CVE-2022 records published in July 2022

This page lists the 1,735 CVE-2022 records published in July 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.

Critical
27515.9% of these records
Listed in CISA KEV
80.5% of these records
Reported exploited
10.1% of these records
Detection signal
563.2% of these records
Exploit code
683.9% of these records
Actionable vendor fix
1,26873.1% of these records

Figures as of 2026-10-24 13:45 UTC. Records published in July 2022 have had from about 51 months to about 52 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2022 records published in July 2022, newest first: records 1 to 1,000 of 1,735
CVE Summary CVSS EPSS Published Signals
CVE-2022-36336Trend Micro Worry-Free Business Security link following7.8v3.10.6%2022-07-30Fix
CVE-2022-35234Trend Micro Security (Consumer) out-of-bounds read7.1v3.10.3%2022-07-30Fix
CVE-2022-33994Gutenberg cross-site scripting3.0v3.10.7%2022-07-30
CVE-2022-33158Trend Micro VPN Proxy One Pro (Consumer) files accessible to external parties7.8v3.10.3%2022-07-30Fix
CVE-2022-30083Elliegrid code injection9.8v3.11.1%2022-07-30
CVE-2022-36447Chia Network CAT1 Standard chia-blockchain tokens can be inflated to an arbitrary extent7.5v3.10.8%2022-07-29Fix
CVE-2022-36378Floating Div WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.6%2022-07-29
CVE-2022-36123Linux kernel denial of service7.8NVD v3.10.9%2022-07-29Fix
CVE-2022-35643IBM PowerVM VIOS denial of service9.1CNA v3.01.3%2022-07-29Fix
CVE-2022-35632Rapid7 Velociraptor XSS in User interface4.8v3.10.5%2022-07-29Fix
CVE-2022-35631Rapid7 Velociraptor filesystem race on temporary files5.5v3.10.2%2022-07-29Fix
CVE-2022-35630Rapid7 Velociraptor Unsafe HTML injection in Artifact Collection Report6.1v3.10.5%2022-07-29Fix
CVE-2022-35629Velociraptor Client ID spoofing5.4v3.10.4%2022-07-29Fix
CVE-2022-34531DedeCMS remote code execution9.8v3.124.7%2022-07-29
CVE-2022-34528D-Link DSL-3782 out-of-bounds write8.8v3.11.4%2022-07-29
CVE-2022-34527D-Link DSL-3782 OS command injection8.8v3.14.5%2022-07-29Exploit code
CVE-2022-34526libtiff _TIFFVGetField function of Tiffsplit v4.4.0 stack-based buffer overflow6.5v3.11.7%2022-07-29Fix
CVE-2022-34496Hiby R3 Pro Firmware unrestricted file upload9.8v3.11.1%2022-07-29
CVE-2022-33881Autodesk Advanced Steel out-of-bounds read7.8v3.10.4%2022-07-29Fix
CVE-2022-27873Fusion360 XML external entity injection7.8v3.10.2%2022-07-29Fix
CVE-2022-27866Autodesk Design Review out-of-bounds read7.8v3.10.2%2022-07-29Fix
CVE-2022-27865Autodesk Design Review out-of-bounds write7.8v3.10.2%2022-07-29Fix
CVE-2022-27864Autodesk Design Review double free8.8v3.11.1%2022-07-29Fix
CVE-2022-24912github.com/runatlantis/atlantis/server/controllers/events timing Attack7.5v3.11.2%2022-07-29Fix
CVE-2022-23004Western Digital Sweet B P-256 point multiplication vulnerability5.3CNA v3.10.7%2022-07-29Fix
CVE-2022-23003Western Digital Sweet B shared secret computation vulnerability5.3CNA v3.10.7%2022-07-29Fix
CVE-2022-23002Western Digital Sweet B P-256 point decompression vulnerability5.3CNA v3.10.7%2022-07-29Fix
CVE-2022-23001Sweet-B Library: Point compress/decompress using the wrong bit for sign5.3CNA v3.10.7%2022-07-29Fix
CVE-2022-22280SonicWall GMS improper neutralization9.8v3.19.3%2022-07-29Fix
CVE-2022-2579SourceCodester Garage Management System createUser.php cross-site scripting5.4v3.10.5%2022-07-29
CVE-2022-2578SourceCodester Garage Management System createUser.php access control9.8v3.10.7%2022-07-29
CVE-2022-2577SourceCodester Garage Management System edituser.php SQL injection8.8v3.10.7%2022-07-29
CVE-2022-2576Eclipse Californium denial of service7.5v3.10.6%2022-07-29Fix
CVE-2022-2414Dogtag PKI XML external entity injection7.5v3.185.3%2022-07-29NucleiExploit codeFix
CVE-2022-2324SonicWall Hosted Email Security improperly implemented security check7.5v3.10.6%2022-07-29Fix
CVE-2022-2323SonicWall Switch user input improper neutralization8.8v3.16.0%2022-07-29Fix
CVE-2022-1799Incorrect signature verification on Google play-services-basement in Google Play SDK5.7CNA v3.10.3%2022-07-29Fix
CVE-2022-1277SQL injection in Inavitas Solar Log9.8NVD v3.10.8%2022-07-29Fix
CVE-2022-37010JetBrains IntelliJ IDEA improper input validation3.6CNA v3.10.2%2022-07-28Fix
CVE-2022-37009JetBrains IntelliJ IDEA code injection3.9CNA v3.10.3%2022-07-28Fix
CVE-2022-37000Veritas NetBackup NetBackup Client vulnerability6.5v3.10.7%2022-07-28Fix
CVE-2022-36999Veritas NetBackup NetBackup Client vulnerability6.5v3.10.7%2022-07-28Fix
CVE-2022-36998Veritas NetBackup out-of-bounds write6.5v3.10.6%2022-07-28Fix
CVE-2022-36997Veritas NetBackup server-side request forgery8.8v3.10.7%2022-07-28Fix
CVE-2022-36996Veritas NetBackup NetBackup Client vulnerability6.5v3.10.6%2022-07-28Fix
CVE-2022-36995Veritas NetBackup NetBackup Client vulnerability4.3v3.10.5%2022-07-28Fix
CVE-2022-36994Veritas NetBackup NetBackup Client vulnerability6.5v3.10.6%2022-07-28Fix
CVE-2022-36993Veritas NetBackup arbitrary command execution8.8v3.11.0%2022-07-28Fix
CVE-2022-36992Veritas NetBackup arbitrary command execution8.8NVD v3.11.0%2022-07-28Fix
CVE-2022-36991Veritas NetBackup NetBackup Client vulnerability6.5NVD v3.10.7%2022-07-28Fix
CVE-2022-36990Veritas NetBackup arbitrary file write6.5NVD v3.10.7%2022-07-28Fix
CVE-2022-36989Veritas NetBackup arbitrary command execution8.8v3.11.0%2022-07-28Fix
CVE-2022-36988Veritas NetBackup arbitrary command execution8.8v3.10.9%2022-07-28Fix
CVE-2022-36987Veritas NetBackup NetBackup Client vulnerability6.5NVD v3.10.6%2022-07-28Fix
CVE-2022-36986Veritas NetBackup missing authentication9.8v3.10.9%2022-07-28Fix
CVE-2022-36985Veritas NetBackup Windows Primary Server privilege escalation7.8v3.10.2%2022-07-28Fix
CVE-2022-36984Veritas NetBackup denial of service6.5NVD v3.10.7%2022-07-28Fix
CVE-2022-36752PNG2WEBP out-of-bounds write5.5v3.10.4%2022-07-28Exploit code
CVE-2022-36364Apache Calcite Avatica JDBC driver arbitrary code execution8.8v3.13.0%2022-07-28Fix
CVE-2022-36234Simplenetwork double free7.5v3.10.9%2022-07-28Exploit code
CVE-2022-35882GS Testimonial Slider WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.6%2022-07-28Fix
CVE-2022-34593Dptech VPN arbitrary file read7.5v3.10.7%2022-07-28
CVE-2022-34580Advanced School Management System cross-site scripting4.8v3.10.5%2022-07-28
CVE-2022-34578opensourcepos Open Source Point of Sale unrestricted file upload7.2v3.11.1%2022-07-28
CVE-2022-34568Libsdl Simple DirectMedia Layer use-after-free7.5v3.11.1%2022-07-28Fix
CVE-2022-34558WMAgent arbitrary code execution via a crafted dbs-client package9.8v3.11.2%2022-07-28Fix
CVE-2022-34557Barangay Management System SQL injection8.8v3.10.9%2022-07-28
CVE-2022-34556Picoc null pointer dereference5.5v3.10.3%2022-07-28Exploit code
CVE-2022-34555TP-Link Tl-r473g remote code execution9.8v3.122.5%2022-07-28
CVE-2022-34140Feehi CMS cross-site scripting5.4v3.14.6%2022-07-28Exploit code
CVE-2022-34009Fossil-scm Fossil cross-site scripting5.5v3.10.4%2022-07-28Fix
CVE-2022-31627PHP heap buffer overflow in finfo_buffer7.7CNA v3.12.1%2022-07-28Fix
CVE-2022-30320Honeywell Saia PG5 Controls Suite weak cryptographic algorithm4.3v3.10.3%2022-07-28
CVE-2022-30319Honeywell Saia PG5 Controls Suite authentication bypass by spoofing8.1v3.10.7%2022-07-28
CVE-2022-30316Honeywell Safety Manager improper integrity check validation6.8v3.10.4%2022-07-28Fix
CVE-2022-30315Honeywell Safety Manager insufficient verification of data authenticity9.8v3.10.9%2022-07-28Fix
CVE-2022-30314Honeywell Safety Manager Firmware hard-coded credentials4.6v3.10.3%2022-07-28Fix
CVE-2022-30313Honeywell Safety Manager missing authentication7.5v3.10.9%2022-07-28Fix
CVE-2022-30287Horde Groupware unsafe reflection8.0v3.169.4%2022-07-28Fix
CVE-2022-29558Realtek RTL819X Software Development Kit command injection8.8v3.11.3%2022-07-28Fix
CVE-2022-29360Rainloop Webmail cross-site scripting5.4v3.11.2%2022-07-28Fix
CVE-2022-27615Synology DNS Server path traversal7.7CNA v3.11.2%2022-07-28Fix
CVE-2022-27614Synology Media Server web server information disclosure5.3CNA v3.10.9%2022-07-28Fix
CVE-2022-27613Synology CardDAV Server SQL command improper neutralization8.3CNA v3.11.1%2022-07-28Fix
CVE-2022-27612Synology Audio Station cgi component buffer overflow7.3CNA v3.10.9%2022-07-28Fix
CVE-2022-27611Synology Audio Station path traversal5.4CNA v3.11.0%2022-07-28Fix
CVE-2022-27509Citrix ADC and Gateway open redirect6.1v3.10.5%2022-07-28Fix
CVE-2022-22685Synology WebDAV Server path traversal8.7CNA v3.11.2%2022-07-28Fix
CVE-2022-22684Synology DiskStation Manager (DSM) OS command improper neutralization7.2CNA v3.11.6%2022-07-28Fix
CVE-2022-22683Synology Media Server cgi component buffer overflow10.0CNA v3.11.6%2022-07-28Fix
CVE-2022-2564Prototype pollution in Automattic/Mongoose9.8v3.131.3%2022-07-28Fix
CVE-2022-2553Booth improper authentication6.5NVD v3.11.3%2022-07-28Fix
CVE-2022-2481Google Chrome Views use-after-free8.8v3.11.2%2022-07-28Fix
CVE-2022-2480Google Chrome Service Worker API use-after-free8.8v3.117.9%2022-07-28Fix
CVE-2022-2479Google Chrome improper input validation4.3v3.10.8%2022-07-28Fix
CVE-2022-2478Google Chrome PDF use-after-free8.8v3.10.9%2022-07-28Fix
CVE-2022-2477Google Chrome Guest view use-after-free8.8v3.10.8%2022-07-28Fix
CVE-2022-2415Google Chrome WebGL heap-based buffer overflow8.8v3.11.9%2022-07-28Fix
CVE-2022-2399Google Chrome WebGPU use-after-free8.8v3.10.7%2022-07-28Fix
CVE-2022-2296Google Chrome Chrome OS Shell use-after-free8.8v3.11.1%2022-07-28Fix
CVE-2022-2295Google Chrome V8 type confusion8.8v3.11.4%2022-07-28Fix
CVE-2022-2294WebRTC heap buffer overflow8.8v3.170.5%2022-07-28KEVFix
CVE-2022-2165Google Chrome URL formatting improper input validation4.3v3.10.8%2022-07-28Fix
CVE-2022-2164Google Chrome Extensions API inappropriate implementation6.3v3.10.6%2022-07-28Fix
CVE-2022-2163Google Chrome Cast UI and Toolbar use-after-free8.8v3.10.8%2022-07-28Fix
CVE-2022-2162Google Chrome File System API insufficient policy enforcement8.8v3.11.2%2022-07-28Fix
CVE-2022-2161Google Chrome WebApp Provider use-after-free8.8v3.11.0%2022-07-28Fix
CVE-2022-2160Google Chrome DevTools insufficient policy enforcement6.5v3.10.7%2022-07-28Fix
CVE-2022-2158Google Chrome V8 type confusion8.8v3.11.0%2022-07-28Fix
CVE-2022-2157Google Chrome Interest groups use-after-free8.8v3.11.0%2022-07-28Fix
CVE-2022-2156Google Chrome Core use-after-free8.8v3.11.5%2022-07-28Fix
CVE-2022-2011Google Chrome ANGLE use-after-free8.8v3.11.0%2022-07-28Fix
CVE-2022-2010Google Chrome compositing out-of-bounds read9.3v3.11.2%2022-07-28Fix
CVE-2022-2008Google Chrome WebGL double free8.8v3.11.0%2022-07-28Fix
CVE-2022-2007Google Chrome WebGPU use-after-free8.8v3.11.0%2022-07-28Fix
CVE-2022-1948GitLab cross-site scripting8.7CNA v3.11.0%2022-07-28Fix
CVE-2022-1919Google Chrome Codecs use-after-free8.8v3.11.3%2022-07-28Fix
CVE-2022-1805Tera2 Zero Client improper certificate validation8.1v3.10.6%2022-07-28Fix
CVE-2022-36956Veritas NetBackup arbitrary command execution7.5NVD v3.10.6%2022-07-27Fix
CVE-2022-36955Veritas NetBackup NetBackup Client privilege escalation8.4v3.10.2%2022-07-27Fix
CVE-2022-36954Veritas NetBackup OpsCenter vulnerability6.5NVD v3.10.9%2022-07-27Fix
CVE-2022-36953In Veritas NetBackup OpsCenter, certain endpoints could allow an unauthenticated remote attacker to gain sensitive information. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.4.3v3.10.8%2022-07-27Fix
CVE-2022-36952Veritas NetBackup hard-coded credentials9.8v3.10.5%2022-07-27Fix
CVE-2022-36951In Veritas NetBackup OpsCenter, an unauthenticated remote attacker may compromise the host by exploiting an incorrectly patched vulnerability. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10.9.8v3.11.1%2022-07-27Fix
CVE-2022-36950Veritas NetBackup remote command execution9.8v3.11.8%2022-07-27Fix
CVE-2022-36949Veritas NetBackup OpsCenter privilege escalation7.8NVD v3.10.2%2022-07-27Fix
CVE-2022-36948Veritas NetBackup cross-site scripting5.4v3.10.4%2022-07-27Fix
CVE-2022-36946Linux kernel denial of service7.5NVD v3.18.9%2022-07-27Exploit codeFix
CVE-2022-36922Jenkins Lucene-search Plugin vulnerable to reflected (XSS) cross-site scripting6.1v3.10.7%2022-07-27Fix
CVE-2022-36921Missing permission check in Coverity Plugin allows capturing credentials8.1v3.10.8%2022-07-27Fix
CVE-2022-36920Jenkins Coverity Plugin vulnerable to cross-site request forgery (CSRF)8.8v3.10.6%2022-07-27Fix
CVE-2022-36919Jenkins Coverity Plugin allows attackers with Overall/Read permission to enumerate credentials IDs4.3v3.10.7%2022-07-27Fix
CVE-2022-36918Jenkins Buckminster Plugin missing authorization4.3v3.10.6%2022-07-27Fix
CVE-2022-36917Jenkins Google Cloud Backup Plugin missing authorization4.3v3.10.6%2022-07-27Fix
CVE-2022-36916CSRF vulnerability in Jenkins Google Cloud Backup Plugin8.0v3.10.5%2022-07-27Fix
CVE-2022-36915Jenkins Android Signing Plugin missing authorization4.3v3.10.6%2022-07-27Fix
CVE-2022-36914Jenkins Files Found Trigger Plugin missing authorization4.3v3.10.7%2022-07-27Fix
CVE-2022-36913Jenkins Openstack Heat Plugin missing authorization4.3v3.10.6%2022-07-27Fix
CVE-2022-36912Missing permission checks in Jenkins openstack-heat Plugin4.3v3.10.6%2022-07-27Fix
CVE-2022-36911CSRF vulnerability in Jenkins openstack-heat Plugin6.5v3.10.4%2022-07-27Fix
CVE-2022-36910Lucene-search Plugin does not perform permission checks in several HTTP endpoints5.4v3.10.5%2022-07-27Fix
CVE-2022-36909Missing permission check in Jenkins OpenShift Deployer Plugin6.5v3.10.8%2022-07-27Fix
CVE-2022-36908CSRF vulnerability in Jenkins OpenShift Deployer Plugin6.5v3.10.5%2022-07-27Fix
CVE-2022-36907Missing permission check in Jenkins OpenShift Deployer Plugin6.5v3.10.7%2022-07-27Fix
CVE-2022-36906CSRF vulnerability in Jenkins OpenShift Deployer Plugin6.5v3.10.5%2022-07-27Fix
CVE-2022-36905Stored XSS vulnerability in Jenkins MAVEN Metadata Plugin for Jenkins CI server plugin5.4v3.10.6%2022-07-27Fix
CVE-2022-36904Jenkins Repository Connector Plugin missing authorization4.3v3.10.7%2022-07-27Fix
CVE-2022-36903Jenkins Repository Connector Plugin A missing authorization4.3v3.10.7%2022-07-27Fix
CVE-2022-36902Stored XSS vulnerability in Jenkins Dynamic Extended Choice Parameter Plugin5.4v3.10.7%2022-07-27Fix
CVE-2022-36901Jenkins HTTP Request Plugin stores HTTP Request passwords unencrypted6.5v3.10.8%2022-07-27Fix
CVE-2022-36900Jenkins Compuware zAdviser API Plugin vulnerable to protection mechanism failure8.2v3.11.0%2022-07-27Fix
CVE-2022-36899Agent-to-controller security bypass in Jenkins BMC Compuware ISPW Operations plugin8.2v3.11.0%2022-07-27Fix
CVE-2022-36898Jenkins Compuware ISPW Operations Plugin missing authorization4.3v3.10.7%2022-07-27Fix
CVE-2022-36897Jenkins Compuware Xpediter Code Coverage Plugin missing authorization4.3v3.10.6%2022-07-27Fix
CVE-2022-36896Jenkins Compuware Source Code Download is missing authorization6.5v3.10.7%2022-07-27Fix
CVE-2022-36895Jenkins Compuware Topaz Utilities Plugin is missing authorization4.3v3.10.6%2022-07-27Fix
CVE-2022-36894Arbitrary file write vulnerability in Jenkins CLIF Performance Testing plugin6.5v3.10.8%2022-07-27Fix
CVE-2022-36893Jenkins Rpmsign-plugin does not perform a permission check in a method implementing form validation4.3v3.10.7%2022-07-27Fix
CVE-2022-36892Jenkins Rhnpush-plugin does not perform a permission check in a method implementing form validation4.3v3.10.6%2022-07-27Fix
CVE-2022-36891Jenkins Deployer Framework Plugin allows attackers with Item/Read permission to read deployment logs4.3v3.10.6%2022-07-27Fix
CVE-2022-36890Jenkins Deployer Framework Plugin vulnerable to path traversal4.3v3.11.1%2022-07-27Fix
CVE-2022-36889Jenkins Deployer Framework Plugin path traversal8.8v3.11.7%2022-07-27Fix
CVE-2022-36888Jenkins HashiCorp Vault Plugin missing authorization6.5v3.10.7%2022-07-27Fix
CVE-2022-36887Jenkins Job Configuration History Plugin does not require POST requests for several HTTP endpoints4.3v3.10.4%2022-07-27Fix
CVE-2022-36886External Monitor Job Type Plugin does not require POST requests for an HTTP endpoint4.3v3.10.4%2022-07-27Fix
CVE-2022-36885Jenkins GitHub plugin uses weak webhook signature function5.3v3.10.8%2022-07-27Fix
CVE-2022-36884Lack of authentication mechanism in Jenkins Git Plugin webhook5.3v3.11.0%2022-07-27Fix
CVE-2022-36883Lack of authentication mechanism in Jenkins Git Plugin webhook7.5v3.16.9%2022-07-27Reported exploitedNucleiExploit codeFix
CVE-2022-36882Lack of authentication mechanism in Jenkins Git Plugin webhook8.8v3.10.7%2022-07-27Fix
CVE-2022-36881Jenkins Git Client Plugin does not perform SSH host key verification8.1v3.10.9%2022-07-27Fix
CVE-2022-36880Webmin Usermin cross-site scripting6.1v3.10.6%2022-07-27Fix
CVE-2022-36879Linux kernel XFRM policy handling vulnerability5.5NVD v3.10.3%2022-07-27Fix
CVE-2022-35911Patlite Nhl-fb2 denial of service7.5v3.12.6%2022-07-27Fix
CVE-2022-35672Adobe Acrobat Reader DC Font Parsing out-of-bounds read remote code execution7.8CNA v3.00.4%2022-07-27Fix
CVE-2022-35669Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2022-07-27Fix
CVE-2022-35291Privilege escalation vulnerability in SAP SuccessFactors attachment API for Mobile Application8.1CNA v3.10.7%2022-07-27Fix
CVE-2022-34971Feehi CMS arbitrary code execution via crafted PHP file8.8v3.11.2%2022-07-27
CVE-2022-34612rizin integer overflow5.5v3.10.4%2022-07-27Fix
CVE-2022-34611Online Fire Reporting System /index.php/?p=report cross-site scripting5.4v3.10.5%2022-07-27
CVE-2022-34594Advanced School Management System cross-site scripting4.8v3.10.5%2022-07-27
CVE-2022-34551Sims attachment download path traversal6.5v3.11.0%2022-07-27
CVE-2022-34550Student Information Management System cross-site scripting5.4v3.10.5%2022-07-27
CVE-2022-34549sims unrestricted file upload8.8v3.11.4%2022-07-27
CVE-2022-34529wasm3 out-of-bounds read5.5v3.10.3%2022-07-27
CVE-2022-34121Cuppacms inclusion of untrusted functionality7.5v3.13.6%2022-07-27Nuclei
CVE-2022-34120Barangay Management System unrestricted file upload7.2v3.119.2%2022-07-27
CVE-2022-33970Shortcode Addons WordPress plugin authenticated WordPress options Change vulnerability7.2v3.11.1%2022-07-27Fix
CVE-2022-33943BxSlider WP WordPress plugin authenticated cross-site scripting (XSS)5.4v3.10.6%2022-07-27
CVE-2022-27610Synology DiskStation Manager (DSM) path traversal6.5CNA v3.11.5%2022-07-27Fix
CVE-2022-24406Open-Xchange OX App Suite insufficient randomness6.5v3.10.9%2022-07-27
CVE-2022-24405Open-Xchange OX App Suite OS command injection9.8v3.13.1%2022-07-27
CVE-2022-23101Open-Xchange OX App Suite cross-site scripting6.1v3.10.7%2022-07-27
CVE-2022-23100Open-Xchange OX App Suite OS command injection9.8v3.13.0%2022-07-27
CVE-2022-23099Open-Xchange App Suite cross-site scripting5.4v3.10.6%2022-07-27
CVE-2022-2550OS command injection in hestiacp/hestiacp8.8NVD v3.149.3%2022-07-27Fix
CVE-2022-2549Null pointer dereference in gpac/gpac5.5v3.10.5%2022-07-27Fix
CVE-2022-2313DLL high jacking in Trellix Agent8.2CNA v3.10.4%2022-07-27Fix
CVE-2022-2310Skyhigh SWG authentication bypass10.0CNA v3.11.2%2022-07-27Fix
CVE-2022-1876Google Chrome DevTools heap-based buffer overflow8.8v3.10.7%2022-07-27Fix
CVE-2022-1875Google Chrome PDF inappropriate implementation4.3v3.10.8%2022-07-27Fix
CVE-2022-1874Google Chrome Safe Browsing insufficient policy enforcement8.8v3.10.9%2022-07-27Fix
CVE-2022-1873Google Chrome COOP insufficient policy enforcement6.5v3.10.9%2022-07-27Fix
CVE-2022-1872Google Chrome Extensions API insufficient policy enforcement4.3v3.10.6%2022-07-27Fix
CVE-2022-1871Google Chrome File System API insufficient policy enforcement4.3v3.10.6%2022-07-27Fix
CVE-2022-1870Google Chrome App service use-after-free8.8v3.10.6%2022-07-27Fix
CVE-2022-1869Google Chrome V8 type confusion6.5v3.10.9%2022-07-27Fix
CVE-2022-1868Google Chrome Extensions API inappropriate implementation6.5v3.10.6%2022-07-27Fix
CVE-2022-1867Google Chrome Data Transfer vulnerability6.5v3.10.8%2022-07-27Fix
CVE-2022-1866Google Chrome Tablet Mode use-after-free8.8v3.10.8%2022-07-27Fix
CVE-2022-1865Google Chrome Bookmarks use-after-free8.8v3.10.6%2022-07-27Fix
CVE-2022-1864Google Chrome WebApp Installs use-after-free8.8v3.10.6%2022-07-27Fix
CVE-2022-1863Google Chrome Tab Groups use-after-free8.8v3.10.6%2022-07-27Fix
CVE-2022-1862Google Chrome extensions inappropriate implementation6.5v3.10.6%2022-07-27Fix
CVE-2022-1861Google Chrome Sharing use-after-free8.8v3.10.8%2022-07-27Fix
CVE-2022-1860Google Chrome UI Foundations use-after-free8.8v3.10.8%2022-07-27Fix
CVE-2022-1859Google Chrome Performance Manager use-after-free8.8v3.10.8%2022-07-27Fix
CVE-2022-1858Google Chrome DevTools out-of-bounds read6.5v3.10.8%2022-07-27Fix
CVE-2022-1857Google Chrome File System API insufficient policy enforcement8.8v3.10.8%2022-07-27Fix
CVE-2022-1856Google Chrome User Education use-after-free8.8v3.10.6%2022-07-27Fix
CVE-2022-1855Google Chrome Messaging use-after-free8.8v3.10.9%2022-07-27Fix
CVE-2022-1854Google Chrome ANGLE use-after-free8.8v3.10.9%2022-07-27Fix
CVE-2022-1853Google Chrome Indexed DB use-after-free9.6v3.11.0%2022-07-27Fix
CVE-2022-36412Zoho Manageengine Supportcenter Plus improper authentication9.8v3.15.8%2022-07-26Fix
CVE-2022-36161Garage Management System SQL injection9.8v3.11.3%2022-07-26
CVE-2022-36129HashiCorp Vault missing authentication9.1v3.11.6%2022-07-26Fix
CVE-2022-35639IBM Sterling Partner Engagement Manager denial of service7.5CNA v3.01.0%2022-07-26Fix
CVE-2022-35286IBM Security Verify Information Queue cross-site request forgery3.1CNA v3.00.3%2022-07-26Fix
CVE-2022-34991Techvill Paymoney cross-site scripting5.4v3.10.5%2022-07-26
CVE-2022-34989Fruits Bazar SQL injection9.8v3.11.0%2022-07-26
CVE-2022-34988Inoutscripts Blockchain Altexchanger cross-site scripting5.4v3.10.6%2022-07-26
CVE-2022-34067oretnom23 Warehouse Management System SQL injection7.5v3.10.9%2022-07-26
CVE-2022-33977untangle vulnerable to XML entity expansion7.5v3.11.7%2022-07-26Fix
CVE-2022-33745Xen PV guest shadow paging vulnerability8.8v3.10.3%2022-07-26Fix
CVE-2022-31879Online Fire Reporting System SQL injection8.8v3.11.4%2022-07-26
CVE-2022-31471untangle vulnerable to improper restriction of XML external entity reference7.5v3.11.6%2022-07-26Fix
CVE-2022-31207OMRON Cp1w-cif41 improper signature verification9.8v3.10.9%2022-07-26
CVE-2022-31206OMRON Nj101-1000 improper signature verification9.8v3.11.0%2022-07-26
CVE-2022-31205OMRON Cp1w-cif41 cleartext storage of sensitive information7.5v3.10.6%2022-07-26
CVE-2022-31204OMRON CX-Programmer cleartext transmission of sensitive information7.5v3.10.6%2022-07-26
CVE-2022-30706Twinkle Toes Software Booked open redirect6.1v3.10.6%2022-07-26Fix
CVE-2022-30276Motorola Ace IP Gateway (4600) missing authentication7.5v3.10.8%2022-07-26
CVE-2022-30275Motorola Solutions Mdlc cleartext storage of sensitive information7.5v3.10.6%2022-07-26Fix
CVE-2022-30274Motorola ACE1000 hard-coded credentials9.8v3.10.6%2022-07-26
CVE-2022-30273Motorola Solutions Mdlc weak cryptographic algorithm9.8v3.10.4%2022-07-26Fix
CVE-2022-30272Motorola ACE1000 insufficient verification of data authenticity7.2v3.10.4%2022-07-26
CVE-2022-30271Motorola ACE1000 hard-coded password9.8v3.11.0%2022-07-26
CVE-2022-30270Motorola ACE1000 improper authentication9.8v3.10.9%2022-07-26
CVE-2022-30269Motorola ACE1000 insufficient verification of data authenticity8.8v3.10.4%2022-07-26Fix
CVE-2022-29965Emerson Deltav Distributed Control System weak cryptographic algorithm5.5v3.10.2%2022-07-26Fix
CVE-2022-29964Emerson Deltav Distributed Control System Sq Controller hard-coded credentials5.5v3.10.2%2022-07-26
CVE-2022-29963Emerson Deltav Distributed Control System Sq Controller hard-coded credentials5.5v3.10.2%2022-07-26
CVE-2022-29962Emerson Deltav Distributed Control System Sq Controller hard-coded credentials5.5v3.10.2%2022-07-26
CVE-2022-29960Emerson Openbsi hard-coded credentials5.5v3.10.5%2022-07-26Fix
CVE-2022-29958Jtekt Nano 10GX Tuc-1157 insufficient verification of data authenticity9.8v3.10.6%2022-07-26
CVE-2022-29957Emerson Deltav Distributed Control System missing authentication7.8v3.10.2%2022-07-26
CVE-2022-29953Bakerhughes Bently Nevada 3701/40 hard-coded credentials9.8v3.11.0%2022-07-26Fix
CVE-2022-29952Bakerhughes Bently Nevada 3701/40 missing authentication9.1v3.11.0%2022-07-26Fix
CVE-2022-29951Jtekt Nano 10GX Tuc-1157 missing authentication9.1v3.11.2%2022-07-26
CVE-2022-27105Digitus Inmailx cross-site scripting5.4v3.10.7%2022-07-26Fix
CVE-2022-22686Synology Calendar webapi component cross-site request forgery6.5CNA v3.10.3%2022-07-26Fix
CVE-2022-22412IBM Robotic Process Automation information disclosure4.2CNA v3.00.3%2022-07-26Fix
CVE-2022-2225Cloudflare WARP warp-cli subcommands improper access control8.1CNA v3.10.2%2022-07-26Fix
CVE-2022-1671Linux kernel null pointer dereference7.1NVD v3.10.3%2022-07-26Fix
CVE-2022-1651Linux kernel A memory leak7.1NVD v3.10.3%2022-07-26Fix
CVE-2022-1648Artica PFMS Pandora FMS relative path traversal to remote code execution in File Manager7.2v3.11.3%2022-07-26Fix
CVE-2022-1641Google Chrome Web UI Diagnostics use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1640Google Chrome Sharing use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1639Google Chrome ANGLE use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1638Google Chrome V8 Internationalization heap-based buffer overflow8.8v3.10.7%2022-07-26Fix
CVE-2022-1637Google Chrome Web Contents inappropriate implementation4.3v3.10.8%2022-07-26Fix
CVE-2022-1636Google Chrome Performance APIs use-after-free8.8v3.10.8%2022-07-26Fix
CVE-2022-1635Google Chrome Permission Prompts use-after-free8.8v3.10.8%2022-07-26Fix
CVE-2022-1634Google Chrome Browser UI use-after-free8.8v3.10.8%2022-07-26Fix
CVE-2022-1633Google Chrome Sharesheet use-after-free8.8v3.10.8%2022-07-26Fix
CVE-2022-1501Google Chrome iframe inappropriate implementation6.5v3.10.9%2022-07-26Fix
CVE-2022-1500Google Chrome Dev tools improper input validation6.5v3.10.7%2022-07-26Fix
CVE-2022-1499Google Chrome WebAuthentication inappropriate implementation6.3v3.10.8%2022-07-26Fix
CVE-2022-1498Google Chrome HTML parser inappropriate implementation4.3v3.10.8%2022-07-26Fix
CVE-2022-1497Google Chrome Input inappropriate implementation6.5v3.10.5%2022-07-26Fix
CVE-2022-1496Google Chrome File Manager use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1495Google Chrome Downloads incorrect security UI4.3v3.10.7%2022-07-26Fix
CVE-2022-1494Google Chrome Trusted Types improper input validation6.1v3.10.8%2022-07-26Fix
CVE-2022-1493Google Chrome Dev tools use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1492Google Chrome Blink Editing improper input validation6.1v3.10.8%2022-07-26Fix
CVE-2022-1491Google Chrome Bookmarks use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1490Google Chrome Browser Switcher use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1489Google Chrome UI Shelf out-of-bounds access8.8v3.11.0%2022-07-26Fix
CVE-2022-1488Google Chrome Extensions API inappropriate implementation4.3v3.10.6%2022-07-26Fix
CVE-2022-1487Google Chrome Ozone use-after-free7.5v3.11.1%2022-07-26Fix
CVE-2022-1486Google Chrome V8 type confusion8.8v3.10.9%2022-07-26Fix
CVE-2022-1485Google Chrome File System API use-after-free7.5v3.10.9%2022-07-26Fix
CVE-2022-1484Google Chrome Web UI settings heap-based buffer overflow8.8v3.11.1%2022-07-26Fix
CVE-2022-1483Google Chrome WebGPU heap-based buffer overflow8.8v3.11.2%2022-07-26Fix
CVE-2022-1482Google Chrome WebGL inappropriate implementation6.5v3.10.9%2022-07-26Fix
CVE-2022-1481Google Chrome Sharing use-after-free8.8v3.11.0%2022-07-26Fix
CVE-2022-1479Google Chrome ANGLE use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1478Google Chrome SwiftShader use-after-free8.8v3.10.9%2022-07-26Fix
CVE-2022-1477Google Chrome Vulkan use-after-free8.8v3.11.0%2022-07-26Fix
CVE-2022-1364Google Chromium V8 type confusion8.8v3.113.7%2022-07-26KEVExploit codeFix
CVE-2022-1042Zephyr Bluetooth mesh provisioning out-of-bounds write8.2CNA v3.10.8%2022-07-26
CVE-2022-1041Zephyr Bluetooth mesh provisioning out-of-bounds write8.2CNA v3.10.9%2022-07-26
CVE-2022-36450Obsidian remote code execution9.8v3.119.6%2022-07-25
CVE-2022-36446Webmin improper output encoding9.8NVD v3.195.9%2022-07-25NucleiMetasploitExploit code
CVE-2022-36444Atos Unify Openscape Branch remote code execution9.8v3.11.0%2022-07-25Fix
CVE-2022-36375Tabs WordPress plugin authenticated WordPress options Change vulnerability7.2v3.11.2%2022-07-25Fix
CVE-2022-35873Inductive Automation Ignition missing warning for unsafe actions7.8v3.10.7%2022-07-25Fix
CVE-2022-35872Inductive Automation Ignition deserialization of untrusted data7.8v3.10.7%2022-07-25Fix
CVE-2022-35871Inductive Automation Ignition missing authentication7.8v3.141.0%2022-07-25Fix
CVE-2022-35870Inductive Automation Ignition deserialization of untrusted data7.8v3.144.3%2022-07-25Fix
CVE-2022-35869Inductive Automation Ignition authentication bypass9.8v3.160.3%2022-07-25Fix
CVE-2022-35653Moodle LTI module reflected XSS risk6.1NVD v3.14.8%2022-07-25NucleiFix
CVE-2022-35652Moodle open redirect risk in mobile auto-login feature6.1NVD v3.11.1%2022-07-25Fix
CVE-2022-35651Moodle stored XSS and blind SSRF possible via SCORM track details6.1NVD v3.11.0%2022-07-25Fix
CVE-2022-35650Moodle arbitrary file read when importing lesson questions7.5NVD v3.153.7%2022-07-25Exploit codeFix
CVE-2022-35649Moodle PostScript code injection9.8NVD v3.18.7%2022-07-25Exploit codeFix
CVE-2022-35288IBM Security Verify Information Queue information disclosure5.3CNA v3.00.7%2022-07-25Fix
CVE-2022-35287IBM Security Verify Information Queue hard-coded credentials6.8CNA v3.00.6%2022-07-25Fix
CVE-2022-35285IBM Security Verify Information Queue cross-site request forgery6.5CNA v3.00.4%2022-07-25Fix
CVE-2022-35284IBM Security Verify Information Queue cookie reliance without validation5.3CNA v3.00.8%2022-07-25Fix
CVE-2022-35131Joplin is vulnerable to arbitrary code execution9.0v3.12.3%2022-07-25Exploit codeFix
CVE-2022-34966Openteknik opensource-socialnetwork cross-site scripting7.5v3.11.4%2022-07-25Fix
CVE-2022-34965Openteknik opensource-socialnetwork unrestricted file upload7.2v3.12.1%2022-07-25Fix
CVE-2022-34964Openteknik opensource-socialnetwork cross-site scripting4.8v3.10.9%2022-07-25Fix
CVE-2022-34963Openteknik opensource-socialnetwork cross-site scripting5.4v3.11.1%2022-07-25Exploit codeFix
CVE-2022-34962Openteknik opensource-socialnetwork cross-site scripting5.4v3.11.1%2022-07-25Exploit codeFix
CVE-2022-34961Openteknik opensource-socialnetwork cross-site scripting5.4v3.11.1%2022-07-25Exploit codeFix
CVE-2022-34907FileWave An authentication bypass9.8v3.115.8%2022-07-25Fix
CVE-2022-34906FileWave hard-coded cryptographic key7.5v3.110.5%2022-07-25Fix
CVE-2022-34749mistune regular expression denial of service7.5v3.11.5%2022-07-25Fix
CVE-2022-34577WAVLINK WN535G3 arbitrary code execution9.8v3.12.4%2022-07-25
CVE-2022-34576WAVLINK WN535G3 arbitrary code execution7.5v3.13.6%2022-07-25Nuclei
CVE-2022-34575WAVLINK Wifi-repeater Firmware An improper access control5.7v3.10.6%2022-07-25Fix
CVE-2022-34574WAVLINK Wifi-repeater Firmware An improper access control5.7v3.10.6%2022-07-25Fix
CVE-2022-34573WAVLINK Wifi-repeater Firmware An improper access control6.3v3.10.6%2022-07-25Fix
CVE-2022-34572WAVLINK Wifi-repeater Firmware An improper access control5.7v3.10.6%2022-07-25Fix
CVE-2022-34571WAVLINK Wifi-repeater Firmware An improper access control8.0v3.10.9%2022-07-25Fix
CVE-2022-34570WAVLINK Wl-wn579x3 forced browsing7.5v3.11.0%2022-07-25Fix
CVE-2022-33969Flipbox WordPress plugin authenticated WordPress options Change vulnerability7.2v3.11.2%2022-07-25Fix
CVE-2022-33965WP Visitor Statistics WordPress plugin Multiple unauthenticated SQL injection (SQLi)9.8v3.14.3%2022-07-25NucleiFix
CVE-2022-29709Communilink Clink Office SQL injection7.5v3.11.3%2022-07-25
CVE-2022-26307The Document Foundation LibreOffice Weak Master Keys8.8v3.11.4%2022-07-25Fix
CVE-2022-26306The Document Foundation LibreOffice stored web connection passwords vulnerability7.5v3.11.0%2022-07-25Fix
CVE-2022-26305The Document Foundation LibreOffice An improper certificate validation7.5v3.11.1%2022-07-25Fix
CVE-2022-24992QR Code Generator path traversal7.5v3.11.5%2022-07-25Exploit code
CVE-2022-24083Pegasystems Pega Infinity improper authorization9.8CNA v3.00.9%2022-07-25Fix
CVE-2022-23000Western Digital My Cloud Weak Default SSL use in Port Forwarding service7.3CNA v3.10.2%2022-07-25Fix
CVE-2022-22999Western Digital My Cloud cross-site scripting vulnerability in USB Backups App8.2CNA v3.10.4%2022-07-25Fix
CVE-2022-21802grapesjs cross-site scripting (XSS)6.1v3.10.8%2022-07-25Fix
CVE-2022-2523Cross-site scripting (XSS) Reflected in beancount/Fava6.1NVD v3.10.8%2022-07-25Fix
CVE-2022-2522Heap-based buffer overflow in Vim/Vim7.8NVD v3.10.6%2022-07-25Fix
CVE-2022-2514Cross-site scripting (XSS) Reflected in beancount/Fava6.1NVD v3.10.8%2022-07-25Fix
CVE-2022-2341Simple Page Transition WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.8%2022-07-25
CVE-2022-2340W-DALIL WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.8%2022-07-25
CVE-2022-2299Allow SVG Files WordPress plugin Author+ stored cross-site scripting via SVG5.4NVD v3.10.6%2022-07-25
CVE-2022-2240Request a Quote WordPress plugin CSV injection8.8NVD v3.11.4%2022-07-25Fix
CVE-2022-2239Request a Quote WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-25Fix
CVE-2022-2219Unyson WordPress plugin reflected cross-site scripting7.2NVD v3.11.7%2022-07-25NucleiFix
CVE-2022-2189WP Video Lightbox WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2022-07-25Fix
CVE-2022-2131OpenKM XXE injection9.8v3.10.8%2022-07-25Fix
CVE-2022-2115Popup Anything WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2022-07-25Fix
CVE-2022-2072Name Directory WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2022-07-25Fix
CVE-2022-2071Name Directory WordPress plugin stored cross-site scripting via CSRF6.1NVD v3.10.3%2022-07-25Fix
CVE-2022-2059Artica PFMS Pandora FMS stored cross-site-scripting in Agent Manager4.8v3.10.4%2022-07-25Fix
CVE-2022-2032Artica PFMS Pandora FMS stored cross-site-scripting in File Manager4.8v3.10.4%2022-07-25Fix
CVE-2022-1551SP Project and Document Manager WordPress plugin sensitive file disclosure6.5NVD v3.11.0%2022-07-25Fix
CVE-2022-1539Exports and Reports WordPress plugin Contributor+ CSV injection8.8NVD v3.11.5%2022-07-25Fix
CVE-2022-1314Google Chrome V8 type confusion8.8v3.10.9%2022-07-25Fix
CVE-2022-1313Google Chrome tab groups use-after-free8.8v3.10.9%2022-07-25Fix
CVE-2022-1312Google Chrome storage use-after-free9.6v3.10.6%2022-07-25Fix
CVE-2022-1311Google Chrome shell use-after-free8.8v3.10.9%2022-07-25Fix
CVE-2022-1310Google Chrome regular expressions use-after-free8.8v3.11.1%2022-07-25Fix
CVE-2022-1309Google Chrome developer tools insufficient policy enforcement9.6v3.10.8%2022-07-25Fix
CVE-2022-1308Google Chrome BFCache use-after-free8.8v3.10.9%2022-07-25Fix
CVE-2022-1307Google Chrome full screen inappropriate implementation4.3v3.10.7%2022-07-25Fix
CVE-2022-1306Google Chrome compositing inappropriate implementation4.3v3.10.7%2022-07-25Fix
CVE-2022-1305Google Chrome storage use-after-free8.8v3.10.9%2022-07-25Fix
CVE-2022-1232Google Chrome V8 type confusion8.8v3.116.5%2022-07-25Fix
CVE-2022-0899Header Footer Code Manager WordPress plugin reflected cross-site scripting6.1NVD v3.11.4%2022-07-25NucleiFix
CVE-2022-0670ceph incorrect authorization9.1v3.11.1%2022-07-25Fix
CVE-2022-0594Shareaholic WordPress plugin information disclosure5.3NVD v3.12.1%2022-07-25NucleiFix
CVE-2022-24294ReDoS in Apache MXNet RTC module7.5v3.11.8%2022-07-24Fix
CVE-2022-36415Scooter Software Beyond Compare uninstaller in Scooter DLL hijacking7.8v3.10.2%2022-07-23Fix
CVE-2022-36414Scooter Software Beyond Compare Windows EXE installer in Scooter elevation of privilege6.7v3.10.2%2022-07-23Fix
CVE-2022-1146Google Chrome Resource Timing inappropriate implementation6.5v3.10.9%2022-07-23Fix
CVE-2022-1145Google Chrome extensions use-after-free7.5v3.10.6%2022-07-23Fix
CVE-2022-1144Google Chrome WebUI use-after-free8.8v3.10.7%2022-07-23Fix
CVE-2022-1143Google Chrome WebUI heap-based buffer overflow8.8v3.10.8%2022-07-23Fix
CVE-2022-1142Google Chrome WebUI heap-based buffer overflow8.8v3.10.8%2022-07-23Fix
CVE-2022-1141Google Chrome File Manager use-after-free8.8v3.10.8%2022-07-23Fix
CVE-2022-1139Google Chrome Background Fetch API inappropriate implementation6.5v3.10.9%2022-07-23Fix
CVE-2022-1138Google Chrome Web Cursor inappropriate implementation6.5v3.10.9%2022-07-23Fix
CVE-2022-1137Google Chrome extensions inappropriate implementation6.5v3.10.6%2022-07-23Fix
CVE-2022-1136Google Chrome Tab Strip use-after-free8.8v3.10.6%2022-07-23Fix
CVE-2022-1135Google Chrome Shopping Cart use-after-free8.8v3.10.9%2022-07-23Fix
CVE-2022-1134Google Chrome V8 type confusion8.8v3.11.8%2022-07-23Fix
CVE-2022-1133Google Chrome WebRTC Perf use-after-free8.8v3.10.9%2022-07-23Fix
CVE-2022-1132Google Chrome Virtual Keyboard inappropriate implementation6.1v3.10.3%2022-07-23Fix
CVE-2022-1131Google Chrome Cast UI use-after-free8.8v3.10.9%2022-07-23Fix
CVE-2022-1130Google Chrome null pointer dereference8.1v3.10.8%2022-07-23Fix
CVE-2022-1129Google Chrome Full Screen Mode inappropriate implementation6.5v3.10.8%2022-07-23Fix
CVE-2022-1128Google Chrome Web Share API inappropriate implementation6.5v3.10.7%2022-07-23Fix
CVE-2022-1127Google Chrome QR Code Generator use-after-free8.8v3.10.9%2022-07-23Fix
CVE-2022-1125Google Chrome Portals use-after-free8.8v3.10.9%2022-07-23Fix
CVE-2022-1096Google Chromium V8 type confusion8.8NVD v3.124.7%2022-07-23KEVFix
CVE-2022-36131Midori-global Better PDF Exporter cross-site scripting6.1v3.10.6%2022-07-22Fix
CVE-2022-34983Scu-captcha hidden functionality9.8v3.11.6%2022-07-22Fix
CVE-2022-34982Eziod hidden functionality9.8v3.11.4%2022-07-22Fix
CVE-2022-34981Pycrowdtangle hidden functionality9.8v3.11.6%2022-07-22Fix
CVE-2022-34853wpWax Team plugin stored cross-site scripting5.4v3.10.5%2022-07-22
CVE-2022-34839WP OAuth2 Server WordPress plugin authentication bypass9.8v3.11.1%2022-07-22
CVE-2022-34650wpWax Team plugin stored cross-site scripting5.4v3.10.5%2022-07-22
CVE-2022-34520radare2 null pointer dereference5.5v3.10.3%2022-07-22Fix
CVE-2022-34509Wikifaces hidden functionality9.8v3.11.4%2022-07-22Fix
CVE-2022-34503Qpdf out-of-bounds write6.5v3.10.7%2022-07-22Fix
CVE-2022-34502radare2 out-of-bounds write5.5v3.10.3%2022-07-22Fix
CVE-2022-34501PYPI hidden functionality9.8v3.11.4%2022-07-22
CVE-2022-34500PYPI hidden functionality9.8v3.11.5%2022-07-22Fix
CVE-2022-34115Dataease SQL injection via parameter dataSourceId9.8v3.11.2%2022-07-22Fix
CVE-2022-34114SQL injection found in Dataease8.8v3.10.9%2022-07-22Fix
CVE-2022-34113Dataease allows arbitrary code execution via crafter plugin9.8v3.11.3%2022-07-22Fix
CVE-2022-34112Dataease access control issue allows attackers to arbitrarily uninstall plugin6.5v3.10.6%2022-07-22Fix
CVE-2022-34037caddyserver caddy rewrite function at /modules/ out-of-bounds read7.5v3.11.2%2022-07-22Fix
CVE-2022-33960Social Share Buttons by Supsystic WordPress plugin Multiple authenticated SQL injection (SQLi)8.8v3.11.0%2022-07-22Fix
CVE-2022-33901MultiSafepay plugin for WooCommerce WordPress plugin unauthenticated arbitrary file read7.5v3.12.6%2022-07-22NucleiFix
CVE-2022-33191Testimonials WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.5%2022-07-22
CVE-2022-31172OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers7.5CNA v3.10.5%2022-07-22Fix
CVE-2022-31170OpenZeppelin Contracts's ERC165Checker may revert instead of returning false7.5CNA v3.10.8%2022-07-22Fix
CVE-2022-31169Bytecode Alliance Wasmtime Cranelift AArch64 code generator incorrect calculation5.9CNA v3.10.9%2022-07-22Fix
CVE-2022-31168Zulip Server insufficient authorization for changing bot roles5.4CNA v3.10.8%2022-07-22Fix
CVE-2022-31164Tovy vulnerable to users logging in as and impersonating other users7.5CNA v3.10.6%2022-07-22Fix
CVE-2022-31163TZInfo relative path traversal vulnerability allows loading of arbitrary files7.5CNA v3.12.4%2022-07-22Fix
CVE-2022-31162Slack Morphism for Rust can leak Slack OAuth client information in application debug logs7.5CNA v3.10.9%2022-07-22Fix
CVE-2022-30998Homepage Product Organizer for WooCommerce WordPress plugin Multiple authenticated SQL injection8.8NVD v3.10.9%2022-07-22
CVE-2022-29495Popup Builder WordPress plugin cross-site request forgery (CSRF) leading to plugin settings update4.3v3.10.5%2022-07-22NucleiFix
CVE-2022-28879All F-Secure and WithSecure Endpoint Protection products denial of service (DoS)7.5v3.10.4%2022-07-22
CVE-2022-28878All F-Secure and WithSecure Endpoint Protection products denial of service (DoS)7.5v3.10.4%2022-07-22
CVE-2022-27235Social Share Buttons by Supsystic WordPress plugin Multiple broken access control8.8v3.10.9%2022-07-22Fix
CVE-2022-25759The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.9.8v3.111.0%2022-07-22Fix
CVE-2022-20916Cisco IoT Control Center cross-site scripting6.1CNA v3.10.6%2022-07-22Fix
CVE-2022-20913Cisco Nexus Dashboard arbitrary file write4.9CNA v3.11.1%2022-07-22Fix
CVE-2022-20912Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20911Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20910Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.1%2022-07-22
CVE-2022-20909Cisco Nexus Dashboard privilege escalation6.0CNA v3.10.2%2022-07-22Fix
CVE-2022-20908Cisco Nexus Dashboard privilege escalation6.0CNA v3.10.2%2022-07-22Fix
CVE-2022-20907Cisco Nexus Dashboard privilege escalation6.0CNA v3.10.2%2022-07-22Fix
CVE-2022-20906Cisco Nexus Dashboard privilege escalation6.0CNA v3.10.2%2022-07-22Fix
CVE-2022-20904Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20903Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20902Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20901Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20900Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20899Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20898Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20897Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20896Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20895Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20894Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20893Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-20892Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-22
CVE-2022-2511Hallo Welt! BlueSpice potential XSS in title URL parameter6.1v3.10.4%2022-07-22Fix
CVE-2022-2510Hallo Welt! BlueSpice potential XSS on Special:SearchCenter6.1v3.10.4%2022-07-22Fix
CVE-2022-2495Cross-site scripting (XSS) Stored in microweber/microweber4.8v3.10.7%2022-07-22Fix
CVE-2022-2494Cross-site scripting (XSS) Stored in openemr/openemr5.4v3.10.6%2022-07-22Fix
CVE-2022-2493Data Access from Outside Expected Data Manager component in openemr/openemr8.1v3.11.1%2022-07-22Fix
CVE-2022-2470Cross-site scripting (XSS) Reflected in microweber/microweber6.1v3.10.9%2022-07-22Fix
CVE-2022-2327Linux kernel io_uring use-after-free7.8NVD v3.10.3%2022-07-22Fix
CVE-2022-2143Advantech iView command injection9.8v3.160.3%2022-07-22MetasploitExploit codeFix
CVE-2022-2142Advantech iView SQL injection5.9NVD v3.10.9%2022-07-22Fix
CVE-2022-2139Advantech iView path traversal9.8v3.116.0%2022-07-22Fix
CVE-2022-2138Advantech iView missing authentication7.5v3.110.9%2022-07-22Fix
CVE-2022-2137Advantech iView SQL injection4.9v3.10.9%2022-07-22Fix
CVE-2022-2136Advantech iView SQL injection6.5NVD v3.19.1%2022-07-22Fix
CVE-2022-2135Advantech iView SQL injection7.5v3.110.1%2022-07-22Fix
CVE-2022-1655OpenStack Horizon incorrect permission assignment6.5NVD v3.10.5%2022-07-22Fix
CVE-2022-0980Google Chrome New Tab page use-after-free8.8v3.10.6%2022-07-22Fix
CVE-2022-0979Google Chrome Safe Browsing use-after-free8.8v3.10.8%2022-07-22Fix
CVE-2022-0978Google Chrome ANGLE use-after-free8.8v3.10.9%2022-07-22Fix
CVE-2022-36313file-type vulnerable to infinite loop via malformed MKV file5.5NVD v3.10.4%2022-07-21Fix
CVE-2022-35899ASUS Aura Ready Game Software Development Kit There is an unquoted search path7.8v3.10.9%2022-07-21Exploit code
CVE-2022-34767ALLNET Gmbh ADSL/VDSL Router inkl. Modem and Wlan authorization bypass9.8v3.10.6%2022-07-21
CVE-2022-34487Shortcode Addons WordPress plugin unauthenticated arbitrary option update vulnerability5.3NVD v3.13.3%2022-07-21NucleiFix
CVE-2022-34367Dell Data Protection Central cross-site request forgery5.4CNA v3.10.4%2022-07-21Fix
CVE-2022-33923Dell PowerStore OS command injection6.4CNA v3.10.4%2022-07-21Fix
CVE-2022-33198Accordions WordPress plugin unauthenticated WordPress options Change vulnerability5.3NVD v3.13.3%2022-07-21NucleiFix
CVE-2022-32556Couchbase Server sensitive information in log files7.5v3.10.9%2022-07-21Fix
CVE-2022-32498Dell PowerStore uncontrolled search path5.5CNA v3.10.2%2022-07-21Fix
CVE-2022-32430TaleLin lin-cms-spring-boot Hard-coded JWT Token in Lin CMS Spring Boot7.5v3.14.6%2022-07-21Nuclei
CVE-2022-32289Sygnoos Popup Builder (WordPress plugin) cross-site request forgery4.3v3.10.3%2022-07-21Fix
CVE-2022-31475GiveWP WordPress plugin authenticated arbitrary file read via export function4.9v3.10.8%2022-07-21Fix
CVE-2022-31234Dell PowerStore missing brute-force protection8.1CNA v3.11.0%2022-07-21Fix
CVE-2022-31151Uncleared cookies on cross-host/cross-origin redirect in undici3.7CNA v3.10.7%2022-07-21Fix
CVE-2022-31146Wasmtime vulnerable to use-after-free with `externref`s6.4CNA v3.11.2%2022-07-21Fix
CVE-2022-30628Supersmart.me Walk Through access to business information without authentication5.5v3.10.2%2022-07-21
CVE-2022-30536WP Maintenance WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.7%2022-07-21Fix
CVE-2022-30337WP Meta SEO WordPress plugin Social settings update vis cross-site request forgery (CSRF)4.3v3.10.3%2022-07-21Fix
CVE-2022-28877Local privilege escalation vulnerability in F-Secure and WithSecure Windows Endpoint Products6.7v3.10.4%2022-07-21
CVE-2022-28861Citilog cleartext transmission of sensitive information5.9v3.10.5%2022-07-21
CVE-2022-28860Citilog man-in-the-middle5.9v3.10.8%2022-07-21
CVE-2022-28700GiveWP WordPress plugin authenticated arbitrary file creation via export function7.2NVD v3.12.1%2022-07-21Fix
CVE-2022-28666Custom Product Tabs for WooCommerce WordPress plugin broken access control5.3v3.11.4%2022-07-21NucleiFix
CVE-2022-22555Dell PowerStore OS command injection6.0CNA v3.10.8%2022-07-21Fix
CVE-2022-20891Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.2%2022-07-21
CVE-2022-20890Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.0%2022-07-21
CVE-2022-20889Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.3%2022-07-21
CVE-2022-20888Cisco Small Business RV Series Routers web-based management interface remote command execution4.7CNA v3.11.2%2022-07-21
CVE-2022-20887Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.2%2022-07-21
CVE-2022-20886Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.1%2022-07-21
CVE-2022-20885Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20884Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20883Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.1%2022-07-21
CVE-2022-20882Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20881Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20880Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.1%2022-07-21
CVE-2022-20879Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.1%2022-07-21
CVE-2022-20878Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20877Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20876Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20875Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20874Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.3%2022-07-21
CVE-2022-20873Cisco Small Business RV Series Router Firmware buffer overflow4.7CNA v3.11.1%2022-07-21
CVE-2022-20861Cisco Nexus Dashboard unauthorized access9.8CNA v3.10.6%2022-07-21Fix
CVE-2022-20860Cisco Nexus Dashboard SSL Certificate Validation vulnerability7.4CNA v3.10.5%2022-07-21Fix
CVE-2022-20858Cisco Nexus Dashboard unauthorized access9.8CNA v3.11.3%2022-07-21Fix
CVE-2022-20857Cisco Nexus Dashboard unauthorized access9.8CNA v3.11.6%2022-07-21Fix
CVE-2022-0977Google Chrome Browser UI use-after-free9.6v3.10.9%2022-07-21Fix
CVE-2022-0976Google Chrome GPU heap-based buffer overflow8.8v3.11.0%2022-07-21Fix
CVE-2022-0975Google Chrome ANGLE use-after-free8.8v3.10.9%2022-07-21Fix
CVE-2022-0974Google Chrome Splitscreen use-after-free8.8v3.10.9%2022-07-21Fix
CVE-2022-0973Google Chrome Safe Browsing use-after-free9.6v3.10.9%2022-07-21Fix
CVE-2022-0972Google Chrome extensions use-after-free8.8v3.10.8%2022-07-21Fix
CVE-2022-0971Google Chrome Blink Layout use-after-free8.8v3.11.2%2022-07-21Fix
CVE-2022-0902ABB Flow Computer and Remote Controllers Totalflow TCP protocol path traversal8.1CNA v3.116.5%2022-07-21Fix
CVE-2022-36322JetBrains TeamCity argument injection5.4CNA v3.10.6%2022-07-20Fix
CVE-2022-36321JetBrains TeamCity sensitive information in log files4.1CNA v3.11.8%2022-07-20Fix
CVE-2022-35569Blogifier cross-site scripting4.8v3.10.5%2022-07-20
CVE-2022-34866Yokogawa Rental & Lease Passage Drive improper input validation7.8v3.10.2%2022-07-20Fix
CVE-2022-34610H3C Magic R200 out-of-bounds write9.8v3.11.3%2022-07-20
CVE-2022-34609H3C Magic R200 out-of-bounds write9.8v3.11.3%2022-07-20
CVE-2022-34608H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34607H3C Magic R200 out-of-bounds write9.8v3.113.5%2022-07-20
CVE-2022-34606H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34605H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34604H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34603H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34602H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34601H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34600H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34599H3C Magic R200 out-of-bounds write9.8v3.11.1%2022-07-20
CVE-2022-34590Hospital Management System SQL injection7.2v3.14.5%2022-07-20Nuclei
CVE-2022-34588Advanced School Management System SQL injection8.8v3.10.8%2022-07-20
CVE-2022-34586Advanced School Management System SQL injection8.8v3.10.9%2022-07-20
CVE-2022-34150ICSA-22-200-01 MiCODUS MV720 GPS tracker authorization bypass through user-controlled key5.4NVD v3.10.7%2022-07-20Fix
CVE-2022-34049WAVLINK Wl-wn530hg4 An improper access control5.3v3.12.6%2022-07-20Nuclei
CVE-2022-34048WAVLINK WN533A8 cross-site scripting6.1v3.16.3%2022-07-20NucleiExploit code
CVE-2022-34047WAVLINK Wl-wn530hg4 An improper access control7.5v3.121.4%2022-07-20NucleiExploit code
CVE-2022-34046WAVLINK WN533A8 improper access control7.5v3.120.4%2022-07-20NucleiExploit code
CVE-2022-34045WAVLINK Wl-wn530hg4 hard-coded credentials9.8v3.13.2%2022-07-20Nuclei
CVE-2022-34042Barangay Management System SQL injection7.2v3.10.9%2022-07-20
CVE-2022-33967DENX Software Engineering U-Boot out-of-bounds write7.8v3.10.6%2022-07-20Fix
CVE-2022-33944ICSA-22-200-01 MiCODUS MV720 GPS tracker authorization bypass through user-controlled key6.5v3.10.9%2022-07-20Fix
CVE-2022-33320Mitsubishi Electric GENESIS64 deserialization of untrusted data7.8CNA v3.10.5%2022-07-20Fix
CVE-2022-33319Mitsubishi Electric GENESIS64 out-of-bounds read8.2CNA v3.11.6%2022-07-20Fix
CVE-2022-33318Mitsubishi Electric GENESIS64 deserialization of untrusted data9.8CNA v3.150.1%2022-07-20Fix
CVE-2022-33317Mitsubishi Electric GENESIS64 inclusion of untrusted functionality7.8CNA v3.10.3%2022-07-20Fix
CVE-2022-33316Mitsubishi Electric GENESIS64 deserialization of untrusted data7.8CNA v3.10.3%2022-07-20Fix
CVE-2022-33315Mitsubishi Electric GENESIS64 deserialization of untrusted data7.8CNA v3.10.3%2022-07-20Fix
CVE-2022-32962HiCOS’ client-side citizen digital certificate double free6.8CNA v3.10.2%2022-07-20Fix
CVE-2022-32961HiCOS’ client-side citizen digital certificate stack buffer overflow6.8CNA v3.10.2%2022-07-20Fix
CVE-2022-32960HiCOS’ client-side citizen digital certificate stack buffer overflow6.8v3.10.2%2022-07-20Fix
CVE-2022-32959HiCOS’ client-side citizen digital certificate stack buffer overflow6.8CNA v3.10.2%2022-07-20Fix
CVE-2022-32958TEAMPLUS TECHNOLOGY INC. Teamplus Pro allocation of resources without limits or throttling6.5NVD v3.11.0%2022-07-20Fix
CVE-2022-32458Data Systems Consulting Co., Ltd. BPM XML external entity (XXE) injection7.5CNA v3.11.1%2022-07-20Fix
CVE-2022-32457Data Systems Consulting Co., Ltd. BPM blind server-side request forgery (SSRF)5.3v3.10.8%2022-07-20Fix
CVE-2022-32456Data Systems Consulting Co., Ltd. BPM SQL injection9.8CNA v3.11.6%2022-07-20Fix
CVE-2022-31250openSUSE Tumbleweed keylime %post scriplet allows for privilege escalation from keylime user to root7.1CNA v3.10.3%2022-07-20Fix
CVE-2022-31160jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label6.1CNA v3.12.6%2022-07-20Exploit codeFix
CVE-2022-29923Quick Restaurant Reservations WordPress plugin authenticated reflected cross-site scripting (XSS)4.8v3.10.6%2022-07-20Fix
CVE-2022-29834Mitsubishi Electric GENESIS64 path traversal7.5CNA v3.11.6%2022-07-20Fix
CVE-2022-29454Better Messages WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-07-20Fix
CVE-2022-26138Atlassian Questions For Confluence App hard-coded credentials9.8v3.198.2%2022-07-20KEVNucleiExploit codeFix
CVE-2022-26137A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue associated with this vulnerability: Cross-o8.8v3.12.2%2022-07-20Fix
CVE-2022-26136Atlassian Crucible authentication bypass9.8v3.15.0%2022-07-20Fix
CVE-2022-24660Goldshell Miner Firmware cleartext storage of sensitive information7.5v3.10.6%2022-07-20
CVE-2022-24659Goldshell Miner Firmware path traversal7.5v3.11.5%2022-07-20
CVE-2022-24657Goldshell Miner Firmware hard-coded credentials9.8v3.11.1%2022-07-20
CVE-2022-22424IBM QRadar SIEM incorrect default permissions5.1CNA v3.00.2%2022-07-20Fix
CVE-2022-22221Junos OS: SRX and EX Series: Local privilege escalation flaw in download functionality7.8CNA v3.10.2%2022-07-20Fix
CVE-2022-22217Juniper Networks Junos OS Packet Forwarding Engine improper check for exceptional conditions6.1CNA v3.10.3%2022-07-20Fix
CVE-2022-22216Junos OS: PTX Series and QFX10000 Series: Etherleak memory disclosure in Ethernet padding data4.3CNA v3.10.3%2022-07-20Fix
CVE-2022-22215Juniper Networks Junos OS plugable authentication module missing file descriptor release6.5CNA v3.10.6%2022-07-20Fix
CVE-2022-22214Juniper Networks Junos OS Packet Forwarding Engine improper input validation6.5CNA v3.10.3%2022-07-20Fix
CVE-2022-22213Juniper Junos OS and Junos OS Evolved RPD BGP update processing vulnerability5.9CNA v3.10.7%2022-07-20Fix
CVE-2022-22212Juniper Networks Junos OS Evolved Packet Forwarding Engine resource exhaustion7.5CNA v3.10.8%2022-07-20Fix
CVE-2022-22210Juniper Networks Junos OS Packet Forwarding Engine null pointer dereference6.5CNA v3.10.3%2022-07-20Fix
CVE-2022-22209Juniper Networks Junos OS kernel memory leak7.5CNA v3.11.0%2022-07-20Fix
CVE-2022-22207Juniper Networks Junos OS Advanced Forwarding Toolkit use-after-free7.5CNA v3.10.8%2022-07-20Fix
CVE-2022-22206Juniper Networks Junos OS PFE buffer overflow7.5CNA v3.10.8%2022-07-20Fix
CVE-2022-22205Junos OS: SRX Series: An FPC memory leak can occur in an APBR scenario7.5CNA v3.10.8%2022-07-20Fix
CVE-2022-22204Juniper Junos OS SIP ALG memory leak5.3CNA v3.10.7%2022-07-20Fix
CVE-2022-22203Juniper Networks Junos OS PFE incorrect comparison6.5CNA v3.11.1%2022-07-20Fix
CVE-2022-22202Juniper Junos OS PTX Series FPC vulnerability6.5CNA v3.10.5%2022-07-20Fix
CVE-2022-2492SourceCodester Library Management System index.php SQL injection8.8v3.10.7%2022-07-20
CVE-2022-2491SourceCodester Library Management System lab.php SQL injection8.8v3.10.7%2022-07-20
CVE-2022-2490SourceCodester Simple E-Learning System search.php SQL injection8.8v3.10.7%2022-07-20
CVE-2022-2489SourceCodester Simple E-Learning System classRoom.php SQL injection8.8v3.10.7%2022-07-20
CVE-2022-2488WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection9.8v3.132.9%2022-07-20Nuclei
CVE-2022-2487WAVLINK WN535K2/WN535K3 nightled.cgi os command injection9.8v3.179.5%2022-07-20Nuclei
CVE-2022-2486WAVLINK WN535K2/WN535K3 os command injection9.8v3.129.8%2022-07-20Nuclei
CVE-2022-2199ICSA-22-200-01 MiCODUS MV720 GPS tracker cross-site scripting6.1NVD v3.10.7%2022-07-20Fix
CVE-2022-2179ICSA-22-188-01 Rockwell Automation MicroLogix improper restriction of rendered UI layers or frames6.5v3.11.1%2022-07-20
CVE-2022-2141ICSA-22-200-01 MiCODUS MV720 GPS tracker improper authentication9.8v3.11.2%2022-07-20Fix
CVE-2022-2107ICSA-22-200-01 MiCODUS MV720 GPS tracker use of hard-coded credentials9.8v3.11.2%2022-07-20Fix
CVE-2022-1766Anchore Enterprise insufficiently protected credentials7.5v3.10.7%2022-07-20Fix
CVE-2022-1264Inductive Automation Ignition web configuration interface path traversal8.8v3.10.9%2022-07-20Fix
CVE-2022-36305VestaCP Vesta Control Panel cross-site scripting6.1v3.10.5%2022-07-19
CVE-2022-36304VestaCP Vesta Control Panel cross-site scripting6.1v3.10.5%2022-07-19
CVE-2022-36303VestaCP Vesta Control Panel cross-site scripting6.1v3.10.5%2022-07-19
CVE-2022-35912Grails framework remote code execution via Data Binding9.8v3.12.2%2022-07-19Fix
CVE-2022-35405Zoho ManageEngine Multiple Products remote code execution9.8v3.199.9%2022-07-19KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-34540Dw Megapix OS command injection8.8v3.11.2%2022-07-19
CVE-2022-34539Dw Megapix OS command injection8.8v3.11.2%2022-07-19
CVE-2022-34538Dw Megapix OS command injection8.8v3.12.8%2022-07-19
CVE-2022-34537Dw Megapix cross-site scripting5.4v3.10.4%2022-07-19
CVE-2022-34536Dw Megapix session fixation7.5v3.10.7%2022-07-19
CVE-2022-34535Dw Megapix improper authentication7.5v3.10.7%2022-07-19
CVE-2022-34534DW Spectrum Server API information disclosure7.5v3.12.5%2022-07-19Nuclei
CVE-2022-34266libtiff uninitialized resource use5.5v3.10.3%2022-07-19Fix
CVE-2022-34169Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets7.5v3.181.0%2022-07-19Exploit codeFix
CVE-2022-34025VestaCP Vesta Control Panel cross-site scripting6.1v3.10.5%2022-07-19
CVE-2022-34024Barangay Management System unrestricted file upload7.2v3.11.4%2022-07-19Exploit code
CVE-2022-34023Barangay Management System SQL injection9.8v3.10.7%2022-07-19
CVE-2022-34001UNIT4 Enterprise Resource Planning XML external entity injection6.5v3.10.8%2022-07-19
CVE-2022-31150Node.js undici CRLF injection in request headers5.3CNA v3.11.5%2022-07-19Fix
CVE-2022-31144Potential heap overflow in Redis7.0CNA v3.13.2%2022-07-19Exploit codeFix
CVE-2022-30570TIBCO Data Virtualization access control vulnerability6.5CNA v3.10.7%2022-07-19Fix
CVE-2022-30532Octopus Deploy Octopus Server artifact management vulnerability5.3v3.10.5%2022-07-19Fix
CVE-2022-30526Zyxel USG FLEX 100(W) firmware improper privilege management7.8CNA v3.11.1%2022-07-19Exploit codeKCVFix
CVE-2022-30302Fortinet FortiDeceptor path traversal6.5CNA v3.10.9%2022-07-19Fix
CVE-2022-30301Fortinet FortiAP-U path traversal7.8CNA v3.10.2%2022-07-19Fix
CVE-2022-29060Fortinet FortiDDoS hard-coded credentials8.1CNA v3.10.7%2022-07-19Fix
CVE-2022-29057Fortinet FortiEDR cross-site scripting5.4CNA v3.10.6%2022-07-19Fix
CVE-2022-27580SICK Safety Designer deserialization of untrusted data7.8v3.10.4%2022-07-19Fix
CVE-2022-27579SICK Flexi Soft Designer deserialization of untrusted data7.8v3.10.4%2022-07-19Fix
CVE-2022-27545HCL BigFix Web Reports authorized users may perform HTML injection4.6CNA v3.10.3%2022-07-19Fix
CVE-2022-27544HCL BigFix Web Reports authorized users may see sensitive information in clear text5.0CNA v3.10.5%2022-07-19Fix
CVE-2022-27483Fortinet FortiManager, FortiAnalyzer OS command injection7.2CNA v3.12.2%2022-07-19Fix
CVE-2022-27373Phicomm FIR303B OS command injection8.8v3.13.5%2022-07-19
CVE-2022-26113Fortinet FortiClientWindows improper privilege management7.7CNA v3.10.3%2022-07-19Fix
CVE-2022-24082Pegasystems Pega Infinity deserialization of untrusted data9.8CNA v3.012.2%2022-07-19Exploit codeFix
CVE-2022-22417IBM Sterling Partner Engagement Manager cross-site scripting5.4CNA v3.00.5%2022-07-19Fix
CVE-2022-22416IBM Sterling Partner Engagement Manager server-side request forgery5.4CNA v3.00.5%2022-07-19Fix
CVE-2022-22360IBM Sterling Partner Engagement Manager LDAP injection7.5CNA v3.01.7%2022-07-19Fix
CVE-2022-22359IBM Sterling Partner Engagement Manager cross-site request forgery4.3CNA v3.00.3%2022-07-19Fix
CVE-2022-22358IBM Sterling Partner Engagement Manager XML external entity injection7.1CNA v3.01.3%2022-07-19Fix
CVE-2022-21586Oracle Financial Services Applications Banking Trade Finance unauthorized data access6.4CNA v3.10.6%2022-07-19Fix
CVE-2022-21585Oracle Financial Services Applications Banking Trade Finance unauthorized data access6.7CNA v3.10.7%2022-07-19Fix
CVE-2022-21584Oracle Financial Services Applications Banking Trade Finance unauthorized data access6.4CNA v3.10.7%2022-07-19Fix
CVE-2022-21583Oracle Financial Services Applications Banking Trade Finance unauthorized data access6.4CNA v3.10.6%2022-07-19Fix
CVE-2022-21582Oracle Financial Services Applications Banking Trade Finance unauthorized data access6.7CNA v3.10.7%2022-07-19Fix
CVE-2022-21581Oracle Financial Services Applications Banking Trade Finance unauthorized data modification5.9CNA v3.10.5%2022-07-19Fix
CVE-2022-21580Oracle Financial Services Revenue Management and Billing unauthorized data access5.9CNA v3.10.5%2022-07-19Fix
CVE-2022-21579Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access6.4CNA v3.10.7%2022-07-19Fix
CVE-2022-21578Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access6.7CNA v3.10.7%2022-07-19Fix
CVE-2022-21577Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access6.4CNA v3.10.7%2022-07-19Fix
CVE-2022-21576Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access6.4CNA v3.10.6%2022-07-19Fix
CVE-2022-21575Oracle WebCenter Sites Support Tools User interface component unauthorized data access6.0CNA v3.10.7%2022-07-19Fix
CVE-2022-21574Oracle Communications Billing and Revenue Management Connection Manager component denial of service5.3CNA v3.11.0%2022-07-19Fix
CVE-2022-21573Oracle Communications Billing and Revenue Management Billing Care component denial of service6.5CNA v3.10.8%2022-07-19Fix
CVE-2022-21572Oracle Communications Billing and Revenue Management unauthorized data modification5.4CNA v3.10.5%2022-07-19Fix
CVE-2022-21571Oracle VM VirtualBox Core component takeover8.2CNA v3.10.4%2022-07-19Fix
CVE-2022-21570Oracle Coherence Core component denial of service7.5CNA v3.10.9%2022-07-19Fix
CVE-2022-21569Oracle MySQL Server Optimizer component denial of service6.5CNA v3.11.4%2022-07-19Fix
CVE-2022-21568Oracle E-Business Suite iReceivables Access request component unauthorized data access6.5CNA v3.10.8%2022-07-19Fix
CVE-2022-21567Oracle E-Business Suite Workflow Worklist component unauthorized data access7.5CNA v3.11.0%2022-07-19Fix
CVE-2022-21566Oracle E-Business Suite Applications Framework Diagnostics component unauthorized data access7.5CNA v3.11.1%2022-07-19Fix
CVE-2022-21565Oracle Database Java VM vulnerability6.5CNA v3.10.7%2022-07-19Fix
CVE-2022-21564Oracle WebLogic Server Web services component denial of service5.3CNA v3.11.0%2022-07-19Fix
CVE-2022-21563Oracle ZFS Storage Appliance Kit Core component unauthorized data modification3.4CNA v3.10.2%2022-07-19Fix
CVE-2022-21562Oracle SOA Suite Fabric Layer component unauthorized data modification7.5CNA v3.10.8%2022-07-19Fix
CVE-2022-21561Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data access6.5CNA v3.10.8%2022-07-19Fix
CVE-2022-21560Oracle WebLogic Server Core component denial of service5.3CNA v3.11.0%2022-07-19Fix
CVE-2022-21559Oracle Commerce Platform Dynamo Application Framework component unauthorized data access5.5CNA v3.10.2%2022-07-19Fix
CVE-2022-21558Oracle Crystal Ball Installation component takeover7.8CNA v3.10.3%2022-07-19Fix
CVE-2022-21557Oracle WebLogic Server Web Container component unauthorized data access5.7CNA v3.10.2%2022-07-19Fix
CVE-2022-21556Oracle MySQL Server Optimizer component unauthorized data modification6.5CNA v3.11.4%2022-07-19Fix
CVE-2022-21555Oracle MySQL Shell for VS Code Shell GUI component unauthorized data modification4.2CNA v3.10.2%2022-07-19Fix
CVE-2022-21554Oracle VM VirtualBox Core component denial of service4.4CNA v3.10.3%2022-07-19Fix
CVE-2022-21553Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.3%2022-07-19Fix
CVE-2022-21552Oracle WebCenter Content Search component unauthorized data modification7.2CNA v3.10.7%2022-07-19Fix
CVE-2022-21551Oracle GoldenGate takeover6.8CNA v3.10.8%2022-07-19Fix
CVE-2022-21550Oracle MySQL Cluster General component takeover6.3CNA v3.150.7%2022-07-19Fix
CVE-2022-21549Oracle Java SE, Oracle GraalVM Enterprise Edition Libraries component unauthorized data modification5.3CNA v3.12.5%2022-07-19Fix
CVE-2022-21548Oracle WebLogic Server Core component unauthorized data modification6.5CNA v3.10.9%2022-07-19Fix
CVE-2022-21547Oracle MySQL Server Federated component denial of service4.9CNA v3.11.4%2022-07-19Fix
CVE-2022-21545Oracle E-Business Suite iRecruitment information disclosure5.3CNA v3.10.7%2022-07-19Fix
CVE-2022-21544Oracle Financial Services Applications FLEXCUBE Universal Banking Infrastructure component takeover7.1CNA v3.10.8%2022-07-19Fix
CVE-2022-21543Oracle PeopleSoft Enterprise PeopleTools Updates Environment Mgmt component takeover9.8CNA v3.11.5%2022-07-19Fix
CVE-2022-21542Oracle JD Edwards EnterpriseOne Tools Web Runtime component unauthorized data modification7.4CNA v3.10.7%2022-07-19Fix
CVE-2022-21541Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component unauthorized data modification5.9CNA v3.12.9%2022-07-19Fix
CVE-2022-21540Oracle Java SE, Oracle GraalVM Enterprise Edition Hotspot component information disclosure5.3CNA v3.14.2%2022-07-19Fix
CVE-2022-21539Oracle MySQL Server InnoDB component unauthorized data modification5.0CNA v3.11.0%2022-07-19Fix
CVE-2022-21538Oracle MySQL Server Security Encryption component denial of service3.1CNA v3.10.8%2022-07-19Fix
CVE-2022-21537Oracle MySQL Server InnoDB component denial of service4.9CNA v3.11.8%2022-07-19Fix
CVE-2022-21536Oracle Enterprise Manager Base Platform Policy Framework component takeover8.1CNA v3.11.0%2022-07-19Fix
CVE-2022-21535Oracle MySQL Shell General/Core client component denial of service2.5CNA v3.10.5%2022-07-19Fix
CVE-2022-21534Oracle MySQL Server Stored Procedure component denial of service4.9CNA v3.11.7%2022-07-19Fix
CVE-2022-21533Oracle Solaris SMB Server component denial of service5.5CNA v3.10.2%2022-07-19Fix
CVE-2022-21532Oracle JD Edwards EnterpriseOne Orchestrator E1 IOT Orchestrator component information disclosure4.3CNA v3.10.6%2022-07-19Fix
CVE-2022-21531Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.7%2022-07-19Fix
CVE-2022-21530Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.8%2022-07-19Fix
CVE-2022-21529Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.7%2022-07-19Fix
CVE-2022-21528Oracle MySQL Server Optimizer component unauthorized data modification5.5CNA v3.11.6%2022-07-19Fix
CVE-2022-21527Oracle MySQL Server Optimizer component unauthorized data modification5.5CNA v3.11.7%2022-07-19Fix
CVE-2022-21526Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.9%2022-07-19Fix
CVE-2022-21525Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.8%2022-07-19Fix
CVE-2022-21524Oracle Solaris Filesystem component unauthorized data modification7.6CNA v3.10.8%2022-07-19Fix
CVE-2022-21523Oracle BI Publisher BI Publisher Security component information disclosure4.3CNA v3.10.6%2022-07-19Fix
CVE-2022-21522Oracle MySQL Server Stored Procedure component denial of service4.4CNA v3.11.7%2022-07-19Fix
CVE-2022-21521Oracle PeopleSoft Enterprise PeopleTools XML Publisher component unauthorized data access4.9CNA v3.10.8%2022-07-19Fix
CVE-2022-21520Oracle PeopleSoft Enterprise PeopleTools Fluid Core component unauthorized data modification6.1CNA v3.10.6%2022-07-19Fix
CVE-2022-21519Oracle MySQL Cluster General component denial of service5.9CNA v3.11.4%2022-07-19Fix
CVE-2022-21518Oracle Health Sciences Data Management Workbench User interface component unauthorized data access6.5CNA v3.10.8%2022-07-19Fix
CVE-2022-21517Oracle MySQL Server InnoDB component denial of service4.9CNA v3.11.8%2022-07-19Fix
CVE-2022-21516Oracle Enterprise Manager Base Platform unauthorized data modification7.3CNA v3.10.7%2022-07-19Fix
CVE-2022-21515Oracle MySQL Server options component denial of service4.9CNA v3.11.8%2022-07-19Fix
CVE-2022-21514Oracle Solaris Remote Administration daemon component denial of service7.5CNA v3.11.3%2022-07-19Fix
CVE-2022-21513Oracle ZFS Storage Appliance Kit Core component takeover8.2CNA v3.10.3%2022-07-19Fix
CVE-2022-21512Oracle PeopleSoft Enterprise PeopleTools Integration Broker component unauthorized data access4.4CNA v3.10.2%2022-07-19Fix
CVE-2022-21511Oracle Database takeover7.2CNA v3.11.1%2022-07-19Fix
CVE-2022-21510Oracle Database Sharding vulnerability8.8CNA v3.10.3%2022-07-19Fix
CVE-2022-21509Oracle MySQL Server Optimizer component unauthorized data modification5.5CNA v3.11.7%2022-07-19Fix
CVE-2022-21508Oracle Essbase security and provisioning improper access control5.8CNA v3.10.3%2022-07-19Fix
CVE-2022-21455Oracle MySQL Server PAM Auth plugin component unauthorized data modification4.9CNA v3.11.1%2022-07-19Fix
CVE-2022-21439Oracle Solaris Kernel component denial of service4.2CNA v3.10.2%2022-07-19Fix
CVE-2022-21432Oracle Database Server RDBMS security denial of service2.7CNA v3.10.9%2022-07-19Fix
CVE-2022-21429Oracle Communications Billing and Revenue Management Billing Care component takeover8.1CNA v3.11.4%2022-07-19Fix
CVE-2022-21428Oracle Financial Services Applications FLEXCUBE Universal Banking unauthorized data access6.7CNA v3.10.7%2022-07-19Fix
CVE-2022-2476Wavpack null pointer dereference5.5NVD v3.10.4%2022-07-19Fix
CVE-2022-2469GNU SASL out-of-bounds read3.8CNA v3.11.6%2022-07-19Fix
CVE-2022-2468SourceCodester Garage Management System editbrand.php SQL injection8.8v3.10.9%2022-07-19
CVE-2022-2467SourceCodester Garage Management System login.php SQL injection9.8v3.14.5%2022-07-19Nuclei
CVE-2022-2454Integer overflow or wraparound in gpac/gpac7.8v3.10.4%2022-07-19Fix
CVE-2022-2453gpac/gpac GitHub repository use-after-free7.8v3.10.4%2022-07-19Fix
CVE-2022-2394Sensitive Parameter Exposure in Puppet Bolt3.5NVD v3.10.5%2022-07-19Fix
CVE-2022-2193HYPR Server insecure direct object reference7.5CNA v3.11.0%2022-07-19Fix
CVE-2022-2192HYPR Server forced browsing7.5CNA v3.10.9%2022-07-19
CVE-2022-2122GStreamer heap-based buffer overflow7.8NVD v3.10.5%2022-07-19Fix
CVE-2022-2030Zyxel USG FLEX 100(W) firmware path traversal6.5CNA v3.11.4%2022-07-19Fix
CVE-2022-1984HYPR Windows WFA deserialization of untrusted data4.5CNA v3.10.2%2022-07-19Fix
CVE-2022-1925GStreamer heap-based buffer overflow7.8NVD v3.10.5%2022-07-19Fix
CVE-2022-1924GStreamer heap-based buffer overflow7.8NVD v3.10.4%2022-07-19Fix
CVE-2022-1923GStreamer heap-based buffer overflow7.8NVD v3.10.4%2022-07-19Fix
CVE-2022-1922GStreamer heap-based buffer overflow7.8NVD v3.10.5%2022-07-19Fix
CVE-2022-1921GStreamer integer overflow7.8NVD v3.10.5%2022-07-19Fix
CVE-2022-1920GStreamer integer overflow7.8NVD v3.10.5%2022-07-19Fix
CVE-2022-36127Service unavailability impact in NodeJS agent(version)7.5v3.11.8%2022-07-18Fix
CVE-2022-35741Apache CloudStack SAML Single Sign-on XXE9.8v3.17.9%2022-07-18Fix
CVE-2022-35404Zoho ManageEngine Firewall Analyzer improper input validation8.2v3.12.8%2022-07-18Fix
CVE-2022-34902Parallels Access uncontrolled search path7.8v3.10.3%2022-07-18Fix
CVE-2022-34901Parallels Access uncontrolled search path7.8v3.10.3%2022-07-18Fix
CVE-2022-34900Parallels Access uncontrolled search path7.8v3.10.4%2022-07-18Fix
CVE-2022-34899Parallels Access time-of-check time-of-use race condition7.8v3.10.2%2022-07-18Fix
CVE-2022-34892Parallels Desktop race condition7.8v3.10.3%2022-07-18Fix
CVE-2022-34891Parallels Desktop incorrect permission assignment7.8v3.10.3%2022-07-18Fix
CVE-2022-34890Parallels Desktop untrusted pointer dereference8.8v3.10.3%2022-07-18Fix
CVE-2022-34889Parallels Desktop out-of-bounds read8.2v3.10.4%2022-07-18Fix
CVE-2022-34875Foxit PDF Reader out-of-bounds read3.3v3.10.9%2022-07-18Fix
CVE-2022-34874Foxit PDF Reader out-of-bounds read3.3v3.10.9%2022-07-18Fix
CVE-2022-34873Foxit PDF Reader out-of-bounds read3.3v3.10.9%2022-07-18Fix
CVE-2022-34643Spike Risc-v Isa Simulator improper exception handling5.5v3.10.2%2022-07-18
CVE-2022-34642Spike Risc-v Isa Simulator denial of service5.5v3.10.2%2022-07-18
CVE-2022-34641Openhwgroup CVA6 improper exception handling5.5v3.10.3%2022-07-18
CVE-2022-34640OpenHW Group CVA6 ecall and ebreak handling vulnerability5.5v3.10.2%2022-07-18
CVE-2022-34639Openhwgroup CVA6 improper exception handling5.5v3.10.2%2022-07-18
CVE-2022-34637Openhwgroup CVA6 improper exception handling5.5v3.10.2%2022-07-18
CVE-2022-34636Openhwgroup CVA6 improper exception handling5.5v3.10.2%2022-07-18
CVE-2022-34635OpenHW Group CVA6 mstatus register vulnerability9.8v3.10.9%2022-07-18
CVE-2022-34634Openhwgroup CVA6 improper exception handling5.5v3.10.2%2022-07-18
CVE-2022-34633Openhwgroup CVA6 improper exception handling5.5v3.10.2%2022-07-18
CVE-2022-34632Linux Foundation Rocket Chip Generator weak cryptographic algorithm9.1v3.10.6%2022-07-18
CVE-2022-34035htmldoc out-of-bounds write7.5v3.11.5%2022-07-18Fix
CVE-2022-34033htmldoc out-of-bounds write7.5v3.11.5%2022-07-18Fix
CVE-2022-34032Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njs_value_own_enumerate at src/njs_value.c.7.5v3.10.9%2022-07-18
CVE-2022-34031F5 NJS value-to-number conversion vulnerability7.5v3.10.9%2022-07-18
CVE-2022-34030F5 NJS DJB hash function vulnerability7.5v3.10.9%2022-07-18
CVE-2022-34029F5 Njs out-of-bounds read9.1v3.11.2%2022-07-18
CVE-2022-34028F5 NJS UTF-8 decoding vulnerability7.5v3.11.0%2022-07-18
CVE-2022-34027F5 NJS value property handling vulnerability7.5v3.10.9%2022-07-18
CVE-2022-33891Apache Spark command injection8.8v3.193.1%2022-07-18KEVNucleiMetasploitExploit codeFix
CVE-2022-32450AnyDesk link following7.1v3.10.5%2022-07-18
CVE-2022-32387Kentico Xperience denial of service7.5v3.11.0%2022-07-18Fix
CVE-2022-30627Chcnav P5E Gnss information disclosure hard coded credentials7.5v3.10.3%2022-07-18
CVE-2022-30626Chcnav P5E GNSS wifi_ap_pata_get.cmd endpoint cleartext storage of sensitive information7.5v3.10.2%2022-07-18
CVE-2022-30625Chcnav P5E Gnss directory listing5.3v3.10.3%2022-07-18
CVE-2022-30624Chcnav P5E Gnss authentication bypass admin password reset7.5v3.10.3%2022-07-18
CVE-2022-30623Chcnav P5E Gnss authentication bypass9.8v3.10.4%2022-07-18
CVE-2022-30621Cellinx NVT IP PTZ Camera local file inclusion6.5NVD v3.10.7%2022-07-18
CVE-2022-30620Cellinx NVT IP PTZ Camera privilege escalation8.8v3.10.5%2022-07-18
CVE-2022-28683Foxit PDF Reader use-after-free7.8v3.11.2%2022-07-18Fix
CVE-2022-28682Foxit PDF Reader out-of-bounds read7.8v3.11.2%2022-07-18Fix
CVE-2022-28681Foxit PDF Reader out-of-bounds read6.1v3.10.9%2022-07-18Fix
CVE-2022-28680Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28679Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28678Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28677Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28676Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28675Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28674Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28673Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28672Foxit PDF Reader use-after-free7.8v3.11.9%2022-07-18Exploit codeFix
CVE-2022-28671Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-28670Foxit PDF Reader out-of-bounds read7.8v3.11.0%2022-07-18Fix
CVE-2022-28669Foxit PDF Reader use-after-free7.8v3.11.1%2022-07-18Fix
CVE-2022-27434UNIT4 Teta SQL injection9.8NVD v3.11.4%2022-07-18Fix
CVE-2022-26120Fortinet FortiADC SQL injection5.4CNA v3.10.7%2022-07-18Fix
CVE-2022-26118Fortinet FortiManager, FortiAnalyzer improper privilege management6.7CNA v3.10.3%2022-07-18Fix
CVE-2022-26117Fortinet FortiNAC weak password requirements8.8CNA v3.11.0%2022-07-18Fix
CVE-2022-24692Dsknet cross-site scripting5.4v3.10.6%2022-07-18
CVE-2022-24691Dsknet SQL injection7.1v3.10.9%2022-07-18
CVE-2022-24690Dsknet SQL injection8.2v3.11.1%2022-07-18
CVE-2022-24689Dsknet missing brute-force protection5.3v3.10.9%2022-07-18
CVE-2022-24688Dsknet unrestricted file upload8.8v3.13.4%2022-07-18Fix
CVE-2022-23745Checkpoint Harmony Capsule Workspace memory corruption7.5NVD v3.116.9%2022-07-18Fix
CVE-2022-23438Fortinet FortiOS cross-site scripting4.7CNA v3.10.7%2022-07-18Fix
CVE-2022-23142ZXEN CG200 denial of service5.3v3.10.7%2022-07-18Fix
CVE-2022-22445IBM PowerVM Hypervisor FSP vulnerability7.6CNA v3.00.7%2022-07-18Fix
CVE-2022-22304Fortinet FortiAuthenticator OutlookAgent cross-site scripting6.1CNA v3.10.6%2022-07-18Fix
CVE-2022-2444Visualizer: Tables and Charts Manager for WordPress plugin PHAR deserialization8.8v3.12.2%2022-07-18Fix
CVE-2022-2443FreeMind WP Browser WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-07-18
CVE-2022-2437Feed Them Social WordPress plugin deserialization of untrusted data9.8v3.11.7%2022-07-18Fix
CVE-2022-2435AnyMind Widget WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-07-18
CVE-2022-2400External control of file name or path in dompdf/dompdf5.3v3.11.2%2022-07-18Fix
CVE-2022-2224Gallery for Social Photo WordPress plugin cross-site request forgery to post Duplication4.3v3.10.4%2022-07-18Fix
CVE-2022-2223Image Slider WordPress plugin cross-site request forgery to post Duplication4.3v3.10.4%2022-07-18Fix
CVE-2022-2117GiveWP Donation Plugin and Fundraising Platform WordPress plugin sensitive information disclosure5.3v3.11.1%2022-07-18Fix
CVE-2022-2108Wbcom Designs BuddyPress Group Reviews missing authorization5.3v3.10.8%2022-07-18Fix
CVE-2022-2101Download Manager WordPress plugin Contributor+ cross-site scripting5.4v3.11.0%2022-07-18Fix
CVE-2022-2039The Free Live Chat Support plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including 1.0.11. This is due to missing nonce protection on the livesupporti_settings() function found in the ~/livesupporti.php file. This makes it possible for unauthenticated attack8.8v3.10.6%2022-07-18Fix
CVE-2022-2001DX Share Selection WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-07-18Fix
CVE-2022-1912Button Widget Smartsoft WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-07-18Fix
CVE-2022-1565Import any XML or CSV File to WordPress plugin Admin+ Malicious file upload7.2v3.114.7%2022-07-18Exploit codeFix
CVE-2022-35861pyenv path traversal7.8v3.10.3%2022-07-17Fix
CVE-2022-33903torproject Tor denial of service7.5v3.11.2%2022-07-17Fix
CVE-2022-32985Nexans Gigaswitch 641 Desk V5 Sfp-vi hard-coded credentials9.8v3.11.2%2022-07-17Fix
CVE-2022-32320Ferdium cross-site request forgery8.8v3.10.5%2022-07-17
CVE-2022-32263Pexip Infinity before 28.1 allows remote attackers to trigger a software abort via G.719.7.5v3.11.0%2022-07-17
CVE-2022-31260Montala ResourceSpace missing authentication6.5v3.11.9%2022-07-17NucleiFix
CVE-2022-31213Dbus-broker null pointer dereference7.5v3.12.1%2022-07-17Fix
CVE-2022-31212Dbus-broker out-of-bounds read7.5v3.12.1%2022-07-17Fix
CVE-2022-31211Infiray Iray-a8z3 weak password requirements9.8v3.11.6%2022-07-17
CVE-2022-31210Infiray Iray-a8z3 hard-coded credentials9.8v3.11.1%2022-07-17
CVE-2022-31209Infiray Iray-a8z3 buffer overflow9.8v3.11.2%2022-07-17
CVE-2022-31208Infiray Iray-a8z3 arbitrary command execution8.8v3.11.4%2022-07-17Fix
CVE-2022-31202Monitoringsoft Softguard Web path traversal6.5v3.11.3%2022-07-17
CVE-2022-31201Monitoringsoft Softguard Web cross-site scripting5.4v3.10.6%2022-07-17
CVE-2022-30982Gentics Cms cross-site scripting5.4v3.10.5%2022-07-17
CVE-2022-30981Gentics Cms deserialization of untrusted data8.8v3.11.3%2022-07-17
CVE-2022-30622Chcnav P5E Gnss information disclosure7.3v3.10.2%2022-07-17
CVE-2022-30550dovecot improper authentication8.8v3.12.1%2022-07-17Fix
CVE-2022-29286Pexip Infinity resource exhaustion7.5v3.11.1%2022-07-17
CVE-2022-28809Opendesign Drawings SDK missing authentication7.8v3.10.4%2022-07-17Fix
CVE-2022-28808Opendesign Drawings SDK out-of-bounds read7.8v3.10.4%2022-07-17Fix
CVE-2022-28807Opendesign Drawings SDK out-of-bounds read7.8v3.10.4%2022-07-17Fix
CVE-2022-27937Pexip Infinity resource exhaustion7.5v3.11.1%2022-07-17
CVE-2022-27936Pexip Infinity H.323 vulnerability7.5v3.11.1%2022-07-17
CVE-2022-27935Pexip Infinity Epic Telehealth integration vulnerability7.5v3.11.1%2022-07-17
CVE-2022-27934Pexip Infinity HTTP interface vulnerability7.5v3.11.1%2022-07-17
CVE-2022-27933Pexip Infinity One Touch Join vulnerability8.2v3.11.1%2022-07-17
CVE-2022-27932Pexip Infinity One Touch Join vulnerability7.5v3.11.1%2022-07-17
CVE-2022-27931Pexip Infinity Session Initiation Protocol vulnerability7.5v3.11.1%2022-07-17
CVE-2022-27930Pexip Infinity single sign-on vulnerability5.9v3.10.9%2022-07-17
CVE-2022-27929Pexip Infinity HTTP interface vulnerability7.5v3.11.1%2022-07-17
CVE-2022-27928Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.7.5v3.11.1%2022-07-17
CVE-2022-26657Pexip Infinity One Touch Join vulnerability7.5v3.11.1%2022-07-17
CVE-2022-26656Pexip Infinity One Touch Join vulnerability8.2v3.11.1%2022-07-17
CVE-2022-26655Pexip Infinity improper input validation7.5v3.11.1%2022-07-17
CVE-2022-26654Pexip Infinity before 27.3 allows remote attackers to force a software abort via HTTP.7.5v3.11.1%2022-07-17
CVE-2022-26482Poly Eagleeye Director Ii OS command injection7.2v3.123.4%2022-07-17
CVE-2022-26481Poly G7500 OS command injection8.8v3.11.5%2022-07-17
CVE-2022-26479Poly Eagleeye Director Ii incorrect authorization9.8v3.12.0%2022-07-17
CVE-2022-26352dotCMS unrestricted upload of File9.8v3.191.6%2022-07-17KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-25357Pexip Infinity improper access control5.3v3.10.6%2022-07-17
CVE-2022-2222Download Monitor WordPress plugin Admin+ arbitrary file download4.9NVD v3.11.1%2022-07-17Fix
CVE-2022-2194Accept Stripe Payments WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2187Contact Form 7 Captcha WordPress plugin reflected cross-site scripting6.1NVD v3.11.5%2022-07-17NucleiFix
CVE-2022-2186Simple Post Notes WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2173Advanced Database Cleaner WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-07-17Fix
CVE-2022-2169Loading Page with Loading Screen WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2168Download Manager WordPress plugin reflected cross-site scripting6.1NVD v3.11.4%2022-07-17NucleiFix
CVE-2022-2151Best Contact Management Software WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2149Very Simple Breadcrumb WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17
CVE-2022-2148LinkedIn Company Updates WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17
CVE-2022-2146Import CSV Files WordPress plugin reflected cross-site scripting6.1NVD v3.10.4%2022-07-17
CVE-2022-2144Jquery Validation For Contact Form 7 WordPress plugin arbitrary options update via CSRF4.3NVD v3.10.4%2022-07-17Fix
CVE-2022-2133OAuth Single Sign On WordPress plugin authentication bypass5.3NVD v3.11.2%2022-07-17Fix
CVE-2022-2118404s WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2114Data Tables Generator by Supsystic WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2100Page Generator WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-07-17Fix
CVE-2022-2099WooCommerce WordPress plugin Admin+ stored HTML injection4.8NVD v3.10.7%2022-07-17Fix
CVE-2022-2090Woo Discount Rules WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-07-17Fix
CVE-2022-1933CDI WordPress plugin reflected cross-site-scripting6.1NVD v3.11.7%2022-07-17NucleiFix
CVE-2022-1672Insights from Google PageSpeed WordPress plugin Multiple CSRF8.8NVD v3.10.6%2022-07-17Fix
CVE-2022-36126Inductive Automation Ignition incorrect authorization7.2v3.12.5%2022-07-16Fix
CVE-2022-35906Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35905Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35904Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35903Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35902Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35901Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35900Bentley MicroStation out-of-bounds read3.3v3.10.2%2022-07-15Fix
CVE-2022-35890Inductive Automation Ignition incorrect authorization9.8v3.12.0%2022-07-15Fix
CVE-2022-35409Arm mbed TLS out-of-bounds read9.1v3.12.2%2022-07-15Fix
CVE-2022-34826Couchbase Server sensitive information in log files5.9v3.10.6%2022-07-15Fix
CVE-2022-34252Adobe InCopy Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2022-07-15Fix
CVE-2022-34251Adobe InCopy Font Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2022-07-15Fix
CVE-2022-34250Adobe InCopy Font Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.5%2022-07-15Fix
CVE-2022-34249Adobe InCopy Font Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.5%2022-07-15Fix
CVE-2022-34248Adobe InDesign Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2022-07-15Fix
CVE-2022-34247Adobe InDesign Font Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2022-07-15Fix
CVE-2022-34246Adobe InDesign Font Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.5%2022-07-15Fix
CVE-2022-34245Adobe InDesign Font Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.5%2022-07-15Fix
CVE-2022-34244Adobe Photoshop U3D File Parsing access of uninitialized pointer information disclosure5.5CNA v3.10.4%2022-07-15Fix
CVE-2022-34243Adobe Photoshop U3D File Parsing use-after-free remote code execution7.8CNA v3.10.5%2022-07-15Fix
CVE-2022-34242Adobe Character Animator SVG File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2022-07-15Fix
CVE-2022-34241Adobe Character Animator SVG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.5%2022-07-15Fix
CVE-2022-34239Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.13.1%2022-07-15Fix
CVE-2022-34237Adobe Acrobat Reader DC Font Parsing use-after-free information disclosure5.5CNA v3.13.2%2022-07-15Fix
CVE-2022-34236Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.13.1%2022-07-15Fix
CVE-2022-34234Adobe Acrobat Reader DC Doc printWithParams use-after-free information disclosure5.5CNA v3.13.3%2022-07-15Fix
CVE-2022-34233Adobe Acrobat Reader DC Doc print use-after-free information disclosure5.5CNA v3.14.5%2022-07-15Fix
CVE-2022-34232Adobe Acrobat Reader DC Annotation print use-after-free information disclosure5.5CNA v3.13.3%2022-07-15Fix
CVE-2022-34230Adobe Acrobat Reader use-after-free could lead to arbitrary code execution7.8CNA v3.13.5%2022-07-15Fix
CVE-2022-34229Adobe Acrobat Reader DC AcroForm rect use-after-free remote code execution7.8CNA v3.13.6%2022-07-15Fix
CVE-2022-34228Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution7.8CNA v3.13.5%2022-07-15Fix
CVE-2022-34226Adobe Acrobat Reader DC PDF Parsing out-of-bounds read remote code execution7.8CNA v3.15.0%2022-07-15Fix
CVE-2022-34225Adobe Acrobat Reader DC AcroForm exportValues use-after-free remote code execution7.8CNA v3.13.5%2022-07-15Fix
CVE-2022-34223Adobe Acrobat Reader DC AcroForm currentValueIndices use-after-free remote code execution7.8CNA v3.13.6%2022-07-15Fix
CVE-2022-34222Adobe Acrobat Reader DC query out-of-bounds read remote code execution7.8CNA v3.13.3%2022-07-15Fix
CVE-2022-34221Adobe Acrobat Reader type confusion vulnerability could lead to arbitrary code execution7.8CNA v3.011.1%2022-07-15Fix
CVE-2022-34220Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.04.3%2022-07-15Fix
CVE-2022-34219Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.06.2%2022-07-15Fix
CVE-2022-34217Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution7.8CNA v3.13.1%2022-07-15Fix
CVE-2022-34216Adobe Acrobat Reader DC PDF Parsing use-after-free remote code execution7.8CNA v3.06.2%2022-07-15Fix
CVE-2022-34215Adobe Acrobat Reader DC Annotation Polygon out-of-bounds read remote code execution7.8CNA v3.13.3%2022-07-15Fix
CVE-2022-32434OpENer out-of-bounds write7.8v3.10.8%2022-07-15
CVE-2022-32119Arox School ERP Pro unrestricted file upload8.8v3.12.0%2022-07-15Exploit code
CVE-2022-32118Arox School ERP Pro cross-site scripting6.1v3.11.1%2022-07-15Exploit code
CVE-2022-31161Roxy-WI vulnerable to unauthenticated remote code execution via ssl_cert upload10.0CNA v3.128.8%2022-07-15NucleiExploit codeFix
CVE-2022-31159aws-sdk-java partial path traversal in com.amazonaws:aws-java-sdk-s37.9CNA v3.11.6%2022-07-15Fix
CVE-2022-31158Authentication bypass by capture-replay in packbackbooks/lti-1-3-php-library7.5CNA v3.10.9%2022-07-15Fix
CVE-2022-31157Packback LTI 1.3 Tool Library nonce generation weak cryptographic algorithm7.5CNA v3.10.5%2022-07-15Fix
CVE-2022-31153OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli6.5CNA v3.11.5%2022-07-15Fix
CVE-2022-31107Grafana account takeover via OAuth7.1CNA v3.12.9%2022-07-15Fix
CVE-2022-31097Stored XSS in Grafana's Unified Alerting7.3CNA v3.170.1%2022-07-15Fix
CVE-2022-30634Indefinite hang with large buffers on Windows in crypto/rand7.5v3.12.1%2022-07-15Fix
CVE-2022-30245Honeywell Alerton Compass externally controlled resource reference6.5v3.11.3%2022-07-15Fix
CVE-2022-30244Honeywell Alerton Ascent Control Module inclusion of untrusted functionality8.0v3.11.4%2022-07-15Fix
CVE-2022-30243Honeywell Alterton Visual Logic inclusion of untrusted functionality8.8v3.11.7%2022-07-15Fix
CVE-2022-30242Honeywell Alerton Ascent Control Module (ACM) through 2022-05-04 allows unauthenticated configuration changes from remote users. This enables configuration data to be stored on the controller and then implemented. A user with malicious intent can send a crafted packet to change the controller config6.8v3.11.2%2022-07-15Fix
CVE-2022-29890Octopus Deploy Octopus Server cross-site scripting6.1v3.10.4%2022-07-15Fix
CVE-2022-25891github.com/containrrr/shoutrrr/pkg/util denial of service (DoS)7.5v3.11.6%2022-07-15Fix
CVE-2022-25869Angular (deprecated package) cross-site scripting6.1v3.16.8%2022-07-15Exploit codeFix
CVE-2022-25858terser regular expression denial of service (ReDoS)7.5v3.13.0%2022-07-15Fix
CVE-2022-23201Adobe RoboHelp reflected XSS could lead to arbitrary code execution6.1CNA v3.00.7%2022-07-15Fix
CVE-2022-23141ZXMP M721 sensitive information in log files7.5v3.10.7%2022-07-15Fix
CVE-2022-2420URVE Web Manager uploader.php unrestricted upload8.0v3.11.1%2022-07-15
CVE-2022-2419URVE Web Manager upload.php unrestricted upload8.0v3.112.8%2022-07-15
CVE-2022-2418URVE Web Manager img_upload.php unrestricted upload8.0v3.11.1%2022-07-15
CVE-2022-1881Octopus Deploy Octopus Server insecure direct object reference5.3v3.10.5%2022-07-15Fix
CVE-2022-35283IBM Security Verify Information Queue denial of service6.5CNA v3.01.2%2022-07-14Fix
CVE-2022-34094Softwarepublico I3GEO cross-site scripting6.1v3.12.8%2022-07-14Nuclei
CVE-2022-34093Softwarepublico I3GEO cross-site scripting6.1v3.12.8%2022-07-14Nuclei
CVE-2022-34092Softwarepublico I3GEO cross-site scripting6.1v3.11.3%2022-07-14
CVE-2022-32425mealie observable discrepancy5.3v3.10.6%2022-07-14
CVE-2022-32417PbootCMS code injection9.8v3.135.6%2022-07-14
CVE-2022-32416Product Show Room Site SQL injection7.2v3.10.9%2022-07-14
CVE-2022-32415Product Show Room Site SQL injection8.8v3.10.9%2022-07-14
CVE-2022-32409Softwarepublico I3GEO local file inclusion9.8v3.113.6%2022-07-14Nuclei
CVE-2022-32406Gtkradiant buffer overflow5.5v3.10.5%2022-07-14
CVE-2022-32389Isode Swift hard-coded credentials7.5v3.10.6%2022-07-14
CVE-2022-32323Autotrace out-of-bounds write7.3v3.10.9%2022-07-14Fix
CVE-2022-32318Fast Food Ordering System cross-site scripting5.4v3.10.5%2022-07-14
CVE-2022-32317Mplayerhq Mplayer use-after-free5.5v3.10.9%2022-07-14
CVE-2022-32298Toybox null pointer dereference7.5v3.11.0%2022-07-14
CVE-2022-32297Piwigo SQL injection7.5v3.11.2%2022-07-14
CVE-2022-32225Veeam Management Pack for Microsoft System Center cross-site scripting6.1v3.10.6%2022-07-14Fix
CVE-2022-32223Node.js Node uncontrolled search path7.3v3.11.7%2022-07-14Exploit codeFix
CVE-2022-32222Node.js Node cryptographic weakness5.3v3.12.0%2022-07-14Fix
CVE-2022-32215Node.js Node HTTP request smuggling6.5v3.170.2%2022-07-14Fix
CVE-2022-32214Llhttp allows HTTP request smuggling via Improper Delimiting of header fields6.5v3.181.5%2022-07-14Fix
CVE-2022-32213Llhttp allows HTTP request smuggling via Flawed Parsing of Transfer-Encoding6.5v3.146.0%2022-07-14Fix
CVE-2022-32212Node.js Node A OS command injection8.1v3.15.9%2022-07-14Fix
CVE-2022-32210https://github.com/nodejs/undici ProxyAgent vulnerable to MITM6.5v3.10.4%2022-07-14Fix
CVE-2022-31156Gradle dependency verification vulnerability6.6CNA v3.10.6%2022-07-14Fix
CVE-2022-31147jquery-validation ReDoS in url2 due to incomplete fix of7.5CNA v3.12.3%2022-07-14Exploit codeFix
CVE-2022-31142Potential Timing Attack Vector in @fastify/Bearer-auth7.5CNA v3.11.5%2022-07-14Fix
CVE-2022-30113Fahou100 Electronic Mall System SQL injection9.8v3.10.8%2022-07-14
CVE-2022-30024TP-Link Tl-wr841n(eu) httpd daemon buffer overflow8.8v3.12.0%2022-07-14
CVE-2022-29593Dingtian-tech Dt-r004 authentication bypass by replay5.9v3.114.0%2022-07-14Exploit code