CVE-2022 records published in May 2022
This page lists the 1,672 CVE-2022 records published in May 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists nine of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 33019.7% of these records
- Listed in CISA KEV
- 90.5% of these records
- Reported exploited
- 20.1% of these records
- Detection signal
- 543.2% of these records
- Exploit code
- 814.8% of these records
- Actionable vendor fix
- 1,19471.4% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in May 2022 have had from about 53 months to about 54 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-31015 | Uncaught exception (due to a data race) leads to process termination in Waitress | 6.5CNA v3.1 | 1.5% | 2022-05-31 | Fix |
| CVE-2022-31013 | Authentication bypass in Vartalap chat-server | 9.1CNA v3.1 | 1.5% | 2022-05-31 | Fix |
| CVE-2022-31011 | TiDB authentication bypass | 7.8CNA v3.1 | 0.3% | 2022-05-31 | Fix |
| CVE-2022-31007 | Privilege escalation from administrator in eLabFTW | 4.9CNA v3.1 | 26.9% | 2022-05-31 | Exploit codeFix |
| CVE-2022-31005 | Integer overflow in Vapor's HTTP Range request | 7.5CNA v3.1 | 2.1% | 2022-05-31 | Fix |
| CVE-2022-31003 | Heap-based buffer overflow and out-of-bounds write in Sofia-SIP | 9.1CNA v3.1 | 3.8% | 2022-05-31 | Fix |
| CVE-2022-31002 | Out-of-bounds read in Sofia-SIP | 7.5CNA v3.1 | 1.9% | 2022-05-31 | Fix |
| CVE-2022-31001 | Out-of-bounds read in Sofia-SIP | 7.5CNA v3.1 | 2.1% | 2022-05-31 | Fix |
| CVE-2022-30973 | Regular expression denial of service in Apache Tika | 5.5v3.1 | 2.0% | 2022-05-31 | Fix |
| CVE-2022-29258 | Cross-site scripting in Filter Stream Converter application in XWiki Platform | 7.4CNA v3.1 | 1.0% | 2022-05-31 | Fix |
| CVE-2022-29245 | Weak private key generation in SSH.NET | 6.5CNA v3.1 | 1.5% | 2022-05-31 | Fix |
| CVE-2022-29243 | Improper input-size validation on the user new session name in Nextcloud Server | 4.3CNA v3.1 | 1.5% | 2022-05-31 | Fix |
| CVE-2022-29220 | No verification of commits origin in github-action-merge-dependabot | 6.5CNA v3.1 | 0.5% | 2022-05-31 | Fix |
| CVE-2022-23082 | CureKit path traversal in isFileOutsideDir | 7.5v3.1 | 1.3% | 2022-05-31 | Exploit codeFix |
| CVE-2022-22361 | IBM Business Process Manager cross-site request forgery | 4.3CNA v3.0 | 0.4% | 2022-05-31 | Fix |
| CVE-2022-1947 | Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3. | 6.5NVD v3.1 | 1.2% | 2022-05-31 | Fix |
| CVE-2022-1942 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.6% | 2022-05-31 | Fix |
| CVE-2022-1934 | mruby/mruby GitHub repository use-after-free | 7.8v3.1 | 0.4% | 2022-05-31 | Fix |
| CVE-2022-1931 | Incorrect synchronization in polonel/trudesk | 8.1NVD v3.1 | 2.1% | 2022-05-31 | Fix |
| CVE-2022-1926 | Integer overflow or wraparound in polonel/trudesk | 4.9NVD v3.1 | 1.0% | 2022-05-31 | Fix |
| CVE-2022-1893 | Improper removal of sensitive information before storage or transfer in polonel/trudesk | 5.3v3.1 | 0.8% | 2022-05-31 | Fix |
| CVE-2022-1808 | Execution with unnecessary privileges in polonel/trudesk | 8.8v3.1 | 3.5% | 2022-05-31 | Fix |
| CVE-2022-1462 | Linux kernel An out-of-bounds read | 6.3NVD v3.1 | 0.3% | 2022-05-31 | Fix |
| CVE-2022-1646 | Simple Real Estate Pack WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1645 | Amazon Link WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1644 | The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1643 | Birthdays Widget WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1611 | Bulk Page Creator WordPress plugin arbitrary page creation via CSRF | 8.8NVD v3.1 | 0.6% | 2022-05-30 | Fix |
| CVE-2022-1589 | Change wp-admin Login WordPress plugin unauthenticated arbitrary settings update | 7.5NVD v3.1 | 0.6% | 2022-05-30 | Fix |
| CVE-2022-1583 | External Links in New Window / New Tab WordPress plugin Tabnabbing | 6.5NVD v3.1 | 1.3% | 2022-05-30 | Fix |
| CVE-2022-1582 | External Links in New Window / New Tab WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-30 | Fix |
| CVE-2022-1568 | Team Members WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | Fix |
| CVE-2022-1566 | Quotes llama WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-05-30 | Fix |
| CVE-2022-1564 | Form Maker By 10Web WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 1.0% | 2022-05-30 | Fix |
| CVE-2022-1562 | Enable SVG WordPress plugin Author+ stored cross-site scripting via SVG | 5.4NVD v3.1 | 0.6% | 2022-05-30 | Fix |
| CVE-2022-1556 | StaffList WordPress plugin Admin+ SQLi | 9.8NVD v3.1 | 20.1% | 2022-05-30 | Fix |
| CVE-2022-1542 | HPB Dashboard WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1528 | VikBooking WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-30 | Fix |
| CVE-2022-1527 | WP 2FA WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-30 | Fix |
| CVE-2022-1456 | Poll Maker WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | Fix |
| CVE-2022-1395 | Easy FAQ with Expanding Text WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1387 | No Future Posts WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1299 | Slideshow WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1294 | IMDB info box WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1275 | BannerMan WordPress plugin Multiple Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | |
| CVE-2022-1203 | Content Mask WordPress plugin Subscriber+ arbitrary options update | 4.3NVD v3.1 | 1.0% | 2022-05-30 | Exploit codeFix |
| CVE-2022-1009 | Smush WordPress plugin Admin+ reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-30 | Fix |
| CVE-2022-0642 | JivoChat WordPress plugin stored cross-site scripting via CSRF | 5.4NVD v3.1 | 0.3% | 2022-05-30 | Fix |
| CVE-2022-0376 | User Meta WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-30 | Fix |
| CVE-2022-1928 | Cross-site scripting (XSS) Stored in go-gitea/Gitea | 5.4v3.1 | 0.8% | 2022-05-29 | Fix |
| CVE-2022-1927 | Buffer over-read in Vim/Vim | 7.8v3.1 | 1.7% | 2022-05-29 | Fix |
| CVE-2022-30701 | Trend Micro Apex One An uncontrolled search path | 7.8v3.1 | 0.4% | 2022-05-27 | Fix |
| CVE-2022-30700 | Trend Micro Apex One An incorrect permission assignment | 7.8v3.1 | 0.3% | 2022-05-27 | Fix |
| CVE-2022-30687 | Trend Micro Maximum Security link following | 7.1v3.1 | 0.4% | 2022-05-27 | Fix |
| CVE-2022-28394 | Trend Micro Password Manager uncontrolled search path | 7.8v3.1 | 0.3% | 2022-05-27 | Fix |
| CVE-2022-25878 | protobufjs prototype pollution | 7.5v3.1 | 2.3% | 2022-05-27 | Fix |
| CVE-2022-20807 | Cisco Expressway Series and TelePresence Video Communication Server information disclosure | 4.3CNA v3.1 | 1.0% | 2022-05-27 | Fix |
| CVE-2022-20806 | Cisco Expressway Series and TelePresence Video Communication Server information disclosure | 4.3CNA v3.1 | 1.0% | 2022-05-27 | Fix |
| CVE-2022-20802 | Cisco Enterprise Chat And Email stored cross-site scripting | 5.4CNA v3.1 | 0.6% | 2022-05-27 | Fix |
| CVE-2022-20797 | Cisco Secure Network Analytics remote code execution | 5.5CNA v3.1 | 1.7% | 2022-05-27 | Fix |
| CVE-2022-20765 | Cisco UCS Director JavaScript cross-site scripting | 4.8CNA v3.1 | 0.6% | 2022-05-27 | Fix |
| CVE-2022-20674 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20673 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20672 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20671 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20670 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20669 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20668 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20667 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-20666 | Cisco Common Services Platform Collector cross-site scripting | 6.1CNA v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-1909 | Cross-site scripting (XSS) Stored in causefx/Organizr | 5.4NVD v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-1908 | Buffer over-read in bfabiszewski/Libmobi | 8.1v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-1907 | Buffer over-read in bfabiszewski/Libmobi | 8.1v3.1 | 0.7% | 2022-05-27 | Fix |
| CVE-2022-1898 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.4% | 2022-05-27 | Fix |
| CVE-2022-1897 | Out-of-bounds write in Vim/Vim | 7.8v3.1 | 1.5% | 2022-05-27 | Fix |
| CVE-2022-31648 | Talend Administration Center cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-26 | Fix |
| CVE-2022-31265 | Wargaming World Of Warships authentication bypass by replay | 8.8v3.1 | 1.7% | 2022-05-26 | |
| CVE-2022-30789 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30788 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30787 | Tuxera NTFS-3G integer underflow | 6.7v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30786 | Tuxera NTFS-3G out-of-bounds write | 7.8v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30785 | A file handle created in fuse_lib_opendir, and later used in fuse_lib_readdir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite. | 6.7v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30784 | Tuxera NTFS-3G buffer overflow | 7.8v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30783 | Tuxera NTFS-3G unchecked return value | 6.7v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-30585 | RSA Archer authorization bypass | 6.5v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-30584 | RSA Archer improper access control | 8.8NVD v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-30516 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-26 | |
| CVE-2022-30508 | DedeCMS path traversal | 6.5v3.1 | 1.1% | 2022-05-26 | |
| CVE-2022-30500 | SQL injection in jflyfox jfinal | 9.8v3.1 | 1.1% | 2022-05-26 | |
| CVE-2022-30495 | Automotive Shop Management System insecure direct object reference | 9.8v3.1 | 1.2% | 2022-05-26 | |
| CVE-2022-30494 | Automotive Shop Management System cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-26 | |
| CVE-2022-30493 | Automotive Shop Management System SQL injection | 9.8v3.1 | 2.2% | 2022-05-26 | |
| CVE-2022-30477 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.4% | 2022-05-26 | |
| CVE-2022-30476 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.4% | 2022-05-26 | |
| CVE-2022-30475 | Tenda AC18 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-26 | |
| CVE-2022-30474 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.4% | 2022-05-26 | |
| CVE-2022-30473 | Tenda AC18 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-26 | |
| CVE-2022-30472 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.4% | 2022-05-26 | |
| CVE-2022-29721 | 74cmsse SQL injection | 7.5v3.1 | 1.0% | 2022-05-26 | |
| CVE-2022-29720 | 74cmsse files accessible to external parties | 7.5v3.1 | 1.0% | 2022-05-26 | |
| CVE-2022-29689 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29688 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29687 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29686 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29685 | chshcms Cscms Music Portal System SQL injection | 8.8v3.1 | 1.0% | 2022-05-26 | |
| CVE-2022-29684 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29683 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29682 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29681 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29680 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29676 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29670 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29669 | chshcms Cscms Music Portal System SQL injection | 8.8v3.1 | 1.0% | 2022-05-26 | |
| CVE-2022-29667 | chshcms Cscms Music Portal System SQL injection | 8.8v3.1 | 1.0% | 2022-05-26 | |
| CVE-2022-29666 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29665 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.8% | 2022-05-26 | |
| CVE-2022-29664 | chshcms Cscms Music Portal System SQL injection | 8.8v3.1 | 1.0% | 2022-05-26 | |
| CVE-2022-29663 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29662 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.8% | 2022-05-26 | |
| CVE-2022-29661 | chshcms Cscms Music Portal System SQL injection | 7.2v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29660 | chshcms Cscms Music Portal System SQL injection | 9.8v3.1 | 11.4% | 2022-05-26 | |
| CVE-2022-29637 | Iminho MinDoc arbitrary command execution in Minidoc | 7.8v3.1 | 0.9% | 2022-05-26 | |
| CVE-2022-29633 | Linglong An improper access control | 9.8v3.1 | 1.1% | 2022-05-26 | |
| CVE-2022-29632 | roncoo-education component /course/api/upload/pic arbitrary file upload | 9.8v3.1 | 17.5% | 2022-05-26 | |
| CVE-2022-29091 | Dell Unity cross-site scripting | 5.3CNA v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-29082 | Dell NetWorker improper certificate host validation | 3.7CNA v3.1 | 0.3% | 2022-05-26 | Fix |
| CVE-2022-27777 | XSS vulnerability in Action view tag helpers | 6.1v3.1 | 1.6% | 2022-05-26 | Fix |
| CVE-2022-26865 | Dell OS Recovery Tool authentication bypass | 6.8CNA v3.1 | 0.3% | 2022-05-26 | Fix |
| CVE-2022-26857 | Dell OpenManage Enterprise improper authorization | 9.0CNA v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26776 | Apple macOS arbitrary code execution | 9.8v3.1 | 2.1% | 2022-05-26 | Fix |
| CVE-2022-26775 | Apple macOS integer overflow | 9.8v3.1 | 2.0% | 2022-05-26 | Fix |
| CVE-2022-26774 | Apple iTunes logic flaw | 7.8v3.1 | 0.3% | 2022-05-26 | Fix |
| CVE-2022-26773 | Apple iTunes improper authorization | 7.1v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-26772 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26771 | Apple watchOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26770 | Apple macOS out-of-bounds read | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26769 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26768 | Apple watchOS out-of-bounds write | 7.8v3.1 | 1.3% | 2022-05-26 | Fix |
| CVE-2022-26767 | Apple macOS incorrect authorization | 5.5v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-26766 | Apple watchOS improper certificate validation | 5.5v3.1 | 2.7% | 2022-05-26 | Exploit codeFix |
| CVE-2022-26765 | Apple watchOS race condition | 4.7v3.1 | 0.2% | 2022-05-26 | Fix |
| CVE-2022-26764 | Apple watchOS out-of-bounds write | 4.7v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26763 | Apple watchOS out-of-bounds access | 7.8v3.1 | 3.7% | 2022-05-26 | Exploit codeFix |
| CVE-2022-26761 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26757 | Apple watchOS use-after-free | 7.8v3.1 | 2.9% | 2022-05-26 | Fix |
| CVE-2022-26756 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26755 | Apple macOS sandbox escape | 6.3v3.1 | 0.8% | 2022-05-26 | Fix |
| CVE-2022-26754 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26753 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26752 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26751 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.7% | 2022-05-26 | Fix |
| CVE-2022-26750 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26749 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26748 | Apple macOS out-of-bounds write | 8.8v3.1 | 1.4% | 2022-05-26 | Fix |
| CVE-2022-26747 | Apple Xcode privilege escalation | 7.8v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-26746 | Apple macOS Privacy preferences vulnerability | 5.5v3.1 | 0.7% | 2022-05-26 | Fix |
| CVE-2022-26745 | Apple macOS out-of-bounds write | 5.5v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-26744 | Apple iOS and iPadOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26743 | Apple macOS out-of-bounds write | 7.0v3.1 | 0.2% | 2022-05-26 | Fix |
| CVE-2022-26742 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26741 | Apple macOS buffer overflow | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26740 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26739 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26738 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26737 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26736 | Apple tvOS out-of-bounds write | 7.8v3.1 | 1.2% | 2022-05-26 | Fix |
| CVE-2022-26731 | Apple macOS logic flaw | 4.3v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26728 | Apple macOS information disclosure | 5.5v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26727 | This issue was addressed with improved entitlements. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4. A malicious application may be able to modify protected parts of the file system. | 5.5v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-26726 | This issue was addressed with improved checks. This issue is fixed in Security Update 2022-004 Catalina, watchOS 8.6, macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to capture a user's screen. | 6.5v3.1 | 2.3% | 2022-05-26 | Exploit codeFix |
| CVE-2022-26725 | Apple macOS logic flaw | 5.3v3.1 | 0.8% | 2022-05-26 | Fix |
| CVE-2022-26724 | Apple tvOS improper authentication | 5.5v3.1 | 0.2% | 2022-05-26 | Fix |
| CVE-2022-26723 | Apple macOS out-of-bounds write | 9.8v3.1 | 1.4% | 2022-05-26 | Fix |
| CVE-2022-26722 | Apple macOS improper initialization | 7.8v3.1 | 0.8% | 2022-05-26 | Fix |
| CVE-2022-26721 | Apple macOS improper initialization | 7.8v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26720 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.2% | 2022-05-26 | Fix |
| CVE-2022-26718 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.7% | 2022-05-26 | Fix |
| CVE-2022-26715 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.8% | 2022-05-26 | Fix |
| CVE-2022-26714 | Apple watchOS out-of-bounds write | 7.8v3.1 | 1.1% | 2022-05-26 | Fix |
| CVE-2022-26712 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to modify protected parts of the file system. | 5.5v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26711 | Apple watchOS integer overflow | 9.8v3.1 | 3.8% | 2022-05-26 | Exploit codeFix |
| CVE-2022-26708 | Apple macOS arbitrary code execution | 9.8v3.1 | 1.8% | 2022-05-26 | Fix |
| CVE-2022-26706 | An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions. | 5.5v3.1 | 7.5% | 2022-05-26 | Fix |
| CVE-2022-26704 | Apple macOS link following | 7.8v3.1 | 1.1% | 2022-05-26 | Fix |
| CVE-2022-26703 | Apple iOS and iPadOS lock screen vulnerability | 2.4v3.1 | 0.3% | 2022-05-26 | Fix |
| CVE-2022-26702 | Apple watchOS use-after-free | 7.8v3.1 | 1.1% | 2022-05-26 | Fix |
| CVE-2022-26701 | Apple tvOS race condition | 7.5v3.1 | 1.2% | 2022-05-26 | Fix |
| CVE-2022-26698 | Apple macOS out-of-bounds read | 7.1v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-26697 | Apple macOS out-of-bounds read | 7.1v3.1 | 1.1% | 2022-05-26 | Fix |
| CVE-2022-26694 | Apple macOS plug-ins vulnerability | 9.1v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26693 | Apple macOS plug-ins vulnerability | 9.1v3.1 | 0.9% | 2022-05-26 | Fix |
| CVE-2022-26691 | Apple macOS logic flaw | 6.7v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-26690 | Apple macOS race condition | 4.7v3.1 | 1.6% | 2022-05-26 | Fix |
| CVE-2022-26688 | Apple macOS link following | 4.4v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-24422 | Integrated Dell Remote Access Controller 9 improper authentication | 9.6CNA v3.1 | 58.5% | 2022-05-26 | Fix |
| CVE-2022-24418 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-05-26 | Fix |
| CVE-2022-24417 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-05-26 | Fix |
| CVE-2022-24414 | Dell CloudLink sensitive query strings | 7.6CNA v3.1 | 0.6% | 2022-05-26 | Fix |
| CVE-2022-22676 | Apple macOS XPC Services vulnerability | 5.5v3.1 | 0.7% | 2022-05-26 | Fix |
| CVE-2022-22675 | Apple macOS out-of-bounds write | 7.8v3.1 | 12.5% | 2022-05-26 | KEVFix |
| CVE-2022-22674 | Apple macOS out-of-bounds read | 5.5v3.1 | 1.1% | 2022-05-26 | KEVFix |
| CVE-2022-22673 | Apple iOS and iPadOS denial of service | 7.5v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-22672 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-22663 | Apple macOS unauthorized access | 5.5v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-22662 | Apple macOS information disclosure | 6.5v3.1 | 1.4% | 2022-05-26 | Fix |
| CVE-2022-22616 | Apple macOS Gatekeeper vulnerability | 5.5v3.1 | 7.7% | 2022-05-26 | Exploit codeFix |
| CVE-2022-22577 | Cross-site scripting vulnerability in Action Pack | 6.1v3.1 | 1.8% | 2022-05-26 | Fix |
| CVE-2022-22576 | https://github.com/curl/curl An improper authentication | 8.1NVD v3.1 | 2.5% | 2022-05-26 | Fix |
| CVE-2022-21831 | Possible code injection vulnerability in Rails / Active Storage | 9.8v3.1 | 3.0% | 2022-05-26 | Exploit codeFix |
| CVE-2022-21827 | Citrix Gateway Windows Plugin improper privilege management | 7.1v3.1 | 0.2% | 2022-05-26 | Fix |
| CVE-2022-20821 | Cisco IOS XR open port vulnerability | 6.5CNA v3.1 | 11.5% | 2022-05-26 | KEVFix |
| CVE-2022-20809 | Cisco Expressway Series and TelePresence Video Communication Server information disclosure | 4.3CNA v3.1 | 1.0% | 2022-05-26 | Fix |
| CVE-2022-1899 | Out-of-bounds read in radareorg/radare2 | 9.1v3.1 | 1.5% | 2022-05-26 | Fix |
| CVE-2022-1886 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.4% | 2022-05-26 | Fix |
| CVE-2022-1882 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.4% | 2022-05-26 | Fix |
| CVE-2022-1664 | Debian dpkg source package extraction path traversal | 9.8v3.1 | 3.2% | 2022-05-26 | Fix |
| CVE-2022-1261 | Matrikon OPC Server improper access control | 8.8v3.1 | 0.7% | 2022-05-26 | |
| CVE-2022-31651 | Sound Exchange reachable assertion | 5.5v3.1 | 1.2% | 2022-05-25 | Fix |
| CVE-2022-31650 | Sound Exchange incorrect comparison | 5.5v3.1 | 1.2% | 2022-05-25 | Fix |
| CVE-2022-31624 | MariaDB improper locking | 5.5v3.1 | 0.2% | 2022-05-25 | Fix |
| CVE-2022-31623 | MariaDB improper locking | 5.5v3.1 | 0.2% | 2022-05-25 | Fix |
| CVE-2022-31622 | MariaDB improper locking | 5.5v3.1 | 0.2% | 2022-05-25 | Fix |
| CVE-2022-31621 | MariaDB improper locking | 5.5v3.1 | 0.2% | 2022-05-25 | Fix |
| CVE-2022-31620 | Libjpeg reachable assertion | 6.5v3.1 | 1.4% | 2022-05-25 | Fix |
| CVE-2022-30595 | Python Pillow out-of-bounds write | 9.8v3.1 | 2.3% | 2022-05-25 | Fix |
| CVE-2022-30428 | Arbitrary file read in Ginadmin | 7.5v3.1 | 1.1% | 2022-05-25 | |
| CVE-2022-30427 | Path traversal in Ginadmin | 7.5v3.1 | 1.5% | 2022-05-25 | |
| CVE-2022-30323 | HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion | 8.6v3.1 | 1.4% | 2022-05-25 | Fix |
| CVE-2022-30322 | HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion | 8.6v3.1 | 1.4% | 2022-05-25 | Fix |
| CVE-2022-30321 | HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion | 8.6v3.1 | 3.2% | 2022-05-25 | Fix |
| CVE-2022-29710 | LimeSurvey uploadConfirm.php cross-site scripting | 6.1v3.1 | 0.8% | 2022-05-25 | Fix |
| CVE-2022-29651 | oretnom23 Online Food Ordering System Select Image function arbitrary file upload | 7.2v3.1 | 1.5% | 2022-05-25 | |
| CVE-2022-29650 | oretnom23 Online Food Ordering System SQL injection | 9.8v3.1 | 1.3% | 2022-05-25 | |
| CVE-2022-29408 | Advanced Contact form 7 DB WordPress plugin unauthenticated persistent cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-05-25 | Fix |
| CVE-2022-29405 | Apache Archiva Arbitrary user password reset vulnerability | 6.5v3.1 | 1.7% | 2022-05-25 | Fix |
| CVE-2022-29402 | TP-Link Tl-wr840n missing authentication | 6.8v3.1 | 0.4% | 2022-05-25 | |
| CVE-2022-29380 | Creativeitem Academy LMS cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-25 | Exploit code |
| CVE-2022-29379 | F5 Njs out-of-bounds write | 9.8v3.1 | 1.8% | 2022-05-25 | |
| CVE-2022-29362 | Cross-site scripting in ZKEACMS | 5.4v3.1 | 0.5% | 2022-05-25 | |
| CVE-2022-29361 | Palletsprojects werkzeug HTTP request smuggling | 9.8v3.1 | 7.7% | 2022-05-25 | Exploit codeFix |
| CVE-2022-29359 | School Club Application System /scas/?page=clubs/application_form&id=7 stored cross-site scripting | 6.1v3.1 | 1.2% | 2022-05-25 | Exploit code |
| CVE-2022-29358 | EPUB2TXT2 integer overflow | 5.5v3.1 | 0.6% | 2022-05-25 | |
| CVE-2022-29349 | Keking kkFileView cross-site scripting | 6.1v3.1 | 1.8% | 2022-05-25 | Nuclei |
| CVE-2022-29256 | sharp vulnerable to command injection in post-installation over build environment | 6.5CNA v3.1 | 0.4% | 2022-05-25 | Fix |
| CVE-2022-29253 | Path traversal in XWiki Platform | 2.7CNA v3.1 | 1.1% | 2022-05-25 | Fix |
| CVE-2022-29252 | Cross-site scripting in XWiki Platform Wiki UI Main Wiki | 7.4CNA v3.1 | 1.0% | 2022-05-25 | Fix |
| CVE-2022-29251 | xwiki-platform cross-site scripting in the Flamingo theme manager | 7.4CNA v3.1 | 1.3% | 2022-05-25 | Fix |
| CVE-2022-29248 | Cross-domain cookie leakage in Guzzle | 8.0CNA v3.1 | 1.3% | 2022-05-25 | Fix |
| CVE-2022-28875 | All F-Secure and WithSecure endpoint protection products denial of service (DoS) | 6.5v3.1 | 0.5% | 2022-05-25 | |
| CVE-2022-28862 | Archibus Web Central SQL injection | 9.8v3.1 | 1.0% | 2022-05-25 | |
| CVE-2022-27305 | gibbonedu gibbon session fixation | 8.8v3.1 | 0.9% | 2022-05-25 | Fix |
| CVE-2022-27169 | Open Automation Software OAS Platform information disclosure | 7.5v3.1 | 1.7% | 2022-05-25 | |
| CVE-2022-26945 | HashiCorp go-getter unsafe downloads could lead to asymmetric resource exhaustion | 9.8v3.1 | 1.7% | 2022-05-25 | Fix |
| CVE-2022-26833 | Open Automation Software OAS Platform REST API functionality improper authentication | 9.4v3.1 | 37.6% | 2022-05-25 | Nuclei |
| CVE-2022-26303 | Open Automation Software OAS Platform missing authentication | 7.5v3.1 | 1.3% | 2022-05-25 | |
| CVE-2022-26082 | Open Automation Software OAS Platform missing authentication | 9.8v3.1 | 19.6% | 2022-05-25 | |
| CVE-2022-26077 | Open Automation Software OAS Platform cleartext transmission of sensitive information | 7.5v3.1 | 1.1% | 2022-05-25 | |
| CVE-2022-26067 | Open Automation Software OAS Platform information disclosure | 7.5v3.1 | 1.3% | 2022-05-25 | |
| CVE-2022-26043 | Open Automation Software OAS Platform missing authentication | 7.5v3.1 | 1.3% | 2022-05-25 | |
| CVE-2022-26026 | Open Automation Software OAS Platform OAS Engine SecureConfigValues functionality denial of service | 7.5v3.1 | 1.2% | 2022-05-25 | |
| CVE-2022-23775 | TrueStack Direct Connect improper access control | 9.8v3.1 | 1.0% | 2022-05-25 | |
| CVE-2022-22127 | Tableau Server missing authorization | 7.2v3.1 | 1.1% | 2022-05-25 | Fix |
| CVE-2022-21951 | Rancher: Weave CNI password is not set if RKE template is used with CNI value overridden | 6.8CNA v3.1 | 0.4% | 2022-05-25 | Fix |
| CVE-2022-1883 | SQL injection in camptocamp/Terraboard | 8.8NVD v3.1 | 6.8% | 2022-05-25 | NucleiFix |
| CVE-2022-1851 | Out-of-bounds read in Vim/Vim | 7.8v3.1 | 1.6% | 2022-05-25 | Fix |
| CVE-2022-1815 | Exposure of sensitive information to an unauthorized actor in jgraph/drawio | 7.5v3.1 | 5.7% | 2022-05-25 | NucleiFix |
| CVE-2022-1678 | kernel improper reference count update | 7.5NVD v3.1 | 2.9% | 2022-05-25 | Fix |
| CVE-2022-1348 | logrotate incorrect permission assignment | 6.5NVD v3.1 | 1.7% | 2022-05-25 | Fix |
| CVE-2022-31263 | Mastodon email domain restriction vulnerability | 5.3v3.1 | 0.8% | 2022-05-24 | Fix |
| CVE-2022-31261 | Morpheusdata Morpheus An XML external entity injection | 7.5v3.1 | 1.2% | 2022-05-24 | Fix |
| CVE-2022-30843 | Room Rent Portal Site SQL injection | 8.8v3.1 | 1.0% | 2022-05-24 | |
| CVE-2022-30842 | Covid 19 Travel Pass Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30839 | Room Rent Portal Site cross-site scripting | 6.1v3.1 | 0.6% | 2022-05-24 | |
| CVE-2022-30838 | Covid 19 Travel Pass Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-24 | |
| CVE-2022-30837 | oretnom23 Toll Tax Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30464 | Chatbot App With Suggestion cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30463 | Automotive Shop Management System SQL injection | 8.8v3.1 | 1.0% | 2022-05-24 | |
| CVE-2022-30462 | Water Billing System cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30461 | Water Billing System SQL injection | 9.8v3.1 | 1.1% | 2022-05-24 | |
| CVE-2022-30460 | Simple Social Networking Site cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30459 | Chatbot App With Suggestion SQL injection | 8.8v3.1 | 1.0% | 2022-05-24 | |
| CVE-2022-30458 | Automotive Shop Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30456 | Badminton Center Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-24 | |
| CVE-2022-30455 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-24 | |
| CVE-2022-30454 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-24 | |
| CVE-2022-29567 | Vaadin possible information disclosure inside TreeGrid component with default data provider | 5.7CNA v3.1 | 1.0% | 2022-05-24 | Fix |
| CVE-2022-29377 | TOTOLINK A3600R out-of-bounds write | 7.5v3.1 | 1.1% | 2022-05-24 | |
| CVE-2022-29337 | Cdatatec Fd702xw-x-r430 OS command injection | 9.8v3.1 | 35.3% | 2022-05-24 | Exploit code |
| CVE-2022-29334 | H authentication bypass by replay | 9.8v3.1 | 1.2% | 2022-05-24 | |
| CVE-2022-29333 | Cyberlink Powerdirector improper privilege management | 7.8v3.1 | 0.9% | 2022-05-24 | |
| CVE-2022-29309 | wangl1989 mysiteforme server-side request forgery | 7.5v3.1 | 0.9% | 2022-05-24 | |
| CVE-2022-29305 | SQL injection in helloxz/Imgurl | 8.1v3.1 | 0.9% | 2022-05-24 | |
| CVE-2022-29249 | Reversible One-Way Hash in io.github.JavaEZLib:JavaEZ | 7.5CNA v3.1 | 0.7% | 2022-05-24 | Fix |
| CVE-2022-29246 | Potential buffer overflow in function DFU upload in Azure RTOS USBX | 9.8CNA v3.1 | 2.3% | 2022-05-24 | Fix |
| CVE-2022-29242 | Buffer overflow on creating key transport blob in GOST Engine | 5.9CNA v3.1 | 1.7% | 2022-05-24 | Fix |
| CVE-2022-29237 | Limited authentication bypass for Media files in Opencast | 5.4CNA v3.1 | 0.6% | 2022-05-24 | Fix |
| CVE-2022-29223 | Buffer overflow on HUB descriptor in Azure RTOS USBX | 7.5CNA v3.1 | 1.2% | 2022-05-24 | Fix |
| CVE-2022-29221 | PHP code injection by malicious block or filename in Smarty | 8.8CNA v3.1 | 4.9% | 2022-05-24 | Exploit codeFix |
| CVE-2022-29219 | Integer overflow in Lodestar | 7.5CNA v3.1 | 1.3% | 2022-05-24 | Fix |
| CVE-2022-29217 | Key confusion through non-blocklisted public key formats in PyJWT | 7.4CNA v3.1 | 1.4% | 2022-05-24 | Fix |
| CVE-2022-26532 | Zyxel USG/ZyWALL series firmware 'packet-trace' CLI command argument injection | 7.8CNA v3.1 | 4.8% | 2022-05-24 | Fix |
| CVE-2022-26531 | Zyxel USG/ZyWALL series firmware improper input validation | 6.1CNA v3.1 | 6.2% | 2022-05-24 | Fix |
| CVE-2022-23050 | ManageEngine AppManager15 uncontrolled search path | 7.2v3.1 | 4.9% | 2022-05-24 | Fix |
| CVE-2022-22977 | VMware Tools XML external entity injection | 7.1v3.1 | 0.8% | 2022-05-24 | Fix |
| CVE-2022-22497 | IBM Aspera Faspex unauthorized access | 7.5CNA v3.0 | 1.2% | 2022-05-24 | Fix |
| CVE-2022-22495 | IBM i SQL injection | 6.3CNA v3.0 | 2.2% | 2022-05-24 | Fix |
| CVE-2022-22309 | IBM Power System S922 Server missing authentication | 6.8CNA v3.0 | 0.3% | 2022-05-24 | Fix |
| CVE-2022-22306 | Fortinet FortiOS improper certificate validation | 5.4CNA v3.1 | 0.2% | 2022-05-24 | Fix |
| CVE-2022-1850 | Path traversal in FileGator/FileGator | 8.1v3.1 | 1.0% | 2022-05-24 | Fix |
| CVE-2022-1849 | Session fixation in FileGator/FileGator | 5.4v3.1 | 0.7% | 2022-05-24 | Fix |
| CVE-2022-1848 | Business Logic Errors in Erudika/para | 5.3NVD v3.1 | 1.0% | 2022-05-24 | Fix |
| CVE-2022-1840 | Home Clean Services Management System cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-24 | |
| CVE-2022-1839 | Home Clean Services Management System login.php SQL injection | 8.8v3.1 | 0.9% | 2022-05-24 | |
| CVE-2022-1838 | Home Clean Services Management System login.php SQL injection | 7.2v3.1 | 1.0% | 2022-05-24 | |
| CVE-2022-1837 | Home Clean Services Management System unrestricted upload | 7.2v3.1 | 1.3% | 2022-05-24 | |
| CVE-2022-1819 | Student Information System Student Roll module cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-24 | |
| CVE-2022-1669 | Circutor COMPACT DC-S BASIC firewall configuration CGI stack-based buffer overflow | 8.1v3.1 | 0.8% | 2022-05-24 | |
| CVE-2022-0910 | Zyxel USG/ZyWALL series firmware improper authentication | 6.5CNA v3.1 | 0.7% | 2022-05-24 | Fix |
| CVE-2022-0734 | Zyxel USG/ZyWALL series firmware cross-site scripting | 5.8CNA v3.1 | 9.4% | 2022-05-24 | Fix |
| CVE-2022-31489 | Inoutscripts Blockchain Altexchanger SQL injection | 7.5v3.1 | 1.1% | 2022-05-23 | |
| CVE-2022-31488 | Inoutscripts Blockchain Altexchanger SQL injection | 7.5v3.1 | 1.1% | 2022-05-23 | |
| CVE-2022-31487 | Inoutscripts Blockchain Fiatexchanger SQL injection | 7.5v3.1 | 1.2% | 2022-05-23 | |
| CVE-2022-31467 | DLL hijacking vulnerability in Quick Heal Total Security | 7.3v3.1 | 0.3% | 2022-05-23 | |
| CVE-2022-31466 | TOCTOU vulnerability in Quick Heal Total Security | 7.0v3.1 | 0.2% | 2022-05-23 | |
| CVE-2022-30017 | Rescue Dispatch Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-23 | |
| CVE-2022-30016 | Rescue Dispatch Management System incorrect authorization | 8.8v3.1 | 1.0% | 2022-05-23 | |
| CVE-2022-30015 | Simple Food Website cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-23 | |
| CVE-2022-30014 | Simple Food Website cross-site request forgery | 8.8v3.1 | 0.5% | 2022-05-23 | |
| CVE-2022-29599 | Apache Maven commandline class shell injection | 9.8v3.1 | 4.4% | 2022-05-23 | Fix |
| CVE-2022-29376 | Apache Friends XAMPP incorrect default permissions | 8.8v3.1 | 1.3% | 2022-05-23 | |
| CVE-2022-29005 | PHPGurukul Online Birth Certificate System component /obcs/user/profile.php cross-site scripting | 6.1v3.1 | 2.2% | 2022-05-23 | NucleiExploit code |
| CVE-2022-29004 | PHPGurukul e-Diary Management System cross-site scripting | 6.1v3.1 | 2.9% | 2022-05-23 | NucleiExploit code |
| CVE-2022-29002 | Cross-site request forgery in XXL-Job | 8.8v3.1 | 0.5% | 2022-05-23 | |
| CVE-2022-28999 | Bloodshed Dev-c++ insecure permissions | 8.8v3.1 | 1.2% | 2022-05-23 | |
| CVE-2022-28998 | Xlightftpd Xlight FTP out-of-bounds write | 8.1v3.1 | 2.2% | 2022-05-23 | |
| CVE-2022-28997 | CSZ CMS server-side request forgery | 7.5v3.1 | 2.0% | 2022-05-23 | |
| CVE-2022-28944 | Emcosoftware Network Software Scanner download without integrity check | 8.8v3.1 | 1.5% | 2022-05-23 | Exploit code |
| CVE-2022-28932 | D-Link Dsl-g2452dg incorrect default permissions | 9.8v3.1 | 1.2% | 2022-05-23 | |
| CVE-2022-28874 | F-Secure endpoint protection products multiple denial of service (DoS) | 7.5v3.1 | 0.6% | 2022-05-23 | |
| CVE-2022-1825 | Cross-site scripting (XSS) Reflected in collectiveaccess/Providence | 5.4v3.1 | 0.6% | 2022-05-23 | Fix |
| CVE-2022-1817 | Badminton Center Management System Userlist module cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-23 | |
| CVE-2022-1816 | Zoo Management System Content module cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-23 | |
| CVE-2022-1811 | Unrestricted upload of file with dangerous type in publify/publify | 5.4NVD v3.1 | 0.8% | 2022-05-23 | Fix |
| CVE-2022-1810 | Authorization bypass through user-controlled key in publify/publify | 4.3NVD v3.1 | 0.8% | 2022-05-23 | Fix |
| CVE-2022-1558 | Curtain WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 1.0% | 2022-05-23 | |
| CVE-2022-1547 | wpchill Check and Log Email reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-23 | Fix |
| CVE-2022-1467 | AVEVA InTouch Access Anywhere exposure of resource to wrong sphere | 9.9v3.1 | 0.9% | 2022-05-23 | |
| CVE-2022-1320 | 10Web Slider by 10Web stored cross-site scripting | 4.8NVD v3.1 | 1.0% | 2022-05-23 | Fix |
| CVE-2022-1298 | Tabs Responsive WordPress plugin Editor+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-23 | Fix |
| CVE-2022-1268 | Donate Extra WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-23 | |
| CVE-2022-1221 | Gwyn's Imagemap Selector WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.2% | 2022-05-23 | Nuclei |
| CVE-2022-1218 | Domain Replace WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-23 | |
| CVE-2022-1192 | Turn off all comments WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.9% | 2022-05-23 | |
| CVE-2022-1093 | WP Meta SEO WordPress plugin Admin+ stored cross-site scripting via breadcrumbs | 4.8NVD v3.1 | 0.6% | 2022-05-23 | Fix |
| CVE-2022-1014 | WP Contacts Manager WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.6% | 2022-05-23 | |
| CVE-2022-0900 | Cross-site scripting vulnerability in DivvyDrive | 5.4v3.1 | 0.4% | 2022-05-23 | Fix |
| CVE-2022-0781 | Nirweb support WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 13.1% | 2022-05-23 | NucleiFix |
| CVE-2022-0346 | Google XML Sitemap Generator WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 2.1% | 2022-05-23 | NucleiFix |
| CVE-2022-1813 | OS command injection in yogeshojha/rengine | 9.8v3.1 | 2.7% | 2022-05-22 | Fix |
| CVE-2022-31268 | Path traversal in Gitblit | 7.5v3.1 | 10.7% | 2022-05-21 | Nuclei |
| CVE-2022-31267 | Unescaped control characters in Gitblit | 9.8v3.1 | 17.7% | 2022-05-21 | Fix |
| CVE-2022-31264 | solana-labs rbpf integer overflow in solana_rbpf | 7.5v3.1 | 1.3% | 2022-05-21 | Fix |
| CVE-2022-31259 | Access control bypass in beego | 9.8v3.1 | 21.6% | 2022-05-21 | Fix |
| CVE-2022-29222 | Improper certificate validation in Pion DTLS | 5.9CNA v3.1 | 0.8% | 2022-05-21 | Fix |
| CVE-2022-29216 | Code injection in `saved_model_cli` in TensorFlow | 7.8CNA v3.1 | 0.5% | 2022-05-21 | Fix |
| CVE-2022-29215 | Argument injection in RegionProtect | 7.5CNA v3.1 | 1.2% | 2022-05-21 | Fix |
| CVE-2022-29214 | URL redirection to untrusted site (open redirect) in next-auth | 6.1CNA v3.1 | 0.7% | 2022-05-21 | Fix |
| CVE-2022-29213 | Incomplete validation in signal ops leads to crashes in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-21 | Fix |
| CVE-2022-29212 | Core dump when loading TFLite models with quantization in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-21 | Fix |
| CVE-2022-29211 | Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values | 5.5CNA v3.1 | 0.3% | 2022-05-21 | Fix |
| CVE-2022-29210 | Heap buffer overflow due to incorrect hash function in TensorFlow | 5.5CNA v3.1 | 0.2% | 2022-05-21 | Fix |
| CVE-2022-29209 | Type confusion leading to `CHECK`-failure based denial of service in TensorFlow | 5.5CNA v3.1 | 0.4% | 2022-05-21 | Fix |
| CVE-2022-29190 | Header reconstruction method can be thrown into an infinite loop in Pion DTLS | 7.5CNA v3.1 | 1.7% | 2022-05-21 | Fix |
| CVE-2022-29189 | Buffer for inbound DTLS fragments has no limit | 5.3CNA v3.1 | 2.1% | 2022-05-21 | Fix |
| CVE-2022-29188 | Smokescreen SSRF via deny list bypass (square brackets) in Smokescreen | 5.3CNA v3.1 | 0.9% | 2022-05-21 | Fix |
| CVE-2022-1809 | Access of uninitialized pointer in radareorg/radare2 | 7.8v3.1 | 0.9% | 2022-05-21 | Fix |
| CVE-2022-1752 | Unrestricted upload of file with dangerous type in polonel/trudesk | 8.0NVD v3.1 | 2.3% | 2022-05-21 | Fix |
| CVE-2022-31258 | Checkmk link following | 6.7NVD v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-31245 | Mailcow OS command injection | 8.8v3.1 | 5.5% | 2022-05-20 | Exploit codeFix |
| CVE-2022-31215 | Goverlan Reach agent update process vulnerability | 6.5v3.1 | 1.2% | 2022-05-20 | |
| CVE-2022-30887 | Pharmacy Management System unrestricted file upload | 9.8NVD v3.1 | 25.8% | 2022-05-20 | |
| CVE-2022-30886 | School Dormitory Management System SQL injection | 9.8v3.1 | 2.0% | 2022-05-20 | |
| CVE-2022-30551 | OPC Foundation Ua-java resource exhaustion | 7.5v3.1 | 2.1% | 2022-05-20 | Fix |
| CVE-2022-30518 | Chatbot Application With A Suggestion Feature SQL injection | 9.8v3.1 | 1.8% | 2022-05-20 | |
| CVE-2022-29883 | Siemens SICAM T improper authentication | 6.9CNA v4.0 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-29882 | Siemens SICAM T cross-site scripting | 7.1CNA v3.1 | 0.9% | 2022-05-20 | Fix |
| CVE-2022-29881 | Siemens SICAM T missing authentication | 6.9CNA v4.0 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-29880 | Siemens SICAM T cross-site scripting | 6.5CNA v3.1 | 0.6% | 2022-05-20 | Fix |
| CVE-2022-29879 | Siemens SICAM T missing authentication | 5.3CNA v4.0 | 0.9% | 2022-05-20 | Fix |
| CVE-2022-29878 | Siemens SICAM T authentication bypass by replay | 7.5CNA v3.1 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-29877 | Siemens SICAM P850 missing authentication | 6.5v3.1 | 0.6% | 2022-05-20 | Fix |
| CVE-2022-29876 | Siemens SICAM T cross-site scripting | 7.1CNA v3.1 | 0.9% | 2022-05-20 | Fix |
| CVE-2022-29874 | Siemens SICAM T cleartext transmission of sensitive information | 8.8CNA v3.1 | 0.8% | 2022-05-20 | Fix |
| CVE-2022-29873 | Siemens SICAM T denial of service | 9.3CNA v4.0 | 2.0% | 2022-05-20 | Fix |
| CVE-2022-29872 | Siemens SICAM T denial of service | 8.7CNA v4.0 | 1.5% | 2022-05-20 | Fix |
| CVE-2022-29801 | Siemens Teamcenter XML external entity injection | 7.5v3.1 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-29448 | Herd Effects WordPress plugin local file inclusion (LFI) | 4.9v3.1 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-29447 | Hover Effects WordPress plugin authenticated local file inclusion (LFI) | 7.2v3.1 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-29434 | Spiffy Calendar WordPress plugin Edit/Delete event via IDOR | 5.4v3.1 | 0.7% | 2022-05-20 | Fix |
| CVE-2022-29432 | wpDataTables WordPress plugin Multiple authenticated persistent cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2022-29431 | KubiQ Remove CPT base (WordPress plugin) cross-site request forgery | 5.4v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-29430 | PNG to JPG WordPress plugin cross-site request forgery leading to persistent cross-site scripting | 6.1v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-29428 | WP Slider WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-05-20 | |
| CVE-2022-29427 | Aftab Muni Disable Right Click For WP (WordPress plugin) Aftab Muni's cross-site request forgery | 8.8v3.1 | 0.4% | 2022-05-20 | |
| CVE-2022-29426 | Slideshow, Image Slider by 2J WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-05-20 | |
| CVE-2022-29425 | Checkout Files Upload for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-05-20 | Fix |
| CVE-2022-29424 | Image Hover Effects Ultimate WordPress plugin authenticated reflected cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2022-29320 | MiniTool Partition Wizard unquoted search path | 7.8v3.1 | 0.4% | 2022-05-20 | |
| CVE-2022-29208 | Segfault and out-of-bounds write write due to incomplete validation in TensorFlow | 7.1CNA v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-29207 | Undefined behavior when users supply invalid resource handles in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29206 | Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29205 | Segfault due to missing support for quantized types in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29204 | Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29203 | Integer overflow in `SpaceToBatchND` in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29202 | Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29201 | Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29200 | Missing validation causes denial of service in TensorFlow via `LSTMBlockCell` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29199 | Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29198 | Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29197 | Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29196 | Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29195 | Missing validation causes denial of service in TensorFlow via `StagePeek` | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29194 | Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29193 | Missing validation causes `TensorSummaryV2` in TensorFlow to crash | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29192 | Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow | 5.5CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29191 | Missing validation causes denial of service via `GetSessionTensor` in TensorFlow | 5.5CNA v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-29186 | PagerDuty Rundeck Docker image SSH key vulnerability | 9.1CNA v3.1 | 1.2% | 2022-05-20 | |
| CVE-2022-29185 | Observable timing discrepancy in totp-rs | 4.2CNA v3.1 | 0.9% | 2022-05-20 | Fix |
| CVE-2022-29184 | Command injection/argument injection in GoCD | 8.8CNA v3.1 | 3.8% | 2022-05-20 | Fix |
| CVE-2022-29183 | Reflected XSS in GoCD | 4.3CNA v3.1 | 0.9% | 2022-05-20 | Fix |
| CVE-2022-29182 | DOM-based XSS in GoCD | 4.3CNA v3.1 | 0.8% | 2022-05-20 | Fix |
| CVE-2022-29181 | Improper handling of unexpected data type in Nokogiri | 8.2CNA v3.1 | 3.2% | 2022-05-20 | Fix |
| CVE-2022-29179 | Improper privilege management in Cilium | 7.5CNA v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-29178 | Incorrect default permissions in Cilium | 8.8CNA v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-29177 | DoS via malicious p2p message in Go-Ethereum | 5.9CNA v3.1 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-29170 | Grafana Enterprise datasource network restrictions bypass via HTTP redirects | 6.6CNA v3.1 | 1.2% | 2022-05-20 | Fix |
| CVE-2022-29165 | argoproj argo-cd argo CD will blindly trust JWT claims if anonymous access is enabled | 10.0CNA v3.1 | 2.1% | 2022-05-20 | Fix |
| CVE-2022-29163 | Bypass of password requirements when sharing a folder via the Circles app in Nextcloud Server | 3.5CNA v3.1 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-29160 | Sensitive files/data exist after deletion of user account in Nextcloud Android | 2.8CNA v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-29159 | Possibility for anyone to add a stack with existing tasks on anyone's board in Nextcloud Deck | 5.0CNA v3.1 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-29033 | Siemens JT2Go uninitialized pointer access | 7.8v3.1 | 0.8% | 2022-05-20 | Fix |
| CVE-2022-29032 | Siemens JT2Go double free | 7.8v3.1 | 0.8% | 2022-05-20 | Fix |
| CVE-2022-29031 | Siemens JT2Go null pointer dereference | 5.5v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2022-29030 | Siemens JT2Go integer overflow to buffer overflow | 5.5v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2022-29029 | Siemens JT2Go null pointer dereference | 5.5v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2022-29028 | Siemens JT2Go infinite loop | 5.5v3.1 | 0.5% | 2022-05-20 | Fix |
| CVE-2022-29023 | openrazer razermouse driver buffer overflow | 9.8v3.1 | 2.3% | 2022-05-20 | Fix |
| CVE-2022-29022 | openrazer razeraccessory driver buffer overflow | 9.8v3.1 | 2.3% | 2022-05-20 | Fix |
| CVE-2022-29021 | openrazer razerkbd driver buffer overflow | 9.8v3.1 | 2.3% | 2022-05-20 | Fix |
| CVE-2022-28995 | yogeshojha rengine remote code execution | 9.8v3.1 | 2.3% | 2022-05-20 | |
| CVE-2022-28993 | Bdtask Multi-Store Inventory Management System missing authorization | 9.8v3.1 | 1.7% | 2022-05-20 | |
| CVE-2022-28992 | PHPGurukul Online Banquet Booking System cross-site request forgery | 8.8v3.1 | 0.6% | 2022-05-20 | |
| CVE-2022-28991 | Bdtask Multi-Store Inventory Management System forced browsing | 7.5v3.1 | 1.5% | 2022-05-20 | |
| CVE-2022-28990 | Buffer overflow in wasm3 | 7.8v3.1 | 0.4% | 2022-05-20 | |
| CVE-2022-28987 | Zoho ManageEngine ADSelfService Plus login endpoint vulnerability | 5.3v3.1 | 9.9% | 2022-05-20 | NucleiFix |
| CVE-2022-28985 | orangehrm addNewPost component stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-20 | |
| CVE-2022-28965 | Avast Premium Security uncontrolled search path | 6.5v3.1 | 0.3% | 2022-05-20 | Fix |
| CVE-2022-28964 | Avast Premium Security arbitrary file write | 7.1v3.1 | 0.2% | 2022-05-20 | Fix |
| CVE-2022-28660 | Grafana missing authentication | 9.8v3.1 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-28618 | HPE Nimble Storage Hybrid Flash Arrays command injection | 9.8v3.1 | 1.8% | 2022-05-20 | Fix |
| CVE-2022-28531 | Covid-19 Directory On Vaccination System SQL injection | 9.8v3.1 | 14.2% | 2022-05-20 | |
| CVE-2022-28106 | Online Sports Complex Booking System improper authentication | 9.8v3.1 | 1.2% | 2022-05-20 | |
| CVE-2022-28105 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-20 | |
| CVE-2022-28104 | Foxit PDF Editor unrestricted file upload | 9.8v3.1 | 1.9% | 2022-05-20 | |
| CVE-2022-27653 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 0.8% | 2022-05-20 | Fix |
| CVE-2022-27640 | Siemens SIMATIC CP 442-1 RNA denial of service | 6.5v3.1 | 0.4% | 2022-05-20 | Fix |
| CVE-2022-27242 | Siemens OpenV2G buffer overflow | 5.5v3.1 | 0.2% | 2022-05-20 | Fix |
| CVE-2022-27095 | Battleye unquoted search path | 7.8v3.1 | 0.4% | 2022-05-20 | |
| CVE-2022-27094 | Sony Playmemories Home unquoted search path | 6.7v3.1 | 0.4% | 2022-05-20 | |
| CVE-2022-26634 | Hma Hidemyass unquoted search path | 7.8v3.1 | 0.4% | 2022-05-20 | |
| CVE-2022-26633 | Simple Student Quarterly Result/grade System SQL injection | 9.8v3.1 | 1.8% | 2022-05-20 | |
| CVE-2022-26632 | Multi-vendor Online Groceries Management System SQL injection | 9.8v3.1 | 1.8% | 2022-05-20 | |
| CVE-2022-25229 | Popcorn Time cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-20 | |
| CVE-2022-25227 | Thinfinity VNC origin validation error | 8.8v3.1 | 0.7% | 2022-05-20 | |
| CVE-2022-25224 | Proton cross-site scripting | 5.4v3.1 | 0.7% | 2022-05-20 | |
| CVE-2022-24906 | Error in deleting Deck cards attachment reveals the full application path in Nextcloud Deck | 3.5CNA v3.1 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-24905 | argoproj argo-cd argo CD login screen allows message spoofing if SSO is enabled | 4.3CNA v3.1 | 1.3% | 2022-05-20 | Fix |
| CVE-2022-24904 | Argo CD repo-server symlink following | 4.3CNA v3.1 | 1.1% | 2022-05-20 | Fix |
| CVE-2022-24434 | dicer denial of service (DoS) | 7.5v3.1 | 3.4% | 2022-05-20 | Exploit code |
| CVE-2022-24290 | Siemens Teamcenter stack-based buffer overflow | 7.5v3.1 | 1.2% | 2022-05-20 | Fix |
| CVE-2022-24287 | Siemens SIMATIC PCS 7 insecure default initialization | 7.8CNA v3.1 | 0.2% | 2022-05-20 | Fix |
| CVE-2022-24045 | Siemens Desigo DXR2 sensitive cookie without the Secure attribute | 6.5v3.1 | 0.6% | 2022-05-20 | Fix |
| CVE-2022-24044 | Siemens Desigo DXR2 missing brute-force protection | 7.5v3.1 | 0.9% | 2022-05-20 | Fix |
| CVE-2022-24043 | Siemens Desigo DXR2 observable discrepancy | 5.3v3.1 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-22973 | VMware Workspace ONE Access and Identity Manager privilege escalation | 7.8v3.1 | 2.4% | 2022-05-20 | Fix |
| CVE-2022-22972 | VMware Workspace ONE Access, Identity Manager and vRealize Automation authentication bypass | 9.8NVD v3.1 | 56.3% | 2022-05-20 | Reported exploitedNucleiExploit codeFix |
| CVE-2022-22365 | IBM WebSphere Application Server man-in-the-middle | 5.6CNA v3.0 | 0.6% | 2022-05-20 | Fix |
| CVE-2022-21500 | Oracle User Management unauthorized access | 7.5CNA v3.1 | 71.7% | 2022-05-20 | NucleiExploit codeFix |
| CVE-2022-21195 | url-regex regular expression denial of service (ReDoS) | 7.5v3.1 | 1.3% | 2022-05-20 | |
| CVE-2022-1806 | Cross-site scripting (XSS) Reflected in rtxteam/Rtx | 6.1v3.1 | 0.8% | 2022-05-20 | Fix |
| CVE-2022-1803 | Improper restriction of rendered UI layers or frames in polonel/trudesk | 6.9NVD v3.1 | 1.6% | 2022-05-20 | Fix |
| CVE-2022-1784 | Server-side request forgery (SSRF) in jgraph/drawio | 7.5v3.1 | 1.8% | 2022-05-20 | Fix |
| CVE-2022-1775 | Weak password requirements in polonel/trudesk | 9.8v3.1 | 2.2% | 2022-05-20 | Fix |
| CVE-2022-1770 | Improper privilege management in polonel/trudesk | 8.8NVD v3.1 | 2.5% | 2022-05-20 | Fix |
| CVE-2022-1754 | Integer overflow or wraparound in polonel/trudesk | 6.5NVD v3.1 | 1.0% | 2022-05-20 | Fix |
| CVE-2022-30618 | Improper removal of sensitive information before storage or transfer in Strapi | 7.5v3.1 | 0.9% | 2022-05-19 | Fix |
| CVE-2022-30617 | Improper removal of sensitive information before storage or transfer in Strapi | 8.8v3.1 | 1.5% | 2022-05-19 | Fix |
| CVE-2022-30018 | MOBOTIX Mxcontrolcenter insufficiently protected credentials | 8.8v3.1 | 1.1% | 2022-05-19 | |
| CVE-2022-29652 | Online Sports Complex Booking System SQL injection | 6.1v3.1 | 0.8% | 2022-05-19 | |
| CVE-2022-29449 | Opal Hotel Room Booking WordPress plugin stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-05-19 | |
| CVE-2022-29446 | Counter Box WordPress plugin authenticated local file inclusion (LFI) | 7.2v3.1 | 1.0% | 2022-05-19 | Fix |
| CVE-2022-29304 | Online Sports Complex Booking System SQL injection | 8.8v3.1 | 0.8% | 2022-05-19 | |
| CVE-2022-28962 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.6% | 2022-05-19 | |
| CVE-2022-28961 | SPIP /ecrire SQL injection | 8.8v3.1 | 1.7% | 2022-05-19 | Fix |
| CVE-2022-28960 | SPIP _oups parameter vulnerability | 8.8v3.1 | 2.0% | 2022-05-19 | Fix |
| CVE-2022-28959 | SPIP component / cross-site scripting | 6.1v3.1 | 1.6% | 2022-05-19 | Fix |
| CVE-2022-28948 | yaml gopkg.in/yaml.v3 denial of service | 7.5v3.1 | 4.0% | 2022-05-19 | Fix |
| CVE-2022-28946 | Out-of-bounds memory access in github.com/open-policy-agent/opa | 7.5v3.1 | 1.0% | 2022-05-19 | Fix |
| CVE-2022-28927 | Subconverter A remote code execution | 9.8v3.1 | 33.6% | 2022-05-19 | |
| CVE-2022-28350 | Arm Valhall GPU Kernel Driver use-after-free | 9.8v3.1 | 1.4% | 2022-05-19 | Fix |
| CVE-2022-28349 | Arm Bifrost GPU Kernel Driver use-after-free | 9.8v3.1 | 1.2% | 2022-05-19 | Fix |
| CVE-2022-28348 | Arm Bifrost GPU Kernel Driver use-after-free | 9.8v3.1 | 1.4% | 2022-05-19 | Fix |
| CVE-2022-22978 | Authorization bypass in Spring Security | 9.8v3.1 | 12.2% | 2022-05-19 | Exploit codeFix |
| CVE-2022-22976 | Integer overflow in BCrypt class in Spring Security | 5.3v3.1 | 2.3% | 2022-05-19 | Exploit codeFix |
| CVE-2022-1796 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.1% | 2022-05-19 | Fix |
| CVE-2022-1785 | Out-of-bounds write in Vim/Vim | 7.8v3.1 | 0.5% | 2022-05-19 | Fix |
| CVE-2022-1730 | Cross-site scripting (XSS) Stored in jgraph/drawio | 4.6v3.1 | 0.6% | 2022-05-19 | Fix |
| CVE-2022-1670 | Octopus Deploy Octopus Server user invitation codes vulnerability | 7.5v3.1 | 0.8% | 2022-05-19 | Fix |
| CVE-2022-1423 | GitLab CI/CD cache mechanism improper access control | 7.1CNA v3.1 | 1.4% | 2022-05-19 | Fix |
| CVE-2022-1416 | GitLab cross-site scripting | 4.3CNA v3.1 | 0.7% | 2022-05-19 | Fix |
| CVE-2022-1413 | GitLab insufficiently protected credentials | 5.4CNA v3.1 | 0.9% | 2022-05-19 | Fix |
| CVE-2022-1183 | ISC BIND 9 destroying a TLS session early causes assertion failure | 7.5CNA v3.1 | 6.2% | 2022-05-19 | Fix |
| CVE-2022-30994 | Acronis Cyber Protect 15 cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2022-05-18 | Fix |
| CVE-2022-30993 | Acronis Cyber Protect 15 cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2022-05-18 | Fix |
| CVE-2022-30992 | Acronis Cyber Protect 15 open redirect via user-controlled query parameter | 6.1v3.1 | 0.5% | 2022-05-18 | Fix |
| CVE-2022-30991 | Acronis Cyber Protect 15 HTML injection via report name | 6.1v3.1 | 0.5% | 2022-05-18 | Fix |
| CVE-2022-30990 | Acronis Cyber Protect 15 sensitive information disclosure due to insecure folder permissions | 7.5v3.1 | 0.9% | 2022-05-18 | Fix |
| CVE-2022-30976 | gpac out-of-bounds read | 7.1v3.1 | 0.9% | 2022-05-18 | Fix |
| CVE-2022-30975 | Artifex MuJS null pointer dereference | 5.5v3.1 | 1.1% | 2022-05-18 | Fix |
| CVE-2022-30974 | Artifex MuJS uncontrolled recursion | 5.5v3.1 | 1.1% | 2022-05-18 | Fix |
| CVE-2022-30600 | Incorrect calculation in Moodle | 9.8NVD v3.1 | 5.1% | 2022-05-18 | Exploit codeFix |
| CVE-2022-30599 | SQL injection in Moodle | 9.8NVD v3.1 | 1.4% | 2022-05-18 | Fix |
| CVE-2022-30598 | Exposure of sensitive information in Moodle | 4.3NVD v3.1 | 1.1% | 2022-05-18 | Fix |
| CVE-2022-30597 | External control of assumed-immutable web parameter in Moodle | 5.3NVD v3.1 | 1.3% | 2022-05-18 | Fix |
| CVE-2022-30596 | Cross-site scripting in Moodle | 5.4NVD v3.1 | 0.9% | 2022-05-18 | Fix |
| CVE-2022-30138 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-05-18 | Fix |
| CVE-2022-30111 | Mck Smartlock weak cryptographic algorithm | 6.8v3.1 | 0.3% | 2022-05-18 | |
| CVE-2022-30105 | Belkin N300 Firmware OS command injection | 9.8v3.1 | 2.9% | 2022-05-18 | |
| CVE-2022-30065 | BusyBox A use-after-free | 7.8v3.1 | 1.2% | 2022-05-18 | Fix |
| CVE-2022-30033 | Tenda TX9 Pro buffer overflow | 7.5v3.1 | 1.2% | 2022-05-18 | |
| CVE-2022-29646 | TOTOLINK A3100R An improper access control | 5.3v3.1 | 0.8% | 2022-05-18 | |
| CVE-2022-29645 | TOTOLINK A3100R hard-coded credentials | 9.8v3.1 | 1.4% | 2022-05-18 | |
| CVE-2022-29644 | TOTOLINK A3100R hard-coded credentials | 9.8v3.1 | 1.6% | 2022-05-18 | |
| CVE-2022-29643 | TOTOLINK A3100R out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-18 | |
| CVE-2022-29642 | TOTOLINK A3100R out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-18 | |
| CVE-2022-29641 | TOTOLINK A3100R out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-18 | |
| CVE-2022-29640 | TOTOLINK A3100R out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-18 | |
| CVE-2022-29639 | TOTOLINK A3100R command injection | 8.1v3.1 | 1.8% | 2022-05-18 | |
| CVE-2022-29638 | TOTOLINK A3100R out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-18 | |
| CVE-2022-29518 | KOYO ELECTRONICS INDUSTRIES Screen Creator Advance2 authentication bypass | 7.0v3.1 | 0.2% | 2022-05-18 | Fix |
| CVE-2022-29516 | Fujitsu IPCOM EX2 series OS command injection | 9.8v3.1 | 2.2% | 2022-05-18 | Fix |
| CVE-2022-29445 | Popup Box WordPress plugin authenticated local file inclusion (LFI) | 7.2v3.1 | 1.0% | 2022-05-18 | Fix |
| CVE-2022-29230 | Potential cross-site scripting (XSS) vulnerability in Hydrogen | 6.3CNA v3.1 | 0.8% | 2022-05-18 | Fix |
| CVE-2022-29229 | Missing cryptographic step in cassproject | 6.3CNA v3.1 | 0.3% | 2022-05-18 | Fix |
| CVE-2022-28956 | D-Link DIR-816L getcfg.php vulnerability | 9.8v3.1 | 22.4% | 2022-05-18 | |
| CVE-2022-28955 | D-Link DIR-816L An improper access control | 7.5v3.1 | 39.7% | 2022-05-18 | Nuclei |
| CVE-2022-28924 | Universis-students An information disclosure | 6.5v3.1 | 1.0% | 2022-05-18 | |
| CVE-2022-28921 | BlogEngine.NET cross-site request forgery | 6.5v3.1 | 0.7% | 2022-05-18 | |
| CVE-2022-28917 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 9.3% | 2022-05-18 | |
| CVE-2022-28717 | Meikyo Watch Boot Nino Rpc-m2c Rebooter( cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-18 | Fix |
| CVE-2022-27632 | Meikyo Watch Boot Nino Rpc-m2c Rebooter( cross-site request forgery | 8.8v3.1 | 0.5% | 2022-05-18 | Fix |
| CVE-2022-25617 | Code Snippets WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2022-05-18 | Fix |
| CVE-2022-25162 | Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z improper input validation | 5.3v3.1 | 2.7% | 2022-05-18 | Fix |
| CVE-2022-25161 | Mitsubishi Electric MELSEC iQ-F series FX5U-xMy/z improper input validation | 8.6v3.1 | 4.0% | 2022-05-18 | Fix |
| CVE-2022-23068 | ToolJet HTML injection in Invite New User | 5.4v3.1 | 0.6% | 2022-05-18 | |
| CVE-2022-23067 | ToolJet token leakage via Referer header | 8.8CNA v3.1 | 1.3% | 2022-05-18 | |
| CVE-2022-22787 | Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings | 5.9CNA v3.1 | 3.6% | 2022-05-18 | Fix |
| CVE-2022-22786 | Zoom Client for Meetings update process vulnerability | 7.5CNA v3.1 | 1.5% | 2022-05-18 | Fix |
| CVE-2022-22785 | Improperly constrained session cookies in Zoom Client for Meetings | 5.9CNA v3.1 | 3.5% | 2022-05-18 | Fix |
| CVE-2022-22784 | Improper XML Parsing in Zoom Client for Meetings | 8.1CNA v3.1 | 4.0% | 2022-05-18 | Fix |
| CVE-2022-22778 | TIBCO BusinessConnect Trading Community Management cross-site request forgery | 8.8CNA v3.1 | 0.4% | 2022-05-18 | Fix |
| CVE-2022-22777 | TIBCO BusinessConnect Trading Community Management reflected cross-site scripting | 6.1CNA v3.1 | 0.6% | 2022-05-18 | Fix |
| CVE-2022-22776 | TIBCO BusinessConnect Trading Community Management stored cross-site scripting | 8.0CNA v3.1 | 0.6% | 2022-05-18 | Fix |
| CVE-2022-1795 | gpac/gpac GitHub repository use-after-free | 9.8v3.1 | 1.1% | 2022-05-18 | Fix |
| CVE-2022-1782 | Cross-site scripting (XSS) Generic in Erudika/para | 6.1NVD v3.1 | 1.0% | 2022-05-18 | Fix |
| CVE-2022-1774 | Exposure of sensitive information to an unauthorized actor in jgraph/drawio | 6.1NVD v3.1 | 1.2% | 2022-05-18 | Fix |
| CVE-2022-1771 | Uncontrolled recursion in Vim/Vim | 5.5v3.1 | 1.2% | 2022-05-18 | Fix |
| CVE-2022-1767 | Server-side request forgery (SSRF) in jgraph/drawio | 7.5v3.1 | 1.8% | 2022-05-18 | Fix |
| CVE-2022-1734 | kernel use-after-free | 7.0NVD v3.1 | 0.5% | 2022-05-18 | Fix |
| CVE-2022-1727 | Improper input validation in jgraph/drawio | 8.8v3.1 | 1.4% | 2022-05-18 | Fix |
| CVE-2022-1432 | Cross-site scripting (XSS) Generic in OctoPrint/OctoPrint | 6.4NVD v3.1 | 1.2% | 2022-05-18 | Fix |
| CVE-2022-1430 | Cross-site scripting (XSS) DOM in OctoPrint/OctoPrint | 7.5v3.1 | 1.3% | 2022-05-18 | Fix |
| CVE-2022-1110 | Lenovo Smart Standby Driver buffer overflow | 5.5CNA v3.1 | 0.2% | 2022-05-18 | Fix |
| CVE-2022-0883 | Snow License Manager Windows Unquoted/Trusted Service Paths | 7.3CNA v3.1 | 0.2% | 2022-05-18 | Fix |
| CVE-2022-30972 | Cross-site request forgery in Jenkins Storable Configs Plugin | 8.8v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30971 | XML external entity Reference in Jenkins Storable Configs Plugin | 8.8v3.1 | 1.2% | 2022-05-17 | Fix |
| CVE-2022-30970 | Cross-site scripting in Jenkins Autocomplete Parameter Plugin | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30969 | Cross-site request forgery in Jenkins Autocomplete Parameter Plugin | 8.8v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-30968 | Cross-site scripting in Jenkins Vboxwrapper Plugin | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30967 | Cross-site scripting in Jenkins Selection Tasks Plugin | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30966 | Cross-site scripting in Jenkins Random String Parameter Plugin | 5.4v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30965 | Jenkins Promoted Builds (Simple) Plugin cross-site scripting | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30964 | Cross-site scripting in Jenkins Multiselect Parameter Plugin | 5.4v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30963 | Cross-site scripting in Jenkins JDK Parameter Plugin | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30962 | Cross-site scripting in Jenkins Global Variable String Parameter Plugin | 5.4v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30961 | Cross-site scripting in Jenkins Autocomplete Parameter Plugin | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30960 | Cross-site scripting in Jenkins Application Detector Plugin | 5.4v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30959 | Missing authorization in Jenkins SSH plugin | 6.5v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-30958 | Cross-site request forgery in Jenkins SSH Plugin | 8.8v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30957 | Missing permission check in Jenkins SSH Plugin | 4.3v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30956 | Cross-site scripting in Jenkins Rundeck Plugin | 5.4v3.1 | 73.3% | 2022-05-17 | Fix |
| CVE-2022-30955 | Missing permission check in Jenkins GitLab Plugin | 6.5v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-30954 | Missing permission check in Jenkins Blue Ocean Plugin | 6.5v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-30953 | Cross-site request forgery in Jenkins Blue Ocean Plugin | 6.5v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-30952 | Insufficiently protected credentials in Jenkins Pipeline SCM API for Blue Ocean Plugin | 6.5v3.1 | 1.0% | 2022-05-17 | Fix |
| CVE-2022-30951 | Missing authorization in Jenkins WMI Windows Agents plugin | 8.8v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-30950 | Buffer overflow in Jenkins WMI Windows Agents plugin | 8.8v3.1 | 1.8% | 2022-05-17 | Fix |
| CVE-2022-30949 | Path traversal in Jenkins REPO Plugin | 5.3v3.1 | 1.0% | 2022-05-17 | Fix |
| CVE-2022-30948 | Path traversal in Jenkins Mercurial Plugin | 7.5v3.1 | 1.5% | 2022-05-17 | Fix |
| CVE-2022-30947 | Path traversal in Jenkins Git Mercurial and Repo plugins | 7.5v3.1 | 1.3% | 2022-05-17 | Fix |
| CVE-2022-30946 | CSRF vulnerability in Jenkins Script Security Plugin | 4.3v3.1 | 0.6% | 2022-05-17 | Fix |
| CVE-2022-30945 | Jenkins Pipeline Groovy plugin sandbox script security sandbox bypass | 8.5v3.1 | 1.4% | 2022-05-17 | Fix |
| CVE-2022-30689 | HashiCorp Vault improper configuration of multi factor authentication | 5.3v3.1 | 1.2% | 2022-05-17 | Fix |
| CVE-2022-30688 | needrestart local privilege escalation | 7.8v3.1 | 0.4% | 2022-05-17 | Fix |
| CVE-2022-30110 | Cross-site scripting in Jirafeau | 6.1v3.1 | 0.6% | 2022-05-17 | Fix |
| CVE-2022-30073 | WBCE_CMS cross-site scripting | 5.4v3.1 | 1.6% | 2022-05-17 | Nuclei |
| CVE-2022-30072 | WBCE_CMS cross-site scripting | 5.4v3.1 | 0.9% | 2022-05-17 | |
| CVE-2022-30067 | GIMP buffer overflow | 5.5v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-30054 | Covid 19 Travel Pass Management SQL injection | 9.8v3.1 | 1.2% | 2022-05-17 | |
| CVE-2022-30053 | oretnom23 Toll Tax Management System SQL injection | 9.8v3.1 | 1.2% | 2022-05-17 | |
| CVE-2022-30052 | Home Clean Service System SQL injection | 9.8v3.1 | 1.2% | 2022-05-17 | |
| CVE-2022-30045 | Ezxml out-of-bounds read | 6.5v3.1 | 1.0% | 2022-05-17 | Fix |
| CVE-2022-30007 | Gxcms unrestricted file upload | 7.2v3.1 | 1.0% | 2022-05-17 | |
| CVE-2022-29581 | Linux kernel net/sched improper reference count update | 7.8NVD v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-29436 | Alexander Stokmann Code Snippets Extended (WordPress plugin) stored cross-site scripting | 6.1v3.1 | 0.4% | 2022-05-17 | |
| CVE-2022-29435 | Code Snippets Extended WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.4% | 2022-05-17 | Fix |
| CVE-2022-29429 | Code Snippets Extended WordPress plugin cross-site request forgery leading to remote code execution | 8.8v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-29332 | D-Link DIR-825 path traversal | 6.5v3.1 | 1.4% | 2022-05-17 | |
| CVE-2022-29174 | Predictable password reset token may lead to account takeover in countly-server | 8.1CNA v3.1 | 1.5% | 2022-05-17 | Fix |
| CVE-2022-29162 | Incorrect default permissions in runc | 5.9CNA v3.1 | 0.4% | 2022-05-17 | Fix |
| CVE-2022-28617 | A remote bypass security restrictions vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView. | 9.8v3.1 | 2.0% | 2022-05-17 | Fix |
| CVE-2022-28616 | HPE OneView server-side request forgery | 9.8v3.1 | 1.4% | 2022-05-17 | Fix |
| CVE-2022-28192 | NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming use-after-free | 4.1CNA v3.1 | 0.2% | 2022-05-17 | Fix |
| CVE-2022-28191 | NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming resource exhaustion | 5.5CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28190 | NVIDIA GPU Display Driver improper input validation | 5.5CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28189 | NVIDIA GPU Display Driver null pointer dereference | 5.5CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28188 | NVIDIA GPU Display Driver denial of service | 5.5CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28187 | NVIDIA GPU Display Driver missing resource release | 5.5CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28186 | NVIDIA GPU Display Driver denial of service | 6.1CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28185 | NVIDIA GPU Display Driver out-of-bounds write | 6.8CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28184 | NVIDIA GPU Display Driver denial of service | 7.1CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28183 | NVIDIA GPU Display Driver out-of-bounds read | 7.7CNA v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-28182 | NVIDIA GPU Display Driver out-of-bounds write | 8.5CNA v3.1 | 1.6% | 2022-05-17 | Fix |
| CVE-2022-28181 | NVIDIA GPU Display Driver out-of-bounds write | 8.5CNA v3.1 | 1.1% | 2022-05-17 | Fix |
| CVE-2022-26650 | Apache ShenYu (incubating) regular expression denial of service | 7.5v3.1 | 2.6% | 2022-05-17 | Fix |
| CVE-2022-24890 | Exposure of private personal information to an unauthorized actor in Nextcloud Talk | 2.4CNA v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-24856 | Server-side request forgery in FlyteConsole | 9.1CNA v3.1 | 10.5% | 2022-05-17 | NucleiFix |
| CVE-2022-24611 | Silabs SD3502 denial of service | 6.5NVD v3.1 | 0.7% | 2022-05-17 | |
| CVE-2022-24394 | Authenticated command injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 2.6% | 2022-05-17 | Fix |
| CVE-2022-24393 | Authenticated command injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 2.7% | 2022-05-17 | Fix |
| CVE-2022-24392 | Authenticated command injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 2.7% | 2022-05-17 | Fix |
| CVE-2022-24391 | Authenticated SQL injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 1.0% | 2022-05-17 | Fix |
| CVE-2022-24390 | Authenticated command injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 1.3% | 2022-05-17 | Fix |
| CVE-2022-24389 | Authenticated Privileged command injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 1.5% | 2022-05-17 | Fix |
| CVE-2022-24388 | Authenticated Privileged command injection vulnerability in Fidelis Network and Deception | 8.8CNA v3.1 | 1.5% | 2022-05-17 | Fix |
| CVE-2022-24108 | Skyoftech So Listing Tabs deserialization of untrusted data | 9.8v3.1 | 33.0% | 2022-05-17 | |
| CVE-2022-23706 | HPE OneView cross-site scripting | 6.1v3.1 | 0.7% | 2022-05-17 | Fix |
| CVE-2022-23675 | Aruba ClearPass Policy Manager cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-17 | Fix |
| CVE-2022-23674 | Aruba ClearPass Policy Manager cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-17 | Fix |
| CVE-2022-23673 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.2% | 2022-05-17 | Fix |
| CVE-2022-23672 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 2.2% | 2022-05-17 | Fix |
| CVE-2022-23671 | Aruba ClearPass Policy Manager information disclosure | 7.5v3.1 | 1.3% | 2022-05-17 | Fix |
| CVE-2022-23669 | Aruba ClearPass Policy Manager insufficient session expiration | 8.8v3.1 | 1.0% | 2022-05-17 | Fix |
| CVE-2022-22775 | TIBCO ActiveMatrix BPM reflected cross-site scripting (XSS) | 8.1CNA v3.1 | 0.5% | 2022-05-17 | Fix |
| CVE-2022-22773 | TIBCO JasperReports Server reflected cross-site scripting (XSS) | 7.7CNA v3.1 | 0.5% | 2022-05-17 | Fix |
| CVE-2022-22484 | IBM Spectrum Protect Operations Center cleartext storage of sensitive information | 5.1CNA v3.0 | 0.2% | 2022-05-17 | Fix |
| CVE-2022-22482 | IBM Sterling B2B Integrator unrestricted file upload | 6.5CNA v3.0 | 1.0% | 2022-05-17 | Fix |
| CVE-2022-22475 | IBM WebSphere Application Server spoofing | 5.0CNA v3.0 | 0.6% | 2022-05-17 | Fix |
| CVE-2022-1769 | Buffer over-read in Vim/Vim | 7.8v3.1 | 0.4% | 2022-05-17 | Fix |
| CVE-2022-1753 | WoWonder Group requests.php access control | 4.3v3.1 | 0.9% | 2022-05-17 | |
| CVE-2022-1735 | Classic buffer overflow in Vim/Vim | 7.8v3.1 | 1.3% | 2022-05-17 | Fix |
| CVE-2022-1733 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.6% | 2022-05-17 | Fix |
| CVE-2022-1723 | Server-side request forgery (SSRF) in jgraph/drawio | 7.5v3.1 | 1.7% | 2022-05-17 | Fix |
| CVE-2022-1711 | Server-side request forgery (SSRF) in jgraph/drawio | 7.5v3.1 | 5.7% | 2022-05-17 | NucleiFix |
| CVE-2022-1706 | Ignition config accessible to unprivileged software on VMware | 6.5NVD v3.1 | 1.3% | 2022-05-17 | Fix |
| CVE-2022-1362 | Cambium Networks cnMaestro OS command injection | 7.3v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-1361 | Cambium Networks cnMaestro SQL injection | 7.5v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-1360 | Cambium Networks cnMaestro OS command injection | 9.8v3.1 | 1.8% | 2022-05-17 | Fix |
| CVE-2022-1359 | Cambium Networks cnMaestro path traversal | 7.5v3.1 | 0.9% | 2022-05-17 | Fix |
| CVE-2022-1358 | Cambium Networks cnMaestro SQL injection | 7.5v3.1 | 0.8% | 2022-05-17 | Fix |
| CVE-2022-1357 | Cambium Networks cnMaestro OS command injection | 9.8v3.1 | 1.7% | 2022-05-17 | Fix |
| CVE-2022-1356 | Cambium Networks cnMaestro use of potentially dangerous function | 7.8v3.1 | 0.3% | 2022-05-17 | Fix |
| CVE-2022-1118 | Rockwell Automation ISaGRAF deserialization of untrusted data | 7.8v3.1 | 11.7% | 2022-05-17 | |
| CVE-2022-1116 | Linux kernel io_uring integer overflow | 7.8NVD v3.1 | 0.5% | 2022-05-17 | Fix |
| CVE-2022-0997 | Local privilege escalation vulnerability in Fidelis Network and Deception | 3.9CNA v3.1 | 0.5% | 2022-05-17 | Exploit codeFix |
| CVE-2022-0486 | Privileged command injection vulnerability in Fidelis Network and Deception | 4.4CNA v3.1 | 0.4% | 2022-05-17 | Fix |
| CVE-2022-30782 | Openmoney API insufficient randomness | 7.5v3.1 | 1.2% | 2022-05-16 | |
| CVE-2022-30781 | Shell command injection in Gitea | 7.5v3.1 | 87.9% | 2022-05-16 | MetasploitExploit codeFix |
| CVE-2022-30777 | Parallels H-sphere cross-site scripting | 6.1v3.1 | 2.3% | 2022-05-16 | Nuclei |
| CVE-2022-30776 | Atmail cross-site scripting | 6.1v3.1 | 4.3% | 2022-05-16 | NucleiFix |
| CVE-2022-30775 | Xpdfreader Xpdf resource exhaustion | 5.5v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-30770 | Terminalfour cross-site scripting | 6.1v3.1 | 1.0% | 2022-05-16 | Fix |
| CVE-2022-30767 | denx U-Boot buffer overflow | 9.8v3.1 | 2.7% | 2022-05-16 | Fix |
| CVE-2022-30765 | janeczku Calibre-Web SQL injection in calibreweb | 9.8v3.1 | 1.2% | 2022-05-16 | Fix |
| CVE-2022-30763 | janet-lang janet improper array index validation | 7.5v3.1 | 1.8% | 2022-05-16 | Fix |
| CVE-2022-30697 | Acronis Snap Deploy local privilege escalation due to insecure folder permissions | 7.8v3.1 | 0.2% | 2022-05-16 | Fix |
| CVE-2022-30696 | Acronis Snap Deploy local privilege escalation due to a DLL hijacking | 7.8v3.1 | 0.2% | 2022-05-16 | Fix |
| CVE-2022-30695 | Acronis Snap Deploy child process permissions privilege escalation | 7.8v3.1 | 0.2% | 2022-05-16 | Fix |
| CVE-2022-30523 | Trend Micro Password Manager link following | 7.8v3.1 | 0.4% | 2022-05-16 | Fix |
| CVE-2022-30126 | Apache Tika regular expression denial of service in Standards Extractor | 5.5v3.1 | 2.6% | 2022-05-16 | Fix |
| CVE-2022-30055 | Mersenne Prime95 buffer overflow | 9.8v3.1 | 3.9% | 2022-05-16 | |
| CVE-2022-30050 | Sir Gnuboard cross-site scripting | 6.1v3.1 | 0.7% | 2022-05-16 | |
| CVE-2022-30013 | total.js upload function of totaljs CMS stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2022-30012 | Hospital Management System SQL injection | 7.5v3.1 | 1.7% | 2022-05-16 | |
| CVE-2022-30011 | Hospital Management System SQL injection | 9.8v3.1 | 18.5% | 2022-05-16 | |
| CVE-2022-29623 | Connect-multiparty allows arbitrary file upload | 7.8v3.1 | 1.3% | 2022-05-16 | |
| CVE-2022-29622 | Formidable An arbitrary file upload | 9.8v3.1 | 3.5% | 2022-05-16 | Exploit codeFix |
| CVE-2022-29588 | Konica Minolta Bizhub 226I insufficiently protected credentials | 7.5v3.1 | 1.7% | 2022-05-16 | |
| CVE-2022-29587 | Konica Minolta Bizhub 226I improper privilege management | 4.0v3.1 | 0.4% | 2022-05-16 | |
| CVE-2022-29586 | Konica Minolta Bizhub 226I sandbox escape | 7.4v3.1 | 0.4% | 2022-05-16 | |
| CVE-2022-29354 | keystonejs keystone file upload module arbitrary file upload | 9.8v3.1 | 2.4% | 2022-05-16 | |
| CVE-2022-29353 | Graphql-upload file upload module arbitrary file upload | 9.8v3.1 | 1.7% | 2022-05-16 | Fix |
| CVE-2022-29351 | Tiddlywiki5 file upload module arbitrary file upload | 9.8v3.1 | 2.5% | 2022-05-16 | |
| CVE-2022-29017 | Axiosys Bento4 improper exception handling | 5.5v3.1 | 0.6% | 2022-05-16 | |
| CVE-2022-25169 | Apache Tika BPGParser Memory Usage DoS | 5.5v3.1 | 2.1% | 2022-05-16 | Fix |
| CVE-2022-23670 | Aruba ClearPass Policy Manager information disclosure | 6.5v3.1 | 1.0% | 2022-05-16 | Fix |
| CVE-2022-23668 | Aruba ClearPass Policy Manager server-side request forgery | 4.9v3.1 | 0.9% | 2022-05-16 | Fix |
| CVE-2022-23667 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 1.5% | 2022-05-16 | Fix |
| CVE-2022-23666 | Aruba ClearPass Policy Manager OS command injection | 9.1v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-23665 | Aruba ClearPass Policy Manager OS command injection | 9.1v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-23664 | Aruba ClearPass Policy Manager OS command injection | 9.1v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-23663 | Aruba ClearPass Policy Manager OS command injection | 9.1v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-23662 | Aruba ClearPass Policy Manager OS command injection | 9.1v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-23661 | Aruba ClearPass Policy Manager OS command injection | 9.1v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-23660 | Aruba ClearPass Policy Manager authentication bypass | 10.0v3.1 | 2.8% | 2022-05-16 | Fix |
| CVE-2022-23659 | Aruba ClearPass Policy Manager cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-16 | Fix |
| CVE-2022-23658 | Aruba ClearPass Policy Manager authentication bypass | 10.0v3.1 | 2.8% | 2022-05-16 | Fix |
| CVE-2022-23657 | Aruba ClearPass Policy Manager authentication bypass | 10.0v3.1 | 3.1% | 2022-05-16 | Fix |
| CVE-2022-1731 | Metasonic Doc WebClient SQL injection | 9.8NVD v3.1 | 1.2% | 2022-05-16 | |
| CVE-2022-1728 | Allowing long password leads to denial of service in polonel/trudesk in polonel/trudesk | 6.5NVD v3.1 | 1.0% | 2022-05-16 | Fix |
| CVE-2022-1726 | Cross-site scripting in Bootstrap-table | 5.4v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-1722 | SSRF in editor's proxy via IPv6 link-local address in jgraph/drawio | 3.3NVD v3.1 | 0.5% | 2022-05-16 | Fix |
| CVE-2022-1721 | Path traversal in WellKnownServlet in jgraph/drawio | 7.5v3.1 | 2.2% | 2022-05-16 | Fix |
| CVE-2022-1713 | SSRF on /proxy in jgraph/drawio | 7.5v3.1 | 9.2% | 2022-05-16 | NucleiFix |
| CVE-2022-1679 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-1587 | pcre2 out-of-bounds read | 9.1NVD v3.1 | 2.8% | 2022-05-16 | Fix |
| CVE-2022-1586 | pcre2 out-of-bounds read | 9.1NVD v3.1 | 3.4% | 2022-05-16 | Fix |
| CVE-2022-1560 | Amministrazione Aperta WordPress plugin Admin+ LFI | 6.5NVD v3.1 | 2.3% | 2022-05-16 | Fix |
| CVE-2022-1559 | Clipr WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 1.0% | 2022-05-16 | |
| CVE-2022-1557 | ULeak Security and Monitoring WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 1.1% | 2022-05-16 | |
| CVE-2022-1553 | Leaking password protected articles content due to improper access control in publify/publify | 4.9NVD v3.1 | 1.2% | 2022-05-16 | Fix |
| CVE-2022-1512 | ScrollReveal.js Effects WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-05-16 | |
| CVE-2022-1465 | WPC Smart Wishlist for WooCommerce WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-05-16 | Fix |
| CVE-2022-1455 | The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled | 6.1NVD v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-1436 | WPCargo Track and Trace WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-1435 | WPCargo Track and Trace WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2022-1425 | WPQA WordPress plugin Subscriber+ Private Message disclosure via IDOR | 4.3NVD v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-1418 | Social Stickers WordPress plugin stored cross-site scripting via CSRF | 6.1NVD v3.1 | 0.4% | 2022-05-16 | |
| CVE-2022-1409 | VikBooking Hotel Booking Engine and PMS WordPress plugin Admin+ PHP file upload | 7.2NVD v3.1 | 1.5% | 2022-05-16 | Fix |
| CVE-2022-1408 | VikBooking Hotel Booking Engine and PMS WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2022-1407 | VikBooking Hotel Booking Engine and PMS WordPress plugin stored cross-site scripting via CSRF | 6.5NVD v3.1 | 0.5% | 2022-05-16 | Fix |
| CVE-2022-1398 | External Media without Import WordPress plugin Subscriber+ blind SSRF | 6.5NVD v3.1 | 3.0% | 2022-05-16 | Nuclei |
| CVE-2022-1393 | WP Subtitle WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2022-1386 | Fusion Builder WordPress plugin unauthenticated SSRF | 9.8NVD v3.1 | 71.4% | 2022-05-16 | NucleiExploit codeFix |
| CVE-2022-1349 | WPQA WordPress plugin Subscriber+ arbitrary Profile Picture deletion via IDOR | 4.3NVD v3.1 | 0.7% | 2022-05-16 | Fix |
| CVE-2022-1334 | WP YouTube Live WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-05-16 | Fix |
| CVE-2022-1267 | BMI BMR Calculator WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-05-16 | |
| CVE-2022-1265 | BulletProof Security WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2022-1217 | Custom TinyMCE Shortcode Button WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-16 | |
| CVE-2022-1216 | Advanced Image Sitemap WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-16 | |
| CVE-2022-1182 | Visual Slide Box Builder WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 1.3% | 2022-05-16 | |
| CVE-2022-1103 | Advanced Uploader WordPress plugin Subscriber+ arbitrary file upload | 8.8NVD v3.1 | 15.6% | 2022-05-16 | Exploit code |
| CVE-2022-1089 | Bulk Edit and Create User Profiles WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-16 | Fix |
| CVE-2022-1062 | th23 Social WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-16 | |
| CVE-2022-1051 | WPQA WordPress plugin Subscriber+ stored cross-site scripting via Profile fields | 5.4NVD v3.1 | 1.3% | 2022-05-16 | Exploit codeFix |
| CVE-2022-0873 | Gmedia Photo Gallery WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.9% | 2022-05-16 | NucleiFix |
| CVE-2022-0867 | Repute InfoSystems Pricing Table AJAX action SQL injection | 9.8NVD v3.1 | 13.5% | 2022-05-16 | NucleiFix |
| CVE-2022-0578 | Code injection in publify/publify | 6.5v3.1 | 0.9% | 2022-05-16 | Fix |
| CVE-2022-0574 | Improper access control in publify/publify | 6.5v3.1 | 0.8% | 2022-05-16 | Fix |
| CVE-2022-0573 | JFrog Artifactory deserialization of untrusted data | 8.8CNA v3.1 | 2.1% | 2022-05-16 | Fix |
| CVE-2022-30708 | Webmin remote code execution | 8.8v3.1 | 3.6% | 2022-05-15 | Fix |
| CVE-2022-30049 | ruifang-tech Rebuild server-side request forgery | 7.5v3.1 | 1.0% | 2022-05-15 | |
| CVE-2022-28937 | FISCO-BCOS integer overflow | 7.5v3.1 | 1.2% | 2022-05-15 | |
| CVE-2022-28936 | FISCO-BCOS integer overflow | 7.5v3.1 | 0.9% | 2022-05-15 | |
| CVE-2022-28930 | Erp-pro SQL injection | 9.8v3.1 | 1.1% | 2022-05-15 | |
| CVE-2022-28929 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-15 | |
| CVE-2022-24831 | Improper neutralization of special elements used in an SQL command (SQL injection) in OpenClinica | 8.3CNA v3.1 | 1.1% | 2022-05-14 | Fix |
| CVE-2022-24830 | Path traversal in OpenClinica | 6.5CNA v3.1 | 3.2% | 2022-05-14 | Fix |
| CVE-2022-1379 | URL Restriction Bypass in PlantUML/PlantUML | 9.1v3.1 | 1.6% | 2022-05-14 | Fix |
| CVE-2022-30489 | WAVLINK WN535G3 cross-site scripting | 6.1v3.1 | 4.2% | 2022-05-13 | NucleiExploit code |
| CVE-2022-30417 | Covid 19 Travel Pass Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30415 | Covid 19 Travel Pass Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30414 | Covid 19 Travel Pass Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30413 | Covid 19 Travel Pass Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30412 | Covid 19 Travel Pass Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30411 | Covid 19 Travel Pass Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30408 | Covid 19 Travel Pass Management System file deletion | 6.5v3.1 | 0.9% | 2022-05-13 | |
| CVE-2022-30407 | Pharmacy Sales and Inventory System SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30404 | College Management System SQL injection | 7.2v3.1 | 0.8% | 2022-05-13 | |
| CVE-2022-30403 | Merchandise Online Store Product Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30402 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30401 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30400 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30399 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30398 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30396 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30395 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30393 | Merchandise Online Store SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30392 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30391 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30387 | Merchandise Online Store SQL injection | 9.8v3.1 | 0.9% | 2022-05-13 | |
| CVE-2022-30386 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30385 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30384 | Merchandise Online Store SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30381 | Merchandise Online Store file deletion | 6.5v3.1 | 0.9% | 2022-05-13 | |
| CVE-2022-30379 | Simple Social Networking Site SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30378 | Simple Social Networking Site SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30376 | Simple Social Networking Site SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30375 | Simple Social Networking Site incorrect default permissions | 6.5v3.1 | 0.9% | 2022-05-13 | |
| CVE-2022-30374 | Air Cargo Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30373 | Air Cargo Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30372 | Air Cargo Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30371 | Air Cargo Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-30370 | Air Cargo Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-13 | |
| CVE-2022-30367 | Air Cargo Management System incorrect default permissions | 6.5v3.1 | 0.9% | 2022-05-13 | |
| CVE-2022-29854 | Mitel 6905 incorrect authorization | 6.8v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-29796 | Huawei HarmonyOS unstrict verification of the validity of the weight in the model in hiaiserver | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-29795 | Huawei HarmonyOS null pointer dereference vulnerability in the frame scheduling module | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-29794 | Huawei HarmonyOS UAF vulnerability in the frame scheduling module | 9.8v3.1 | 0.7% | 2022-05-13 | Fix |
| CVE-2022-29793 | HarmonyOS configuration defects in the activation lock of the mobile phone | 7.5v3.1 | 0.9% | 2022-05-13 | Fix |
| CVE-2022-29792 | Huawei HarmonyOS serial number obtaining vulnerability in the chip assembly | 7.5v3.1 | 0.7% | 2022-05-13 | Fix |
| CVE-2022-29791 | Huawei HarmonyOS unstrict verification of the validity of the weight in the model in hiaiserver | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-29790 | Huawei HarmonyOS graphics acceleration service vulnerability | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-29789 | Huawei HarmonyOS unstrict verification of the validity of the property in the model in hiaiserver | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-29433 | Donations (WordPress plugin) stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-13 | |
| CVE-2022-29383 | NETGEAR SSL312 SQL injection | 9.8v3.1 | 49.0% | 2022-05-13 | NucleiExploit codeFix |
| CVE-2022-29218 | rubygems.org unauthorized takeover for new versions of some platform-specific gems | 7.7CNA v3.1 | 1.3% | 2022-05-13 | Fix |
| CVE-2022-28830 | Adobe FrameMaker Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 1.8% | 2022-05-13 | Fix |
| CVE-2022-28829 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-28828 | Adobe FrameMaker PDF File Parsing out-of-bounds write code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-28827 | Adobe FrameMaker SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-28826 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-28825 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-28824 | Adobe FrameMaker Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.8% | 2022-05-13 | Fix |
| CVE-2022-28823 | Adobe FrameMaker Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.8% | 2022-05-13 | Fix |
| CVE-2022-28822 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-28821 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.2% | 2022-05-13 | Fix |
| CVE-2022-27247 | Cdsoft Winhotel.mx insecure direct object reference | 5.3v3.1 | 1.0% | 2022-05-13 | |
| CVE-2022-27134 | B1 Eosio Batdappboomx incorrect authorization | 7.5v3.1 | 2.1% | 2022-05-13 | Exploit code |
| CVE-2022-25865 | workspace-tools command injection | 9.8v3.1 | 6.8% | 2022-05-13 | Fix |
| CVE-2022-25862 | sds prototype pollution | 7.5v3.1 | 0.7% | 2022-05-13 | |
| CVE-2022-25762 | Apache Tomcat response mix-up with WebSocket concurrent send and close | 8.6NVD v3.1 | 8.4% | 2022-05-13 | Fix |
| CVE-2022-25591 | BlogEngine.NET path traversal | 9.1v3.1 | 2.7% | 2022-05-13 | |
| CVE-2022-22393 | IBM WebSphere Application Server Liberty admin center vulnerability | 3.1CNA v3.0 | 0.7% | 2022-05-13 | Fix |
| CVE-2022-22325 | IBM MQ for HPE NonStop information disclosure | 5.1CNA v3.0 | 0.2% | 2022-05-13 | Fix |
| CVE-2022-22282 | SonicWall SMA1000 improper access control | 9.8v3.1 | 7.4% | 2022-05-13 | Fix |
| CVE-2022-22281 | SonicWall NetExtender Windows (32 and 64 bit) Client SonicWall SSL-VPN buffer overflow | 7.8v3.1 | 0.5% | 2022-05-13 | Fix |
| CVE-2022-22261 | Huawei HarmonyOS unstrict verification of the validity of the weight in the model in hiaiserver | 7.5v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-22260 | Huawei HarmonyOS UAF vulnerability in the kernel module | 9.1v3.1 | 0.6% | 2022-05-13 | Fix |
| CVE-2022-22252 | HarmonyOS UAF vulnerability in the DFX module | 7.5v3.1 | 0.7% | 2022-05-13 | Fix |
| CVE-2022-21190 | convict prototype pollution | 9.8v3.1 | 3.9% | 2022-05-13 | Fix |
| CVE-2022-1715 | Account takeover in NeoRazorX/Facturascripts | 9.8v3.1 | 1.4% | 2022-05-13 | Fix |
| CVE-2022-1714 | Out-of-bounds read in radareorg/radare2 | 7.1v3.1 | 0.4% | 2022-05-13 | Fix |
| CVE-2022-1702 | SonicWall SMA1000 open redirect | 6.1v3.1 | 8.6% | 2022-05-13 | Fix |
| CVE-2022-1701 | SonicWall SMA1000 hard-coded cryptographic key | 7.5v3.1 | 4.6% | 2022-05-13 | Fix |
| CVE-2022-30594 | Linux kernel missing authorization | 7.8v3.1 | 0.8% | 2022-05-12 | Exploit codeFix |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS command injection | 9.8CNA v3.1 | 99.9% | 2022-05-12 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-30279 | Stormshield Network Security null pointer dereference | 7.5v3.1 | 0.9% | 2022-05-12 | Fix |
| CVE-2022-30002 | Angeljudesuarez Insurance Management System SQL injection | 7.2v3.1 | 1.0% | 2022-05-12 | |
| CVE-2022-30001 | Angeljudesuarez Insurance Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-30000 | Angeljudesuarez Insurance Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29999 | Angeljudesuarez Insurance Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29998 | Angeljudesuarez Insurance Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29995 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29994 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29993 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29992 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29990 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29989 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29988 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29987 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29986 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29985 | Online Sports Complex Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29984 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29983 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29982 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29981 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29980 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29979 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29930 | JetBrains Ktor SHA1 implementation vulnerability | 8.7CNA v3.1 | 0.9% | 2022-05-12 | Fix |
| CVE-2022-29929 | JetBrains TeamCity cross-site scripting | 3.7CNA v3.1 | 0.5% | 2022-05-12 | Fix |
| CVE-2022-29928 | JetBrains TeamCity sensitive information in log files | 4.4CNA v3.1 | 0.5% | 2022-05-12 | Fix |
| CVE-2022-29927 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.5% | 2022-05-12 | Fix |
| CVE-2022-29885 | Apache Tomcat EncryptInterceptor does not provide complete protection on insecure networks | 7.5NVD v3.1 | 73.5% | 2022-05-12 | Exploit codeFix |
| CVE-2022-29751 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29750 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29749 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29748 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29747 | Simple Client Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-12 | |
| CVE-2022-29746 | Money Transfer Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29745 | Money Transfer Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29741 | Money Transfer Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29739 | Money Transfer Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29738 | Money Transfer Management System SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29539 | Resi Gemini-net OS command injection | 9.8v3.1 | 1.8% | 2022-05-12 | Fix |
| CVE-2022-29538 | Resi Gemini-net improper access control | 5.3v3.1 | 0.8% | 2022-05-12 | Fix |
| CVE-2022-29369 | F5 Njs improper check for exceptional conditions | 7.5v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29368 | Moddable out-of-bounds read | 7.1v3.1 | 0.9% | 2022-05-12 | |
| CVE-2022-29363 | PHPOK deserialization of untrusted data | 9.8v3.1 | 1.3% | 2022-05-12 | |
| CVE-2022-29307 | Ionizecms Ionize code injection | 9.8v3.1 | 17.8% | 2022-05-12 | |
| CVE-2022-29306 | Ionizecms Ionize SQL injection | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-29303 | SolarView Compact command injection | 9.8NVD v3.1 | 98.0% | 2022-05-12 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-29302 | Contec SV-CPT-MC310 files accessible to external parties | 5.5v3.1 | 0.3% | 2022-05-12 | |
| CVE-2022-29298 | Contec SV-CPT-MC310 path traversal | 7.5v3.1 | 46.8% | 2022-05-12 | NucleiExploit code |
| CVE-2022-28920 | Moecraft Tieba-cloud-sign cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-12 | |
| CVE-2022-28919 | DokuWiki cross-site scripting | 6.1v3.1 | 1.4% | 2022-05-12 | Fix |
| CVE-2022-28873 | Multiple address bar spoofing vulnerability in F-Secure SAFE Browser for Android | 4.3v3.1 | 0.6% | 2022-05-12 | Fix |
| CVE-2022-28872 | Address bar spoofing vulnerability in F-Secure SAFE Browser for Android | 8.8v3.1 | 0.5% | 2022-05-12 | Fix |
| CVE-2022-28819 | Adobe Character Animator SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.9% | 2022-05-12 | Fix |
| CVE-2022-28818 | Adobe ColdFusion reflected cross-site scripting could lead to arbitrary code execution | 6.1CNA v3.0 | 44.8% | 2022-05-12 | Fix |
| CVE-2022-27172 | InHand Networks InRouter302 console infactory functionality hard-coded credentials | 8.8v3.1 | 1.0% | 2022-05-12 | Fix |
| CVE-2022-26782 | InHand Networks InRouter302 libnvram.so nvram_import functionality improper input validation | 8.8NVD v3.1 | 3.3% | 2022-05-12 | Fix |
| CVE-2022-26781 | InHand Networks InRouter302 libnvram.so nvram_import functionality improper input validation | 8.8NVD v3.1 | 2.9% | 2022-05-12 | Fix |
| CVE-2022-26780 | InHand Networks InRouter302 libnvram.so nvram_import functionality improper input validation | 8.8NVD v3.1 | 3.3% | 2022-05-12 | Fix |
| CVE-2022-26518 | InHand Networks InRouter302 console infactory_net functionality OS command injection | 8.8NVD v3.1 | 4.9% | 2022-05-12 | Fix |
| CVE-2022-26510 | InHand Networks InRouter302 improper signature verification | 6.5NVD v3.1 | 1.3% | 2022-05-12 | Fix |
| CVE-2022-26420 | InHand Networks InRouter302 console infactory_port functionality OS command injection | 8.8NVD v3.1 | 5.9% | 2022-05-12 | Fix |
| CVE-2022-26085 | InHand Networks InRouter302 httpd wlscan_ASP functionality OS command injection | 8.8NVD v3.1 | 12.7% | 2022-05-12 | Fix |
| CVE-2022-26075 | InHand Networks InRouter302 console infactory_wlan functionality OS command injection | 8.8NVD v3.1 | 5.9% | 2022-05-12 | Fix |
| CVE-2022-26042 | InHand Networks InRouter302 daretools binary functionality OS command injection | 8.8NVD v3.1 | 8.6% | 2022-05-12 | Fix |
| CVE-2022-26020 | InHand Networks InRouter302 router configuration export functionality information disclosure | 6.5v3.1 | 0.7% | 2022-05-12 | Fix |
| CVE-2022-26007 | InHand Networks InRouter302 console factory functionality OS command injection | 7.2NVD v3.1 | 5.4% | 2022-05-12 | Fix |
| CVE-2022-26002 | InHand Networks InRouter302 console factory functionality stack-based buffer overflow | 7.2NVD v3.1 | 3.4% | 2022-05-12 | Fix |
| CVE-2022-25995 | InHand Networks InRouter302 console inhand functionality command execution | 8.8NVD v3.1 | 2.9% | 2022-05-12 | Fix |
| CVE-2022-25172 | InHand Networks InRouter302 web interface session cookie functionality information disclosure | 6.1NVD v3.1 | 1.0% | 2022-05-12 | Fix |
| CVE-2022-24910 | InHand Networks InRouter302 httpd parse_ping_result API functionality buffer overflow | 6.7NVD v3.1 | 1.3% | 2022-05-12 | Fix |
| CVE-2022-24382 | Intel(R) NUCs firmware for some improper input validation | 6.7v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2022-24297 | Intel(R) NUCs privilege escalation | 6.7v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2022-23742 | Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. | 7.8NVD v3.1 | 4.2% | 2022-05-12 | Fix |
| CVE-2022-23166 | SysAid SysAid local file inclusion (LFI) | 9.8v3.1 | 1.1% | 2022-05-12 | |
| CVE-2022-23165 | SysAid SysAid reflected cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-05-12 | |
| CVE-2022-23139 | ZXMP M721 incorrect authorization | 8.8v3.1 | 0.7% | 2022-05-12 | Fix |
| CVE-2022-22971 | Allocation of resources without limits or throttling in Spring Framework | 6.5NVD v3.1 | 3.2% | 2022-05-12 | Exploit codeFix |
| CVE-2022-22970 | Denial of service in Spring Framework | 5.3NVD v3.1 | 2.0% | 2022-05-12 | Fix |
| CVE-2022-22798 | SysAid Pro Plus Edition, SysAid Help Desk broken access control | 8.8v3.1 | 0.6% | 2022-05-12 | |
| CVE-2022-22797 | SysAid SysAid open redirect | 6.1v3.1 | 0.5% | 2022-05-12 | |
| CVE-2022-22796 | SysAid SysAid System takeover | 9.8v3.1 | 1.4% | 2022-05-12 | |
| CVE-2022-22413 | IBM Robotic Process Automation SQL injection | 4.2CNA v3.0 | 1.3% | 2022-05-12 | Fix |
| CVE-2022-22139 | Intel(R) XTU software uncontrolled search path | 7.3v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2022-21809 | InHand Networks InRouter302 insecure temporary file | 8.1NVD v3.1 | 1.8% | 2022-05-12 | Fix |
| CVE-2022-21238 | InHand Networks InRouter302 info.jsp functionality cross-site scripting | 6.1v3.1 | 1.4% | 2022-05-12 | Fix |
| CVE-2022-21237 | Intel(R) NUCs privilege escalation | 6.7v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2022-21182 | InHand Networks InRouter302 router configuration import functionality privilege escalation | 8.8v3.1 | 1.9% | 2022-05-12 | Fix |
| CVE-2022-21151 | Intel(R) Processors information disclosure | 5.5v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2022-21147 | ESTsoft Alyac malware scan functionality out-of-bounds read | 5.5v3.1 | 0.7% | 2022-05-12 | Fix |
| CVE-2022-21136 | Intel(R) Xeon(R) Processors improper input validation | 5.5v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2022-21131 | Intel(R) Xeon(R) Processors improper access control | 5.5v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2022-21128 | Intel(R) Advisor software insufficient control flow management | 7.8v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2022-1699 | Uncontrolled resource consumption in causefx/Organizr | 7.5NVD v3.1 | 1.1% | 2022-05-12 | Fix |
| CVE-2022-1698 | Allowing long password leads to denial of service in causefx/Organizr | 7.5NVD v3.1 | 1.1% | 2022-05-12 | Fix |
| CVE-2022-1682 | Reflected XSS using URL based payload in NeoRazorX/Facturascripts | 6.1NVD v3.1 | 0.8% | 2022-05-12 | Fix |
| CVE-2022-1681 | Authentication bypass using an alternate path or channel in Requarks/wiki | 7.2v3.1 | 1.9% | 2022-05-12 | Fix |
| CVE-2022-1674 | Null pointer dereference in function vim_regexec_string at regexp.c:2733 in Vim/Vim | 5.5NVD v3.1 | 1.5% | 2022-05-12 | Fix |
| CVE-2022-1650 | Improper removal of sensitive information before storage or transfer in Eventsource/Eventsource | 9.3v3.1 | 1.9% | 2022-05-12 | Fix |
| CVE-2022-1044 | Sensitive data exposure due to Insecure Storage of Profile Image in polonel/trudesk | 6.5NVD v3.1 | 0.9% | 2022-05-12 | Fix |
| CVE-2022-0005 | Intel(R) Processors with SGX cleartext transmission of sensitive information | 2.4v3.1 | 0.2% | 2022-05-12 | Fix |
| CVE-2022-0004 | Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT privilege escalation | 6.8v3.1 | 0.3% | 2022-05-12 | Fix |
| CVE-2022-30592 | litespeedtech LSQUIC null pointer dereference | 9.8v3.1 | 3.2% | 2022-05-11 | Exploit codeFix |
| CVE-2022-30557 | Foxit PDF Editor type confusion | 7.5v3.1 | 4.3% | 2022-05-11 | Fix |
| CVE-2022-30453 | Shopwind remote code execution | 9.8v3.1 | 15.3% | 2022-05-11 | |
| CVE-2022-30452 | Shopwind SQL injection | 7.2v3.1 | 1.0% | 2022-05-11 | |
| CVE-2022-30451 | Waimairencms SQL injection | 8.8v3.1 | 1.5% | 2022-05-11 | |
| CVE-2022-30450 | Waimairencms remote code execution | 9.8v3.1 | 21.0% | 2022-05-11 | |
| CVE-2022-30449 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-05-11 | |
| CVE-2022-30448 | Hospital Management System unrestricted file upload | 9.8v3.1 | 1.9% | 2022-05-11 | |
| CVE-2022-30063 | ftcms code execution | 9.8v3.1 | 17.5% | 2022-05-11 | |
| CVE-2022-30062 | ftcms path traversal | 6.5v3.1 | 1.1% | 2022-05-11 | |
| CVE-2022-30061 | ftcms path traversal | 6.5v3.1 | 1.3% | 2022-05-11 | |
| CVE-2022-30060 | ftcms arbitrary file write | 8.8v3.1 | 1.1% | 2022-05-11 | |
| CVE-2022-30059 | Shopwind path traversal | 6.5v3.1 | 1.2% | 2022-05-11 | |
| CVE-2022-30058 | Shopwind path traversal | 5.3v3.1 | 1.1% | 2022-05-11 | |
| CVE-2022-30057 | Shopwind cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-11 | |
| CVE-2022-30048 | Mingsoft MCMS SQL injection | 9.8v3.1 | 1.4% | 2022-05-11 | |
| CVE-2022-30047 | Mingsoft MCMS SQL injection | 9.8v3.1 | 1.4% | 2022-05-11 | |
| CVE-2022-30040 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 1.9% | 2022-05-11 | Exploit code |
| CVE-2022-29978 | saitoha libsixel incorrect calculation | 6.5v3.1 | 1.0% | 2022-05-11 | Fix |
| CVE-2022-29977 | saitoha libsixel stbi__jpeg_huff_decode reachable assertion | 6.5v3.1 | 1.0% | 2022-05-11 | Fix |
| CVE-2022-29976 | Altn Mdaemon cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-11 | |
| CVE-2022-29975 | Altn Mdaemon cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-11 | |
| CVE-2022-29932 | Primeur Spazio memory leak | 7.5NVD v3.1 | 2.7% | 2022-05-11 | Fix |
| CVE-2022-29898 | Remote code execution in all versions of various RAD-ISM-900-EN-* devices by Phoenix Contact | 9.1CNA v3.1 | 0.7% | 2022-05-11 | |
| CVE-2022-29897 | Remote code execution in all versions of various RAD-ISM-900-EN-* devices by Phoenix Contact | 9.1CNA v3.1 | 1.4% | 2022-05-11 | |
| CVE-2022-29855 | Mitel 6865i SIP improper access control | 6.8v3.1 | 0.7% | 2022-05-11 | Fix |
| CVE-2022-29848 | Progress WhatsUp Gold server-side request forgery | 6.5v3.1 | 3.6% | 2022-05-11 | Exploit codeFix |
| CVE-2022-29847 | Progress WhatsUp Gold server-side request forgery | 7.5v3.1 | 57.6% | 2022-05-11 | Exploit codeFix |
| CVE-2022-29846 | In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number. | 5.3v3.1 | 5.1% | 2022-05-11 | Exploit codeFix |
| CVE-2022-29845 | Progress WhatsUp Gold inclusion of untrusted functionality | 6.5v3.1 | 4.0% | 2022-05-11 | Exploit codeFix |
| CVE-2022-29728 | Surveysparrow Enterprise Survey Software cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-11 | |
| CVE-2022-29727 | Surveysparrow Enterprise Survey Software cross-site scripting | 5.4v3.1 | 2.4% | 2022-05-11 | Exploit code |
| CVE-2022-29656 | Wedding Management System SQL injection | 9.8v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-29655 | Wedding Management System Upload Photos module arbitrary file upload | 7.2v3.1 | 1.4% | 2022-05-11 | |
| CVE-2022-29616 | SAP NetWeaver and ABAP Platform out-of-bounds write | 7.5v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-29613 | SAP Employee Self Service (Fiori My Leave Request) improper input validation | 4.3v3.1 | 0.7% | 2022-05-11 | Fix |
| CVE-2022-29611 | SAP NetWeaver Application Server for ABAP and ABAP Platform missing authorization | 8.8v3.1 | 0.8% | 2022-05-11 | Fix |
| CVE-2022-29610 | SAP NetWeaver Application Server ABAP cross-site scripting | 5.4v3.1 | 0.4% | 2022-05-11 | Fix |
| CVE-2022-29596 | Microstrategy Enterprise Manager path traversal | 9.8v3.1 | 2.1% | 2022-05-11 | |
| CVE-2022-29318 | Car Rental Management System New Entry module arbitrary file upload | 7.2v3.1 | 1.4% | 2022-05-11 | |
| CVE-2022-29317 | Simple Bus Ticket Booking System SQL injection | 9.8v3.1 | 0.9% | 2022-05-11 | |
| CVE-2022-29316 | Complete Online Job Search System SQL injection | 9.8v3.1 | 3.3% | 2022-05-11 | Nuclei |
| CVE-2022-29009 | PHPGurukul Cyber Cafe Management System SQL injection | 9.8v3.1 | 22.6% | 2022-05-11 | NucleiExploit code |