 2022-04-15 | Fix |
| CVE-2022-20677 | Cisco IOx Application Hosting Environment vulnerabilities | 5.5CNA v3.1 | 0.6% | 2022-04-15 | Fix |
| CVE-2022-20676 | Cisco IOS XE Software tool Command Language privilege escalation | 5.1CNA v3.1 | 0.3% | 2022-04-15 | Fix |
| CVE-2022-20661 | Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches vulnerabilities | 4.6CNA v3.1 | 0.2% | 2022-04-15 | Fix |
| CVE-2022-20622 | Cisco Embedded Wireless controller with Catalyst Access Points IP Flood denial of service | 8.6CNA v3.1 | 1.4% | 2022-04-15 | Fix |
| CVE-2022-1365 | Exposure of private personal information to an unauthorized actor in lquixada/Cross-fetch | 6.5NVD v3.1 | 1.2% | 2022-04-15 | Fix |
| CVE-2022-1231 | XSS via Embedded SVG in SVG Diagram Format in PlantUML/PlantUML | 6.1NVD v3.1 | 2.0% | 2022-04-15 | Fix |
| CVE-2022-28711 | ArduPilot APWeb cgi.c unescape functionality memory corruption | 9.8v3.1 | 1.7% | 2022-04-14 | |
| CVE-2022-27848 | Modern Events Calendar Lite WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-04-14 | Fix |
| CVE-2022-27817 | Waycrate Swhkd exposure of resource to wrong sphere in Simple-Wayland-HotKey-Daemon | 4.4v3.1 | 0.4% | 2022-04-14 | Fix |
| CVE-2022-27814 | Waycrate Swhkd exposure of resource to wrong sphere in Simple-Wayland-HotKey-Daemon | 3.3v3.1 | 0.4% | 2022-04-14 | Fix |
| CVE-2022-27457 | MariaDB use-after-free | 7.5v3.1 | 1.7% | 2022-04-14 | Fix |
| CVE-2022-27456 | MariaDB use-after-free | 7.5v3.1 | 2.1% | 2022-04-14 | Fix |
| CVE-2022-27455 | MariaDB use-after-free | 7.5v3.1 | 1.6% | 2022-04-14 | Fix |
| CVE-2022-27452 | MariaDB Server item_cmpfunc.cc vulnerability | 7.5v3.1 | 2.2% | 2022-04-14 | Fix |
| CVE-2022-27451 | MariaDB Server field_conv.cc vulnerability | 7.5v3.1 | 1.7% | 2022-04-14 | Fix |
| CVE-2022-27449 | MariaDB Server item_func.cc vulnerability | 7.5v3.1 | 2.2% | 2022-04-14 | Fix |
| CVE-2022-27448 | MariaDB There is an reachable assertion | 7.5v3.1 | 2.2% | 2022-04-14 | Fix |
| CVE-2022-27447 | MariaDB use-after-free | 7.5v3.1 | 2.2% | 2022-04-14 | Fix |
| CVE-2022-27446 | MariaDB Server item_cmpfunc.h vulnerability | 7.5v3.1 | 1.6% | 2022-04-14 | Fix |
| CVE-2022-27445 | MariaDB Server sql_window.cc vulnerability | 7.5v3.1 | 2.2% | 2022-04-14 | Fix |
| CVE-2022-27444 | MariaDB Server item_subselect.cc vulnerability | 7.5v3.1 | 1.5% | 2022-04-14 | Fix |
| CVE-2022-27008 | F5 Njs buffer overflow | 7.5v3.1 | 1.7% | 2022-04-14 | Fix |
| CVE-2022-27007 | F5 Njs use-after-free | 9.8v3.1 | 1.6% | 2022-04-14 | Fix |
| CVE-2022-26507 | AT&T Xmill heap-based buffer overflow | 9.8v3.1 | 2.3% | 2022-04-14 | Fix |
| CVE-2022-25166 | Amazon AWS Client VPN information disclosure | 5.0v3.1 | 1.4% | 2022-04-14 | |
| CVE-2022-25165 | Amazon AWS Client VPN time-of-check time-of-use race condition | 7.0v3.1 | 0.5% | 2022-04-14 | |
| CVE-2022-24855 | XSS vulnerability in Metabase | 8.7CNA v3.1 | 0.7% | 2022-04-14 | Fix |
| CVE-2022-24854 | Database bypassing any permissions in Metabase via SQlite attach | 8.0CNA v3.1 | 1.1% | 2022-04-14 | Fix |
| CVE-2022-24853 | File system exposure in Metabase | 5.9CNA v3.1 | 2.5% | 2022-04-14 | Exploit codeFix |
| CVE-2022-24850 | Category group permissions leaked in Discourse | 5.3CNA v3.1 | 0.7% | 2022-04-14 | Fix |
| CVE-2022-24849 | Aiko-IT-Systems DisCatSharp contact to DisCatSharp-owned server using authenticated client | 6.5CNA v3.1 | 0.9% | 2022-04-14 | Fix |
| CVE-2022-24846 | Unchecked JNDI lookups in GeoWebCache | 9.1CNA v3.1 | 1.3% | 2022-04-14 | Fix |
| CVE-2022-24824 | Anonymous user cache poisoning in discourse | 5.3CNA v3.1 | 1.0% | 2022-04-14 | Fix |
| CVE-2022-22968 | Improper handling of case sensitivity in Spring Framework | 5.3NVD v3.1 | 5.7% | 2022-04-14 | Exploit codeFix |
| CVE-2022-22966 | VMware Cloud Director remote code execution | 7.2v3.1 | 6.4% | 2022-04-14 | Fix |
| CVE-2022-22391 | IBM Aspera High-Speed Transfer information disclosure | 4.3CNA v3.0 | 0.7% | 2022-04-14 | Fix |
| CVE-2022-22198 | Juniper Networks Junos OS SIP ALG uninitialized pointer access | 7.5CNA v3.1 | 0.9% | 2022-04-14 | Fix |
| CVE-2022-22197 | Juniper Networks Junos OS Routing protocol daemon operation on a released resource | 7.5CNA v3.1 | 1.1% | 2022-04-14 | Fix |
| CVE-2022-22196 | Juniper Networks Junos OS Routing protocol daemon improper check for exceptional conditions | 6.5CNA v3.1 | 0.4% | 2022-04-14 | Fix |
| CVE-2022-22195 | Junos OS Evolved: Specific packets reaching the RE lead to a counter overflow and eventually a crash | 7.5CNA v3.1 | 1.1% | 2022-04-14 | Fix |
| CVE-2022-22194 | Junos OS Evolved: PTX series: An attacker sending a crafted GRE packet will cause the PFE to restart | 7.5CNA v3.1 | 1.0% | 2022-04-14 | Fix |
| CVE-2022-22193 | Juniper Networks Junos OS Routing protocol daemon improper handling of unexpected data types | 5.5CNA v3.1 | 0.2% | 2022-04-14 | Fix |
| CVE-2022-22191 | Junos OS: EX4300: PFE denial of service (DoS) upon receipt of a flood of specific ARP traffic | 6.5CNA v3.1 | 0.4% | 2022-04-14 | Fix |
| CVE-2022-22190 | Paragon Active Assurance Control Center: Information disclosure vulnerability in crafted URL | 7.4CNA v3.1 | 1.0% | 2022-04-14 | Fix |
| CVE-2022-22189 | Juniper Networks Contrail Service Orchestration management interface vulnerability | 7.3CNA v3.1 | 0.2% | 2022-04-14 | Fix |
| CVE-2022-22188 | Juniper Networks Junos OS packet forwarding engine heap-based buffer overflow | 7.5CNA v3.1 | 1.5% | 2022-04-14 | Fix |
| CVE-2022-22187 | JIMS: Local privilege escalation vulnerability via repair functionality | 7.8CNA v3.1 | 0.3% | 2022-04-14 | Fix |
| CVE-2022-22186 | Juniper Networks Junos OS Due to an improper initialization | 7.2CNA v3.1 | 0.6% | 2022-04-14 | Fix |
| CVE-2022-22185 | Juniper Networks Junos OS improper check for exceptional conditions | 7.5CNA v3.1 | 1.0% | 2022-04-14 | Fix |
| CVE-2022-22183 | Junos OS Evolved: A remote attacker may cause a CPU denial of service | 7.5CNA v3.1 | 1.0% | 2022-04-14 | Fix |
| CVE-2022-22182 | Junos OS: A XSS vulnerability allows an attacker to execute commands on a target J-Web session | 8.8CNA v3.1 | 0.7% | 2022-04-14 | Fix |
| CVE-2022-22181 | Junos OS: J-Web can be compromised through reflected XSS attacks | 8.0CNA v3.1 | 0.7% | 2022-04-14 | Fix |
| CVE-2022-22149 | lansweeper HelpdeskEmailActions.aspx functionality SQL injection | 8.8NVD v3.1 | 72.6% | 2022-04-14 | Fix |
| CVE-2022-21234 | lansweeper EchoAssets.aspx functionality SQL injection | 8.8NVD v3.1 | 72.6% | 2022-04-14 | Fix |
| CVE-2022-21210 | lansweeper AssetActions.aspx functionality SQL injection | 8.8v3.1 | 71.2% | 2022-04-14 | Fix |
| CVE-2022-21154 | Leadtools fltSaveCMP functionality integer overflow | 7.8v3.1 | 1.0% | 2022-04-14 | |
| CVE-2022-21145 | lansweeper WebUserActions.aspx functionality stored cross-site scripting | 4.8NVD v3.1 | 77.8% | 2022-04-14 | Fix |
| CVE-2022-1351 | Stored XSS in Tooltip in pimcore/pimcore | 5.4v3.1 | 0.8% | 2022-04-14 | Fix |
| CVE-2022-1350 | GhostPCL gsmchunk.c chunk_free_object memory corruption | 7.8v3.1 | 0.8% | 2022-04-14 | Fix |
| CVE-2022-1328 | mutt uudecoder buffer overflow | 4.3CNA v3.1 | 1.7% | 2022-04-14 | Fix |
| CVE-2022-1304 | E2fsprogs out-of-bounds read | 7.8NVD v3.1 | 1.5% | 2022-04-14 | Fix |
| CVE-2022-1279 | ebics-java-client EBICS message encryption missing cryptographic step | 7.5v3.1 | 0.4% | 2022-04-14 | Fix |
| CVE-2022-1258 | SQL injection vulnerability in McAfee Agent's ePO extension | 8.4CNA v3.1 | 1.0% | 2022-04-14 | Fix |
| CVE-2022-1257 | Improper verification of cryptographic signature by McAfee Agent | 6.1CNA v3.1 | 0.6% | 2022-04-14 | Exploit codeFix |
| CVE-2022-1256 | Improper privilege management in McAfee Agent for Windows | 7.8CNA v3.1 | 0.3% | 2022-04-14 | Fix |
| CVE-2022-29156 | Linux kernel double free | 7.8v3.1 | 0.4% | 2022-04-13 | Fix |
| CVE-2022-28052 | Roothub file cn/ path traversal | 8.0v3.1 | 2.4% | 2022-04-13 | |
| CVE-2022-27847 | Yoo Slider WordPress plugin cross-site request forgery vulnerability leading to Template import | 4.3v3.1 | 0.4% | 2022-04-13 | Fix |
| CVE-2022-27846 | Yoo Slider WordPress plugin cross-site request forgery | 4.3v3.1 | 0.4% | 2022-04-13 | Fix |
| CVE-2022-27524 | Autodesk Trueview An out-of-bounds read | 7.1v3.1 | 1.4% | 2022-04-13 | Fix |
| CVE-2022-27523 | Autodesk Trueview buffer over-read | 7.1v3.1 | 1.4% | 2022-04-13 | Fix |
| CVE-2022-27506 | Citirx Citrix SD-WAN hard-coded credentials | 2.7v3.1 | 0.6% | 2022-04-13 | Fix |
| CVE-2022-27505 | Citirx Citrix SD-WAN cross-site scripting | 6.1v3.1 | 0.5% | 2022-04-13 | Fix |
| CVE-2022-27503 | Citrix StoreFront cross-site scripting | 6.1v3.1 | 0.5% | 2022-04-13 | Fix |
| CVE-2022-27479 | Apache Superset SQL injection vulnerability in chart data API | 9.8v3.1 | 2.9% | 2022-04-13 | Fix |
| CVE-2022-27475 | Hotel Management System tramyardg hotel-mgmt-system cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-13 | |
| CVE-2022-27256 | Hubzilla Redbasic theme local file inclusion | 6.1v3.1 | 1.5% | 2022-04-13 | Fix |
| CVE-2022-26643 | An issue in EasyIO CPT Graphics v0.8 allows attackers to discover valid users in the application. | 5.3v3.1 | 0.9% | 2022-04-13 | |
| CVE-2022-26589 | pluck-cms Pluck A cross-site request forgery | 6.5v3.1 | 0.5% | 2022-04-13 | |
| CVE-2022-26151 | Citrix Xenmobile Server command injection | 7.2v3.1 | 7.6% | 2022-04-13 | Fix |
| CVE-2022-26144 | mantisbt cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-13 | Fix |
| CVE-2022-25797 | Autodesk Trueview out-of-bounds write | 7.8v3.1 | 1.1% | 2022-04-13 | Fix |
| CVE-2022-25795 | Autodesk AutoCAD memory corruption | 7.8v3.1 | 1.8% | 2022-04-13 | Fix |
| CVE-2022-24847 | Improper input validation in GeoServer | 7.2CNA v3.1 | 1.6% | 2022-04-13 | Fix |
| CVE-2022-24845 | Integer bounds error in Vyper | 8.8CNA v3.1 | 1.4% | 2022-04-13 | Fix |
| CVE-2022-24844 | SQL injection in github.com/flipped-aurora/gin-vue-admin | 8.1CNA v3.1 | 1.5% | 2022-04-13 | Fix |
| CVE-2022-24843 | Path traversal in github.com/flipped-aurora/gin-vue-admin | 7.5CNA v3.1 | 1.5% | 2022-04-13 | Fix |
| CVE-2022-24828 | Missing input validation can lead to command execution in composer | 8.3CNA v3.1 | 1.9% | 2022-04-13 | Fix |
| CVE-2022-24818 | Unchecked JNDI lookups in GeoTools | 8.2CNA v3.1 | 2.4% | 2022-04-13 | Exploit codeFix |
| CVE-2022-24816 | OSGeo GeoServer JAI-EXT code injection | 10.0CNA v3.1 | 99.9% | 2022-04-13 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-24788 | Buffer overflow in Vyper | 7.1CNA v3.1 | 1.0% | 2022-04-13 | Fix |
| CVE-2022-24308 | Automox information disclosure | 5.5v3.1 | 0.2% | 2022-04-13 | Fix |
| CVE-2022-22961 | VMware Workspace ONE Access, Identity Manager and vRealize Automation information disclosure | 5.3v3.1 | 0.8% | 2022-04-13 | Fix |
| CVE-2022-22960 | VMware Multiple Products privilege escalation | 7.8v3.1 | 35.5% | 2022-04-13 | KEVExploit codeKCVFix |
| CVE-2022-22959 | VMware Workspace ONE Access, Identity Manager and vRealize Automation cross-site request forgery | 4.3v3.1 | 0.5% | 2022-04-13 | Fix |
| CVE-2022-22958 | VMware Workspace ONE Access JDBC connector deserialization of untrusted data | 7.2v3.1 | 3.0% | 2022-04-13 | Fix |
| CVE-2022-22957 | VMware Workspace ONE Access JDBC URI handling deserialization of untrusted data | 7.2v3.1 | 23.1% | 2022-04-13 | MetasploitExploit codeKCVFix |
| CVE-2022-22956 | VMware Workspace ONE Access improper authentication | 9.8v3.1 | 49.5% | 2022-04-13 | NucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-22955 | VMware Workspace ONE Access authentication bypass | 9.8v3.1 | 8.1% | 2022-04-13 | Fix |
| CVE-2022-22279 | SonicWall SRA/SMA100 relative path traversal | 4.9v3.1 | 1.1% | 2022-04-13 | Fix |
| CVE-2022-1347 | causefx/organizr "Username" & "Email" input fields stored cross-site scripting | 8.4NVD v3.1 | 1.2% | 2022-04-13 | Fix |
| CVE-2022-1346 | Multiple stored XSS in causefx/Organizr | 9.0v3.1 | 1.0% | 2022-04-13 | Fix |
| CVE-2022-1345 | Stored XSS viva .svg file upload in causefx/Organizr | 9.0v3.1 | 1.0% | 2022-04-13 | Fix |
| CVE-2022-1344 | Stored XSS due to no sanitization in the filename in causefx/Organizr | 9.0v3.1 | 1.0% | 2022-04-13 | Fix |
| CVE-2022-1339 | SQL injection in ElementController.php in pimcore/pimcore | 7.5v3.1 | 5.5% | 2022-04-13 | Fix |
| CVE-2022-1337 | OOM DoS in Mattermost image proxy | 4.3CNA v3.1 | 0.9% | 2022-04-13 | Fix |
| CVE-2022-1333 | Mattermost Playbooks webhook requests resource exhaustion | 3.5CNA v3.1 | 0.7% | 2022-04-13 | |
| CVE-2022-1332 | Improper privilege management in Mattermost | 4.3CNA v3.1 | 0.7% | 2022-04-13 | Fix |
| CVE-2022-1280 | kernel use-after-free | 6.3NVD v3.1 | 0.3% | 2022-04-13 | Fix |
| CVE-2022-0221 | Schneider Electric SCADAPack Workbench XML external entity injection | 5.5CNA v3.1 | 1.0% | 2022-04-13 | Fix |
| CVE-2022-0023 | PAN-OS: Denial of service (DoS) Vulnerability in DNS Proxy | 5.9CNA v3.1 | 0.7% | 2022-04-13 | Fix |
| CVE-2022-29080 | Command injection in Npm-dependency-versions | 9.8v3.1 | 2.2% | 2022-04-12 | |
| CVE-2022-29052 | Private key stored in plain text by Jenkins Google Compute Engine Plugin | 4.3v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29051 | Missing permission checks in Jenkins Publish Over FTP Plugin | 4.3v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-29050 | CSRF vulnerability in Jenkins Publish Over FTP Plugin | 8.8v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-29049 | Promotion names in Jenkins Promoted Builds Plugin are not validated when using Job DSL | 5.4v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29048 | CSRF vulnerability in Jenkins Subversion Plugin | 4.3v3.1 | 1.9% | 2022-04-12 | Fix |
| CVE-2022-29047 | Jenkins Pipeline: Shared Groovy Libraries Plugin incorrect authorization | 5.3v3.1 | 1.2% | 2022-04-12 | Fix |
| CVE-2022-29046 | Stored cross-site scripting vulnerability in Jenkins Subversion Plugin | 5.4v3.1 | 2.5% | 2022-04-12 | Fix |
| CVE-2022-29045 | Stored cross-site scripting vulnerability in Jenkins Promoted Builds Plugin | 5.4v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29044 | Stored cross-site scripting in Jenkins Node And Label Parameter Plugin | 5.4v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-29043 | Stored cross-site scripting in Jenkins Mask Passwords Plugin | 5.4v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29042 | Stored cross-site scripting vulnerability in Jenkins Job Generator Plugin | 5.4v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29041 | Stored cross-site scripting vulnerability in Jenkins Jira Plugin | 5.4v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-29040 | Stored XSS vulnerability in Jenkins Git Parameter Plugin | 5.4v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29039 | Stored cross-site scripting vulnerability in Jenkins Gerrit Trigger Plugin | 5.4v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-29038 | Stored cross-site scripting vulnerabilities in Jenkins Extended Choice Parameter Plugin | 5.4v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-29037 | Stored XSS in Jenkins Cvs Plugin | 5.4v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-29036 | Cross-site scripting in Jenkins Credentials Plugin | 5.4v3.1 | 71.9% | 2022-04-12 | Fix |
| CVE-2022-28795 | Avira Password Manager browser extension vulnerability | 6.5v3.1 | 1.0% | 2022-04-12 | |
| CVE-2022-28773 | SAP Web Dispatcher Due to an uncontrolled recursion | 7.5v3.1 | 1.5% | 2022-04-12 | Fix |
| CVE-2022-28772 | SAP Web Dispatcher stack-based buffer overflow | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-28770 | SAPUI5 (vbm library) cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-28663 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.1% | 2022-04-12 | Fix |
| CVE-2022-28662 | Siemens Simcenter Femap out-of-bounds write | 6.5v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-28661 | Siemens Simcenter Femap out-of-bounds read | 8.8v3.1 | 1.2% | 2022-04-12 | Fix |
| CVE-2022-28397 | Arbitrary file upload in Ghost | 9.8v3.1 | 3.5% | 2022-04-12 | Fix |
| CVE-2022-28347 | SQL injection in Django | 9.8v3.1 | 2.9% | 2022-04-12 | Fix |
| CVE-2022-28346 | SQL injection in Django | 9.8v3.1 | 18.5% | 2022-04-12 | Exploit codeFix |
| CVE-2022-28329 | Siemens SCALANCE W1788-1 M12 denial of service | 6.5v3.1 | 0.4% | 2022-04-12 | Fix |
| CVE-2022-28328 | Siemens SCALANCE W1788-1 M12 denial of service | 7.5v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-28216 | SAP BusinessObjects Business Intelligence Platform (BI Workspace) cross-site scripting | 6.1v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-28215 | SAP NetWeaver (ABAP Server) and ABAP Platform open redirect | 4.7v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-28213 | SAP BusinessObjects Business Intelligence Platform denial of service | 8.1v3.1 | 12.5% | 2022-04-12 | Exploit codeFix |
| CVE-2022-28036 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 1.4% | 2022-04-12 | |
| CVE-2022-28035 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 1.4% | 2022-04-12 | |
| CVE-2022-28034 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 1.4% | 2022-04-12 | |
| CVE-2022-28033 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 5.4% | 2022-04-12 | Nuclei |
| CVE-2022-28032 | Thedigitalcraft Atom CMS SQL injection | 9.8v3.1 | 5.9% | 2022-04-12 | Nuclei |
| CVE-2022-27952 | Unrestricted upload of file with dangerous type in Payload | 9.8v3.1 | 2.3% | 2022-04-12 | Fix |
| CVE-2022-27671 | SAP BusinessObjects Business Intelligence Platform URL cross-site request forgery | 6.5v3.1 | 1.3% | 2022-04-12 | Fix |
| CVE-2022-27670 | SAP SQL Anywhere Server resource injection | 6.5v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-27669 | SAP NetWeaver Application Server for Java missing authorization | 7.5v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-27667 | SAP BusinessObjects Business Intelligence Platform information disclosure | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-27657 | SAP Focused Run (Simple Diagnostics Agent) path traversal | 2.7v3.1 | 2.5% | 2022-04-12 | Fix |
| CVE-2022-27655 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.1% | 2022-04-12 | Fix |
| CVE-2022-27654 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.1% | 2022-04-12 | Fix |
| CVE-2022-27481 | Siemens SCALANCE W1788-1 M12 race condition | 5.3v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-27480 | Siemens SICAM A8000 CP-8031 missing authorization | 7.5v3.1 | 2.5% | 2022-04-12 | Fix |
| CVE-2022-27473 | Roothub Topics Searching feature SQL injection | 9.8v3.1 | 1.3% | 2022-04-12 | |
| CVE-2022-27472 | Roothub Topics Counting feature SQL injection | 9.8v3.1 | 1.3% | 2022-04-12 | |
| CVE-2022-27419 | rtl_433 out-of-bounds write | 5.5v3.1 | 0.6% | 2022-04-12 | Fix |
| CVE-2022-27418 | Broadcom tcpreplay out-of-bounds write | 7.8v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-27416 | Broadcom tcpreplay double free | 7.8v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-27387 | MariaDB buffer overflow | 7.5v3.1 | 2.5% | 2022-04-12 | Fix |
| CVE-2022-27386 | MariaDB SQL injection | 7.5v3.1 | 2.3% | 2022-04-12 | Fix |
| CVE-2022-27385 | MariaDB SQL injection | 7.5v3.1 | 1.6% | 2022-04-12 | Fix |
| CVE-2022-27384 | MariaDB SQL injection | 7.5v3.1 | 2.2% | 2022-04-12 | Fix |
| CVE-2022-27383 | MariaDB use-after-free | 7.5v3.1 | 2.1% | 2022-04-12 | Fix |
| CVE-2022-27382 | MariaDB reachable assertion | 7.5v3.1 | 1.5% | 2022-04-12 | Fix |
| CVE-2022-27381 | MariaDB SQL injection | 7.5v3.1 | 2.2% | 2022-04-12 | Fix |
| CVE-2022-27380 | MariaDB SQL injection | 7.5v3.1 | 2.3% | 2022-04-12 | Fix |
| CVE-2022-27379 | MariaDB SQL injection | 7.5v3.1 | 2.3% | 2022-04-12 | Fix |
| CVE-2022-27378 | MariaDB SQL injection | 7.5v3.1 | 2.4% | 2022-04-12 | Fix |
| CVE-2022-27377 | MariaDB use-after-free | 7.5v3.1 | 2.3% | 2022-04-12 | Fix |
| CVE-2022-27376 | MariaDB use-after-free | 7.5v3.1 | 2.2% | 2022-04-12 | Fix |
| CVE-2022-27263 | Unrestricted upload of file with dangerous type in Strapi | 9.8v3.1 | 3.2% | 2022-04-12 | |
| CVE-2022-27262 | Sailsjs skipper file upload module arbitrary file upload | 9.8v3.1 | 2.1% | 2022-04-12 | |
| CVE-2022-27261 | Express-FileUpload arbitrary file overwrite | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-27260 | Unrestricted upload of file with dangerous type in ButterCMS | 9.8v3.1 | 3.1% | 2022-04-12 | Fix |
| CVE-2022-27241 | Siemens Mendix Applications using Mendix 7 information disclosure | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-27194 | Siemens SIMATIC PCS neo (Administration Console) denial of service | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-27165 | CSZ CMS SQL injection | 9.8v3.1 | 1.1% | 2022-04-12 | |
| CVE-2022-27164 | CSZ CMS SQL injection | 9.8v3.1 | 1.1% | 2022-04-12 | |
| CVE-2022-27163 | CSZ CMS SQL injection | 9.8v3.1 | 1.2% | 2022-04-12 | |
| CVE-2022-27162 | CSZ CMS SQL injection | 9.8v3.1 | 1.1% | 2022-04-12 | |
| CVE-2022-27161 | CSZ CMS SQL injection | 9.8v3.1 | 1.3% | 2022-04-12 | |
| CVE-2022-27140 | express-fileupload file upload module arbitrary file upload | 9.8v3.1 | 2.9% | 2022-04-12 | Fix |
| CVE-2022-27139 | Arbitrary file upload in Ghost | 9.8v3.1 | 4.0% | 2022-04-12 | Fix |
| CVE-2022-26380 | Siemens SCALANCE X302-7 EEC (230V) out-of-bounds read | 7.5v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-26335 | Siemens SCALANCE X302-7 EEC (230V) buffer overflow | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-26334 | Siemens SCALANCE X302-7 EEC (230V) buffer overflow | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-26109 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-26108 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-26107 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-26106 | SAP 3D Visual Enterprise Viewer crash | 6.5v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-26105 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-25756 | Siemens SCALANCE X302-7 EEC (230V) cross-site scripting | 6.1v3.1 | 0.6% | 2022-04-12 | Fix |
| CVE-2022-25755 | Siemens SCALANCE X302-7 EEC (230V) improper access control | 7.5v3.1 | 1.3% | 2022-04-12 | Fix |
| CVE-2022-25754 | Siemens SCALANCE X302-7 EEC (230V) cross-site request forgery | 8.8v3.1 | 0.5% | 2022-04-12 | Fix |
| CVE-2022-25753 | Siemens SCALANCE X302-7 EEC (230V) stack-based buffer overflow | 8.8v3.1 | 1.7% | 2022-04-12 | Fix |
| CVE-2022-25752 | Siemens SCALANCE X302-7 EEC (230V) insufficient randomness | 9.8v3.1 | 1.5% | 2022-04-12 | Fix |
| CVE-2022-25751 | Siemens SCALANCE X302-7 EEC (230V) improper input validation | 7.5v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-25650 | Siemens Mendix Applications using Mendix 7 improper access control | 6.5v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-25622 | Siemens SIMATIC CFU DIQ denial of service | 5.3CNA v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-24842 | Improper privilege management in MinIO | 8.8CNA v3.1 | 2.1% | 2022-04-12 | Fix |
| CVE-2022-24812 | FGAC API Key privilege escalation in Grafana | 8.0CNA v3.1 | 2.4% | 2022-04-12 | Fix |
| CVE-2022-24767 | Microsoft Visual Studio 2017 uncontrolled search path | 7.8v3.1 | 1.5% | 2022-04-12 | Fix |
| CVE-2022-24765 | Uncontrolled search for the Git directory in Git for Windows | 6.0CNA v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-24413 | Dell PowerScale OneFS time-of-check time-of-use race condition | 4.4CNA v3.1 | 0.1% | 2022-04-12 | Fix |
| CVE-2022-24412 | Dell PowerScale OneFS denial of service | 7.5CNA v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-24411 | Dell PowerScale OneFS insecure temporary file | 7.8CNA v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-24383 | Fuji Electric Alpha5 Smart Loader out-of-bounds read | 7.8v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-24248 | Ritecms path traversal | 6.5v3.1 | 21.0% | 2022-04-12 | |
| CVE-2022-24247 | Ritecms path traversal | 6.5v3.1 | 4.2% | 2022-04-12 | |
| CVE-2022-24070 | Apache Subversion mod_dav_svn is vulnerable to memory corruption | 7.5v3.1 | 9.3% | 2022-04-12 | Fix |
| CVE-2022-23703 | HPE Nimble Storage arrays software update mechanism vulnerability | 7.5v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-23702 | HPE Superdome Flex Server firmware privilege escalation | 6.7v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-23450 | Siemens SIMATIC Energy Manager Basic deserialization of untrusted data | 9.8v3.1 | 35.8% | 2022-04-12 | Fix |
| CVE-2022-23449 | Siemens SIMATIC Energy Manager Basic uncontrolled search path | 7.3v3.1 | 0.3% | 2022-04-12 | Fix |
| CVE-2022-23448 | Siemens SIMATIC Energy Manager Basic incorrect permission assignment | 7.8v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-23163 | Dell PowerScale OneFS insecure temporary file | 4.7CNA v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-23161 | Dell PowerScale OneFS improper exception handling | 7.5CNA v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-23160 | Dell PowerScale OneFS improper handling of insufficient privileges | 5.4CNA v3.1 | 0.5% | 2022-04-12 | Fix |
| CVE-2022-23159 | Dell PowerScale OneFS memory leak | 4.8CNA v3.1 | 0.6% | 2022-04-12 | Fix |
| CVE-2022-22565 | Dell PowerScale OneFS improper authorization | 4.7CNA v3.1 | 0.5% | 2022-04-12 | Fix |
| CVE-2022-22562 | Dell PowerScale OneFS denial of service | 7.5CNA v3.1 | 0.9% | 2022-04-12 | Fix |
| CVE-2022-22561 | Dell PowerScale OneFS missing brute-force protection | 8.1CNA v3.1 | 1.4% | 2022-04-12 | Fix |
| CVE-2022-22560 | Dell PowerScale OneFS hard-coded credentials | 7.1CNA v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-22559 | Dell PowerScale OneFS weak cryptographic algorithm | 7.5CNA v3.1 | 0.6% | 2022-04-12 | Fix |
| CVE-2022-22550 | Dell PowerScale OneFS information disclosure | 6.7CNA v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-22549 | Dell PowerScale OneFS improper certificate validation | 7.5CNA v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-22541 | SAP BusinessObjects Business Intelligence Platform information disclosure | 6.5v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-21803 | nconf prototype pollution | 7.5v3.1 | 1.8% | 2022-04-12 | Fix |
| CVE-2022-21228 | Fuji Electric Alpha5 Smart Loader stack-based buffer overflow | 7.8v3.1 | 1.2% | 2022-04-12 | Fix |
| CVE-2022-21214 | Fuji Electric Alpha5 Smart Loader heap-based buffer overflow | 7.8v3.1 | 1.0% | 2022-04-12 | Fix |
| CVE-2022-21202 | Fuji Electric Alpha5 Smart Loader out-of-bounds read | 5.5v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-21168 | Fuji Electric Alpha5 uninitialized pointer access | 5.5v3.1 | 0.7% | 2022-04-12 | Fix |
| CVE-2022-21155 | Fernhill SCADA uncontrolled resource consumption | 7.5v3.1 | 1.1% | 2022-04-12 | Fix |
| CVE-2022-1330 | Stored XSS due to unsantized anchor URL in alvarotrigo/Fullpage.js | 5.4NVD v3.1 | 0.8% | 2022-04-12 | Fix |
| CVE-2022-1302 | Malformed Goose message in LibIEC61850 may result in a denial of service | 7.5v3.1 | 1.1% | 2022-04-12 | Fix |
| CVE-2022-0915 | Logitech Sync desktop application TOCTOU during installation leads to privelege escalation | 6.0CNA v3.1 | 0.2% | 2022-04-12 | Fix |
| CVE-2022-0878 | Combined Charging System HomePlug GreenPHY communication denial of service | 6.5v3.1 | 0.5% | 2022-04-12 | |
| CVE-2022-0436 | Path traversal in gruntjs/grunt | 5.5NVD v3.1 | 0.6% | 2022-04-12 | Fix |
| CVE-2022-0142 | Visual Form Builder WordPress plugin CSV injection | 9.8NVD v3.1 | 2.9% | 2022-04-12 | Fix |
| CVE-2022-0141 | Visual Form Builder WordPress plugin Entries Deletion/Restoration via CSRF | 8.1NVD v3.1 | 0.5% | 2022-04-12 | Fix |
| CVE-2022-0140 | Visual Form Builder WordPress plugin unauthenticated information disclosure | 5.3NVD v3.1 | 3.8% | 2022-04-12 | NucleiFix |
| CVE-2022-29035 | JetBrains Ktor insufficient randomness | 3.3CNA v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2022-28893 | Linux kernel use-after-free | 7.8v3.1 | 0.4% | 2022-04-11 | Fix |
| CVE-2022-28779 | Samsung Mobile Samsung Android USB Driver windows installer uncontrolled search path | 5.3CNA v3.1 | 0.3% | 2022-04-11 | Fix |
| CVE-2022-28778 | Samsung Mobile Samsung Security Supporter improper access control | 4.4CNA v3.1 | 0.2% | 2022-04-11 | Fix |
| CVE-2022-28777 | Samsung Mobile Samsung Members improper access control | 4.3CNA v3.1 | 0.2% | 2022-04-11 | Fix |
| CVE-2022-28776 | Samsung Mobile Galaxy Store improper access control | 5.9CNA v3.1 | 0.3% | 2022-04-11 | Fix |
| CVE-2022-28775 | Samsung Mobile Samsung Flow improper access control | 5.1CNA v3.1 | 0.3% | 2022-04-11 | Fix |
| CVE-2022-28544 | Samsung Mobile Galaxy Store unzip method of InstallAgentCommonHelper path traversal | 6.2CNA v3.1 | 0.9% | 2022-04-11 | Fix |
| CVE-2022-28543 | Samsung Mobile Samsung Flow path traversal | 4.0CNA v3.1 | 0.3% | 2022-04-11 | Fix |
| CVE-2022-28542 | Samsung Mobile Galaxy Store improper neutralization | 6.8CNA v3.1 | 0.3% | 2022-04-11 | Fix |
| CVE-2022-28541 | Samsung Mobile Samsung Update uncontrolled search path | 5.9CNA v3.1 | 0.4% | 2022-04-11 | Fix |
| CVE-2022-27845 | Plausible Analytics WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.8% | 2022-04-11 | Fix |
| CVE-2022-27844 | WPvivid WordPress plugin arbitrary file read | 7.5v3.1 | 1.5% | 2022-04-11 | Fix |
| CVE-2022-27843 | Samsung Mobile Kies DLL hijacking | 6.2CNA v3.1 | 0.2% | 2022-04-11 | Fix |
| CVE-2022-27842 | Samsung Mobile Smart Switch PC DLL hijacking | 6.2CNA v3.1 | 0.2% | 2022-04-11 | Fix |
| CVE-2022-27841 | Samsung Mobile Samsung Pass improper error handling | 4.3CNA v3.1 | 0.3% | 2022-04-11 | Fix |
| CVE-2022-27840 | Samsung Mobile Samsung Recovery improper access control | 4.4CNA v3.1 | 0.2% | 2022-04-11 | Fix |
| CVE-2022-27839 | Samsung Mobile Samsung Internet SecretMode improper authentication | 3.3CNA v3.1 | 0.6% | 2022-04-11 | Fix |
| CVE-2022-27838 | Samsung Mobile FactoryCamera improper access control | 7.7CNA v3.1 | 0.2% | 2022-04-11 | Fix |