CVE-2022 records published in May 2022

This page lists the 1,672 CVE-2022 records published in May 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists nine of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.

Critical
33019.7% of these records
Listed in CISA KEV
90.5% of these records
Reported exploited
20.1% of these records
Detection signal
543.2% of these records
Exploit code
814.8% of these records
Actionable vendor fix
1,19471.4% of these records

Figures as of 2026-10-24 13:45 UTC. Records published in May 2022 have had from about 53 months to about 54 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2022 records published in May 2022, newest first: records 1 to 1,000 of 1,672
CVE Summary CVSS EPSS Published Signals
CVE-2022-31015Uncaught exception (due to a data race) leads to process termination in Waitress6.5CNA v3.11.5%2022-05-31Fix
CVE-2022-31013Authentication bypass in Vartalap chat-server9.1CNA v3.11.5%2022-05-31Fix
CVE-2022-31011TiDB authentication bypass7.8CNA v3.10.3%2022-05-31Fix
CVE-2022-31007Privilege escalation from administrator in eLabFTW4.9CNA v3.126.9%2022-05-31Exploit codeFix
CVE-2022-31005Integer overflow in Vapor's HTTP Range request7.5CNA v3.12.1%2022-05-31Fix
CVE-2022-31003Heap-based buffer overflow and out-of-bounds write in Sofia-SIP9.1CNA v3.13.8%2022-05-31Fix
CVE-2022-31002Out-of-bounds read in Sofia-SIP7.5CNA v3.11.9%2022-05-31Fix
CVE-2022-31001Out-of-bounds read in Sofia-SIP7.5CNA v3.12.1%2022-05-31Fix
CVE-2022-30973Regular expression denial of service in Apache Tika5.5v3.12.0%2022-05-31Fix
CVE-2022-29258Cross-site scripting in Filter Stream Converter application in XWiki Platform7.4CNA v3.11.0%2022-05-31Fix
CVE-2022-29245Weak private key generation in SSH.NET6.5CNA v3.11.5%2022-05-31Fix
CVE-2022-29243Improper input-size validation on the user new session name in Nextcloud Server4.3CNA v3.11.5%2022-05-31Fix
CVE-2022-29220No verification of commits origin in github-action-merge-dependabot6.5CNA v3.10.5%2022-05-31Fix
CVE-2022-23082CureKit path traversal in isFileOutsideDir7.5v3.11.3%2022-05-31Exploit codeFix
CVE-2022-22361IBM Business Process Manager cross-site request forgery4.3CNA v3.00.4%2022-05-31Fix
CVE-2022-1947Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.6.5NVD v3.11.2%2022-05-31Fix
CVE-2022-1942Heap-based buffer overflow in Vim/Vim7.8v3.11.6%2022-05-31Fix
CVE-2022-1934mruby/mruby GitHub repository use-after-free7.8v3.10.4%2022-05-31Fix
CVE-2022-1931Incorrect synchronization in polonel/trudesk8.1NVD v3.12.1%2022-05-31Fix
CVE-2022-1926Integer overflow or wraparound in polonel/trudesk4.9NVD v3.11.0%2022-05-31Fix
CVE-2022-1893Improper removal of sensitive information before storage or transfer in polonel/trudesk5.3v3.10.8%2022-05-31Fix
CVE-2022-1808Execution with unnecessary privileges in polonel/trudesk8.8v3.13.5%2022-05-31Fix
CVE-2022-1462Linux kernel An out-of-bounds read6.3NVD v3.10.3%2022-05-31Fix
CVE-2022-1646Simple Real Estate Pack WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1645Amazon Link WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1644The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.4.8NVD v3.10.6%2022-05-30
CVE-2022-1643Birthdays Widget WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1611Bulk Page Creator WordPress plugin arbitrary page creation via CSRF8.8NVD v3.10.6%2022-05-30Fix
CVE-2022-1589Change wp-admin Login WordPress plugin unauthenticated arbitrary settings update7.5NVD v3.10.6%2022-05-30Fix
CVE-2022-1583External Links in New Window / New Tab WordPress plugin Tabnabbing6.5NVD v3.11.3%2022-05-30Fix
CVE-2022-1582External Links in New Window / New Tab WordPress plugin unauthenticated stored cross-site scripting6.1NVD v3.10.8%2022-05-30Fix
CVE-2022-1568Team Members WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30Fix
CVE-2022-1566Quotes llama WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-05-30Fix
CVE-2022-1564Form Maker By 10Web WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.11.0%2022-05-30Fix
CVE-2022-1562Enable SVG WordPress plugin Author+ stored cross-site scripting via SVG5.4NVD v3.10.6%2022-05-30Fix
CVE-2022-1556StaffList WordPress plugin Admin+ SQLi9.8NVD v3.120.1%2022-05-30Fix
CVE-2022-1542HPB Dashboard WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1528VikBooking WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-30Fix
CVE-2022-1527WP 2FA WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-30Fix
CVE-2022-1456Poll Maker WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30Fix
CVE-2022-1395Easy FAQ with Expanding Text WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1387No Future Posts WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1299Slideshow WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1294IMDB info box WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1275BannerMan WordPress plugin Multiple Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30
CVE-2022-1203Content Mask WordPress plugin Subscriber+ arbitrary options update4.3NVD v3.11.0%2022-05-30Exploit codeFix
CVE-2022-1009Smush WordPress plugin Admin+ reflected cross-site scripting6.1NVD v3.10.8%2022-05-30Fix
CVE-2022-0642JivoChat WordPress plugin stored cross-site scripting via CSRF5.4NVD v3.10.3%2022-05-30Fix
CVE-2022-0376User Meta WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-30Fix
CVE-2022-1928Cross-site scripting (XSS) Stored in go-gitea/Gitea5.4v3.10.8%2022-05-29Fix
CVE-2022-1927Buffer over-read in Vim/Vim7.8v3.11.7%2022-05-29Fix
CVE-2022-30701Trend Micro Apex One An uncontrolled search path7.8v3.10.4%2022-05-27Fix
CVE-2022-30700Trend Micro Apex One An incorrect permission assignment7.8v3.10.3%2022-05-27Fix
CVE-2022-30687Trend Micro Maximum Security link following7.1v3.10.4%2022-05-27Fix
CVE-2022-28394Trend Micro Password Manager uncontrolled search path7.8v3.10.3%2022-05-27Fix
CVE-2022-25878protobufjs prototype pollution7.5v3.12.3%2022-05-27Fix
CVE-2022-20807Cisco Expressway Series and TelePresence Video Communication Server information disclosure4.3CNA v3.11.0%2022-05-27Fix
CVE-2022-20806Cisco Expressway Series and TelePresence Video Communication Server information disclosure4.3CNA v3.11.0%2022-05-27Fix
CVE-2022-20802Cisco Enterprise Chat And Email stored cross-site scripting5.4CNA v3.10.6%2022-05-27Fix
CVE-2022-20797Cisco Secure Network Analytics remote code execution5.5CNA v3.11.7%2022-05-27Fix
CVE-2022-20765Cisco UCS Director JavaScript cross-site scripting4.8CNA v3.10.6%2022-05-27Fix
CVE-2022-20674Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20673Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20672Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20671Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20670Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20669Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20668Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20667Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-20666Cisco Common Services Platform Collector cross-site scripting6.1CNA v3.10.7%2022-05-27Fix
CVE-2022-1909Cross-site scripting (XSS) Stored in causefx/Organizr5.4NVD v3.10.7%2022-05-27Fix
CVE-2022-1908Buffer over-read in bfabiszewski/Libmobi8.1v3.10.7%2022-05-27Fix
CVE-2022-1907Buffer over-read in bfabiszewski/Libmobi8.1v3.10.7%2022-05-27Fix
CVE-2022-1898vim/vim GitHub repository use-after-free7.8v3.11.4%2022-05-27Fix
CVE-2022-1897Out-of-bounds write in Vim/Vim7.8v3.11.5%2022-05-27Fix
CVE-2022-31648Talend Administration Center cross-site scripting6.1v3.10.5%2022-05-26Fix
CVE-2022-31265Wargaming World Of Warships authentication bypass by replay8.8v3.11.7%2022-05-26
CVE-2022-30789Tuxera NTFS-3G out-of-bounds write7.8v3.10.4%2022-05-26Fix
CVE-2022-30788Tuxera NTFS-3G out-of-bounds write7.8v3.10.4%2022-05-26Fix
CVE-2022-30787Tuxera NTFS-3G integer underflow6.7v3.10.4%2022-05-26Fix
CVE-2022-30786Tuxera NTFS-3G out-of-bounds write7.8v3.10.4%2022-05-26Fix
CVE-2022-30785A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite.6.7v3.10.4%2022-05-26Fix
CVE-2022-30784Tuxera NTFS-3G buffer overflow7.8v3.10.4%2022-05-26Fix
CVE-2022-30783Tuxera NTFS-3G unchecked return value6.7v3.10.4%2022-05-26Fix
CVE-2022-30585RSA Archer authorization bypass6.5v3.10.9%2022-05-26Fix
CVE-2022-30584RSA Archer improper access control8.8NVD v3.11.0%2022-05-26Fix
CVE-2022-30516Hospital Management System SQL injection9.8v3.11.6%2022-05-26
CVE-2022-30508DedeCMS path traversal6.5v3.11.1%2022-05-26
CVE-2022-30500SQL injection in jflyfox jfinal9.8v3.11.1%2022-05-26
CVE-2022-30495Automotive Shop Management System insecure direct object reference9.8v3.11.2%2022-05-26
CVE-2022-30494Automotive Shop Management System cross-site scripting5.4v3.10.6%2022-05-26
CVE-2022-30493Automotive Shop Management System SQL injection9.8v3.12.2%2022-05-26
CVE-2022-30477Tenda AC18 out-of-bounds write9.8v3.11.4%2022-05-26
CVE-2022-30476Tenda AC18 out-of-bounds write9.8v3.11.4%2022-05-26
CVE-2022-30475Tenda AC18 out-of-bounds write7.5v3.11.2%2022-05-26
CVE-2022-30474Tenda AC18 out-of-bounds write9.8v3.11.4%2022-05-26
CVE-2022-30473Tenda AC18 out-of-bounds write7.5v3.11.2%2022-05-26
CVE-2022-30472Tenda AC18 out-of-bounds write9.8v3.11.4%2022-05-26
CVE-2022-2972174cmsse SQL injection7.5v3.11.0%2022-05-26
CVE-2022-2972074cmsse files accessible to external parties7.5v3.11.0%2022-05-26
CVE-2022-29689chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29688chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29687chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29686chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29685chshcms Cscms Music Portal System SQL injection8.8v3.11.0%2022-05-26
CVE-2022-29684chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29683chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29682chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29681chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29680chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29676chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29670chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29669chshcms Cscms Music Portal System SQL injection8.8v3.11.0%2022-05-26
CVE-2022-29667chshcms Cscms Music Portal System SQL injection8.8v3.11.0%2022-05-26
CVE-2022-29666chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29665chshcms Cscms Music Portal System SQL injection7.2v3.10.8%2022-05-26
CVE-2022-29664chshcms Cscms Music Portal System SQL injection8.8v3.11.0%2022-05-26
CVE-2022-29663chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29662chshcms Cscms Music Portal System SQL injection7.2v3.10.8%2022-05-26
CVE-2022-29661chshcms Cscms Music Portal System SQL injection7.2v3.10.9%2022-05-26
CVE-2022-29660chshcms Cscms Music Portal System SQL injection9.8v3.111.4%2022-05-26
CVE-2022-29637Iminho MinDoc arbitrary command execution in Minidoc7.8v3.10.9%2022-05-26
CVE-2022-29633Linglong An improper access control9.8v3.11.1%2022-05-26
CVE-2022-29632roncoo-education component /course/api/upload/pic arbitrary file upload9.8v3.117.5%2022-05-26
CVE-2022-29091Dell Unity cross-site scripting5.3CNA v3.11.0%2022-05-26Fix
CVE-2022-29082Dell NetWorker improper certificate host validation3.7CNA v3.10.3%2022-05-26Fix
CVE-2022-27777XSS vulnerability in Action view tag helpers6.1v3.11.6%2022-05-26Fix
CVE-2022-26865Dell OS Recovery Tool authentication bypass6.8CNA v3.10.3%2022-05-26Fix
CVE-2022-26857Dell OpenManage Enterprise improper authorization9.0CNA v3.11.0%2022-05-26Fix
CVE-2022-26776Apple macOS arbitrary code execution9.8v3.12.1%2022-05-26Fix
CVE-2022-26775Apple macOS integer overflow9.8v3.12.0%2022-05-26Fix
CVE-2022-26774Apple iTunes logic flaw7.8v3.10.3%2022-05-26Fix
CVE-2022-26773Apple iTunes improper authorization7.1v3.10.6%2022-05-26Fix
CVE-2022-26772Apple macOS out-of-bounds write7.8v3.10.9%2022-05-26Fix
CVE-2022-26771Apple watchOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26770Apple macOS out-of-bounds read7.8v3.11.0%2022-05-26Fix
CVE-2022-26769Apple macOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26768Apple watchOS out-of-bounds write7.8v3.11.3%2022-05-26Fix
CVE-2022-26767Apple macOS incorrect authorization5.5v3.10.6%2022-05-26Fix
CVE-2022-26766Apple watchOS improper certificate validation5.5v3.12.7%2022-05-26Exploit codeFix
CVE-2022-26765Apple watchOS race condition4.7v3.10.2%2022-05-26Fix
CVE-2022-26764Apple watchOS out-of-bounds write4.7v3.10.9%2022-05-26Fix
CVE-2022-26763Apple watchOS out-of-bounds access7.8v3.13.7%2022-05-26Exploit codeFix
CVE-2022-26761Apple macOS out-of-bounds write7.8v3.10.9%2022-05-26Fix
CVE-2022-26757Apple watchOS use-after-free7.8v3.12.9%2022-05-26Fix
CVE-2022-26756Apple macOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26755Apple macOS sandbox escape6.3v3.10.8%2022-05-26Fix
CVE-2022-26754Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26753Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26752Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26751Apple macOS out-of-bounds write7.8v3.11.7%2022-05-26Fix
CVE-2022-26750Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26749Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26748Apple macOS out-of-bounds write8.8v3.11.4%2022-05-26Fix
CVE-2022-26747Apple Xcode privilege escalation7.8v3.10.6%2022-05-26Fix
CVE-2022-26746Apple macOS Privacy preferences vulnerability5.5v3.10.7%2022-05-26Fix
CVE-2022-26745Apple macOS out-of-bounds write5.5v3.10.6%2022-05-26Fix
CVE-2022-26744Apple iOS and iPadOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26743Apple macOS out-of-bounds write7.0v3.10.2%2022-05-26Fix
CVE-2022-26742Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26741Apple macOS buffer overflow7.8v3.10.9%2022-05-26Fix
CVE-2022-26740Apple tvOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26739Apple tvOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26738Apple tvOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26737Apple tvOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-26736Apple tvOS out-of-bounds write7.8v3.11.2%2022-05-26Fix
CVE-2022-26731Apple macOS logic flaw4.3v3.10.9%2022-05-26Fix
CVE-2022-26728Apple macOS information disclosure5.5v3.10.9%2022-05-26Fix
CVE-2022-26727This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system.5.5v3.10.6%2022-05-26Fix
CVE-2022-26726This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen.6.5v3.12.3%2022-05-26Exploit codeFix
CVE-2022-26725Apple macOS logic flaw5.3v3.10.8%2022-05-26Fix
CVE-2022-26724Apple tvOS improper authentication5.5v3.10.2%2022-05-26Fix
CVE-2022-26723Apple macOS out-of-bounds write9.8v3.11.4%2022-05-26Fix
CVE-2022-26722Apple macOS improper initialization7.8v3.10.8%2022-05-26Fix
CVE-2022-26721Apple macOS improper initialization7.8v3.10.9%2022-05-26Fix
CVE-2022-26720Apple macOS out-of-bounds write7.8v3.11.2%2022-05-26Fix
CVE-2022-26718Apple macOS out-of-bounds read7.8v3.10.7%2022-05-26Fix
CVE-2022-26715Apple macOS out-of-bounds write7.8v3.10.8%2022-05-26Fix
CVE-2022-26714Apple watchOS out-of-bounds write7.8v3.11.1%2022-05-26Fix
CVE-2022-26712This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to modify protected parts of the file system.5.5v3.11.0%2022-05-26Fix
CVE-2022-26711Apple watchOS integer overflow9.8v3.13.8%2022-05-26Exploit codeFix
CVE-2022-26708Apple macOS arbitrary code execution9.8v3.11.8%2022-05-26Fix
CVE-2022-26706An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.5.5v3.17.5%2022-05-26Fix
CVE-2022-26704Apple macOS link following7.8v3.11.1%2022-05-26Fix
CVE-2022-26703Apple iOS and iPadOS lock screen vulnerability2.4v3.10.3%2022-05-26Fix
CVE-2022-26702Apple watchOS use-after-free7.8v3.11.1%2022-05-26Fix
CVE-2022-26701Apple tvOS race condition7.5v3.11.2%2022-05-26Fix
CVE-2022-26698Apple macOS out-of-bounds read7.1v3.11.0%2022-05-26Fix
CVE-2022-26697Apple macOS out-of-bounds read7.1v3.11.1%2022-05-26Fix
CVE-2022-26694Apple macOS plug-ins vulnerability9.1v3.10.9%2022-05-26Fix
CVE-2022-26693Apple macOS plug-ins vulnerability9.1v3.10.9%2022-05-26Fix
CVE-2022-26691Apple macOS logic flaw6.7v3.10.6%2022-05-26Fix
CVE-2022-26690Apple macOS race condition4.7v3.11.6%2022-05-26Fix
CVE-2022-26688Apple macOS link following4.4v3.10.4%2022-05-26Fix
CVE-2022-24422Integrated Dell Remote Access Controller 9 improper authentication9.6CNA v3.158.5%2022-05-26Fix
CVE-2022-24418Dell CPG BIOS improper input validation7.5CNA v3.10.2%2022-05-26Fix
CVE-2022-24417Dell CPG BIOS improper input validation7.5CNA v3.10.2%2022-05-26Fix
CVE-2022-24414Dell CloudLink sensitive query strings7.6CNA v3.10.6%2022-05-26Fix
CVE-2022-22676Apple macOS XPC Services vulnerability5.5v3.10.7%2022-05-26Fix
CVE-2022-22675Apple macOS out-of-bounds write7.8v3.112.5%2022-05-26KEVFix
CVE-2022-22674Apple macOS out-of-bounds read5.5v3.11.1%2022-05-26KEVFix
CVE-2022-22673Apple iOS and iPadOS denial of service7.5v3.11.0%2022-05-26Fix
CVE-2022-22672Apple macOS out-of-bounds write7.8v3.11.0%2022-05-26Fix
CVE-2022-22663Apple macOS unauthorized access5.5v3.11.0%2022-05-26Fix
CVE-2022-22662Apple macOS information disclosure6.5v3.11.4%2022-05-26Fix
CVE-2022-22616Apple macOS Gatekeeper vulnerability5.5v3.17.7%2022-05-26Exploit codeFix
CVE-2022-22577Cross-site scripting vulnerability in Action Pack6.1v3.11.8%2022-05-26Fix
CVE-2022-22576https://github.com/curl/curl An improper authentication8.1NVD v3.12.5%2022-05-26Fix
CVE-2022-21831Possible code injection vulnerability in Rails / Active Storage9.8v3.13.0%2022-05-26Exploit codeFix
CVE-2022-21827Citrix Gateway Windows Plugin improper privilege management7.1v3.10.2%2022-05-26Fix
CVE-2022-20821Cisco IOS XR open port vulnerability6.5CNA v3.111.5%2022-05-26KEVFix
CVE-2022-20809Cisco Expressway Series and TelePresence Video Communication Server information disclosure4.3CNA v3.11.0%2022-05-26Fix
CVE-2022-1899Out-of-bounds read in radareorg/radare29.1v3.11.5%2022-05-26Fix
CVE-2022-1886Heap-based buffer overflow in Vim/Vim7.8v3.11.4%2022-05-26Fix
CVE-2022-1882Linux kernel A use-after-free7.8NVD v3.10.4%2022-05-26Fix
CVE-2022-1664Debian dpkg source package extraction path traversal9.8v3.13.2%2022-05-26Fix
CVE-2022-1261Matrikon OPC Server improper access control8.8v3.10.7%2022-05-26
CVE-2022-31651Sound Exchange reachable assertion5.5v3.11.2%2022-05-25Fix
CVE-2022-31650Sound Exchange incorrect comparison5.5v3.11.2%2022-05-25Fix
CVE-2022-31624MariaDB improper locking5.5v3.10.2%2022-05-25Fix
CVE-2022-31623MariaDB improper locking5.5v3.10.2%2022-05-25Fix
CVE-2022-31622MariaDB improper locking5.5v3.10.2%2022-05-25Fix
CVE-2022-31621MariaDB improper locking5.5v3.10.2%2022-05-25Fix
CVE-2022-31620Libjpeg reachable assertion6.5v3.11.4%2022-05-25Fix
CVE-2022-30595Python Pillow out-of-bounds write9.8v3.12.3%2022-05-25Fix
CVE-2022-30428Arbitrary file read in Ginadmin7.5v3.11.1%2022-05-25
CVE-2022-30427Path traversal in Ginadmin7.5v3.11.5%2022-05-25
CVE-2022-30323HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion8.6v3.11.4%2022-05-25Fix
CVE-2022-30322HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion8.6v3.11.4%2022-05-25Fix
CVE-2022-30321HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion8.6v3.13.2%2022-05-25Fix
CVE-2022-29710LimeSurvey uploadConfirm.php cross-site scripting6.1v3.10.8%2022-05-25Fix
CVE-2022-29651oretnom23 Online Food Ordering System Select Image function arbitrary file upload7.2v3.11.5%2022-05-25
CVE-2022-29650oretnom23 Online Food Ordering System SQL injection9.8v3.11.3%2022-05-25
CVE-2022-29408Advanced Contact form 7 DB WordPress plugin unauthenticated persistent cross-site scripting (XSS)6.1v3.10.7%2022-05-25Fix
CVE-2022-29405Apache Archiva Arbitrary user password reset vulnerability6.5v3.11.7%2022-05-25Fix
CVE-2022-29402TP-Link Tl-wr840n missing authentication6.8v3.10.4%2022-05-25
CVE-2022-29380Creativeitem Academy LMS cross-site scripting4.8v3.10.6%2022-05-25Exploit code
CVE-2022-29379F5 Njs out-of-bounds write9.8v3.11.8%2022-05-25
CVE-2022-29362Cross-site scripting in ZKEACMS5.4v3.10.5%2022-05-25
CVE-2022-29361Palletsprojects werkzeug HTTP request smuggling9.8v3.17.7%2022-05-25Exploit codeFix
CVE-2022-29359School Club Application System /scas/?page=clubs/application_form&id=7 stored cross-site scripting6.1v3.11.2%2022-05-25Exploit code
CVE-2022-29358EPUB2TXT2 integer overflow5.5v3.10.6%2022-05-25
CVE-2022-29349Keking kkFileView cross-site scripting6.1v3.11.8%2022-05-25Nuclei
CVE-2022-29256sharp vulnerable to command injection in post-installation over build environment6.5CNA v3.10.4%2022-05-25Fix
CVE-2022-29253Path traversal in XWiki Platform2.7CNA v3.11.1%2022-05-25Fix
CVE-2022-29252Cross-site scripting in XWiki Platform Wiki UI Main Wiki7.4CNA v3.11.0%2022-05-25Fix
CVE-2022-29251xwiki-platform cross-site scripting in the Flamingo theme manager7.4CNA v3.11.3%2022-05-25Fix
CVE-2022-29248Cross-domain cookie leakage in Guzzle8.0CNA v3.11.3%2022-05-25Fix
CVE-2022-28875All F-Secure and WithSecure endpoint protection products denial of service (DoS)6.5v3.10.5%2022-05-25
CVE-2022-28862Archibus Web Central SQL injection9.8v3.11.0%2022-05-25
CVE-2022-27305gibbonedu gibbon session fixation8.8v3.10.9%2022-05-25Fix
CVE-2022-27169Open Automation Software OAS Platform information disclosure7.5v3.11.7%2022-05-25
CVE-2022-26945HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion9.8v3.11.7%2022-05-25Fix
CVE-2022-26833Open Automation Software OAS Platform REST API functionality improper authentication9.4v3.137.6%2022-05-25Nuclei
CVE-2022-26303Open Automation Software OAS Platform missing authentication7.5v3.11.3%2022-05-25
CVE-2022-26082Open Automation Software OAS Platform missing authentication9.8v3.119.6%2022-05-25
CVE-2022-26077Open Automation Software OAS Platform cleartext transmission of sensitive information7.5v3.11.1%2022-05-25
CVE-2022-26067Open Automation Software OAS Platform information disclosure7.5v3.11.3%2022-05-25
CVE-2022-26043Open Automation Software OAS Platform missing authentication7.5v3.11.3%2022-05-25
CVE-2022-26026Open Automation Software OAS Platform OAS Engine SecureConfigValues functionality denial of service7.5v3.11.2%2022-05-25
CVE-2022-23775TrueStack Direct Connect improper access control9.8v3.11.0%2022-05-25
CVE-2022-22127Tableau Server missing authorization7.2v3.11.1%2022-05-25Fix
CVE-2022-21951Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden6.8CNA v3.10.4%2022-05-25Fix
CVE-2022-1883SQL injection in camptocamp/Terraboard8.8NVD v3.16.8%2022-05-25NucleiFix
CVE-2022-1851Out-of-bounds read in Vim/Vim7.8v3.11.6%2022-05-25Fix
CVE-2022-1815Exposure of sensitive information to an unauthorized actor in jgraph/drawio7.5v3.15.7%2022-05-25NucleiFix
CVE-2022-1678kernel improper reference count update7.5NVD v3.12.9%2022-05-25Fix
CVE-2022-1348logrotate incorrect permission assignment6.5NVD v3.11.7%2022-05-25Fix
CVE-2022-31263Mastodon email domain restriction vulnerability5.3v3.10.8%2022-05-24Fix
CVE-2022-31261Morpheusdata Morpheus An XML external entity injection7.5v3.11.2%2022-05-24Fix
CVE-2022-30843Room Rent Portal Site SQL injection8.8v3.11.0%2022-05-24
CVE-2022-30842Covid 19 Travel Pass Management System cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30839Room Rent Portal Site cross-site scripting6.1v3.10.6%2022-05-24
CVE-2022-30838Covid 19 Travel Pass Management System SQL injection9.8v3.11.1%2022-05-24
CVE-2022-30837oretnom23 Toll Tax Management System cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30464Chatbot App With Suggestion cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30463Automotive Shop Management System SQL injection8.8v3.11.0%2022-05-24
CVE-2022-30462Water Billing System cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30461Water Billing System SQL injection9.8v3.11.1%2022-05-24
CVE-2022-30460Simple Social Networking Site cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30459Chatbot App With Suggestion SQL injection8.8v3.11.0%2022-05-24
CVE-2022-30458Automotive Shop Management System cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30456Badminton Center Management System cross-site scripting5.4v3.10.5%2022-05-24
CVE-2022-30455Badminton Center Management System SQL injection9.8v3.11.1%2022-05-24
CVE-2022-30454Merchandise Online Store SQL injection9.8v3.11.1%2022-05-24
CVE-2022-29567Vaadin possible information disclosure inside TreeGrid component with default data provider5.7CNA v3.11.0%2022-05-24Fix
CVE-2022-29377TOTOLINK A3600R out-of-bounds write7.5v3.11.1%2022-05-24
CVE-2022-29337Cdatatec Fd702xw-x-r430 OS command injection9.8v3.135.3%2022-05-24Exploit code
CVE-2022-29334H authentication bypass by replay9.8v3.11.2%2022-05-24
CVE-2022-29333Cyberlink Powerdirector improper privilege management7.8v3.10.9%2022-05-24
CVE-2022-29309wangl1989 mysiteforme server-side request forgery7.5v3.10.9%2022-05-24
CVE-2022-29305SQL injection in helloxz/Imgurl8.1v3.10.9%2022-05-24
CVE-2022-29249Reversible One-Way Hash in io.github.JavaEZLib:JavaEZ7.5CNA v3.10.7%2022-05-24Fix
CVE-2022-29246Potential buffer overflow in function DFU upload in Azure RTOS USBX9.8CNA v3.12.3%2022-05-24Fix
CVE-2022-29242Buffer overflow on creating key transport blob in GOST Engine5.9CNA v3.11.7%2022-05-24Fix
CVE-2022-29237Limited authentication bypass for Media files in Opencast5.4CNA v3.10.6%2022-05-24Fix
CVE-2022-29223Buffer overflow on HUB descriptor in Azure RTOS USBX7.5CNA v3.11.2%2022-05-24Fix
CVE-2022-29221PHP code injection by malicious block or filename in Smarty8.8CNA v3.14.9%2022-05-24Exploit codeFix
CVE-2022-29219Integer overflow in Lodestar7.5CNA v3.11.3%2022-05-24Fix
CVE-2022-29217Key confusion through non-blocklisted public key formats in PyJWT7.4CNA v3.11.4%2022-05-24Fix
CVE-2022-26532Zyxel USG/ZyWALL series firmware 'packet-trace' CLI command argument injection7.8CNA v3.14.8%2022-05-24Fix
CVE-2022-26531Zyxel USG/ZyWALL series firmware improper input validation6.1CNA v3.16.2%2022-05-24Fix
CVE-2022-23050ManageEngine AppManager15 uncontrolled search path7.2v3.14.9%2022-05-24Fix
CVE-2022-22977VMware Tools XML external entity injection7.1v3.10.8%2022-05-24Fix
CVE-2022-22497IBM Aspera Faspex unauthorized access7.5CNA v3.01.2%2022-05-24Fix
CVE-2022-22495IBM i SQL injection6.3CNA v3.02.2%2022-05-24Fix
CVE-2022-22309IBM Power System S922 Server missing authentication6.8CNA v3.00.3%2022-05-24Fix
CVE-2022-22306Fortinet FortiOS improper certificate validation5.4CNA v3.10.2%2022-05-24Fix
CVE-2022-1850Path traversal in FileGator/FileGator8.1v3.11.0%2022-05-24Fix
CVE-2022-1849Session fixation in FileGator/FileGator5.4v3.10.7%2022-05-24Fix
CVE-2022-1848Business Logic Errors in Erudika/para5.3NVD v3.11.0%2022-05-24Fix
CVE-2022-1840Home Clean Services Management System cross-site scripting4.8v3.10.6%2022-05-24
CVE-2022-1839Home Clean Services Management System login.php SQL injection8.8v3.10.9%2022-05-24
CVE-2022-1838Home Clean Services Management System login.php SQL injection7.2v3.11.0%2022-05-24
CVE-2022-1837Home Clean Services Management System unrestricted upload7.2v3.11.3%2022-05-24
CVE-2022-1819Student Information System Student Roll module cross-site scripting4.8v3.10.6%2022-05-24
CVE-2022-1669Circutor COMPACT DC-S BASIC firewall configuration CGI stack-based buffer overflow8.1v3.10.8%2022-05-24
CVE-2022-0910Zyxel USG/ZyWALL series firmware improper authentication6.5CNA v3.10.7%2022-05-24Fix
CVE-2022-0734Zyxel USG/ZyWALL series firmware cross-site scripting5.8CNA v3.19.4%2022-05-24Fix
CVE-2022-31489Inoutscripts Blockchain Altexchanger SQL injection7.5v3.11.1%2022-05-23
CVE-2022-31488Inoutscripts Blockchain Altexchanger SQL injection7.5v3.11.1%2022-05-23
CVE-2022-31487Inoutscripts Blockchain Fiatexchanger SQL injection7.5v3.11.2%2022-05-23
CVE-2022-31467DLL hijacking vulnerability in Quick Heal Total Security7.3v3.10.3%2022-05-23
CVE-2022-31466TOCTOU vulnerability in Quick Heal Total Security7.0v3.10.2%2022-05-23
CVE-2022-30017Rescue Dispatch Management System cross-site scripting5.4v3.10.5%2022-05-23
CVE-2022-30016Rescue Dispatch Management System incorrect authorization8.8v3.11.0%2022-05-23
CVE-2022-30015Simple Food Website cross-site scripting5.4v3.10.5%2022-05-23
CVE-2022-30014Simple Food Website cross-site request forgery8.8v3.10.5%2022-05-23
CVE-2022-29599Apache Maven commandline class shell injection9.8v3.14.4%2022-05-23Fix
CVE-2022-29376Apache Friends XAMPP incorrect default permissions8.8v3.11.3%2022-05-23
CVE-2022-29005PHPGurukul Online Birth Certificate System component /obcs/user/profile.php cross-site scripting6.1v3.12.2%2022-05-23NucleiExploit code
CVE-2022-29004PHPGurukul e-Diary Management System cross-site scripting6.1v3.12.9%2022-05-23NucleiExploit code
CVE-2022-29002Cross-site request forgery in XXL-Job8.8v3.10.5%2022-05-23
CVE-2022-28999Bloodshed Dev-c++ insecure permissions8.8v3.11.2%2022-05-23
CVE-2022-28998Xlightftpd Xlight FTP out-of-bounds write8.1v3.12.2%2022-05-23
CVE-2022-28997CSZ CMS server-side request forgery7.5v3.12.0%2022-05-23
CVE-2022-28944Emcosoftware Network Software Scanner download without integrity check8.8v3.11.5%2022-05-23Exploit code
CVE-2022-28932D-Link Dsl-g2452dg incorrect default permissions9.8v3.11.2%2022-05-23
CVE-2022-28874F-Secure endpoint protection products multiple denial of service (DoS)7.5v3.10.6%2022-05-23
CVE-2022-1825Cross-site scripting (XSS) Reflected in collectiveaccess/Providence5.4v3.10.6%2022-05-23Fix
CVE-2022-1817Badminton Center Management System Userlist module cross-site scripting5.4v3.10.6%2022-05-23
CVE-2022-1816Zoo Management System Content module cross-site scripting5.4v3.10.6%2022-05-23
CVE-2022-1811Unrestricted upload of file with dangerous type in publify/publify5.4NVD v3.10.8%2022-05-23Fix
CVE-2022-1810Authorization bypass through user-controlled key in publify/publify4.3NVD v3.10.8%2022-05-23Fix
CVE-2022-1558Curtain WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.11.0%2022-05-23
CVE-2022-1547wpchill Check and Log Email reflected cross-site scripting6.1NVD v3.10.8%2022-05-23Fix
CVE-2022-1467AVEVA InTouch Access Anywhere exposure of resource to wrong sphere9.9v3.10.9%2022-05-23
CVE-2022-132010Web Slider by 10Web stored cross-site scripting4.8NVD v3.11.0%2022-05-23Fix
CVE-2022-1298Tabs Responsive WordPress plugin Editor+ stored cross-site scripting4.8NVD v3.10.6%2022-05-23Fix
CVE-2022-1268Donate Extra WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-23
CVE-2022-1221Gwyn's Imagemap Selector WordPress plugin reflected cross-site scripting6.1NVD v3.12.2%2022-05-23Nuclei
CVE-2022-1218Domain Replace WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-23
CVE-2022-1192Turn off all comments WordPress plugin reflected cross-site scripting6.1NVD v3.12.9%2022-05-23
CVE-2022-1093WP Meta SEO WordPress plugin Admin+ stored cross-site scripting via breadcrumbs4.8NVD v3.10.6%2022-05-23Fix
CVE-2022-1014WP Contacts Manager WordPress plugin unauthenticated SQLi9.8NVD v3.11.6%2022-05-23
CVE-2022-0900Cross-site scripting vulnerability in DivvyDrive5.4v3.10.4%2022-05-23Fix
CVE-2022-0781Nirweb support WordPress plugin unauthenticated SQLi9.8NVD v3.113.1%2022-05-23NucleiFix
CVE-2022-0346Google XML Sitemap Generator WordPress plugin reflected cross-site scripting6.1NVD v3.12.1%2022-05-23NucleiFix
CVE-2022-1813OS command injection in yogeshojha/rengine9.8v3.12.7%2022-05-22Fix
CVE-2022-31268Path traversal in Gitblit7.5v3.110.7%2022-05-21Nuclei
CVE-2022-31267Unescaped control characters in Gitblit9.8v3.117.7%2022-05-21Fix
CVE-2022-31264solana-labs rbpf integer overflow in solana_rbpf7.5v3.11.3%2022-05-21Fix
CVE-2022-31259Access control bypass in beego9.8v3.121.6%2022-05-21Fix
CVE-2022-29222Improper certificate validation in Pion DTLS5.9CNA v3.10.8%2022-05-21Fix
CVE-2022-29216Code injection in `saved_model_cli` in TensorFlow7.8CNA v3.10.5%2022-05-21Fix
CVE-2022-29215Argument injection in RegionProtect7.5CNA v3.11.2%2022-05-21Fix
CVE-2022-29214URL redirection to untrusted site (open redirect) in next-auth6.1CNA v3.10.7%2022-05-21Fix
CVE-2022-29213Incomplete validation in signal ops leads to crashes in TensorFlow5.5CNA v3.10.3%2022-05-21Fix
CVE-2022-29212Core dump when loading TFLite models with quantization in TensorFlow5.5CNA v3.10.3%2022-05-21Fix
CVE-2022-29211Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values5.5CNA v3.10.3%2022-05-21Fix
CVE-2022-29210Heap buffer overflow due to incorrect hash function in TensorFlow5.5CNA v3.10.2%2022-05-21Fix
CVE-2022-29209Type confusion leading to `CHECK`-failure based denial of service in TensorFlow5.5CNA v3.10.4%2022-05-21Fix
CVE-2022-29190Header reconstruction method can be thrown into an infinite loop in Pion DTLS7.5CNA v3.11.7%2022-05-21Fix
CVE-2022-29189Buffer for inbound DTLS fragments has no limit5.3CNA v3.12.1%2022-05-21Fix
CVE-2022-29188Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen5.3CNA v3.10.9%2022-05-21Fix
CVE-2022-1809Access of uninitialized pointer in radareorg/radare27.8v3.10.9%2022-05-21Fix
CVE-2022-1752Unrestricted upload of file with dangerous type in polonel/trudesk8.0NVD v3.12.3%2022-05-21Fix
CVE-2022-31258Checkmk link following6.7NVD v3.10.4%2022-05-20Fix
CVE-2022-31245Mailcow OS command injection8.8v3.15.5%2022-05-20Exploit codeFix
CVE-2022-31215Goverlan Reach agent update process vulnerability6.5v3.11.2%2022-05-20
CVE-2022-30887Pharmacy Management System unrestricted file upload9.8NVD v3.125.8%2022-05-20
CVE-2022-30886School Dormitory Management System SQL injection9.8v3.12.0%2022-05-20
CVE-2022-30551OPC Foundation Ua-java resource exhaustion7.5v3.12.1%2022-05-20Fix
CVE-2022-30518Chatbot Application With A Suggestion Feature SQL injection9.8v3.11.8%2022-05-20
CVE-2022-29883Siemens SICAM T improper authentication6.9CNA v4.01.0%2022-05-20Fix
CVE-2022-29882Siemens SICAM T cross-site scripting7.1CNA v3.10.9%2022-05-20Fix
CVE-2022-29881Siemens SICAM T missing authentication6.9CNA v4.01.1%2022-05-20Fix
CVE-2022-29880Siemens SICAM T cross-site scripting6.5CNA v3.10.6%2022-05-20Fix
CVE-2022-29879Siemens SICAM T missing authentication5.3CNA v4.00.9%2022-05-20Fix
CVE-2022-29878Siemens SICAM T authentication bypass by replay7.5CNA v3.11.1%2022-05-20Fix
CVE-2022-29877Siemens SICAM P850 missing authentication6.5v3.10.6%2022-05-20Fix
CVE-2022-29876Siemens SICAM T cross-site scripting7.1CNA v3.10.9%2022-05-20Fix
CVE-2022-29874Siemens SICAM T cleartext transmission of sensitive information8.8CNA v3.10.8%2022-05-20Fix
CVE-2022-29873Siemens SICAM T denial of service9.3CNA v4.02.0%2022-05-20Fix
CVE-2022-29872Siemens SICAM T denial of service8.7CNA v4.01.5%2022-05-20Fix
CVE-2022-29801Siemens Teamcenter XML external entity injection7.5v3.11.0%2022-05-20Fix
CVE-2022-29448Herd Effects WordPress plugin local file inclusion (LFI)4.9v3.11.0%2022-05-20Fix
CVE-2022-29447Hover Effects WordPress plugin authenticated local file inclusion (LFI)7.2v3.11.0%2022-05-20Fix
CVE-2022-29434Spiffy Calendar WordPress plugin Edit/Delete event via IDOR5.4v3.10.7%2022-05-20Fix
CVE-2022-29432wpDataTables WordPress plugin Multiple authenticated persistent cross-site scripting (XSS)4.8v3.10.5%2022-05-20Fix
CVE-2022-29431KubiQ Remove CPT base (WordPress plugin) cross-site request forgery5.4v3.10.4%2022-05-20Fix
CVE-2022-29430PNG to JPG WordPress plugin cross-site request forgery leading to persistent cross-site scripting6.1v3.10.4%2022-05-20Fix
CVE-2022-29428WP Slider WordPress plugin cross-site scripting (XSS)4.8v3.10.5%2022-05-20
CVE-2022-29427Aftab Muni Disable Right Click For WP (WordPress plugin) Aftab Muni's cross-site request forgery8.8v3.10.4%2022-05-20
CVE-2022-29426Slideshow, Image Slider by 2J WordPress plugin authenticated reflected cross-site scripting (XSS)5.4v3.10.5%2022-05-20
CVE-2022-29425Checkout Files Upload for WooCommerce WordPress plugin cross-site scripting (XSS)6.1v3.10.7%2022-05-20Fix
CVE-2022-29424Image Hover Effects Ultimate WordPress plugin authenticated reflected cross-site scripting (XSS)4.8v3.10.5%2022-05-20Fix
CVE-2022-29320MiniTool Partition Wizard unquoted search path7.8v3.10.4%2022-05-20
CVE-2022-29208Segfault and out-of-bounds write write due to incomplete validation in TensorFlow7.1CNA v3.10.4%2022-05-20Fix
CVE-2022-29207Undefined behavior when users supply invalid resource handles in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29206Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29205Segfault due to missing support for quantized types in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29204Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29203Integer overflow in `SpaceToBatchND` in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29202Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29201Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29200Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29199Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29198Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29197Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29196Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29195Missing validation causes denial of service in TensorFlow via `StagePeek`5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29194Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29193Missing validation causes `TensorSummaryV2` in TensorFlow to crash5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29192Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow5.5CNA v3.10.3%2022-05-20Fix
CVE-2022-29191Missing validation causes denial of service via `GetSessionTensor` in TensorFlow5.5CNA v3.10.4%2022-05-20Fix
CVE-2022-29186PagerDuty Rundeck Docker image SSH key vulnerability9.1CNA v3.11.2%2022-05-20
CVE-2022-29185Observable timing discrepancy in totp-rs4.2CNA v3.10.9%2022-05-20Fix
CVE-2022-29184Command injection/argument injection in GoCD8.8CNA v3.13.8%2022-05-20Fix
CVE-2022-29183Reflected XSS in GoCD4.3CNA v3.10.9%2022-05-20Fix
CVE-2022-29182DOM-based XSS in GoCD4.3CNA v3.10.8%2022-05-20Fix
CVE-2022-29181Improper handling of unexpected data type in Nokogiri8.2CNA v3.13.2%2022-05-20Fix
CVE-2022-29179Improper privilege management in Cilium7.5CNA v3.10.4%2022-05-20Fix
CVE-2022-29178Incorrect default permissions in Cilium8.8CNA v3.10.3%2022-05-20Fix
CVE-2022-29177DoS via malicious p2p message in Go-Ethereum5.9CNA v3.11.1%2022-05-20Fix
CVE-2022-29170Grafana Enterprise datasource network restrictions bypass via HTTP redirects6.6CNA v3.11.2%2022-05-20Fix
CVE-2022-29165argoproj argo-cd argo CD will blindly trust JWT claims if anonymous access is enabled10.0CNA v3.12.1%2022-05-20Fix
CVE-2022-29163Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server3.5CNA v3.11.1%2022-05-20Fix
CVE-2022-29160Sensitive files/data exist after deletion of user account in Nextcloud Android2.8CNA v3.10.4%2022-05-20Fix
CVE-2022-29159Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck5.0CNA v3.11.0%2022-05-20Fix
CVE-2022-29033Siemens JT2Go uninitialized pointer access7.8v3.10.8%2022-05-20Fix
CVE-2022-29032Siemens JT2Go double free7.8v3.10.8%2022-05-20Fix
CVE-2022-29031Siemens JT2Go null pointer dereference5.5v3.10.5%2022-05-20Fix
CVE-2022-29030Siemens JT2Go integer overflow to buffer overflow5.5v3.10.5%2022-05-20Fix
CVE-2022-29029Siemens JT2Go null pointer dereference5.5v3.10.5%2022-05-20Fix
CVE-2022-29028Siemens JT2Go infinite loop5.5v3.10.5%2022-05-20Fix
CVE-2022-29023openrazer razermouse driver buffer overflow9.8v3.12.3%2022-05-20Fix
CVE-2022-29022openrazer razeraccessory driver buffer overflow9.8v3.12.3%2022-05-20Fix
CVE-2022-29021openrazer razerkbd driver buffer overflow9.8v3.12.3%2022-05-20Fix
CVE-2022-28995yogeshojha rengine remote code execution9.8v3.12.3%2022-05-20
CVE-2022-28993Bdtask Multi-Store Inventory Management System missing authorization9.8v3.11.7%2022-05-20
CVE-2022-28992PHPGurukul Online Banquet Booking System cross-site request forgery8.8v3.10.6%2022-05-20
CVE-2022-28991Bdtask Multi-Store Inventory Management System forced browsing7.5v3.11.5%2022-05-20
CVE-2022-28990Buffer overflow in wasm37.8v3.10.4%2022-05-20
CVE-2022-28987Zoho ManageEngine ADSelfService Plus login endpoint vulnerability5.3v3.19.9%2022-05-20NucleiFix
CVE-2022-28985orangehrm addNewPost component stored cross-site scripting5.4v3.10.5%2022-05-20
CVE-2022-28965Avast Premium Security uncontrolled search path6.5v3.10.3%2022-05-20Fix
CVE-2022-28964Avast Premium Security arbitrary file write7.1v3.10.2%2022-05-20Fix
CVE-2022-28660Grafana missing authentication9.8v3.11.1%2022-05-20Fix
CVE-2022-28618HPE Nimble Storage Hybrid Flash Arrays command injection9.8v3.11.8%2022-05-20Fix
CVE-2022-28531Covid-19 Directory On Vaccination System SQL injection9.8v3.114.2%2022-05-20
CVE-2022-28106Online Sports Complex Booking System improper authentication9.8v3.11.2%2022-05-20
CVE-2022-28105Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-20
CVE-2022-28104Foxit PDF Editor unrestricted file upload9.8v3.11.9%2022-05-20
CVE-2022-27653Siemens Simcenter Femap out-of-bounds write7.8v3.10.8%2022-05-20Fix
CVE-2022-27640Siemens SIMATIC CP 442-1 RNA denial of service6.5v3.10.4%2022-05-20Fix
CVE-2022-27242Siemens OpenV2G buffer overflow5.5v3.10.2%2022-05-20Fix
CVE-2022-27095Battleye unquoted search path7.8v3.10.4%2022-05-20
CVE-2022-27094Sony Playmemories Home unquoted search path6.7v3.10.4%2022-05-20
CVE-2022-26634Hma Hidemyass unquoted search path7.8v3.10.4%2022-05-20
CVE-2022-26633Simple Student Quarterly Result/grade System SQL injection9.8v3.11.8%2022-05-20
CVE-2022-26632Multi-vendor Online Groceries Management System SQL injection9.8v3.11.8%2022-05-20
CVE-2022-25229Popcorn Time cross-site scripting5.4v3.10.6%2022-05-20
CVE-2022-25227Thinfinity VNC origin validation error8.8v3.10.7%2022-05-20
CVE-2022-25224Proton cross-site scripting5.4v3.10.7%2022-05-20
CVE-2022-24906Error in deleting Deck cards attachment reveals the full application path in Nextcloud Deck3.5CNA v3.11.1%2022-05-20Fix
CVE-2022-24905argoproj argo-cd argo CD login screen allows message spoofing if SSO is enabled4.3CNA v3.11.3%2022-05-20Fix
CVE-2022-24904Argo CD repo-server symlink following4.3CNA v3.11.1%2022-05-20Fix
CVE-2022-24434dicer denial of service (DoS)7.5v3.13.4%2022-05-20Exploit code
CVE-2022-24290Siemens Teamcenter stack-based buffer overflow7.5v3.11.2%2022-05-20Fix
CVE-2022-24287Siemens SIMATIC PCS 7 insecure default initialization7.8CNA v3.10.2%2022-05-20Fix
CVE-2022-24045Siemens Desigo DXR2 sensitive cookie without the Secure attribute6.5v3.10.6%2022-05-20Fix
CVE-2022-24044Siemens Desigo DXR2 missing brute-force protection7.5v3.10.9%2022-05-20Fix
CVE-2022-24043Siemens Desigo DXR2 observable discrepancy5.3v3.11.0%2022-05-20Fix
CVE-2022-22973VMware Workspace ONE Access and Identity Manager privilege escalation7.8v3.12.4%2022-05-20Fix
CVE-2022-22972VMware Workspace ONE Access, Identity Manager and vRealize Automation authentication bypass9.8NVD v3.156.3%2022-05-20Reported exploitedNucleiExploit codeFix
CVE-2022-22365IBM WebSphere Application Server man-in-the-middle5.6CNA v3.00.6%2022-05-20Fix
CVE-2022-21500Oracle User Management unauthorized access7.5CNA v3.171.7%2022-05-20NucleiExploit codeFix
CVE-2022-21195url-regex regular expression denial of service (ReDoS)7.5v3.11.3%2022-05-20
CVE-2022-1806Cross-site scripting (XSS) Reflected in rtxteam/Rtx6.1v3.10.8%2022-05-20Fix
CVE-2022-1803Improper restriction of rendered UI layers or frames in polonel/trudesk6.9NVD v3.11.6%2022-05-20Fix
CVE-2022-1784Server-side request forgery (SSRF) in jgraph/drawio7.5v3.11.8%2022-05-20Fix
CVE-2022-1775Weak password requirements in polonel/trudesk9.8v3.12.2%2022-05-20Fix
CVE-2022-1770Improper privilege management in polonel/trudesk8.8NVD v3.12.5%2022-05-20Fix
CVE-2022-1754Integer overflow or wraparound in polonel/trudesk6.5NVD v3.11.0%2022-05-20Fix
CVE-2022-30618Improper removal of sensitive information before storage or transfer in Strapi7.5v3.10.9%2022-05-19Fix
CVE-2022-30617Improper removal of sensitive information before storage or transfer in Strapi8.8v3.11.5%2022-05-19Fix
CVE-2022-30018MOBOTIX Mxcontrolcenter insufficiently protected credentials8.8v3.11.1%2022-05-19
CVE-2022-29652Online Sports Complex Booking System SQL injection6.1v3.10.8%2022-05-19
CVE-2022-29449Opal Hotel Room Booking WordPress plugin stored cross-site scripting (XSS)5.4v3.10.5%2022-05-19
CVE-2022-29446Counter Box WordPress plugin authenticated local file inclusion (LFI)7.2v3.11.0%2022-05-19Fix
CVE-2022-29304Online Sports Complex Booking System SQL injection8.8v3.10.8%2022-05-19
CVE-2022-28962Online Sports Complex Booking System SQL injection9.8v3.11.6%2022-05-19
CVE-2022-28961SPIP /ecrire SQL injection8.8v3.11.7%2022-05-19Fix
CVE-2022-28960SPIP _oups parameter vulnerability8.8v3.12.0%2022-05-19Fix
CVE-2022-28959SPIP component / cross-site scripting6.1v3.11.6%2022-05-19Fix
CVE-2022-28948yaml gopkg.in/yaml.v3 denial of service7.5v3.14.0%2022-05-19Fix
CVE-2022-28946Out-of-bounds memory access in github.com/open-policy-agent/opa7.5v3.11.0%2022-05-19Fix
CVE-2022-28927Subconverter A remote code execution9.8v3.133.6%2022-05-19
CVE-2022-28350Arm Valhall GPU Kernel Driver use-after-free9.8v3.11.4%2022-05-19Fix
CVE-2022-28349Arm Bifrost GPU Kernel Driver use-after-free9.8v3.11.2%2022-05-19Fix
CVE-2022-28348Arm Bifrost GPU Kernel Driver use-after-free9.8v3.11.4%2022-05-19Fix
CVE-2022-22978Authorization bypass in Spring Security9.8v3.112.2%2022-05-19Exploit codeFix
CVE-2022-22976Integer overflow in BCrypt class in Spring Security5.3v3.12.3%2022-05-19Exploit codeFix
CVE-2022-1796vim/vim GitHub repository use-after-free7.8v3.11.1%2022-05-19Fix
CVE-2022-1785Out-of-bounds write in Vim/Vim7.8v3.10.5%2022-05-19Fix
CVE-2022-1730Cross-site scripting (XSS) Stored in jgraph/drawio4.6v3.10.6%2022-05-19Fix
CVE-2022-1670Octopus Deploy Octopus Server user invitation codes vulnerability7.5v3.10.8%2022-05-19Fix
CVE-2022-1423GitLab CI/CD cache mechanism improper access control7.1CNA v3.11.4%2022-05-19Fix
CVE-2022-1416GitLab cross-site scripting4.3CNA v3.10.7%2022-05-19Fix
CVE-2022-1413GitLab insufficiently protected credentials5.4CNA v3.10.9%2022-05-19Fix
CVE-2022-1183ISC BIND 9 destroying a TLS session early causes assertion failure7.5CNA v3.16.2%2022-05-19Fix
CVE-2022-30994Acronis Cyber Protect 15 cleartext transmission of sensitive information7.5v3.10.6%2022-05-18Fix
CVE-2022-30993Acronis Cyber Protect 15 cleartext transmission of sensitive information7.5v3.10.6%2022-05-18Fix
CVE-2022-30992Acronis Cyber Protect 15 open redirect via user-controlled query parameter6.1v3.10.5%2022-05-18Fix
CVE-2022-30991Acronis Cyber Protect 15 HTML injection via report name6.1v3.10.5%2022-05-18Fix
CVE-2022-30990Acronis Cyber Protect 15 sensitive information disclosure due to insecure folder permissions7.5v3.10.9%2022-05-18Fix
CVE-2022-30976gpac out-of-bounds read7.1v3.10.9%2022-05-18Fix
CVE-2022-30975Artifex MuJS null pointer dereference5.5v3.11.1%2022-05-18Fix
CVE-2022-30974Artifex MuJS uncontrolled recursion5.5v3.11.1%2022-05-18Fix
CVE-2022-30600Incorrect calculation in Moodle9.8NVD v3.15.1%2022-05-18Exploit codeFix
CVE-2022-30599SQL injection in Moodle9.8NVD v3.11.4%2022-05-18Fix
CVE-2022-30598Exposure of sensitive information in Moodle4.3NVD v3.11.1%2022-05-18Fix
CVE-2022-30597External control of assumed-immutable web parameter in Moodle5.3NVD v3.11.3%2022-05-18Fix
CVE-2022-30596Cross-site scripting in Moodle5.4NVD v3.10.9%2022-05-18Fix
CVE-2022-30138Microsoft Windows Print Spooler elevation of privilege7.8CNA v3.11.0%2022-05-18Fix
CVE-2022-30111Mck Smartlock weak cryptographic algorithm6.8v3.10.3%2022-05-18
CVE-2022-30105Belkin N300 Firmware OS command injection9.8v3.12.9%2022-05-18
CVE-2022-30065BusyBox A use-after-free7.8v3.11.2%2022-05-18Fix
CVE-2022-30033Tenda TX9 Pro buffer overflow7.5v3.11.2%2022-05-18
CVE-2022-29646TOTOLINK A3100R An improper access control5.3v3.10.8%2022-05-18
CVE-2022-29645TOTOLINK A3100R hard-coded credentials9.8v3.11.4%2022-05-18
CVE-2022-29644TOTOLINK A3100R hard-coded credentials9.8v3.11.6%2022-05-18
CVE-2022-29643TOTOLINK A3100R out-of-bounds write7.5v3.11.2%2022-05-18
CVE-2022-29642TOTOLINK A3100R out-of-bounds write7.5v3.11.2%2022-05-18
CVE-2022-29641TOTOLINK A3100R out-of-bounds write7.5v3.11.2%2022-05-18
CVE-2022-29640TOTOLINK A3100R out-of-bounds write7.5v3.11.2%2022-05-18
CVE-2022-29639TOTOLINK A3100R command injection8.1v3.11.8%2022-05-18
CVE-2022-29638TOTOLINK A3100R out-of-bounds write7.5v3.11.2%2022-05-18
CVE-2022-29518KOYO ELECTRONICS INDUSTRIES Screen Creator Advance2 authentication bypass7.0v3.10.2%2022-05-18Fix
CVE-2022-29516Fujitsu IPCOM EX2 series OS command injection9.8v3.12.2%2022-05-18Fix
CVE-2022-29445Popup Box WordPress plugin authenticated local file inclusion (LFI)7.2v3.11.0%2022-05-18Fix
CVE-2022-29230Potential cross-site scripting (XSS) vulnerability in Hydrogen6.3CNA v3.10.8%2022-05-18Fix
CVE-2022-29229Missing cryptographic step in cassproject6.3CNA v3.10.3%2022-05-18Fix
CVE-2022-28956D-Link DIR-816L getcfg.php vulnerability9.8v3.122.4%2022-05-18
CVE-2022-28955D-Link DIR-816L An improper access control7.5v3.139.7%2022-05-18Nuclei
CVE-2022-28924Universis-students An information disclosure6.5v3.11.0%2022-05-18
CVE-2022-28921BlogEngine.NET cross-site request forgery6.5v3.10.7%2022-05-18
CVE-2022-28917Tenda AX12 out-of-bounds write7.5v3.19.3%2022-05-18
CVE-2022-28717Meikyo Watch Boot Nino Rpc-m2c Rebooter( cross-site scripting4.8v3.10.6%2022-05-18Fix
CVE-2022-27632Meikyo Watch Boot Nino Rpc-m2c Rebooter( cross-site request forgery8.8v3.10.5%2022-05-18Fix
CVE-2022-25617Code Snippets WordPress plugin reflected cross-site scripting (XSS)6.1v3.10.8%2022-05-18Fix
CVE-2022-25162Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z improper input validation5.3v3.12.7%2022-05-18Fix
CVE-2022-25161Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z improper input validation8.6v3.14.0%2022-05-18Fix
CVE-2022-23068ToolJet HTML injection in Invite New User5.4v3.10.6%2022-05-18
CVE-2022-23067ToolJet token leakage via Referer header8.8CNA v3.11.3%2022-05-18
CVE-2022-22787Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings5.9CNA v3.13.6%2022-05-18Fix
CVE-2022-22786Zoom Client for Meetings update process vulnerability7.5CNA v3.11.5%2022-05-18Fix
CVE-2022-22785Improperly constrained session cookies in Zoom Client for Meetings5.9CNA v3.13.5%2022-05-18Fix
CVE-2022-22784Improper XML Parsing in Zoom Client for Meetings8.1CNA v3.14.0%2022-05-18Fix
CVE-2022-22778TIBCO BusinessConnect Trading Community Management cross-site request forgery8.8CNA v3.10.4%2022-05-18Fix
CVE-2022-22777TIBCO BusinessConnect Trading Community Management reflected cross-site scripting6.1CNA v3.10.6%2022-05-18Fix
CVE-2022-22776TIBCO BusinessConnect Trading Community Management stored cross-site scripting8.0CNA v3.10.6%2022-05-18Fix
CVE-2022-1795gpac/gpac GitHub repository use-after-free9.8v3.11.1%2022-05-18Fix
CVE-2022-1782Cross-site scripting (XSS) Generic in Erudika/para6.1NVD v3.11.0%2022-05-18Fix
CVE-2022-1774Exposure of sensitive information to an unauthorized actor in jgraph/drawio6.1NVD v3.11.2%2022-05-18Fix
CVE-2022-1771Uncontrolled recursion in Vim/Vim5.5v3.11.2%2022-05-18Fix
CVE-2022-1767Server-side request forgery (SSRF) in jgraph/drawio7.5v3.11.8%2022-05-18Fix
CVE-2022-1734kernel use-after-free7.0NVD v3.10.5%2022-05-18Fix
CVE-2022-1727Improper input validation in jgraph/drawio8.8v3.11.4%2022-05-18Fix
CVE-2022-1432Cross-site scripting (XSS) Generic in OctoPrint/OctoPrint6.4NVD v3.11.2%2022-05-18Fix
CVE-2022-1430Cross-site scripting (XSS) DOM in OctoPrint/OctoPrint7.5v3.11.3%2022-05-18Fix
CVE-2022-1110Lenovo Smart Standby Driver buffer overflow5.5CNA v3.10.2%2022-05-18Fix
CVE-2022-0883Snow License Manager Windows Unquoted/Trusted Service Paths7.3CNA v3.10.2%2022-05-18Fix
CVE-2022-30972Cross-site request forgery in Jenkins Storable Configs Plugin8.8v3.10.7%2022-05-17Fix
CVE-2022-30971XML external entity Reference in Jenkins Storable Configs Plugin8.8v3.11.2%2022-05-17Fix
CVE-2022-30970Cross-site scripting in Jenkins Autocomplete Parameter Plugin5.4v3.10.8%2022-05-17Fix
CVE-2022-30969Cross-site request forgery in Jenkins Autocomplete Parameter Plugin8.8v3.10.9%2022-05-17Fix
CVE-2022-30968Cross-site scripting in Jenkins Vboxwrapper Plugin5.4v3.10.8%2022-05-17Fix
CVE-2022-30967Cross-site scripting in Jenkins Selection Tasks Plugin5.4v3.10.8%2022-05-17Fix
CVE-2022-30966Cross-site scripting in Jenkins Random String Parameter Plugin5.4v3.10.7%2022-05-17Fix
CVE-2022-30965Jenkins Promoted Builds (Simple) Plugin cross-site scripting5.4v3.10.8%2022-05-17Fix
CVE-2022-30964Cross-site scripting in Jenkins Multiselect Parameter Plugin5.4v3.10.7%2022-05-17Fix
CVE-2022-30963Cross-site scripting in Jenkins JDK Parameter Plugin5.4v3.10.8%2022-05-17Fix
CVE-2022-30962Cross-site scripting in Jenkins Global Variable String Parameter Plugin5.4v3.10.7%2022-05-17Fix
CVE-2022-30961Cross-site scripting in Jenkins Autocomplete Parameter Plugin5.4v3.10.8%2022-05-17Fix
CVE-2022-30960Cross-site scripting in Jenkins Application Detector Plugin5.4v3.10.8%2022-05-17Fix
CVE-2022-30959Missing authorization in Jenkins SSH plugin6.5v3.10.9%2022-05-17Fix
CVE-2022-30958Cross-site request forgery in Jenkins SSH Plugin8.8v3.10.7%2022-05-17Fix
CVE-2022-30957Missing permission check in Jenkins SSH Plugin4.3v3.10.7%2022-05-17Fix
CVE-2022-30956Cross-site scripting in Jenkins Rundeck Plugin5.4v3.173.3%2022-05-17Fix
CVE-2022-30955Missing permission check in Jenkins GitLab Plugin6.5v3.10.9%2022-05-17Fix
CVE-2022-30954Missing permission check in Jenkins Blue Ocean Plugin6.5v3.10.9%2022-05-17Fix
CVE-2022-30953Cross-site request forgery in Jenkins Blue Ocean Plugin6.5v3.10.7%2022-05-17Fix
CVE-2022-30952Insufficiently protected credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin6.5v3.11.0%2022-05-17Fix
CVE-2022-30951Missing authorization in Jenkins WMI Windows Agents plugin8.8v3.10.9%2022-05-17Fix
CVE-2022-30950Buffer overflow in Jenkins WMI Windows Agents plugin8.8v3.11.8%2022-05-17Fix
CVE-2022-30949Path traversal in Jenkins REPO Plugin5.3v3.11.0%2022-05-17Fix
CVE-2022-30948Path traversal in Jenkins Mercurial Plugin7.5v3.11.5%2022-05-17Fix
CVE-2022-30947Path traversal in Jenkins Git Mercurial and Repo plugins7.5v3.11.3%2022-05-17Fix
CVE-2022-30946CSRF vulnerability in Jenkins Script Security Plugin4.3v3.10.6%2022-05-17Fix
CVE-2022-30945Jenkins Pipeline Groovy plugin sandbox script security sandbox bypass8.5v3.11.4%2022-05-17Fix
CVE-2022-30689HashiCorp Vault improper configuration of multi factor authentication5.3v3.11.2%2022-05-17Fix
CVE-2022-30688needrestart local privilege escalation7.8v3.10.4%2022-05-17Fix
CVE-2022-30110Cross-site scripting in Jirafeau6.1v3.10.6%2022-05-17Fix
CVE-2022-30073WBCE_CMS cross-site scripting5.4v3.11.6%2022-05-17Nuclei
CVE-2022-30072WBCE_CMS cross-site scripting5.4v3.10.9%2022-05-17
CVE-2022-30067GIMP buffer overflow5.5v3.10.8%2022-05-17Fix
CVE-2022-30054Covid 19 Travel Pass Management SQL injection9.8v3.11.2%2022-05-17
CVE-2022-30053oretnom23 Toll Tax Management System SQL injection9.8v3.11.2%2022-05-17
CVE-2022-30052Home Clean Service System SQL injection9.8v3.11.2%2022-05-17
CVE-2022-30045Ezxml out-of-bounds read6.5v3.11.0%2022-05-17Fix
CVE-2022-30007Gxcms unrestricted file upload7.2v3.11.0%2022-05-17
CVE-2022-29581Linux kernel net/sched improper reference count update7.8NVD v3.10.9%2022-05-17Fix
CVE-2022-29436Alexander Stokmann Code Snippets Extended (WordPress plugin) stored cross-site scripting6.1v3.10.4%2022-05-17
CVE-2022-29435Code Snippets Extended WordPress plugin cross-site request forgery (CSRF)5.4v3.10.4%2022-05-17Fix
CVE-2022-29429Code Snippets Extended WordPress plugin cross-site request forgery leading to remote code execution8.8v3.10.9%2022-05-17Fix
CVE-2022-29332D-Link DIR-825 path traversal6.5v3.11.4%2022-05-17
CVE-2022-29174Predictable password reset token may lead to account takeover in countly-server8.1CNA v3.11.5%2022-05-17Fix
CVE-2022-29162Incorrect default permissions in runc5.9CNA v3.10.4%2022-05-17Fix
CVE-2022-28617A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.9.8v3.12.0%2022-05-17Fix
CVE-2022-28616HPE OneView server-side request forgery9.8v3.11.4%2022-05-17Fix
CVE-2022-28192NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming use-after-free4.1CNA v3.10.2%2022-05-17Fix
CVE-2022-28191NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming resource exhaustion5.5CNA v3.10.3%2022-05-17Fix
CVE-2022-28190NVIDIA GPU Display Driver improper input validation5.5CNA v3.10.3%2022-05-17Fix
CVE-2022-28189NVIDIA GPU Display Driver null pointer dereference5.5CNA v3.10.3%2022-05-17Fix
CVE-2022-28188NVIDIA GPU Display Driver denial of service5.5CNA v3.10.3%2022-05-17Fix
CVE-2022-28187NVIDIA GPU Display Driver missing resource release5.5CNA v3.10.3%2022-05-17Fix
CVE-2022-28186NVIDIA GPU Display Driver denial of service6.1CNA v3.10.3%2022-05-17Fix
CVE-2022-28185NVIDIA GPU Display Driver out-of-bounds write6.8CNA v3.10.3%2022-05-17Fix
CVE-2022-28184NVIDIA GPU Display Driver denial of service7.1CNA v3.10.3%2022-05-17Fix
CVE-2022-28183NVIDIA GPU Display Driver out-of-bounds read7.7CNA v3.10.3%2022-05-17Fix
CVE-2022-28182NVIDIA GPU Display Driver out-of-bounds write8.5CNA v3.11.6%2022-05-17Fix
CVE-2022-28181NVIDIA GPU Display Driver out-of-bounds write8.5CNA v3.11.1%2022-05-17Fix
CVE-2022-26650Apache ShenYu (incubating) regular expression denial of service7.5v3.12.6%2022-05-17Fix
CVE-2022-24890Exposure of private personal information to an unauthorized actor in Nextcloud Talk2.4CNA v3.10.9%2022-05-17Fix
CVE-2022-24856Server-side request forgery in FlyteConsole9.1CNA v3.110.5%2022-05-17NucleiFix
CVE-2022-24611Silabs SD3502 denial of service6.5NVD v3.10.7%2022-05-17
CVE-2022-24394Authenticated command injection vulnerability in Fidelis Network and Deception8.8CNA v3.12.6%2022-05-17Fix
CVE-2022-24393Authenticated command injection vulnerability in Fidelis Network and Deception8.8CNA v3.12.7%2022-05-17Fix
CVE-2022-24392Authenticated command injection vulnerability in Fidelis Network and Deception8.8CNA v3.12.7%2022-05-17Fix
CVE-2022-24391Authenticated SQL injection vulnerability in Fidelis Network and Deception8.8CNA v3.11.0%2022-05-17Fix
CVE-2022-24390Authenticated command injection vulnerability in Fidelis Network and Deception8.8CNA v3.11.3%2022-05-17Fix
CVE-2022-24389Authenticated Privileged command injection vulnerability in Fidelis Network and Deception8.8CNA v3.11.5%2022-05-17Fix
CVE-2022-24388Authenticated Privileged command injection vulnerability in Fidelis Network and Deception8.8CNA v3.11.5%2022-05-17Fix
CVE-2022-24108Skyoftech So Listing Tabs deserialization of untrusted data9.8v3.133.0%2022-05-17
CVE-2022-23706HPE OneView cross-site scripting6.1v3.10.7%2022-05-17Fix
CVE-2022-23675Aruba ClearPass Policy Manager cross-site scripting4.8v3.10.6%2022-05-17Fix
CVE-2022-23674Aruba ClearPass Policy Manager cross-site scripting5.4v3.10.6%2022-05-17Fix
CVE-2022-23673Aruba ClearPass Policy Manager OS command injection7.2v3.12.2%2022-05-17Fix
CVE-2022-23672Aruba ClearPass Policy Manager OS command injection7.2v3.12.2%2022-05-17Fix
CVE-2022-23671Aruba ClearPass Policy Manager information disclosure7.5v3.11.3%2022-05-17Fix
CVE-2022-23669Aruba ClearPass Policy Manager insufficient session expiration8.8v3.11.0%2022-05-17Fix
CVE-2022-22775TIBCO ActiveMatrix BPM reflected cross-site scripting (XSS)8.1CNA v3.10.5%2022-05-17Fix
CVE-2022-22773TIBCO JasperReports Server reflected cross-site scripting (XSS)7.7CNA v3.10.5%2022-05-17Fix
CVE-2022-22484IBM Spectrum Protect Operations Center cleartext storage of sensitive information5.1CNA v3.00.2%2022-05-17Fix
CVE-2022-22482IBM Sterling B2B Integrator unrestricted file upload6.5CNA v3.01.0%2022-05-17Fix
CVE-2022-22475IBM WebSphere Application Server spoofing5.0CNA v3.00.6%2022-05-17Fix
CVE-2022-1769Buffer over-read in Vim/Vim7.8v3.10.4%2022-05-17Fix
CVE-2022-1753WoWonder Group requests.php access control4.3v3.10.9%2022-05-17
CVE-2022-1735Classic buffer overflow in Vim/Vim7.8v3.11.3%2022-05-17Fix
CVE-2022-1733Heap-based buffer overflow in Vim/Vim7.8v3.10.6%2022-05-17Fix
CVE-2022-1723Server-side request forgery (SSRF) in jgraph/drawio7.5v3.11.7%2022-05-17Fix
CVE-2022-1711Server-side request forgery (SSRF) in jgraph/drawio7.5v3.15.7%2022-05-17NucleiFix
CVE-2022-1706Ignition config accessible to unprivileged software on VMware6.5NVD v3.11.3%2022-05-17Fix
CVE-2022-1362Cambium Networks cnMaestro OS command injection7.3v3.10.8%2022-05-17Fix
CVE-2022-1361Cambium Networks cnMaestro SQL injection7.5v3.10.9%2022-05-17Fix
CVE-2022-1360Cambium Networks cnMaestro OS command injection9.8v3.11.8%2022-05-17Fix
CVE-2022-1359Cambium Networks cnMaestro path traversal7.5v3.10.9%2022-05-17Fix
CVE-2022-1358Cambium Networks cnMaestro SQL injection7.5v3.10.8%2022-05-17Fix
CVE-2022-1357Cambium Networks cnMaestro OS command injection9.8v3.11.7%2022-05-17Fix
CVE-2022-1356Cambium Networks cnMaestro use of potentially dangerous function7.8v3.10.3%2022-05-17Fix
CVE-2022-1118Rockwell Automation ISaGRAF deserialization of untrusted data7.8v3.111.7%2022-05-17
CVE-2022-1116Linux kernel io_uring integer overflow7.8NVD v3.10.5%2022-05-17Fix
CVE-2022-0997Local privilege escalation vulnerability in Fidelis Network and Deception3.9CNA v3.10.5%2022-05-17Exploit codeFix
CVE-2022-0486Privileged command injection vulnerability in Fidelis Network and Deception4.4CNA v3.10.4%2022-05-17Fix
CVE-2022-30782Openmoney API insufficient randomness7.5v3.11.2%2022-05-16
CVE-2022-30781Shell command injection in Gitea7.5v3.187.9%2022-05-16MetasploitExploit codeFix
CVE-2022-30777Parallels H-sphere cross-site scripting6.1v3.12.3%2022-05-16Nuclei
CVE-2022-30776Atmail cross-site scripting6.1v3.14.3%2022-05-16NucleiFix
CVE-2022-30775Xpdfreader Xpdf resource exhaustion5.5v3.10.8%2022-05-16Fix
CVE-2022-30770Terminalfour cross-site scripting6.1v3.11.0%2022-05-16Fix
CVE-2022-30767denx U-Boot buffer overflow9.8v3.12.7%2022-05-16Fix
CVE-2022-30765janeczku Calibre-Web SQL injection in calibreweb9.8v3.11.2%2022-05-16Fix
CVE-2022-30763janet-lang janet improper array index validation7.5v3.11.8%2022-05-16Fix
CVE-2022-30697Acronis Snap Deploy local privilege escalation due to insecure folder permissions7.8v3.10.2%2022-05-16Fix
CVE-2022-30696Acronis Snap Deploy local privilege escalation due to a DLL hijacking7.8v3.10.2%2022-05-16Fix
CVE-2022-30695Acronis Snap Deploy child process permissions privilege escalation7.8v3.10.2%2022-05-16Fix
CVE-2022-30523Trend Micro Password Manager link following7.8v3.10.4%2022-05-16Fix
CVE-2022-30126Apache Tika regular expression denial of service in Standards Extractor5.5v3.12.6%2022-05-16Fix
CVE-2022-30055Mersenne Prime95 buffer overflow9.8v3.13.9%2022-05-16
CVE-2022-30050Sir Gnuboard cross-site scripting6.1v3.10.7%2022-05-16
CVE-2022-30013total.js upload function of totaljs CMS stored cross-site scripting5.4v3.10.6%2022-05-16Fix
CVE-2022-30012Hospital Management System SQL injection7.5v3.11.7%2022-05-16
CVE-2022-30011Hospital Management System SQL injection9.8v3.118.5%2022-05-16
CVE-2022-29623Connect-multiparty allows arbitrary file upload7.8v3.11.3%2022-05-16
CVE-2022-29622Formidable An arbitrary file upload9.8v3.13.5%2022-05-16Exploit codeFix
CVE-2022-29588Konica Minolta Bizhub 226I insufficiently protected credentials7.5v3.11.7%2022-05-16
CVE-2022-29587Konica Minolta Bizhub 226I improper privilege management4.0v3.10.4%2022-05-16
CVE-2022-29586Konica Minolta Bizhub 226I sandbox escape7.4v3.10.4%2022-05-16
CVE-2022-29354keystonejs keystone file upload module arbitrary file upload9.8v3.12.4%2022-05-16
CVE-2022-29353Graphql-upload file upload module arbitrary file upload9.8v3.11.7%2022-05-16Fix
CVE-2022-29351Tiddlywiki5 file upload module arbitrary file upload9.8v3.12.5%2022-05-16
CVE-2022-29017Axiosys Bento4 improper exception handling5.5v3.10.6%2022-05-16
CVE-2022-25169Apache Tika BPGParser Memory Usage DoS5.5v3.12.1%2022-05-16Fix
CVE-2022-23670Aruba ClearPass Policy Manager information disclosure6.5v3.11.0%2022-05-16Fix
CVE-2022-23668Aruba ClearPass Policy Manager server-side request forgery4.9v3.10.9%2022-05-16Fix
CVE-2022-23667Aruba ClearPass Policy Manager OS command injection7.2v3.11.5%2022-05-16Fix
CVE-2022-23666Aruba ClearPass Policy Manager OS command injection9.1v3.12.2%2022-05-16Fix
CVE-2022-23665Aruba ClearPass Policy Manager OS command injection9.1v3.12.2%2022-05-16Fix
CVE-2022-23664Aruba ClearPass Policy Manager OS command injection9.1v3.12.2%2022-05-16Fix
CVE-2022-23663Aruba ClearPass Policy Manager OS command injection9.1v3.12.2%2022-05-16Fix
CVE-2022-23662Aruba ClearPass Policy Manager OS command injection9.1v3.12.2%2022-05-16Fix
CVE-2022-23661Aruba ClearPass Policy Manager OS command injection9.1v3.12.2%2022-05-16Fix
CVE-2022-23660Aruba ClearPass Policy Manager authentication bypass10.0v3.12.8%2022-05-16Fix
CVE-2022-23659Aruba ClearPass Policy Manager cross-site scripting6.1v3.10.5%2022-05-16Fix
CVE-2022-23658Aruba ClearPass Policy Manager authentication bypass10.0v3.12.8%2022-05-16Fix
CVE-2022-23657Aruba ClearPass Policy Manager authentication bypass10.0v3.13.1%2022-05-16Fix
CVE-2022-1731Metasonic Doc WebClient SQL injection9.8NVD v3.11.2%2022-05-16
CVE-2022-1728Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk6.5NVD v3.11.0%2022-05-16Fix
CVE-2022-1726Cross-site scripting in Bootstrap-table5.4v3.10.8%2022-05-16Fix
CVE-2022-1722SSRF in editor's proxy via IPv6 link-local address in jgraph/drawio3.3NVD v3.10.5%2022-05-16Fix
CVE-2022-1721Path traversal in WellKnownServlet in jgraph/drawio7.5v3.12.2%2022-05-16Fix
CVE-2022-1713SSRF on /proxy in jgraph/drawio7.5v3.19.2%2022-05-16NucleiFix
CVE-2022-1679Linux kernel A use-after-free7.8NVD v3.10.8%2022-05-16Fix
CVE-2022-1587pcre2 out-of-bounds read9.1NVD v3.12.8%2022-05-16Fix
CVE-2022-1586pcre2 out-of-bounds read9.1NVD v3.13.4%2022-05-16Fix
CVE-2022-1560Amministrazione Aperta WordPress plugin Admin+ LFI6.5NVD v3.12.3%2022-05-16Fix
CVE-2022-1559Clipr WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.11.0%2022-05-16
CVE-2022-1557ULeak Security and Monitoring WordPress plugin Subscriber+ stored cross-site scripting5.4NVD v3.11.1%2022-05-16
CVE-2022-1553Leaking password protected articles content due to improper access control in publify/publify4.9NVD v3.11.2%2022-05-16Fix
CVE-2022-1512ScrollReveal.js Effects WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-05-16
CVE-2022-1465WPC Smart Wishlist for WooCommerce WordPress plugin reflected cross-site scripting6.1NVD v3.10.9%2022-05-16Fix
CVE-2022-1455The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled6.1NVD v3.10.8%2022-05-16Fix
CVE-2022-1436WPCargo Track and Trace WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-16Fix
CVE-2022-1435WPCargo Track and Trace WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-16Fix
CVE-2022-1425WPQA WordPress plugin Subscriber+ Private Message disclosure via IDOR4.3NVD v3.10.8%2022-05-16Fix
CVE-2022-1418Social Stickers WordPress plugin stored cross-site scripting via CSRF6.1NVD v3.10.4%2022-05-16
CVE-2022-1409VikBooking Hotel Booking Engine and PMS WordPress plugin Admin+ PHP file upload7.2NVD v3.11.5%2022-05-16Fix
CVE-2022-1408VikBooking Hotel Booking Engine and PMS WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-16Fix
CVE-2022-1407VikBooking Hotel Booking Engine and PMS WordPress plugin stored cross-site scripting via CSRF6.5NVD v3.10.5%2022-05-16Fix
CVE-2022-1398External Media without Import WordPress plugin Subscriber+ blind SSRF6.5NVD v3.13.0%2022-05-16Nuclei
CVE-2022-1393WP Subtitle WordPress plugin Contributor+ stored cross-site scripting5.4NVD v3.10.6%2022-05-16Fix
CVE-2022-1386Fusion Builder WordPress plugin unauthenticated SSRF9.8NVD v3.171.4%2022-05-16NucleiExploit codeFix
CVE-2022-1349WPQA WordPress plugin Subscriber+ arbitrary Profile Picture deletion via IDOR4.3NVD v3.10.7%2022-05-16Fix
CVE-2022-1334WP YouTube Live WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-05-16Fix
CVE-2022-1267BMI BMR Calculator WordPress plugin reflected cross-site scripting6.1NVD v3.10.9%2022-05-16
CVE-2022-1265BulletProof Security WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-16Fix
CVE-2022-1217Custom TinyMCE Shortcode Button WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-16
CVE-2022-1216Advanced Image Sitemap WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-05-16
CVE-2022-1182Visual Slide Box Builder WordPress plugin Subscriber+ SQLi8.8NVD v3.11.3%2022-05-16
CVE-2022-1103Advanced Uploader WordPress plugin Subscriber+ arbitrary file upload8.8NVD v3.115.6%2022-05-16Exploit code
CVE-2022-1089Bulk Edit and Create User Profiles WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-16Fix
CVE-2022-1062th23 Social WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-05-16
CVE-2022-1051WPQA WordPress plugin Subscriber+ stored cross-site scripting via Profile fields5.4NVD v3.11.3%2022-05-16Exploit codeFix
CVE-2022-0873Gmedia Photo Gallery WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.9%2022-05-16NucleiFix
CVE-2022-0867Repute InfoSystems Pricing Table AJAX action SQL injection9.8NVD v3.113.5%2022-05-16NucleiFix
CVE-2022-0578Code injection in publify/publify6.5v3.10.9%2022-05-16Fix
CVE-2022-0574Improper access control in publify/publify6.5v3.10.8%2022-05-16Fix
CVE-2022-0573JFrog Artifactory deserialization of untrusted data8.8CNA v3.12.1%2022-05-16Fix
CVE-2022-30708Webmin remote code execution8.8v3.13.6%2022-05-15Fix
CVE-2022-30049ruifang-tech Rebuild server-side request forgery7.5v3.11.0%2022-05-15
CVE-2022-28937FISCO-BCOS integer overflow7.5v3.11.2%2022-05-15
CVE-2022-28936FISCO-BCOS integer overflow7.5v3.10.9%2022-05-15
CVE-2022-28930Erp-pro SQL injection9.8v3.11.1%2022-05-15
CVE-2022-28929Hospital Management System SQL injection9.8v3.11.6%2022-05-15
CVE-2022-24831Improper neutralization of special elements used in an SQL command (SQL injection) in OpenClinica8.3CNA v3.11.1%2022-05-14Fix
CVE-2022-24830Path traversal in OpenClinica6.5CNA v3.13.2%2022-05-14Fix
CVE-2022-1379URL Restriction Bypass in PlantUML/PlantUML9.1v3.11.6%2022-05-14Fix
CVE-2022-30489WAVLINK WN535G3 cross-site scripting6.1v3.14.2%2022-05-13NucleiExploit code
CVE-2022-30417Covid 19 Travel Pass Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30415Covid 19 Travel Pass Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30414Covid 19 Travel Pass Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30413Covid 19 Travel Pass Management System SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30412Covid 19 Travel Pass Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30411Covid 19 Travel Pass Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30408Covid 19 Travel Pass Management System file deletion6.5v3.10.9%2022-05-13
CVE-2022-30407Pharmacy Sales and Inventory System SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30404College Management System SQL injection7.2v3.10.8%2022-05-13
CVE-2022-30403Merchandise Online Store Product Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30402Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30401Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30400Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30399Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30398Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30396Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30395Merchandise Online Store SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30393Merchandise Online Store SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30392Merchandise Online Store SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30391Merchandise Online Store SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30387Merchandise Online Store SQL injection9.8v3.10.9%2022-05-13
CVE-2022-30386Merchandise Online Store SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30385Merchandise Online Store SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30384Merchandise Online Store SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30381Merchandise Online Store file deletion6.5v3.10.9%2022-05-13
CVE-2022-30379Simple Social Networking Site SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30378Simple Social Networking Site SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30376Simple Social Networking Site SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30375Simple Social Networking Site incorrect default permissions6.5v3.10.9%2022-05-13
CVE-2022-30374Air Cargo Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30373Air Cargo Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30372Air Cargo Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30371Air Cargo Management System SQL injection7.2v3.11.0%2022-05-13
CVE-2022-30370Air Cargo Management System SQL injection9.8v3.11.1%2022-05-13
CVE-2022-30367Air Cargo Management System incorrect default permissions6.5v3.10.9%2022-05-13
CVE-2022-29854Mitel 6905 incorrect authorization6.8v3.10.6%2022-05-13Fix
CVE-2022-29796Huawei HarmonyOS unstrict verification of the validity of the weight in the model in hiaiserver7.5v3.10.6%2022-05-13Fix
CVE-2022-29795Huawei HarmonyOS null pointer dereference vulnerability in the frame scheduling module7.5v3.10.6%2022-05-13Fix
CVE-2022-29794Huawei HarmonyOS UAF vulnerability in the frame scheduling module9.8v3.10.7%2022-05-13Fix
CVE-2022-29793HarmonyOS configuration defects in the activation lock of the mobile phone7.5v3.10.9%2022-05-13Fix
CVE-2022-29792Huawei HarmonyOS serial number obtaining vulnerability in the chip assembly7.5v3.10.7%2022-05-13Fix
CVE-2022-29791Huawei HarmonyOS unstrict verification of the validity of the weight in the model in hiaiserver7.5v3.10.6%2022-05-13Fix
CVE-2022-29790Huawei HarmonyOS graphics acceleration service vulnerability7.5v3.10.6%2022-05-13Fix
CVE-2022-29789Huawei HarmonyOS unstrict verification of the validity of the property in the model in hiaiserver7.5v3.10.6%2022-05-13Fix
CVE-2022-29433Donations (WordPress plugin) stored cross-site scripting5.4v3.10.5%2022-05-13
CVE-2022-29383NETGEAR SSL312 SQL injection9.8v3.149.0%2022-05-13NucleiExploit codeFix
CVE-2022-29218rubygems.org unauthorized takeover for new versions of some platform-specific gems7.7CNA v3.11.3%2022-05-13Fix
CVE-2022-28830Adobe FrameMaker Font Parsing out-of-bounds read information disclosure5.5CNA v3.11.8%2022-05-13Fix
CVE-2022-28829Adobe FrameMaker Font Parsing out-of-bounds write remote code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-28828Adobe FrameMaker PDF File Parsing out-of-bounds write code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-28827Adobe FrameMaker SVG File Parsing out-of-bounds write remote code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-28826Adobe FrameMaker Font Parsing out-of-bounds write remote code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-28825Adobe FrameMaker Font Parsing out-of-bounds write remote code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-28824Adobe FrameMaker Font Parsing use-after-free remote code execution7.8CNA v3.02.8%2022-05-13Fix
CVE-2022-28823Adobe FrameMaker Font Parsing use-after-free remote code execution7.8CNA v3.02.8%2022-05-13Fix
CVE-2022-28822Adobe FrameMaker Font Parsing out-of-bounds write remote code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-28821Adobe FrameMaker Font Parsing out-of-bounds write remote code execution7.8CNA v3.02.2%2022-05-13Fix
CVE-2022-27247Cdsoft Winhotel.mx insecure direct object reference5.3v3.11.0%2022-05-13
CVE-2022-27134B1 Eosio Batdappboomx incorrect authorization7.5v3.12.1%2022-05-13Exploit code
CVE-2022-25865workspace-tools command injection9.8v3.16.8%2022-05-13Fix
CVE-2022-25862sds prototype pollution7.5v3.10.7%2022-05-13
CVE-2022-25762Apache Tomcat response mix-up with WebSocket concurrent send and close8.6NVD v3.18.4%2022-05-13Fix
CVE-2022-25591BlogEngine.NET path traversal9.1v3.12.7%2022-05-13
CVE-2022-22393IBM WebSphere Application Server Liberty admin center vulnerability3.1CNA v3.00.7%2022-05-13Fix
CVE-2022-22325IBM MQ for HPE NonStop information disclosure5.1CNA v3.00.2%2022-05-13Fix
CVE-2022-22282SonicWall SMA1000 improper access control9.8v3.17.4%2022-05-13Fix
CVE-2022-22281SonicWall NetExtender Windows (32 and 64 bit) Client SonicWall SSL-VPN buffer overflow7.8v3.10.5%2022-05-13Fix
CVE-2022-22261Huawei HarmonyOS unstrict verification of the validity of the weight in the model in hiaiserver7.5v3.10.6%2022-05-13Fix
CVE-2022-22260Huawei HarmonyOS UAF vulnerability in the kernel module9.1v3.10.6%2022-05-13Fix
CVE-2022-22252HarmonyOS UAF vulnerability in the DFX module7.5v3.10.7%2022-05-13Fix
CVE-2022-21190convict prototype pollution9.8v3.13.9%2022-05-13Fix
CVE-2022-1715Account takeover in NeoRazorX/Facturascripts9.8v3.11.4%2022-05-13Fix
CVE-2022-1714Out-of-bounds read in radareorg/radare27.1v3.10.4%2022-05-13Fix
CVE-2022-1702SonicWall SMA1000 open redirect6.1v3.18.6%2022-05-13Fix
CVE-2022-1701SonicWall SMA1000 hard-coded cryptographic key7.5v3.14.6%2022-05-13Fix
CVE-2022-30594Linux kernel missing authorization7.8v3.10.8%2022-05-12Exploit codeFix
CVE-2022-30525Zyxel Multiple Firewalls OS command injection9.8CNA v3.199.9%2022-05-12KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2022-30279Stormshield Network Security null pointer dereference7.5v3.10.9%2022-05-12Fix
CVE-2022-30002Angeljudesuarez Insurance Management System SQL injection7.2v3.11.0%2022-05-12
CVE-2022-30001Angeljudesuarez Insurance Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-30000Angeljudesuarez Insurance Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29999Angeljudesuarez Insurance Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29998Angeljudesuarez Insurance Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29995Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29994Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29993Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29992Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29990Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29989Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29988Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29987Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29986Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29985Online Sports Complex Booking System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29984Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29983Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29982Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29981Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29980Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29979Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29930JetBrains Ktor SHA1 implementation vulnerability8.7CNA v3.10.9%2022-05-12Fix
CVE-2022-29929JetBrains TeamCity cross-site scripting3.7CNA v3.10.5%2022-05-12Fix
CVE-2022-29928JetBrains TeamCity sensitive information in log files4.4CNA v3.10.5%2022-05-12Fix
CVE-2022-29927JetBrains TeamCity cross-site scripting4.6CNA v3.11.5%2022-05-12Fix
CVE-2022-29885Apache Tomcat EncryptInterceptor does not provide complete protection on insecure networks7.5NVD v3.173.5%2022-05-12Exploit codeFix
CVE-2022-29751Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29750Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29749Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29748Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29747Simple Client Management System SQL injection9.8v3.11.6%2022-05-12
CVE-2022-29746Money Transfer Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29745Money Transfer Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29741Money Transfer Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29739Money Transfer Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29738Money Transfer Management System SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29539Resi Gemini-net OS command injection9.8v3.11.8%2022-05-12Fix
CVE-2022-29538Resi Gemini-net improper access control5.3v3.10.8%2022-05-12Fix
CVE-2022-29369F5 Njs improper check for exceptional conditions7.5v3.11.1%2022-05-12
CVE-2022-29368Moddable out-of-bounds read7.1v3.10.9%2022-05-12
CVE-2022-29363PHPOK deserialization of untrusted data9.8v3.11.3%2022-05-12
CVE-2022-29307Ionizecms Ionize code injection9.8v3.117.8%2022-05-12
CVE-2022-29306Ionizecms Ionize SQL injection9.8v3.11.1%2022-05-12
CVE-2022-29303SolarView Compact command injection9.8NVD v3.198.0%2022-05-12KEVNucleiEmerging ThreatsExploit codeFix
CVE-2022-29302Contec SV-CPT-MC310 files accessible to external parties5.5v3.10.3%2022-05-12
CVE-2022-29298Contec SV-CPT-MC310 path traversal7.5v3.146.8%2022-05-12NucleiExploit code
CVE-2022-28920Moecraft Tieba-cloud-sign cross-site scripting4.8v3.10.6%2022-05-12
CVE-2022-28919DokuWiki cross-site scripting6.1v3.11.4%2022-05-12Fix
CVE-2022-28873Multiple address bar spoofing vulnerability in F-Secure SAFE Browser for Android4.3v3.10.6%2022-05-12Fix
CVE-2022-28872Address bar spoofing vulnerability in F-Secure SAFE Browser for Android8.8v3.10.5%2022-05-12Fix
CVE-2022-28819Adobe Character Animator SVG File Parsing out-of-bounds write remote code execution7.8CNA v3.02.9%2022-05-12Fix
CVE-2022-28818Adobe ColdFusion reflected cross-site scripting could lead to arbitrary code execution6.1CNA v3.044.8%2022-05-12Fix
CVE-2022-27172InHand Networks InRouter302 console infactory functionality hard-coded credentials8.8v3.11.0%2022-05-12Fix
CVE-2022-26782InHand Networks InRouter302 libnvram.so nvram_import functionality improper input validation8.8NVD v3.13.3%2022-05-12Fix
CVE-2022-26781InHand Networks InRouter302 libnvram.so nvram_import functionality improper input validation8.8NVD v3.12.9%2022-05-12Fix
CVE-2022-26780InHand Networks InRouter302 libnvram.so nvram_import functionality improper input validation8.8NVD v3.13.3%2022-05-12Fix
CVE-2022-26518InHand Networks InRouter302 console infactory_net functionality OS command injection8.8NVD v3.14.9%2022-05-12Fix
CVE-2022-26510InHand Networks InRouter302 improper signature verification6.5NVD v3.11.3%2022-05-12Fix
CVE-2022-26420InHand Networks InRouter302 console infactory_port functionality OS command injection8.8NVD v3.15.9%2022-05-12Fix
CVE-2022-26085InHand Networks InRouter302 httpd wlscan_ASP functionality OS command injection8.8NVD v3.112.7%2022-05-12Fix
CVE-2022-26075InHand Networks InRouter302 console infactory_wlan functionality OS command injection8.8NVD v3.15.9%2022-05-12Fix
CVE-2022-26042InHand Networks InRouter302 daretools binary functionality OS command injection8.8NVD v3.18.6%2022-05-12Fix
CVE-2022-26020InHand Networks InRouter302 router configuration export functionality information disclosure6.5v3.10.7%2022-05-12Fix
CVE-2022-26007InHand Networks InRouter302 console factory functionality OS command injection7.2NVD v3.15.4%2022-05-12Fix
CVE-2022-26002InHand Networks InRouter302 console factory functionality stack-based buffer overflow7.2NVD v3.13.4%2022-05-12Fix
CVE-2022-25995InHand Networks InRouter302 console inhand functionality command execution8.8NVD v3.12.9%2022-05-12Fix
CVE-2022-25172InHand Networks InRouter302 web interface session cookie functionality information disclosure6.1NVD v3.11.0%2022-05-12Fix
CVE-2022-24910InHand Networks InRouter302 httpd parse_ping_result API functionality buffer overflow6.7NVD v3.11.3%2022-05-12Fix
CVE-2022-24382Intel(R) NUCs firmware for some improper input validation6.7v3.10.2%2022-05-12Fix
CVE-2022-24297Intel(R) NUCs privilege escalation6.7v3.10.2%2022-05-12Fix
CVE-2022-23742Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links.7.8NVD v3.14.2%2022-05-12Fix
CVE-2022-23166SysAid SysAid local file inclusion (LFI)9.8v3.11.1%2022-05-12
CVE-2022-23165SysAid SysAid reflected cross-site scripting (XSS)6.1v3.10.4%2022-05-12
CVE-2022-23139ZXMP M721 incorrect authorization8.8v3.10.7%2022-05-12Fix
CVE-2022-22971Allocation of resources without limits or throttling in Spring Framework6.5NVD v3.13.2%2022-05-12Exploit codeFix
CVE-2022-22970Denial of service in Spring Framework5.3NVD v3.12.0%2022-05-12Fix
CVE-2022-22798SysAid Pro Plus Edition, SysAid Help Desk broken access control8.8v3.10.6%2022-05-12
CVE-2022-22797SysAid SysAid open redirect6.1v3.10.5%2022-05-12
CVE-2022-22796SysAid SysAid System takeover9.8v3.11.4%2022-05-12
CVE-2022-22413IBM Robotic Process Automation SQL injection4.2CNA v3.01.3%2022-05-12Fix
CVE-2022-22139Intel(R) XTU software uncontrolled search path7.3v3.10.2%2022-05-12Fix
CVE-2022-21809InHand Networks InRouter302 insecure temporary file8.1NVD v3.11.8%2022-05-12Fix
CVE-2022-21238InHand Networks InRouter302 info.jsp functionality cross-site scripting6.1v3.11.4%2022-05-12Fix
CVE-2022-21237Intel(R) NUCs privilege escalation6.7v3.10.2%2022-05-12Fix
CVE-2022-21182InHand Networks InRouter302 router configuration import functionality privilege escalation8.8v3.11.9%2022-05-12Fix
CVE-2022-21151Intel(R) Processors information disclosure5.5v3.10.3%2022-05-12Fix
CVE-2022-21147ESTsoft Alyac malware scan functionality out-of-bounds read5.5v3.10.7%2022-05-12Fix
CVE-2022-21136Intel(R) Xeon(R) Processors improper input validation5.5v3.10.3%2022-05-12Fix
CVE-2022-21131Intel(R) Xeon(R) Processors improper access control5.5v3.10.3%2022-05-12Fix
CVE-2022-21128Intel(R) Advisor software insufficient control flow management7.8v3.10.2%2022-05-12Fix
CVE-2022-1699Uncontrolled resource consumption in causefx/Organizr7.5NVD v3.11.1%2022-05-12Fix
CVE-2022-1698Allowing long password leads to denial of service in causefx/Organizr7.5NVD v3.11.1%2022-05-12Fix
CVE-2022-1682Reflected XSS using URL based payload in NeoRazorX/Facturascripts6.1NVD v3.10.8%2022-05-12Fix
CVE-2022-1681Authentication bypass using an alternate path or channel in Requarks/wiki7.2v3.11.9%2022-05-12Fix
CVE-2022-1674Null pointer dereference in function vim_regexec_string at regexp.c:2733 in Vim/Vim5.5NVD v3.11.5%2022-05-12Fix
CVE-2022-1650Improper removal of sensitive information before storage or transfer in Eventsource/Eventsource9.3v3.11.9%2022-05-12Fix
CVE-2022-1044Sensitive data exposure due to Insecure Storage of Profile Image in polonel/trudesk6.5NVD v3.10.9%2022-05-12Fix
CVE-2022-0005Intel(R) Processors with SGX cleartext transmission of sensitive information2.4v3.10.2%2022-05-12Fix
CVE-2022-0004Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT privilege escalation6.8v3.10.3%2022-05-12Fix
CVE-2022-30592litespeedtech LSQUIC null pointer dereference9.8v3.13.2%2022-05-11Exploit codeFix
CVE-2022-30557Foxit PDF Editor type confusion7.5v3.14.3%2022-05-11Fix
CVE-2022-30453Shopwind remote code execution9.8v3.115.3%2022-05-11
CVE-2022-30452Shopwind SQL injection7.2v3.11.0%2022-05-11
CVE-2022-30451Waimairencms SQL injection8.8v3.11.5%2022-05-11
CVE-2022-30450Waimairencms remote code execution9.8v3.121.0%2022-05-11
CVE-2022-30449Hospital Management System SQL injection9.8v3.11.6%2022-05-11
CVE-2022-30448Hospital Management System unrestricted file upload9.8v3.11.9%2022-05-11
CVE-2022-30063ftcms code execution9.8v3.117.5%2022-05-11
CVE-2022-30062ftcms path traversal6.5v3.11.1%2022-05-11
CVE-2022-30061ftcms path traversal6.5v3.11.3%2022-05-11
CVE-2022-30060ftcms arbitrary file write8.8v3.11.1%2022-05-11
CVE-2022-30059Shopwind path traversal6.5v3.11.2%2022-05-11
CVE-2022-30058Shopwind path traversal5.3v3.11.1%2022-05-11
CVE-2022-30057Shopwind cross-site scripting5.4v3.10.5%2022-05-11
CVE-2022-30048Mingsoft MCMS SQL injection9.8v3.11.4%2022-05-11
CVE-2022-30047Mingsoft MCMS SQL injection9.8v3.11.4%2022-05-11
CVE-2022-30040Tenda AX1803 out-of-bounds write7.5v3.11.9%2022-05-11Exploit code
CVE-2022-29978saitoha libsixel incorrect calculation6.5v3.11.0%2022-05-11Fix
CVE-2022-29977saitoha libsixel stbi__jpeg_huff_decode reachable assertion6.5v3.11.0%2022-05-11Fix
CVE-2022-29976Altn Mdaemon cross-site scripting5.4v3.10.5%2022-05-11
CVE-2022-29975Altn Mdaemon cross-site scripting5.4v3.10.5%2022-05-11
CVE-2022-29932Primeur Spazio memory leak7.5NVD v3.12.7%2022-05-11Fix
CVE-2022-29898Remote code execution in all versions of various RAD-ISM-900-EN-* devices by Phoenix Contact9.1CNA v3.10.7%2022-05-11
CVE-2022-29897Remote code execution in all versions of various RAD-ISM-900-EN-* devices by Phoenix Contact9.1CNA v3.11.4%2022-05-11
CVE-2022-29855Mitel 6865i SIP improper access control6.8v3.10.7%2022-05-11Fix
CVE-2022-29848Progress WhatsUp Gold server-side request forgery6.5v3.13.6%2022-05-11Exploit codeFix
CVE-2022-29847Progress WhatsUp Gold server-side request forgery7.5v3.157.6%2022-05-11Exploit codeFix
CVE-2022-29846In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.5.3v3.15.1%2022-05-11Exploit codeFix
CVE-2022-29845Progress WhatsUp Gold inclusion of untrusted functionality6.5v3.14.0%2022-05-11Exploit codeFix
CVE-2022-29728Surveysparrow Enterprise Survey Software cross-site scripting6.1v3.10.5%2022-05-11
CVE-2022-29727Surveysparrow Enterprise Survey Software cross-site scripting5.4v3.12.4%2022-05-11Exploit code
CVE-2022-29656Wedding Management System SQL injection9.8v3.10.9%2022-05-11Fix
CVE-2022-29655Wedding Management System Upload Photos module arbitrary file upload7.2v3.11.4%2022-05-11
CVE-2022-29616SAP NetWeaver and ABAP Platform out-of-bounds write7.5v3.10.9%2022-05-11Fix
CVE-2022-29613SAP Employee Self Service (Fiori My Leave Request) improper input validation4.3v3.10.7%2022-05-11Fix
CVE-2022-29611SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization8.8v3.10.8%2022-05-11Fix
CVE-2022-29610SAP NetWeaver Application Server ABAP cross-site scripting5.4v3.10.4%2022-05-11Fix
CVE-2022-29596Microstrategy Enterprise Manager path traversal9.8v3.12.1%2022-05-11
CVE-2022-29318Car Rental Management System New Entry module arbitrary file upload7.2v3.11.4%2022-05-11
CVE-2022-29317Simple Bus Ticket Booking System SQL injection9.8v3.10.9%2022-05-11
CVE-2022-29316Complete Online Job Search System SQL injection9.8v3.13.3%2022-05-11Nuclei
CVE-2022-29009PHPGurukul Cyber Cafe Management System SQL injection9.8v3.122.6%2022-05-11NucleiExploit code