CVE-2022 records published in May 2022
Page two of two: records 1,001 to 1,672 of the 1,672 published in May 2022, newest first. The first page carries the figures for May 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-29008 | PHPGurukul Bus Pass Management System viewid parameter insecure direct object reference | 6.5v3.1 | 1.3% | 2022-05-11 | Exploit code |
| CVE-2022-29007 | PHPGurukul Dairy Farm Shop Management System SQL injection | 9.8v3.1 | 19.5% | 2022-05-11 | NucleiExploit code |
| CVE-2022-29006 | PHPGurukul Directory Management System SQL injection | 9.8v3.1 | 19.5% | 2022-05-11 | NucleiExploit code |
| CVE-2022-28838 | Adobe Acrobat Pro DC Doc flattenPages use-after-free remote code execution | 7.8CNA v3.1 | 2.9% | 2022-05-11 | Fix |
| CVE-2022-28837 | Adobe Acrobat Pro DC Doc buttonSetIcon use-after-free information disclosure | 5.5CNA v3.1 | 2.0% | 2022-05-11 | Fix |
| CVE-2022-28774 | SAP Host Agent incorrect authorization | 5.5v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2022-28269 | Adobe Acrobat Reader DC Annotation use-after-free information disclosure | 3.3CNA v3.0 | 10.7% | 2022-05-11 | Fix |
| CVE-2022-28268 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 3.3CNA v3.0 | 1.8% | 2022-05-11 | Fix |
| CVE-2022-28267 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28266 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28265 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28264 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28263 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 10.0% | 2022-05-11 | Fix |
| CVE-2022-28262 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 10.0% | 2022-05-11 | Fix |
| CVE-2022-28261 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28260 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28259 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.6% | 2022-05-11 | Fix |
| CVE-2022-28258 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 10.1% | 2022-05-11 | Fix |
| CVE-2022-28257 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-05-11 | Fix |
| CVE-2022-28256 | Adobe Acrobat Reader DC Annotation use-after-free information disclosure | 5.5CNA v3.1 | 2.5% | 2022-05-11 | Fix |
| CVE-2022-28255 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-05-11 | Fix |
| CVE-2022-28254 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-05-11 | Fix |
| CVE-2022-28253 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-05-11 | Fix |
| CVE-2022-28252 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 3.3CNA v3.1 | 9.3% | 2022-05-11 | Fix |
| CVE-2022-28251 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.4% | 2022-05-11 | Fix |
| CVE-2022-28250 | Adobe Acrobat Reader DC Annotation use-after-free information disclosure | 5.5CNA v3.1 | 1.9% | 2022-05-11 | Fix |
| CVE-2022-28249 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-05-11 | Fix |
| CVE-2022-28248 | Adobe Acrobat Reader DC Annotation out-of-bounds read information disclosure | 5.5CNA v3.1 | 9.8% | 2022-05-11 | Fix |
| CVE-2022-28247 | Adobe Acrobat Uninstaller Hard Link leads to remote code execution | 6.7CNA v3.1 | 0.5% | 2022-05-11 | Fix |
| CVE-2022-28246 | Adobe Acrobat Reader DC Doc object out-of-bounds read information disclosure | 5.5CNA v3.1 | 10.1% | 2022-05-11 | Fix |
| CVE-2022-28245 | Adobe Acrobat Reader DC Doc object out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-05-11 | Fix |
| CVE-2022-28244 | Adobe Acrobat Reader DC CSP bypass leads to privilege escalation | 6.3CNA v3.1 | 3.7% | 2022-05-11 | Fix |
| CVE-2022-28243 | Adobe Acrobat Reader DC Doc object out-of-bounds read remote code execution | 7.8CNA v3.1 | 11.0% | 2022-05-11 | Fix |
| CVE-2022-28242 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.1 | 3.8% | 2022-05-11 | Fix |
| CVE-2022-28241 | Adobe Acrobat Reader DC Doc object out-of-bounds read remote code execution | 7.8CNA v3.1 | 3.4% | 2022-05-11 | Fix |
| CVE-2022-28240 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.1 | 12.5% | 2022-05-11 | Fix |
| CVE-2022-28239 | Adobe Acrobat Reader DC Annotation out-of-bounds read remote code execution | 7.8CNA v3.1 | 3.6% | 2022-05-11 | Fix |
| CVE-2022-28238 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 11.9% | 2022-05-11 | Fix |
| CVE-2022-28237 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-28236 | Adobe Acrobat Reader DC Annotation out-of-bounds write remote code execution | 7.8CNA v3.0 | 11.6% | 2022-05-11 | Fix |
| CVE-2022-28235 | Adobe Acrobat Reader DC AcroForm use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-28234 | Adobe Acrobat Reader DC heap overflow could lead to RCE | 7.8CNA v3.1 | 5.3% | 2022-05-11 | Fix |
| CVE-2022-28233 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 12.5% | 2022-05-11 | Fix |
| CVE-2022-28232 | Adobe Acrobat Reader DC Collab object use-after-free information disclosure | 7.8CNA v3.0 | 12.5% | 2022-05-11 | Fix |
| CVE-2022-28231 | Adobe Acrobat Reader DC Doc object out-of-bounds read information disclosure | 7.8CNA v3.0 | 3.6% | 2022-05-11 | Fix |
| CVE-2022-28230 | Adobe Acrobat Reader DC AcroForm calculateNow use-after-free remote code execution | 7.8CNA v3.0 | 12.5% | 2022-05-11 | Fix |
| CVE-2022-28214 | SAP BusinessObjects Enterprise Central Management Server information disclosure | 7.8v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2022-28078 | Home Owners Collection Management System cross-site scripting | 6.1NVD v3.1 | 1.1% | 2022-05-11 | |
| CVE-2022-28077 | Home Owners Collection Management System cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-11 | |
| CVE-2022-27802 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-27801 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-27800 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-27799 | Adobe Acrobat Reader DC AcroForm use-after-free remote code execution | 7.8CNA v3.0 | 18.8% | 2022-05-11 | Fix |
| CVE-2022-27798 | Adobe Acrobat Reader DC zoomType out-of-bounds write remote code execution | 7.8CNA v3.0 | 3.2% | 2022-05-11 | Fix |
| CVE-2022-27797 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-27796 | Adobe Acrobat Reader DC AcroForm isBoxChecked use-after-free remote code execution | 7.8CNA v3.0 | 12.5% | 2022-05-11 | Fix |
| CVE-2022-27795 | Adobe Acrobat Reader DC AcroForm isDefaultChecked use-after-free remote code execution | 7.8CNA v3.0 | 4.1% | 2022-05-11 | Fix |
| CVE-2022-27794 | Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution | 7.8CNA v3.0 | 14.3% | 2022-05-11 | Fix |
| CVE-2022-27793 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 9.8% | 2022-05-11 | Fix |
| CVE-2022-27792 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 9.8% | 2022-05-11 | Fix |
| CVE-2022-27791 | Adobe Acrobat Reader DC Font Parsing stack-based buffer overflow remote code execution | 7.8CNA v3.0 | 17.8% | 2022-05-11 | Fix |
| CVE-2022-27790 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 11.9% | 2022-05-11 | Fix |
| CVE-2022-27789 | Adobe Acrobat Reader DC AcroForm use-after-free remote code execution | 7.8CNA v3.0 | 4.0% | 2022-05-11 | Fix |
| CVE-2022-27788 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 3.2% | 2022-05-11 | Fix |
| CVE-2022-27787 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 10.3% | 2022-05-11 | Fix |
| CVE-2022-27786 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 12.1% | 2022-05-11 | Fix |
| CVE-2022-27785 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 12.5% | 2022-05-11 | Fix |
| CVE-2022-27656 | SAP NetWeaver AS for ABAP and Java (ICM Administration UI) cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-11 | Fix |
| CVE-2022-26116 | Fortinet FortiNAC SQL injection | 7.2CNA v3.1 | 0.8% | 2022-05-11 | Fix |
| CVE-2022-24584 | Yubico OTP incorrect authorization | 6.5v3.1 | 1.0% | 2022-05-11 | Fix |
| CVE-2022-24104 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 11.1% | 2022-05-11 | Fix |
| CVE-2022-24103 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 3.7% | 2022-05-11 | Fix |
| CVE-2022-24102 | Adobe Acrobat Reader DC Annotation use-after-free remote code execution | 7.8CNA v3.0 | 12.6% | 2022-05-11 | Fix |
| CVE-2022-24101 | Adobe Acrobat Reader DC Annotation use-after-free information disclosure | 3.3CNA v3.0 | 1.9% | 2022-05-11 | Fix |
| CVE-2022-23743 | ZoneAlarm improper privilege management | 7.8NVD v3.1 | 0.4% | 2022-05-11 | Fix |
| CVE-2022-23137 | ZXCDN cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-11 | Fix |
| CVE-2022-22975 | VMware Pinniped LDAP identity provider vulnerability | 6.6v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-22320 | IBM QRadar SIEM cross-site scripting | 4.8CNA v3.0 | 0.5% | 2022-05-11 | Fix |
| CVE-2022-1623 | libtiff out-of-bounds read | 5.5CNA v3.1 | 1.3% | 2022-05-11 | Fix |
| CVE-2022-1622 | libtiff out-of-bounds read | 5.5CNA v3.1 | 1.7% | 2022-05-11 | Fix |
| CVE-2022-1545 | GitLab confidential notes API information disclosure | 4.3CNA v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-1510 | GitLab regular expression denial of service | 6.5CNA v3.1 | 2.0% | 2022-05-11 | Fix |
| CVE-2022-1460 | GitLab incorrect authorization | 6.1CNA v3.1 | 1.2% | 2022-05-11 | Fix |
| CVE-2022-1433 | GitLab cross-site scripting | 2.6CNA v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-1428 | GitLab resource exhaustion | 4.3CNA v3.1 | 0.7% | 2022-05-11 | Fix |
| CVE-2022-1426 | GitLab improper authentication | 2.0CNA v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-1406 | GitLab improper input validation | 6.5CNA v3.1 | 1.2% | 2022-05-11 | Fix |
| CVE-2022-1352 | GitLab Due to an insecure direct object reference | 5.3CNA v3.1 | 1.3% | 2022-05-11 | Fix |
| CVE-2022-1124 | GitLab incorrect authorization | 4.3CNA v3.1 | 0.9% | 2022-05-11 | Fix |
| CVE-2022-0027 | Cortex XSOAR: Incorrect authorization vulnerability when Generating Reports | 4.3CNA v3.1 | 0.5% | 2022-05-11 | Fix |
| CVE-2022-0026 | Cortex XDR Agent: Unintended Program Execution leads to local privilege escalation (PE) | 6.7CNA v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2022-0025 | Cortex XDR Agent: An uncontrolled search path element leads to local privilege escalation (PE) | 6.7CNA v3.1 | 0.2% | 2022-05-11 | Fix |
| CVE-2022-0024 | Palo Alto Networks PAN-OS configuration commit arbitrary code execution | 7.2CNA v3.1 | 1.6% | 2022-05-11 | Fix |
| CVE-2022-30278 | Synopsys Black Duck Hub cross-site scripting | 6.1v3.1 | 0.8% | 2022-05-10 | Fix |
| CVE-2022-30130 | NET Framework denial of service | 3.3CNA v3.1 | 3.2% | 2022-05-10 | Fix |
| CVE-2022-30129 | Microsoft Visual Studio Code remote code execution | 8.8CNA v3.1 | 41.3% | 2022-05-10 | Exploit codeFix |
| CVE-2022-29591 | Tenda TX9 Pro buffer overflow | 9.8v3.1 | 1.4% | 2022-05-10 | |
| CVE-2022-29399 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29398 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29397 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29396 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29395 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29394 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29393 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29392 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29391 | TOTOLINK N600R out-of-bounds write | 9.8v3.1 | 1.7% | 2022-05-10 | |
| CVE-2022-29329 | D-Link DAP-1330 out-of-bounds write | 9.8v3.1 | 13.3% | 2022-05-10 | |
| CVE-2022-29328 | D-Link DAP-1330 out-of-bounds write | 9.8v3.1 | 13.3% | 2022-05-10 | |
| CVE-2022-29327 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 3.8% | 2022-05-10 | |
| CVE-2022-29326 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 3.8% | 2022-05-10 | |
| CVE-2022-29325 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 3.8% | 2022-05-10 | |
| CVE-2022-29324 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 3.9% | 2022-05-10 | |
| CVE-2022-29323 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 3.9% | 2022-05-10 | |
| CVE-2022-29322 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 16.1% | 2022-05-10 | Emerging Threats |
| CVE-2022-29321 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 3.9% | 2022-05-10 | |
| CVE-2022-29151 | Microsoft Windows Cluster Shared Volume (CSV) elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29150 | Microsoft Windows Cluster Shared Volume (CSV) elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29148 | Visual Studio remote code execution | 7.8CNA v3.1 | 2.8% | 2022-05-10 | Fix |
| CVE-2022-29145 | Microsoft .NET and Visual Studio denial of service | 7.5CNA v3.1 | 5.4% | 2022-05-10 | Fix |
| CVE-2022-29142 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 5.1% | 2022-05-10 | Fix |
| CVE-2022-29141 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.8% | 2022-05-10 | Fix |
| CVE-2022-29140 | Microsoft Windows Print Spooler information disclosure | 5.5CNA v3.1 | 1.2% | 2022-05-10 | Fix |
| CVE-2022-29139 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.4% | 2022-05-10 | Fix |
| CVE-2022-29138 | Microsoft Windows Clustered Shared Volume elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29137 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.5% | 2022-05-10 | Fix |
| CVE-2022-29135 | Microsoft Windows Cluster Shared Volume (CSV) elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-29134 | Microsoft Windows Clustered Shared Volume information disclosure | 6.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-29133 | Microsoft Windows Kernel elevation of privilege | 8.8CNA v3.1 | 0.8% | 2022-05-10 | Fix |
| CVE-2022-29132 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-29131 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.9% | 2022-05-10 | Fix |
| CVE-2022-29130 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 9.8CNA v3.1 | 3.9% | 2022-05-10 | Fix |
| CVE-2022-29129 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.9% | 2022-05-10 | Fix |
| CVE-2022-29128 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.9% | 2022-05-10 | Fix |
| CVE-2022-29127 | Microsoft Windows BitLocker security feature bypass | 4.2CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-29126 | Microsoft Tablet Windows User interface Application Core elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29125 | Microsoft Windows Push Notifications Apps elevation of privilege | 7.0CNA v3.1 | 0.8% | 2022-05-10 | Fix |
| CVE-2022-29123 | Microsoft Windows Clustered Shared Volume information disclosure | 6.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-29122 | Microsoft Windows Clustered Shared Volume information disclosure | 6.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-29121 | Microsoft Windows WLAN AutoConfig service denial of service | 6.5CNA v3.1 | 1.0% | 2022-05-10 | Fix |
| CVE-2022-29120 | Microsoft Windows Clustered Shared Volume information disclosure | 6.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-29117 | Microsoft .NET and Visual Studio denial of service | 7.5CNA v3.1 | 5.7% | 2022-05-10 | Fix |
| CVE-2022-29116 | Microsoft Windows Kernel information disclosure | 4.7CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29115 | Microsoft Windows Fax service remote code execution | 7.8CNA v3.1 | 2.4% | 2022-05-10 | Fix |
| CVE-2022-29114 | Microsoft Windows Print Spooler information disclosure | 5.5CNA v3.1 | 1.3% | 2022-05-10 | Fix |
| CVE-2022-29113 | Microsoft Windows Digital Media Receiver elevation of privilege | 7.8CNA v3.1 | 0.4% | 2022-05-10 | Fix |
| CVE-2022-29112 | Microsoft Windows Graphics component information disclosure | 6.5CNA v3.1 | 3.5% | 2022-05-10 | Fix |
| CVE-2022-29110 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 3.8% | 2022-05-10 | Fix |
| CVE-2022-29109 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.8% | 2022-05-10 | Fix |
| CVE-2022-29108 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 11.1% | 2022-05-10 | Fix |
| CVE-2022-29107 | Microsoft Office security feature bypass | 5.5CNA v3.1 | 3.1% | 2022-05-10 | Fix |
| CVE-2022-29106 | Microsoft Windows Hyper-V Shared Virtual Disk elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29105 | Microsoft Windows Media Foundation remote code execution | 7.8CNA v3.1 | 2.8% | 2022-05-10 | Fix |
| CVE-2022-29104 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 11.8% | 2022-05-10 | Fix |
| CVE-2022-29103 | Microsoft Windows Remote Access Connection Manager elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-29102 | Microsoft Windows Failover Cluster information disclosure | 5.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-28986 | Lmsdoctor 2 Factor Authentication insecure direct object reference | 7.5v3.1 | 2.3% | 2022-05-10 | Exploit code |
| CVE-2022-28915 | D-Link DIR-816 OS command injection | 9.8v3.1 | 6.5% | 2022-05-10 | |
| CVE-2022-28913 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28912 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28911 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28910 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28909 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28908 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28907 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28906 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.9% | 2022-05-10 | |
| CVE-2022-28905 | TOTOLINK N600R OS command injection | 9.8v3.1 | 2.6% | 2022-05-10 | |
| CVE-2022-28901 | D-Link DIR-882 component /SetTriggerLEDBlink/Blink command injection | 9.8v3.1 | 3.7% | 2022-05-10 | |
| CVE-2022-28896 | D-Link DIR-882 component /setnetworksettings/SubnetMask command injection | 9.8v3.1 | 3.7% | 2022-05-10 | |
| CVE-2022-28895 | D-Link DIR-882 component /setnetworksettings/IPAddress command injection | 9.8v3.1 | 3.7% | 2022-05-10 | |
| CVE-2022-28601 | Lmsdoctor 2 Factor Authentication incorrect authorization | 6.5v3.1 | 1.7% | 2022-05-10 | Exploit code |
| CVE-2022-28110 | Hotel Management System SQL injection | 9.8v3.1 | 0.9% | 2022-05-10 | |
| CVE-2022-27167 | Arbitrary file deletion in ESET products for Windows | 7.1CNA v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2022-26988 | Mercusys Mercury D196G out-of-bounds write | 7.8v3.1 | 1.4% | 2022-05-10 | |
| CVE-2022-26987 | Mercusys Mercury D196G out-of-bounds write | 7.8v3.1 | 1.4% | 2022-05-10 | |
| CVE-2022-26940 | Microsoft Remote Desktop protocol client information disclosure | 6.5CNA v3.1 | 2.7% | 2022-05-10 | Fix |
| CVE-2022-26939 | Microsoft Windows Storage Spaces Direct elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-26938 | Microsoft Windows Storage Spaces Direct elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-26937 | Microsoft Windows Network File System remote code execution | 9.8CNA v3.1 | 76.0% | 2022-05-10 | Exploit codeFix |
| CVE-2022-26936 | Microsoft Windows Server service information disclosure | 6.5CNA v3.1 | 3.1% | 2022-05-10 | Fix |
| CVE-2022-26935 | Microsoft Windows WLAN AutoConfig service information disclosure | 6.5CNA v3.1 | 1.1% | 2022-05-10 | Fix |
| CVE-2022-26934 | Microsoft Windows Graphics component information disclosure | 6.5CNA v3.1 | 3.1% | 2022-05-10 | Fix |
| CVE-2022-26933 | Microsoft Windows NTFS information disclosure | 5.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-26932 | Microsoft Windows Storage Spaces Direct elevation of privilege | 8.2CNA v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-26931 | Microsoft Windows Kerberos elevation of privilege | 7.5CNA v3.1 | 2.7% | 2022-05-10 | Fix |
| CVE-2022-26930 | Microsoft Windows Remote Access Connection Manager information disclosure | 5.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-26927 | Microsoft Windows Graphics component remote code execution | 8.8CNA v3.1 | 4.6% | 2022-05-10 | Fix |
| CVE-2022-26926 | Microsoft Windows Address Book remote code execution | 7.8CNA v3.1 | 2.8% | 2022-05-10 | Fix |
| CVE-2022-26925 | Microsoft Windows LSA spoofing | 8.1CNA v3.1 | 10.5% | 2022-05-10 | KEVFix |
| CVE-2022-26923 | Microsoft Active Directory Domain services privilege escalation | 8.8CNA v3.1 | 83.5% | 2022-05-10 | KEVExploit codeFix |
| CVE-2022-26913 | Microsoft Windows Authentication information disclosure | 7.4CNA v3.1 | 2.5% | 2022-05-10 | Fix |
| CVE-2022-24466 | Microsoft Windows Hyper-V security feature bypass | 4.1CNA v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-24042 | Siemens Desigo DXR2 insufficient session expiration | 9.1v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-24041 | Siemens Desigo DXR2 weak password hash | 6.5v3.1 | 0.5% | 2022-05-10 | Fix |
| CVE-2022-24040 | Siemens Desigo DXR2 resource exhaustion | 6.5v3.1 | 0.8% | 2022-05-10 | Fix |
| CVE-2022-24039 | Siemens Desigo PXC4 special element injection | 9.0v3.1 | 1.9% | 2022-05-10 | Fix |
| CVE-2022-23677 | ArubaOS-Switch Devices out-of-bounds write | 8.1v3.1 | 19.5% | 2022-05-10 | Fix |
| CVE-2022-23676 | ArubaOS-Switch Devices out-of-bounds write | 9.8v3.1 | 23.0% | 2022-05-10 | Fix |
| CVE-2022-23279 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 4.7% | 2022-05-10 | Fix |
| CVE-2022-23270 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 70.4% | 2022-05-10 | Fix |
| CVE-2022-23267 | Microsoft .NET and Visual Studio denial of service | 7.5CNA v3.1 | 5.7% | 2022-05-10 | Fix |
| CVE-2022-22774 | TIBCO Managed File Transfer Command Center XXE | 8.6CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-22713 | Microsoft Windows Hyper-V denial of service | 5.6CNA v3.1 | 0.8% | 2022-05-10 | Fix |
| CVE-2022-22454 | IBM InfoSphere Information Server OS command injection | 5.9CNA v3.0 | 0.4% | 2022-05-10 | Fix |
| CVE-2022-22019 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 2.7% | 2022-05-10 | Fix |
| CVE-2022-22017 | Microsoft Remote Desktop client remote code execution | 8.8CNA v3.1 | 37.1% | 2022-05-10 | Fix |
| CVE-2022-22016 | Microsoft Windows PlayToManager elevation of privilege | 7.0CNA v3.1 | 0.6% | 2022-05-10 | Fix |
| CVE-2022-22015 | Microsoft Windows Remote Desktop Protocol (RDP) information disclosure | 6.5CNA v3.1 | 2.7% | 2022-05-10 | Fix |
| CVE-2022-22014 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.5% | 2022-05-10 | Fix |
| CVE-2022-22013 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.5% | 2022-05-10 | Fix |
| CVE-2022-22012 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 9.8CNA v3.1 | 4.2% | 2022-05-10 | Fix |
| CVE-2022-22011 | Microsoft Windows Graphics component information disclosure | 5.5CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-21978 | Microsoft Exchange Server elevation of privilege | 8.2CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-21972 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 79.3% | 2022-05-10 | Fix |
| CVE-2022-20121 | Android USCCDMPlugin.java information disclosure | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20120 | Google Android kernel vulnerability | 9.8v3.1 | 1.4% | 2022-05-10 | Exploit codeFix |
| CVE-2022-20119 | Android mali_gralloc_buffer.h information disclosure | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20118 | Android ion.c use-after-free | 7.0v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20117 | Android (TBD) information disclosure | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20116 | Android privilege escalation | 7.8v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20115 | Android TelephonyRegistry.java information disclosure | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20114 | Android TelecomManager.java privilege escalation | 7.8v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20113 | Android privilege escalation | 7.8v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2022-20112 | Android PrivateDnsPreferenceController.java privilege escalation | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20011 | Android NotificationManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20010 | Android l2c_ble.cc out-of-bounds read | 6.5v3.1 | 0.3% | 2022-05-10 | Fix |
| CVE-2022-20009 | Android the USB gadget subsystem out-of-bounds write | 6.8v3.1 | 0.3% | 2022-05-10 | Exploit codeFix |
| CVE-2022-20008 | Android block.c information disclosure | 4.6v3.1 | 0.4% | 2022-05-10 | Fix |
| CVE-2022-20007 | Android RootWindowContainer.java privilege escalation | 7.0NVD v3.1 | 0.2% | 2022-05-10 | Fix |
| CVE-2022-20006 | Android race condition | 7.0v3.1 | 0.1% | 2022-05-10 | Fix |
| CVE-2022-20005 | Android privilege escalation | 7.8v3.1 | 0.2% | 2022-05-10 | Exploit codeFix |
| CVE-2022-20004 | Android missing authorization | 7.8v3.1 | 0.2% | 2022-05-10 | Exploit codeFix |
| CVE-2022-1649 | Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2 | 5.5NVD v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-1629 | Buffer over-read in function find_next_quote in Vim/Vim | 7.8v3.1 | 1.9% | 2022-05-10 | Fix |
| CVE-2022-1621 | Heap buffer overflow in vim_strncpy find_word in Vim/Vim | 7.8v3.1 | 2.4% | 2022-05-10 | Fix |
| CVE-2022-1567 | WP JS WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.2% | 2022-05-10 | |
| CVE-2022-1537 | Race condition in Grunt | 7.0v3.1 | 0.3% | 2022-05-10 | Fix |
| CVE-2022-1505 | RSVPMaker WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 1.9% | 2022-05-10 | Fix |
| CVE-2022-1476 | All-in-One WP Migration WordPress plugin directory traversal to file deletion on Windows Hosts | 6.5v3.1 | 46.3% | 2022-05-10 | Fix |
| CVE-2022-1463 | Booking Calendar WordPress plugin PHP object injection via shortcode | 8.8v3.1 | 1.7% | 2022-05-10 | Fix |
| CVE-2022-1453 | RSVPMaker WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 6.9% | 2022-05-10 | NucleiFix |
| CVE-2022-1442 | Metform Elementor Contact Form Builder WordPress plugin sensitive information disclosure | 7.5v3.1 | 8.6% | 2022-05-10 | NucleiExploit codeFix |
| CVE-2022-1431 | GitLab cross-site scripting | 4.3CNA v3.1 | 1.5% | 2022-05-10 | Fix |
| CVE-2022-1417 | GitLab improper access control | 4.3CNA v3.1 | 1.0% | 2022-05-10 | Fix |
| CVE-2022-1397 | API privilege escalation in alextselegidis/easyappointments | 8.8v3.1 | 1.1% | 2022-05-10 | Fix |
| CVE-2022-1209 | Ultimate Member WordPress plugin arbitrary redirect | 5.4v3.1 | 0.7% | 2022-05-10 | Fix |
| CVE-2022-0947 | ABB ARG600 Wireless Gateway series firewall improper initialization | 9.0CNA v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-0866 | Wildfly incorrect authorization | 5.3v3.1 | 0.9% | 2022-05-10 | Fix |
| CVE-2022-30524 | Xpdfreader Xpdf out-of-bounds write | 7.8v3.1 | 1.6% | 2022-05-09 | Exploit codeFix |
| CVE-2022-30335 | Bonanza Wealth Management System SQL injection | 9.8v3.1 | 1.2% | 2022-05-09 | |
| CVE-2022-30333 | RARLAB UnRAR directory traversal | 7.5NVD v3.1 | 99.2% | 2022-05-09 | KEVEmerging ThreatsExploit codeFix |
| CVE-2022-30286 | PyScript pyscriptjs demonstrator information disclosure | 7.5v3.1 | 13.3% | 2022-05-09 | Exploit code |
| CVE-2022-30240 | Insightsoftware Magnitude Simba Amazon Redshift Jdbc Driver argument injection | 7.8v3.1 | 0.5% | 2022-05-09 | Fix |
| CVE-2022-30239 | Insightsoftware Magnitude Simba Amazon Athena Jdbc Driver argument injection | 7.8v3.1 | 0.5% | 2022-05-09 | Fix |
| CVE-2022-29972 | Insightsoftware Magnitude Simba Amazon Redshift Odbc Driver argument injection | 7.8v3.1 | 3.7% | 2022-05-09 | Fix |
| CVE-2022-29971 | Insightsoftware Magnitude Simba Amazon Athena Odbc Driver argument injection | 7.8v3.1 | 0.3% | 2022-05-09 | Fix |
| CVE-2022-29933 | Improper account password reset in Craft CMS | 8.8v3.1 | 4.5% | 2022-05-09 | Fix |
| CVE-2022-29868 | 1password cleartext storage of sensitive information | 5.5v3.1 | 0.2% | 2022-05-09 | Fix |
| CVE-2022-28739 | ruby-lang Ruby There is a buffer over-read | 7.5v3.1 | 4.3% | 2022-05-09 | Fix |
| CVE-2022-28738 | ruby-lang Ruby Regexp compiler double free | 9.8v3.1 | 2.8% | 2022-05-09 | Fix |
| CVE-2022-28162 | Brocade SANnav cleartext storage of sensitive information | 3.3v3.1 | 0.2% | 2022-05-09 | Fix |
| CVE-2022-28161 | Brocade SANnav information disclosure | 5.5v3.1 | 0.2% | 2022-05-09 | Fix |
| CVE-2022-27412 | Exploreit Explore Cms SQL injection | 9.8v3.1 | 4.1% | 2022-05-09 | Exploit code |
| CVE-2022-27308 | Phprojekt Phpsimplygest A stored cross-site scripting | 5.4v3.1 | 2.6% | 2022-05-09 | Exploit code |
| CVE-2022-27224 | Galsys Nts-6002-gps OS command injection | 7.2v3.1 | 4.6% | 2022-05-09 | Fix |
| CVE-2022-27114 | htmldoc integer overflow | 5.5v3.1 | 0.9% | 2022-05-09 | Fix |
| CVE-2022-23705 | HPE Nimble Storage arrays software update mechanism vulnerability | 7.5v3.1 | 1.0% | 2022-05-09 | Fix |
| CVE-2022-23704 | HPE Integrated Lights-Out 4 (iLO 4) denial of service | 7.5v3.1 | 1.9% | 2022-05-09 | Fix |
| CVE-2022-23332 | Ejointech ACOM508 Manual Ping form command injection | 8.8v3.1 | 5.2% | 2022-05-09 | |
| CVE-2022-23066 | Solana rBPF incorrect calculation in sdiv instruction | 9.1v3.1 | 2.4% | 2022-05-09 | Fix |
| CVE-2022-22481 | IBM i Navigator for i vulnerability | 3.7CNA v3.0 | 1.2% | 2022-05-09 | Fix |
| CVE-2022-22319 | IBM Robotic Process Automation queue management vulnerability | 4.6CNA v3.0 | 1.0% | 2022-05-09 | Fix |
| CVE-2022-1631 | Users Account Pre-takeover or users account takeover. in microweber/microweber | 8.8v3.1 | 9.0% | 2022-05-09 | Exploit codeFix |
| CVE-2022-1338 | Easily Generate Rest API Url WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-09 | |
| CVE-2022-1303 | Slide Anything WordPress plugin Editor+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-09 | Fix |
| CVE-2022-1171 | Vertical scroll recent post WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-09 | Fix |
| CVE-2022-1104 | Popup Maker WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 56.4% | 2022-05-09 | Exploit codeFix |
| CVE-2022-1047 | Themify - Post Type Builder Search Addon WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-09 | Fix |
| CVE-2022-1013 | Personal Dictionary WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 7.5% | 2022-05-09 | NucleiFix |
| CVE-2022-0948 | Order Listener for WooCommerce WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 9.9% | 2022-05-09 | Reported exploitedNucleiFix |
| CVE-2022-0898 | IgniteUp WordPress plugin Admin+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-05-09 | Fix |
| CVE-2022-0874 | WP Social Buttons WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-09 | Fix |
| CVE-2022-0836 | SEMA API WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.8% | 2022-05-09 | Fix |
| CVE-2022-0826 | WP Video Gallery WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 9.1% | 2022-05-09 | Nuclei |
| CVE-2022-0817 | BadgeOS WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 11.6% | 2022-05-09 | NucleiFix |
| CVE-2022-0814 | Ubigeo de Peru WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 8.0% | 2022-05-09 | NucleiFix |
| CVE-2022-0625 | Admin Menu Editor WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-09 | |
| CVE-2022-0592 | MapSVG WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 10.2% | 2022-05-09 | NucleiFix |
| CVE-2022-0424 | Popup by Supsystic WordPress plugin unauthenticated Subscriber email Addresses disclosure | 5.3NVD v3.1 | 2.9% | 2022-05-09 | NucleiFix |
| CVE-2022-28470 | Python PYPI code-execution backdoor in marcador | 9.8v3.1 | 2.1% | 2022-05-08 | Fix |
| CVE-2022-28463 | ImageMagick buffer overflow | 7.8v3.1 | 1.6% | 2022-05-08 | Fix |
| CVE-2022-1620 | Null pointer dereference in function vim_regexec_string at regexp.c:2729 in Vim/Vim | 7.5NVD v3.1 | 1.6% | 2022-05-08 | Fix |
| CVE-2022-1619 | Heap-based buffer overflow in function cmdline_erase_chars in Vim/Vim | 7.8NVD v3.1 | 2.5% | 2022-05-08 | Fix |
| CVE-2022-30334 | Brave information disclosure | 5.3v3.1 | 2.6% | 2022-05-07 | Fix |
| CVE-2022-30330 | Keepkey Firmware privilege escalation | 6.6v3.1 | 0.5% | 2022-05-07 | Fix |
| CVE-2022-29180 | Charm vulnerable to server-side request forgery (SSRF) | 5.9CNA v3.1 | 0.8% | 2022-05-07 | Fix |
| CVE-2022-1616 | vim/vim append_command in GitHub repository use-after-free | 7.8NVD v3.1 | 2.7% | 2022-05-07 | Fix |
| CVE-2022-30295 | uClibC-ng insufficient randomness | 6.5v3.1 | 11.3% | 2022-05-06 | Fix |
| CVE-2022-30293 | WebKitGTK out-of-bounds write | 7.5v3.1 | 2.2% | 2022-05-06 | Fix |
| CVE-2022-29423 | Countdown and Clock WordPress plugin Pro Features Lock bypass vulnerability | 9.8v3.1 | 1.0% | 2022-05-06 | Fix |
| CVE-2022-29422 | Countdown and Clock WordPress plugin Multiple authenticated persistent cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-05-06 | Fix |
| CVE-2022-29421 | Countdown and Clock WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-05-06 | Fix |
| CVE-2022-29420 | Countdown and Clock WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-05-06 | Fix |
| CVE-2022-29171 | Remote code execution in sourcegraph | 6.6CNA v3.1 | 1.4% | 2022-05-06 | Fix |
| CVE-2022-29164 | Privilege escalation in argo-workflows | 7.1CNA v3.1 | 0.9% | 2022-05-06 | Fix |
| CVE-2022-29161 | XWiki Platform Crypto API certificate signing weak cryptographic algorithm | 5.4CNA v3.1 | 0.4% | 2022-05-06 | Fix |
| CVE-2022-28973 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-06 | |
| CVE-2022-28972 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-06 | |
| CVE-2022-28971 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-06 | |
| CVE-2022-28970 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-06 | |
| CVE-2022-28969 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.2% | 2022-05-06 | |
| CVE-2022-28545 | Fudforum cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-06 | |
| CVE-2022-28507 | Bdt-121 cross-site scripting | 4.8v3.1 | 0.5% | 2022-05-06 | |
| CVE-2022-28279 | Adobe Photoshop Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 3.0% | 2022-05-06 | Fix |
| CVE-2022-28278 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-28277 | Adobe Photoshop PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.8% | 2022-05-06 | Fix |
| CVE-2022-28276 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-28275 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-28274 | Adobe Photoshop Font Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 2.8% | 2022-05-06 | Fix |
| CVE-2022-28273 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-28272 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-28271 | Adobe Photoshop PDF File Parsing use-after-free remote code execution | 7.8CNA v3.0 | 3.5% | 2022-05-06 | Fix |
| CVE-2022-28270 | Adobe Photoshop SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-28165 | Broadcom SANnav role-based access control vulnerability | 8.8v3.1 | 1.2% | 2022-05-06 | Fix |
| CVE-2022-28164 | Brocade SANnav weak cryptographic algorithm | 6.5v3.1 | 0.3% | 2022-05-06 | Fix |
| CVE-2022-28163 | Brocade SANnav SQL injection | 9.8v3.1 | 0.9% | 2022-05-06 | Fix |
| CVE-2022-28005 | 3CX insufficiently protected credentials | 9.8v3.1 | 8.3% | 2022-05-06 | Fix |
| CVE-2022-27909 | Extension Incorrect Access Control within jDownloads extension | 4.3NVD v3.1 | 0.9% | 2022-05-06 | Fix |
| CVE-2022-27784 | Adobe After Effects stack buffer overflow could lead to RCE | 7.8CNA v3.1 | 3.9% | 2022-05-06 | Fix |
| CVE-2022-27783 | Adobe After Effects stack buffer overflow could lead to RCE | 7.8CNA v3.1 | 3.9% | 2022-05-06 | Fix |
| CVE-2022-27183 | Splunk Enterprise reflected XSS in a query parameter of the Monitoring console | 6.1NVD v3.1 | 0.7% | 2022-05-06 | Fix |
| CVE-2022-26889 | Splunk Enterprise path traversal in search parameter results in external content injection | 8.8v3.1 | 1.4% | 2022-05-06 | Fix |
| CVE-2022-26070 | Splunk Enterprise error message discloses internal path | 4.3v3.1 | 0.6% | 2022-05-06 | Fix |
| CVE-2022-25324 | bignum denial of service (DoS) | 7.5v3.1 | 1.5% | 2022-05-06 | |
| CVE-2022-24903 | Buffer overflow in TCP syslog server (receiver) components in rsyslog | 8.1CNA v3.1 | 3.9% | 2022-05-06 | Fix |
| CVE-2022-24902 | PaulleDemon tkVideoPlayer memory issue in playing videos | 2.9CNA v3.1 | 0.5% | 2022-05-06 | Fix |
| CVE-2022-24899 | contao cross-site scripting via canonical tag | 7.2CNA v3.1 | 4.5% | 2022-05-06 | NucleiFix |
| CVE-2022-24884 | Trivial signature forgery in ecdsautils | 10.0CNA v3.1 | 1.0% | 2022-05-06 | Fix |
| CVE-2022-24878 | fluxcd flux2 improper path handling in Kustomization files allows for denial of service | 7.7CNA v3.1 | 1.0% | 2022-05-06 | Fix |
| CVE-2022-24877 | fluxcd flux2 improper path handling in kustomization files allows path traversal | 9.9CNA v3.1 | 1.2% | 2022-05-06 | Fix |
| CVE-2022-24823 | netty local information disclosure vulnerability in io.netty:netty-codec-http | 5.5CNA v3.1 | 1.0% | 2022-05-06 | Fix |
| CVE-2022-24817 | fluxcd flux2 improper kubeconfig validation allows arbitrary code execution | 9.9CNA v3.1 | 1.1% | 2022-05-06 | Fix |
| CVE-2022-24105 | Adobe Photoshop U3D File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.5% | 2022-05-06 | Fix |
| CVE-2022-24099 | Adobe Photoshop Font Parsing out-of-bounds read information disclosure | 3.3CNA v3.1 | 1.5% | 2022-05-06 | Fix |
| CVE-2022-24098 | Adobe Photoshop PCX File Parsing memory corruption remote code execution | 7.8CNA v3.0 | 2.8% | 2022-05-06 | Fix |
| CVE-2022-23802 | Extension insecure permissions within Joomla Guru extensions | 7.5NVD v3.1 | 1.2% | 2022-05-06 | Fix |
| CVE-2022-23205 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.4% | 2022-05-06 | Fix |
| CVE-2022-21934 | Metasys unverified password change | 8.0CNA v3.1 | 1.0% | 2022-05-06 | Fix |
| CVE-2022-1053 | keylime tenant and Verifier might not use the same registrar data | 9.1v3.1 | 1.4% | 2022-05-06 | Fix |
| CVE-2022-29940 | Librehealth Ehr cross-site scripting | 5.4v3.1 | 0.9% | 2022-05-05 | |
| CVE-2022-29939 | Librehealth Ehr cross-site scripting | 5.4v3.1 | 0.9% | 2022-05-05 | |
| CVE-2022-29938 | Librehealth Ehr SQL injection | 8.8v3.1 | 1.5% | 2022-05-05 | |
| CVE-2022-29592 | Tenda TX9 Pro OS command injection | 9.8v3.1 | 19.6% | 2022-05-05 | |
| CVE-2022-29535 | Zoho ManageEngine OpManager SQL injection | 9.8v3.1 | 92.2% | 2022-05-05 | Fix |
| CVE-2022-29502 | SchedMD Slurm privilege escalation | 9.8v3.1 | 1.8% | 2022-05-05 | Fix |
| CVE-2022-29501 | SchedMD Slurm privilege escalation | 8.8v3.1 | 2.8% | 2022-05-05 | Fix |
| CVE-2022-29500 | SchedMD Slurm information disclosure | 8.8v3.1 | 2.2% | 2022-05-05 | Fix |
| CVE-2022-29491 | F5 BIG-IP LTM null pointer dereference | 7.5CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-29480 | F5 BIG-IP resource exhaustion | 5.3CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-29479 | F5 BIG-IP improper input validation | 5.3CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-29474 | F5 BIG-IP path traversal | 4.3CNA v3.1 | 1.6% | 2022-05-05 | Fix |
| CVE-2022-29473 | F5 BIG-IP improper check for exceptional conditions | 5.9CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-29340 | gpac null pointer dereference | 7.5v3.1 | 1.2% | 2022-05-05 | Fix |
| CVE-2022-29339 | gpac reachable assertion | 7.5v3.1 | 1.2% | 2022-05-05 | Fix |
| CVE-2022-29263 | F5 BIG-IP APM incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2022-05-05 | Fix |
| CVE-2022-29176 | Unauthorized gem takeover for some gems on rubygems.org | 9.9CNA v3.1 | 1.9% | 2022-05-05 | Fix |
| CVE-2022-29173 | No protection against rollback attacks in go-tuf | 8.0CNA v3.1 | 0.6% | 2022-05-05 | Fix |
| CVE-2022-29172 | auth0 lock HTML injection with additional signup fields | 6.1CNA v3.1 | 0.6% | 2022-05-05 | Fix |
| CVE-2022-29167 | Mozilla ReDoS vulnerability in header parsing in hawk | 7.4CNA v3.1 | 1.1% | 2022-05-05 | Fix |
| CVE-2022-29166 | Improper handling of multiline messages in matrix-appservice-irc | 8.0CNA v3.1 | 1.0% | 2022-05-05 | Fix |
| CVE-2022-28890 | Apache Jena processing external DTDs | 9.8v3.1 | 2.6% | 2022-05-05 | Fix |
| CVE-2022-28859 | F5 BIG-IP sensitive information in log files | 6.5CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-28716 | F5 BIG-IP cross-site scripting | 7.5CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-28714 | F5 BIG-IP APM uncontrolled search path | 7.3CNA v3.1 | 0.3% | 2022-05-05 | Fix |
| CVE-2022-28708 | F5 BIG-IP improper input validation | 5.9CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-28707 | F5 BIG-IP cross-site scripting | 8.0CNA v3.1 | 0.6% | 2022-05-05 | Fix |
| CVE-2022-28706 | F5 BIG-IP improper check for exceptional conditions | 5.9CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-28705 | F5 BIG-IP integer overflow | 7.5CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-28701 | F5 BIG-IP resource exhaustion | 7.5CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-28695 | F5 BIG-IP AFM improper input validation | 7.2CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-28691 | F5 BIG-IP resource exhaustion | 7.5CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-28606 | Bosscms Wenzhou Huoyin Information Technology Co arbitrary file upload | 9.8v3.1 | 1.4% | 2022-05-05 | |
| CVE-2022-28584 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28583 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28582 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28581 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28580 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28579 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28578 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28577 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28575 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 3.0% | 2022-05-05 | |
| CVE-2022-28533 | Medical Hub Directory Site SQL injection | 9.8v3.1 | 1.5% | 2022-05-05 | |
| CVE-2022-28530 | Covid-19 Directory On Vaccination System SQL injection | 9.8v3.1 | 1.5% | 2022-05-05 | |
| CVE-2022-28471 | Rockcarry Ffjpeg integer overflow | 6.5v3.1 | 0.9% | 2022-05-05 | |
| CVE-2022-28462 | xxyopen Novel-Plus files accessible to external parties | 7.5v3.1 | 1.1% | 2022-05-05 | |
| CVE-2022-28461 | Mingyuefusu SQL injection | 9.8v3.1 | 1.0% | 2022-05-05 | |
| CVE-2022-28120 | Rainier Open Virtual Simulation Experiment Teaching Management Platform unrestricted file upload | 9.8v3.1 | 1.0% | 2022-05-05 | |
| CVE-2022-28080 | Event Management System SQL injection | 8.8v3.1 | 57.3% | 2022-05-05 | NucleiExploit code |
| CVE-2022-28079 | College Management System SQL injection | 8.8v3.1 | 28.8% | 2022-05-05 | NucleiExploit code |
| CVE-2022-27880 | F5 Traffix SDC cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2022-27878 | F5 BIG-IP cross-site scripting | 6.8CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-27875 | F5 Access information disclosure | 5.5CNA v3.1 | 0.6% | 2022-05-05 | Fix |
| CVE-2022-27806 | F5 BIG-IP Guided Configuration (GC) command injection | 8.7CNA v3.1 | 1.5% | 2022-05-05 | Fix |
| CVE-2022-27662 | F5 Traffix SDC server-side template injection | 4.8CNA v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2022-27659 | F5 BIG-IP improper privilege management | 4.3CNA v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2022-27636 | F5 BIG-IP APM sensitive information in log files | 5.5CNA v3.1 | 0.2% | 2022-05-05 | Fix |
| CVE-2022-27634 | F5 BIG-IP APM privilege escalation | 6.5CNA v3.1 | 1.4% | 2022-05-05 | Fix |
| CVE-2022-27588 | QNAP QVR command injection | 9.8CNA v3.1 | 1.4% | 2022-05-05 | Fix |
| CVE-2022-27495 | F5 NGINX Service Mesh missing authentication | 6.5CNA v3.1 | 0.3% | 2022-05-05 | Fix |
| CVE-2022-27411 | TOTOLINK N600R command injection | 9.8v3.1 | 2.5% | 2022-05-05 | |
| CVE-2022-27360 | Bladex SpringBlade SQL injection | 9.8v3.1 | 2.0% | 2022-05-05 | |
| CVE-2022-27359 | Foxit PDF Editor null pointer dereference | 5.5v3.1 | 1.0% | 2022-05-05 | Fix |
| CVE-2022-27337 | Freedesktop Poppler Hints::Hints function logic flaw | 6.5v3.1 | 1.6% | 2022-05-05 | Fix |
| CVE-2022-27230 | F5 BIG-IP APM cross-site scripting | 7.5CNA v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2022-27189 | F5 BIG-IP incorrect numeric conversion | 7.5CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-27182 | F5 BIG-IP resource exhaustion | 5.3CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-27181 | F5 BIG-IP APM resource exhaustion | 5.3CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-26890 | F5 BIG-IP Advanced WAF incorrect control flow | 7.5CNA v3.1 | 1.0% | 2022-05-05 | Fix |
| CVE-2022-26835 | F5 BIG-IP path traversal | 4.9CNA v3.1 | 1.9% | 2022-05-05 | Fix |
| CVE-2022-26517 | F5 BIG-IP incorrect calculation | 5.9CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-26415 | F5 BIG-IP command injection | 7.7CNA v3.1 | 0.7% | 2022-05-05 | Fix |
| CVE-2022-26372 | F5 BIG-IP resource exhaustion | 7.5CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-26370 | F5 BIG-IP uninitialized resource use | 5.9CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-26340 | F5 BIG-IP incorrect permission assignment | 4.9CNA v3.1 | 0.5% | 2022-05-05 | Fix |
| CVE-2022-26130 | F5 BIG-IP improper check for exceptional conditions | 5.3CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-26073 | Anker Eufy Homebase 2 libxm_av.so DemuxCmdInBuffer functionality denial of service | 6.5NVD v3.1 | 0.7% | 2022-05-05 | |
| CVE-2022-26071 | F5 BIG-IP insufficient randomness | 7.4CNA v3.1 | 1.1% | 2022-05-05 | Fix |
| CVE-2022-25990 | F5OS-A information disclosure | 5.3CNA v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-25989 | Anker Eufy Homebase 2 libxm_av.so getpeermac functionality authentication bypass | 8.8v3.1 | 1.0% | 2022-05-05 | |
| CVE-2022-25946 | F5 BIG-IP Guided Configuration (GC) improper integrity check validation | 8.7CNA v3.1 | 0.4% | 2022-05-05 | Fix |
| CVE-2022-22434 | IBM Robotic Process Automation API request handling vulnerability | 4.2CNA v3.0 | 0.2% | 2022-05-05 | Fix |
| CVE-2022-22433 | IBM Robotic Process Automation improper input validation | 2.7CNA v3.0 | 1.0% | 2022-05-05 | Fix |
| CVE-2022-22415 | IBM Robotic Process Automation Control Center vulnerability | 4.3CNA v3.0 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-1592 | Server-side request forgery in scout in Clinical-Genomics/scout | 8.2NVD v3.1 | 1.2% | 2022-05-05 | Exploit codeFix |
| CVE-2022-1590 | Bludit New Content module new-content cross-site scripting | 5.4v3.1 | 0.7% | 2022-05-05 | |
| CVE-2022-1575 | Arbitrary code execution through Sanitizer Bypass in jgraph/drawio | 9.6v3.1 | 2.2% | 2022-05-05 | Fix |
| CVE-2022-1516 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.3% | 2022-05-05 | Fix |
| CVE-2022-1468 | F5 BIG-IP resource exhaustion | 4.3CNA v3.1 | 0.9% | 2022-05-05 | Fix |
| CVE-2022-1464 | Stored XSS bug in gogs/gogs | 5.4NVD v3.1 | 0.7% | 2022-05-05 | Fix |
| CVE-2022-1411 | Unrestructed file upload in yetiforcecompany/yetiforcecrm | 6.1NVD v3.1 | 0.8% | 2022-05-05 | Fix |
| CVE-2022-1389 | F5 BIG-IP cross-site request forgery | 3.1CNA v3.1 | 0.3% | 2022-05-05 | Fix |
| CVE-2022-1388 | F5 BIG-IP missing authentication | 9.8CNA v3.1 | 100.0% | 2022-05-05 | KEVNucleiMetasploitEmerging ThreatsSnortExploit codeFix |
| CVE-2022-30292 | Squirrel-lang Squirrel sqbaselib.cpp heap-based buffer overflow | 10.0v3.1 | 3.6% | 2022-05-04 | Exploit codeFix |
| CVE-2022-30288 | Ohler Agoo GraphQL fragment spread handling denial of service | 7.5v3.1 | 1.5% | 2022-05-04 | Fix |
| CVE-2022-30284 | Argument injection in Python-libnmap | 9.8v3.1 | 5.1% | 2022-05-04 | Fix |
| CVE-2022-30241 | Jquery Json-viewer cross-site scripting in jquery.json-viewer | 6.1v3.1 | 0.7% | 2022-05-04 | Fix |
| CVE-2022-29950 | Experian Hunter 1.16 allows remote authenticated users to modify assumed-immutable elements via the (1) rule name parameter to the Rules page or the (2) subrule name or (3) categories name parameter to the Subrules page. NOTE: the vendor disputes this because version 1.16 has never existed | 4.3v3.1 | 1.0% | 2022-05-04 | Fix |
| CVE-2022-29943 | Talend Administration Center XML external entity injection | 6.5v3.1 | 0.8% | 2022-05-04 | Fix |
| CVE-2022-29942 | Talend Administration Center server-side request forgery | 6.5v3.1 | 0.7% | 2022-05-04 | Fix |
| CVE-2022-29347 | Web@rchiv An arbitrary file upload | 9.8v3.1 | 3.2% | 2022-05-04 | |
| CVE-2022-29155 | openldap SQL injection | 9.8NVD v3.1 | 64.5% | 2022-05-04 | Fix |
| CVE-2022-28940 | H3C Magic R100 denial of service | 7.5v3.1 | 1.2% | 2022-05-04 | |
| CVE-2022-28806 | Fujitsu Lifebook A3510 out-of-bounds write | 7.8v3.1 | 0.4% | 2022-05-04 | Fix |
| CVE-2022-28568 | Simple Doctors Appointment System unrestricted file upload | 9.8v3.1 | 3.1% | 2022-05-04 | |
| CVE-2022-28557 | Tenda AC15 OS command injection | 9.8v3.1 | 22.0% | 2022-05-04 | |
| CVE-2022-28556 | Tenda AC15 out-of-bounds write | 7.5v3.1 | 1.0% | 2022-05-04 | |
| CVE-2022-28552 | chshcms Cscms SQL injection | 8.8v3.1 | 0.8% | 2022-05-04 | |
| CVE-2022-28512 | Fantastic Blog Sourcecodester SQL injection | 9.8v3.1 | 1.4% | 2022-05-04 | |
| CVE-2022-28508 | MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php | 6.1v3.1 | 5.2% | 2022-05-04 | NucleiExploit code |
| CVE-2022-28488 | Libwav uninitialized resource use | 7.5v3.1 | 1.2% | 2022-05-04 | |
| CVE-2022-28487 | Broadcom tcpreplay memory leak | 7.5v3.1 | 2.0% | 2022-05-04 | Fix |
| CVE-2022-28111 | MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter | 9.8v3.1 | 1.7% | 2022-05-04 | Fix |
| CVE-2022-28099 | Poultry Farm Management System SQL injection | 8.8v3.1 | 1.6% | 2022-05-04 | Exploit code |
| CVE-2022-28096 | SkyCaiji remote code execution | 7.2v3.1 | 20.1% | 2022-05-04 | |
| CVE-2022-28090 | Ujcms Jspxcms server-side request forgery | 6.5v3.1 | 1.1% | 2022-05-04 | |
| CVE-2022-28082 | Tenda AX12 out-of-bounds write | 9.8v3.1 | 8.6% | 2022-05-04 | |
| CVE-2022-28081 | Arphp component Query.php reflected cross-site scripting | 6.1v3.1 | 0.5% | 2022-05-04 | |
| CVE-2022-28076 | Seacms remote command execution | 7.2v3.1 | 2.2% | 2022-05-04 | |
| CVE-2022-28067 | Sandboxie incorrect improper access control | 8.6v3.1 | 0.9% | 2022-05-04 | |
| CVE-2022-28055 | FusionPBX OS command injection | 9.8v3.1 | 1.5% | 2022-05-04 | |
| CVE-2022-27903 | EVE-NG configuration parser OS command injection | 8.8v3.1 | 2.6% | 2022-05-04 | Fix |
| CVE-2022-27470 | Libsdl Sdl Ttf out-of-bounds write | 7.8v3.1 | 1.0% | 2022-05-04 | Fix |
| CVE-2022-27461 | nopCommerce open redirect | 6.1v3.1 | 0.7% | 2022-05-04 | |
| CVE-2022-27431 | WuzhiCMS SQL injection | 9.8v3.1 | 1.1% | 2022-05-04 | |
| CVE-2022-27420 | Hospital Management System SQL injection | 9.8v3.1 | 1.4% | 2022-05-04 | |
| CVE-2022-25787 | Secomea GateManager GTA URLs issued by LMM web API may leak information | 7.5CNA v3.1 | 0.2% | 2022-05-04 | Fix |
| CVE-2022-25786 | GateManager debug interface is included in production builds | 4.9CNA v3.1 | 0.7% | 2022-05-04 | Fix |
| CVE-2022-25785 | Secomea SiteManager buffer overrun | 6.6CNA v3.1 | 1.0% | 2022-05-04 | Fix |
| CVE-2022-25784 | Secomea SiteManager user controllable HTML element attribute (potential XSS) | 9.1CNA v3.1 | 0.6% | 2022-05-04 | Fix |
| CVE-2022-25783 | Secomea GateManager hacking attempts from logged-in users are not properly logged by GM | 4.3CNA v3.1 | 0.6% | 2022-05-04 | Fix |
| CVE-2022-25782 | Secomea GateManager insufficient privilege checks on object access and updates | 5.4CNA v3.1 | 0.5% | 2022-05-04 | Fix |
| CVE-2022-25781 | Reflected XSS issues in GateManager | 4.2CNA v3.1 | 0.5% | 2022-05-04 | Fix |
| CVE-2022-25780 | Secomea GateManager information leak via device availability query function | 4.3CNA v3.1 | 0.6% | 2022-05-04 | Fix |
| CVE-2022-25779 | Secomea GateManager insufficient scope checks allows adding unrelated audit log entries | 4.3CNA v3.1 | 0.6% | 2022-05-04 | Fix |
| CVE-2022-25778 | Secomea GateManager unload handlers may unintentionally defeat CSRF guards | 4.2CNA v3.1 | 0.3% | 2022-05-04 | Fix |
| CVE-2022-24901 | Parse Platform Parse Server Apple Game Center authentication adapter authentication bypass | 7.5CNA v3.1 | 0.7% | 2022-05-04 | Fix |
| CVE-2022-23724 | PingID Integration for Windows Login MFA Bypass | 6.4CNA v3.1 | 0.4% | 2022-05-04 | Fix |
| CVE-2022-23443 | Fortinet FortiSOAR An improper access control | 7.5CNA v3.1 | 1.3% | 2022-05-04 | Fix |
| CVE-2022-20801 | Cisco Small Business RV Series Routers command injection | 4.7CNA v3.1 | 2.0% | 2022-05-04 | Fix |
| CVE-2022-20799 | Cisco Small Business RV Series Routers command injection | 4.7CNA v3.1 | 1.7% | 2022-05-04 | Fix |
| CVE-2022-20796 | ClamAV Truncated file denial of service vulnerability Affecting Cisco Products: April 2022 | 6.5CNA v3.1 | 0.4% | 2022-05-04 | Fix |
| CVE-2022-20794 | Cisco TelePresence Collaboration Endpoint and RoomOS Software web engine open redirect | 6.5CNA v3.1 | 0.7% | 2022-05-04 | Fix |
| CVE-2022-20785 | ClamAV HTML Scanning memory leak vulnerability Affecting Cisco Products: April 2022 | 7.5CNA v3.1 | 7.1% | 2022-05-04 | Fix |
| CVE-2022-20780 | Cisco Enterprise NFV Infrastructure Software improper access control | 9.9CNA v3.1 | 11.2% | 2022-05-04 | Fix |
| CVE-2022-20779 | Cisco Enterprise NFV Infrastructure Software improper access control | 9.9CNA v3.1 | 10.5% | 2022-05-04 | Fix |
| CVE-2022-20777 | Cisco Enterprise NFV Infrastructure Software improper access control | 9.9CNA v3.1 | 11.1% | 2022-05-04 | Fix |
| CVE-2022-20771 | ClamAV TIFF File Parsing denial of service vulnerability Affecting Cisco Products: April 2022 | 7.5CNA v3.1 | 5.9% | 2022-05-04 | Fix |
| CVE-2022-20770 | ClamAV CHM File Parsing denial of service vulnerability Affecting Cisco Products: April 2022 | 8.6CNA v3.1 | 7.1% | 2022-05-04 | Fix |
| CVE-2022-20764 | Cisco TelePresence Collaboration Endpoint and RoomOS Software web engine open redirect | 6.5CNA v3.1 | 1.0% | 2022-05-04 | Fix |
| CVE-2022-20753 | Cisco Small Business RV Series Routers remote code execution | 4.7CNA v3.1 | 2.2% | 2022-05-04 | Fix |
| CVE-2022-20734 | Cisco SD-WAN vManage software information disclosure | 4.4CNA v3.1 | 0.2% | 2022-05-04 | Fix |
| CVE-2022-1584 | Reflected XSS in microweber/microweber | 6.1v3.1 | 0.8% | 2022-05-04 | Fix |
| CVE-2022-1571 | Cross-site scripting Reflected in Create Subaccount in NeoRazorX/Facturascripts | 6.1NVD v3.1 | 0.9% | 2022-05-04 | Fix |
| CVE-2022-1555 | DOM XSS in microweber ver in microweber/microweber | 6.1NVD v3.1 | 1.3% | 2022-05-04 | Fix |
| CVE-2022-1502 | Octopus Deploy Octopus Server Git version control API vulnerability | 4.3v3.1 | 0.5% | 2022-05-04 | Fix |
| CVE-2022-29824 | libxml2 integer overflow | 6.5NVD v3.1 | 3.8% | 2022-05-03 | Fix |
| CVE-2022-29001 | Springbootmovie unrestricted file upload | 7.2v3.1 | 1.1% | 2022-05-03 | |
| CVE-2022-28793 | Samsung Mobile Devices improper check for exceptional conditions | 4.4CNA v3.1 | 0.2% | 2022-05-03 | Fix |
| CVE-2022-28792 | Samsung Mobile Gear IconX PC Manager DLL hijacking | 6.2CNA v3.1 | 0.2% | 2022-05-03 | Fix |
| CVE-2022-28791 | Samsung Mobile Galaxy Store InstallAgent improper input validation | 6.2CNA v3.1 | 0.2% | 2022-05-03 | Fix |
| CVE-2022-28790 | Samsung Mobile Link to Windows Service improper authentication | 4.0CNA v3.1 | 0.2% | 2022-05-03 | Fix |
| CVE-2022-28789 | Samsung Mobile Voice Note missing authorization | 6.2CNA v3.1 | 0.2% | 2022-05-03 | Fix |
| CVE-2022-28788 | Samsung Mobile Devices out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28787 | Samsung Mobile Devices out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28786 | Samsung Mobile Devices out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28785 | Samsung Mobile Devices out-of-bounds read | 4.0CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28784 | Samsung Mobile Devices Galaxy Themes path traversal | 4.0CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28783 | Samsung Mobile Devices Galaxy Themes improper input validation | 6.2CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28782 | Samsung Mobile Devices Contents To window improper access control | 4.6CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28781 | Samsung Mobile Devices settings improper input validation | 7.7CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28780 | Samsung Mobile Devices Weather improper access control | 5.0CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-28599 | Thedaylightstudio Fuel CMS stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-03 | |
| CVE-2022-28590 | Pixelimity A remote code execution | 7.2v3.1 | 24.0% | 2022-05-03 | Exploit code |
| CVE-2022-28589 | Pixelimity A stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-05-03 | |
| CVE-2022-28588 | Springbootmovie cross-site scripting | 5.4v3.1 | 0.5% | 2022-05-03 | |
| CVE-2022-28585 | Phome EmpireCMS SQL injection | 9.8v3.1 | 0.9% | 2022-05-03 | |
| CVE-2022-28561 | Tenda AX12 stack-based buffer overflow | 9.8v3.1 | 9.9% | 2022-05-03 | |
| CVE-2022-28560 | Tenda AC9 stack-based buffer overflow | 9.8v3.1 | 1.7% | 2022-05-03 | |
| CVE-2022-28505 | jflyfox jfinal_cms SQL injection | 7.2v3.1 | 0.9% | 2022-05-03 | |
| CVE-2022-28118 | RCE in SiteServer CMS | 9.8v3.1 | 2.6% | 2022-05-03 | Exploit code |
| CVE-2022-27962 | Bluecms SQL injection | 9.8v3.1 | 1.1% | 2022-05-03 | |
| CVE-2022-27413 | Hospital Management System SQL injection | 9.8v3.1 | 2.9% | 2022-05-03 | Exploit code |
| CVE-2022-27330 | E-Commerce Website /public/admin/index.php?add_product cross-site scripting | 5.4v3.1 | 0.6% | 2022-05-03 | |
| CVE-2022-27313 | Arbitrary file deletion in Gitea | 7.5v3.1 | 1.0% | 2022-05-03 | Fix |
| CVE-2022-23400 | Accusoft ImageGear IGXMPXMLParser::parseDelimiter functionality stack-based buffer overflow | 7.1v3.1 | 0.8% | 2022-05-03 | |
| CVE-2022-23063 | Shopizer insufficient session expiration | 8.8CNA v3.1 | 1.2% | 2022-05-03 | |
| CVE-2022-22368 | IBM Spectrum Scale inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2022-05-03 | Fix |
| CVE-2022-22137 | Accusoft ImageGear ioca_mys_rgb_allocate functionality memory corruption | 6.5NVD v3.1 | 1.1% | 2022-05-03 | |
| CVE-2022-21949 | SUSE open build service multiple XXE vulnerabilities in OBS | 8.8CNA v3.1 | 1.9% | 2022-05-03 | Fix |
| CVE-2022-21743 | MediaTek chipsets integer overflow or wraparound in ion | 7.8v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20767 | Cisco Firepower Threat Defense Software DNS Enforcement denial of service | 8.6CNA v3.1 | 1.7% | 2022-05-03 | Fix |
| CVE-2022-20760 | Cisco Adaptive Security Appliance (ASA) Software denial of service | 8.6CNA v3.1 | 1.6% | 2022-05-03 | Fix |
| CVE-2022-20759 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software privilege escalation | 8.8CNA v3.1 | 28.2% | 2022-05-03 | Fix |
| CVE-2022-20757 | Cisco Firepower Threat Defense Software denial of service | 8.6CNA v3.1 | 1.2% | 2022-05-03 | Fix |
| CVE-2022-20751 | Cisco Firepower Threat Defense Software Snort Out of memory denial of service | 8.6CNA v3.1 | 1.3% | 2022-05-03 | Fix |
| CVE-2022-20748 | Cisco Firepower Threat Defense Software Local Malware Analysis denial of service | 5.3CNA v3.1 | 1.3% | 2022-05-03 | Fix |
| CVE-2022-20746 | Cisco Firepower Threat Defense Software TCP Proxy denial of service | 8.6CNA v3.1 | 1.3% | 2022-05-03 | Fix |
| CVE-2022-20745 | Cisco Adaptive Security Appliance and Firepower Threat Defense Software denial of service | 8.6CNA v3.1 | 1.5% | 2022-05-03 | Fix |
| CVE-2022-20744 | Cisco Firepower Management Center software information disclosure | 4.3CNA v3.0 | 0.9% | 2022-05-03 | Fix |
| CVE-2022-20743 | Cisco Firepower Management Center file upload Security Bypass | 6.5CNA v3.1 | 4.0% | 2022-05-03 | Fix |
| CVE-2022-20742 | Cisco ASA Software and Firepower Threat Defense Software IPsec IKEv2 VPN information disclosure | 7.4CNA v3.1 | 0.5% | 2022-05-03 | Fix |
| CVE-2022-20740 | Cisco Firepower Management Center software cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-05-03 | Fix |
| CVE-2022-20737 | Cisco Adaptive Security Appliance Software Clientless SSL VPN heap overflow | 8.5CNA v3.1 | 1.2% | 2022-05-03 | Fix |
| CVE-2022-20730 | Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass vulnerability | 4.0CNA v3.1 | 1.0% | 2022-05-03 | Fix |
| CVE-2022-20729 | Cisco Firepower Threat Defense Software XML injection | 4.4CNA v3.1 | 0.3% | 2022-05-03 | Fix |
| CVE-2022-20715 | Cisco ASA Software and Firepower Threat Defense Software remote access SSL VPN denial of service | 8.6CNA v3.1 | 1.3% | 2022-05-03 | Fix |
| CVE-2022-20629 | Cisco Firepower Management Center software cross-site scripting | 5.4CNA v3.1 | 0.6% | 2022-05-03 | Fix |
| CVE-2022-20628 | Cisco Firepower Management Center software cross-site scripting | 5.4CNA v3.1 | 0.6% | 2022-05-03 | Fix |
| CVE-2022-20627 | Cisco Firepower Management Center software cross-site scripting | 5.4CNA v3.1 | 0.6% | 2022-05-03 | Fix |
| CVE-2022-20111 | MediaTek chipsets improper handling of exceptional conditions in ion | 8.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20110 | MediaTek chipsets time-of-check time-of-use (toctou) race condition in ion | 7.0v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20109 | MediaTek chipsets improper update of reference count in ion | 7.8v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20108 | MediaTek chipsets stack-based buffer overflow in voice service | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20107 | MediaTek chipsets integer overflow or wraparound in subtitle service | 4.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20106 | MediaTek chipsets heap-based buffer overflow in MM service | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20105 | MediaTek chipsets stack-based buffer overflow in MM service | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20104 | MediaTek chipsets improper access control in aee daemon | 5.5v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20103 | MediaTek chipsets unix symbolic link (symlink) following in aee daemon | 4.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20102 | MediaTek chipsets missing authorization in aee daemon | 4.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20101 | MediaTek chipsets improper limitation of a pathname to a restricted directory in aee daemon | 5.5v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20100 | MediaTek chipsets missing authorization in aee daemon | 4.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20099 | MediaTek chipsets improper input validation in aee daemon | 7.8v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20098 | MediaTek chipsets missing authorization in aee daemon | 4.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20097 | MediaTek chipsets time-of-check time-of-use (toctou) race condition in aee daemon | 4.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20096 | MediaTek chipsets use of uninitialized variable in camera | 4.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20095 | MediaTek chipsets improper input validation in imgsensor | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20094 | MediaTek chipsets improper input validation in imgsensor | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20093 | MediaTek chipsets missing authorization in telephony | 7.8v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20092 | MediaTek chipsets improper input validation in alac decoder | 5.5v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20091 | MediaTek chipsets aee driver use-after-free | 6.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20090 | MediaTek chipsets missing synchronization in aee driver | 6.4v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20089 | MediaTek chipsets active debug code in aee driver | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20088 | MediaTek chipsets improper handling of exceptional conditions in aee driver | 7.8v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20087 | MediaTek chipsets improper input validation in ccu | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20085 | MediaTek chipsets unix symbolic link (symlink) following in netdiag | 6.7v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-20084 | MediaTek chipsets missing authorization in telephony | 7.8v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-1554 | Path traversal due to `send_file` call in Clinical-Genomics/scout | 7.5v3.1 | 1.3% | 2022-05-03 | Fix |
| CVE-2022-1548 | Mattermost Playbooks privilege escalation | 3.7CNA v3.1 | 0.6% | 2022-05-03 | |
| CVE-2022-1473 | OpenSSL resource leakage when decoding certificates and keys | 7.5NVD v3.1 | 4.6% | 2022-05-03 | Fix |
| CVE-2022-1434 | OpenSSL incorrect MAC key used in the RC4-MD5 ciphersuite | 5.9NVD v3.1 | 1.2% | 2022-05-03 | Fix |
| CVE-2022-1343 | OpenSSL OCSP_basic_verify may incorrectly verify the response signing certificate | 5.3NVD v3.1 | 2.1% | 2022-05-03 | Fix |
| CVE-2022-1331 | Delta Electronics DMARS improper restriction of XML external entity reference | 5.5v3.1 | 0.8% | 2022-05-03 | Fix |
| CVE-2022-1292 | OpenSSL the c_rehash script allows command injection | 7.3NVD v3.1 | 82.6% | 2022-05-03 | Exploit codeFix |
| CVE-2022-0916 | Broken authentication on Logitech Options due to misvalidation of Oauth state parameter | 8.4CNA v3.1 | 0.5% | 2022-05-03 | Fix |
| CVE-2022-0882 | Google Illegal access to Kernel log in Fuchsia | 5.3CNA v3.1 | 0.1% | 2022-05-03 | Fix |
| CVE-2022-29973 | Exfat resource exhaustion | 4.7v3.1 | 0.3% | 2022-05-02 | Fix |
| CVE-2022-29970 | sinatra does not validate expanded path matches | 7.5v3.1 | 2.2% | 2022-05-02 | Fix |
| CVE-2022-29969 | mediawiki RSS For Mediawiki cross-site scripting | 6.1v3.1 | 0.7% | 2022-05-02 | Fix |
| CVE-2022-29968 | Linux kernel missing resource initialization | 7.8NVD v3.1 | 1.1% | 2022-05-02 | Exploit codeFix |
| CVE-2022-29849 | Progress OpenEdge privilege escalation | 7.8v3.1 | 0.3% | 2022-05-02 | Fix |
| CVE-2022-29444 | Breeze WordPress plugin plugin settings Change leading to cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-28613 | Specially Crafted Modbus TCP Packet vulnerability in RTU500 series | 7.5CNA v3.1 | 1.0% | 2022-05-02 | Fix |
| CVE-2022-28573 | D-Link Dir-823 Pro OS command injection | 9.8v3.1 | 27.5% | 2022-05-02 | |
| CVE-2022-28572 | Tenda AX1806 OS command injection | 8.8v3.1 | 2.7% | 2022-05-02 | |
| CVE-2022-28571 | D-Link DIR-882 OS command injection | 9.8v3.1 | 5.5% | 2022-05-02 | |
| CVE-2022-28451 | nopCommerce path traversal | 7.5v3.1 | 1.5% | 2022-05-02 | |
| CVE-2022-28056 | Incorrect permission assignment for critical resource in ShopXO | 9.8v3.1 | 1.4% | 2022-05-02 | Fix |
| CVE-2022-28054 | Vandyke Vshell improper neutralization | 9.8v3.1 | 31.2% | 2022-05-02 | Fix |
| CVE-2022-27983 | Ruijie Networks Rg-nbr2100g-e arbitrary file read | 7.5v3.1 | 0.9% | 2022-05-02 | |
| CVE-2022-27982 | Ruijie Networks Rg-nbr2100g-e remote code execution | 9.8v3.1 | 2.1% | 2022-05-02 | |
| CVE-2022-27466 | Mingsoft MCMS SQL injection | 9.8v3.1 | 1.6% | 2022-05-02 | |
| CVE-2022-26326 | Potential open redirection vulnerability in NetIQ Access Manager versions prior to | 4.0CNA v3.1 | 0.4% | 2022-05-02 | Fix |
| CVE-2022-26325 | Cross-site scripting vulnerability in NetIQ Access Manager versions prior to | 2.9CNA v3.1 | 0.4% | 2022-05-02 | Fix |
| CVE-2022-24974 | Menlo Security Email Isolation link rewriting vulnerability | 5.3v3.1 | 0.7% | 2022-05-02 | Fix |
| CVE-2022-24897 | xwiki-commons arbitrary filesystem write access from Velocity | 7.5CNA v3.1 | 1.8% | 2022-05-02 | Fix |
| CVE-2022-23904 | Rainworx Auctionworx cross-site request forgery | 8.0v3.1 | 0.4% | 2022-05-02 | |
| CVE-2022-23723 | Ping Identity PingFederate PingOne MFA Integration Kit adapter HTML templates vulnerability | 7.7CNA v3.1 | 0.9% | 2022-05-02 | Fix |
| CVE-2022-23722 | PingFederate Password Reset via Authentication API Mishandling | 6.5NVD v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-23065 | Vendure XSS via SVG file upload | 5.4CNA v3.1 | 0.6% | 2022-05-02 | |
| CVE-2022-23064 | Snipe-IT host header injection | 8.8CNA v3.1 | 1.3% | 2022-05-02 | Fix |
| CVE-2022-1515 | matio MAT5 file reader memory leak | 5.5NVD v3.1 | 0.7% | 2022-05-02 | Fix |
| CVE-2022-1475 | FFmpeg integer overflow | 5.5NVD v3.1 | 0.9% | 2022-05-02 | Fix |
| CVE-2022-1378 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 19.4% | 2022-05-02 | Fix |
| CVE-2022-1377 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1376 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1375 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1374 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1372 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1371 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1370 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1369 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 1.2% | 2022-05-02 | Fix |
| CVE-2022-1367 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 19.4% | 2022-05-02 | Fix |
| CVE-2022-1366 | Delta Electronics DIAEnergie SQL injection | 9.8v3.1 | 19.4% | 2022-05-02 | Fix |
| CVE-2022-1300 | Missing authentication in TRUMPF products may result in corruption of data | 9.8CNA v3.1 | 1.5% | 2022-05-02 | |
| CVE-2022-1282 | Photo Gallery WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-05-02 | Fix |
| CVE-2022-1281 | Photo Gallery WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 43.1% | 2022-05-02 | NucleiFix |
| CVE-2022-1273 | Import WP WordPress plugin Admin+ arbitrary file upload to RCE | 7.2NVD v3.1 | 1.5% | 2022-05-02 | Fix |
| CVE-2022-1269 | Fast Flow WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-05-02 | Fix |
| CVE-2022-1255 | Import and export users and customers WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-05-02 | Fix |
| CVE-2022-1250 | LifterLMS PayPal WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2022-05-02 | Fix |
| CVE-2022-1239 | HubSpot WordPress plugin Contributor+ blind SSRF | 8.8NVD v3.1 | 1.4% | 2022-05-02 | Fix |
| CVE-2022-1046 | Visual Form Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-0952 | Sitemap by click5 WordPress plugin unauthenticated arbitrary options update | 8.8NVD v3.1 | 11.4% | 2022-05-02 | NucleiExploit codeFix |
| CVE-2022-0783 | Multiple Shipping Address Woocommerce WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 7.6% | 2022-05-02 | NucleiFix |
| CVE-2022-0773 | Documentor WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 43.3% | 2022-05-02 | NucleiFix |
| CVE-2022-0771 | SiteSuperCharger WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.6% | 2022-05-02 | Fix |
| CVE-2022-0662 | Adrotate WordPress plugin Admin+ XSS via Advert Name | 4.8NVD v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-0649 | Adrotate WordPress plugin Admin+ XSS via Group Name | 4.8NVD v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-0428 | Content Egg WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-05-02 | Fix |
| CVE-2022-0418 | Event List WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-0191 | Ad Invalid Click Protector (AICP) WordPress plugin arbitrary Ban deletion via CSRF | 6.5NVD v3.1 | 0.6% | 2022-05-02 | Fix |
| CVE-2022-28481 | CSV-Safe improperly filters special characters potentially leading to CSV injection | 9.8v3.1 | 1.7% | 2022-05-01 | Fix |
| CVE-2022-26068 | pistacheio/pistache path traversal | 7.5v3.1 | 1.5% | 2022-05-01 | Fix |
| CVE-2022-25850 | github.com/hoppscotch/proxyscotch server-side request forgery (SSRF) | 7.5v3.1 | 1.4% | 2022-05-01 | Fix |
| CVE-2022-25844 | angular regular expression denial of service (ReDoS) | 7.5v3.1 | 4.9% | 2022-05-01 | Fix |
| CVE-2022-25842 | com.alibaba.oneagent:one-java-agent-plugin arbitrary file write via Archive Extraction (Zip Slip) | 9.8v3.1 | 3.8% | 2022-05-01 | Exploit codeFix |
| CVE-2022-25767 | com.bstek.ureport:ureport2-console remote code execution | 9.8v3.1 | 3.0% | 2022-05-01 | |
| CVE-2022-25647 | com.google.code.gson:gson deserialization of untrusted data | 7.5v3.1 | 11.6% | 2022-05-01 | Fix |
| CVE-2022-25645 | dset prototype pollution | 8.1v3.1 | 1.8% | 2022-05-01 | Fix |
| CVE-2022-25349 | materialize-css cross-site scripting (XSS) | 5.4v3.1 | 1.0% | 2022-05-01 | |
| CVE-2022-25301 | jsgui-lang-essentials prototype pollution | 9.8v3.1 | 1.2% | 2022-05-01 | |
| CVE-2022-24437 | git-pull-or-clone command injection | 9.8v3.1 | 4.0% | 2022-05-01 | Fix |
| CVE-2022-23923 | jailed sandbox bypass | 9.8v3.1 | 1.3% | 2022-05-01 | |
| CVE-2022-23061 | Shopizer IDOR delete superadmin | 6.5CNA v3.1 | 1.1% | 2022-05-01 | |
| CVE-2022-23060 | Shopizer stored XSS in Manage files | 4.8CNA v3.1 | 0.6% | 2022-05-01 | |
| CVE-2022-22143 | convict prototype pollution | 9.8v3.1 | 2.1% | 2022-05-01 | Fix |
| CVE-2022-21230 | org.nanohttpd:nanohttpd information exposure | 5.5v3.1 | 0.3% | 2022-05-01 | |
| CVE-2022-21227 | Sqlite3 denial of service (DoS) | 7.5v3.1 | 2.1% | 2022-05-01 | Fix |
| CVE-2022-21189 | dexie prototype pollution | 9.8v3.1 | 1.7% | 2022-05-01 | Fix |
| CVE-2022-21167 | Masuit.Tools.Core arbitrary code execution | 9.8v3.1 | 1.4% | 2022-05-01 | |
| CVE-2022-21149 | s-cart/s-cart cross-site scripting (XSS) | 3.5NVD v3.1 | 0.6% | 2022-05-01 | Fix |
| CVE-2022-21144 | libxmljs denial of service (DoS) | 7.5v3.1 | 1.9% | 2022-05-01 | Fix |
| CVE-2022-1544 | Improper neutralization of formula elements in Yii-helpers | 7.8v3.1 | 2.4% | 2022-05-01 | Fix |