CVE-2022 records published in July 2022
This page lists the 1,735 CVE-2022 records published in July 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 27515.9% of these records
- Listed in CISA KEV
- 80.5% of these records
- Reported exploited
- 10.1% of these records
- Detection signal
- 563.2% of these records
- Exploit code
- 683.9% of these records
- Actionable vendor fix
- 1,26873.1% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in July 2022 have had from about 51 months to about 52 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-36336 | Trend Micro Worry-Free Business Security link following | 7.8v3.1 | 0.6% | 2022-07-30 | Fix |
| CVE-2022-35234 | Trend Micro Security (Consumer) out-of-bounds read | 7.1v3.1 | 0.3% | 2022-07-30 | Fix |
| CVE-2022-33994 | Gutenberg cross-site scripting | 3.0v3.1 | 0.7% | 2022-07-30 | |
| CVE-2022-33158 | Trend Micro VPN Proxy One Pro (Consumer) files accessible to external parties | 7.8v3.1 | 0.3% | 2022-07-30 | Fix |
| CVE-2022-30083 | Elliegrid code injection | 9.8v3.1 | 1.1% | 2022-07-30 | |
| CVE-2022-36447 | Chia Network CAT1 Standard chia-blockchain tokens can be inflated to an arbitrary extent | 7.5v3.1 | 0.8% | 2022-07-29 | Fix |
| CVE-2022-36378 | Floating Div WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-07-29 | |
| CVE-2022-36123 | Linux kernel denial of service | 7.8NVD v3.1 | 0.9% | 2022-07-29 | Fix |
| CVE-2022-35643 | IBM PowerVM VIOS denial of service | 9.1CNA v3.0 | 1.3% | 2022-07-29 | Fix |
| CVE-2022-35632 | Rapid7 Velociraptor XSS in User interface | 4.8v3.1 | 0.5% | 2022-07-29 | Fix |
| CVE-2022-35631 | Rapid7 Velociraptor filesystem race on temporary files | 5.5v3.1 | 0.2% | 2022-07-29 | Fix |
| CVE-2022-35630 | Rapid7 Velociraptor Unsafe HTML injection in Artifact Collection Report | 6.1v3.1 | 0.5% | 2022-07-29 | Fix |
| CVE-2022-35629 | Velociraptor Client ID spoofing | 5.4v3.1 | 0.4% | 2022-07-29 | Fix |
| CVE-2022-34531 | DedeCMS remote code execution | 9.8v3.1 | 24.7% | 2022-07-29 | |
| CVE-2022-34528 | D-Link DSL-3782 out-of-bounds write | 8.8v3.1 | 1.4% | 2022-07-29 | |
| CVE-2022-34527 | D-Link DSL-3782 OS command injection | 8.8v3.1 | 4.5% | 2022-07-29 | Exploit code |
| CVE-2022-34526 | libtiff _TIFFVGetField function of Tiffsplit v4.4.0 stack-based buffer overflow | 6.5v3.1 | 1.7% | 2022-07-29 | Fix |
| CVE-2022-34496 | Hiby R3 Pro Firmware unrestricted file upload | 9.8v3.1 | 1.1% | 2022-07-29 | |
| CVE-2022-33881 | Autodesk Advanced Steel out-of-bounds read | 7.8v3.1 | 0.4% | 2022-07-29 | Fix |
| CVE-2022-27873 | Fusion360 XML external entity injection | 7.8v3.1 | 0.2% | 2022-07-29 | Fix |
| CVE-2022-27866 | Autodesk Design Review out-of-bounds read | 7.8v3.1 | 0.2% | 2022-07-29 | Fix |
| CVE-2022-27865 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.2% | 2022-07-29 | Fix |
| CVE-2022-27864 | Autodesk Design Review double free | 8.8v3.1 | 1.1% | 2022-07-29 | Fix |
| CVE-2022-24912 | github.com/runatlantis/atlantis/server/controllers/events timing Attack | 7.5v3.1 | 1.2% | 2022-07-29 | Fix |
| CVE-2022-23004 | Western Digital Sweet B P-256 point multiplication vulnerability | 5.3CNA v3.1 | 0.7% | 2022-07-29 | Fix |
| CVE-2022-23003 | Western Digital Sweet B shared secret computation vulnerability | 5.3CNA v3.1 | 0.7% | 2022-07-29 | Fix |
| CVE-2022-23002 | Western Digital Sweet B P-256 point decompression vulnerability | 5.3CNA v3.1 | 0.7% | 2022-07-29 | Fix |
| CVE-2022-23001 | Sweet-B Library: Point compress/decompress using the wrong bit for sign | 5.3CNA v3.1 | 0.7% | 2022-07-29 | Fix |
| CVE-2022-22280 | SonicWall GMS improper neutralization | 9.8v3.1 | 9.3% | 2022-07-29 | Fix |
| CVE-2022-2579 | SourceCodester Garage Management System createUser.php cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-29 | |
| CVE-2022-2578 | SourceCodester Garage Management System createUser.php access control | 9.8v3.1 | 0.7% | 2022-07-29 | |
| CVE-2022-2577 | SourceCodester Garage Management System edituser.php SQL injection | 8.8v3.1 | 0.7% | 2022-07-29 | |
| CVE-2022-2576 | Eclipse Californium denial of service | 7.5v3.1 | 0.6% | 2022-07-29 | Fix |
| CVE-2022-2414 | Dogtag PKI XML external entity injection | 7.5v3.1 | 85.3% | 2022-07-29 | NucleiExploit codeFix |
| CVE-2022-2324 | SonicWall Hosted Email Security improperly implemented security check | 7.5v3.1 | 0.6% | 2022-07-29 | Fix |
| CVE-2022-2323 | SonicWall Switch user input improper neutralization | 8.8v3.1 | 6.0% | 2022-07-29 | Fix |
| CVE-2022-1799 | Incorrect signature verification on Google play-services-basement in Google Play SDK | 5.7CNA v3.1 | 0.3% | 2022-07-29 | Fix |
| CVE-2022-1277 | SQL injection in Inavitas Solar Log | 9.8NVD v3.1 | 0.8% | 2022-07-29 | Fix |
| CVE-2022-37010 | JetBrains IntelliJ IDEA improper input validation | 3.6CNA v3.1 | 0.2% | 2022-07-28 | Fix |
| CVE-2022-37009 | JetBrains IntelliJ IDEA code injection | 3.9CNA v3.1 | 0.3% | 2022-07-28 | Fix |
| CVE-2022-37000 | Veritas NetBackup NetBackup Client vulnerability | 6.5v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-36999 | Veritas NetBackup NetBackup Client vulnerability | 6.5v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-36998 | Veritas NetBackup out-of-bounds write | 6.5v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-36997 | Veritas NetBackup server-side request forgery | 8.8v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-36996 | Veritas NetBackup NetBackup Client vulnerability | 6.5v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-36995 | Veritas NetBackup NetBackup Client vulnerability | 4.3v3.1 | 0.5% | 2022-07-28 | Fix |
| CVE-2022-36994 | Veritas NetBackup NetBackup Client vulnerability | 6.5v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-36993 | Veritas NetBackup arbitrary command execution | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-36992 | Veritas NetBackup arbitrary command execution | 8.8NVD v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-36991 | Veritas NetBackup NetBackup Client vulnerability | 6.5NVD v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-36990 | Veritas NetBackup arbitrary file write | 6.5NVD v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-36989 | Veritas NetBackup arbitrary command execution | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-36988 | Veritas NetBackup arbitrary command execution | 8.8v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-36987 | Veritas NetBackup NetBackup Client vulnerability | 6.5NVD v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-36986 | Veritas NetBackup missing authentication | 9.8v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-36985 | Veritas NetBackup Windows Primary Server privilege escalation | 7.8v3.1 | 0.2% | 2022-07-28 | Fix |
| CVE-2022-36984 | Veritas NetBackup denial of service | 6.5NVD v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-36752 | PNG2WEBP out-of-bounds write | 5.5v3.1 | 0.4% | 2022-07-28 | Exploit code |
| CVE-2022-36364 | Apache Calcite Avatica JDBC driver arbitrary code execution | 8.8v3.1 | 3.0% | 2022-07-28 | Fix |
| CVE-2022-36234 | Simplenetwork double free | 7.5v3.1 | 0.9% | 2022-07-28 | Exploit code |
| CVE-2022-35882 | GS Testimonial Slider WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-34593 | Dptech VPN arbitrary file read | 7.5v3.1 | 0.7% | 2022-07-28 | |
| CVE-2022-34580 | Advanced School Management System cross-site scripting | 4.8v3.1 | 0.5% | 2022-07-28 | |
| CVE-2022-34578 | opensourcepos Open Source Point of Sale unrestricted file upload | 7.2v3.1 | 1.1% | 2022-07-28 | |
| CVE-2022-34568 | Libsdl Simple DirectMedia Layer use-after-free | 7.5v3.1 | 1.1% | 2022-07-28 | Fix |
| CVE-2022-34558 | WMAgent arbitrary code execution via a crafted dbs-client package | 9.8v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-34557 | Barangay Management System SQL injection | 8.8v3.1 | 0.9% | 2022-07-28 | |
| CVE-2022-34556 | Picoc null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-28 | Exploit code |
| CVE-2022-34555 | TP-Link Tl-r473g remote code execution | 9.8v3.1 | 22.5% | 2022-07-28 | |
| CVE-2022-34140 | Feehi CMS cross-site scripting | 5.4v3.1 | 4.6% | 2022-07-28 | Exploit code |
| CVE-2022-34009 | Fossil-scm Fossil cross-site scripting | 5.5v3.1 | 0.4% | 2022-07-28 | Fix |
| CVE-2022-31627 | PHP heap buffer overflow in finfo_buffer | 7.7CNA v3.1 | 2.1% | 2022-07-28 | Fix |
| CVE-2022-30320 | Honeywell Saia PG5 Controls Suite weak cryptographic algorithm | 4.3v3.1 | 0.3% | 2022-07-28 | |
| CVE-2022-30319 | Honeywell Saia PG5 Controls Suite authentication bypass by spoofing | 8.1v3.1 | 0.7% | 2022-07-28 | |
| CVE-2022-30316 | Honeywell Safety Manager improper integrity check validation | 6.8v3.1 | 0.4% | 2022-07-28 | Fix |
| CVE-2022-30315 | Honeywell Safety Manager insufficient verification of data authenticity | 9.8v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-30314 | Honeywell Safety Manager Firmware hard-coded credentials | 4.6v3.1 | 0.3% | 2022-07-28 | Fix |
| CVE-2022-30313 | Honeywell Safety Manager missing authentication | 7.5v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-30287 | Horde Groupware unsafe reflection | 8.0v3.1 | 69.4% | 2022-07-28 | Fix |
| CVE-2022-29558 | Realtek RTL819X Software Development Kit command injection | 8.8v3.1 | 1.3% | 2022-07-28 | Fix |
| CVE-2022-29360 | Rainloop Webmail cross-site scripting | 5.4v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-27615 | Synology DNS Server path traversal | 7.7CNA v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-27614 | Synology Media Server web server information disclosure | 5.3CNA v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-27613 | Synology CardDAV Server SQL command improper neutralization | 8.3CNA v3.1 | 1.1% | 2022-07-28 | Fix |
| CVE-2022-27612 | Synology Audio Station cgi component buffer overflow | 7.3CNA v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-27611 | Synology Audio Station path traversal | 5.4CNA v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-27509 | Citrix ADC and Gateway open redirect | 6.1v3.1 | 0.5% | 2022-07-28 | Fix |
| CVE-2022-22685 | Synology WebDAV Server path traversal | 8.7CNA v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-22684 | Synology DiskStation Manager (DSM) OS command improper neutralization | 7.2CNA v3.1 | 1.6% | 2022-07-28 | Fix |
| CVE-2022-22683 | Synology Media Server cgi component buffer overflow | 10.0CNA v3.1 | 1.6% | 2022-07-28 | Fix |
| CVE-2022-2564 | Prototype pollution in Automattic/Mongoose | 9.8v3.1 | 31.3% | 2022-07-28 | Fix |
| CVE-2022-2553 | Booth improper authentication | 6.5NVD v3.1 | 1.3% | 2022-07-28 | Fix |
| CVE-2022-2481 | Google Chrome Views use-after-free | 8.8v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-2480 | Google Chrome Service Worker API use-after-free | 8.8v3.1 | 17.9% | 2022-07-28 | Fix |
| CVE-2022-2479 | Google Chrome improper input validation | 4.3v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2022-2478 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.9% | 2022-07-28 | Fix |
| CVE-2022-2477 | Google Chrome Guest view use-after-free | 8.8v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2022-2415 | Google Chrome WebGL heap-based buffer overflow | 8.8v3.1 | 1.9% | 2022-07-28 | Fix |
| CVE-2022-2399 | Google Chrome WebGPU use-after-free | 8.8v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-2296 | Google Chrome Chrome OS Shell use-after-free | 8.8v3.1 | 1.1% | 2022-07-28 | Fix |
| CVE-2022-2295 | Google Chrome V8 type confusion | 8.8v3.1 | 1.4% | 2022-07-28 | Fix |
| CVE-2022-2294 | WebRTC heap buffer overflow | 8.8v3.1 | 70.5% | 2022-07-28 | KEVFix |
| CVE-2022-2165 | Google Chrome URL formatting improper input validation | 4.3v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2022-2164 | Google Chrome Extensions API inappropriate implementation | 6.3v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-2163 | Google Chrome Cast UI and Toolbar use-after-free | 8.8v3.1 | 0.8% | 2022-07-28 | Fix |
| CVE-2022-2162 | Google Chrome File System API insufficient policy enforcement | 8.8v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-2161 | Google Chrome WebApp Provider use-after-free | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-2160 | Google Chrome DevTools insufficient policy enforcement | 6.5v3.1 | 0.7% | 2022-07-28 | Fix |
| CVE-2022-2158 | Google Chrome V8 type confusion | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-2157 | Google Chrome Interest groups use-after-free | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-2156 | Google Chrome Core use-after-free | 8.8v3.1 | 1.5% | 2022-07-28 | Fix |
| CVE-2022-2011 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-2010 | Google Chrome compositing out-of-bounds read | 9.3v3.1 | 1.2% | 2022-07-28 | Fix |
| CVE-2022-2008 | Google Chrome WebGL double free | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-2007 | Google Chrome WebGPU use-after-free | 8.8v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-1948 | GitLab cross-site scripting | 8.7CNA v3.1 | 1.0% | 2022-07-28 | Fix |
| CVE-2022-1919 | Google Chrome Codecs use-after-free | 8.8v3.1 | 1.3% | 2022-07-28 | Fix |
| CVE-2022-1805 | Tera2 Zero Client improper certificate validation | 8.1v3.1 | 0.6% | 2022-07-28 | Fix |
| CVE-2022-36956 | Veritas NetBackup arbitrary command execution | 7.5NVD v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36955 | Veritas NetBackup NetBackup Client privilege escalation | 8.4v3.1 | 0.2% | 2022-07-27 | Fix |
| CVE-2022-36954 | Veritas NetBackup OpsCenter vulnerability | 6.5NVD v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-36953 | In Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker to gain sensitive information. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10. | 4.3v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-36952 | Veritas NetBackup hard-coded credentials | 9.8v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2022-36951 | In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10. | 9.8v3.1 | 1.1% | 2022-07-27 | Fix |
| CVE-2022-36950 | Veritas NetBackup remote command execution | 9.8v3.1 | 1.8% | 2022-07-27 | Fix |
| CVE-2022-36949 | Veritas NetBackup OpsCenter privilege escalation | 7.8NVD v3.1 | 0.2% | 2022-07-27 | Fix |
| CVE-2022-36948 | Veritas NetBackup cross-site scripting | 5.4v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-36946 | Linux kernel denial of service | 7.5NVD v3.1 | 8.9% | 2022-07-27 | Exploit codeFix |
| CVE-2022-36922 | Jenkins Lucene-search Plugin vulnerable to reflected (XSS) cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36921 | Missing permission check in Coverity Plugin allows capturing credentials | 8.1v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-36920 | Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF) | 8.8v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36919 | Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs | 4.3v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36918 | Jenkins Buckminster Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36917 | Jenkins Google Cloud Backup Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36916 | CSRF vulnerability in Jenkins Google Cloud Backup Plugin | 8.0v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2022-36915 | Jenkins Android Signing Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36914 | Jenkins Files Found Trigger Plugin missing authorization | 4.3v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36913 | Jenkins Openstack Heat Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36912 | Missing permission checks in Jenkins openstack-heat Plugin | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36911 | CSRF vulnerability in Jenkins openstack-heat Plugin | 6.5v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-36910 | Lucene-search Plugin does not perform permission checks in several HTTP endpoints | 5.4v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2022-36909 | Missing permission check in Jenkins OpenShift Deployer Plugin | 6.5v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-36908 | CSRF vulnerability in Jenkins OpenShift Deployer Plugin | 6.5v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2022-36907 | Missing permission check in Jenkins OpenShift Deployer Plugin | 6.5v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36906 | CSRF vulnerability in Jenkins OpenShift Deployer Plugin | 6.5v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2022-36905 | Stored XSS vulnerability in Jenkins MAVEN Metadata Plugin for Jenkins CI server plugin | 5.4v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36904 | Jenkins Repository Connector Plugin missing authorization | 4.3v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36903 | Jenkins Repository Connector Plugin A missing authorization | 4.3v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36902 | Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter Plugin | 5.4v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36901 | Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted | 6.5v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-36900 | Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure | 8.2v3.1 | 1.0% | 2022-07-27 | Fix |
| CVE-2022-36899 | Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin | 8.2v3.1 | 1.0% | 2022-07-27 | Fix |
| CVE-2022-36898 | Jenkins Compuware ISPW Operations Plugin missing authorization | 4.3v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36897 | Jenkins Compuware Xpediter Code Coverage Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36896 | Jenkins Compuware Source Code Download is missing authorization | 6.5v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36895 | Jenkins Compuware Topaz Utilities Plugin is missing authorization | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36894 | Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin | 6.5v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-36893 | Jenkins Rpmsign-plugin does not perform a permission check in a method implementing form validation | 4.3v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36892 | Jenkins Rhnpush-plugin does not perform a permission check in a method implementing form validation | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36891 | Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36890 | Jenkins Deployer Framework Plugin vulnerable to path traversal | 4.3v3.1 | 1.1% | 2022-07-27 | Fix |
| CVE-2022-36889 | Jenkins Deployer Framework Plugin path traversal | 8.8v3.1 | 1.7% | 2022-07-27 | Fix |
| CVE-2022-36888 | Jenkins HashiCorp Vault Plugin missing authorization | 6.5v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36887 | Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints | 4.3v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-36886 | External Monitor Job Type Plugin does not require POST requests for an HTTP endpoint | 4.3v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-36885 | Jenkins GitHub plugin uses weak webhook signature function | 5.3v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-36884 | Lack of authentication mechanism in Jenkins Git Plugin webhook | 5.3v3.1 | 1.0% | 2022-07-27 | Fix |
| CVE-2022-36883 | Lack of authentication mechanism in Jenkins Git Plugin webhook | 7.5v3.1 | 6.9% | 2022-07-27 | Reported exploitedNucleiExploit codeFix |
| CVE-2022-36882 | Lack of authentication mechanism in Jenkins Git Plugin webhook | 8.8v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-36881 | Jenkins Git Client Plugin does not perform SSH host key verification | 8.1v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-36880 | Webmin Usermin cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-36879 | Linux kernel XFRM policy handling vulnerability | 5.5NVD v3.1 | 0.3% | 2022-07-27 | Fix |
| CVE-2022-35911 | Patlite Nhl-fb2 denial of service | 7.5v3.1 | 2.6% | 2022-07-27 | Fix |
| CVE-2022-35672 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-35669 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2022-07-27 | Fix |
| CVE-2022-35291 | Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application | 8.1CNA v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-34971 | Feehi CMS arbitrary code execution via crafted PHP file | 8.8v3.1 | 1.2% | 2022-07-27 | |
| CVE-2022-34612 | rizin integer overflow | 5.5v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-34611 | Online Fire Reporting System /index.php/?p=report cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-27 | |
| CVE-2022-34594 | Advanced School Management System cross-site scripting | 4.8v3.1 | 0.5% | 2022-07-27 | |
| CVE-2022-34551 | Sims attachment download path traversal | 6.5v3.1 | 1.0% | 2022-07-27 | |
| CVE-2022-34550 | Student Information Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-27 | |
| CVE-2022-34549 | sims unrestricted file upload | 8.8v3.1 | 1.4% | 2022-07-27 | |
| CVE-2022-34529 | wasm3 out-of-bounds read | 5.5v3.1 | 0.3% | 2022-07-27 | |
| CVE-2022-34121 | Cuppacms inclusion of untrusted functionality | 7.5v3.1 | 3.6% | 2022-07-27 | Nuclei |
| CVE-2022-34120 | Barangay Management System unrestricted file upload | 7.2v3.1 | 19.2% | 2022-07-27 | |
| CVE-2022-33970 | Shortcode Addons WordPress plugin authenticated WordPress options Change vulnerability | 7.2v3.1 | 1.1% | 2022-07-27 | Fix |
| CVE-2022-33943 | BxSlider WP WordPress plugin authenticated cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-07-27 | |
| CVE-2022-27610 | Synology DiskStation Manager (DSM) path traversal | 6.5CNA v3.1 | 1.5% | 2022-07-27 | Fix |
| CVE-2022-24406 | Open-Xchange OX App Suite insufficient randomness | 6.5v3.1 | 0.9% | 2022-07-27 | |
| CVE-2022-24405 | Open-Xchange OX App Suite OS command injection | 9.8v3.1 | 3.1% | 2022-07-27 | |
| CVE-2022-23101 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-27 | |
| CVE-2022-23100 | Open-Xchange OX App Suite OS command injection | 9.8v3.1 | 3.0% | 2022-07-27 | |
| CVE-2022-23099 | Open-Xchange App Suite cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-27 | |
| CVE-2022-2550 | OS command injection in hestiacp/hestiacp | 8.8NVD v3.1 | 49.3% | 2022-07-27 | Fix |
| CVE-2022-2549 | Null pointer dereference in gpac/gpac | 5.5v3.1 | 0.5% | 2022-07-27 | Fix |
| CVE-2022-2313 | DLL high jacking in Trellix Agent | 8.2CNA v3.1 | 0.4% | 2022-07-27 | Fix |
| CVE-2022-2310 | Skyhigh SWG authentication bypass | 10.0CNA v3.1 | 1.2% | 2022-07-27 | Fix |
| CVE-2022-1876 | Google Chrome DevTools heap-based buffer overflow | 8.8v3.1 | 0.7% | 2022-07-27 | Fix |
| CVE-2022-1875 | Google Chrome PDF inappropriate implementation | 4.3v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1874 | Google Chrome Safe Browsing insufficient policy enforcement | 8.8v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-1873 | Google Chrome COOP insufficient policy enforcement | 6.5v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-1872 | Google Chrome Extensions API insufficient policy enforcement | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1871 | Google Chrome File System API insufficient policy enforcement | 4.3v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1870 | Google Chrome App service use-after-free | 8.8v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1869 | Google Chrome V8 type confusion | 6.5v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-1868 | Google Chrome Extensions API inappropriate implementation | 6.5v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1867 | Google Chrome Data Transfer vulnerability | 6.5v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1866 | Google Chrome Tablet Mode use-after-free | 8.8v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1865 | Google Chrome Bookmarks use-after-free | 8.8v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1864 | Google Chrome WebApp Installs use-after-free | 8.8v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1863 | Google Chrome Tab Groups use-after-free | 8.8v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1862 | Google Chrome extensions inappropriate implementation | 6.5v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1861 | Google Chrome Sharing use-after-free | 8.8v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1860 | Google Chrome UI Foundations use-after-free | 8.8v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1859 | Google Chrome Performance Manager use-after-free | 8.8v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1858 | Google Chrome DevTools out-of-bounds read | 6.5v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1857 | Google Chrome File System API insufficient policy enforcement | 8.8v3.1 | 0.8% | 2022-07-27 | Fix |
| CVE-2022-1856 | Google Chrome User Education use-after-free | 8.8v3.1 | 0.6% | 2022-07-27 | Fix |
| CVE-2022-1855 | Google Chrome Messaging use-after-free | 8.8v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-1854 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.9% | 2022-07-27 | Fix |
| CVE-2022-1853 | Google Chrome Indexed DB use-after-free | 9.6v3.1 | 1.0% | 2022-07-27 | Fix |
| CVE-2022-36412 | Zoho Manageengine Supportcenter Plus improper authentication | 9.8v3.1 | 5.8% | 2022-07-26 | Fix |
| CVE-2022-36161 | Garage Management System SQL injection | 9.8v3.1 | 1.3% | 2022-07-26 | |
| CVE-2022-36129 | HashiCorp Vault missing authentication | 9.1v3.1 | 1.6% | 2022-07-26 | Fix |
| CVE-2022-35639 | IBM Sterling Partner Engagement Manager denial of service | 7.5CNA v3.0 | 1.0% | 2022-07-26 | Fix |
| CVE-2022-35286 | IBM Security Verify Information Queue cross-site request forgery | 3.1CNA v3.0 | 0.3% | 2022-07-26 | Fix |
| CVE-2022-34991 | Techvill Paymoney cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-26 | |
| CVE-2022-34989 | Fruits Bazar SQL injection | 9.8v3.1 | 1.0% | 2022-07-26 | |
| CVE-2022-34988 | Inoutscripts Blockchain Altexchanger cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-26 | |
| CVE-2022-34067 | oretnom23 Warehouse Management System SQL injection | 7.5v3.1 | 0.9% | 2022-07-26 | |
| CVE-2022-33977 | untangle vulnerable to XML entity expansion | 7.5v3.1 | 1.7% | 2022-07-26 | Fix |
| CVE-2022-33745 | Xen PV guest shadow paging vulnerability | 8.8v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2022-31879 | Online Fire Reporting System SQL injection | 8.8v3.1 | 1.4% | 2022-07-26 | |
| CVE-2022-31471 | untangle vulnerable to improper restriction of XML external entity reference | 7.5v3.1 | 1.6% | 2022-07-26 | Fix |
| CVE-2022-31207 | OMRON Cp1w-cif41 improper signature verification | 9.8v3.1 | 0.9% | 2022-07-26 | |
| CVE-2022-31206 | OMRON Nj101-1000 improper signature verification | 9.8v3.1 | 1.0% | 2022-07-26 | |
| CVE-2022-31205 | OMRON Cp1w-cif41 cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2022-07-26 | |
| CVE-2022-31204 | OMRON CX-Programmer cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2022-07-26 | |
| CVE-2022-30706 | Twinkle Toes Software Booked open redirect | 6.1v3.1 | 0.6% | 2022-07-26 | Fix |
| CVE-2022-30276 | Motorola Ace IP Gateway (4600) missing authentication | 7.5v3.1 | 0.8% | 2022-07-26 | |
| CVE-2022-30275 | Motorola Solutions Mdlc cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2022-07-26 | Fix |
| CVE-2022-30274 | Motorola ACE1000 hard-coded credentials | 9.8v3.1 | 0.6% | 2022-07-26 | |
| CVE-2022-30273 | Motorola Solutions Mdlc weak cryptographic algorithm | 9.8v3.1 | 0.4% | 2022-07-26 | Fix |
| CVE-2022-30272 | Motorola ACE1000 insufficient verification of data authenticity | 7.2v3.1 | 0.4% | 2022-07-26 | |
| CVE-2022-30271 | Motorola ACE1000 hard-coded password | 9.8v3.1 | 1.0% | 2022-07-26 | |
| CVE-2022-30270 | Motorola ACE1000 improper authentication | 9.8v3.1 | 0.9% | 2022-07-26 | |
| CVE-2022-30269 | Motorola ACE1000 insufficient verification of data authenticity | 8.8v3.1 | 0.4% | 2022-07-26 | Fix |
| CVE-2022-29965 | Emerson Deltav Distributed Control System weak cryptographic algorithm | 5.5v3.1 | 0.2% | 2022-07-26 | Fix |
| CVE-2022-29964 | Emerson Deltav Distributed Control System Sq Controller hard-coded credentials | 5.5v3.1 | 0.2% | 2022-07-26 | |
| CVE-2022-29963 | Emerson Deltav Distributed Control System Sq Controller hard-coded credentials | 5.5v3.1 | 0.2% | 2022-07-26 | |
| CVE-2022-29962 | Emerson Deltav Distributed Control System Sq Controller hard-coded credentials | 5.5v3.1 | 0.2% | 2022-07-26 | |
| CVE-2022-29960 | Emerson Openbsi hard-coded credentials | 5.5v3.1 | 0.5% | 2022-07-26 | Fix |
| CVE-2022-29958 | Jtekt Nano 10GX Tuc-1157 insufficient verification of data authenticity | 9.8v3.1 | 0.6% | 2022-07-26 | |
| CVE-2022-29957 | Emerson Deltav Distributed Control System missing authentication | 7.8v3.1 | 0.2% | 2022-07-26 | |
| CVE-2022-29953 | Bakerhughes Bently Nevada 3701/40 hard-coded credentials | 9.8v3.1 | 1.0% | 2022-07-26 | Fix |
| CVE-2022-29952 | Bakerhughes Bently Nevada 3701/40 missing authentication | 9.1v3.1 | 1.0% | 2022-07-26 | Fix |
| CVE-2022-29951 | Jtekt Nano 10GX Tuc-1157 missing authentication | 9.1v3.1 | 1.2% | 2022-07-26 | |
| CVE-2022-27105 | Digitus Inmailx cross-site scripting | 5.4v3.1 | 0.7% | 2022-07-26 | Fix |
| CVE-2022-22686 | Synology Calendar webapi component cross-site request forgery | 6.5CNA v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2022-22412 | IBM Robotic Process Automation information disclosure | 4.2CNA v3.0 | 0.3% | 2022-07-26 | Fix |
| CVE-2022-2225 | Cloudflare WARP warp-cli subcommands improper access control | 8.1CNA v3.1 | 0.2% | 2022-07-26 | Fix |
| CVE-2022-1671 | Linux kernel null pointer dereference | 7.1NVD v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2022-1651 | Linux kernel A memory leak | 7.1NVD v3.1 | 0.3% | 2022-07-26 | Fix |
| CVE-2022-1648 | Artica PFMS Pandora FMS relative path traversal to remote code execution in File Manager | 7.2v3.1 | 1.3% | 2022-07-26 | Fix |
| CVE-2022-1641 | Google Chrome Web UI Diagnostics use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1640 | Google Chrome Sharing use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1639 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1638 | Google Chrome V8 Internationalization heap-based buffer overflow | 8.8v3.1 | 0.7% | 2022-07-26 | Fix |
| CVE-2022-1637 | Google Chrome Web Contents inappropriate implementation | 4.3v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1636 | Google Chrome Performance APIs use-after-free | 8.8v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1635 | Google Chrome Permission Prompts use-after-free | 8.8v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1634 | Google Chrome Browser UI use-after-free | 8.8v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1633 | Google Chrome Sharesheet use-after-free | 8.8v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1501 | Google Chrome iframe inappropriate implementation | 6.5v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1500 | Google Chrome Dev tools improper input validation | 6.5v3.1 | 0.7% | 2022-07-26 | Fix |
| CVE-2022-1499 | Google Chrome WebAuthentication inappropriate implementation | 6.3v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1498 | Google Chrome HTML parser inappropriate implementation | 4.3v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1497 | Google Chrome Input inappropriate implementation | 6.5v3.1 | 0.5% | 2022-07-26 | Fix |
| CVE-2022-1496 | Google Chrome File Manager use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1495 | Google Chrome Downloads incorrect security UI | 4.3v3.1 | 0.7% | 2022-07-26 | Fix |
| CVE-2022-1494 | Google Chrome Trusted Types improper input validation | 6.1v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1493 | Google Chrome Dev tools use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1492 | Google Chrome Blink Editing improper input validation | 6.1v3.1 | 0.8% | 2022-07-26 | Fix |
| CVE-2022-1491 | Google Chrome Bookmarks use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1490 | Google Chrome Browser Switcher use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1489 | Google Chrome UI Shelf out-of-bounds access | 8.8v3.1 | 1.0% | 2022-07-26 | Fix |
| CVE-2022-1488 | Google Chrome Extensions API inappropriate implementation | 4.3v3.1 | 0.6% | 2022-07-26 | Fix |
| CVE-2022-1487 | Google Chrome Ozone use-after-free | 7.5v3.1 | 1.1% | 2022-07-26 | Fix |
| CVE-2022-1486 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1485 | Google Chrome File System API use-after-free | 7.5v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1484 | Google Chrome Web UI settings heap-based buffer overflow | 8.8v3.1 | 1.1% | 2022-07-26 | Fix |
| CVE-2022-1483 | Google Chrome WebGPU heap-based buffer overflow | 8.8v3.1 | 1.2% | 2022-07-26 | Fix |
| CVE-2022-1482 | Google Chrome WebGL inappropriate implementation | 6.5v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1481 | Google Chrome Sharing use-after-free | 8.8v3.1 | 1.0% | 2022-07-26 | Fix |
| CVE-2022-1479 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1478 | Google Chrome SwiftShader use-after-free | 8.8v3.1 | 0.9% | 2022-07-26 | Fix |
| CVE-2022-1477 | Google Chrome Vulkan use-after-free | 8.8v3.1 | 1.0% | 2022-07-26 | Fix |
| CVE-2022-1364 | Google Chromium V8 type confusion | 8.8v3.1 | 13.7% | 2022-07-26 | KEVExploit codeFix |
| CVE-2022-1042 | Zephyr Bluetooth mesh provisioning out-of-bounds write | 8.2CNA v3.1 | 0.8% | 2022-07-26 | |
| CVE-2022-1041 | Zephyr Bluetooth mesh provisioning out-of-bounds write | 8.2CNA v3.1 | 0.9% | 2022-07-26 | |
| CVE-2022-36450 | Obsidian remote code execution | 9.8v3.1 | 19.6% | 2022-07-25 | |
| CVE-2022-36446 | Webmin improper output encoding | 9.8NVD v3.1 | 95.9% | 2022-07-25 | NucleiMetasploitExploit code |
| CVE-2022-36444 | Atos Unify Openscape Branch remote code execution | 9.8v3.1 | 1.0% | 2022-07-25 | Fix |
| CVE-2022-36375 | Tabs WordPress plugin authenticated WordPress options Change vulnerability | 7.2v3.1 | 1.2% | 2022-07-25 | Fix |
| CVE-2022-35873 | Inductive Automation Ignition missing warning for unsafe actions | 7.8v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-35872 | Inductive Automation Ignition deserialization of untrusted data | 7.8v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-35871 | Inductive Automation Ignition missing authentication | 7.8v3.1 | 41.0% | 2022-07-25 | Fix |
| CVE-2022-35870 | Inductive Automation Ignition deserialization of untrusted data | 7.8v3.1 | 44.3% | 2022-07-25 | Fix |
| CVE-2022-35869 | Inductive Automation Ignition authentication bypass | 9.8v3.1 | 60.3% | 2022-07-25 | Fix |
| CVE-2022-35653 | Moodle LTI module reflected XSS risk | 6.1NVD v3.1 | 4.8% | 2022-07-25 | NucleiFix |
| CVE-2022-35652 | Moodle open redirect risk in mobile auto-login feature | 6.1NVD v3.1 | 1.1% | 2022-07-25 | Fix |
| CVE-2022-35651 | Moodle stored XSS and blind SSRF possible via SCORM track details | 6.1NVD v3.1 | 1.0% | 2022-07-25 | Fix |
| CVE-2022-35650 | Moodle arbitrary file read when importing lesson questions | 7.5NVD v3.1 | 53.7% | 2022-07-25 | Exploit codeFix |
| CVE-2022-35649 | Moodle PostScript code injection | 9.8NVD v3.1 | 8.7% | 2022-07-25 | Exploit codeFix |
| CVE-2022-35288 | IBM Security Verify Information Queue information disclosure | 5.3CNA v3.0 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-35287 | IBM Security Verify Information Queue hard-coded credentials | 6.8CNA v3.0 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-35285 | IBM Security Verify Information Queue cross-site request forgery | 6.5CNA v3.0 | 0.4% | 2022-07-25 | Fix |
| CVE-2022-35284 | IBM Security Verify Information Queue cookie reliance without validation | 5.3CNA v3.0 | 0.8% | 2022-07-25 | Fix |
| CVE-2022-35131 | Joplin is vulnerable to arbitrary code execution | 9.0v3.1 | 2.3% | 2022-07-25 | Exploit codeFix |
| CVE-2022-34966 | Openteknik opensource-socialnetwork cross-site scripting | 7.5v3.1 | 1.4% | 2022-07-25 | Fix |
| CVE-2022-34965 | Openteknik opensource-socialnetwork unrestricted file upload | 7.2v3.1 | 2.1% | 2022-07-25 | Fix |
| CVE-2022-34964 | Openteknik opensource-socialnetwork cross-site scripting | 4.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-34963 | Openteknik opensource-socialnetwork cross-site scripting | 5.4v3.1 | 1.1% | 2022-07-25 | Exploit codeFix |
| CVE-2022-34962 | Openteknik opensource-socialnetwork cross-site scripting | 5.4v3.1 | 1.1% | 2022-07-25 | Exploit codeFix |
| CVE-2022-34961 | Openteknik opensource-socialnetwork cross-site scripting | 5.4v3.1 | 1.1% | 2022-07-25 | Exploit codeFix |
| CVE-2022-34907 | FileWave An authentication bypass | 9.8v3.1 | 15.8% | 2022-07-25 | Fix |
| CVE-2022-34906 | FileWave hard-coded cryptographic key | 7.5v3.1 | 10.5% | 2022-07-25 | Fix |
| CVE-2022-34749 | mistune regular expression denial of service | 7.5v3.1 | 1.5% | 2022-07-25 | Fix |
| CVE-2022-34577 | WAVLINK WN535G3 arbitrary code execution | 9.8v3.1 | 2.4% | 2022-07-25 | |
| CVE-2022-34576 | WAVLINK WN535G3 arbitrary code execution | 7.5v3.1 | 3.6% | 2022-07-25 | Nuclei |
| CVE-2022-34575 | WAVLINK Wifi-repeater Firmware An improper access control | 5.7v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-34574 | WAVLINK Wifi-repeater Firmware An improper access control | 5.7v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-34573 | WAVLINK Wifi-repeater Firmware An improper access control | 6.3v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-34572 | WAVLINK Wifi-repeater Firmware An improper access control | 5.7v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-34571 | WAVLINK Wifi-repeater Firmware An improper access control | 8.0v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-34570 | WAVLINK Wl-wn579x3 forced browsing | 7.5v3.1 | 1.0% | 2022-07-25 | Fix |
| CVE-2022-33969 | Flipbox WordPress plugin authenticated WordPress options Change vulnerability | 7.2v3.1 | 1.2% | 2022-07-25 | Fix |
| CVE-2022-33965 | WP Visitor Statistics WordPress plugin Multiple unauthenticated SQL injection (SQLi) | 9.8v3.1 | 4.3% | 2022-07-25 | NucleiFix |
| CVE-2022-29709 | Communilink Clink Office SQL injection | 7.5v3.1 | 1.3% | 2022-07-25 | |
| CVE-2022-26307 | The Document Foundation LibreOffice Weak Master Keys | 8.8v3.1 | 1.4% | 2022-07-25 | Fix |
| CVE-2022-26306 | The Document Foundation LibreOffice stored web connection passwords vulnerability | 7.5v3.1 | 1.0% | 2022-07-25 | Fix |
| CVE-2022-26305 | The Document Foundation LibreOffice An improper certificate validation | 7.5v3.1 | 1.1% | 2022-07-25 | Fix |
| CVE-2022-24992 | QR Code Generator path traversal | 7.5v3.1 | 1.5% | 2022-07-25 | Exploit code |
| CVE-2022-24083 | Pegasystems Pega Infinity improper authorization | 9.8CNA v3.0 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-23000 | Western Digital My Cloud Weak Default SSL use in Port Forwarding service | 7.3CNA v3.1 | 0.2% | 2022-07-25 | Fix |
| CVE-2022-22999 | Western Digital My Cloud cross-site scripting vulnerability in USB Backups App | 8.2CNA v3.1 | 0.4% | 2022-07-25 | Fix |
| CVE-2022-21802 | grapesjs cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2022-07-25 | Fix |
| CVE-2022-2523 | Cross-site scripting (XSS) Reflected in beancount/Fava | 6.1NVD v3.1 | 0.8% | 2022-07-25 | Fix |
| CVE-2022-2522 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-2514 | Cross-site scripting (XSS) Reflected in beancount/Fava | 6.1NVD v3.1 | 0.8% | 2022-07-25 | Fix |
| CVE-2022-2341 | Simple Page Transition WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-07-25 | |
| CVE-2022-2340 | W-DALIL WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-07-25 | |
| CVE-2022-2299 | Allow SVG Files WordPress plugin Author+ stored cross-site scripting via SVG | 5.4NVD v3.1 | 0.6% | 2022-07-25 | |
| CVE-2022-2240 | Request a Quote WordPress plugin CSV injection | 8.8NVD v3.1 | 1.4% | 2022-07-25 | Fix |
| CVE-2022-2239 | Request a Quote WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-2219 | Unyson WordPress plugin reflected cross-site scripting | 7.2NVD v3.1 | 1.7% | 2022-07-25 | NucleiFix |
| CVE-2022-2189 | WP Video Lightbox WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-2131 | OpenKM XXE injection | 9.8v3.1 | 0.8% | 2022-07-25 | Fix |
| CVE-2022-2115 | Popup Anything WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-2072 | Name Directory WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-2071 | Name Directory WordPress plugin stored cross-site scripting via CSRF | 6.1NVD v3.1 | 0.3% | 2022-07-25 | Fix |
| CVE-2022-2059 | Artica PFMS Pandora FMS stored cross-site-scripting in Agent Manager | 4.8v3.1 | 0.4% | 2022-07-25 | Fix |
| CVE-2022-2032 | Artica PFMS Pandora FMS stored cross-site-scripting in File Manager | 4.8v3.1 | 0.4% | 2022-07-25 | Fix |
| CVE-2022-1551 | SP Project and Document Manager WordPress plugin sensitive file disclosure | 6.5NVD v3.1 | 1.0% | 2022-07-25 | Fix |
| CVE-2022-1539 | Exports and Reports WordPress plugin Contributor+ CSV injection | 8.8NVD v3.1 | 1.5% | 2022-07-25 | Fix |
| CVE-2022-1314 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-1313 | Google Chrome tab groups use-after-free | 8.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-1312 | Google Chrome storage use-after-free | 9.6v3.1 | 0.6% | 2022-07-25 | Fix |
| CVE-2022-1311 | Google Chrome shell use-after-free | 8.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-1310 | Google Chrome regular expressions use-after-free | 8.8v3.1 | 1.1% | 2022-07-25 | Fix |
| CVE-2022-1309 | Google Chrome developer tools insufficient policy enforcement | 9.6v3.1 | 0.8% | 2022-07-25 | Fix |
| CVE-2022-1308 | Google Chrome BFCache use-after-free | 8.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-1307 | Google Chrome full screen inappropriate implementation | 4.3v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-1306 | Google Chrome compositing inappropriate implementation | 4.3v3.1 | 0.7% | 2022-07-25 | Fix |
| CVE-2022-1305 | Google Chrome storage use-after-free | 8.8v3.1 | 0.9% | 2022-07-25 | Fix |
| CVE-2022-1232 | Google Chrome V8 type confusion | 8.8v3.1 | 16.5% | 2022-07-25 | Fix |
| CVE-2022-0899 | Header Footer Code Manager WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-07-25 | NucleiFix |
| CVE-2022-0670 | ceph incorrect authorization | 9.1v3.1 | 1.1% | 2022-07-25 | Fix |
| CVE-2022-0594 | Shareaholic WordPress plugin information disclosure | 5.3NVD v3.1 | 2.1% | 2022-07-25 | NucleiFix |
| CVE-2022-24294 | ReDoS in Apache MXNet RTC module | 7.5v3.1 | 1.8% | 2022-07-24 | Fix |
| CVE-2022-36415 | Scooter Software Beyond Compare uninstaller in Scooter DLL hijacking | 7.8v3.1 | 0.2% | 2022-07-23 | Fix |
| CVE-2022-36414 | Scooter Software Beyond Compare Windows EXE installer in Scooter elevation of privilege | 6.7v3.1 | 0.2% | 2022-07-23 | Fix |
| CVE-2022-1146 | Google Chrome Resource Timing inappropriate implementation | 6.5v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1145 | Google Chrome extensions use-after-free | 7.5v3.1 | 0.6% | 2022-07-23 | Fix |
| CVE-2022-1144 | Google Chrome WebUI use-after-free | 8.8v3.1 | 0.7% | 2022-07-23 | Fix |
| CVE-2022-1143 | Google Chrome WebUI heap-based buffer overflow | 8.8v3.1 | 0.8% | 2022-07-23 | Fix |
| CVE-2022-1142 | Google Chrome WebUI heap-based buffer overflow | 8.8v3.1 | 0.8% | 2022-07-23 | Fix |
| CVE-2022-1141 | Google Chrome File Manager use-after-free | 8.8v3.1 | 0.8% | 2022-07-23 | Fix |
| CVE-2022-1139 | Google Chrome Background Fetch API inappropriate implementation | 6.5v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1138 | Google Chrome Web Cursor inappropriate implementation | 6.5v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1137 | Google Chrome extensions inappropriate implementation | 6.5v3.1 | 0.6% | 2022-07-23 | Fix |
| CVE-2022-1136 | Google Chrome Tab Strip use-after-free | 8.8v3.1 | 0.6% | 2022-07-23 | Fix |
| CVE-2022-1135 | Google Chrome Shopping Cart use-after-free | 8.8v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1134 | Google Chrome V8 type confusion | 8.8v3.1 | 1.8% | 2022-07-23 | Fix |
| CVE-2022-1133 | Google Chrome WebRTC Perf use-after-free | 8.8v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1132 | Google Chrome Virtual Keyboard inappropriate implementation | 6.1v3.1 | 0.3% | 2022-07-23 | Fix |
| CVE-2022-1131 | Google Chrome Cast UI use-after-free | 8.8v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1130 | Google Chrome null pointer dereference | 8.1v3.1 | 0.8% | 2022-07-23 | Fix |
| CVE-2022-1129 | Google Chrome Full Screen Mode inappropriate implementation | 6.5v3.1 | 0.8% | 2022-07-23 | Fix |
| CVE-2022-1128 | Google Chrome Web Share API inappropriate implementation | 6.5v3.1 | 0.7% | 2022-07-23 | Fix |
| CVE-2022-1127 | Google Chrome QR Code Generator use-after-free | 8.8v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1125 | Google Chrome Portals use-after-free | 8.8v3.1 | 0.9% | 2022-07-23 | Fix |
| CVE-2022-1096 | Google Chromium V8 type confusion | 8.8NVD v3.1 | 24.7% | 2022-07-23 | KEVFix |
| CVE-2022-36131 | Midori-global Better PDF Exporter cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-22 | Fix |
| CVE-2022-34983 | Scu-captcha hidden functionality | 9.8v3.1 | 1.6% | 2022-07-22 | Fix |
| CVE-2022-34982 | Eziod hidden functionality | 9.8v3.1 | 1.4% | 2022-07-22 | Fix |
| CVE-2022-34981 | Pycrowdtangle hidden functionality | 9.8v3.1 | 1.6% | 2022-07-22 | Fix |
| CVE-2022-34853 | wpWax Team plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-22 | |
| CVE-2022-34839 | WP OAuth2 Server WordPress plugin authentication bypass | 9.8v3.1 | 1.1% | 2022-07-22 | |
| CVE-2022-34650 | wpWax Team plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-22 | |
| CVE-2022-34520 | radare2 null pointer dereference | 5.5v3.1 | 0.3% | 2022-07-22 | Fix |
| CVE-2022-34509 | Wikifaces hidden functionality | 9.8v3.1 | 1.4% | 2022-07-22 | Fix |
| CVE-2022-34503 | Qpdf out-of-bounds write | 6.5v3.1 | 0.7% | 2022-07-22 | Fix |
| CVE-2022-34502 | radare2 out-of-bounds write | 5.5v3.1 | 0.3% | 2022-07-22 | Fix |
| CVE-2022-34501 | PYPI hidden functionality | 9.8v3.1 | 1.4% | 2022-07-22 | |
| CVE-2022-34500 | PYPI hidden functionality | 9.8v3.1 | 1.5% | 2022-07-22 | Fix |
| CVE-2022-34115 | Dataease SQL injection via parameter dataSourceId | 9.8v3.1 | 1.2% | 2022-07-22 | Fix |
| CVE-2022-34114 | SQL injection found in Dataease | 8.8v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-34113 | Dataease allows arbitrary code execution via crafter plugin | 9.8v3.1 | 1.3% | 2022-07-22 | Fix |
| CVE-2022-34112 | Dataease access control issue allows attackers to arbitrarily uninstall plugin | 6.5v3.1 | 0.6% | 2022-07-22 | Fix |
| CVE-2022-34037 | caddyserver caddy rewrite function at /modules/ out-of-bounds read | 7.5v3.1 | 1.2% | 2022-07-22 | Fix |
| CVE-2022-33960 | Social Share Buttons by Supsystic WordPress plugin Multiple authenticated SQL injection (SQLi) | 8.8v3.1 | 1.0% | 2022-07-22 | Fix |
| CVE-2022-33901 | MultiSafepay plugin for WooCommerce WordPress plugin unauthenticated arbitrary file read | 7.5v3.1 | 2.6% | 2022-07-22 | NucleiFix |
| CVE-2022-33191 | Testimonials WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-07-22 | |
| CVE-2022-31172 | OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers | 7.5CNA v3.1 | 0.5% | 2022-07-22 | Fix |
| CVE-2022-31170 | OpenZeppelin Contracts's ERC165Checker may revert instead of returning false | 7.5CNA v3.1 | 0.8% | 2022-07-22 | Fix |
| CVE-2022-31169 | Bytecode Alliance Wasmtime Cranelift AArch64 code generator incorrect calculation | 5.9CNA v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-31168 | Zulip Server insufficient authorization for changing bot roles | 5.4CNA v3.1 | 0.8% | 2022-07-22 | Fix |
| CVE-2022-31164 | Tovy vulnerable to users logging in as and impersonating other users | 7.5CNA v3.1 | 0.6% | 2022-07-22 | Fix |
| CVE-2022-31163 | TZInfo relative path traversal vulnerability allows loading of arbitrary files | 7.5CNA v3.1 | 2.4% | 2022-07-22 | Fix |
| CVE-2022-31162 | Slack Morphism for Rust can leak Slack OAuth client information in application debug logs | 7.5CNA v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-30998 | Homepage Product Organizer for WooCommerce WordPress plugin Multiple authenticated SQL injection | 8.8NVD v3.1 | 0.9% | 2022-07-22 | |
| CVE-2022-29495 | Popup Builder WordPress plugin cross-site request forgery (CSRF) leading to plugin settings update | 4.3v3.1 | 0.5% | 2022-07-22 | NucleiFix |
| CVE-2022-28879 | All F-Secure and WithSecure Endpoint Protection products denial of service (DoS) | 7.5v3.1 | 0.4% | 2022-07-22 | |
| CVE-2022-28878 | All F-Secure and WithSecure Endpoint Protection products denial of service (DoS) | 7.5v3.1 | 0.4% | 2022-07-22 | |
| CVE-2022-27235 | Social Share Buttons by Supsystic WordPress plugin Multiple broken access control | 8.8v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-25759 | The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload. | 9.8v3.1 | 11.0% | 2022-07-22 | Fix |
| CVE-2022-20916 | Cisco IoT Control Center cross-site scripting | 6.1CNA v3.1 | 0.6% | 2022-07-22 | Fix |
| CVE-2022-20913 | Cisco Nexus Dashboard arbitrary file write | 4.9CNA v3.1 | 1.1% | 2022-07-22 | Fix |
| CVE-2022-20912 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20911 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20910 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.1% | 2022-07-22 | |
| CVE-2022-20909 | Cisco Nexus Dashboard privilege escalation | 6.0CNA v3.1 | 0.2% | 2022-07-22 | Fix |
| CVE-2022-20908 | Cisco Nexus Dashboard privilege escalation | 6.0CNA v3.1 | 0.2% | 2022-07-22 | Fix |
| CVE-2022-20907 | Cisco Nexus Dashboard privilege escalation | 6.0CNA v3.1 | 0.2% | 2022-07-22 | Fix |
| CVE-2022-20906 | Cisco Nexus Dashboard privilege escalation | 6.0CNA v3.1 | 0.2% | 2022-07-22 | Fix |
| CVE-2022-20904 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20903 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20902 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20901 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20900 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20899 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20898 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20897 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20896 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20895 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20894 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20893 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-20892 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-22 | |
| CVE-2022-2511 | Hallo Welt! BlueSpice potential XSS in title URL parameter | 6.1v3.1 | 0.4% | 2022-07-22 | Fix |
| CVE-2022-2510 | Hallo Welt! BlueSpice potential XSS on Special:SearchCenter | 6.1v3.1 | 0.4% | 2022-07-22 | Fix |
| CVE-2022-2495 | Cross-site scripting (XSS) Stored in microweber/microweber | 4.8v3.1 | 0.7% | 2022-07-22 | Fix |
| CVE-2022-2494 | Cross-site scripting (XSS) Stored in openemr/openemr | 5.4v3.1 | 0.6% | 2022-07-22 | Fix |
| CVE-2022-2493 | Data Access from Outside Expected Data Manager component in openemr/openemr | 8.1v3.1 | 1.1% | 2022-07-22 | Fix |
| CVE-2022-2470 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-2327 | Linux kernel io_uring use-after-free | 7.8NVD v3.1 | 0.3% | 2022-07-22 | Fix |
| CVE-2022-2143 | Advantech iView command injection | 9.8v3.1 | 60.3% | 2022-07-22 | MetasploitExploit codeFix |
| CVE-2022-2142 | Advantech iView SQL injection | 5.9NVD v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-2139 | Advantech iView path traversal | 9.8v3.1 | 16.0% | 2022-07-22 | Fix |
| CVE-2022-2138 | Advantech iView missing authentication | 7.5v3.1 | 10.9% | 2022-07-22 | Fix |
| CVE-2022-2137 | Advantech iView SQL injection | 4.9v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-2136 | Advantech iView SQL injection | 6.5NVD v3.1 | 9.1% | 2022-07-22 | Fix |
| CVE-2022-2135 | Advantech iView SQL injection | 7.5v3.1 | 10.1% | 2022-07-22 | Fix |
| CVE-2022-1655 | OpenStack Horizon incorrect permission assignment | 6.5NVD v3.1 | 0.5% | 2022-07-22 | Fix |
| CVE-2022-0980 | Google Chrome New Tab page use-after-free | 8.8v3.1 | 0.6% | 2022-07-22 | Fix |
| CVE-2022-0979 | Google Chrome Safe Browsing use-after-free | 8.8v3.1 | 0.8% | 2022-07-22 | Fix |
| CVE-2022-0978 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.9% | 2022-07-22 | Fix |
| CVE-2022-36313 | file-type vulnerable to infinite loop via malformed MKV file | 5.5NVD v3.1 | 0.4% | 2022-07-21 | Fix |
| CVE-2022-35899 | ASUS Aura Ready Game Software Development Kit There is an unquoted search path | 7.8v3.1 | 0.9% | 2022-07-21 | Exploit code |
| CVE-2022-34767 | ALLNET Gmbh ADSL/VDSL Router inkl. Modem and Wlan authorization bypass | 9.8v3.1 | 0.6% | 2022-07-21 | |
| CVE-2022-34487 | Shortcode Addons WordPress plugin unauthenticated arbitrary option update vulnerability | 5.3NVD v3.1 | 3.3% | 2022-07-21 | NucleiFix |
| CVE-2022-34367 | Dell Data Protection Central cross-site request forgery | 5.4CNA v3.1 | 0.4% | 2022-07-21 | Fix |
| CVE-2022-33923 | Dell PowerStore OS command injection | 6.4CNA v3.1 | 0.4% | 2022-07-21 | Fix |
| CVE-2022-33198 | Accordions WordPress plugin unauthenticated WordPress options Change vulnerability | 5.3NVD v3.1 | 3.3% | 2022-07-21 | NucleiFix |
| CVE-2022-32556 | Couchbase Server sensitive information in log files | 7.5v3.1 | 0.9% | 2022-07-21 | Fix |
| CVE-2022-32498 | Dell PowerStore uncontrolled search path | 5.5CNA v3.1 | 0.2% | 2022-07-21 | Fix |
| CVE-2022-32430 | TaleLin lin-cms-spring-boot Hard-coded JWT Token in Lin CMS Spring Boot | 7.5v3.1 | 4.6% | 2022-07-21 | Nuclei |
| CVE-2022-32289 | Sygnoos Popup Builder (WordPress plugin) cross-site request forgery | 4.3v3.1 | 0.3% | 2022-07-21 | Fix |
| CVE-2022-31475 | GiveWP WordPress plugin authenticated arbitrary file read via export function | 4.9v3.1 | 0.8% | 2022-07-21 | Fix |
| CVE-2022-31234 | Dell PowerStore missing brute-force protection | 8.1CNA v3.1 | 1.0% | 2022-07-21 | Fix |
| CVE-2022-31151 | Uncleared cookies on cross-host/cross-origin redirect in undici | 3.7CNA v3.1 | 0.7% | 2022-07-21 | Fix |
| CVE-2022-31146 | Wasmtime vulnerable to use-after-free with `externref`s | 6.4CNA v3.1 | 1.2% | 2022-07-21 | Fix |
| CVE-2022-30628 | Supersmart.me Walk Through access to business information without authentication | 5.5v3.1 | 0.2% | 2022-07-21 | |
| CVE-2022-30536 | WP Maintenance WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.7% | 2022-07-21 | Fix |
| CVE-2022-30337 | WP Meta SEO WordPress plugin Social settings update vis cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-07-21 | Fix |
| CVE-2022-28877 | Local privilege escalation vulnerability in F-Secure and WithSecure Windows Endpoint Products | 6.7v3.1 | 0.4% | 2022-07-21 | |
| CVE-2022-28861 | Citilog cleartext transmission of sensitive information | 5.9v3.1 | 0.5% | 2022-07-21 | |
| CVE-2022-28860 | Citilog man-in-the-middle | 5.9v3.1 | 0.8% | 2022-07-21 | |
| CVE-2022-28700 | GiveWP WordPress plugin authenticated arbitrary file creation via export function | 7.2NVD v3.1 | 2.1% | 2022-07-21 | Fix |
| CVE-2022-28666 | Custom Product Tabs for WooCommerce WordPress plugin broken access control | 5.3v3.1 | 1.4% | 2022-07-21 | NucleiFix |
| CVE-2022-22555 | Dell PowerStore OS command injection | 6.0CNA v3.1 | 0.8% | 2022-07-21 | Fix |
| CVE-2022-20891 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.2% | 2022-07-21 | |
| CVE-2022-20890 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.0% | 2022-07-21 | |
| CVE-2022-20889 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20888 | Cisco Small Business RV Series Routers web-based management interface remote command execution | 4.7CNA v3.1 | 1.2% | 2022-07-21 | |
| CVE-2022-20887 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.2% | 2022-07-21 | |
| CVE-2022-20886 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.1% | 2022-07-21 | |
| CVE-2022-20885 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20884 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20883 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.1% | 2022-07-21 | |
| CVE-2022-20882 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20881 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20880 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.1% | 2022-07-21 | |
| CVE-2022-20879 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.1% | 2022-07-21 | |
| CVE-2022-20878 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20877 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20876 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20875 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20874 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.3% | 2022-07-21 | |
| CVE-2022-20873 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 1.1% | 2022-07-21 | |
| CVE-2022-20861 | Cisco Nexus Dashboard unauthorized access | 9.8CNA v3.1 | 0.6% | 2022-07-21 | Fix |
| CVE-2022-20860 | Cisco Nexus Dashboard SSL Certificate Validation vulnerability | 7.4CNA v3.1 | 0.5% | 2022-07-21 | Fix |
| CVE-2022-20858 | Cisco Nexus Dashboard unauthorized access | 9.8CNA v3.1 | 1.3% | 2022-07-21 | Fix |
| CVE-2022-20857 | Cisco Nexus Dashboard unauthorized access | 9.8CNA v3.1 | 1.6% | 2022-07-21 | Fix |
| CVE-2022-0977 | Google Chrome Browser UI use-after-free | 9.6v3.1 | 0.9% | 2022-07-21 | Fix |
| CVE-2022-0976 | Google Chrome GPU heap-based buffer overflow | 8.8v3.1 | 1.0% | 2022-07-21 | Fix |
| CVE-2022-0975 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.9% | 2022-07-21 | Fix |
| CVE-2022-0974 | Google Chrome Splitscreen use-after-free | 8.8v3.1 | 0.9% | 2022-07-21 | Fix |
| CVE-2022-0973 | Google Chrome Safe Browsing use-after-free | 9.6v3.1 | 0.9% | 2022-07-21 | Fix |
| CVE-2022-0972 | Google Chrome extensions use-after-free | 8.8v3.1 | 0.8% | 2022-07-21 | Fix |
| CVE-2022-0971 | Google Chrome Blink Layout use-after-free | 8.8v3.1 | 1.2% | 2022-07-21 | Fix |
| CVE-2022-0902 | ABB Flow Computer and Remote Controllers Totalflow TCP protocol path traversal | 8.1CNA v3.1 | 16.5% | 2022-07-21 | Fix |
| CVE-2022-36322 | JetBrains TeamCity argument injection | 5.4CNA v3.1 | 0.6% | 2022-07-20 | Fix |
| CVE-2022-36321 | JetBrains TeamCity sensitive information in log files | 4.1CNA v3.1 | 1.8% | 2022-07-20 | Fix |
| CVE-2022-35569 | Blogifier cross-site scripting | 4.8v3.1 | 0.5% | 2022-07-20 | |
| CVE-2022-34866 | Yokogawa Rental & Lease Passage Drive improper input validation | 7.8v3.1 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-34610 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.3% | 2022-07-20 | |
| CVE-2022-34609 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.3% | 2022-07-20 | |
| CVE-2022-34608 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34607 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 13.5% | 2022-07-20 | |
| CVE-2022-34606 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34605 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34604 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34603 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34602 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34601 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34600 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34599 | H3C Magic R200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-34590 | Hospital Management System SQL injection | 7.2v3.1 | 4.5% | 2022-07-20 | Nuclei |
| CVE-2022-34588 | Advanced School Management System SQL injection | 8.8v3.1 | 0.8% | 2022-07-20 | |
| CVE-2022-34586 | Advanced School Management System SQL injection | 8.8v3.1 | 0.9% | 2022-07-20 | |
| CVE-2022-34150 | ICSA-22-200-01 MiCODUS MV720 GPS tracker authorization bypass through user-controlled key | 5.4NVD v3.1 | 0.7% | 2022-07-20 | Fix |
| CVE-2022-34049 | WAVLINK Wl-wn530hg4 An improper access control | 5.3v3.1 | 2.6% | 2022-07-20 | Nuclei |
| CVE-2022-34048 | WAVLINK WN533A8 cross-site scripting | 6.1v3.1 | 6.3% | 2022-07-20 | NucleiExploit code |
| CVE-2022-34047 | WAVLINK Wl-wn530hg4 An improper access control | 7.5v3.1 | 21.4% | 2022-07-20 | NucleiExploit code |
| CVE-2022-34046 | WAVLINK WN533A8 improper access control | 7.5v3.1 | 20.4% | 2022-07-20 | NucleiExploit code |
| CVE-2022-34045 | WAVLINK Wl-wn530hg4 hard-coded credentials | 9.8v3.1 | 3.2% | 2022-07-20 | Nuclei |
| CVE-2022-34042 | Barangay Management System SQL injection | 7.2v3.1 | 0.9% | 2022-07-20 | |
| CVE-2022-33967 | DENX Software Engineering U-Boot out-of-bounds write | 7.8v3.1 | 0.6% | 2022-07-20 | Fix |
| CVE-2022-33944 | ICSA-22-200-01 MiCODUS MV720 GPS tracker authorization bypass through user-controlled key | 6.5v3.1 | 0.9% | 2022-07-20 | Fix |
| CVE-2022-33320 | Mitsubishi Electric GENESIS64 deserialization of untrusted data | 7.8CNA v3.1 | 0.5% | 2022-07-20 | Fix |
| CVE-2022-33319 | Mitsubishi Electric GENESIS64 out-of-bounds read | 8.2CNA v3.1 | 1.6% | 2022-07-20 | Fix |
| CVE-2022-33318 | Mitsubishi Electric GENESIS64 deserialization of untrusted data | 9.8CNA v3.1 | 50.1% | 2022-07-20 | Fix |
| CVE-2022-33317 | Mitsubishi Electric GENESIS64 inclusion of untrusted functionality | 7.8CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-33316 | Mitsubishi Electric GENESIS64 deserialization of untrusted data | 7.8CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-33315 | Mitsubishi Electric GENESIS64 deserialization of untrusted data | 7.8CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-32962 | HiCOS’ client-side citizen digital certificate double free | 6.8CNA v3.1 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-32961 | HiCOS’ client-side citizen digital certificate stack buffer overflow | 6.8CNA v3.1 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-32960 | HiCOS’ client-side citizen digital certificate stack buffer overflow | 6.8v3.1 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-32959 | HiCOS’ client-side citizen digital certificate stack buffer overflow | 6.8CNA v3.1 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-32958 | TEAMPLUS TECHNOLOGY INC. Teamplus Pro allocation of resources without limits or throttling | 6.5NVD v3.1 | 1.0% | 2022-07-20 | Fix |
| CVE-2022-32458 | Data Systems Consulting Co., Ltd. BPM XML external entity (XXE) injection | 7.5CNA v3.1 | 1.1% | 2022-07-20 | Fix |
| CVE-2022-32457 | Data Systems Consulting Co., Ltd. BPM blind server-side request forgery (SSRF) | 5.3v3.1 | 0.8% | 2022-07-20 | Fix |
| CVE-2022-32456 | Data Systems Consulting Co., Ltd. BPM SQL injection | 9.8CNA v3.1 | 1.6% | 2022-07-20 | Fix |
| CVE-2022-31250 | openSUSE Tumbleweed keylime %post scriplet allows for privilege escalation from keylime user to root | 7.1CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-31160 | jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label | 6.1CNA v3.1 | 2.6% | 2022-07-20 | Exploit codeFix |
| CVE-2022-29923 | Quick Restaurant Reservations WordPress plugin authenticated reflected cross-site scripting (XSS) | 4.8v3.1 | 0.6% | 2022-07-20 | Fix |
| CVE-2022-29834 | Mitsubishi Electric GENESIS64 path traversal | 7.5CNA v3.1 | 1.6% | 2022-07-20 | Fix |
| CVE-2022-29454 | Better Messages WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-26138 | Atlassian Questions For Confluence App hard-coded credentials | 9.8v3.1 | 98.2% | 2022-07-20 | KEVNucleiExploit codeFix |
| CVE-2022-26137 | A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue associated with this vulnerability: Cross-o | 8.8v3.1 | 2.2% | 2022-07-20 | Fix |
| CVE-2022-26136 | Atlassian Crucible authentication bypass | 9.8v3.1 | 5.0% | 2022-07-20 | Fix |
| CVE-2022-24660 | Goldshell Miner Firmware cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2022-07-20 | |
| CVE-2022-24659 | Goldshell Miner Firmware path traversal | 7.5v3.1 | 1.5% | 2022-07-20 | |
| CVE-2022-24657 | Goldshell Miner Firmware hard-coded credentials | 9.8v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-22424 | IBM QRadar SIEM incorrect default permissions | 5.1CNA v3.0 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-22221 | Junos OS: SRX and EX Series: Local privilege escalation flaw in download functionality | 7.8CNA v3.1 | 0.2% | 2022-07-20 | Fix |
| CVE-2022-22217 | Juniper Networks Junos OS Packet Forwarding Engine improper check for exceptional conditions | 6.1CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-22216 | Junos OS: PTX Series and QFX10000 Series: Etherleak memory disclosure in Ethernet padding data | 4.3CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-22215 | Juniper Networks Junos OS plugable authentication module missing file descriptor release | 6.5CNA v3.1 | 0.6% | 2022-07-20 | Fix |
| CVE-2022-22214 | Juniper Networks Junos OS Packet Forwarding Engine improper input validation | 6.5CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-22213 | Juniper Junos OS and Junos OS Evolved RPD BGP update processing vulnerability | 5.9CNA v3.1 | 0.7% | 2022-07-20 | Fix |
| CVE-2022-22212 | Juniper Networks Junos OS Evolved Packet Forwarding Engine resource exhaustion | 7.5CNA v3.1 | 0.8% | 2022-07-20 | Fix |
| CVE-2022-22210 | Juniper Networks Junos OS Packet Forwarding Engine null pointer dereference | 6.5CNA v3.1 | 0.3% | 2022-07-20 | Fix |
| CVE-2022-22209 | Juniper Networks Junos OS kernel memory leak | 7.5CNA v3.1 | 1.0% | 2022-07-20 | Fix |
| CVE-2022-22207 | Juniper Networks Junos OS Advanced Forwarding Toolkit use-after-free | 7.5CNA v3.1 | 0.8% | 2022-07-20 | Fix |
| CVE-2022-22206 | Juniper Networks Junos OS PFE buffer overflow | 7.5CNA v3.1 | 0.8% | 2022-07-20 | Fix |
| CVE-2022-22205 | Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario | 7.5CNA v3.1 | 0.8% | 2022-07-20 | Fix |
| CVE-2022-22204 | Juniper Junos OS SIP ALG memory leak | 5.3CNA v3.1 | 0.7% | 2022-07-20 | Fix |
| CVE-2022-22203 | Juniper Networks Junos OS PFE incorrect comparison | 6.5CNA v3.1 | 1.1% | 2022-07-20 | Fix |
| CVE-2022-22202 | Juniper Junos OS PTX Series FPC vulnerability | 6.5CNA v3.1 | 0.5% | 2022-07-20 | Fix |
| CVE-2022-2492 | SourceCodester Library Management System index.php SQL injection | 8.8v3.1 | 0.7% | 2022-07-20 | |
| CVE-2022-2491 | SourceCodester Library Management System lab.php SQL injection | 8.8v3.1 | 0.7% | 2022-07-20 | |
| CVE-2022-2490 | SourceCodester Simple E-Learning System search.php SQL injection | 8.8v3.1 | 0.7% | 2022-07-20 | |
| CVE-2022-2489 | SourceCodester Simple E-Learning System classRoom.php SQL injection | 8.8v3.1 | 0.7% | 2022-07-20 | |
| CVE-2022-2488 | WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection | 9.8v3.1 | 32.9% | 2022-07-20 | Nuclei |
| CVE-2022-2487 | WAVLINK WN535K2/WN535K3 nightled.cgi os command injection | 9.8v3.1 | 79.5% | 2022-07-20 | Nuclei |
| CVE-2022-2486 | WAVLINK WN535K2/WN535K3 os command injection | 9.8v3.1 | 29.8% | 2022-07-20 | Nuclei |
| CVE-2022-2199 | ICSA-22-200-01 MiCODUS MV720 GPS tracker cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-07-20 | Fix |
| CVE-2022-2179 | ICSA-22-188-01 Rockwell Automation MicroLogix improper restriction of rendered UI layers or frames | 6.5v3.1 | 1.1% | 2022-07-20 | |
| CVE-2022-2141 | ICSA-22-200-01 MiCODUS MV720 GPS tracker improper authentication | 9.8v3.1 | 1.2% | 2022-07-20 | Fix |
| CVE-2022-2107 | ICSA-22-200-01 MiCODUS MV720 GPS tracker use of hard-coded credentials | 9.8v3.1 | 1.2% | 2022-07-20 | Fix |
| CVE-2022-1766 | Anchore Enterprise insufficiently protected credentials | 7.5v3.1 | 0.7% | 2022-07-20 | Fix |
| CVE-2022-1264 | Inductive Automation Ignition web configuration interface path traversal | 8.8v3.1 | 0.9% | 2022-07-20 | Fix |
| CVE-2022-36305 | VestaCP Vesta Control Panel cross-site scripting | 6.1v3.1 | 0.5% | 2022-07-19 | |
| CVE-2022-36304 | VestaCP Vesta Control Panel cross-site scripting | 6.1v3.1 | 0.5% | 2022-07-19 | |
| CVE-2022-36303 | VestaCP Vesta Control Panel cross-site scripting | 6.1v3.1 | 0.5% | 2022-07-19 | |
| CVE-2022-35912 | Grails framework remote code execution via Data Binding | 9.8v3.1 | 2.2% | 2022-07-19 | Fix |
| CVE-2022-35405 | Zoho ManageEngine Multiple Products remote code execution | 9.8v3.1 | 99.9% | 2022-07-19 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-34540 | Dw Megapix OS command injection | 8.8v3.1 | 1.2% | 2022-07-19 | |
| CVE-2022-34539 | Dw Megapix OS command injection | 8.8v3.1 | 1.2% | 2022-07-19 | |
| CVE-2022-34538 | Dw Megapix OS command injection | 8.8v3.1 | 2.8% | 2022-07-19 | |
| CVE-2022-34537 | Dw Megapix cross-site scripting | 5.4v3.1 | 0.4% | 2022-07-19 | |
| CVE-2022-34536 | Dw Megapix session fixation | 7.5v3.1 | 0.7% | 2022-07-19 | |
| CVE-2022-34535 | Dw Megapix improper authentication | 7.5v3.1 | 0.7% | 2022-07-19 | |
| CVE-2022-34534 | DW Spectrum Server API information disclosure | 7.5v3.1 | 2.5% | 2022-07-19 | Nuclei |
| CVE-2022-34266 | libtiff uninitialized resource use | 5.5v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-34169 | Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets | 7.5v3.1 | 81.0% | 2022-07-19 | Exploit codeFix |
| CVE-2022-34025 | VestaCP Vesta Control Panel cross-site scripting | 6.1v3.1 | 0.5% | 2022-07-19 | |
| CVE-2022-34024 | Barangay Management System unrestricted file upload | 7.2v3.1 | 1.4% | 2022-07-19 | Exploit code |
| CVE-2022-34023 | Barangay Management System SQL injection | 9.8v3.1 | 0.7% | 2022-07-19 | |
| CVE-2022-34001 | UNIT4 Enterprise Resource Planning XML external entity injection | 6.5v3.1 | 0.8% | 2022-07-19 | |
| CVE-2022-31150 | Node.js undici CRLF injection in request headers | 5.3CNA v3.1 | 1.5% | 2022-07-19 | Fix |
| CVE-2022-31144 | Potential heap overflow in Redis | 7.0CNA v3.1 | 3.2% | 2022-07-19 | Exploit codeFix |
| CVE-2022-30570 | TIBCO Data Virtualization access control vulnerability | 6.5CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-30532 | Octopus Deploy Octopus Server artifact management vulnerability | 5.3v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-30526 | Zyxel USG FLEX 100(W) firmware improper privilege management | 7.8CNA v3.1 | 1.1% | 2022-07-19 | Exploit codeKCVFix |
| CVE-2022-30302 | Fortinet FortiDeceptor path traversal | 6.5CNA v3.1 | 0.9% | 2022-07-19 | Fix |
| CVE-2022-30301 | Fortinet FortiAP-U path traversal | 7.8CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-29060 | Fortinet FortiDDoS hard-coded credentials | 8.1CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-29057 | Fortinet FortiEDR cross-site scripting | 5.4CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-27580 | SICK Safety Designer deserialization of untrusted data | 7.8v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-27579 | SICK Flexi Soft Designer deserialization of untrusted data | 7.8v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-27545 | HCL BigFix Web Reports authorized users may perform HTML injection | 4.6CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-27544 | HCL BigFix Web Reports authorized users may see sensitive information in clear text | 5.0CNA v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-27483 | Fortinet FortiManager, FortiAnalyzer OS command injection | 7.2CNA v3.1 | 2.2% | 2022-07-19 | Fix |
| CVE-2022-27373 | Phicomm FIR303B OS command injection | 8.8v3.1 | 3.5% | 2022-07-19 | |
| CVE-2022-26113 | Fortinet FortiClientWindows improper privilege management | 7.7CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-24082 | Pegasystems Pega Infinity deserialization of untrusted data | 9.8CNA v3.0 | 12.2% | 2022-07-19 | Exploit codeFix |
| CVE-2022-22417 | IBM Sterling Partner Engagement Manager cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-22416 | IBM Sterling Partner Engagement Manager server-side request forgery | 5.4CNA v3.0 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-22360 | IBM Sterling Partner Engagement Manager LDAP injection | 7.5CNA v3.0 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-22359 | IBM Sterling Partner Engagement Manager cross-site request forgery | 4.3CNA v3.0 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-22358 | IBM Sterling Partner Engagement Manager XML external entity injection | 7.1CNA v3.0 | 1.3% | 2022-07-19 | Fix |
| CVE-2022-21586 | Oracle Financial Services Applications Banking Trade Finance unauthorized data access | 6.4CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-21585 | Oracle Financial Services Applications Banking Trade Finance unauthorized data access | 6.7CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21584 | Oracle Financial Services Applications Banking Trade Finance unauthorized data access | 6.4CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21583 | Oracle Financial Services Applications Banking Trade Finance unauthorized data access | 6.4CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-21582 | Oracle Financial Services Applications Banking Trade Finance unauthorized data access | 6.7CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21581 | Oracle Financial Services Applications Banking Trade Finance unauthorized data modification | 5.9CNA v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-21580 | Oracle Financial Services Revenue Management and Billing unauthorized data access | 5.9CNA v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-21579 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access | 6.4CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21578 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access | 6.7CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21577 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access | 6.4CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21576 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access | 6.4CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-21575 | Oracle WebCenter Sites Support Tools User interface component unauthorized data access | 6.0CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21574 | Oracle Communications Billing and Revenue Management Connection Manager component denial of service | 5.3CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-21573 | Oracle Communications Billing and Revenue Management Billing Care component denial of service | 6.5CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21572 | Oracle Communications Billing and Revenue Management unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-21571 | Oracle VM VirtualBox Core component takeover | 8.2CNA v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-21570 | Oracle Coherence Core component denial of service | 7.5CNA v3.1 | 0.9% | 2022-07-19 | Fix |
| CVE-2022-21569 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.4% | 2022-07-19 | Fix |
| CVE-2022-21568 | Oracle E-Business Suite iReceivables Access request component unauthorized data access | 6.5CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21567 | Oracle E-Business Suite Workflow Worklist component unauthorized data access | 7.5CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-21566 | Oracle E-Business Suite Applications Framework Diagnostics component unauthorized data access | 7.5CNA v3.1 | 1.1% | 2022-07-19 | Fix |
| CVE-2022-21565 | Oracle Database Java VM vulnerability | 6.5CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21564 | Oracle WebLogic Server Web services component denial of service | 5.3CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-21563 | Oracle ZFS Storage Appliance Kit Core component unauthorized data modification | 3.4CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21562 | Oracle SOA Suite Fabric Layer component unauthorized data modification | 7.5CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21561 | Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data access | 6.5CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21560 | Oracle WebLogic Server Core component denial of service | 5.3CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-21559 | Oracle Commerce Platform Dynamo Application Framework component unauthorized data access | 5.5CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21558 | Oracle Crystal Ball Installation component takeover | 7.8CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-21557 | Oracle WebLogic Server Web Container component unauthorized data access | 5.7CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21556 | Oracle MySQL Server Optimizer component unauthorized data modification | 6.5CNA v3.1 | 1.4% | 2022-07-19 | Fix |
| CVE-2022-21555 | Oracle MySQL Shell for VS Code Shell GUI component unauthorized data modification | 4.2CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21554 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-21553 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-07-19 | Fix |
| CVE-2022-21552 | Oracle WebCenter Content Search component unauthorized data modification | 7.2CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21551 | Oracle GoldenGate takeover | 6.8CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21550 | Oracle MySQL Cluster General component takeover | 6.3CNA v3.1 | 50.7% | 2022-07-19 | Fix |
| CVE-2022-21549 | Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification | 5.3CNA v3.1 | 2.5% | 2022-07-19 | Fix |
| CVE-2022-21548 | Oracle WebLogic Server Core component unauthorized data modification | 6.5CNA v3.1 | 0.9% | 2022-07-19 | Fix |
| CVE-2022-21547 | Oracle MySQL Server Federated component denial of service | 4.9CNA v3.1 | 1.4% | 2022-07-19 | Fix |
| CVE-2022-21545 | Oracle E-Business Suite iRecruitment information disclosure | 5.3CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21544 | Oracle Financial Services Applications FLEXCUBE Universal Banking Infrastructure component takeover | 7.1CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21543 | Oracle PeopleSoft Enterprise PeopleTools Updates Environment Mgmt component takeover | 9.8CNA v3.1 | 1.5% | 2022-07-19 | Fix |
| CVE-2022-21542 | Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data modification | 7.4CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21541 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component unauthorized data modification | 5.9CNA v3.1 | 2.9% | 2022-07-19 | Fix |
| CVE-2022-21540 | Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component information disclosure | 5.3CNA v3.1 | 4.2% | 2022-07-19 | Fix |
| CVE-2022-21539 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.0CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-21538 | Oracle MySQL Server Security Encryption component denial of service | 3.1CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21537 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.8% | 2022-07-19 | Fix |
| CVE-2022-21536 | Oracle Enterprise Manager Base Platform Policy Framework component takeover | 8.1CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-21535 | Oracle MySQL Shell General/Core client component denial of service | 2.5CNA v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-21534 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-21533 | Oracle Solaris SMB Server component denial of service | 5.5CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21532 | Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator component information disclosure | 4.3CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-21531 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-21530 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2022-07-19 | Fix |
| CVE-2022-21529 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-21528 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.6% | 2022-07-19 | Fix |
| CVE-2022-21527 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-21526 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.9% | 2022-07-19 | Fix |
| CVE-2022-21525 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2022-07-19 | Fix |
| CVE-2022-21524 | Oracle Solaris Filesystem component unauthorized data modification | 7.6CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21523 | Oracle BI Publisher BI Publisher Security component information disclosure | 4.3CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-21522 | Oracle MySQL Server Stored Procedure component denial of service | 4.4CNA v3.1 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-21521 | Oracle PeopleSoft Enterprise PeopleTools XML Publisher component unauthorized data access | 4.9CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21520 | Oracle PeopleSoft Enterprise PeopleTools Fluid Core component unauthorized data modification | 6.1CNA v3.1 | 0.6% | 2022-07-19 | Fix |
| CVE-2022-21519 | Oracle MySQL Cluster General component denial of service | 5.9CNA v3.1 | 1.4% | 2022-07-19 | Fix |
| CVE-2022-21518 | Oracle Health Sciences Data Management Workbench User interface component unauthorized data access | 6.5CNA v3.1 | 0.8% | 2022-07-19 | Fix |
| CVE-2022-21517 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.8% | 2022-07-19 | Fix |
| CVE-2022-21516 | Oracle Enterprise Manager Base Platform unauthorized data modification | 7.3CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-21515 | Oracle MySQL Server options component denial of service | 4.9CNA v3.1 | 1.8% | 2022-07-19 | Fix |
| CVE-2022-21514 | Oracle Solaris Remote Administration daemon component denial of service | 7.5CNA v3.1 | 1.3% | 2022-07-19 | Fix |
| CVE-2022-21513 | Oracle ZFS Storage Appliance Kit Core component takeover | 8.2CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-21512 | Oracle PeopleSoft Enterprise PeopleTools Integration Broker component unauthorized data access | 4.4CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21511 | Oracle Database takeover | 7.2CNA v3.1 | 1.1% | 2022-07-19 | Fix |
| CVE-2022-21510 | Oracle Database Sharding vulnerability | 8.8CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-21509 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 1.7% | 2022-07-19 | Fix |
| CVE-2022-21508 | Oracle Essbase security and provisioning improper access control | 5.8CNA v3.1 | 0.3% | 2022-07-19 | Fix |
| CVE-2022-21455 | Oracle MySQL Server PAM Auth plugin component unauthorized data modification | 4.9CNA v3.1 | 1.1% | 2022-07-19 | Fix |
| CVE-2022-21439 | Oracle Solaris Kernel component denial of service | 4.2CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-21432 | Oracle Database Server RDBMS security denial of service | 2.7CNA v3.1 | 0.9% | 2022-07-19 | Fix |
| CVE-2022-21429 | Oracle Communications Billing and Revenue Management Billing Care component takeover | 8.1CNA v3.1 | 1.4% | 2022-07-19 | Fix |
| CVE-2022-21428 | Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access | 6.7CNA v3.1 | 0.7% | 2022-07-19 | Fix |
| CVE-2022-2476 | Wavpack null pointer dereference | 5.5NVD v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-2469 | GNU SASL out-of-bounds read | 3.8CNA v3.1 | 1.6% | 2022-07-19 | Fix |
| CVE-2022-2468 | SourceCodester Garage Management System editbrand.php SQL injection | 8.8v3.1 | 0.9% | 2022-07-19 | |
| CVE-2022-2467 | SourceCodester Garage Management System login.php SQL injection | 9.8v3.1 | 4.5% | 2022-07-19 | Nuclei |
| CVE-2022-2454 | Integer overflow or wraparound in gpac/gpac | 7.8v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-2453 | gpac/gpac GitHub repository use-after-free | 7.8v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-2394 | Sensitive Parameter Exposure in Puppet Bolt | 3.5NVD v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-2193 | HYPR Server insecure direct object reference | 7.5CNA v3.1 | 1.0% | 2022-07-19 | Fix |
| CVE-2022-2192 | HYPR Server forced browsing | 7.5CNA v3.1 | 0.9% | 2022-07-19 | |
| CVE-2022-2122 | GStreamer heap-based buffer overflow | 7.8NVD v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-2030 | Zyxel USG FLEX 100(W) firmware path traversal | 6.5CNA v3.1 | 1.4% | 2022-07-19 | Fix |
| CVE-2022-1984 | HYPR Windows WFA deserialization of untrusted data | 4.5CNA v3.1 | 0.2% | 2022-07-19 | Fix |
| CVE-2022-1925 | GStreamer heap-based buffer overflow | 7.8NVD v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-1924 | GStreamer heap-based buffer overflow | 7.8NVD v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-1923 | GStreamer heap-based buffer overflow | 7.8NVD v3.1 | 0.4% | 2022-07-19 | Fix |
| CVE-2022-1922 | GStreamer heap-based buffer overflow | 7.8NVD v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-1921 | GStreamer integer overflow | 7.8NVD v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-1920 | GStreamer integer overflow | 7.8NVD v3.1 | 0.5% | 2022-07-19 | Fix |
| CVE-2022-36127 | Service unavailability impact in NodeJS agent(version) | 7.5v3.1 | 1.8% | 2022-07-18 | Fix |
| CVE-2022-35741 | Apache CloudStack SAML Single Sign-on XXE | 9.8v3.1 | 7.9% | 2022-07-18 | Fix |
| CVE-2022-35404 | Zoho ManageEngine Firewall Analyzer improper input validation | 8.2v3.1 | 2.8% | 2022-07-18 | Fix |
| CVE-2022-34902 | Parallels Access uncontrolled search path | 7.8v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2022-34901 | Parallels Access uncontrolled search path | 7.8v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2022-34900 | Parallels Access uncontrolled search path | 7.8v3.1 | 0.4% | 2022-07-18 | Fix |
| CVE-2022-34899 | Parallels Access time-of-check time-of-use race condition | 7.8v3.1 | 0.2% | 2022-07-18 | Fix |
| CVE-2022-34892 | Parallels Desktop race condition | 7.8v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2022-34891 | Parallels Desktop incorrect permission assignment | 7.8v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2022-34890 | Parallels Desktop untrusted pointer dereference | 8.8v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2022-34889 | Parallels Desktop out-of-bounds read | 8.2v3.1 | 0.4% | 2022-07-18 | Fix |
| CVE-2022-34875 | Foxit PDF Reader out-of-bounds read | 3.3v3.1 | 0.9% | 2022-07-18 | Fix |
| CVE-2022-34874 | Foxit PDF Reader out-of-bounds read | 3.3v3.1 | 0.9% | 2022-07-18 | Fix |
| CVE-2022-34873 | Foxit PDF Reader out-of-bounds read | 3.3v3.1 | 0.9% | 2022-07-18 | Fix |
| CVE-2022-34643 | Spike Risc-v Isa Simulator improper exception handling | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34642 | Spike Risc-v Isa Simulator denial of service | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34641 | Openhwgroup CVA6 improper exception handling | 5.5v3.1 | 0.3% | 2022-07-18 | |
| CVE-2022-34640 | OpenHW Group CVA6 ecall and ebreak handling vulnerability | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34639 | Openhwgroup CVA6 improper exception handling | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34637 | Openhwgroup CVA6 improper exception handling | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34636 | Openhwgroup CVA6 improper exception handling | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34635 | OpenHW Group CVA6 mstatus register vulnerability | 9.8v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-34634 | Openhwgroup CVA6 improper exception handling | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34633 | Openhwgroup CVA6 improper exception handling | 5.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-34632 | Linux Foundation Rocket Chip Generator weak cryptographic algorithm | 9.1v3.1 | 0.6% | 2022-07-18 | |
| CVE-2022-34035 | htmldoc out-of-bounds write | 7.5v3.1 | 1.5% | 2022-07-18 | Fix |
| CVE-2022-34033 | htmldoc out-of-bounds write | 7.5v3.1 | 1.5% | 2022-07-18 | Fix |
| CVE-2022-34032 | Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c. | 7.5v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-34031 | F5 NJS value-to-number conversion vulnerability | 7.5v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-34030 | F5 NJS DJB hash function vulnerability | 7.5v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-34029 | F5 Njs out-of-bounds read | 9.1v3.1 | 1.2% | 2022-07-18 | |
| CVE-2022-34028 | F5 NJS UTF-8 decoding vulnerability | 7.5v3.1 | 1.0% | 2022-07-18 | |
| CVE-2022-34027 | F5 NJS value property handling vulnerability | 7.5v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-33891 | Apache Spark command injection | 8.8v3.1 | 93.1% | 2022-07-18 | KEVNucleiMetasploitExploit codeFix |
| CVE-2022-32450 | AnyDesk link following | 7.1v3.1 | 0.5% | 2022-07-18 | |
| CVE-2022-32387 | Kentico Xperience denial of service | 7.5v3.1 | 1.0% | 2022-07-18 | Fix |
| CVE-2022-30627 | Chcnav P5E Gnss information disclosure hard coded credentials | 7.5v3.1 | 0.3% | 2022-07-18 | |
| CVE-2022-30626 | Chcnav P5E GNSS wifi_ap_pata_get.cmd endpoint cleartext storage of sensitive information | 7.5v3.1 | 0.2% | 2022-07-18 | |
| CVE-2022-30625 | Chcnav P5E Gnss directory listing | 5.3v3.1 | 0.3% | 2022-07-18 | |
| CVE-2022-30624 | Chcnav P5E Gnss authentication bypass admin password reset | 7.5v3.1 | 0.3% | 2022-07-18 | |
| CVE-2022-30623 | Chcnav P5E Gnss authentication bypass | 9.8v3.1 | 0.4% | 2022-07-18 | |
| CVE-2022-30621 | Cellinx NVT IP PTZ Camera local file inclusion | 6.5NVD v3.1 | 0.7% | 2022-07-18 | |
| CVE-2022-30620 | Cellinx NVT IP PTZ Camera privilege escalation | 8.8v3.1 | 0.5% | 2022-07-18 | |
| CVE-2022-28683 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.2% | 2022-07-18 | Fix |
| CVE-2022-28682 | Foxit PDF Reader out-of-bounds read | 7.8v3.1 | 1.2% | 2022-07-18 | Fix |
| CVE-2022-28681 | Foxit PDF Reader out-of-bounds read | 6.1v3.1 | 0.9% | 2022-07-18 | Fix |
| CVE-2022-28680 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28679 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28678 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28677 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28676 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28675 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28674 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28673 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28672 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.9% | 2022-07-18 | Exploit codeFix |
| CVE-2022-28671 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-28670 | Foxit PDF Reader out-of-bounds read | 7.8v3.1 | 1.0% | 2022-07-18 | Fix |
| CVE-2022-28669 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-27434 | UNIT4 Teta SQL injection | 9.8NVD v3.1 | 1.4% | 2022-07-18 | Fix |
| CVE-2022-26120 | Fortinet FortiADC SQL injection | 5.4CNA v3.1 | 0.7% | 2022-07-18 | Fix |
| CVE-2022-26118 | Fortinet FortiManager, FortiAnalyzer improper privilege management | 6.7CNA v3.1 | 0.3% | 2022-07-18 | Fix |
| CVE-2022-26117 | Fortinet FortiNAC weak password requirements | 8.8CNA v3.1 | 1.0% | 2022-07-18 | Fix |
| CVE-2022-24692 | Dsknet cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-18 | |
| CVE-2022-24691 | Dsknet SQL injection | 7.1v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-24690 | Dsknet SQL injection | 8.2v3.1 | 1.1% | 2022-07-18 | |
| CVE-2022-24689 | Dsknet missing brute-force protection | 5.3v3.1 | 0.9% | 2022-07-18 | |
| CVE-2022-24688 | Dsknet unrestricted file upload | 8.8v3.1 | 3.4% | 2022-07-18 | Fix |
| CVE-2022-23745 | Checkpoint Harmony Capsule Workspace memory corruption | 7.5NVD v3.1 | 16.9% | 2022-07-18 | Fix |
| CVE-2022-23438 | Fortinet FortiOS cross-site scripting | 4.7CNA v3.1 | 0.7% | 2022-07-18 | Fix |
| CVE-2022-23142 | ZXEN CG200 denial of service | 5.3v3.1 | 0.7% | 2022-07-18 | Fix |
| CVE-2022-22445 | IBM PowerVM Hypervisor FSP vulnerability | 7.6CNA v3.0 | 0.7% | 2022-07-18 | Fix |
| CVE-2022-22304 | Fortinet FortiAuthenticator OutlookAgent cross-site scripting | 6.1CNA v3.1 | 0.6% | 2022-07-18 | Fix |
| CVE-2022-2444 | Visualizer: Tables and Charts Manager for WordPress plugin PHAR deserialization | 8.8v3.1 | 2.2% | 2022-07-18 | Fix |
| CVE-2022-2443 | FreeMind WP Browser WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.6% | 2022-07-18 | |
| CVE-2022-2437 | Feed Them Social WordPress plugin deserialization of untrusted data | 9.8v3.1 | 1.7% | 2022-07-18 | Fix |
| CVE-2022-2435 | AnyMind Widget WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.6% | 2022-07-18 | |
| CVE-2022-2400 | External control of file name or path in dompdf/dompdf | 5.3v3.1 | 1.2% | 2022-07-18 | Fix |
| CVE-2022-2224 | Gallery for Social Photo WordPress plugin cross-site request forgery to post Duplication | 4.3v3.1 | 0.4% | 2022-07-18 | Fix |
| CVE-2022-2223 | Image Slider WordPress plugin cross-site request forgery to post Duplication | 4.3v3.1 | 0.4% | 2022-07-18 | Fix |
| CVE-2022-2117 | GiveWP Donation Plugin and Fundraising Platform WordPress plugin sensitive information disclosure | 5.3v3.1 | 1.1% | 2022-07-18 | Fix |
| CVE-2022-2108 | Wbcom Designs BuddyPress Group Reviews missing authorization | 5.3v3.1 | 0.8% | 2022-07-18 | Fix |
| CVE-2022-2101 | Download Manager WordPress plugin Contributor+ cross-site scripting | 5.4v3.1 | 1.0% | 2022-07-18 | Fix |
| CVE-2022-2039 | The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.11. This is due to missing nonce protection on the livesupporti_settings() function found in the ~/livesupporti.php file. This makes it possible for unauthenticated attack | 8.8v3.1 | 0.6% | 2022-07-18 | Fix |
| CVE-2022-2001 | DX Share Selection WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.6% | 2022-07-18 | Fix |
| CVE-2022-1912 | Button Widget Smartsoft WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.6% | 2022-07-18 | Fix |
| CVE-2022-1565 | Import any XML or CSV File to WordPress plugin Admin+ Malicious file upload | 7.2v3.1 | 14.7% | 2022-07-18 | Exploit codeFix |
| CVE-2022-35861 | pyenv path traversal | 7.8v3.1 | 0.3% | 2022-07-17 | Fix |
| CVE-2022-33903 | torproject Tor denial of service | 7.5v3.1 | 1.2% | 2022-07-17 | Fix |
| CVE-2022-32985 | Nexans Gigaswitch 641 Desk V5 Sfp-vi hard-coded credentials | 9.8v3.1 | 1.2% | 2022-07-17 | Fix |
| CVE-2022-32320 | Ferdium cross-site request forgery | 8.8v3.1 | 0.5% | 2022-07-17 | |
| CVE-2022-32263 | Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719. | 7.5v3.1 | 1.0% | 2022-07-17 | |
| CVE-2022-31260 | Montala ResourceSpace missing authentication | 6.5v3.1 | 1.9% | 2022-07-17 | NucleiFix |
| CVE-2022-31213 | Dbus-broker null pointer dereference | 7.5v3.1 | 2.1% | 2022-07-17 | Fix |
| CVE-2022-31212 | Dbus-broker out-of-bounds read | 7.5v3.1 | 2.1% | 2022-07-17 | Fix |
| CVE-2022-31211 | Infiray Iray-a8z3 weak password requirements | 9.8v3.1 | 1.6% | 2022-07-17 | |
| CVE-2022-31210 | Infiray Iray-a8z3 hard-coded credentials | 9.8v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-31209 | Infiray Iray-a8z3 buffer overflow | 9.8v3.1 | 1.2% | 2022-07-17 | |
| CVE-2022-31208 | Infiray Iray-a8z3 arbitrary command execution | 8.8v3.1 | 1.4% | 2022-07-17 | Fix |
| CVE-2022-31202 | Monitoringsoft Softguard Web path traversal | 6.5v3.1 | 1.3% | 2022-07-17 | |
| CVE-2022-31201 | Monitoringsoft Softguard Web cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-17 | |
| CVE-2022-30982 | Gentics Cms cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-17 | |
| CVE-2022-30981 | Gentics Cms deserialization of untrusted data | 8.8v3.1 | 1.3% | 2022-07-17 | |
| CVE-2022-30622 | Chcnav P5E Gnss information disclosure | 7.3v3.1 | 0.2% | 2022-07-17 | |
| CVE-2022-30550 | dovecot improper authentication | 8.8v3.1 | 2.1% | 2022-07-17 | Fix |
| CVE-2022-29286 | Pexip Infinity resource exhaustion | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-28809 | Opendesign Drawings SDK missing authentication | 7.8v3.1 | 0.4% | 2022-07-17 | Fix |
| CVE-2022-28808 | Opendesign Drawings SDK out-of-bounds read | 7.8v3.1 | 0.4% | 2022-07-17 | Fix |
| CVE-2022-28807 | Opendesign Drawings SDK out-of-bounds read | 7.8v3.1 | 0.4% | 2022-07-17 | Fix |
| CVE-2022-27937 | Pexip Infinity resource exhaustion | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27936 | Pexip Infinity H.323 vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27935 | Pexip Infinity Epic Telehealth integration vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27934 | Pexip Infinity HTTP interface vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27933 | Pexip Infinity One Touch Join vulnerability | 8.2v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27932 | Pexip Infinity One Touch Join vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27931 | Pexip Infinity Session Initiation Protocol vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27930 | Pexip Infinity single sign-on vulnerability | 5.9v3.1 | 0.9% | 2022-07-17 | |
| CVE-2022-27929 | Pexip Infinity HTTP interface vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-27928 | Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol. | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-26657 | Pexip Infinity One Touch Join vulnerability | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-26656 | Pexip Infinity One Touch Join vulnerability | 8.2v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-26655 | Pexip Infinity improper input validation | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-26654 | Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP. | 7.5v3.1 | 1.1% | 2022-07-17 | |
| CVE-2022-26482 | Poly Eagleeye Director Ii OS command injection | 7.2v3.1 | 23.4% | 2022-07-17 | |
| CVE-2022-26481 | Poly G7500 OS command injection | 8.8v3.1 | 1.5% | 2022-07-17 | |
| CVE-2022-26479 | Poly Eagleeye Director Ii incorrect authorization | 9.8v3.1 | 2.0% | 2022-07-17 | |
| CVE-2022-26352 | dotCMS unrestricted upload of File | 9.8v3.1 | 91.6% | 2022-07-17 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-25357 | Pexip Infinity improper access control | 5.3v3.1 | 0.6% | 2022-07-17 | |
| CVE-2022-2222 | Download Monitor WordPress plugin Admin+ arbitrary file download | 4.9NVD v3.1 | 1.1% | 2022-07-17 | Fix |
| CVE-2022-2194 | Accept Stripe Payments WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2187 | Contact Form 7 Captcha WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.5% | 2022-07-17 | NucleiFix |
| CVE-2022-2186 | Simple Post Notes WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2173 | Advanced Database Cleaner WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-07-17 | Fix |
| CVE-2022-2169 | Loading Page with Loading Screen WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2168 | Download Manager WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.4% | 2022-07-17 | NucleiFix |
| CVE-2022-2151 | Best Contact Management Software WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2149 | Very Simple Breadcrumb WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | |
| CVE-2022-2148 | LinkedIn Company Updates WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | |
| CVE-2022-2146 | Import CSV Files WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2022-07-17 | |
| CVE-2022-2144 | Jquery Validation For Contact Form 7 WordPress plugin arbitrary options update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-07-17 | Fix |
| CVE-2022-2133 | OAuth Single Sign On WordPress plugin authentication bypass | 5.3NVD v3.1 | 1.2% | 2022-07-17 | Fix |
| CVE-2022-2118 | 404s WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2114 | Data Tables Generator by Supsystic WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2100 | Page Generator WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-2099 | WooCommerce WordPress plugin Admin+ stored HTML injection | 4.8NVD v3.1 | 0.7% | 2022-07-17 | Fix |
| CVE-2022-2090 | Woo Discount Rules WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-07-17 | Fix |
| CVE-2022-1933 | CDI WordPress plugin reflected cross-site-scripting | 6.1NVD v3.1 | 1.7% | 2022-07-17 | NucleiFix |
| CVE-2022-1672 | Insights from Google PageSpeed WordPress plugin Multiple CSRF | 8.8NVD v3.1 | 0.6% | 2022-07-17 | Fix |
| CVE-2022-36126 | Inductive Automation Ignition incorrect authorization | 7.2v3.1 | 2.5% | 2022-07-16 | Fix |
| CVE-2022-35906 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35905 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35904 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35903 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35902 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35901 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35900 | Bentley MicroStation out-of-bounds read | 3.3v3.1 | 0.2% | 2022-07-15 | Fix |
| CVE-2022-35890 | Inductive Automation Ignition incorrect authorization | 9.8v3.1 | 2.0% | 2022-07-15 | Fix |
| CVE-2022-35409 | Arm mbed TLS out-of-bounds read | 9.1v3.1 | 2.2% | 2022-07-15 | Fix |
| CVE-2022-34826 | Couchbase Server sensitive information in log files | 5.9v3.1 | 0.6% | 2022-07-15 | Fix |
| CVE-2022-34252 | Adobe InCopy Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2022-07-15 | Fix |
| CVE-2022-34251 | Adobe InCopy Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.3% | 2022-07-15 | Fix |
| CVE-2022-34250 | Adobe InCopy Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-34249 | Adobe InCopy Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-34248 | Adobe InDesign Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2022-07-15 | Fix |
| CVE-2022-34247 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.3% | 2022-07-15 | Fix |
| CVE-2022-34246 | Adobe InDesign Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-34245 | Adobe InDesign Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-34244 | Adobe Photoshop U3D File Parsing access of uninitialized pointer information disclosure | 5.5CNA v3.1 | 0.4% | 2022-07-15 | Fix |
| CVE-2022-34243 | Adobe Photoshop U3D File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-34242 | Adobe Character Animator SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2022-07-15 | Fix |
| CVE-2022-34241 | Adobe Character Animator SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-34239 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 3.1% | 2022-07-15 | Fix |
| CVE-2022-34237 | Adobe Acrobat Reader DC Font Parsing use-after-free information disclosure | 5.5CNA v3.1 | 3.2% | 2022-07-15 | Fix |
| CVE-2022-34236 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 3.1% | 2022-07-15 | Fix |
| CVE-2022-34234 | Adobe Acrobat Reader DC Doc printWithParams use-after-free information disclosure | 5.5CNA v3.1 | 3.3% | 2022-07-15 | Fix |
| CVE-2022-34233 | Adobe Acrobat Reader DC Doc print use-after-free information disclosure | 5.5CNA v3.1 | 4.5% | 2022-07-15 | Fix |
| CVE-2022-34232 | Adobe Acrobat Reader DC Annotation print use-after-free information disclosure | 5.5CNA v3.1 | 3.3% | 2022-07-15 | Fix |
| CVE-2022-34230 | Adobe Acrobat Reader use-after-free could lead to arbitrary code execution | 7.8CNA v3.1 | 3.5% | 2022-07-15 | Fix |
| CVE-2022-34229 | Adobe Acrobat Reader DC AcroForm rect use-after-free remote code execution | 7.8CNA v3.1 | 3.6% | 2022-07-15 | Fix |
| CVE-2022-34228 | Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution | 7.8CNA v3.1 | 3.5% | 2022-07-15 | Fix |
| CVE-2022-34226 | Adobe Acrobat Reader DC PDF Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 5.0% | 2022-07-15 | Fix |
| CVE-2022-34225 | Adobe Acrobat Reader DC AcroForm exportValues use-after-free remote code execution | 7.8CNA v3.1 | 3.5% | 2022-07-15 | Fix |
| CVE-2022-34223 | Adobe Acrobat Reader DC AcroForm currentValueIndices use-after-free remote code execution | 7.8CNA v3.1 | 3.6% | 2022-07-15 | Fix |
| CVE-2022-34222 | Adobe Acrobat Reader DC query out-of-bounds read remote code execution | 7.8CNA v3.1 | 3.3% | 2022-07-15 | Fix |
| CVE-2022-34221 | Adobe Acrobat Reader type confusion vulnerability could lead to arbitrary code execution | 7.8CNA v3.0 | 11.1% | 2022-07-15 | Fix |
| CVE-2022-34220 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 4.3% | 2022-07-15 | Fix |
| CVE-2022-34219 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.0 | 6.2% | 2022-07-15 | Fix |
| CVE-2022-34217 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 3.1% | 2022-07-15 | Fix |
| CVE-2022-34216 | Adobe Acrobat Reader DC PDF Parsing use-after-free remote code execution | 7.8CNA v3.0 | 6.2% | 2022-07-15 | Fix |
| CVE-2022-34215 | Adobe Acrobat Reader DC Annotation Polygon out-of-bounds read remote code execution | 7.8CNA v3.1 | 3.3% | 2022-07-15 | Fix |
| CVE-2022-32434 | OpENer out-of-bounds write | 7.8v3.1 | 0.8% | 2022-07-15 | |
| CVE-2022-32119 | Arox School ERP Pro unrestricted file upload | 8.8v3.1 | 2.0% | 2022-07-15 | Exploit code |
| CVE-2022-32118 | Arox School ERP Pro cross-site scripting | 6.1v3.1 | 1.1% | 2022-07-15 | Exploit code |
| CVE-2022-31161 | Roxy-WI vulnerable to unauthenticated remote code execution via ssl_cert upload | 10.0CNA v3.1 | 28.8% | 2022-07-15 | NucleiExploit codeFix |
| CVE-2022-31159 | aws-sdk-java partial path traversal in com.amazonaws:aws-java-sdk-s3 | 7.9CNA v3.1 | 1.6% | 2022-07-15 | Fix |
| CVE-2022-31158 | Authentication bypass by capture-replay in packbackbooks/lti-1-3-php-library | 7.5CNA v3.1 | 0.9% | 2022-07-15 | Fix |
| CVE-2022-31157 | Packback LTI 1.3 Tool Library nonce generation weak cryptographic algorithm | 7.5CNA v3.1 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-31153 | OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli | 6.5CNA v3.1 | 1.5% | 2022-07-15 | Fix |
| CVE-2022-31107 | Grafana account takeover via OAuth | 7.1CNA v3.1 | 2.9% | 2022-07-15 | Fix |
| CVE-2022-31097 | Stored XSS in Grafana's Unified Alerting | 7.3CNA v3.1 | 70.1% | 2022-07-15 | Fix |
| CVE-2022-30634 | Indefinite hang with large buffers on Windows in crypto/rand | 7.5v3.1 | 2.1% | 2022-07-15 | Fix |
| CVE-2022-30245 | Honeywell Alerton Compass externally controlled resource reference | 6.5v3.1 | 1.3% | 2022-07-15 | Fix |
| CVE-2022-30244 | Honeywell Alerton Ascent Control Module inclusion of untrusted functionality | 8.0v3.1 | 1.4% | 2022-07-15 | Fix |
| CVE-2022-30243 | Honeywell Alterton Visual Logic inclusion of untrusted functionality | 8.8v3.1 | 1.7% | 2022-07-15 | Fix |
| CVE-2022-30242 | Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller config | 6.8v3.1 | 1.2% | 2022-07-15 | Fix |
| CVE-2022-29890 | Octopus Deploy Octopus Server cross-site scripting | 6.1v3.1 | 0.4% | 2022-07-15 | Fix |
| CVE-2022-25891 | github.com/containrrr/shoutrrr/pkg/util denial of service (DoS) | 7.5v3.1 | 1.6% | 2022-07-15 | Fix |
| CVE-2022-25869 | Angular (deprecated package) cross-site scripting | 6.1v3.1 | 6.8% | 2022-07-15 | Exploit codeFix |
| CVE-2022-25858 | terser regular expression denial of service (ReDoS) | 7.5v3.1 | 3.0% | 2022-07-15 | Fix |
| CVE-2022-23201 | Adobe RoboHelp reflected XSS could lead to arbitrary code execution | 6.1CNA v3.0 | 0.7% | 2022-07-15 | Fix |
| CVE-2022-23141 | ZXMP M721 sensitive information in log files | 7.5v3.1 | 0.7% | 2022-07-15 | Fix |
| CVE-2022-2420 | URVE Web Manager uploader.php unrestricted upload | 8.0v3.1 | 1.1% | 2022-07-15 | |
| CVE-2022-2419 | URVE Web Manager upload.php unrestricted upload | 8.0v3.1 | 12.8% | 2022-07-15 | |
| CVE-2022-2418 | URVE Web Manager img_upload.php unrestricted upload | 8.0v3.1 | 1.1% | 2022-07-15 | |
| CVE-2022-1881 | Octopus Deploy Octopus Server insecure direct object reference | 5.3v3.1 | 0.5% | 2022-07-15 | Fix |
| CVE-2022-35283 | IBM Security Verify Information Queue denial of service | 6.5CNA v3.0 | 1.2% | 2022-07-14 | Fix |
| CVE-2022-34094 | Softwarepublico I3GEO cross-site scripting | 6.1v3.1 | 2.8% | 2022-07-14 | Nuclei |
| CVE-2022-34093 | Softwarepublico I3GEO cross-site scripting | 6.1v3.1 | 2.8% | 2022-07-14 | Nuclei |
| CVE-2022-34092 | Softwarepublico I3GEO cross-site scripting | 6.1v3.1 | 1.3% | 2022-07-14 | |
| CVE-2022-32425 | mealie observable discrepancy | 5.3v3.1 | 0.6% | 2022-07-14 | |
| CVE-2022-32417 | PbootCMS code injection | 9.8v3.1 | 35.6% | 2022-07-14 | |
| CVE-2022-32416 | Product Show Room Site SQL injection | 7.2v3.1 | 0.9% | 2022-07-14 | |
| CVE-2022-32415 | Product Show Room Site SQL injection | 8.8v3.1 | 0.9% | 2022-07-14 | |
| CVE-2022-32409 | Softwarepublico I3GEO local file inclusion | 9.8v3.1 | 13.6% | 2022-07-14 | Nuclei |
| CVE-2022-32406 | Gtkradiant buffer overflow | 5.5v3.1 | 0.5% | 2022-07-14 | |
| CVE-2022-32389 | Isode Swift hard-coded credentials | 7.5v3.1 | 0.6% | 2022-07-14 | |
| CVE-2022-32323 | Autotrace out-of-bounds write | 7.3v3.1 | 0.9% | 2022-07-14 | Fix |
| CVE-2022-32318 | Fast Food Ordering System cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-14 | |
| CVE-2022-32317 | Mplayerhq Mplayer use-after-free | 5.5v3.1 | 0.9% | 2022-07-14 | |
| CVE-2022-32298 | Toybox null pointer dereference | 7.5v3.1 | 1.0% | 2022-07-14 | |
| CVE-2022-32297 | Piwigo SQL injection | 7.5v3.1 | 1.2% | 2022-07-14 | |
| CVE-2022-32225 | Veeam Management Pack for Microsoft System Center cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-14 | Fix |
| CVE-2022-32223 | Node.js Node uncontrolled search path | 7.3v3.1 | 1.7% | 2022-07-14 | Exploit codeFix |
| CVE-2022-32222 | Node.js Node cryptographic weakness | 5.3v3.1 | 2.0% | 2022-07-14 | Fix |
| CVE-2022-32215 | Node.js Node HTTP request smuggling | 6.5v3.1 | 70.2% | 2022-07-14 | Fix |
| CVE-2022-32214 | Llhttp allows HTTP request smuggling via Improper Delimiting of header fields | 6.5v3.1 | 81.5% | 2022-07-14 | Fix |
| CVE-2022-32213 | Llhttp allows HTTP request smuggling via Flawed Parsing of Transfer-Encoding | 6.5v3.1 | 46.0% | 2022-07-14 | Fix |
| CVE-2022-32212 | Node.js Node A OS command injection | 8.1v3.1 | 5.9% | 2022-07-14 | Fix |
| CVE-2022-32210 | https://github.com/nodejs/undici ProxyAgent vulnerable to MITM | 6.5v3.1 | 0.4% | 2022-07-14 | Fix |
| CVE-2022-31156 | Gradle dependency verification vulnerability | 6.6CNA v3.1 | 0.6% | 2022-07-14 | Fix |
| CVE-2022-31147 | jquery-validation ReDoS in url2 due to incomplete fix of | 7.5CNA v3.1 | 2.3% | 2022-07-14 | Exploit codeFix |
| CVE-2022-31142 | Potential Timing Attack Vector in @fastify/Bearer-auth | 7.5CNA v3.1 | 1.5% | 2022-07-14 | Fix |
| CVE-2022-30113 | Fahou100 Electronic Mall System SQL injection | 9.8v3.1 | 0.8% | 2022-07-14 | |
| CVE-2022-30024 | TP-Link Tl-wr841n(eu) httpd daemon buffer overflow | 8.8v3.1 | 2.0% | 2022-07-14 | |
| CVE-2022-29593 | Dingtian-tech Dt-r004 authentication bypass by replay | 5.9v3.1 | 14.0% | 2022-07-14 | Exploit code |