CVE-2022 records published in June 2022
This page lists the 1,767 CVE-2022 records published in June 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists three of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 29616.8% of these records
- Listed in CISA KEV
- 30.2% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 603.4% of these records
- Exploit code
- 663.7% of these records
- Actionable vendor fix
- 1,16365.8% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in June 2022 have had from about 52 months to about 53 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-34835 | denx U-Boot out-of-bounds write | 9.8v3.1 | 2.2% | 2022-06-30 | Fix |
| CVE-2022-34818 | Jenkins Failed Job Deactivator Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34817 | Cross-site request forgery in Jenkins Failed Job Deactivator Plugin | 4.3v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34816 | Passwords stored in plain text by Jenkins hpe-network-virtualization plugin | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34815 | Cross-site request forgery in Jenkins Request Rename Or DELETE Plugin | 4.3v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34814 | Incorrect authorization in Jenkins Request Rename Or DELETE Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34813 | Jenkins XPath Configuration Viewer Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34812 | Cross-site request forgery in Jenkins XPath Configuration Viewer Plugin | 4.3v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34811 | Missing authorization in Jenkins XPath Configuration Viewer Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34810 | Jenkins Rqm Plugin allows enumerating credentials IDs due to missing permission check | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34809 | Password stored in plain text by Jenkins Rqm Plugin | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34808 | Token stored in plain text by Jenkins Cisco Spark Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34807 | Plaintext storage of a password in Jenkins Elasticsearch Query Plugin | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34806 | Plaintext storage of a password in Jenkins Jigomerge Plugin | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34805 | Plaintext storage of a password in Jenkins Skype Notifier Plugin | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34804 | Jenkins OpsGenie Plugin vulnerable to cleartext transmission of sensitive information | 4.3v3.1 | 0.4% | 2022-06-30 | Fix |
| CVE-2022-34803 | Jenkins OpsGenie Plugin plaintext storage of a password | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34802 | Plaintext storage of a password in Jenkins RocketChat Notifier Plugin | 4.3v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34801 | Cleartext storage of sensitive information in Jenkins Build Notifications Plugin | 4.3v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34800 | Plaintext storage of a password in Jenkins Build Notifications Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34799 | Plaintext storage of a password in Jenkins Deployment Dashboard Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34798 | Missing authorization in Jenkins Deployment Dashboard Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34797 | Cross-site request forgery in Jenkins Deployment Dashboard Plugin | 4.3v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34796 | Jenkins Deployment Dashboard Plugin has insufficiently protected credentials | 4.3v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34795 | Cross-site scripting in Jenkins Deployment Dashboard Plugin | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34794 | Missing authorization in Jenkins Recipe Plugin | 6.5v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34793 | XML external entity Reference in Jenkins Recipe Plugin | 8.8v3.1 | 0.9% | 2022-06-30 | Fix |
| CVE-2022-34792 | Cross-site request forgery in Jenkins Recipe Plugin | 8.0v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34791 | Cross-site scripting in Jenkins Validating Email Parameter Plugin | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34790 | Cross-site scripting in Jenkins eXtreme Feedback Panel Plugin | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34789 | Jenkins Matrix Reloaded Plugin vulnerable to CSRF | 6.5v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34788 | Jenkins Matrix Reloaded Plugin vulnerable to stored XSS | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34787 | Jenkins project Inheritance Plugin vulnerable to cross-site scripting | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34786 | Cross-site scripting in Jenkins Rich Text Publisher Plugin | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34785 | Jenkins Build-metrics Plugin missing authorization | 4.3v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34784 | Cross-site scripting in Jenkins Build-metrics Plugin | 5.4v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34783 | Cross-site scripting in Jenkins Plot Plugin | 5.4v3.1 | 80.4% | 2022-06-30 | Fix |
| CVE-2022-34782 | Incorrect authorization in Jenkins requests-plugin | 4.3v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34781 | Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow capturing credentials | 6.5v3.1 | 0.7% | 2022-06-30 | Fix |
| CVE-2022-34780 | CSRF vulnerability in Jenkins XebiaLabs XL Release Plugin allow capturing credentials | 6.5v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34779 | Missing permission checks in Jenkins XebiaLabs XL Release Plugin allow enumerating credentials IDs | 4.3v3.1 | 0.5% | 2022-06-30 | Fix |
| CVE-2022-34778 | Cross-site scripting in Jenkins TestNG Results Plugin | 5.4v3.1 | 0.6% | 2022-06-30 | Fix |
| CVE-2022-34777 | Cross-site scripting in Jenkins GitLab Plugin | 5.4v3.1 | 72.4% | 2022-06-30 | Fix |
| CVE-2022-33329 | Robustel R1510 web_server ajax endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33328 | Robustel R1510 web_server ajax endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33327 | Robustel R1510 web_server ajax endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33326 | Robustel R1510 web_server ajax endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33325 | Robustel R1510 web_server ajax endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33314 | Robustel R1510 web_server action endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33313 | Robustel R1510 web_server action endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33312 | Robustel R1510 web_server action endpoints functionalities command injection | 9.8v3.1 | 4.2% | 2022-06-30 | |
| CVE-2022-33087 | TP-Link Archer C50 function DM_ In fillobjbystr stack-based buffer overflow | 7.5v3.1 | 1.6% | 2022-06-30 | |
| CVE-2022-33085 | Ecisp Espcms-p8 remote code execution | 7.2v3.1 | 1.9% | 2022-06-30 | |
| CVE-2022-33082 | Denial of service in Open Policy Agent | 7.5v3.1 | 1.8% | 2022-06-30 | Exploit codeFix |
| CVE-2022-33043 | Urtracker batch add function cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-30 | |
| CVE-2022-32585 | Robustel R1510 clish art2 functionality command execution | 9.8v3.1 | 2.9% | 2022-06-30 | |
| CVE-2022-31115 | Unsafe YAML deserialization in opensearch-ruby | 8.8CNA v3.1 | 1.6% | 2022-06-30 | Fix |
| CVE-2022-31112 | Protected fields exposed via LiveQuery in parse-server | 8.2CNA v3.1 | 1.3% | 2022-06-30 | Fix |
| CVE-2022-28127 | Robustel R1510 arbitrary file deletion | 9.1v3.1 | 37.0% | 2022-06-30 | |
| CVE-2022-26135 | Atlassian Jira Core Server server-side request forgery | 6.5v3.1 | 71.2% | 2022-06-30 | Exploit codeFix |
| CVE-2022-23725 | Ping Identity PingID Windows Login Windows registry entries vulnerability | 7.7CNA v3.1 | 0.2% | 2022-06-30 | Fix |
| CVE-2022-23720 | Ping Identity PingID Windows Login properties file provisioning information disclosure | 7.5CNA v3.1 | 0.2% | 2022-06-30 | Fix |
| CVE-2022-23719 | Ping Identity PingID Windows Login local Java service authentication bypass | 7.2CNA v3.1 | 0.3% | 2022-06-30 | Fix |
| CVE-2022-23718 | PingID Windows Login uses known vulnerable components that can lead to remote code execution | 7.6CNA v3.1 | 2.1% | 2022-06-30 | Fix |
| CVE-2022-23717 | PingID Windows Login denial of service condition | 5.0CNA v3.1 | 0.2% | 2022-06-30 | Fix |
| CVE-2022-22496 | IBM Spectrum Protect Server missing brute-force protection | 5.3CNA v3.0 | 0.4% | 2022-06-30 | Fix |
| CVE-2022-22494 | IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.14 could allow a remote attacker to gain details of the database, such as type and version, by sending a specially-crafted HTTP request. This information could then be used in future attacks. IBM X-Force ID: 226940. | 3.7CNA v3.0 | 1.6% | 2022-06-30 | Fix |
| CVE-2022-22487 | IBM Spectrum Protect Server missing brute-force protection | 5.9CNA v3.0 | 1.5% | 2022-06-30 | Fix |
| CVE-2022-22478 | IBM Spectrum Protect Client cleartext storage of sensitive information | 6.2CNA v3.0 | 0.2% | 2022-06-30 | Fix |
| CVE-2022-22474 | IBM Spectrum Protect Client denial of service | 5.9CNA v3.0 | 1.1% | 2022-06-30 | Fix |
| CVE-2022-22472 | IBM Spectrum Protect Plus improper preservation of permissions | 6.0CNA v3.0 | 0.9% | 2022-06-30 | Fix |
| CVE-2022-2257 | Out-of-bounds read in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-06-30 | Fix |
| CVE-2022-2197 | Exemys RME1 web interface authentication bypass | 9.8v3.1 | 1.5% | 2022-06-30 | |
| CVE-2022-2078 | kernel stack-based buffer overflow | 5.5NVD v3.1 | 1.0% | 2022-06-30 | Exploit codeFix |
| CVE-2022-2058 | libtiff tiffcrop divide by zero | 5.5CNA v3.1 | 1.3% | 2022-06-30 | Fix |
| CVE-2022-2057 | libtiff tiffcrop divide by zero | 5.5CNA v3.1 | 1.3% | 2022-06-30 | Fix |
| CVE-2022-2056 | libtiff tiffcrop divide by zero | 5.5CNA v3.1 | 1.3% | 2022-06-30 | Fix |
| CVE-2022-1955 | Session improper authentication | 4.6v3.1 | 0.4% | 2022-06-30 | |
| CVE-2022-1852 | Linux kernel A null pointer dereference | 5.5NVD v3.1 | 0.3% | 2022-06-30 | Fix |
| CVE-2022-34043 | NoMachine incorrect permission assignment | 7.3v3.1 | 0.3% | 2022-06-29 | |
| CVE-2022-33639 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 2.7% | 2022-06-29 | Fix |
| CVE-2022-33638 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 2.5% | 2022-06-29 | Fix |
| CVE-2022-33107 | ThinkPHP deserialization of untrusted data in topthink/framework | 9.8v3.1 | 24.2% | 2022-06-29 | |
| CVE-2022-33061 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.8% | 2022-06-29 | |
| CVE-2022-33060 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-29 | |
| CVE-2022-33059 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-29 | |
| CVE-2022-33058 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-29 | |
| CVE-2022-33057 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-29 | |
| CVE-2022-33042 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-29 | |
| CVE-2022-33037 | Orwell-dev-cpp uncontrolled search path | 7.8v3.1 | 0.4% | 2022-06-29 | |
| CVE-2022-33036 | Embarcadero Dev-c++ uncontrolled search path | 7.8v3.1 | 0.5% | 2022-06-29 | |
| CVE-2022-33035 | NetSarang Xlpd uncontrolled search path | 7.8v3.1 | 0.4% | 2022-06-29 | Fix |
| CVE-2022-33023 | Openhwgroup CVA6 incorrect default permissions | 7.5v3.1 | 0.7% | 2022-06-29 | |
| CVE-2022-33021 | Openhwgroup CVA6 out-of-bounds read | 7.5v3.1 | 1.1% | 2022-06-29 | |
| CVE-2022-32969 | Metamask improper preservation of permissions | 5.9v3.1 | 1.5% | 2022-06-29 | |
| CVE-2022-32532 | Apache Shiro authentication bypass | 9.8v3.1 | 25.5% | 2022-06-29 | Exploit codeFix |
| CVE-2022-31897 | PHPGurukul Zoo Management System cross-site scripting | 6.1v3.1 | 0.9% | 2022-06-29 | Exploit code |
| CVE-2022-31266 | ILIAS missing authentication | 4.3v3.1 | 0.8% | 2022-06-29 | |
| CVE-2022-31110 | Denial of service (DoS) vulnerability in RSSHub | 5.3CNA v3.1 | 1.6% | 2022-06-29 | Fix |
| CVE-2022-31063 | Cross-site scripting via the title of a document in Tuleap | 6.5CNA v3.1 | 0.7% | 2022-06-29 | Fix |
| CVE-2022-31058 | SQL injection via the field name of a tracker in Tuleap | 7.2CNA v3.1 | 1.5% | 2022-06-29 | Fix |
| CVE-2022-31032 | Resources of private projects can be exposed in Tuleap | 4.3CNA v3.1 | 1.0% | 2022-06-29 | Fix |
| CVE-2022-30467 | Joyebike Wolf 2022 authentication bypass by replay | 6.8v3.1 | 0.9% | 2022-06-29 | |
| CVE-2022-30192 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 2.7% | 2022-06-29 | Fix |
| CVE-2022-29272 | Nagios XI open redirect | 6.1v3.1 | 4.0% | 2022-06-29 | NucleiFix |
| CVE-2022-29271 | Nagios XI incorrect authorization | 6.5v3.1 | 1.9% | 2022-06-29 | Fix |
| CVE-2022-29270 | Nagios XI missing authentication | 4.3v3.1 | 2.4% | 2022-06-29 | Fix |
| CVE-2022-29269 | Nagios XI cross-site scripting | 6.5v3.1 | 3.3% | 2022-06-29 | Fix |
| CVE-2022-28803 | Stored XSS in link tags added via XHR in SilverStripe Framework | 5.4v3.1 | 0.5% | 2022-06-29 | Fix |
| CVE-2022-2252 | Open redirect in microweber/microweber | 6.1v3.1 | 0.9% | 2022-06-29 | Fix |
| CVE-2022-2073 | Code injection in getgrav/grav | 7.2NVD v3.1 | 10.9% | 2022-06-29 | Fix |
| CVE-2022-34750 | mediawiki resource exhaustion | 7.5v3.1 | 1.2% | 2022-06-28 | Fix |
| CVE-2022-34134 | Jorani cross-site request forgery | 8.8v3.1 | 0.4% | 2022-06-28 | |
| CVE-2022-34133 | Jorani cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-28 | |
| CVE-2022-34132 | Jorani SQL injection | 9.8v3.1 | 1.6% | 2022-06-28 | |
| CVE-2022-33108 | Xpdfreader Xpdf out-of-bounds write | 7.8v3.1 | 1.1% | 2022-06-28 | Fix |
| CVE-2022-31887 | Marvalglobal Marval Msm insufficiently protected credentials | 9.8v3.1 | 1.5% | 2022-06-28 | |
| CVE-2022-31886 | Marvalglobal Marval Msm cross-site request forgery | 6.5v3.1 | 2.1% | 2022-06-28 | Exploit code |
| CVE-2022-31885 | Marvalglobal Marval Msm OS command injection | 9.8v3.1 | 32.8% | 2022-06-28 | Exploit code |
| CVE-2022-31884 | Marvalglobal Marval Msm improper access control | 6.5v3.1 | 1.2% | 2022-06-28 | |
| CVE-2022-31883 | Marvalglobal Marval Msm insecure direct object reference | 8.8v3.1 | 0.9% | 2022-06-28 | |
| CVE-2022-31230 | Dell PowerScale OneFS weak cryptographic algorithm | 8.1CNA v3.1 | 0.7% | 2022-06-28 | Fix |
| CVE-2022-31229 | Dell PowerScale OneFS information disclosure through error messages | 9.6CNA v3.1 | 0.8% | 2022-06-28 | Fix |
| CVE-2022-31108 | Mermaid diagram rendering vulnerability | 4.1CNA v3.1 | 0.9% | 2022-06-28 | Fix |
| CVE-2022-31106 | Prototype pollution in underscore.deep | 8.3CNA v3.1 | 1.1% | 2022-06-28 | Fix |
| CVE-2022-31104 | Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in Wasmtime | 4.8CNA v3.1 | 1.8% | 2022-06-28 | Fix |
| CVE-2022-31068 | Sensitive data exposure on Refused Inventory files in GLPI | 5.3CNA v3.1 | 0.9% | 2022-06-28 | Fix |
| CVE-2022-31061 | SQL injection on login page in GLPI | 9.8CNA v3.1 | 51.4% | 2022-06-28 | Emerging ThreatsExploit codeFix |
| CVE-2022-31056 | SQL injection with _actor parameter in GLPI | 9.8CNA v3.1 | 9.9% | 2022-06-28 | Exploit codeFix |
| CVE-2022-31052 | URL previews can crash Synapse media repositories or Synapse monoliths | 6.5CNA v3.1 | 1.7% | 2022-06-28 | Fix |
| CVE-2022-30997 | Yokogawa Stardom Fcn hard-coded credentials | 7.2v3.1 | 1.5% | 2022-06-28 | |
| CVE-2022-30707 | Yokogawa CENTUM and CAMS for HIS communication protocol vulnerability | 8.8v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2022-30563 | IPCHDBW2XXX IPCHFW2XXX ASI7XXXX man-in-the-middle | 7.4v3.1 | 0.9% | 2022-06-28 | |
| CVE-2022-30562 | IPCHDBW2XXX IPCHFW2XXX ASI7XXXX open redirect | 4.7v3.1 | 0.7% | 2022-06-28 | |
| CVE-2022-30561 | IPCHDBW2XXX IPCHFW2XXX ASI7XXXX man-in-the-middle | 5.9v3.1 | 0.7% | 2022-06-28 | |
| CVE-2022-30560 | IPCHDBW2XXX IPCHFW2XXX ASI7XXXX man-in-the-middle | 7.4v3.1 | 0.8% | 2022-06-28 | |
| CVE-2022-29858 | silverstripe Assets unpublished, protected files can be published via shortcode | 4.3v3.1 | 1.2% | 2022-06-28 | Fix |
| CVE-2022-29519 | Yokogawa Stardom Fcn cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2022-06-28 | |
| CVE-2022-28621 | HPE NonStop DSM/SCM information disclosure | 7.5v3.1 | 1.2% | 2022-06-28 | Fix |
| CVE-2022-25238 | Stored XSS via HTML fields in SilverStripe Framework | 5.4v3.1 | 0.7% | 2022-06-28 | Fix |
| CVE-2022-24444 | Silverstripe hybridsessions does not expire session id on logout | 6.5v3.1 | 0.9% | 2022-06-28 | Fix |
| CVE-2022-23896 | Cross-site scripting in Admidio | 5.4v3.1 | 0.6% | 2022-06-28 | Fix |
| CVE-2022-23763 | DOUZONE BIZON NeoRS file download and execute vulnerability | 8.8v3.1 | 0.3% | 2022-06-28 | |
| CVE-2022-2231 | Null pointer dereference in Vim/Vim | 5.5NVD v3.1 | 1.3% | 2022-06-28 | Fix |
| CVE-2022-2145 | Cloudlfare WARP arbitrary file overwrite | 5.8CNA v3.1 | 0.3% | 2022-06-28 | Fix |
| CVE-2022-0987 | PackageKit information disclosure | 3.3NVD v3.1 | 0.3% | 2022-06-28 | |
| CVE-2022-0624 | Authorization bypass through user-controlled key in ionicabizau/Parse-path | 7.3v3.1 | 0.9% | 2022-06-28 | Fix |
| CVE-2022-0085 | Server-side request forgery (SSRF) in dompdf/dompdf | 5.3v3.1 | 1.0% | 2022-06-28 | Fix |
| CVE-2022-33879 | Apache Tika incomplete fix and new regex DoS in StandardsExtractingContentHandler | 3.3v3.1 | 1.9% | 2022-06-27 | Fix |
| CVE-2022-33202 | SOFTCREATE L2Blocker setup screen authentication bypass | 8.1v3.1 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-33146 | Open redirect in web2py | 6.1v3.1 | 1.5% | 2022-06-27 | Fix |
| CVE-2022-33116 | openeclass path traversal | 6.5v3.1 | 1.7% | 2022-06-27 | Fix |
| CVE-2022-33009 | Lightcms A stored cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-27 | |
| CVE-2022-33007 | TRENDnet TEW-752DRU out-of-bounds write | 8.8v3.1 | 0.8% | 2022-06-27 | |
| CVE-2022-33005 | deltaww DIAEnergie cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-27 | |
| CVE-2022-32995 | halo server-side request forgery | 9.8v3.1 | 17.6% | 2022-06-27 | |
| CVE-2022-32994 | halo unrestricted file upload | 9.8v3.1 | 18.5% | 2022-06-27 | |
| CVE-2022-32092 | D-Link DIR-645 OS command injection | 9.8v3.1 | 5.7% | 2022-06-27 | |
| CVE-2022-31103 | Improper handling of CSS at-rules in lettersanitizer | 7.5CNA v3.1 | 1.5% | 2022-06-27 | Fix |
| CVE-2022-31101 | SQL injection in PrestaShop/blockwishlist | 8.1CNA v3.1 | 23.5% | 2022-06-27 | NucleiExploit codeFix |
| CVE-2022-31100 | Reachable assertion in rulex | 6.5CNA v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-31099 | Uncontrolled recursion in rulex | 6.5CNA v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-31098 | Weave GitOps leaked cluster credentials into logs on connection errors | 9.0CNA v3.1 | 1.2% | 2022-06-27 | Fix |
| CVE-2022-31096 | Discourse invite system vulnerability | 5.7CNA v3.1 | 0.5% | 2022-06-27 | Fix |
| CVE-2022-31094 | Cross-site scripting vulnerability in ScratchTools | 7.1CNA v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-31093 | Improper Handling of `callbackUrl` parameter in next-auth | 7.5CNA v3.1 | 1.7% | 2022-06-27 | Fix |
| CVE-2022-31092 | SQL injection in pimcore | 7.5CNA v3.1 | 1.4% | 2022-06-27 | Fix |
| CVE-2022-31091 | Change in port should be considered a change in origin in Guzzle | 7.7CNA v3.1 | 1.5% | 2022-06-27 | Fix |
| CVE-2022-31090 | CURLOPT_HTTPAUTH option not cleared on change of origin in Guzzle | 7.7CNA v3.1 | 1.9% | 2022-06-27 | Fix |
| CVE-2022-31089 | Invalid file request can crashe parse-server | 7.5CNA v3.1 | 1.1% | 2022-06-27 | Fix |
| CVE-2022-31088 | Unauthenticated LDAP injection in ldap-account-manager | 6.5CNA v3.0 | 1.3% | 2022-06-27 | Fix |
| CVE-2022-31087 | LDAPAccountManager lam incorrect default permissions in ldap-account-manager | 7.8CNA v3.0 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-31086 | LDAPAccountManager lam Incorrect Regular Expressions in ldap-account-manager | 6.6CNA v3.0 | 2.3% | 2022-06-27 | Fix |
| CVE-2022-31085 | LDAPAccountManager lam missing encryption of sensitive data in ldap-account-manager | 5.5CNA v3.0 | 0.3% | 2022-06-27 | Fix |
| CVE-2022-31084 | LDAPAccountManager lam unauthenticated remote code execution in ldap-account-manager | 9.0CNA v3.0 | 2.5% | 2022-06-27 | Fix |
| CVE-2022-31082 | SQL injection via package deployment tasks in glpi-inventory-plugin | 5.8CNA v3.1 | 1.0% | 2022-06-27 | Fix |
| CVE-2022-31081 | libwww-perl HTTP-Daemon inconsistent interpretation of HTTP requests in HTTP::Daemon | 7.3CNA v3.1 | 2.3% | 2022-06-27 | Fix |
| CVE-2022-31077 | Malicious response from KubeEdge can crash CSI driver controller server | 4.0CNA v3.1 | 0.8% | 2022-06-27 | Fix |
| CVE-2022-31076 | Malicious message can crash CloudCore in KubeEdge | 4.2CNA v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-31065 | Cross-site scripting vulnerability for private chat in bigbluebutton | 6.5CNA v3.1 | 0.8% | 2022-06-27 | Fix |
| CVE-2022-31064 | bigbluebutton cross-site scripting in username that will trigger by sending chat | 6.5CNA v3.1 | 1.3% | 2022-06-27 | Fix |
| CVE-2022-31057 | Authenticated stored XSS in Shopware Administration | 6.5CNA v3.1 | 0.7% | 2022-06-27 | Fix |
| CVE-2022-31039 | Improper privilege management Anyone can view room settings in GreenLight | 4.3CNA v3.1 | 0.7% | 2022-06-27 | Fix |
| CVE-2022-31036 | argoproj argo-cd symlink following allows leaking out-of-bounds YAML files from Argo CD repo-server | 4.3CNA v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-31035 | External URLs for Deployments can include javascript in argo-cd | 9.0CNA v3.1 | 1.0% | 2022-06-27 | Fix |
| CVE-2022-31034 | argoproj argo-cd insecure entropy in Argo CD's PKCE/Oauth2/OIDC params | 8.3CNA v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-28622 | HPE StoreOnce Software weak cryptographic algorithm | 7.5v3.1 | 0.8% | 2022-06-27 | Fix |
| CVE-2022-28172 | Hikvision DS-A71024/48/72R cross-site scripting | 6.5CNA v3.1 | 0.8% | 2022-06-27 | Fix |
| CVE-2022-28171 | Hikvision DS-A71024/48/72R OS command injection | 7.5CNA v3.1 | 51.6% | 2022-06-27 | Exploit codeFix |
| CVE-2022-28168 | Brocade SANnav insecure storage of sensitive information | 7.5v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-28167 | Brocade SANnav insufficiently protected credentials | 6.5v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-28166 | Brocade SANnav weak cryptographic algorithm | 7.5v3.1 | 0.5% | 2022-06-27 | Fix |
| CVE-2022-26477 | Apache SystemDS denial of service in readExternal method | 7.5v3.1 | 2.1% | 2022-06-27 | Fix |
| CVE-2022-2221 | Devolutions Remote Desktop Manager My Account settings information disclosure | 6.5v3.1 | 1.1% | 2022-06-27 | Fix |
| CVE-2022-2218 | Cross-site scripting (XSS) Stored in ionicabizau/Parse-url | 6.1NVD v3.1 | 0.9% | 2022-06-27 | Fix |
| CVE-2022-2217 | Cross-site scripting (XSS) Generic in ionicabizau/Parse-url | 6.1NVD v3.1 | 1.0% | 2022-06-27 | Fix |
| CVE-2022-2216 | Server-side request forgery (SSRF) in ionicabizau/Parse-url | 9.8v3.1 | 1.6% | 2022-06-27 | Fix |
| CVE-2022-2214 | SourceCodester Library Management System bookdetails.php SQL injection | 8.8v3.1 | 1.1% | 2022-06-27 | |
| CVE-2022-2213 | SourceCodester Library Management System cross-site scripting | 5.4v3.1 | 0.6% | 2022-06-27 | |
| CVE-2022-2212 | SourceCodester Library Management System /card/index.php unrestricted upload | 8.8v3.1 | 1.0% | 2022-06-27 | |
| CVE-2022-2210 | Out-of-bounds write in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-06-27 | Fix |
| CVE-2022-2208 | Null pointer dereference in Vim/Vim | 5.5NVD v3.1 | 1.4% | 2022-06-27 | Fix |
| CVE-2022-2207 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-06-27 | Fix |
| CVE-2022-2140 | Elcomplus SmartICS cross-site scripting | 9.0v3.1 | 0.8% | 2022-06-27 | Fix |
| CVE-2022-2106 | Elcomplus SmartICS path traversal | 2.7v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-2088 | Elcomplus SmartICS improper access control | 4.9v3.1 | 0.8% | 2022-06-27 | Fix |
| CVE-2022-2041 | Brizy Page Builder WordPress plugin Contributor+ stored cross-site scripting via Element content | 5.4NVD v3.1 | 0.7% | 2022-06-27 | Fix |
| CVE-2022-2040 | Brizy Page Builder WordPress plugin Contributor+ stored cross-site scripting via Element URL | 5.4NVD v3.1 | 0.7% | 2022-06-27 | Fix |
| CVE-2022-1995 | miniOrange Malware Scanner plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1994 | miniOrange Login With OTP Over SMS plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1990 | Nested Pages WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-06-27 | Fix |
| CVE-2022-1977 | WP Ultimate CSV Importer WordPress plugin Admin+ blind SSRF | 7.2NVD v3.1 | 1.3% | 2022-06-27 | Fix |
| CVE-2022-1971 | NextCellent Gallery WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-06-27 | |
| CVE-2022-1964 | Easy SVG Support WordPress plugin Author+ stored cross-site scripting via SVG | 5.4NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1960 | MyCSS WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1953 | Product Configurator for WooCommerce WordPress plugin unauthenticated arbitrary file deletion | 9.1NVD v3.1 | 1.7% | 2022-06-27 | Fix |
| CVE-2022-1916 | Active Products Tables for WooCommerce WordPress plugin reflected cross-site-scripting | 6.1NVD v3.1 | 1.9% | 2022-06-27 | NucleiFix |
| CVE-2022-1914 | Clean-Contact WordPress plugin arbitrary settings update to stored XSS via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1913 | The Add Post URL WordPress plugin through 2.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1904 | Easy Pricing Tables WordPress plugin reflected cross-site-scripting | 6.1NVD v3.1 | 1.5% | 2022-06-27 | NucleiFix |
| CVE-2022-1903 | ARMember WordPress plugin unauthenticated admin account takeover | 8.1NVD v3.1 | 8.7% | 2022-06-27 | NucleiExploit codeFix |
| CVE-2022-1885 | Cimy Header Image Rotator WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1847 | Rotating Posts WordPress plugin arbitrary settings update to stored XSS via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1846 | Tiny Contact Form WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1845 | WP Post Styling WordPress plugin Multiple CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-1844 | WP Sentry WordPress plugin arbitrary settings update to stored XSS via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1843 | MailPress WordPress plugin arbitrary settings update and Log files Purge via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-27 | |
| CVE-2022-1842 | OpenBook Book Data WordPress plugin arbitrary settings update to stored XSS via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1776 | Icegram WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1653 | Social Share Buttons by Supsystic WordPress plugin Multiple CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-1627 | My Private Site WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-1625 | New User Approve WordPress plugin arbitrary settings update and Invitation code creation via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-1593 | Site Offline or Coming Soon WordPress plugin stored cross-site scripting via CSRF | 6.1NVD v3.1 | 0.8% | 2022-06-27 | |
| CVE-2022-1574 | HTML2WP WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 12.2% | 2022-06-27 | Reported exploitedNuclei |
| CVE-2022-1573 | HTML2WP WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-27 | |
| CVE-2022-1572 | HTML2WP WordPress plugin Subscriber+ arbitrary file deletion | 8.1NVD v3.1 | 0.5% | 2022-06-27 | |
| CVE-2022-1470 | Ultimate WooCommerce CSV Importer WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-06-27 | |
| CVE-2022-1327 | Image Gallery - Grid Gallery WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1326 | Form - Contact Form WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1321 | miniOrange's Google Authenticator WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1113 | Flower Delivery by Florist One WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1095 | Mihdan: No External Links WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1029 | miniOrange Limit Login Attempts stored cross-site scripting | 4.8NVD v3.1 | 0.9% | 2022-06-27 | NucleiFix |
| CVE-2022-1028 | WordPress Security plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-27 | Fix |
| CVE-2022-1010 | Login using WordPress Users plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-06-27 | Fix |
| CVE-2022-0875 | miniOrange Google Authenticator WordPress plugin CSRF to stored cross-site scripting | 4.3NVD v3.1 | 0.4% | 2022-06-27 | Fix |
| CVE-2022-0722 | Exposure of sensitive information to an unauthorized actor in ionicabizau/Parse-url | 7.5v3.1 | 1.1% | 2022-06-27 | Fix |
| CVE-2022-0444 | XCloner WordPress plugin plugin settings reset | 4.3NVD v3.1 | 0.3% | 2022-06-27 | Fix |
| CVE-2022-34495 | Linux kernel double free | 5.5v3.1 | 0.3% | 2022-06-26 | Fix |
| CVE-2022-34494 | Linux kernel double free | 5.5v3.1 | 0.3% | 2022-06-26 | Fix |
| CVE-2022-2206 | Out-of-bounds read in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-06-26 | Fix |
| CVE-2022-33128 | Ruijie Networks RG-EG350 SQL injection | 9.1v3.1 | 0.9% | 2022-06-25 | |
| CVE-2022-31017 | Expression Always True vulnerability in Zulip Server | 2.0CNA v3.1 | 0.6% | 2022-06-25 | Fix |
| CVE-2022-31016 | argoproj argo-cd Argo CD vulnerable to Uncontrolled Memory Consumption | 6.5CNA v3.1 | 0.9% | 2022-06-25 | Fix |
| CVE-2022-29931 | Raytion Custom Security Manager cross-site scripting | 6.1v3.1 | 0.5% | 2022-06-25 | |
| CVE-2022-29168 | Cross-site scripting in Wire messages | 9.6CNA v3.1 | 0.8% | 2022-06-25 | Fix |
| CVE-2022-24893 | Espressif Bluetooth Mesh Stack vulnerable to out-of-bounds write leading to memory buffer corruption | 7.5CNA v3.1 | 0.5% | 2022-06-25 | Fix |
| CVE-2022-34066 | Texercise hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-34065 | Rondolu-yt-concate hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | |
| CVE-2022-34064 | Zibal hidden functionality | 9.8v3.1 | 1.4% | 2022-06-24 | Fix |
| CVE-2022-34061 | Catly Translate hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-34060 | Togglee hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-34059 | Sixfab-tool hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | |
| CVE-2022-34057 | Scoptrial hidden functionality | 9.8v3.1 | 1.4% | 2022-06-24 | Fix |
| CVE-2022-34056 | PYPI Watertools hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-34055 | PYPI Drxhello hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-34054 | PYPI Perdido hidden functionality | 9.8v3.1 | 1.9% | 2022-06-24 | Fix |
| CVE-2022-34053 | PYPI Dr-web-engine hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | |
| CVE-2022-33953 | IBM Robotic Process Automation insufficiently protected credentials | 4.6CNA v3.0 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-33910 | MantisBT XSS through crafted SVG documents in file_download.php | 5.4v3.1 | 0.9% | 2022-06-24 | Fix |
| CVE-2022-33122 | EyouCMS A stored cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-24 | |
| CVE-2022-33121 | 1234n MiniCMS A cross-site request forgery | 8.1v3.1 | 0.4% | 2022-06-24 | |
| CVE-2022-33004 | PYPI Beginner hidden functionality | 9.8v3.1 | 1.9% | 2022-06-24 | Fix |
| CVE-2022-33003 | PYPI Watools hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | |
| CVE-2022-33002 | PYPI Explore hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-33001 | PYPI Aamiles hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-33000 | PYPI Ml-scanner hidden functionality | 9.8v3.1 | 1.9% | 2022-06-24 | Fix |
| CVE-2022-32999 | PYPI Cloudlabeling hidden functionality | 9.8v3.1 | 2.0% | 2022-06-24 | Fix |
| CVE-2022-32998 | PYPI Cryptoasset-data-downloader hidden functionality | 9.8v3.1 | 1.9% | 2022-06-24 | Fix |
| CVE-2022-32997 | PYPI Rootinteractive hidden functionality | 9.8v3.1 | 1.9% | 2022-06-24 | Fix |
| CVE-2022-32996 | PYPI Django-navbar-client hidden functionality | 9.8v3.1 | 1.9% | 2022-06-24 | Fix |
| CVE-2022-32990 | GIMP improper exception handling | 5.5v3.1 | 0.7% | 2022-06-24 | Fix |
| CVE-2022-32530 | Schneider Electric Geo SCADA Mobile resource exposure | 4.8CNA v3.1 | 0.4% | 2022-06-24 | Fix |
| CVE-2022-32405 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32404 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32403 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32402 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32401 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32400 | Prison Management System SQL injection | 7.2v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32399 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32398 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32397 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32396 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32395 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32394 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32393 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32392 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32391 | Prison Management System SQL injection | 8.8v3.1 | 1.2% | 2022-06-24 | |
| CVE-2022-32209 | Rails::Html::Sanitizer vulnerable to cross-site scripting | 6.1v3.1 | 29.3% | 2022-06-24 | Fix |
| CVE-2022-32143 | CODESYS runtime system prone to directory acces | 8.8CNA v3.1 | 1.2% | 2022-06-24 | Fix |
| CVE-2022-32142 | CODESYS runtime system prone to denial of service due to use of out of range pointer | 8.1CNA v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-32141 | CODESYS runtime system prone to denial of service due to buffer over read | 6.5CNA v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-32140 | CODESYS runtime system prone to denial of service due to buffer copy | 6.5CNA v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-32139 | CODESYS runtime system prone to denial of service due to out-of-bounds read | 6.5CNA v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-32138 | CODESYS runtime system prone to denial of service due to Unexpected Sign extension | 8.8CNA v3.1 | 1.2% | 2022-06-24 | Fix |
| CVE-2022-32137 | CODESYS Runtime System prone to heap based buffer overflow | 8.8CNA v3.1 | 1.4% | 2022-06-24 | Fix |
| CVE-2022-32136 | CODESYS runtime systems: Access of uninitialised pointer lead to denial of service | 6.5v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-31806 | Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT | 9.8CNA v3.1 | 1.2% | 2022-06-24 | Fix |
| CVE-2022-31805 | CODESYS Development System insecure transmission of credentials | 7.5v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-31804 | CODESYS Gateway server prone to denial of service attack due to excessive memory allocation | 7.5CNA v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-31803 | CODESYS Gateway Server V2 prone to denial of service Attack | 5.3CNA v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-31802 | Partial string comparison in CODESYS Gateway server | 9.8CNA v3.1 | 1.3% | 2022-06-24 | Fix |
| CVE-2022-31767 | IBM CICS TX Standard OS command injection | 9.8CNA v3.0 | 4.7% | 2022-06-24 | Fix |
| CVE-2022-30885 | esa Pyesasky hidden functionality | 9.8v3.1 | 2.1% | 2022-06-24 | Fix |
| CVE-2022-30120 | Cross-site scripting in Concrete CMS | 6.1v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-30119 | https://github.com/concrete5/concrete5 cross-site scripting | 6.1v3.1 | 0.9% | 2022-06-24 | Fix |
| CVE-2022-30118 | https://github.com/concrete5/concrete5 cross-site scripting | 6.1v3.1 | 0.9% | 2022-06-24 | Fix |
| CVE-2022-30117 | Path traversal in Concrete CMS | 9.1v3.1 | 2.1% | 2022-06-24 | Fix |
| CVE-2022-30028 | dradisframework Dradis race condition | 5.9v3.1 | 0.5% | 2022-06-24 | Fix |
| CVE-2022-29578 | Meridian improper authentication | 5.3v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-29330 | VitalPBX backup system of Telesoft missing authorization | 4.9v3.1 | 0.9% | 2022-06-24 | |
| CVE-2022-29097 | Dell Wyse Management Suite relative path traversal | 4.9CNA v3.1 | 1.3% | 2022-06-24 | Fix |
| CVE-2022-29096 | Dell Wyse Management Suite cross-site scripting | 6.1CNA v3.1 | 0.5% | 2022-06-24 | Fix |
| CVE-2022-28620 | Cray Legacy Shasta System Solutions authentication bypass | 9.8v3.1 | 1.5% | 2022-06-24 | Fix |
| CVE-2022-28619 | HPE privilege escalation | 7.8v3.1 | 0.2% | 2022-06-24 | Fix |
| CVE-2022-27238 | bigbluebutton cross-site scripting | 5.4v3.1 | 0.4% | 2022-06-24 | |
| CVE-2022-23170 | SysAid Okta SSO integration XML external entity injection | 9.8v3.1 | 0.6% | 2022-06-24 | |
| CVE-2022-22502 | IBM Robotic Process Automation cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-06-24 | Fix |
| CVE-2022-22390 | IBM Db2 improper privilege management | 6.2CNA v3.0 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-22389 | IBM Db2 SQL injection | 6.5CNA v3.0 | 1.5% | 2022-06-24 | Fix |
| CVE-2022-21829 | Code injection in concrete CMS | 9.8v3.1 | 1.7% | 2022-06-24 | Fix |
| CVE-2022-21231 | deep-get-set prototype pollution | 9.8v3.1 | 1.3% | 2022-06-24 | |
| CVE-2022-20829 | Cisco Adaptive Security Appliance (ASA) Software insufficient verification of data authenticity | 9.1CNA v3.1 | 3.4% | 2022-06-24 | Exploit codeFix |
| CVE-2022-20828 | Cisco FirePOWER Software for ASA FirePOWER module command injection | 6.5CNA v3.1 | 49.3% | 2022-06-24 | MetasploitExploit codeFix |
| CVE-2022-2121 | OFFIS DCMTK null pointer dereference | 6.5NVD v3.1 | 0.8% | 2022-06-24 | Fix |
| CVE-2022-2120 | OFFIS DCMTK path traversal | 9.8v3.1 | 3.1% | 2022-06-24 | Fix |
| CVE-2022-2119 | OFFIS DCMTK path traversal | 9.8v3.1 | 3.1% | 2022-06-24 | Fix |
| CVE-2022-2105 | Secheron SEPCOS Control and Protection Relay web interface authentication vulnerability | 9.1v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-2104 | Secheron SEPCOS Control and Protection Relay sudo configuration privilege escalation | 9.8v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-2103 | Secheron SEPCOS Control and Protection Relay FTP service improper access control | 9.1v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-2102 | Secheron SEPCOS Control and Protection Relay file upload controls arbitrary file upload | 7.5NVD v3.1 | 0.9% | 2022-06-24 | Fix |
| CVE-2022-1965 | CODESYS runtime system prone to file deletion due to improper error handling | 8.1v3.1 | 1.0% | 2022-06-24 | Fix |
| CVE-2022-1747 | Dominion Voting Systems ImageCast X firmware origin validation error | 4.6v3.1 | 0.2% | 2022-06-24 | Fix |
| CVE-2022-1746 | Dominion Voting Systems ImageCast X application incorrect privilege ASSIGNMENT | 7.6v3.1 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-1745 | Dominion Voting Systems ImageCast X application authentication bypass BY SPOOFING | 6.8v3.1 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-1744 | Dominion Voting System ImageCast X application execution WITH UNNECESSARY PRIVILEGES | 6.8v3.1 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-1743 | Dominion Voting System ImageCast X application path traversal: ../FILEDIR | 6.8v3.1 | 0.4% | 2022-06-24 | Fix |
| CVE-2022-1742 | Dominion Voting Systems ImageCast X application improper PROTECTION OF ALTERNATE path | 6.8v3.1 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-1741 | Dominion Voting Systems ImageCast X application HIDDEN FUNCTIONALITY | 6.8v3.1 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-1740 | Dominion Voting Systems ImageCast X application MUTABLE ATTESTATION OR MEASUREMENT REPORTING DATA | 4.6v3.1 | 0.2% | 2022-06-24 | Fix |
| CVE-2022-1739 | Dominion Voting Systems ImageCast X firmware improper VERIFICATION OF CRYPTOGRAPHIC SIGNATURE | 6.8v3.1 | 0.1% | 2022-06-24 | Fix |
| CVE-2022-1668 | Secheron SEPCOS Control and Protection Relay SSH root account weak password requirements | 9.8v3.1 | 2.1% | 2022-06-24 | Fix |
| CVE-2022-1667 | Secheron SEPCOS Control and Protection Relay improper workflow enforcement | 7.5v3.1 | 1.2% | 2022-06-24 | Fix |
| CVE-2022-1666 | Secheron SEPCOS Control and Protection Relay insufficiently protected credentials | 6.5v3.1 | 0.8% | 2022-06-24 | Fix |
| CVE-2022-1524 | Illumina NextSeq 550Dx CLEARTEXT TRANSMISSION OF sensitive information | 5.9NVD v3.1 | 0.3% | 2022-06-24 | Fix |
| CVE-2022-1521 | Illumina NextSeq 550Dx improper access control | 9.1v3.1 | 1.1% | 2022-06-24 | Fix |
| CVE-2022-1519 | Illumina NextSeq 550Dx unrestricted file upload | 9.8v3.1 | 1.3% | 2022-06-24 | Fix |
| CVE-2022-1518 | Illumina NextSeq 550Dx improper LIMITATION OF a PATHNAME TO a RESTRICTED directory (path traversal) | 9.8v3.1 | 1.6% | 2022-06-24 | Fix |
| CVE-2022-1517 | Illumina NextSeq 550Dx execution WITH UNNECESSARY PRIVILEGES | 9.8v3.1 | 1.7% | 2022-06-24 | Fix |
| CVE-2022-34328 | SIGB PMB cross-site scripting | 6.1v3.1 | 2.3% | 2022-06-23 | Nuclei |
| CVE-2022-34305 | Apache Tomcat XSS in examples web application | 6.1NVD v3.1 | 6.7% | 2022-06-23 | NucleiFix |
| CVE-2022-34300 | tinyexr out-of-bounds read | 8.8v3.1 | 1.5% | 2022-06-23 | Fix |
| CVE-2022-34299 | Libdwarf There is a buffer over-read | 8.1v3.1 | 1.2% | 2022-06-23 | Fix |
| CVE-2022-34298 | Open Identity Platform OpenAM NT auth module vulnerability | 5.3v3.1 | 3.1% | 2022-06-23 | Exploit codeFix |
| CVE-2022-34296 | Query predicate bypass in Zalando Skipper | 7.5v3.1 | 1.1% | 2022-06-23 | Fix |
| CVE-2022-34295 | Totd insufficient randomness | 6.5v3.1 | 1.6% | 2022-06-23 | Fix |
| CVE-2022-34213 | Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text | 6.5v3.1 | 0.7% | 2022-06-23 | Fix |
| CVE-2022-34212 | Missing permission check in Jenkins vRealize Orchestrator Plugin | 5.7v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34211 | Cross-site request forgery in Jenkins vRealize Orchestrator Plugin | 6.5v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34210 | Missing permission check in Jenkins ThreadFix Plugin | 6.5v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34209 | Cross-site request forgery in Jenkins ThreadFix Plugin | 6.5v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34208 | Jenkins Beaker Builder Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34207 | Cross-site request forgery in Jenkins Beaker Builder Plugin | 6.5v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34206 | Jenkins Jianliao Notification Plugin missing authorization | 4.3v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34205 | Cross-site request forgery in Jenkins Jianliao Notification Plugin | 6.5v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34204 | Jenkins EasyQA Plugin missing authorization | 4.3v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34203 | Cross-site request forgery in Jenkins EasyQA Plugin | 8.8v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34202 | User passwords stored in plain text by Jenkins EasyQA Plugin | 6.5v3.1 | 0.7% | 2022-06-23 | Fix |
| CVE-2022-34201 | Missing permission check in Jenkins Convertigo Mobile Platform Plugin | 6.5v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34200 | Cross-site request forgery in Jenkins Convertigo Mobile Platform Plugin | 8.8v3.1 | 0.5% | 2022-06-23 | Fix |
| CVE-2022-34199 | Plaintext storage of a password in Jenkins Convertigo Mobile Platform Plugin | 6.5v3.1 | 0.7% | 2022-06-23 | Fix |
| CVE-2022-34198 | Cross-site scripting in Jenkins Stash Branch Parameter Plugin | 5.4v3.1 | 0.7% | 2022-06-23 | Fix |
| CVE-2022-34197 | Cross-site scripting in Jenkins Sauce OnDemand Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34196 | Cross-site scripting in Jenkins REST List Parameter Plugin | 5.4v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-34195 | Cross-site scripting in Jenkins Repository Connector Plugin | 5.4v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-34194 | Cross-site scripting in Jenkins Readonly Parameter Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34193 | Cross-site scripting in Jenkins Package Version plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34192 | Cross-site scripting in Jenkins Ontrack Jenkins Plugin | 5.4v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-34191 | Cross-site scripting in Jenkins NS-ND Integration Performance Publisher Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34190 | Cross-site scripting in Jenkins MAVEN Metadata Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34189 | Cross-site scripting in Jenkins Image Tag Parameter Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34188 | Cross-site scripting in Jenkins Hidden Parameter Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34187 | Cross-site scripting in Jenkins Filesystem List Parameter Plugin | 5.4v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-34186 | Cross-site scripting in Jenkins Dynamic Extended Choice Parameter Plugin | 5.4v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-34185 | Cross-site scripting in Jenkins Date Parameter Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34184 | Cross-site scripting in Jenkins CRX Content Package Deployer Plugin | 5.4v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-34183 | Cross-site scripting in Jenkins Agent Server Parameter Plugin | 5.4v3.1 | 0.6% | 2022-06-23 | Fix |
| CVE-2022-34182 | Reflected cross-site scripting in Jenkins Nested View Plugin | 6.1v3.1 | 0.9% | 2022-06-23 | Fix |
| CVE-2022-34181 | Agent-to-controller security bypass in Jenkins xUnit Plugin | 9.1v3.1 | 1.2% | 2022-06-23 | Fix |
| CVE-2022-34180 | Jenkins Embeddable Build Status Plugin incorrect authorization | 7.5v3.1 | 1.2% | 2022-06-23 | Fix |
| CVE-2022-34179 | Path traversal vulnerability in Jenkins Embeddable Build Status Plugin | 7.5v3.1 | 1.6% | 2022-06-23 | Fix |
| CVE-2022-34178 | Reflected cross-site scripting in Jenkins Embeddable Build Status Plugin | 6.1v3.1 | 0.9% | 2022-06-23 | Fix |
| CVE-2022-34177 | Arbitrary file write vulnerability in Jenkins Pipeline: Input Step Plugin | 7.5v3.1 | 1.6% | 2022-06-23 | Fix |
| CVE-2022-34176 | Cross-site scripting in Jenkins JUnit Plugin | 5.4v3.1 | 77.0% | 2022-06-23 | Fix |
| CVE-2022-34175 | Unauthorized view fragment access in Jenkins | 7.5v3.1 | 1.3% | 2022-06-23 | Fix |
| CVE-2022-34174 | Observable timing discrepancy allows determining username validity in Jenkins | 7.5v3.1 | 1.3% | 2022-06-23 | Fix |
| CVE-2022-34173 | Cross-site scripting vulnerability in Jenkins | 5.4v3.1 | 1.4% | 2022-06-23 | Fix |
| CVE-2022-34172 | Cross-site scripting vulnerability in Jenkins | 5.4v3.1 | 1.4% | 2022-06-23 | Fix |
| CVE-2022-34171 | Cross-site scripting vulnerability in Jenkins | 5.4v3.1 | 1.4% | 2022-06-23 | Fix |
| CVE-2022-34170 | Cross-site scripting vulnerability in Jenkins | 5.4v3.1 | 1.4% | 2022-06-23 | Fix |
| CVE-2022-34013 | Zhyd OneBlog server-side request forgery | 4.3v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-34012 | Zhyd OneBlog insecure permissions | 6.5v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-34011 | Zhyd OneBlog server-side request forgery | 4.3v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-33127 | Improper handling of double quotes in file name in Diffy in Windows environment | 9.8v3.1 | 1.7% | 2022-06-23 | Fix |
| CVE-2022-33124 | aiohttp denial of service | 5.5v3.1 | 0.7% | 2022-06-23 | |
| CVE-2022-33114 | jflyfox jfinal_cms SQL injection | 7.2v3.1 | 1.0% | 2022-06-23 | |
| CVE-2022-33113 | jflyfox jfinal_cms cross-site scripting in Jfinal CMS | 5.4v3.1 | 0.5% | 2022-06-23 | |
| CVE-2022-33105 | Redis streamGetEdgeID memory leak | 7.5v3.1 | 3.1% | 2022-06-23 | Fix |
| CVE-2022-33097 | 74cmsse SQL injection | 7.5v3.1 | 0.9% | 2022-06-23 | |
| CVE-2022-33096 | 74cmsse SQL injection | 7.5v3.1 | 0.9% | 2022-06-23 | |
| CVE-2022-33095 | 74cmsse SQL injection | 7.5v3.1 | 1.0% | 2022-06-23 | |
| CVE-2022-33094 | 74cmsse SQL injection | 7.5v3.1 | 0.9% | 2022-06-23 | |
| CVE-2022-33093 | 74cmsse SQL injection | 7.5v3.1 | 0.9% | 2022-06-23 | |
| CVE-2022-33092 | 74cmsse SQL injection | 7.5v3.1 | 0.9% | 2022-06-23 | |
| CVE-2022-33069 | Soliditylang Solidity reachable assertion | 5.5v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-33068 | harfbuzz component hb-ot-shape-fallback.cc integer overflow | 5.5v3.1 | 1.2% | 2022-06-23 | Fix |
| CVE-2022-33067 | Long Range ZIP denial of service | 5.5v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-33034 | GNU LibreDWG out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-23 | |
| CVE-2022-33033 | GNU LibreDWG double free | 7.8v3.1 | 0.7% | 2022-06-23 | |
| CVE-2022-33032 | GNU LibreDWG out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-23 | |
| CVE-2022-33028 | GNU LibreDWG out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-23 | |
| CVE-2022-33027 | GNU LibreDWG use-after-free | 7.8v3.1 | 0.8% | 2022-06-23 | |
| CVE-2022-33026 | GNU LibreDWG out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-23 | |
| CVE-2022-33025 | GNU LibreDWG use-after-free | 7.8v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-33024 | GNU LibreDWG reachable assertion | 7.5v3.1 | 1.0% | 2022-06-23 | |
| CVE-2022-32987 | Simple Bakery Shop Management System /bsms/?page=manage_account cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-23 | |
| CVE-2022-32554 | Pure Storage Purity//FA and Purity//FB management interface vulnerability | 9.8v3.1 | 1.3% | 2022-06-23 | Fix |
| CVE-2022-32553 | Pure Storage Purity//fa privilege escalation | 8.8v3.1 | 1.1% | 2022-06-23 | Fix |
| CVE-2022-32552 | Pure Storage Purity//fa privilege escalation | 8.8v3.1 | 1.1% | 2022-06-23 | Fix |
| CVE-2022-32536 | Bosch PRA-ES8P2S privilege escalation | 8.8CNA v3.1 | 1.0% | 2022-06-23 | Fix |
| CVE-2022-32535 | Bosch PRA-ES8P2S web server runs as root | 4.8CNA v3.1 | 0.8% | 2022-06-23 | Fix |
| CVE-2022-32534 | Bosch PRA-ES8P2S OS command injection | 8.8CNA v3.1 | 2.4% | 2022-06-23 | Fix |
| CVE-2022-32131 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32130 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32129 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32128 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32127 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32126 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32125 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-32124 | 74cmsse cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-23 | |
| CVE-2022-31787 | Ideaco Ideatms SQL injection | 9.8v3.1 | 1.4% | 2022-06-23 | |
| CVE-2022-31395 | Algo Solutions 8373 IP Zone Paging Adapter Firmware path traversal | 8.8v3.1 | 2.7% | 2022-06-23 | |
| CVE-2022-31362 | Docebo unrestricted file upload | 8.8v3.1 | 17.8% | 2022-06-23 | |
| CVE-2022-31361 | Docebo SQL injection | 9.8v3.1 | 1.4% | 2022-06-23 | |
| CVE-2022-31009 | wireapp wire-ios DoS vulnerability: Invalid Accent Colors | 5.7CNA v3.1 | 0.7% | 2022-06-23 | Fix |
| CVE-2022-29526 | Go golang.org/x/sys/unix has Incorrect privilege reporting in syscall | 5.3v3.1 | 2.8% | 2022-06-23 | Fix |
| CVE-2022-26864 | Dell CPG BIOS improper input validation | 6.3CNA v3.1 | 0.3% | 2022-06-23 | Fix |
| CVE-2022-26863 | Dell CPG BIOS improper input validation | 6.3CNA v3.1 | 0.3% | 2022-06-23 | Fix |
| CVE-2022-26862 | Dell CPG BIOS improper input validation | 6.3CNA v3.1 | 0.3% | 2022-06-23 | Fix |
| CVE-2022-22980 | SpEL injection in Spring Data MongoDB | 9.8NVD v3.1 | 17.8% | 2022-06-23 | Exploit codeFix |
| CVE-2022-22967 | Salt's PAM auth fails to reject locked accounts | 8.8v3.1 | 2.0% | 2022-06-23 | Fix |
| CVE-2022-2183 | Out-of-bounds read in Vim/Vim | 7.8NVD v3.1 | 1.5% | 2022-06-23 | Fix |
| CVE-2022-2182 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.5% | 2022-06-23 | Fix |
| CVE-2022-2175 | Buffer over-read in Vim/Vim | 7.8NVD v3.1 | 1.3% | 2022-06-23 | Fix |
| CVE-2022-2147 | Unquoted service path in Cloudflare WARP for Windows | 6.5CNA v3.1 | 0.3% | 2022-06-23 | Fix |
| CVE-2022-33070 | Protobuf-c denial of service | 5.5NVD v3.1 | 1.1% | 2022-06-22 | Fix |
| CVE-2022-32549 | Log injection in Sling logging | 5.3v3.1 | 2.3% | 2022-06-22 | Fix |
| CVE-2022-32159 | infogami openlibrary stored XSS | – | 0.8% | 2022-06-22 | |
| CVE-2022-31248 | SUSE Manager Server SUMA user enumeration via weak error message | 5.3CNA v3.1 | 1.0% | 2022-06-22 | Fix |
| CVE-2022-23081 | Openlibrary reflected XSS | – | 1.0% | 2022-06-22 | |
| CVE-2022-23080 | directus SSRF which leads to internal port scan | 5.0v3.1 | 0.8% | 2022-06-22 | Fix |
| CVE-2022-23079 | motor-admin motoradmin host header injection in the reset password functionality | – | 1.3% | 2022-06-22 | |
| CVE-2022-23078 | Habitica open redirect in login page | – | 1.1% | 2022-06-22 | |
| CVE-2022-23077 | Habitica DOM XSS in login page | 6.1v3.1 | 0.8% | 2022-06-22 | |
| CVE-2022-23058 | ERPNext stored XSS in My settings | – | 0.8% | 2022-06-22 | |
| CVE-2022-23057 | ERPNext stored XSS in My Profile | 5.4v3.1 | 0.6% | 2022-06-22 | |
| CVE-2022-23056 | ERPNext stored XSS leads to account takover | – | 0.8% | 2022-06-22 | |
| CVE-2022-23055 | ERPNext Improper user access conrol | – | 1.2% | 2022-06-22 | |
| CVE-2022-21952 | SUSE Manager Server SUMA unauthenticated remote DoS via resource exhaustion | 7.5CNA v3.1 | 1.5% | 2022-06-22 | Fix |
| CVE-2022-20651 | Cisco Adaptive Security Device Manager information disclosure | 5.5CNA v3.1 | 0.4% | 2022-06-22 | Fix |
| CVE-2022-2174 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1v3.1 | 3.0% | 2022-06-22 | NucleiFix |
| CVE-2022-34008 | Comodo Antivirus link following | 7.8v3.1 | 0.5% | 2022-06-21 | |
| CVE-2022-33995 | Devolutions Remote Desktop Manager entry attachments path traversal | 7.5v3.1 | 1.7% | 2022-06-21 | |
| CVE-2022-33139 | Siemens Cerberus DMS client-side authentication | 9.8v3.1 | 1.2% | 2022-06-21 | Fix |
| CVE-2022-33119 | NUUO Nvrsolo cross-site scripting | 6.1v3.1 | 1.6% | 2022-06-21 | Nuclei |
| CVE-2022-33056 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-21 | |
| CVE-2022-33055 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-21 | |
| CVE-2022-33049 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-21 | |
| CVE-2022-33048 | Online Railway Reservation System SQL injection | 7.2v3.1 | 0.9% | 2022-06-21 | |
| CVE-2022-32974 | Nessus arbitrary file read | 6.5NVD v3.1 | 0.7% | 2022-06-21 | |
| CVE-2022-32973 | Tenable Nessus PowerShell cmdlet checks vulnerability | 8.8NVD v3.1 | 1.4% | 2022-06-21 | |
| CVE-2022-32414 | F5 Njs use-after-free | 5.5v3.1 | 0.6% | 2022-06-21 | |
| CVE-2022-31801 | Phoenix Contact ProConOS insufficient verification of data authenticity | 9.8CNA v3.1 | 1.1% | 2022-06-21 | |
| CVE-2022-31800 | Phoenix Contact ILC1x0 insufficient verification of data authenticity | 9.8CNA v3.1 | 1.6% | 2022-06-21 | |
| CVE-2022-31786 | Ideaco Idealms cross-site scripting | 6.1v3.1 | 0.7% | 2022-06-21 | |
| CVE-2022-31478 | The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function. | 4.3v3.1 | 0.6% | 2022-06-21 | |
| CVE-2022-31374 | Contec SV-CPT-MC310 unrestricted file upload | 9.8v3.1 | 2.5% | 2022-06-21 | |
| CVE-2022-31373 | Contec SV-CPT-MC310 cross-site scripting | 6.1v3.1 | 5.1% | 2022-06-21 | Nuclei |
| CVE-2022-31307 | F5 Njs use-after-free | 5.5v3.1 | 0.6% | 2022-06-21 | |
| CVE-2022-31306 | F5 Njs use-after-free | 5.5v3.1 | 0.6% | 2022-06-21 | |
| CVE-2022-31303 | MacCMS cross-site scripting | 5.4v3.1 | 0.4% | 2022-06-21 | |
| CVE-2022-31302 | MacCMS cross-site scripting | 5.4v3.1 | 0.4% | 2022-06-21 | |
| CVE-2022-31095 | Exposure of sensitive information in discourse-chat | 4.3CNA v3.1 | 0.6% | 2022-06-21 | Fix |
| CVE-2022-30874 | Cross-site scripting in NukeViet CMS | 5.4v3.1 | 0.8% | 2022-06-21 | Fix |
| CVE-2022-29775 | Ispyconnect Ispy improper authentication | 9.8v3.1 | 60.7% | 2022-06-21 | Nuclei |
| CVE-2022-29774 | Ispyconnect Ispy path traversal | 9.8v3.1 | 5.5% | 2022-06-21 | |
| CVE-2022-27872 | Navisworks improper exception handling | 7.8v3.1 | 0.8% | 2022-06-21 | Fix |
| CVE-2022-27871 | Autodesk AutoCAD product suite resource exhaustion | 7.8v3.1 | 0.7% | 2022-06-21 | Fix |
| CVE-2022-27870 | Autodesk Advanced Steel out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-21 | Fix |
| CVE-2022-27869 | Autodesk Advanced Steel out-of-bounds read | 7.8v3.1 | 0.7% | 2022-06-21 | Fix |
| CVE-2022-27868 | Autodesk Advanced Steel use-after-free | 7.8v3.1 | 1.1% | 2022-06-21 | Fix |
| CVE-2022-27867 | Autodesk Inventor use-after-free | 7.8NVD v3.1 | 0.8% | 2022-06-21 | Fix |
| CVE-2022-26147 | Quectel Rg502q-ea OS command injection | 9.8v3.1 | 2.6% | 2022-06-21 | |
| CVE-2022-25585 | Unioncms cross-site scripting | 5.4v3.1 | 0.4% | 2022-06-21 | |
| CVE-2022-23342 | Hyland OnBase login endpoint vulnerability | 5.3v3.1 | 1.3% | 2022-06-21 | Exploit codeFix |
| CVE-2022-23171 | AtlasVPN privilege escalation | 8.8v3.1 | 0.6% | 2022-06-21 | |
| CVE-2022-23074 | Recipes stored XSS in Name parameter | – | 0.8% | 2022-06-21 | |
| CVE-2022-23073 | Recipes stored XSS in Clipboard | – | 0.8% | 2022-06-21 | |
| CVE-2022-23072 | Recipes stored XSS in Add to Cart | – | 0.8% | 2022-06-21 | |
| CVE-2022-22979 | Denial of service in Spring Cloud Function | 7.5v3.1 | 1.4% | 2022-06-21 | Fix |
| CVE-2022-2068 | OpenSSL the c_rehash script allows command injection | 7.3NVD v3.1 | 96.4% | 2022-06-21 | Fix |
| CVE-2022-1833 | AMQ Broker Operator incorrect default permissions | 8.8v3.1 | 0.8% | 2022-06-21 | Fix |
| CVE-2022-1665 | Red Hat Enterprise Linux kernel Secure Boot lockdown vulnerability | 8.2NVD v3.1 | 0.3% | 2022-06-21 | |
| CVE-2022-1596 | ABB Relion REX640 Insufficient file access control | 6.5CNA v3.1 | 0.6% | 2022-06-21 | Fix |
| CVE-2022-33913 | Mahara missing authorization | 7.5v3.1 | 1.0% | 2022-06-20 | |
| CVE-2022-32983 | NIC Knot Resolver authentication bypass by spoofing | 5.3v3.1 | 0.7% | 2022-06-20 | Fix |
| CVE-2022-31795 | Fujitsu Eternus CS8000 OS command injection | 9.8v3.1 | 3.0% | 2022-06-20 | Fix |
| CVE-2022-31794 | Fujitsu Eternus CS8000 OS command injection | 9.8v3.1 | 3.0% | 2022-06-20 | Fix |
| CVE-2022-31734 | Cisco Catalyst 2940 Series Switches cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-20 | |
| CVE-2022-31062 | glpi-project glpi-inventory-plugin unauthenticated local file inclusion | 5.3CNA v3.1 | 5.9% | 2022-06-20 | Exploit codeFix |
| CVE-2022-26669 | ASUS Control Center SQL injection | 6.5NVD v3.1 | 1.1% | 2022-06-20 | Fix |
| CVE-2022-26668 | ASUS Control Center broken access control | 6.5NVD v3.1 | 0.9% | 2022-06-20 | Fix |
| CVE-2022-25772 | Cross-site scripting vulnerability in Mautic's tracking pixel functionality | 9.6CNA v3.1 | 63.0% | 2022-06-20 | Fix |
| CVE-2022-22414 | IBM Robotic Process Automation system memory information disclosure | 5.1CNA v3.0 | 0.2% | 2022-06-20 | Fix |
| CVE-2022-22318 | IBM Curam Social Program Management insufficient session expiration | 5.9CNA v3.0 | 0.4% | 2022-06-20 | Fix |
| CVE-2022-22317 | IBM Curam Social Program Management insufficient session expiration | 5.9CNA v3.0 | 0.5% | 2022-06-20 | Fix |
| CVE-2022-21742 | Realtek USB FE/1GbE/2.5GbE/5GbE NIC Family buffer overflow | 6.5v3.1 | 0.2% | 2022-06-20 | Fix |
| CVE-2022-2134 | Allocation of resources without limits or throttling in InvenTree/InvenTree | 6.5NVD v3.1 | 0.9% | 2022-06-20 | Fix |
| CVE-2022-2130 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1v3.1 | 3.1% | 2022-06-20 | NucleiFix |
| CVE-2022-2128 | Unrestricted upload of file with dangerous type in polonel/trudesk | 9.8v3.1 | 2.8% | 2022-06-20 | Fix |
| CVE-2022-2023 | Incorrect use of privileged apis in polonel/trudesk | 9.8v3.1 | 3.1% | 2022-06-20 | Fix |
| CVE-2022-1945 | Coming Soon and Maintenance by Colorlib WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-1939 | Allow SVG Files WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 1.4% | 2022-06-20 | Fix |
| CVE-2022-1915 | WP Zillow Review Slider WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-1905 | Events Made Easy WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 37.1% | 2022-06-20 | Fix |
| CVE-2022-1896 | underConstruction WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-1895 | underConstruction WordPress plugin Construction Mode deactivation via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-20 | Fix |
| CVE-2022-1889 | Newsletter WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-1832 | CaPa Protect WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | |
| CVE-2022-1831 | WPlite WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.4% | 2022-06-20 | |
| CVE-2022-1830 | Amazon Einzeltitellinks WordPress plugin arbitrary settings update to stored XSS via CSRF | 6.5NVD v3.1 | 0.4% | 2022-06-20 | |
| CVE-2022-1829 | Inline Google Maps WordPress plugin arbitrary settings update to stored XSS via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | |
| CVE-2022-1828 | PDF24 Articles To PDF WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | |
| CVE-2022-1827 | PDF24 Article To PDF WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | |
| CVE-2022-1826 | Cross-Linker WordPress plugin arbitrary Cross-Link creation via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | |
| CVE-2022-1824 | McAfee MCPR privilege escalation | 7.9CNA v3.1 | 0.3% | 2022-06-20 | Fix |
| CVE-2022-1823 | McAfee MCPR privilege escalation | 7.9CNA v3.1 | 0.3% | 2022-06-20 | Fix |
| CVE-2022-1818 | Multi-page Toolkit WordPress plugin arbitrary settings update to stored XSS via CSRF | 5.4NVD v3.1 | 0.3% | 2022-06-20 | |
| CVE-2022-1801 | Very Simple Contact Form WordPress plugin Captcha bypass | 7.5NVD v3.1 | 1.2% | 2022-06-20 | Fix |
| CVE-2022-1720 | Buffer over-read in function grab_file_name in Vim/Vim | 7.8v3.1 | 2.2% | 2022-06-20 | Fix |
| CVE-2022-1717 | Custom Share Buttons with Floating Sidebar WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-1630 | WP-Email WordPress plugin Log deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | Fix |
| CVE-2022-1614 | WP-Email WordPress plugin Anti-Spam Protection bypass via IP spoofing | 7.5NVD v3.1 | 1.2% | 2022-06-20 | Fix |
| CVE-2022-1610 | Seamless Donations WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-20 | Fix |
| CVE-2022-1603 | Mail Subscribe List WordPress plugin arbitrary Subscribed user deletion via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-20 | Fix |
| CVE-2022-1472 | Better Find and Replace WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.3% | 2022-06-20 | Fix |
| CVE-2022-1266 | Post Grid, Slider and Carousel Ultimate WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-0663 | Print, PDF, Email by PrintFriendly WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-20 | Fix |
| CVE-2022-34006 | Southrivertech Titan FTP Server Nextgen improper privilege management | 7.8v3.1 | 0.3% | 2022-06-19 | Fix |
| CVE-2022-34005 | Southrivertech Titan FTP Server Nextgen hard-coded credentials | 9.8v3.1 | 1.7% | 2022-06-19 | Fix |
| CVE-2022-34000 | libjxl reachable assertion | 6.5v3.1 | 0.9% | 2022-06-19 | Fix |
| CVE-2022-23071 | Recipes SSRF on Import | 6.5v3.1 | 1.0% | 2022-06-19 | |
| CVE-2022-2129 | Out-of-bounds write in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-06-19 | Fix |
| CVE-2022-2126 | Out-of-bounds read in Vim/Vim | 7.8NVD v3.1 | 1.6% | 2022-06-19 | Fix |
| CVE-2022-2125 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.6% | 2022-06-19 | Fix |
| CVE-2022-2124 | Buffer over-read in Vim/Vim | 7.8NVD v3.1 | 1.6% | 2022-06-19 | Fix |
| CVE-2022-33987 | Got allows a redirect to a UNIX socket | 5.3v3.1 | 2.3% | 2022-06-18 | Fix |
| CVE-2022-33981 | Linux kernel use-after-free | 3.3v3.1 | 0.6% | 2022-06-18 | Fix |
| CVE-2022-33915 | Amazon Hotpatch race condition | 7.0v3.1 | 0.2% | 2022-06-17 | Fix |
| CVE-2022-33912 | Checkmk incorrect default permissions | 7.8v3.1 | 0.2% | 2022-06-17 | Fix |
| CVE-2022-32444 | Yuba u5CMS open redirect | 6.1v3.1 | 2.4% | 2022-06-17 | Nuclei |
| CVE-2022-32442 | Yuba u5CMS cross-site scripting | 6.1v3.1 | 0.8% | 2022-06-17 | |
| CVE-2022-32276 | Grafana improper authentication | 7.5v3.1 | 3.7% | 2022-06-17 | Fix |
| CVE-2022-31941 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.0% | 2022-06-17 | |
| CVE-2022-31876 | NETGEAR WNAP320 recreate.php vulnerability | 5.3v3.1 | 1.3% | 2022-06-17 | Fix |
| CVE-2022-31875 | TRENDnet TV-IP110WN cross-site scripting | 6.1v3.1 | 0.7% | 2022-06-17 | |
| CVE-2022-31874 | ASUS Rt-n53 command injection | 9.8v3.1 | 19.1% | 2022-06-17 | |
| CVE-2022-31873 | TRENDnet TV-IP110WN cross-site scripting | 6.1v3.1 | 0.7% | 2022-06-17 | |
| CVE-2022-31784 | Mitel Mivoice Business Express buffer overflow | 9.8v3.1 | 1.6% | 2022-06-17 | Fix |
| CVE-2022-31357 | Online Ordering System SQL injection | 9.8v3.1 | 1.0% | 2022-06-17 | |
| CVE-2022-31356 | Online Ordering System SQL injection | 9.8v3.1 | 1.0% | 2022-06-17 | |
| CVE-2022-31355 | Online Ordering System SQL injection | 9.8v3.1 | 1.0% | 2022-06-17 | |
| CVE-2022-31296 | Online Discussion Forum SQL injection | 9.8v3.1 | 2.4% | 2022-06-17 | Exploit code |
| CVE-2022-31246 | Electrum argument injection | 5.5v3.1 | 0.8% | 2022-06-17 | |
| CVE-2022-31083 | parse-community parse-server authentication bypass in Parse Server Apple Game Center auth adapter | 8.6CNA v3.1 | 0.9% | 2022-06-17 | Fix |
| CVE-2022-30607 | IBM Robotic Process Automation information disclosure | 2.7CNA v3.0 | 0.7% | 2022-06-17 | Fix |
| CVE-2022-30422 | Proietti Planet Time Enterprise hard-coded credentials | 9.8v3.1 | 4.1% | 2022-06-17 | |
| CVE-2022-29496 | Blynk-Library stack-based buffer overflow | 9.8v3.1 | 2.0% | 2022-06-17 | |
| CVE-2022-25872 | fast-string-search out-of-bounds read | 5.3v3.1 | 1.1% | 2022-06-17 | |
| CVE-2022-25871 | querymen prototype pollution | 7.5v3.1 | 1.1% | 2022-06-17 | |
| CVE-2022-25856 | github.com/argoproj/argo-events/sensors/artifacts directory traversal | 7.5v3.1 | 1.9% | 2022-06-17 | Fix |
| CVE-2022-25852 | pg-native denial of service (DoS) | 7.5v3.1 | 1.3% | 2022-06-17 | Fix |
| CVE-2022-25345 | @discordjs/opus denial of service (DoS) | 7.5v3.1 | 1.3% | 2022-06-17 | Fix |
| CVE-2022-22485 | IBM Spectrum Protect Server missing brute-force protection | 5.9CNA v3.0 | 1.1% | 2022-06-17 | Fix |
| CVE-2022-22138 | fast-string-search denial of service (DoS) | 7.5v3.1 | 1.2% | 2022-06-17 | |
| CVE-2022-21806 | Anker Eufy Homebase 2 mips_collector appsrv_server functionality use-after-free | 9.8v3.1 | 2.3% | 2022-06-17 | |
| CVE-2022-21503 | Oracle Cloud Infrastructure unauthorized access | 4.9CNA v3.1 | 0.8% | 2022-06-17 | |
| CVE-2022-21213 | mout prototype pollution | 7.5v3.1 | 2.0% | 2022-06-17 | Fix |
| CVE-2022-21184 | Bachmann Visutec Atvise License registration functionality information disclosure | 5.9v3.1 | 0.4% | 2022-06-17 | |
| CVE-2022-2113 | Cross-site scripting (XSS) Stored in InvenTree/InvenTree | 5.4NVD v3.1 | 0.8% | 2022-06-17 | Fix |
| CVE-2022-2112 | Improper neutralization of formula elements in a CSV file in InvenTree/InvenTree | 8.8NVD v3.1 | 1.3% | 2022-06-17 | Fix |
| CVE-2022-2111 | Unrestricted upload of file with dangerous type in InvenTree/InvenTree | 8.8NVD v3.1 | 1.2% | 2022-06-17 | Fix |
| CVE-2022-33756 | CA Automic Automation insufficient entropy | 7.5v3.1 | 1.2% | 2022-06-16 | Fix |
| CVE-2022-33755 | Broadcom Automic Automation Automic Agent vulnerability | 5.3v3.1 | 1.0% | 2022-06-16 | Fix |
| CVE-2022-33754 | CA Automic Automation improper input validation | 9.8v3.1 | 1.8% | 2022-06-16 | Fix |
| CVE-2022-33753 | CA Automic Automation privilege escalation | 8.8v3.1 | 0.9% | 2022-06-16 | Fix |
| CVE-2022-33752 | CA Automic Automation improper input validation | 9.8v3.1 | 1.8% | 2022-06-16 | Fix |
| CVE-2022-33751 | CA Automic Automation information disclosure | 7.5v3.1 | 1.2% | 2022-06-16 | Fix |
| CVE-2022-33750 | CA Automic Automation improper authentication | 9.8v3.1 | 1.6% | 2022-06-16 | Fix |
| CVE-2022-33739 | CA Clarity XML injection | 7.5v3.1 | 1.2% | 2022-06-16 | Fix |
| CVE-2022-32547 | ImageMagick incorrect type conversion | 7.8NVD v3.1 | 1.4% | 2022-06-16 | Fix |
| CVE-2022-32546 | ImageMagick integer overflow | 7.8NVD v3.1 | 1.4% | 2022-06-16 | Fix |
| CVE-2022-32545 | ImageMagick integer overflow | 7.8NVD v3.1 | 1.4% | 2022-06-16 | Fix |
| CVE-2022-31914 | PHPGurukul Zoo Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-16 | |
| CVE-2022-31913 | Razormist Online Discussion Forum Site cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-16 | |
| CVE-2022-31912 | Online Tutor Portal Site SQL injection | 7.2v3.1 | 0.9% | 2022-06-16 | |
| CVE-2022-31911 | Razormist Online Discussion Forum Site SQL injection | 7.2v3.1 | 0.9% | 2022-06-16 | |
| CVE-2022-31910 | Online Tutor Portal Site cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-16 | |
| CVE-2022-31908 | Student Registration And Fee Payment System SQL injection | 7.2v3.1 | 0.9% | 2022-06-16 | |
| CVE-2022-31906 | Online Fire Reporting System cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-16 | |
| CVE-2022-31849 | Mercurycom Mipc451-4 remote code execution | 8.8v3.1 | 1.9% | 2022-06-16 | |
| CVE-2022-31626 | PHP mysqlnd/pdo password buffer overflow | 7.5CNA v3.1 | 58.1% | 2022-06-16 | Exploit codeFix |
| CVE-2022-31625 | PHP freeing unallocated memory in php_pgsql_free_params | 8.1CNA v3.1 | 3.8% | 2022-06-16 | Fix |
| CVE-2022-31464 | Adaware Protect insecure permissions | 7.8v3.1 | 0.4% | 2022-06-16 | |
| CVE-2022-31384 | PHPGurukul Directory Management System SQL injection | 9.8v3.1 | 1.7% | 2022-06-16 | |
| CVE-2022-31383 | PHPGurukul Directory Management System SQL injection | 9.8v3.1 | 1.7% | 2022-06-16 | |
| CVE-2022-31382 | PHPGurukul Directory Management System SQL injection | 9.8v3.1 | 1.7% | 2022-06-16 | |
| CVE-2022-31372 | Wiris Mathtype path traversal | 7.5v3.1 | 1.3% | 2022-06-16 | |
| CVE-2022-31301 | Angtech Haraj cross-site scripting | 5.4v3.1 | 0.8% | 2022-06-16 | Exploit codeFix |
| CVE-2022-31300 | Angtech Haraj DM Section component cross-site scripting | 5.4v3.1 | 1.2% | 2022-06-16 | Exploit codeFix |
| CVE-2022-31299 | Angtech Haraj cross-site scripting | 6.1v3.1 | 5.0% | 2022-06-16 | NucleiExploit code |
| CVE-2022-31298 | Angtech Haraj ads comment section cross-site scripting | 5.4v3.1 | 1.2% | 2022-06-16 | Exploit codeFix |
| CVE-2022-31295 | Razormist Online Discussion Forum Site insecure direct object reference | 7.5v3.1 | 1.4% | 2022-06-16 | Exploit code |
| CVE-2022-31294 | Razormist Online Discussion Forum Site cross-site request forgery | 6.5v3.1 | 0.8% | 2022-06-16 | Exploit code |
| CVE-2022-31291 | GENIVI Diagnostic Log And Trace double free | 7.5v3.1 | 1.0% | 2022-06-16 | Fix |
| CVE-2022-31277 | Mi Xiaomi Lamp 1 authentication bypass by replay | 8.8v3.1 | 0.6% | 2022-06-16 | |
| CVE-2022-30670 | Adobe Escalate Privileges to Server Admin RoboHelp Server | 8.8CNA v3.0 | 1.5% | 2022-06-16 | Fix |
| CVE-2022-30665 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30664 | Adobe Animate SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.3% | 2022-06-16 | Fix |
| CVE-2022-30663 | Adobe InDesign SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30662 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30661 | Adobe InDesign Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 6.4% | 2022-06-16 | Fix |
| CVE-2022-30660 | Adobe InDesign PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30659 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30658 | Adobe InDesign Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 6.4% | 2022-06-16 | Fix |
| CVE-2022-30657 | Adobe InCopy Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.7% | 2022-06-16 | Fix |
| CVE-2022-30656 | Adobe InCopy PDF File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30655 | Adobe InCopy Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.7% | 2022-06-16 | Fix |
| CVE-2022-30654 | Adobe InCopy Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 6.4% | 2022-06-16 | Fix |
| CVE-2022-30653 | Adobe InCopy Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30652 | Adobe InCopy SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-16 | Fix |
| CVE-2022-30651 | Adobe InCopy Font Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 2.4% | 2022-06-16 | Fix |
| CVE-2022-30650 | Adobe InCopy Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 6.4% | 2022-06-16 | Fix |
| CVE-2022-30549 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-Server and V-Server Lite out-of-bounds read | 7.8v3.1 | 0.9% | 2022-06-16 | Fix |
| CVE-2022-30546 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds read | 7.8v3.1 | 0.8% | 2022-06-16 | Fix |
| CVE-2022-30538 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds write | 7.8v3.1 | 0.8% | 2022-06-16 | Fix |
| CVE-2022-30533 | Webnus Modern Events Calendar Lite cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-16 | Fix |
| CVE-2022-30329 | TRENDnet TEW-831DR OS command injection | 9.8v3.1 | 1.9% | 2022-06-16 | |
| CVE-2022-30328 | TRENDnet TEW-831DR cross-site request forgery | 6.5v3.1 | 0.4% | 2022-06-16 | |
| CVE-2022-30327 | TRENDnet TEW-831DR cross-site request forgery | 6.5v3.1 | 0.5% | 2022-06-16 | |
| CVE-2022-30326 | TRENDnet TEW-831DR cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-16 | |
| CVE-2022-30325 | TRENDnet TEW-831DR weak password requirements | 8.8v3.1 | 0.4% | 2022-06-16 | |
| CVE-2022-30023 | Tenda HG9 OS command injection | 8.8v3.1 | 39.3% | 2022-06-16 | Emerging ThreatsExploit code |
| CVE-2022-29866 | OPC Foundation Ua .net Standard Stack resource exhaustion | 7.5v3.1 | 1.6% | 2022-06-16 | Fix |
| CVE-2022-29865 | OPC Foundation Ua .net Standard Stack improper authentication | 7.5v3.1 | 1.6% | 2022-06-16 | Fix |
| CVE-2022-29864 | OPC Foundation Ua .net Standard Stack crash | 7.5v3.1 | 1.9% | 2022-06-16 | Fix |
| CVE-2022-29863 | OPC Foundation Ua .net Standard Stack resource exhaustion | 7.5v3.1 | 1.4% | 2022-06-16 | Fix |
| CVE-2022-29862 | OPC Foundation Ua .net Standard Stack infinite loop | 7.5v3.1 | 1.6% | 2022-06-16 | Fix |
| CVE-2022-27532 | Autodesk 3ds Max out-of-bounds write | 7.8v3.1 | 1.0% | 2022-06-16 | Fix |
| CVE-2022-27531 | Autodesk 3ds Max out-of-bounds read | 7.8v3.1 | 0.8% | 2022-06-16 | Fix |
| CVE-2022-27512 | Temporary disruption of the ADM license service | 5.3v3.1 | 0.9% | 2022-06-16 | Fix |
| CVE-2022-27511 | Citrix Application Delivery Management improper access control | 8.1v3.1 | 12.3% | 2022-06-16 | Fix |
| CVE-2022-26173 | Jforum cross-site request forgery | 8.8v3.1 | 0.7% | 2022-06-16 | Fix |
| CVE-2022-24562 | IObit Iotransfer missing authentication | 9.8v3.1 | 54.5% | 2022-06-16 | Exploit code |
| CVE-2022-22953 | VMware HCX information disclosure | 6.5v3.1 | 0.7% | 2022-06-16 | Fix |
| CVE-2022-2098 | Weak password requirements in kromitgmbh/titra | 9.8v3.1 | 1.0% | 2022-06-16 | Fix |
| CVE-2022-2085 | ghostscript null pointer dereference | 5.5NVD v3.1 | 1.4% | 2022-06-16 | Fix |
| CVE-2022-1642 | Swift Corelib-Foundation improper handling of unexpected data types | 7.5v3.1 | 0.6% | 2022-06-16 | Fix |
| CVE-2022-33140 | Apache NiFi improper neutralization of Command Elements in Shell User Group Provider | 8.8v3.1 | 3.7% | 2022-06-15 | Exploit codeFix |
| CVE-2022-32992 | Online Tours And Travels Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32991 | Web Based Quiz System SQL injection | 8.8v3.1 | 1.1% | 2022-06-15 | |
| CVE-2022-32550 | 1Password service connection vulnerability | 4.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-32433 | Advanced School Management System unrestricted file upload | 7.2v3.1 | 1.4% | 2022-06-15 | |
| CVE-2022-32381 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32380 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32379 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32378 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32377 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32376 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32375 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32374 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32373 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32372 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32371 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32370 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32368 | Advanced School Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32302 | Theme Park Ticketing System SQL injection | 8.8v3.1 | 1.0% | 2022-06-15 | |
| CVE-2022-32301 | YouDianCMS SQL injection | 9.8v3.1 | 1.1% | 2022-06-15 | |
| CVE-2022-32300 | YouDianCMS SQL injection | 8.8v3.1 | 1.3% | 2022-06-15 | |
| CVE-2022-32299 | YouDianCMS SQL injection | 8.8v3.1 | 1.1% | 2022-06-15 | |
| CVE-2022-32280 | XO Slider WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-32158 | Splunk Enterprise deployment servers allow client publishing of forwarder bundles | 10.0v3.1 | 1.4% | 2022-06-15 | Fix |
| CVE-2022-32157 | Splunk Enterprise deployment servers allow unauthenticated forwarder bundle downloads | 7.5v3.1 | 1.3% | 2022-06-15 | Fix |
| CVE-2022-32156 | Splunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validation | 8.1v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2022-32155 | Universal Forwarder management services allows remote login by default | 7.5v3.1 | 2.0% | 2022-06-15 | Fix |
| CVE-2022-32154 | Risky commands warnings in Splunk Enterprise Dashboards | 8.1v3.1 | 1.4% | 2022-06-15 | Fix |
| CVE-2022-32153 | Splunk Enterprise lacked TLS host name validation | 8.1v3.1 | 0.9% | 2022-06-15 | Fix |
| CVE-2022-32152 | Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default | 7.2v3.1 | 0.9% | 2022-06-15 | Fix |
| CVE-2022-32151 | Splunk Enterprise disabled TLS validation | 9.1v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2022-32101 | kkcms vlist.php SQL injection | 9.8v3.1 | 1.1% | 2022-06-15 | |
| CVE-2022-31219 | Drive Composer link following local privilege escalation | 7.3CNA v3.1 | 0.3% | 2022-06-15 | Fix |
| CVE-2022-31218 | Drive Composer link following local privilege escalation | 7.8CNA v3.1 | 0.3% | 2022-06-15 | Fix |
| CVE-2022-31217 | Drive Composer link following local privilege escalation | 7.8CNA v3.1 | 0.3% | 2022-06-15 | Fix |
| CVE-2022-31216 | Drive Composer link following local privilege escalation | 7.8CNA v3.1 | 0.3% | 2022-06-15 | Fix |
| CVE-2022-31072 | Octokit gem published with world-writable files | 2.5CNA v3.1 | 0.3% | 2022-06-15 | Fix |
| CVE-2022-31071 | Octopoller gem published with world-writable files | 2.5CNA v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-31070 | Potential Sensitive Cookie Exposure in NPM Packages @Finastra/Nestjs-proxy, @ffdc/Nestjs-proxy | 5.8CNA v3.1 | 0.6% | 2022-06-15 | Fix |
| CVE-2022-31069 | Potential Authorization Header Exposure in NPM Packages @Finastra/Nestjs-proxy, @ffdc/Nestjs-proxy | 5.8CNA v3.1 | 0.6% | 2022-06-15 | Fix |
| CVE-2022-31044 | Plaintext storage of Keys and Passwords in Rundeck and PagerDuty Process Automation | 7.5CNA v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-30669 | Adobe Illustrator out-of-bounds read vulnerability could lead to memory leak | 5.5CNA v3.1 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-30668 | Adobe Illustrator out-of-bounds read vulnerability could lead to memory leak | 5.5CNA v3.1 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-30667 | Adobe Illustrator out-of-bounds read vulnerability could lead to memory leak | 5.5CNA v3.1 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-30666 | Adobe Illustrator out-of-bounds read vulnerability could lead to memory leak | 5.5CNA v3.1 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-30649 | Adobe Illustrator out-of-bounds write could lead to arbitrary code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30648 | Adobe Illustrator Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-30647 | Adobe Illustrator Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-30193 | Microsoft AV1 Video Extension remote code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30189 | Microsoft Windows Autopilot Device Management and Enrollment client spoofing | 6.5CNA v3.1 | 2.7% | 2022-06-15 | Fix |
| CVE-2022-30188 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-30184 | Microsoft .NET and Visual Studio information disclosure | 5.5CNA v3.1 | 5.6% | 2022-06-15 | Fix |
| CVE-2022-30180 | Microsoft Azure RTOS GUIX Studio information disclosure | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30179 | Microsoft Azure RTOS GUIX Studio remote code execution | 7.8CNA v3.1 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-30178 | Microsoft Azure RTOS GUIX Studio remote code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30177 | Microsoft Azure RTOS GUIX Studio remote code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30174 | Microsoft Office remote code execution | 7.8CNA v3.1 | 3.2% | 2022-06-15 | Fix |
| CVE-2022-30173 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 2.3% | 2022-06-15 | Fix |
| CVE-2022-30172 | Microsoft Office information disclosure | 5.5CNA v3.1 | 2.7% | 2022-06-15 | Fix |
| CVE-2022-30171 | Microsoft Office information disclosure | 5.5CNA v3.1 | 2.6% | 2022-06-15 | Fix |
| CVE-2022-30168 | Microsoft Photos App remote code execution | 7.8CNA v3.1 | 2.7% | 2022-06-15 | Fix |
| CVE-2022-30167 | Microsoft AV1 Video Extension remote code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30166 | Microsoft Windows local Security Authority subsystem service elevation of privilege | 7.8CNA v3.1 | 1.4% | 2022-06-15 | Fix |
| CVE-2022-30165 | Microsoft Windows Kerberos elevation of privilege | 8.8CNA v3.1 | 4.9% | 2022-06-15 | Fix |
| CVE-2022-30164 | Microsoft Windows kerberos AppContainer security feature bypass | 7.8CNA v3.1 | 1.2% | 2022-06-15 | Fix |
| CVE-2022-30163 | Microsoft Windows Hyper-V remote code execution | 8.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-30162 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2022-30161 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-30160 | Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege | 7.8CNA v3.1 | 6.3% | 2022-06-15 | Fix |
| CVE-2022-30159 | Microsoft Office information disclosure | 5.5CNA v3.1 | 2.7% | 2022-06-15 | Fix |
| CVE-2022-30158 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 3.4% | 2022-06-15 | Fix |
| CVE-2022-30157 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 7.0% | 2022-06-15 | Fix |
| CVE-2022-30155 | Microsoft Windows Kernel denial of service | 5.5CNA v3.1 | 5.0% | 2022-06-15 | Fix |
| CVE-2022-30154 | Microsoft File Server Shadow Copy agent Service (RVSS) elevation of privilege | 5.3CNA v3.1 | 1.7% | 2022-06-15 | Fix |
| CVE-2022-30153 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-30152 | Microsoft Windows Network Address Translation (NAT) denial of service | 7.5CNA v3.1 | 2.8% | 2022-06-15 | Fix |
| CVE-2022-30151 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.0CNA v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-30150 | Microsoft Windows Defender Remote Credential Guard elevation of privilege | 7.5CNA v3.1 | 3.4% | 2022-06-15 | Fix |
| CVE-2022-30149 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 7.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-30148 | Microsoft Windows Desired State Configuration (DSC) information disclosure | 5.5CNA v3.1 | 1.2% | 2022-06-15 | Fix |
| CVE-2022-30147 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 4.5% | 2022-06-15 | Fix |
| CVE-2022-30146 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 7.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-30145 | Microsoft Windows Encrypting File System (EFS) remote code execution | 7.5CNA v3.1 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-30143 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 7.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-30142 | Microsoft Windows File History remote code execution | 7.5CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30141 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.1CNA v3.1 | 2.6% | 2022-06-15 | Fix |
| CVE-2022-30140 | Microsoft Windows iSCSI Discovery service remote code execution | 7.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-30139 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 7.5CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-30137 | Microsoft Azure Service Fabric Container elevation of privilege | 6.7CNA v3.1 | 1.1% | 2022-06-15 | Fix |
| CVE-2022-30136 | Microsoft Windows Network File System remote code execution | 9.8CNA v3.1 | 73.2% | 2022-06-15 | Exploit codeFix |
| CVE-2022-30135 | Microsoft Windows Media Center elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2022-30132 | Microsoft Windows Container Manager service elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-30131 | Microsoft Windows Container Isolation FS Filter driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2022-29453 | API KEY for Google Maps WordPress plugin CSRF vulnerability leading to Google Maps API key update | 4.3v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-29452 | Export All URLs WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-29450 | Admin Management Xtended WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-29443 | Hotel Booking WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-29442 | Private Messages For WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-06-15 | |
| CVE-2022-29441 | Private Messages For WordPress plugin Sending Messages via cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2022-06-15 | |
| CVE-2022-29440 | Promotion Slider WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-06-15 | |
| CVE-2022-29439 | Image Slider by NextCode WordPress plugin Slider deletion via cross-site request forgery (CSRF) | 4.3v3.1 | 0.4% | 2022-06-15 | |
| CVE-2022-29438 | Image Slider by NextCode WordPress plugin authenticated persistent cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-06-15 | |
| CVE-2022-29437 | Image Slider by NextCode WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-06-15 | |
| CVE-2022-29406 | DynamicWebLab Team Manager (WordPress plugin) stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-06-15 | Fix |
| CVE-2022-29149 | Microsoft Open Management Infrastructure (OMI) elevation of privilege | 7.8CNA v3.1 | 0.9% | 2022-06-15 | Fix |
| CVE-2022-29143 | Microsoft SQL server remote code execution | 7.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-29119 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-29111 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.5% | 2022-06-15 | Fix |
| CVE-2022-28850 | Adobe Bridge Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 1.9% | 2022-06-15 | Fix |
| CVE-2022-28849 | Adobe Bridge Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 2.7% | 2022-06-15 | Fix |
| CVE-2022-28848 | Adobe Bridge PCX out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-28847 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-28846 | Adobe Bridge SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.1% | 2022-06-15 | Fix |
| CVE-2022-28845 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.3% | 2022-06-15 | Fix |
| CVE-2022-28844 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.3% | 2022-06-15 | Fix |
| CVE-2022-28843 | Adobe Bridge Font out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.3% | 2022-06-15 | Fix |
| CVE-2022-28842 | Adobe Bridge Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 3.1% | 2022-06-15 | Fix |
| CVE-2022-28841 | Adobe Bridge Font out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.4% | 2022-06-15 | Fix |
| CVE-2022-28840 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.4% | 2022-06-15 | Fix |
| CVE-2022-28839 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 2.3% | 2022-06-15 | Fix |
| CVE-2022-28749 | Insufficient authorization Check during Meeting Join | 6.5CNA v3.1 | 0.6% | 2022-06-15 | Fix |
| CVE-2022-28612 | Custom Popup Builder stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-15 | |
| CVE-2022-28226 | Yandex Browser (Desktop) insecure permissions | 7.8v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-28225 | Yandex Browser (Desktop) link following | 7.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-27859 | Travel Management WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-26057 | Mint WorkBench link following local privilege escalation | 6.7CNA v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-24946 | Mitsubishi Electric MELSEC iQ-R Series R12CCPU-V improper locking | 7.5v3.1 | 1.7% | 2022-06-15 | Fix |
| CVE-2022-24436 | Intel(R) Processors observable discrepancy | 6.5v3.1 | 12.1% | 2022-06-15 | Fix |
| CVE-2022-24127 | Vanderbilt REDCap cross-site scripting | 5.4v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-24004 | Vanderbilt REDCap cross-site scripting | 5.4v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-23823 | AMD Processors observable discrepancy | 6.5v3.1 | 1.2% | 2022-06-15 | Fix |
| CVE-2022-22788 | DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients | 7.1CNA v3.1 | 1.5% | 2022-06-15 | Fix |
| CVE-2022-22444 | IBM AIX denial of service | 6.2CNA v3.0 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-22021 | Microsoft Edge (Chromium-based) remote code execution | 8.3CNA v3.1 | 3.0% | 2022-06-15 | Fix |
| CVE-2022-22018 | Microsoft HEVC Video Extensions remote code execution | 7.8CNA v3.1 | 2.2% | 2022-06-15 | Fix |
| CVE-2022-21938 | Metasys MUI Graphics XSS | 8.1CNA v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-21937 | Johnson Controls Metasys ADS/ADX/OAS server web interface cross-site scripting | 8.7CNA v3.1 | 0.6% | 2022-06-15 | Fix |
| CVE-2022-21935 | Johnson Controls Metasys ADS/ADX/OAS server unverified password change | 7.5CNA v3.1 | 1.0% | 2022-06-15 | Fix |
| CVE-2022-21180 | Intel(R) Processors improper input validation | 5.5v3.1 | 0.3% | 2022-06-15 | Fix |
| CVE-2022-21166 | Intel(R) Processors incomplete cleanup | 5.5NVD v3.1 | 6.5% | 2022-06-15 | Fix |
| CVE-2022-21127 | Intel(R) Processors incomplete cleanup | 5.5v3.1 | 5.5% | 2022-06-15 | Fix |
| CVE-2022-21125 | Intel(R) Processors incomplete cleanup | 5.5NVD v3.1 | 6.5% | 2022-06-15 | Fix |
| CVE-2022-21123 | Intel(R) Processors incomplete cleanup | 5.5NVD v3.1 | 6.9% | 2022-06-15 | Fix |
| CVE-2022-20825 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 9.8CNA v3.1 | 3.2% | 2022-06-15 | |
| CVE-2022-20819 | Cisco Identity Services Engine sensitive information disclosure | 6.5CNA v3.1 | 1.0% | 2022-06-15 | Fix |
| CVE-2022-20817 | Cisco Unified IP Phones key generation vulnerability | 7.4CNA v3.1 | 1.2% | 2022-06-15 | Fix |
| CVE-2022-20798 | Cisco Email Security Appliance and Cisco Secure Email And Web Manager External authentication bypass | 9.8CNA v3.1 | 1.5% | 2022-06-15 | Fix |
| CVE-2022-20736 | Cisco AppDynamics Controller authorization bypass | 5.3CNA v3.1 | 1.0% | 2022-06-15 | Fix |
| CVE-2022-20733 | Cisco Identity Services Engine authentication bypass | 5.3CNA v3.1 | 1.1% | 2022-06-15 | Fix |
| CVE-2022-20664 | Cisco Email Security Appliance and Cisco Secure Email And Web Manager information disclosure | 7.7CNA v3.1 | 1.0% | 2022-06-15 | Fix |
| CVE-2022-20233 | Android the Titan-M source out-of-bounds write | 6.7v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20210 | Google Android modem NAS message parser remote code execution | 9.8v3.1 | 4.3% | 2022-06-15 | Fix |
| CVE-2022-20209 | Android hme_utils.c out-of-bounds read | 7.5v3.1 | 0.8% | 2022-06-15 | Fix |
| CVE-2022-20208 | Android cppbor_parse.cpp out-of-bounds read | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20207 | Android GattServiceConfig.java insecure permissions | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20206 | Android missing authorization | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20205 | Android FileUtil.java information disclosure | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20204 | Android DevicePolicyManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20203 | Android the nanopb library privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20202 | Android ih264_resi_trans_quant_sse42.c out-of-bounds read | 6.5v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-20201 | Android InstalldNativeService.cpp out-of-bounds read | 6.7v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20200 | Android SoftApManager.java information disclosure | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20198 | Android llcp_dlc.cc out-of-bounds read | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20197 | Android Parcel.java privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20196 | Android gallery3d and photos insecure permissions | 5.0v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20195 | Android the keystore library denial of service | 5.0v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-20194 | Android ChooseLockGeneric.java insecure permissions | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20193 | Android PermissionUsageHelper.java privilege escalation | 7.3v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20192 | Android WindowManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20191 | Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20190 | Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/A | 7.5v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20188 | Product: AndroidVersions: Android kernelAndroid ID: A-207254598References: N/A | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20186 | Android mali_kbase_mem_linux.c arbitrary code execution | 7.8v3.1 | 0.5% | 2022-06-15 | Exploit codeFix |
| CVE-2022-20185 | Android TBD use-after-free | 6.7v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20184 | Product: AndroidVersions: Android kernelAndroid ID: A-209153114References: N/A | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20183 | Android faceauth_hypx.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20182 | Android pixel_loader.c information disclosure | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20181 | Product: AndroidVersions: Android kernelAndroid ID: A-210936609References: N/A | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20179 | Product: AndroidVersions: Android kernelAndroid ID: A-211683760References: N/A | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20178 | Android (TBD) out-of-bounds write | 6.7v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20177 | Product: AndroidVersions: Android kernelAndroid ID: A-209906686References: N/A | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20176 | Android sjtag-driver.c uninitialized memory use | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20175 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20174 | Android mach-gs101.c out-of-bounds read | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20173 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20172 | Android ShannonRcsService.java information disclosure | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20171 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20170 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20169 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20168 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20167 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20166 | Android kernel base drivers out-of-bounds write | 6.7v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-20165 | Android asn1.c out-of-bounds read | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20164 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20162 | Android asn1.c out-of-bounds read | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20160 | Google Android kernel vulnerability | 9.8v3.1 | 0.5% | 2022-06-15 | Fix |
| CVE-2022-20159 | Android asn1_common.c out-of-bounds read | 4.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20156 | Android GraphicBuffer.cpp arbitrary code execution | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20155 | Android ipu-core-jqs-msg-transport.c use-after-free | 7.0v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20154 | Android sock.c use-after-free | 6.4NVD v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20153 | Android rcu_segcblist.c use-after-free | 6.7NVD v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20152 | Android the TitanM chip out-of-bounds write | 6.7v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20151 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20149 | Google Android kernel vulnerability | 7.5v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-20148 | Android TBD use-after-free | 6.4v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20147 | Android nfa_dm_main.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20146 | Android FileUploadServiceImpl.java information disclosure | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20145 | Android Vpn.java privilege escalation | 9.8v3.1 | 6.5% | 2022-06-15 | Fix |
| CVE-2022-20144 | Android AvatarPhotoController.java privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20143 | Android ZenModeHelper.java denial of service | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20142 | Android GeofenceHardwareRequestParcelable.java arbitrary code execution | 7.8NVD v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-20141 | Android igmp.c use-after-free | 7.0v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20140 | Android gatt_sr.cc out-of-bounds write | 9.8v3.1 | 8.6% | 2022-06-15 | Exploit codeFix |
| CVE-2022-20138 | Android DevicePolicyManagerService.java privilege escalation | 7.8NVD v3.1 | 0.2% | 2022-06-15 | Exploit codeFix |
| CVE-2022-20137 | Android NetworkProviderSettings.java privilege escalation | 7.3v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20135 | Android GateKeeperResponse.java privilege escalation | 7.8v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-20134 | Android CallSubjectDialog.java privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20133 | Android AdapterService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20132 | Android hid-lg.c out-of-bounds read | 4.6v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-20131 | Android nci_hrcv.cc out-of-bounds read | 7.5v3.1 | 0.9% | 2022-06-15 | Fix |
| CVE-2022-20130 | Android tpdec_lib.cpp out-of-bounds write | 9.8NVD v3.1 | 8.5% | 2022-06-15 | Fix |
| CVE-2022-20129 | Android PhoneAccountRegistrar.java denial of service | 5.5v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20127 | Android ce_t4t.cc out-of-bounds write | 9.8v3.1 | 6.7% | 2022-06-15 | Fix |
| CVE-2022-20126 | Android AdapterService.java privilege escalation | 7.3v3.1 | 0.2% | 2022-06-15 | Exploit codeFix |
| CVE-2022-20125 | Android GBoard privilege escalation | 6.8v3.1 | 0.1% | 2022-06-15 | Fix |
| CVE-2022-20124 | Android DeletePackageHelper.java privilege escalation | 7.8v3.1 | 0.2% | 2022-06-15 | Fix |
| CVE-2022-20123 | Android phNxpExtns_MifareStd.cpp out-of-bounds read | 7.5v3.1 | 0.9% | 2022-06-15 | Fix |
| CVE-2022-2087 | SourceCodester Bank Management System cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-15 | |
| CVE-2022-2086 | SourceCodester Bank Management System login.php SQL injection | 8.8v3.1 | 19.0% | 2022-06-15 | |
| CVE-2022-1958 | FileCloud NTFS access control | 6.5v3.1 | 0.7% | 2022-06-15 | Fix |
| CVE-2022-1342 | Devolutions Remote Desktop Manager password masking information disclosure | 4.6v3.1 | 0.4% | 2022-06-15 | Fix |
| CVE-2022-32561 | Couchbase Server diagnostic endpoints vulnerability | 4.9v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-32559 | Couchbase Server resource exhaustion | 9.1v3.1 | 1.3% | 2022-06-14 | Fix |
| CVE-2022-32557 | Couchbase Server missing authentication | 7.5v3.1 | 1.1% | 2022-06-14 | Fix |
| CVE-2022-32367 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32366 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32365 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32364 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32363 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32362 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32359 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32358 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32355 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32354 | Product Show Room Site SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32353 | Product Show Room Site SQL injection | 7.2v3.1 | 1.1% | 2022-06-14 | |
| CVE-2022-32352 | Hospitals Patient Records Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-14 | |
| CVE-2022-32351 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32350 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32349 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32348 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32347 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32346 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 0.8% | 2022-06-14 | |
| CVE-2022-32345 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32344 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32343 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32342 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32341 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32340 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32339 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32338 | Hospitals Patient Records Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32337 | Hospitals Patient Records Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-14 | |
| CVE-2022-32336 | Fast Food Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-14 | |
| CVE-2022-32335 | Fast Food Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32334 | Fast Food Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32333 | Fast Food Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32332 | Fast Food Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32331 | Fast Food Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32330 | Fast Food Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-14 | |
| CVE-2022-32328 | Fast Food Ordering System path traversal | 9.1v3.1 | 1.2% | 2022-06-14 | |
| CVE-2022-32286 | Siemens Mendix SAML Module (Mendix 7 compatible) cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32285 | Siemens Mendix SAML Module (Mendix 7 compatible) XML external entity injection | 7.5v3.1 | 1.0% | 2022-06-14 | Fix |
| CVE-2022-32262 | Siemens SINEMA Remote Connect Server command injection | 8.8CNA v3.1 | 2.6% | 2022-06-14 | Fix |
| CVE-2022-32261 | Siemens SINEMA Remote Connect Server improper parameter handling | 5.3CNA v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-32260 | Siemens SINEMA Remote Connect Server incorrect user management | 6.5CNA v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-32259 | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The system images for installation or update of the affected application contain unit test scripts with sensitive information. An attacker could gain information about testing architecture and also tamper with | 6.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32258 | Siemens SINEMA Remote Connect Server information disclosure | 5.3CNA v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-32256 | Siemens SINEMA Remote Connect Server improper access control | 4.3CNA v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-32255 | Siemens SINEMA Remote Connect Server unauthorized access | 5.3CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-32254 | Siemens SINEMA Remote Connect Server sensitive information in log files | 4.3CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-32253 | Siemens SINEMA Remote Connect Server improper input validation | 4.9CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32252 | Siemens SINEMA Remote Connect Server insufficient verification of data authenticity | 6.5CNA v3.1 | 0.4% | 2022-06-14 | Fix |
| CVE-2022-32251 | Siemens SINEMA Remote Connect Server missing authentication | 8.8CNA v3.1 | 1.2% | 2022-06-14 | Fix |
| CVE-2022-32243 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2022-32242 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-32241 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32240 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32239 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32238 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-32237 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-32236 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-32235 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.5% | 2022-06-14 | Fix |
| CVE-2022-32230 | Microsoft Windows SMBv3 FileNormalizedNameInformation null pointer dereference | 7.5NVD v3.1 | 7.5% | 2022-06-14 | Fix |
| CVE-2022-32145 | Siemens Teamcenter Active Workspace cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-31847 | WAVLINK WN579X3 forced browsing | 7.5v3.1 | 6.6% | 2022-06-14 | Nuclei |
| CVE-2022-31846 | WAVLINK WN535G3 resource exposure | 7.5v3.1 | 7.1% | 2022-06-14 | Nuclei |
| CVE-2022-31845 | WAVLINK WN535G3 resource exposure | 7.5v3.1 | 8.4% | 2022-06-14 | Nuclei |
| CVE-2022-31619 | Siemens Teamcenter hard-coded credentials | 8.8v3.1 | 1.3% | 2022-06-14 | Fix |
| CVE-2022-31595 | SAP Financial Consolidation missing authorization | 8.8v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-31594 | SAP Adaptive Server Enterprise (ASE) improper privilege management | 6.7v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-31590 | SAP PowerDesigner Proxy unquoted search path | 7.8v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-31589 | SAP ERP, localization for CEE countries incorrect authorization | 6.5v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-31465 | Siemens Xpedition Designer VX.2.10 incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-31447 | Magicpin An XML external entity injection | 7.5v3.1 | 1.2% | 2022-06-14 | |
| CVE-2022-31446 | Tendacn AC18 OS command injection | 9.8v3.1 | 34.0% | 2022-06-14 | |
| CVE-2022-31415 | Online Fire Reporting System SQL injection | 6.5v3.1 | 0.9% | 2022-06-14 | |
| CVE-2022-31403 | Combodo iTop cross-site scripting | 6.1v3.1 | 1.8% | 2022-06-14 | Exploit code |
| CVE-2022-31311 | WAVLINK Aerial X 1200m OS command injection | 9.8v3.1 | 3.0% | 2022-06-14 | |
| CVE-2022-31309 | WAVLINK Aerial X 1200m information disclosure | 7.5v3.1 | 1.7% | 2022-06-14 | |
| CVE-2022-31308 | WAVLINK Aerial X 1200m information disclosure | 7.5v3.1 | 1.7% | 2022-06-14 | |
| CVE-2022-31273 | 17ido Topidp3000 Topsec Operating System missing brute-force protection | 9.8v3.1 | 0.9% | 2022-06-14 | |
| CVE-2022-31066 | Configuration API in EdgeXFoundry exposes message bus credentials to local unauthenticated users | 5.9CNA v3.1 | 0.3% | 2022-06-14 | Fix |
| CVE-2022-31060 | Banner topic data is exposed on login-required Discourse sites | 5.3CNA v3.1 | 1.1% | 2022-06-14 | Fix |