CVE-2022 records published in June 2022
Page two of two: records 1,001 to 1,767 of the 1,767 published in June 2022, newest first. The first page carries the figures for June 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-31059 | Discourse Calendar Event names susceptible to cross-site scripting | 6.5CNA v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-31050 | Insufficient session expiration in TYPO3 Admin tool | 6.0CNA v3.1 | 1.2% | 2022-06-14 | Fix |
| CVE-2022-31049 | typo3 cross-site scripting in Frontend Login Mailer | 5.4CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-31048 | typo3 cross-site scripting in Form Framework | 5.4CNA v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-31047 | Insertion of sensitive information into log file in TYPO3/cms-core | 5.3CNA v3.1 | 1.1% | 2022-06-14 | Fix |
| CVE-2022-31046 | Information disclosure via Export module in TYPO3 CMS | 4.3CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-30937 | Siemens EN100 Ethernet module DNP3 IP variant memory corruption | 7.5v3.1 | 1.2% | 2022-06-14 | Fix |
| CVE-2022-30931 | Employee Leaves Management System cross-site request forgery | 6.5v3.1 | 0.5% | 2022-06-14 | |
| CVE-2022-30930 | PHPGurukul Tourism Management System cross-site request forgery | 4.3v3.1 | 0.5% | 2022-06-14 | |
| CVE-2022-30903 | Nokia G-2425g-a cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-14 | |
| CVE-2022-30231 | Siemens SICAM GridEdge (Classic) resource leak | 6.9CNA v4.0 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-30230 | Siemens SICAM GridEdge (Classic) missing authentication | 9.3CNA v4.0 | 1.1% | 2022-06-14 | Fix |
| CVE-2022-30229 | Siemens SICAM GridEdge (Classic) missing authentication | 8.6CNA v4.0 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-30228 | Siemens SICAM GridEdge (Classic) origin validation error | 8.6CNA v4.0 | 0.4% | 2022-06-14 | Fix |
| CVE-2022-29925 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT uninitialized pointer access | 7.8v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-29618 | SAP NetWeaver Development Infrastructure (Design Time Repository) cross-site scripting | 6.1v3.1 | 1.1% | 2022-06-14 | Fix |
| CVE-2022-29615 | SAP NetWeaver Developer Studio (NWDS) deserialization of untrusted data | 3.4v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-29614 | SAP NetWeaver AS ABAP improper privilege management | 5.0v3.1 | 0.4% | 2022-06-14 | Fix |
| CVE-2022-29612 | SAP NetWeaver, ABAP Platform and SAP Host Agent server-side request forgery | 4.3v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-29524 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-Server and V-Server Lite out-of-bounds write | 7.8v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-29522 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT use-after-free | 7.8v3.1 | 0.8% | 2022-06-14 | Fix |
| CVE-2022-29509 | T&D Data Server and THERMO RECORDER DATA SERVER path traversal | 7.5v3.1 | 3.4% | 2022-06-14 | Fix |
| CVE-2022-29506 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT out-of-bounds read | 7.8v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-29485 | SHIRASAGI cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-14 | Fix |
| CVE-2022-29482 | DeNA Mobaoku-Auction and Flea Market App improper certificate validation | 3.7v3.1 | 0.4% | 2022-06-14 | Fix |
| CVE-2022-29241 | Known or guessable hidden files may be accessed in Jupyter Server | 7.1CNA v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-29238 | Forced browsing in Jupyter Notebook | 4.3CNA v3.1 | 1.1% | 2022-06-14 | Fix |
| CVE-2022-29034 | Siemens SINEMA Remote Connect Server cross-site scripting | 6.1CNA v3.1 | 28.7% | 2022-06-14 | Fix |
| CVE-2022-27889 | Palantir Foundry Multipass authentication service resource exhaustion | 5.3CNA v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-27668 | SAP NetWeaver and ABAP Platform incorrect authorization | 9.8v3.1 | 2.2% | 2022-06-14 | Fix |
| CVE-2022-27221 | Siemens SINEMA Remote Connect Server observable discrepancy | 5.9CNA v3.1 | 1.0% | 2022-06-14 | Fix |
| CVE-2022-27220 | Siemens SINEMA Remote Connect Server improperly implemented security check | 4.3v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-27219 | Siemens SINEMA Remote Connect Server improperly implemented security check | 4.3v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-27176 | J’s Communication RevoWorks SCVX incomplete filtering | 7.8v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-26476 | Siemens Spectrum Power 4 hard-coded credentials | 8.8v3.1 | 0.4% | 2022-06-14 | Fix |
| CVE-2022-26302 | FUJI ELECTRIC CO., LTD. / Hakko Electronics V-SFT heap-based buffer overflow | 7.8v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-25651 | Qualcomm Snapdragon integer overflow or wraparound in Automotive Connectivity | 9.8CNA v3.1 | 0.9% | 2022-06-14 | Fix |
| CVE-2022-25167 | Apache Flume vulnerable to a JNDI RCE in JMSSource | 9.8v3.1 | 5.1% | 2022-06-14 | Fix |
| CVE-2022-22103 | Qualcomm Snapdragon double free in Automotive Multimedia | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22090 | Qualcomm Snapdragon use-after-free in Audio | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22087 | Qualcomm Snapdragon buffer copy without checking size of input in Video | 7.3CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-22086 | Qualcomm Snapdragon double free in Video | 7.3CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-22085 | Qualcomm Snapdragon use of out-of-range pointer offset in Video | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22084 | Qualcomm Snapdragon stack-based buffer overflow in Video | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22083 | Qualcomm Snapdragon buffer over-read in Video | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-22082 | Qualcomm Snapdragon memory corruption in Video | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22072 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN | 7.8CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22071 | Qualcomm Multiple Chipsets use-after-free | 8.4CNA v3.1 | 0.5% | 2022-06-14 | KEVFix |
| CVE-2022-22068 | Qualcomm Snapdragon use-after-free in Neural Processing Unit | 8.4CNA v3.1 | 0.2% | 2022-06-14 | Fix |
| CVE-2022-22065 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-22064 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.6% | 2022-06-14 | Fix |
| CVE-2022-22057 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.4% | 2022-06-14 | Exploit codeFix |
| CVE-2022-21504 | Oracle Linux use-after-free | 5.5CNA v3.1 | 0.2% | 2022-06-14 | |
| CVE-2022-2079 | Cross-site scripting (XSS) Stored in nocodb/nocodb | 5.4NVD v3.1 | 0.7% | 2022-06-14 | Fix |
| CVE-2022-33175 | Powertekpdus Basic Pdu incorrect permission assignment | 9.8v3.1 | 1.7% | 2022-06-13 | |
| CVE-2022-33174 | Powertekpdus Basic Pdu incorrect authorization | 7.5NVD v3.1 | 14.1% | 2022-06-13 | NucleiExploit code |
| CVE-2022-32741 | OTRS information disclosure in Request New Password feature | 5.3CNA v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-32740 | OTRS information disclosure in the External interface | 3.5CNA v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-32739 | OTRS version number is always in the exported ICS files | 3.5CNA v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-32565 | Couchbase Server sensitive information in log files | 7.5v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2022-32564 | Couchbase Server couchbase-cli vulnerability | 7.5v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2022-32562 | Couchbase Server incorrect default permissions | 8.8v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2022-32560 | Couchbase Server missing authorization | 7.5v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2022-32558 | Couchbase Server information disclosure | 7.5v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2022-32278 | Xfce exo arbitrary code execution | 8.8v3.1 | 1.7% | 2022-06-13 | Fix |
| CVE-2022-32193 | Couchbase Server sensitive information in log files | 6.5v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-32192 | Couchbase Server information disclosure | 7.5v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-31763 | Huawei HarmonyOS null pointer and out-of-bounds array vulnerabilities in the kernel module | 5.5v3.1 | 0.2% | 2022-06-13 | Fix |
| CVE-2022-31762 | Huawei HarmonyOS input verification vulnerability in the AMS module | 7.8v3.1 | 0.2% | 2022-06-13 | Fix |
| CVE-2022-31761 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-31760 | Huawei HarmonyOS carrier-customized USSD service vulnerability | 9.1v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-31759 | Huawei HarmonyOS uninitialized pointer access vulnerability in the AppLink | 5.5v3.1 | 0.1% | 2022-06-13 | Fix |
| CVE-2022-31758 | Huawei HarmonyOS race condition vulnerability in the kernel module | 4.7v3.1 | 0.1% | 2022-06-13 | Fix |
| CVE-2022-31757 | Huawei HarmonyOS interface misuse vulnerability in the settings module | 7.5v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-31756 | Huawei HarmonyOS design defects in the fingerprint sensor module | 5.5v3.1 | 0.2% | 2022-06-13 | Fix |
| CVE-2022-31755 | Huawei HarmonyOS improper preservation of permissions vulnerability in the communications module | 5.5v3.1 | 0.2% | 2022-06-13 | Fix |
| CVE-2022-31754 | Huawei EMUI logical defects in code implementation in some products | 7.5v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-31753 | Huawei HarmonyOS format string | 7.5v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-31752 | Huawei EMUI missing authorization vulnerability in the system components | 5.5v3.1 | 0.1% | 2022-06-13 | Fix |
| CVE-2022-31751 | Huawei HarmonyOS multi-thread competition for resources in the kernel emcom module | 5.5v3.1 | 0.2% | 2022-06-13 | Fix |
| CVE-2022-31400 | HelpDeskZ /staff/setup/email-addresses cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-31398 | HelpDeskZ /staff/tools/custom-fields cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-31055 | Google improper access control in kctf | 7.5CNA v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-31054 | Uses of deprecated API can be used to cause DoS in user-facing endpoints in Argo Events | 7.5CNA v3.1 | 1.6% | 2022-06-13 | Fix |
| CVE-2022-31053 | Biscuit improper signature verification | 9.8CNA v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2022-31041 | Insufficient content-type validation for uploaded files in open-forms | 7.6CNA v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-31040 | open redirect in open-forms | 7.1CNA v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-30311 | Festo: CECC-X-M1 and Servo Press Kit YJKP OS command injection | 9.8CNA v3.1 | 2.6% | 2022-06-13 | Fix |
| CVE-2022-30310 | Festo: CECC-X-M1 and Servo Press Kit YJKP OS command injection | 9.8v3.1 | 2.6% | 2022-06-13 | Fix |
| CVE-2022-30309 | Festo: CECC-X-M1 and Servo Press Kit YJKP OS command injection | 9.8CNA v3.1 | 2.9% | 2022-06-13 | Fix |
| CVE-2022-30308 | Festo: CECC-X-M1 and Servo Press Kit YJKP OS command injection | 9.8v3.1 | 2.9% | 2022-06-13 | Fix |
| CVE-2022-29894 | Cross-site scripting in Strapi | 4.8v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-29798 | CV81-WDM FW There is a denial of service | 7.5v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-29797 | CV81-WDM FW There is a buffer overflow | 9.8v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-29525 | Rakuten Mobile Rakuten Casa hard-coded credentials | 9.8v3.1 | 1.5% | 2022-06-13 | Fix |
| CVE-2022-29455 | Elementor WordPress plugin unauthenticated DOM-based reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 23.7% | 2022-06-13 | NucleiExploit codeFix |
| CVE-2022-29257 | Electron's AutoUpdater module fails to validate certain nested components of the bundle | 6.6CNA v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-29247 | Exposure of resource to wrong sphere in Electron | 2.2CNA v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2022-29244 | NPM packing does not respect root-level ignore files in workspaces | 7.5v3.1 | 3.9% | 2022-06-13 | Fix |
| CVE-2022-28704 | Rakuten Mobile Rakuten Casa improper access control | 7.2v3.1 | 2.6% | 2022-06-13 | Fix |
| CVE-2022-28217 | SAP NetWeaver (EP Web Page Composer) server-side request forgery | 6.5v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-27231 | VeronaLabs WP Statistics cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2022-27174 | COREMOBILE Easy Blog for EC-CUBE4 cross-site request forgery | 4.3v3.1 | 0.5% | 2022-06-13 | Fix |
| CVE-2022-26834 | Rakuten Mobile Rakuten Casa improper access control | 7.5v3.1 | 1.5% | 2022-06-13 | Fix |
| CVE-2022-26041 | GENEREX SYSTEMS Computervertriebsgesellschaft mbH RCCMD path traversal | 6.5v3.1 | 1.5% | 2022-06-13 | Fix |
| CVE-2022-24077 | NAVER Cloud Explorer Beta improper privilege management | 7.8v3.1 | 0.3% | 2022-06-13 | Fix |
| CVE-2022-23169 | Amodat Mobile Application Gateway SQL injection (SQLi) | 7.2v3.1 | 0.4% | 2022-06-13 | |
| CVE-2022-23168 | Amodat Mobile Application Gateway SQL injection (SQLi) | 9.8v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-23167 | Amodat Mobile Application Gateway local file inclusion (LFI) | 9.8v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-22259 | FLMG-10 There is an improper authentication | 6.8v3.1 | 0.2% | 2022-06-13 | Fix |
| CVE-2022-2067 | SQL injection in francoisjacquet/RosarioSIS | 9.1v3.1 | 1.9% | 2022-06-13 | Fix |
| CVE-2022-2066 | Cross-site scripting (XSS) Reflected in NeoRazorX/Facturascripts | 6.1NVD v3.1 | 1.0% | 2022-06-13 | Fix |
| CVE-2022-2065 | Cross-site scripting (XSS) Stored in NeoRazorX/Facturascripts | 5.4NVD v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-2064 | Insufficient session expiration in nocodb/nocodb | 8.8NVD v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2022-2063 | Improper privilege management in nocodb/nocodb | 8.8NVD v3.1 | 1.4% | 2022-06-13 | Fix |
| CVE-2022-2062 | Generation of error message containing sensitive information in nocodb/nocodb | 7.5NVD v3.1 | 1.5% | 2022-06-13 | Fix |
| CVE-2022-2061 | Heap-based buffer overflow in hpjansson/Chafa | 3.3v3.1 | 0.4% | 2022-06-13 | Fix |
| CVE-2022-2060 | Cross-site scripting (XSS) Stored in Dolibarr/Dolibarr | 5.4NVD v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-2013 | Octopus Deploy Octopus Server private spaces Script Console vulnerability | 7.5v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-1985 | Download Manager WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2022-1969 | Mobile browser color select WordPress plugin cross-site request forgery | 8.8v3.1 | 0.8% | 2022-06-13 | |
| CVE-2022-1961 | Google Tag Manager for WordPress (GTM4WP) plugin stored cross-site scripting via content Element ID | 4.8v3.1 | 1.1% | 2022-06-13 | Fix |
| CVE-2022-1918 | ToolBar to Share WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.8% | 2022-06-13 | |
| CVE-2022-1900 | Copify WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-1822 | Zephyr Project Manager WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.1% | 2022-06-13 | Fix |
| CVE-2022-1820 | Keep Backup Daily WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.1% | 2022-06-13 | Fix |
| CVE-2022-1814 | WP Admin Style WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-1800 | Export any WordPress data to XML/CSV plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.3% | 2022-06-13 | Fix |
| CVE-2022-1793 | Private Files WordPress plugin Protection Disabling via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-13 | |
| CVE-2022-1792 | Quick Subscribe WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1791 | One Click Plugin Updater WordPress plugin arbitrary settings update via CSRF | 8.1NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1790 | New User Email Set Up WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1788 | Change Uploaded File Permissions WordPress plugin file Permission update via CSRF | 6.5NVD v3.1 | 0.8% | 2022-06-13 | |
| CVE-2022-1787 | Sideblog WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1781 | postTabs WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1780 | LaTeX for WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1779 | Auto Delete Posts WordPress plugin arbitrary settings update via CSRF | 8.1NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1777 | Filr - Secure Document Library WordPress plugin Subscriber+ AJAX Calls | 8.8NVD v3.1 | 1.3% | 2022-06-13 | Fix |
| CVE-2022-1773 | WP Athletics WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-06-13 | |
| CVE-2022-1772 | Google Places Review WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-1768 | RSVPMaker WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 12.9% | 2022-06-13 | NucleiFix |
| CVE-2022-1765 | Hot Linked Image Cacher WordPress plugin Image upload/cache abuse via CSRF | 8.8NVD v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-1764 | WP-chgFontSize WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1763 | Static Page eXtended WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1762 | iQ Block Country WordPress plugin Protection bypass due to IP spoofing | 7.5NVD v3.1 | 1.2% | 2022-06-13 | Fix |
| CVE-2022-1761 | Peter’s Collaboration E-mails WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1759 | RB Internal Links WordPress plugin stored cross-site scripting via CSRF | 5.4NVD v3.1 | 0.3% | 2022-06-13 | |
| CVE-2022-1758 | Genki Pre-Publish Reminder WordPress plugin stored XSS and RCE via CSRF | 8.8NVD v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-1756 | Newsletter WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.9% | 2022-06-13 | NucleiFix |
| CVE-2022-1750 | Sticky Popup WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1749 | WPMK Ajax Finder WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.8% | 2022-06-13 | |
| CVE-2022-1724 | Simple Membership WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.8% | 2022-06-13 | NucleiFix |
| CVE-2022-1710 | Appointment Hour Booking WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-1707 | Google Tag Manager for WordPress WordPress plugin reflected cross-site scripting | 6.1v3.1 | 90.2% | 2022-06-13 | Fix |
| CVE-2022-1694 | Useful Banner Manager WordPress plugin Modify banners via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1659 | JupiterX Core WordPress plugin information disclosure, modification, and denial of service | 7.3v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-1658 | Jupiter WordPress theme authenticated arbitrary plugin deletion | 5.4v3.1 | 0.7% | 2022-06-13 | Fix |
| CVE-2022-1657 | Artbees JupiterX control panel Ajax action path traversal | 8.8v3.1 | 1.6% | 2022-06-13 | Fix |
| CVE-2022-1656 | Artbees JupiterX Ajax API actions improper access control | 5.4v3.1 | 0.5% | 2022-06-13 | Fix |
| CVE-2022-1654 | Artbees Jupiter theme template uninstall AJAX action privilege escalation | 8.8v3.1 | 1.6% | 2022-06-13 | Fix |
| CVE-2022-1624 | Latest Tweets Widget WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1612 | Webriti SMTP Mail WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1608 | OnePress Social Locker WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1605 | Email Users WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-13 | |
| CVE-2022-1604 | MailerLite WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-1595 | HC Custom WP-Admin URL WordPress plugin unauthenticated Secret URL disclosure | 5.3NVD v3.1 | 2.9% | 2022-06-13 | Nuclei |
| CVE-2022-1594 | HC Custom WP-Admin URL WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-13 | |
| CVE-2022-1549 | WP Athletics WordPress plugin Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-1532 | Themify - WooCommerce Product Filter WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-1412 | Log WP_Mail WordPress plugin email Logs Publicly Accessible | 7.5NVD v3.1 | 1.5% | 2022-06-13 | |
| CVE-2022-1336 | Carousel CK WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-13 | |
| CVE-2022-1335 | Slideshow CK WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-1208 | Ultimate Member WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-06-13 | Fix |
| CVE-2022-1202 | WP-CRM WordPress plugin CSV injection | 7.8NVD v3.1 | 1.0% | 2022-06-13 | |
| CVE-2022-0885 | Member Hero AJAX action missing authorization | 9.8NVD v3.1 | 9.4% | 2022-06-13 | Nuclei |
| CVE-2022-0863 | WP SVG Icons WordPress plugin Admin+ remote code execution (RCE) | 7.2NVD v3.1 | 23.8% | 2022-06-13 | |
| CVE-2022-0827 | Bestbooks WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 9.1% | 2022-06-13 | Nuclei |
| CVE-2022-0786 | KiviCare WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 13.3% | 2022-06-13 | NucleiFix |
| CVE-2022-0745 | Like Button Rating WordPress plugin arbitrary e-mail Sending | 6.5NVD v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-0626 | Advanced Admin Search WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-06-13 | Fix |
| CVE-2022-0209 | Mitsol Social Post Feed WordPress plugin Admin+ stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-13 | Fix |
| CVE-2022-2054 | Code injection in Nuitka/Nuitka | 7.8v3.1 | 0.5% | 2022-06-12 | Fix |
| CVE-2022-30780 | lighttpd incorrect calculation | 7.5NVD v3.1 | 57.2% | 2022-06-11 | Exploit codeFix |
| CVE-2022-32981 | Linux kernel buffer overflow | 7.8v3.1 | 1.0% | 2022-06-10 | Exploit codeFix |
| CVE-2022-32978 | JPEG Libjpeg reachable assertion | 6.5v3.1 | 0.9% | 2022-06-10 | Fix |
| CVE-2022-32563 | Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication | 9.8v3.1 | 0.8% | 2022-06-10 | Fix |
| CVE-2022-31788 | Ideaco Idealms SQL injection | 9.8v3.1 | 14.3% | 2022-06-10 | |
| CVE-2022-31769 | IBM Spectrum Copy Data Management information disclosure | 5.3CNA v3.0 | 1.2% | 2022-06-10 | Fix |
| CVE-2022-31402 | Combodo iTop cross-site scripting | 6.1v3.1 | 2.3% | 2022-06-10 | Exploit code |
| CVE-2022-31287 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.7% | 2022-06-10 | |
| CVE-2022-31285 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.7% | 2022-06-10 | |
| CVE-2022-31282 | Axiosys Bento4 MP4Dump utility vulnerability | 5.5v3.1 | 0.7% | 2022-06-10 | |
| CVE-2022-31043 | guzzle failure to strip the Cookie header on change in host or HTTP downgrade | 7.5CNA v3.1 | 1.9% | 2022-06-10 | Fix |
| CVE-2022-31042 | Failure to strip the Cookie header on change in host or HTTP downgrade in Guzzle | 7.5CNA v3.1 | 1.9% | 2022-06-10 | Fix |
| CVE-2022-30611 | IBM Spectrum Copy Data Management cross-site scripting | 5.4CNA v3.0 | 0.7% | 2022-06-10 | Fix |
| CVE-2022-30610 | IBM Spectrum Copy Data Management improper privilege management | 4.4CNA v3.0 | 0.6% | 2022-06-10 | Fix |
| CVE-2022-29948 | Lepin Ep-kp001 authentication bypass | 4.6v3.1 | 0.5% | 2022-06-10 | |
| CVE-2022-29095 | Dell SupportAssist Consumer cross-site scripting | 8.3CNA v3.1 | 1.2% | 2022-06-10 | Fix |
| CVE-2022-29094 | Dell SupportAssist Client Consumer path traversal | 7.1CNA v3.1 | 0.2% | 2022-06-10 | Fix |
| CVE-2022-29093 | Dell SupportAssist Client Commercial path traversal | 7.1CNA v3.1 | 0.2% | 2022-06-10 | Fix |
| CVE-2022-29092 | Dell SupportAssist Consumer uncontrolled search path | 7.8CNA v3.1 | 0.4% | 2022-06-10 | Fix |
| CVE-2022-27502 | Realvnc VNC Server local privilege escalation | 7.8v3.1 | 0.7% | 2022-06-10 | Exploit codeFix |
| CVE-2022-25863 | gatsby-plugin-mdx deserialization of untrusted data | 9.8NVD v3.1 | 2.0% | 2022-06-10 | Fix |
| CVE-2022-25851 | jpeg-js denial of service (DoS) | 7.5v3.1 | 1.9% | 2022-06-10 | Fix |
| CVE-2022-25845 | Deserialization of untrusted data | 9.8v3.1 | 18.9% | 2022-06-10 | Exploit codeFix |
| CVE-2022-24429 | Code injection via SVG file in convert-svg-core | 7.8v3.1 | 0.9% | 2022-06-10 | Fix |
| CVE-2022-24376 | git-promise command injection | 9.8v3.1 | 3.1% | 2022-06-10 | |
| CVE-2022-24278 | Directory traversal in convert-svg-core | 9.8v3.1 | 2.2% | 2022-06-10 | Fix |
| CVE-2022-22479 | IBM Spectrum Copy Data Management cross-site request forgery | 5.0CNA v3.0 | 0.3% | 2022-06-10 | Fix |
| CVE-2022-22426 | IBM Spectrum Copy Data Management authentication bypass | 2.9CNA v3.0 | 0.2% | 2022-06-10 | Fix |
| CVE-2022-21211 | posix denial of service (DoS) | 7.5v3.1 | 1.0% | 2022-06-10 | |
| CVE-2022-2042 | vim/vim GitHub repository use-after-free | 7.8NVD v3.1 | 1.5% | 2022-06-10 | Fix |
| CVE-2022-32272 | OPSWAT Metadefender improper privilege management | 9.8v3.1 | 9.1% | 2022-06-09 | Exploit codeFix |
| CVE-2022-32195 | Open Edx cross-site scripting | 6.1v3.1 | 2.4% | 2022-06-09 | NucleiFix |
| CVE-2022-31830 | Baidu Kity Minder server-side request forgery in kityminder | 9.1v3.1 | 16.2% | 2022-06-09 | |
| CVE-2022-31827 | Monsta FTP server-side request forgery | 9.1v3.1 | 21.7% | 2022-06-09 | Emerging Threats |
| CVE-2022-31813 | Apache HTTP Server mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism | 9.8NVD v3.1 | 3.5% | 2022-06-09 | Fix |
| CVE-2022-31649 | ownCloud resource exposure | 7.5v3.1 | 1.3% | 2022-06-09 | Fix |
| CVE-2022-31496 | LibreHealth EHR manage_site_files.php vulnerability | 8.8v3.1 | 2.0% | 2022-06-09 | Fix |
| CVE-2022-31393 | jizhiCMS server-side request forgery | 9.1v3.1 | 1.0% | 2022-06-09 | |
| CVE-2022-31390 | jizhiCMS server-side request forgery | 9.1v3.1 | 1.0% | 2022-06-09 | |
| CVE-2022-31386 | Nbnbk getFileBinary function server-side request forgery | 9.1v3.1 | 1.0% | 2022-06-09 | |
| CVE-2022-31214 | Firejail improper privilege management | 7.8v3.1 | 0.4% | 2022-06-09 | Fix |
| CVE-2022-31051 | Exposure of sensitive information to an unauthorized actor in semantic-release | 4.4CNA v3.1 | 1.7% | 2022-06-09 | Fix |
| CVE-2022-31045 | Ill-formed headers may lead to unexpected behavior in Istio | 7.0CNA v3.1 | 1.2% | 2022-06-09 | Fix |
| CVE-2022-31038 | XSS vulnerability in repository issue list in Gogs | 5.4CNA v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-31033 | Authorization header leak in rubygem Mechanize | 5.9CNA v3.1 | 1.5% | 2022-06-09 | Fix |
| CVE-2022-31031 | pjsip pjproject potential stack buffer overflow when parsing message as a STUN client | 9.8CNA v3.1 | 2.0% | 2022-06-09 | Fix |
| CVE-2022-31030 | containerd CRI plugin: Host memory exhaustion through ExecSync | 5.5CNA v3.1 | 0.4% | 2022-06-09 | Fix |
| CVE-2022-31027 | Authorization bypass through user-controlled key when using CILogonOAuthenticator in oauthenticator | 4.2CNA v3.1 | 0.5% | 2022-06-09 | Fix |
| CVE-2022-31026 | GitHub Trilogy authentication packet parser vulnerability | 5.9CNA v3.1 | 1.1% | 2022-06-09 | Fix |
| CVE-2022-31019 | DoS vulnerability in URLEncodedFormDecoder in Vapor | 7.5CNA v3.1 | 1.6% | 2022-06-09 | Fix |
| CVE-2022-30898 | chshcms Cscms A cross-site request forgery | 6.5v3.1 | 0.6% | 2022-06-09 | |
| CVE-2022-30760 | Ihb-eg FN2WEB An insecure direct object reference | 4.3v3.1 | 1.0% | 2022-06-09 | Fix |
| CVE-2022-30703 | Trend Micro Security (Consumer) exposed dangerous method | 7.8v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-30702 | Trend Micro Security (Consumer) out-of-bounds read | 5.5v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-30556 | Apache HTTP Server information disclosure in mod_lua with websockets | 7.5v3.1 | 5.3% | 2022-06-09 | Fix |
| CVE-2022-30522 | Apache HTTP Server mod_sed denial of service | 7.5v3.1 | 90.4% | 2022-06-09 | Fix |
| CVE-2022-30075 | TP-Link Archer AX50 improper input validation | 8.8v3.1 | 34.2% | 2022-06-09 | Exploit code |
| CVE-2022-29404 | Apache HTTP Server denial of service in mod_lua r:parsebody | 7.5v3.1 | 5.7% | 2022-06-09 | Fix |
| CVE-2022-29255 | Multiple evaluation of contract address in call in vyper | 8.2CNA v3.1 | 1.3% | 2022-06-09 | Fix |
| CVE-2022-29254 | Failed payment recorded has completed in silverstripe/silverstripe-omnipay | 3.7CNA v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-29250 | SQL injection in GLPI | 8.1CNA v3.1 | 0.8% | 2022-06-09 | Fix |
| CVE-2022-29228 | Reachable assertion in Envoy | 7.5CNA v3.1 | 1.2% | 2022-06-09 | Fix |
| CVE-2022-29227 | Envoy internal redirect handling use-after-free | 7.5CNA v3.1 | 1.2% | 2022-06-09 | Fix |
| CVE-2022-29226 | Trivial authentication bypass in Envoy | 10.0CNA v3.1 | 1.3% | 2022-06-09 | Fix |
| CVE-2022-29225 | Zip bomb vulnerability in Envoy | 7.5CNA v3.1 | 1.6% | 2022-06-09 | Fix |
| CVE-2022-29224 | Segmentation fault leading to crash in Envoy | 5.9CNA v3.1 | 1.0% | 2022-06-09 | Fix |
| CVE-2022-29014 | Razer Sila local file inclusion | 7.5v3.1 | 11.8% | 2022-06-09 | NucleiFix |
| CVE-2022-29013 | Razer Sila command parameter command injection | 9.8v3.1 | 77.1% | 2022-06-09 | NucleiFix |
| CVE-2022-28615 | Apache HTTP Server read beyond bounds in ap_strcmp_match | 9.1v3.1 | 5.7% | 2022-06-09 | Fix |
| CVE-2022-28614 | Apache HTTP Server read beyond bounds via ap_rwrite | 5.3v3.1 | 5.0% | 2022-06-09 | Fix |
| CVE-2022-28330 | Apache HTTP Server read beyond bounds in mod_isapi | 5.3v3.1 | 3.8% | 2022-06-09 | Fix |
| CVE-2022-26377 | Apache HTTP Server mod_proxy_ajp: Possible request smuggling | 7.5v3.1 | 20.2% | 2022-06-09 | Exploit codeFix |
| CVE-2022-26364 | Xen page type reference counting vulnerability | 6.7v3.1 | 0.5% | 2022-06-09 | Fix |
| CVE-2022-26363 | Xen page type reference counting vulnerability | 6.7v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-26362 | Xen page type reference counting race condition | 6.4v3.1 | 0.4% | 2022-06-09 | Fix |
| CVE-2022-25807 | IGEL Universal Management Suite hard-coded credentials | 5.5v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-25806 | IGEL Universal Management Suite hard-coded credentials | 8.8v3.1 | 1.0% | 2022-06-09 | Fix |
| CVE-2022-25805 | IGEL Universal Management Suite cleartext transmission of sensitive information | 6.5v3.1 | 0.6% | 2022-06-09 | Fix |
| CVE-2022-25804 | IGEL Universal Management Suite incorrect default permissions | 5.5v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-25153 | ITarian local privilege escalation in Endpoint Manager agent on Windows | 7.8v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-25152 | ITarian agent procedure approval process vulnerability | 8.8NVD v3.1 | 1.8% | 2022-06-09 | Fix |
| CVE-2022-25151 | ITarian Session cookie not protected by HttpOnly flag | 7.5v3.1 | 0.8% | 2022-06-09 | Fix |
| CVE-2022-24969 | Server-side request forgery in Apache Dubbo | 6.1v3.1 | 1.8% | 2022-06-09 | Fix |
| CVE-2022-24896 | Tracker report renderer and chart widgets leak information in Tuleap | 4.3CNA v3.1 | 0.8% | 2022-06-09 | Fix |
| CVE-2022-24876 | Stored cross-site scrpting in GLPI's Kanban | 5.4CNA v3.1 | 0.5% | 2022-06-09 | Fix |
| CVE-2022-24840 | Improper limitation of a pathname to a restricted directory (path traversal) in django-s3file | 9.1CNA v3.1 | 2.0% | 2022-06-09 | Fix |
| CVE-2022-23138 | MF297D insufficient randomness | 7.5v3.1 | 0.9% | 2022-06-09 | Fix |
| CVE-2022-21499 | Oracle Linux out-of-bounds write | 6.7CNA v3.1 | 0.6% | 2022-06-09 | Fix |
| CVE-2022-2037 | Excessive Attack Surface in ToolJet/ToolJet | 8.0NVD v3.1 | 1.1% | 2022-06-09 | Fix |
| CVE-2022-2036 | Cross-site scripting (XSS) Stored in francoisjacquet/RosarioSIS | 5.4NVD v3.1 | 0.9% | 2022-06-09 | Fix |
| CVE-2022-2035 | Rustici Software SCORM Engine reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-2029 | Cross-site scripting (XSS) DOM in kromitgmbh/titra | 5.4NVD v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-2028 | Cross-site scripting (XSS) Generic in kromitgmbh/titra | 5.4NVD v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-2027 | Improper neutralization of formula elements in a CSV file in kromitgmbh/titra | 8.0v3.1 | 1.2% | 2022-06-09 | Fix |
| CVE-2022-2026 | Cross-site scripting (XSS) Stored in kromitgmbh/titra | 5.4NVD v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-2020 | SourceCodester Prison Management System System Name cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-09 | |
| CVE-2022-2019 | SourceCodester Prison Management System New User Creation improper authorization | 7.5v3.1 | 0.8% | 2022-06-09 | |
| CVE-2022-2018 | SourceCodester Prison Management System Inmate SQL injection | 7.2v3.1 | 0.8% | 2022-06-09 | |
| CVE-2022-2017 | SourceCodester Prison Management System Visit view_visit.php SQL injection | 7.2v3.1 | 0.7% | 2022-06-09 | |
| CVE-2022-2016 | Cross-site scripting (XSS) Reflected in NeoRazorX/Facturascripts | 5.4v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-2015 | Cross-site scripting (XSS) Stored in jgraph/drawio | 5.4v3.1 | 0.6% | 2022-06-09 | Fix |
| CVE-2022-2014 | Code injection in jgraph/drawio | 5.4NVD v3.1 | 0.7% | 2022-06-09 | Fix |
| CVE-2022-2000 | Out-of-bounds write in Vim/Vim | 7.8v3.1 | 1.6% | 2022-06-09 | Fix |
| CVE-2022-1998 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2022-06-09 | Fix |
| CVE-2022-1993 | Path traversal in gogs/gogs | 8.1v3.1 | 36.3% | 2022-06-09 | Fix |
| CVE-2022-1992 | Path traversal in gogs/gogs | 9.1v3.1 | 2.3% | 2022-06-09 | Fix |
| CVE-2022-1986 | OS command injection in gogs/gogs | 9.8v3.1 | 4.5% | 2022-06-09 | Fix |
| CVE-2022-0823 | Zyxel GS1200 series firmware An improper interaction frequency control | 6.2CNA v3.1 | 0.2% | 2022-06-09 | Fix |
| CVE-2022-32273 | OPSWAT Metadefender returned messages observable discrepancy | 4.3v3.1 | 0.8% | 2022-06-08 | Fix |
| CVE-2022-31497 | Librehealth Ehr cross-site scripting | 6.1v3.1 | 0.9% | 2022-06-08 | Fix |
| CVE-2022-31325 | ChurchCRM There is a SQL injection | 7.2v3.1 | 5.1% | 2022-06-08 | Exploit code |
| CVE-2022-31313 | Backdoor in Api-res-py | 9.8v3.1 | 1.8% | 2022-06-08 | |
| CVE-2022-30926 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30925 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30924 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30923 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30922 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30921 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30920 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30919 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30918 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30917 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30916 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30915 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30914 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30913 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30912 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30910 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30909 | H3C Magic R100 out-of-bounds write | 9.8v3.1 | 1.7% | 2022-06-08 | |
| CVE-2022-30899 | PartKeepr cross-site scripting | 4.8v3.1 | 0.5% | 2022-06-08 | |
| CVE-2022-30882 | Pyanxdns hidden functionality | 9.8v3.1 | 2.3% | 2022-06-08 | |
| CVE-2022-30877 | keep hidden functionality | 9.8v3.1 | 2.5% | 2022-06-08 | Fix |
| CVE-2022-30875 | Cross-site scripting in Dolibarr | 6.1v3.1 | 0.7% | 2022-06-08 | Fix |
| CVE-2022-30790 | denx U-Boot out-of-bounds write | 7.8v3.1 | 0.6% | 2022-06-08 | Fix |
| CVE-2022-30552 | denx U-Boot buffer overflow | 5.5v3.1 | 0.4% | 2022-06-08 | Fix |
| CVE-2022-28387 | Verbatim Fingerprint Secure Portable Hard Drive unauthorized access | 4.6v3.1 | 0.5% | 2022-06-08 | |
| CVE-2022-28386 | Verbatim Keypad Secure USB 3.2 Gen 1 missing brute-force protection | 4.6v3.1 | 0.5% | 2022-06-08 | |
| CVE-2022-28385 | Verbatim Fingerprint Secure Portable Hard Drive insufficient verification of data authenticity | 4.6v3.1 | 0.3% | 2022-06-08 | |
| CVE-2022-28384 | Verbatim Store 'n' GO Secure Portable Hdd missing brute-force protection | 5.5v3.1 | 0.4% | 2022-06-08 | |
| CVE-2022-28383 | Verbatim Fingerprint Secure Portable Hard Drive improper input validation | 6.8v3.1 | 0.6% | 2022-06-08 | |
| CVE-2022-28382 | Verbatim Fingerprint Secure Portable Hard Drive weak cryptographic algorithm | 7.5v3.1 | 1.8% | 2022-06-08 | |
| CVE-2022-24296 | Air Conditioning System G-150AD weak cryptographic algorithm | 7.5v3.1 | 1.1% | 2022-06-08 | Fix |
| CVE-2022-24065 | cookiecutter command injection | 9.8v3.1 | 4.5% | 2022-06-08 | Fix |
| CVE-2022-21122 | metacalc arbitrary code execution | 9.8v3.1 | 2.5% | 2022-06-08 | Fix |
| CVE-2022-1997 | Cross-site scripting (XSS) Stored in francoisjacquet/RosarioSIS | 5.4NVD v3.1 | 0.7% | 2022-06-08 | Fix |
| CVE-2022-1996 | Authorization bypass through user-controlled key in emicklei/Go-restful | 9.1v3.1 | 3.1% | 2022-06-08 | Fix |
| CVE-2022-1712 | LiveSync for WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-08 | |
| CVE-2022-1709 | Throws SPAM Away WordPress plugin comment deletion via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-08 | Fix |
| CVE-2022-1703 | SonicWall SMA100 improper neutralization | 8.8v3.1 | 12.3% | 2022-06-08 | Fix |
| CVE-2022-1695 | WP Simple Adsense Insertion WordPress plugin Inject ads and javascript via CSRF | 4.3NVD v3.1 | 0.4% | 2022-06-08 | Fix |
| CVE-2022-1692 | CP Image Store with Slideshow WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 10.6% | 2022-06-08 | NucleiFix |
| CVE-2022-1691 | Realty Workstation WordPress plugin Agent SQLi | 4.9NVD v3.1 | 1.0% | 2022-06-08 | Fix |
| CVE-2022-1690 | Note Press WordPress plugin Admin+ SQLi via Bulk actions | 2.7NVD v3.1 | 0.8% | 2022-06-08 | |
| CVE-2022-1689 | Note Press WordPress plugin Admin+ SQLi via update | 2.7NVD v3.1 | 0.8% | 2022-06-08 | |
| CVE-2022-1688 | Note Press WordPress plugin Admin+ SQLi via id | 2.7NVD v3.1 | 0.8% | 2022-06-08 | |
| CVE-2022-1687 | Logo Slider WordPress plugin Admin+ SQLi | 2.7NVD v3.1 | 0.8% | 2022-06-08 | |
| CVE-2022-1686 | Five Minute Webshop WordPress plugin Admin+ SQLi via id | 2.7NVD v3.1 | 0.8% | 2022-06-08 | Fix |
| CVE-2022-1685 | Five Minute Webshop WordPress plugin Admin+ SQLi via orderby | 4.9NVD v3.1 | 1.0% | 2022-06-08 | Fix |
| CVE-2022-1684 | Cube Slider WordPress plugin Admin+ SQLi | 2.7NVD v3.1 | 0.8% | 2022-06-08 | |
| CVE-2022-1683 | amtyThumb WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 1.5% | 2022-06-08 | |
| CVE-2022-1673 | WooCommerce Green Wallet Gateway WordPress plugin reflected cross-site scripting in checkout page | 6.1NVD v3.1 | 0.8% | 2022-06-08 | Fix |
| CVE-2022-1647 | FormCraft Basic WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-08 | Fix |
| CVE-2022-1598 | WPQA WordPress plugin unauthenticated Private Message disclosure | 5.3NVD v3.1 | 5.4% | 2022-06-08 | NucleiExploit codeFix |
| CVE-2022-1597 | WPQA WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 3.0% | 2022-06-08 | NucleiExploit codeFix |
| CVE-2022-1577 | Database Backup for WordPress plugin arbitrary Schedule settings update via CSRF | 5.4NVD v3.1 | 0.4% | 2022-06-08 | Fix |
| CVE-2022-1570 | Files Download Delay WordPress plugin Subscriber+ settings reset | 6.5NVD v3.1 | 0.4% | 2022-06-08 | Fix |
| CVE-2022-1569 | Pieforms Drag and Drop Builder stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-08 | Fix |
| CVE-2022-1541 | Video Slider - Slider Carousel WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-08 | Fix |
| CVE-2022-1506 | WP Born Babies WordPress plugin Contributor+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-06-08 | |
| CVE-2022-1469 | FiboSearch WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-06-08 | Fix |
| CVE-2022-1424 | Ask Me WordPress theme Multiple CSRF in AJAX actions | 6.5NVD v3.1 | 0.5% | 2022-06-08 | Fix |
| CVE-2022-1422 | Discy WordPress theme Restore Default settings via CSRF | 6.5NVD v3.1 | 0.5% | 2022-06-08 | Fix |
| CVE-2022-1421 | Discy WordPress theme settings update via CSRF | 4.3NVD v3.1 | 1.3% | 2022-06-08 | Exploit codeFix |
| CVE-2022-1394 | Photo Gallery WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 1.0% | 2022-06-08 | Fix |
| CVE-2022-1241 | Ask Me WordPress theme reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-06-08 | Fix |
| CVE-2022-1005 | WP Statistics WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-06-08 | Fix |
| CVE-2022-0788 | WP Fundraising Donation and Crowdfunding Platform WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 7.9% | 2022-06-08 | NucleiFix |
| CVE-2022-0779 | User Meta WordPress plugin Subscriber+ local file enumeration via path traversal | 6.5NVD v3.1 | 2.3% | 2022-06-08 | Fix |
| CVE-2022-31495 | Librehealth Ehr cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-07 | Fix |
| CVE-2022-31470 | Axigen Mobile Webmail cross-site scripting | 6.1v3.1 | 52.1% | 2022-06-07 | NucleiExploit codeFix |
| CVE-2022-31028 | Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO | 7.5CNA v3.1 | 3.0% | 2022-06-07 | Fix |
| CVE-2022-31025 | Invite bypasses user approval in Discourse | 2.6CNA v3.1 | 1.0% | 2022-06-07 | Fix |
| CVE-2022-30749 | Samsung Mobile SmartThings improper access control | 3.3CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30748 | Samsung Members dynamic broadcast receiver vulnerability | 4.0CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30747 | Samsung Mobile SmartThings incorrect default permissions | 5.5CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30746 | Samsung Mobile SmartThings improper authorization | 7.5CNA v3.1 | 0.9% | 2022-06-07 | Fix |
| CVE-2022-30745 | Samsung Mobile Quick Share improper access control | 4.0CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30744 | Samsung Mobile Samsung Kies KiesWrapper DLL hijacking | 6.2CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30743 | Samsung Mobile Samsung Account improper privilege management | 5.3CNA v3.1 | 0.4% | 2022-06-07 | Fix |
| CVE-2022-30742 | Samsung Mobile Find My Mobile FmmExtraOperation information disclosure | 3.3CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30741 | Samsung Mobile Find My Mobile SimChangeAlertManger information disclosure | 3.3CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30740 | Samsung Mobile Samsung Internet information disclosure | 4.1CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30739 | Samsung Mobile Samsung Account improper privilege management | 4.0CNA v3.1 | 0.4% | 2022-06-07 | Fix |
| CVE-2022-30738 | Samsung Mobile Samsung Internet spoofing | 4.3CNA v3.1 | 0.5% | 2022-06-07 | Fix |
| CVE-2022-30737 | Samsung Mobile Samsung Account information disclosure | 4.0CNA v3.1 | 0.5% | 2022-06-07 | Fix |
| CVE-2022-30736 | Samsung Mobile Samsung Account improper privilege management | 5.3CNA v3.1 | 0.4% | 2022-06-07 | Fix |
| CVE-2022-30735 | Samsung Mobile Samsung Account improper privilege management | 5.9CNA v3.1 | 0.4% | 2022-06-07 | Fix |
| CVE-2022-30734 | Samsung Mobile Samsung Account Sign-out log information disclosure | 4.0CNA v3.1 | 0.5% | 2022-06-07 | Fix |
| CVE-2022-30733 | Samsung Mobile Samsung Account Sign-in log information disclosure | 4.0CNA v3.1 | 0.5% | 2022-06-07 | Fix |
| CVE-2022-30732 | Samsung Mobile Samsung Account information disclosure | 5.5CNA v3.1 | 0.6% | 2022-06-07 | Fix |
| CVE-2022-30731 | Samsung Mobile MyFiles improper access control | 5.1CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30730 | Samsung Mobile Samsung Pass improper authorization | 4.6CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30729 | Samsung Mobile Devices improper channel restriction | 3.3CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30728 | Samsung Mobile Devices ScanPool information disclosure | 1.9CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30727 | Samsung Mobile Devices improper handling of insufficient permissions | 6.2CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30726 | Samsung Mobile Devices improper input validation | 6.2CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30725 | Samsung Mobile Devices improper handling of insufficient permissions | 4.0CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30724 | Samsung Mobile Devices improper handling of insufficient permissions | 4.0CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30723 | Samsung Mobile Devices improper handling of insufficient permissions | 4.0CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30722 | Samsung Mobile Devices improper authorization | 6.2CNA v3.1 | 0.3% | 2022-06-07 | Fix |
| CVE-2022-30721 | Samsung Mobile Devices libsmkvextractor improper input validation | 2.5CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30720 | Samsung Mobile Devices libsmkvextractor improper input validation | 2.5CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30719 | Samsung Mobile Devices libsmkvextractor improper input validation | 2.5CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30717 | Samsung Mobile Devices improper authorization | 4.0CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30716 | Samsung Mobile Devices improper handling of insufficient permissions | 4.0CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30715 | Samsung Mobile Devices DofViewer improper access control | 4.0CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30714 | Samsung Mobile Devices SemIWCMonitor information disclosure | 1.9CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-30713 | Samsung Mobile Devices LSOItemData improper input validation | 8.5CNA v3.1 | 0.3% | 2022-06-07 | Fix |
| CVE-2022-30712 | Samsung Mobile Devices KfaOptions improper input validation | 8.5CNA v3.1 | 0.3% | 2022-06-07 | Fix |
| CVE-2022-30711 | Samsung Mobile Devices FeedsInfo improper input validation | 8.5CNA v3.1 | 0.3% | 2022-06-07 | Fix |
| CVE-2022-30710 | Samsung Mobile Devices RemoteViews improper input validation | 8.5CNA v3.1 | 0.3% | 2022-06-07 | Fix |
| CVE-2022-30709 | Samsung Mobile Devices SECRIL improper input validation | 2.5CNA v3.1 | 0.2% | 2022-06-07 | Fix |
| CVE-2022-30466 | Joybike WOLF authentication bypass by replay | 6.5v3.1 | 0.7% | 2022-06-07 | |
| CVE-2022-29620 | Filezilla-Project FileZilla Client cleartext storage of sensitive information | 6.5v3.1 | 1.9% | 2022-06-07 | |
| CVE-2022-29564 | Jamf Private Access before 2022-05-16 has Incorrect Access Control, in which an unauthorized user can reach a system in the internal infrastructure, aka WND-44801. | 7.5v3.1 | 0.9% | 2022-06-07 | |
| CVE-2022-28794 | Samsung Mobile Devices low-battery dumpstate log information disclosure | 2.2CNA v3.1 | 0.1% | 2022-06-07 | Fix |
| CVE-2022-25361 | WatchGuard Firebox M200 arbitrary file deletion | 9.1v3.1 | 1.3% | 2022-06-07 | Fix |
| CVE-2022-2022 | Cross-site scripting (XSS) Stored in nocodb/nocodb | 5.4NVD v3.1 | 0.8% | 2022-06-07 | Fix |
| CVE-2022-1991 | Fast Food Ordering System Master List Master.php cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-07 | |
| CVE-2022-1708 | Node DOS by way of memory exhaustion through ExecSync request in CRI-O | 7.5v3.1 | 3.1% | 2022-06-07 | Fix |
| CVE-2022-32511 | JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable | 9.8NVD v3.1 | 2.4% | 2022-06-06 | Fix |
| CVE-2022-32275 | Grafana path traversal | 7.5v3.1 | 8.6% | 2022-06-06 | Fix |
| CVE-2022-31768 | IBM InfoSphere Information Server SQL injection | 5.3CNA v3.0 | 1.4% | 2022-06-06 | Fix |
| CVE-2022-31498 | Librehealth Ehr cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31494 | Librehealth Ehr cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31493 | Librehealth Ehr cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31492 | Librehealth Ehr cross-site scripting | 6.1v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31486 | HID Mercury LP1501 command injection via Advanced Networking route add functionality | 8.8CNA v3.1 | 1.4% | 2022-06-06 | Fix |
| CVE-2022-31485 | HID Mercury LP1501 unauthenticated homepage note modification | 5.3CNA v3.1 | 0.8% | 2022-06-06 | Fix |
| CVE-2022-31484 | HID Mercury LP1501 User Account Deletion Unauthenticated | 7.5CNA v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31483 | HID Mercury LP1501 arbitrary file write via authenticated OSDP file upload | 9.1CNA v3.1 | 1.8% | 2022-06-06 | Fix |
| CVE-2022-31482 | HID Mercury LP1501 denial of service via internal structure overflow | 7.5CNA v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31481 | HID Mercury LP1501 remote code execution via buffer overflow in firmware update process | 10.0CNA v3.1 | 1.6% | 2022-06-06 | Fix |
| CVE-2022-31480 | HID Mercury LP1501 unauthenticated firmware upload and arbitrary Reboot | 7.5CNA v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-31479 | HID Mercury LP1501 remote code execution via command injection of the hostname | 9.6CNA v3.1 | 2.4% | 2022-06-06 | Fix |
| CVE-2022-30927 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.5% | 2022-06-06 | |
| CVE-2022-30863 | Fudforum cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-06 | |
| CVE-2022-30861 | Fudforum cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-06 | |
| CVE-2022-30860 | Fudforum unrestricted file upload | 7.2v3.1 | 24.2% | 2022-06-06 | |
| CVE-2022-30587 | Gradle Enterprise insufficiently protected credentials | 7.5v3.1 | 0.9% | 2022-06-06 | Fix |
| CVE-2022-30586 | gradle code execution | 7.2v3.1 | 1.3% | 2022-06-06 | Fix |
| CVE-2022-30469 | Afian FileRun SQL injection | 8.8v3.1 | 1.4% | 2022-06-06 | Fix |
| CVE-2022-29631 | Server-side request forgery in Jodd HTTP | 7.5v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-29617 | SAP CLA Assistant improper exception handling | 6.5v3.1 | 0.8% | 2022-06-06 | |
| CVE-2022-29296 | Avantune Genialcloud Proj login portal reflected cross-site scripting | 6.1v3.1 | 2.5% | 2022-06-06 | Exploit code |
| CVE-2022-28479 | Seeddms cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-06 | |
| CVE-2022-28478 | Seeddms path traversal | 6.5v3.1 | 1.5% | 2022-06-06 | |
| CVE-2022-28224 | Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature | 5.5CNA v3.1 | 0.6% | 2022-06-06 | Fix |
| CVE-2022-28051 | Seeddms cross-site scripting | 5.4v3.1 | 0.8% | 2022-06-06 | |
| CVE-2022-27438 | Caphyon Advanced Installer download without integrity check | 8.1v3.1 | 2.0% | 2022-06-06 | Exploit codeFix |
| CVE-2022-23712 | Improper check for unusual or exceptional conditions in Elasticsearch | 7.5v3.1 | 7.4% | 2022-06-06 | Fix |
| CVE-2022-22396 | IBM Spectrum Protect Plus insufficiently protected credentials | 6.8CNA v3.0 | 0.7% | 2022-06-06 | Fix |
| CVE-2022-21762 | MediaTek chipsets integer overflow or wraparound in apusys driver | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21761 | MediaTek chipsets integer overflow or wraparound in apusys driver | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21760 | MediaTek chipsets integer overflow or wraparound in apusys driver | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21759 | MediaTek chipsets buffer copy without checking size of input in power service | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21758 | MediaTek chipsets double free in ccu | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21757 | MediaTek chipsets uncontrolled resource consumption in WIFI firmware | 7.5v3.1 | 0.5% | 2022-06-06 | Fix |
| CVE-2022-21756 | MediaTek chipsets improper input validation in WLAN driver | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21755 | MediaTek chipsets improper input validation in WLAN driver | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21754 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21753 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21752 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21751 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21750 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21749 | MediaTek chipsets improper access control in telephony | 5.5v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21748 | MediaTek chipsets improper access control in telephony | 5.5v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21747 | MediaTek chipsets improper input validation in imgsensor | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21746 | MediaTek chipsets improper input validation in imgsensor | 4.4v3.1 | 0.1% | 2022-06-06 | Fix |
| CVE-2022-21745 | MediaTek chipsets use-after-free in WIFI firmware | 8.8v3.1 | 0.4% | 2022-06-06 | Fix |
| CVE-2022-1944 | GitLab incorrect authorization | 5.4CNA v3.1 | 0.6% | 2022-06-06 | Fix |
| CVE-2022-1940 | GitLab Jira integration stored cross-site scripting | 7.7CNA v3.1 | 6.2% | 2022-06-06 | Fix |
| CVE-2022-1936 | GitLab incorrect authorization | 6.5CNA v3.1 | 0.7% | 2022-06-06 | Fix |
| CVE-2022-1935 | GitLab incorrect authorization | 6.5CNA v3.1 | 0.7% | 2022-06-06 | Fix |
| CVE-2022-1821 | GitLab group members list vulnerability | 4.3CNA v3.1 | 0.9% | 2022-06-06 | Fix |
| CVE-2022-1783 | GitLab project membership REST API vulnerability | 2.7CNA v3.1 | 1.0% | 2022-06-06 | Fix |
| CVE-2022-1680 | GitLab account takeover | 9.9CNA v3.1 | 15.9% | 2022-06-06 | Fix |
| CVE-2022-32296 | Linux kernel insufficient randomness | 3.3NVD v3.1 | 0.4% | 2022-06-05 | Fix |
| CVE-2022-32291 | RealNetworks Realplayer arbitrary code execution | 8.8v3.1 | 1.6% | 2022-06-05 | |
| CVE-2022-32271 | RealNetworks Realplayer cross-site scripting | 9.6v3.1 | 2.8% | 2022-06-03 | |
| CVE-2022-32270 | RealNetworks Realplayer path traversal | 9.8v3.1 | 4.5% | 2022-06-03 | |
| CVE-2022-32269 | RealNetworks Realplayer cross-site scripting | 9.8v3.1 | 3.3% | 2022-06-03 | |
| CVE-2022-32268 | Starwindsoftware Starwind San & Nas remote code execution | 8.8v3.1 | 2.3% | 2022-06-03 | Fix |
| CVE-2022-32265 | qDecoder URL decoding function vulnerability | 5.3v3.1 | 1.3% | 2022-06-03 | Fix |
| CVE-2022-29784 | PublicCMS information disclosure | 5.3v3.1 | 1.1% | 2022-06-03 | |
| CVE-2022-29778 | D-Link DIR-890L hard-coded credentials | 8.8NVD v3.1 | 2.7% | 2022-06-03 | Exploit code |
| CVE-2022-29773 | Aleksis access control issue in AlekSIS-Core | 6.5v3.1 | 0.7% | 2022-06-03 | Fix |
| CVE-2022-29770 | Cross-site scripting in XXL-job | 5.4v3.1 | 0.5% | 2022-06-03 | Fix |
| CVE-2022-29767 | Adbyby resource exhaustion | 6.5v3.1 | 0.9% | 2022-06-03 | |
| CVE-2022-26493 | MiniOrange SAML authentication bypass | 9.8CNA v3.1 | 0.6% | 2022-06-03 | Fix |
| CVE-2022-26134 | Atlassian Confluence Server and Data Center remote code execution | 9.8NVD v3.1 | 100.0% | 2022-06-03 | KEVNucleiMetasploitSnortExploit codeFix |
| CVE-2022-1988 | Cross-site scripting (XSS) Generic in NeoRazorX/Facturascripts | 6.1v3.1 | 0.8% | 2022-06-03 | Fix |
| CVE-2022-1987 | Buffer over-read in bfabiszewski/Libmobi | 8.1v3.1 | 0.8% | 2022-06-03 | Fix |
| CVE-2022-32250 | Linux kernel use-after-free | 7.8NVD v3.1 | 2.9% | 2022-06-02 | Exploit codeFix |
| CVE-2022-32202 | Libjpeg null pointer dereference | 5.5v3.1 | 0.7% | 2022-06-02 | Fix |
| CVE-2022-32201 | Libjpeg null pointer dereference | 5.5v3.1 | 0.7% | 2022-06-02 | Fix |
| CVE-2022-32200 | Libdwarf out-of-bounds read | 7.8v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-32028 | Car Rental Management System SQL injection | 7.2v3.1 | 5.1% | 2022-06-02 | Nuclei |
| CVE-2022-32027 | Car Rental Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32026 | Car Rental Management System SQL injection | 7.2v3.1 | 5.3% | 2022-06-02 | Nuclei |
| CVE-2022-32025 | Car Rental Management System SQL injection | 7.2v3.1 | 4.6% | 2022-06-02 | Nuclei |
| CVE-2022-32024 | Car Rental Management System SQL injection | 7.2v3.1 | 4.6% | 2022-06-02 | Nuclei |
| CVE-2022-32022 | Car Rental Management System SQL injection | 7.2v3.1 | 4.9% | 2022-06-02 | Nuclei |
| CVE-2022-32021 | Car Rental Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32020 | Car Rental Management System arbitrary code execution | 9.8v3.1 | 2.0% | 2022-06-02 | |
| CVE-2022-32019 | Car Rental Management System unrestricted file upload | 9.8v3.1 | 2.4% | 2022-06-02 | |
| CVE-2022-32018 | Complete Online Job Search System SQL injection | 7.2v3.1 | 4.6% | 2022-06-02 | Nuclei |
| CVE-2022-32017 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32016 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32015 | Complete Online Job Search System SQL injection | 7.2v3.1 | 4.6% | 2022-06-02 | Nuclei |
| CVE-2022-32014 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32013 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.3% | 2022-06-02 | Exploit code |
| CVE-2022-32012 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32011 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32010 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32008 | Complete Online Job Search System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32007 | Complete Online Job Search System SQL injection | 7.2v3.1 | 4.6% | 2022-06-02 | Nuclei |
| CVE-2022-32006 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32005 | Badminton Center Management System SQL injection | 7.2v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-32004 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32003 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32002 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32001 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-32000 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31998 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31996 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31994 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31993 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31992 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31991 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31990 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31989 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31988 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31986 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31985 | Badminton Center Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31984 | Online Fire Reporting System SQL injection | 7.2v3.1 | 5.4% | 2022-06-02 | Nuclei |
| CVE-2022-31983 | Online Fire Reporting System SQL injection | 7.2v3.1 | 2.6% | 2022-06-02 | Exploit code |
| CVE-2022-31982 | Online Fire Reporting System SQL injection | 7.2v3.1 | 2.0% | 2022-06-02 | |
| CVE-2022-31981 | Online Fire Reporting System SQL injection | 7.2v3.1 | 2.0% | 2022-06-02 | |
| CVE-2022-31980 | Online Fire Reporting System SQL injection | 7.2v3.1 | 2.0% | 2022-06-02 | |
| CVE-2022-31978 | Online Fire Reporting System SQL injection | 9.8v3.1 | 7.2% | 2022-06-02 | Nuclei |
| CVE-2022-31977 | Online Fire Reporting System SQL injection | 9.8v3.1 | 7.2% | 2022-06-02 | Nuclei |
| CVE-2022-31976 | Online Fire Reporting System SQL injection | 9.8v3.1 | 7.2% | 2022-06-02 | Nuclei |
| CVE-2022-31975 | Online Fire Reporting System SQL injection | 7.2v3.1 | 4.9% | 2022-06-02 | Nuclei |
| CVE-2022-31974 | Online Fire Reporting System SQL injection | 7.2v3.1 | 5.0% | 2022-06-02 | Nuclei |
| CVE-2022-31973 | Online Fire Reporting System v1.0 is vulnerable to Delete any file via /ofrs/classes/Master.php?f=delete_img. | 6.5v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31971 | Chatbot App With Suggestion SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31970 | Chatbot App With Suggestion SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31969 | Chatbot App With Suggestion SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31966 | ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simple_chat_bot/classes/Master.php?f=delete_img. | 6.5v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31965 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31964 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31962 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31961 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31959 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31957 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31956 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31953 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31952 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31951 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31948 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31946 | Rescue Dispatch Management System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31945 | Rescue Dispatch Management System v1.0 is vulnerable to Delete any file via /rdms/classes/Master.php?f=delete_img. | 9.1v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31799 | Denial of service in bottle | 9.8v3.1 | 2.1% | 2022-06-02 | Fix |
| CVE-2022-31796 | JPEG Libjpeg out-of-bounds read | 6.5v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-31783 | liblouis out-of-bounds write | 5.5v3.1 | 1.1% | 2022-06-02 | Fix |
| CVE-2022-31782 | Freedesktop Freetype Demo Programs out-of-bounds write | 7.8v3.1 | 0.7% | 2022-06-02 | Fix |
| CVE-2022-31500 | KNIME Analytics Platform incorrect default permissions | 7.8v3.1 | 0.2% | 2022-06-02 | |
| CVE-2022-31463 | Owllabs Meeting Owl Pro improper authentication | 7.1v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-31462 | Owllabs Meeting Owl Pro hard-coded credentials | 8.8NVD v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-31461 | Owllabs Meeting Owl Pro missing authentication | 6.5NVD v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-31460 | Owllabs Meeting Owl Pro hard-coded credentials | 7.4v3.1 | 3.4% | 2022-06-02 | Fix |
| CVE-2022-31459 | Owllabs Meeting Owl Pro inadequate encryption strength | 6.5NVD v3.1 | 0.8% | 2022-06-02 | Fix |
| CVE-2022-31354 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31353 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31352 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31351 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31350 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31348 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31347 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31346 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31345 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31344 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31343 | oretnom23 Online Car Wash Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31342 | Online Car Wash Booking System image delete function vulnerability | 6.5v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31340 | Argie Simple Inventory System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31339 | Argie Simple Inventory System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-31338 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31337 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31336 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31335 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31329 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31328 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31327 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-31024 | Federated editing allows iframing remote servers by default in Richdocuments | 6.5CNA v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-31023 | playframework dev error stack trace leaking into prod in Play Framework | 5.9CNA v3.1 | 1.3% | 2022-06-02 | Fix |
| CVE-2022-31018 | playframework denial of service binding form from JSON in Play Framework | 7.5CNA v3.1 | 1.7% | 2022-06-02 | Fix |
| CVE-2022-31004 | CVEProject cve-services potential secrets being logged to disk in CVE services | 7.5CNA v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30999 | Possible cross-site scripting attack via unsanitized SVG files in FoF upload | 8.7CNA v3.1 | 1.2% | 2022-06-02 | Fix |
| CVE-2022-30836 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30835 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30834 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30833 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30832 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30831 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30830 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30829 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30828 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30827 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30826 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30825 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30823 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30822 | Wedding Management System unrestricted file upload | 8.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-30821 | Wedding Management System unrestricted file upload | 8.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-30820 | Wedding Management System unrestricted file upload | 8.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-30819 | Wedding Management System unrestricted file upload | 8.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-30818 | Wedding Management System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30817 | Simple Bus Ticket Booking System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30816 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30815 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30814 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30813 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30810 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30809 | Elite Cms SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30808 | Elite Cms unrestricted file upload | 9.8v3.1 | 17.5% | 2022-06-02 | |
| CVE-2022-30804 | Elite Cms path traversal | 6.5v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30799 | Online Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30798 | Online Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30797 | Online Ordering System SQL injection | 9.8v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-30795 | Online Ordering System SQL injection | 7.2v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30794 | Online Ordering System SQL injection | 7.2v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-30540 | Horner Automation Cscape CSFont file parser heap-based buffer overflow | 7.8v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-30521 | D-Link DIR-890L out-of-bounds write | 9.8NVD v3.1 | 15.1% | 2022-06-02 | |
| CVE-2022-30514 | School Dormitory Management System cross-site scripting | 6.1v3.1 | 3.6% | 2022-06-02 | NucleiExploit code |
| CVE-2022-30513 | School Dormitory Management System cross-site scripting | 6.1v3.1 | 3.6% | 2022-06-02 | NucleiExploit code |
| CVE-2022-30512 | School Dormitory Management System SQL injection | 9.8NVD v3.1 | 9.7% | 2022-06-02 | Nuclei |
| CVE-2022-30511 | School Dormitory Management System SQL injection | 9.8v3.1 | 3.6% | 2022-06-02 | Exploit code |
| CVE-2022-30510 | School Dormitory Management System SQL injection | 9.8v3.1 | 3.7% | 2022-06-02 | Exploit code |
| CVE-2022-30506 | Code injection in MCMS | 9.8v3.1 | 2.6% | 2022-06-02 | |
| CVE-2022-30503 | NJS njs_set_number function vulnerability | 5.5v3.1 | 0.3% | 2022-06-02 | |
| CVE-2022-30496 | Mv Idce Logon page SQL injection | 7.5v3.1 | 1.3% | 2022-06-02 | |
| CVE-2022-30490 | Badminton Center Management System SQL injection | 9.8v3.1 | 1.3% | 2022-06-02 | |
| CVE-2022-30482 | Ecommerce-project-with-php-and-mysqli-fruits-bazar cross-site scripting | 4.8v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-30481 | Food-order-and-table-reservation-system SQL injection | 9.8v3.1 | 1.6% | 2022-06-02 | |
| CVE-2022-30478 | Ecommerce-project-with-php-and-mysqli-fruits-bazar SQL injection | 9.8v3.1 | 1.6% | 2022-06-02 | |
| CVE-2022-30470 | Afian FileRun remote code execution | 9.8v3.1 | 2.5% | 2022-06-02 | Fix |
| CVE-2022-30429 | Neos CMS vulnerable to XSS in various backend modules | 5.4v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-30425 | Tenda HG6 OS command injection | 8.8v3.1 | 19.1% | 2022-06-02 | |
| CVE-2022-30423 | Merchandise Online Store unrestricted file upload | 9.8v3.1 | 1.8% | 2022-06-02 | |
| CVE-2022-30352 | Phpabook SQL injection | 9.8v3.1 | 1.9% | 2022-06-02 | |
| CVE-2022-30349 | Cross-site scripting in Sscms | 6.1v3.1 | 0.7% | 2022-06-02 | |
| CVE-2022-30324 | Privilege escalation in HashiCorp Nomad | 9.8v3.1 | 1.4% | 2022-06-02 | Fix |
| CVE-2022-30277 | BD Synapsys™ insufficient session expiration | 5.7CNA v3.1 | 0.2% | 2022-06-02 | Fix |
| CVE-2022-30238 | Schneider Electric Wiser Smart improper authentication | 8.3CNA v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30237 | Schneider Electric Wiser Smart missing encryption | 8.2CNA v3.1 | 0.3% | 2022-06-02 | |
| CVE-2022-30236 | Schneider Electric Wiser Smart incorrect resource transfer | 8.2CNA v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-30235 | Schneider Electric Wiser Smart missing brute-force protection | 8.6CNA v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-30234 | Schneider Electric Wiser Smart hard-coded credentials | 9.4CNA v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-30233 | Schneider Electric Wiser Smart improper input validation | 6.5CNA v3.1 | 0.7% | 2022-06-02 | |
| CVE-2022-30232 | Schneider Electric Power Logic ION Setup improper input validation | 8.0CNA v3.1 | 1.2% | 2022-06-02 | Fix |
| CVE-2022-30034 | Flower OAuth authentication bypass | 8.6v3.1 | 1.1% | 2022-06-02 | Fix |
| CVE-2022-29788 | Libmobi null pointer dereference | 6.5v3.1 | 0.8% | 2022-06-02 | Fix |
| CVE-2022-29780 | nginx NJS njs_array_prototype_sort vulnerability | 5.5v3.1 | 0.4% | 2022-06-02 | |
| CVE-2022-29779 | nginx NJS njs_value_own_enumerate vulnerability | 5.5v3.1 | 0.4% | 2022-06-02 | |
| CVE-2022-29777 | ONLYOFFICE Document Server out-of-bounds write | 9.8v3.1 | 6.9% | 2022-06-02 | |
| CVE-2022-29776 | ONLYOFFICE Document Server out-of-bounds write | 9.8v3.1 | 6.9% | 2022-06-02 | |
| CVE-2022-29735 | Deltacontrols Entelitouch cross-site request forgery | 8.8v3.1 | 1.0% | 2022-06-02 | |
| CVE-2022-29734 | Ict Protege Gx cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-02 | |
| CVE-2022-29733 | Deltacontrols Entelitouch cleartext transmission of sensitive information | 5.9v3.1 | 0.7% | 2022-06-02 | |
| CVE-2022-29732 | Deltacontrols Entelitouch cross-site scripting | 6.1v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-29731 | Ict Protege Gx improper access control | 4.3v3.1 | 0.4% | 2022-06-02 | |
| CVE-2022-29730 | Usr-g800v2 hard-coded credentials | 9.8v3.1 | 1.8% | 2022-06-02 | |
| CVE-2022-29729 | Verizon 4G Lte Network Extender weak password requirements | 7.5v3.1 | 1.5% | 2022-06-02 | |
| CVE-2022-29725 | Creatiwity Witycms image upload component arbitrary file upload | 8.8v3.1 | 1.4% | 2022-06-02 | |
| CVE-2022-29718 | Open redirect in caddy | 6.1v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-29712 | Command injection in librenms | 9.8v3.1 | 1.7% | 2022-06-02 | Fix |
| CVE-2022-29711 | Cross-site scripting in librenms | 6.1v3.1 | 0.7% | 2022-06-02 | Fix |
| CVE-2022-29704 | Brows Box SQL injection | 9.8v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-29695 | Unicorn Engine improper initialization | 7.5v3.1 | 1.1% | 2022-06-02 | |
| CVE-2022-29694 | Unicorn Engine null pointer dereference | 7.5v3.1 | 1.9% | 2022-06-02 | |
| CVE-2022-29693 | Unicorn Engine memory leak | 7.5v3.1 | 1.2% | 2022-06-02 | |
| CVE-2022-29692 | Unicorn Engine use-after-free | 7.8v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-29659 | Responsive Online Blog SQL injection | 9.8v3.1 | 2.0% | 2022-06-02 | |
| CVE-2022-29653 | OFCMS cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-02 | |
| CVE-2022-29648 | jflyfox jfinal_cms cross-site scripting in Jfinal | 5.4v3.1 | 0.5% | 2022-06-02 | |
| CVE-2022-29647 | Cross-site request forgery in Mingsoft MCMS | 8.8v3.1 | 0.6% | 2022-06-02 | |
| CVE-2022-29628 | Online Market Place Site /omps/seller cross-site scripting | 5.4v3.1 | 0.5% | 2022-06-02 | |
| CVE-2022-29627 | Online Market Place Site An insecure direct object reference | 4.3v3.1 | 0.6% | 2022-06-02 | |
| CVE-2022-29624 | Tpcms Add file function arbitrary file upload | 8.8v3.1 | 1.3% | 2022-06-02 | |
| CVE-2022-29598 | Solutions-atlantic Regulatory Reporting System cross-site scripting | 6.1v3.1 | 0.8% | 2022-06-02 | Exploit code |
| CVE-2022-29597 | Solutions-atlantic Regulatory Reporting System path traversal | 6.5v3.1 | 1.9% | 2022-06-02 | Exploit code |
| CVE-2022-29594 | Eginnovations Eg Agent improper preservation of permissions | 7.8v3.1 | 0.3% | 2022-06-02 | |
| CVE-2022-29540 | Resi Gemini-net cross-site scripting | 6.1v3.1 | 0.8% | 2022-06-02 | |
| CVE-2022-29488 | Horner Automation Cscape CSFont file parser out-of-bounds read | 7.8v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-29483 | ABB e-Design incorrect default permissions | 7.8CNA v3.1 | 0.3% | 2022-06-02 | Fix |
| CVE-2022-29236 | Improper access control for pencil annotations in BigBlueButton | 4.3CNA v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-29235 | Limited data exposure for shared external videos in BigBlueButton | 5.3CNA v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-29234 | Grace period for lock settings in public/private chats in BigBlueButton | 4.3CNA v3.1 | 0.8% | 2022-06-02 | Fix |
| CVE-2022-29233 | bigbluebutton improper access control for breakout rooms in BigBlue Button | 4.3CNA v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-29085 | Dell Unity plaintext password storage | 6.4CNA v3.1 | 0.2% | 2022-06-02 | Fix |
| CVE-2022-29084 | Dell Unity missing brute-force protection | 8.1CNA v3.1 | 2.0% | 2022-06-02 | Fix |
| CVE-2022-28945 | Webbank WebCube path traversal | 9.8v3.1 | 1.7% | 2022-06-02 | Fix |
| CVE-2022-28799 | TikTok forced browsing | 8.8v3.1 | 15.5% | 2022-06-02 | |
| CVE-2022-28702 | ABB e-Design incorrect default permissions | 6.1CNA v3.1 | 0.3% | 2022-06-02 | Fix |
| CVE-2022-28690 | Horner Automation Cscape CSFont file parser out-of-bounds write | 7.8v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-28605 | Linkplay Sound Bar hard-coded credentials | 9.8v3.1 | 1.9% | 2022-06-02 | |
| CVE-2022-27184 | Horner Automation Cscape Csfont out-of-bounds write | 7.8v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-26978 | Barco Control Room Management Suite cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-26977 | Barco Control Room Management Suite cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-26976 | Barco Control Room Management Suite cross-site scripting | 5.4v3.1 | 0.4% | 2022-06-02 | Fix |
| CVE-2022-26975 | Barco Control Room Management Suite improper authentication | 7.5v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-26974 | Barco Control Room Management Suite cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-26973 | Barco Control Room Management Suite information disclosure through error messages | 5.3v3.1 | 0.8% | 2022-06-02 | Fix |
| CVE-2022-26972 | Barco Control Room Management Suite cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-26971 | Barco Control Room Management Suite missing authentication | 5.3v3.1 | 0.7% | 2022-06-02 | Fix |
| CVE-2022-26944 | Percona XtraBackup xtrabackup_history table vulnerability | 6.5v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-26869 | Dell PowerStore information disclosure | 9.8CNA v3.1 | 2.0% | 2022-06-02 | Fix |
| CVE-2022-26868 | Dell PowerStore OS command injection | 6.4CNA v3.1 | 0.4% | 2022-06-02 | Fix |
| CVE-2022-26867 | Dell PowerStore CSV injection | 5.9CNA v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-26866 | Dell PowerStore cross-site scripting | 5.5CNA v3.1 | 0.5% | 2022-06-02 | Fix |
| CVE-2022-26497 | bigbluebutton greenlight cross-site scripting | 5.4v3.1 | 0.8% | 2022-06-02 | Fix |
| CVE-2022-26491 | Pidgin improper certificate validation | 5.9v3.1 | 2.5% | 2022-06-02 | Fix |
| CVE-2022-25237 | bonitasoft Bonita Web authorization bypass | 9.8v3.1 | 56.2% | 2022-06-02 | NucleiEmerging Threats |
| CVE-2022-25163 | Mitsubishi Electric MELSEC-Q Series QJ71E71-100 improper input validation | 9.8v3.1 | 2.2% | 2022-06-02 | Fix |
| CVE-2022-24967 | Blackrainbow Nimbus cross-site scripting | 5.4v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-24702 | Winaprs buffer overflow | 9.8v3.1 | 5.6% | 2022-06-02 | Exploit code |
| CVE-2022-24701 | Winaprs buffer overflow | 7.8v3.1 | 0.5% | 2022-06-02 | |
| CVE-2022-24700 | Winaprs buffer overflow | 7.5v3.1 | 1.7% | 2022-06-02 | |
| CVE-2022-24581 | Aceware Aceweb Online Portal unrestricted file upload | 7.5v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-24241 | Aceware Aceweb Online Portal externally controlled resource reference | 7.5v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-24240 | Aceware Aceweb Online Portal SQL injection | 9.8v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-24239 | Aceware Aceweb Online Portal unrestricted file upload | 9.8v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-24238 | Aceware Aceweb Online Portal cross-site scripting | 6.1v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-23237 | E-Series SANtricity OS Controller Software 11.x open redirect | 6.1v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-23236 | E-Series SANtricity OS Controller Software 11.x cleartext storage of sensitive information | 4.4v3.1 | 0.2% | 2022-06-02 | Fix |
| CVE-2022-22767 | BD Pyxis™ Products default credentials | 8.8CNA v3.1 | 0.4% | 2022-06-02 | Fix |
| CVE-2022-22557 | Dell PowerStore plaintext password storage | 7.5CNA v3.1 | 0.2% | 2022-06-02 | Fix |
| CVE-2022-22556 | Dell PowerStore resource exhaustion | 3.7CNA v3.1 | 1.3% | 2022-06-02 | Fix |
| CVE-2022-1982 | A crafted SVG attachment can crash a Mattermost Server | 4.3CNA v3.1 | 0.9% | 2022-06-02 | Fix |
| CVE-2022-1980 | SourceCodester Product Show Room Site cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-02 | |
| CVE-2022-1979 | SourceCodester Product Show Room Site p=contact cross-site scripting | 4.8v3.1 | 0.6% | 2022-06-02 | |
| CVE-2022-1968 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.4% | 2022-06-02 | Fix |
| CVE-2022-1949 | 389-ds-base insecure direct object reference | 7.5v3.1 | 1.5% | 2022-06-02 | Fix |
| CVE-2022-1943 | kernel out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2022-06-02 | Fix |
| CVE-2022-1929 | Exponential ReDoS in devcert | 7.5NVD v3.1 | 0.6% | 2022-06-02 | Fix |
| CVE-2022-1797 | Rockwell Automation Logix Controllers uncontrolled resource consumption | 8.6v3.1 | 2.1% | 2022-06-02 | Fix |
| CVE-2022-1789 | kernel null pointer dereference | 6.8NVD v3.1 | 0.3% | 2022-06-02 | Fix |
| CVE-2022-1786 | Linux kernel A use-after-free | 7.8NVD v3.1 | 1.0% | 2022-06-02 | Fix |
| CVE-2022-1716 | Kitetech Keep My Notes app lock authentication bypass | 4.6v3.1 | 0.4% | 2022-06-02 | Fix |
| CVE-2022-1661 | Keysight N6854A Geolocation Server and N6841A RF Sensor path traversal | 7.5v3.1 | 15.1% | 2022-06-02 | Fix |
| CVE-2022-1660 | Keysight N6854A Geolocation Server and N6841A RF Sensor deserialization of untrusted data | 9.8v3.1 | 16.0% | 2022-06-02 | Fix |
| CVE-2022-1652 | kernel use-after-free | 7.8NVD v3.1 | 0.5% | 2022-06-02 | Fix |
| CVE-2022-1419 | kernel use-after-free | 7.8NVD v3.1 | 0.3% | 2022-06-02 | Fix |
| CVE-2022-1215 | libinput format string | 7.8NVD v3.1 | 0.4% | 2022-06-02 | Fix |
| CVE-2022-31022 | Missing Role Based Access Control for the REST handlers in bleve/HTTP package | 6.2CNA v3.1 | 0.3% | 2022-06-01 | Fix |
| CVE-2022-31000 | solidusio solidus CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend | 2.3CNA v3.1 | 0.4% | 2022-06-01 | Fix |
| CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution | 7.8CNA v3.1 | 99.2% | 2022-06-01 | KEVEmerging ThreatsExploit codeKCVFix |
| CVE-2022-30128 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.9% | 2022-06-01 | Fix |
| CVE-2022-30127 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.9% | 2022-06-01 | Fix |
| CVE-2022-30115 | https://github.com/curl/curl missing cryptographic step | 4.3NVD v3.1 | 1.4% | 2022-06-01 | Fix |
| CVE-2022-29875 | Siemens Biograph Horizon PET/CT Systems deserialization of untrusted data | 9.8v3.1 | 1.8% | 2022-06-01 | Fix |
| CVE-2022-29232 | Exposure of messages in BigBlueButton public chats | 6.5CNA v3.1 | 1.1% | 2022-06-01 | Fix |
| CVE-2022-29169 | ReDoS on endpoint html5client/useragent in BigBlueButton | 7.5CNA v3.1 | 1.6% | 2022-06-01 | Fix |
| CVE-2022-29098 | Dell PowerScale OneFS weak password requirements | 8.1CNA v3.1 | 1.0% | 2022-06-01 | Fix |
| CVE-2022-27782 | https://github.com/curl/curl business logic error | 7.5NVD v3.1 | 3.1% | 2022-06-01 | Fix |
| CVE-2022-27781 | https://github.com/curl/curl resource exhaustion | 7.5NVD v3.1 | 2.9% | 2022-06-01 | Fix |
| CVE-2022-27780 | curl URL parser vulnerability | 7.5NVD v3.1 | 2.5% | 2022-06-01 | Fix |
| CVE-2022-27779 | https://github.com/curl/curl information disclosure | 5.3NVD v3.1 | 2.8% | 2022-06-01 | Fix |
| CVE-2022-27778 | https://github.com/curl/curl incorrectly resolved name or reference | 8.1NVD v3.1 | 3.8% | 2022-06-01 | Fix |
| CVE-2022-27776 | https://github.com/curl/curl fixed insufficiently protected credentials | 6.5NVD v3.1 | 4.1% | 2022-06-01 | Fix |
| CVE-2022-27775 | https://github.com/curl/curl An information disclosure | 7.5NVD v3.1 | 3.3% | 2022-06-01 | Fix |
| CVE-2022-27774 | https://github.com/curl/curl An insufficiently protected credentials | 5.7NVD v3.1 | 2.0% | 2022-06-01 | Fix |
| CVE-2022-26905 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.9% | 2022-06-01 | Fix |
| CVE-2022-24848 | SQL injection in DHIS2's in OrgUnit program association | 8.8CNA v3.1 | 1.1% | 2022-06-01 | |
| CVE-2022-1285 | Server-side request forgery (SSRF) in gogs/gogs | 6.5NVD v3.1 | 1.1% | 2022-06-01 | Fix |