CVE-2022 records published in July 2022
Page two of two: records 1,001 to 1,735 of the 1,735 published in July 2022, newest first. The first page carries the figures for July 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-28876 | All F-Secure and WithSecure endpoint protection products denial of service (DoS) | 7.5v3.1 | 0.4% | 2022-07-14 | |
| CVE-2022-28377 | Verizon Lvskihp Indoorunit weak password requirements | 7.5v3.1 | 0.9% | 2022-07-14 | Fix |
| CVE-2022-28375 | Verizon Lvskihp Outdoorunit OS command injection | 9.8v3.1 | 2.2% | 2022-07-14 | Fix |
| CVE-2022-28374 | Verizon Lvskihp Outdoorunit OS command injection | 8.8v3.1 | 2.3% | 2022-07-14 | Fix |
| CVE-2022-28373 | Verizon Lvskihp Indoorunit OS command injection | 9.8v3.1 | 2.2% | 2022-07-14 | Fix |
| CVE-2022-28372 | Verizon Lvskihp Indoorunit unrestricted file upload | 7.5v3.1 | 0.7% | 2022-07-14 | Fix |
| CVE-2022-28371 | Verizon Lvskihp Indoorunit hard-coded credentials | 7.5v3.1 | 0.6% | 2022-07-14 | Fix |
| CVE-2022-28370 | Verizon Lvskihp Outdoorunit insufficient verification of data authenticity | 7.5v3.1 | 0.4% | 2022-07-14 | Fix |
| CVE-2022-28369 | Verizon Lvskihp Indoorunit unrestricted file upload | 9.8v3.1 | 1.4% | 2022-07-14 | Fix |
| CVE-2022-25803 | bestpractical Request Tracker open redirect | 6.1v3.1 | 0.5% | 2022-07-14 | Fix |
| CVE-2022-25802 | bestpractical Request Tracker cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-14 | Fix |
| CVE-2022-25801 | bestpractical Request Tracker For Incident Response server-side request forgery | 9.1v3.1 | 0.9% | 2022-07-14 | Fix |
| CVE-2022-25800 | bestpractical Request Tracker For Incident Response server-side request forgery | 9.1v3.1 | 0.9% | 2022-07-14 | Fix |
| CVE-2022-23825 | AMD Processors information disclosure | 6.5v3.1 | 0.8% | 2022-07-14 | Fix |
| CVE-2022-22477 | IBM WebSphere Application Server cross-site scripting | 6.1CNA v3.0 | 0.6% | 2022-07-14 | Fix |
| CVE-2022-22473 | IBM WebSphere Application Server information disclosure | 3.7CNA v3.0 | 1.1% | 2022-07-14 | Fix |
| CVE-2022-22460 | IBM Security Verify Governance source code repository vulnerability | 3.0CNA v3.0 | 0.7% | 2022-07-14 | Fix |
| CVE-2022-22453 | IBM Security Verify Governance inadequate encryption strength | 5.1CNA v3.0 | 0.4% | 2022-07-14 | Fix |
| CVE-2022-22452 | IBM Security Verify Governance missing brute-force protection | 5.3CNA v3.0 | 1.0% | 2022-07-14 | Fix |
| CVE-2022-22450 | IBM Security Verify Governance unrestricted file upload | 3.8CNA v3.0 | 0.6% | 2022-07-14 | Fix |
| CVE-2022-2408 | Mattermost guest accounts can list all public channels | 4.3CNA v3.1 | 0.6% | 2022-07-14 | |
| CVE-2022-2406 | Mattermost malicious imports can lead to denial of service | 4.3CNA v3.1 | 0.9% | 2022-07-14 | |
| CVE-2022-2401 | Mattermost team members could access sensitive information of other users via an API call | 6.5CNA v3.1 | 0.8% | 2022-07-14 | Fix |
| CVE-2022-2396 | SourceCodester Simple E-Learning System claire_blake cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-14 | |
| CVE-2022-2393 | pki-core improper authorization | 5.7v3.1 | 0.2% | 2022-07-14 | Fix |
| CVE-2022-1662 | convert2rhel information disclosure | 5.5v3.1 | 0.2% | 2022-07-14 | |
| CVE-2022-35857 | kvf-admin hard-coded credentials | 9.8v3.1 | 1.7% | 2022-07-13 | |
| CVE-2022-34765 | Schneider Electric OPC UA Modicon Communication Module external control of a file path | 5.5CNA v3.1 | 0.6% | 2022-07-13 | Fix |
| CVE-2022-34764 | Schneider Electric OPC UA Modicon Communication Module memory corruption | 5.9CNA v3.1 | 0.7% | 2022-07-13 | Fix |
| CVE-2022-34763 | Schneider Electric Modicon communication modules firmware signature verification vulnerability | 5.9CNA v3.1 | 0.3% | 2022-07-13 | Fix |
| CVE-2022-34762 | Schneider Electric OPC UA Modicon Communication Module path traversal | 5.9CNA v3.1 | 0.7% | 2022-07-13 | Fix |
| CVE-2022-34761 | Schneider Electric OPC UA Modicon Communication Module null pointer dereference | 7.5CNA v3.1 | 0.9% | 2022-07-13 | Fix |
| CVE-2022-34760 | Schneider Electric OPC UA Modicon Communication Module infinite loop | 7.5CNA v3.1 | 0.8% | 2022-07-13 | Fix |
| CVE-2022-34759 | Schneider Electric OPC UA Modicon Communication Module out-of-bounds write | 7.5CNA v3.1 | 0.8% | 2022-07-13 | Fix |
| CVE-2022-34758 | Schneider Electric Easergy P5 improper input validation | 5.1CNA v3.1 | 0.4% | 2022-07-13 | Fix |
| CVE-2022-34757 | Schneider Electric Easergy P5 weak cryptographic algorithm | 6.7CNA v3.1 | 0.3% | 2022-07-13 | Fix |
| CVE-2022-34756 | Schneider Electric Easergy P5 buffer overflow | 8.8CNA v3.1 | 1.6% | 2022-07-13 | Fix |
| CVE-2022-34754 | Schneider Electric Acti9 PowerTag Link C improper privilege management | 6.8CNA v3.1 | 0.3% | 2022-07-13 | Fix |
| CVE-2022-34753 | Schneider Electric SpaceLogic C-Bus Home Controller OS command injection | 8.8CNA v3.1 | 70.5% | 2022-07-13 | NucleiEmerging ThreatsFix |
| CVE-2022-34358 | IBM i cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-07-13 | Fix |
| CVE-2022-32308 | uBlock Origin cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-13 | Fix |
| CVE-2022-32274 | Ttpsc The Scheduler cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-13 | Fix |
| CVE-2022-32117 | JerryScript out-of-bounds write | 7.8v3.1 | 0.3% | 2022-07-13 | |
| CVE-2022-32114 | Strapi cross-site scripting via crafted file | 8.8NVD v3.1 | 2.0% | 2022-07-13 | |
| CVE-2022-32096 | Rhonabwy buffer overflow | 7.5v3.1 | 1.2% | 2022-07-13 | Fix |
| CVE-2022-32074 | Enhancesoft osTicket component audit/class.audit.php stored cross-site scripting | 5.4v3.1 | 1.4% | 2022-07-13 | Exploit code |
| CVE-2022-32073 | wolfSSH integer overflow | 9.8NVD v3.1 | 1.9% | 2022-07-13 | |
| CVE-2022-32065 | RuoYi vulnerable to arbitrary file upload in background management module | 5.4v3.1 | 0.9% | 2022-07-13 | Fix |
| CVE-2022-31781 | Apache Tapestry regular expression denial of service (ReDoS) in ContentType.java. (GHSL-2022-022) | 7.5v3.1 | 1.9% | 2022-07-13 | Fix |
| CVE-2022-31145 | Insufficient AccessToken Expiration Check in FlyteAdmin | 6.5CNA v3.1 | 1.0% | 2022-07-13 | Fix |
| CVE-2022-28888 | Spryker Cloud Commerce OS command injection | 9.8v3.1 | 4.5% | 2022-07-13 | |
| CVE-2022-22982 | VMware vCenter Server server-side request forgery | 7.5v3.1 | 0.9% | 2022-07-13 | Fix |
| CVE-2022-20238 | Android memory corruption | 9.8v3.1 | 0.5% | 2022-07-13 | Fix |
| CVE-2022-20236 | Google Android DRM driver memory corruption | 7.5v3.1 | 0.4% | 2022-07-13 | Fix |
| CVE-2022-20234 | Android incorrect permission assignment | 7.5v3.1 | 0.3% | 2022-07-13 | Fix |
| CVE-2022-20230 | Android KeyChain.java information disclosure | 5.5v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-20229 | Android bta_hf_client_at.cc out-of-bounds write | 9.8v3.1 | 2.8% | 2022-07-13 | Exploit codeFix |
| CVE-2022-20228 | Android C2DmaBufAllocator.cpp memory corruption | 6.5v3.1 | 0.6% | 2022-07-13 | Fix |
| CVE-2022-20227 | Android USB driver out-of-bounds read | 5.5v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-20226 | Android WindowManagerService.java privilege escalation | 3.9v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-20225 | Android SubscriptionController.java information disclosure | 5.5v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-20224 | Android bta_hf_client_at.cc out-of-bounds read | 7.5v3.1 | 1.3% | 2022-07-13 | Exploit codeFix |
| CVE-2022-20223 | Android AppRestrictionsFragment.java privilege escalation | 7.8v3.1 | 0.2% | 2022-07-13 | Exploit codeFix |
| CVE-2022-20222 | Android gatt_db.cc out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-13 | Fix |
| CVE-2022-20221 | Android avrc_pars_ct.cc out-of-bounds read | 6.5v3.1 | 0.3% | 2022-07-13 | Fix |
| CVE-2022-20220 | Android CallLogProvider.java insecure permissions | 7.8v3.1 | 0.2% | 2022-07-13 | Fix |
| CVE-2022-20219 | Android UserManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-20218 | Android PermissionController privilege escalation | 7.8v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-20217 | Google Android SprdContactsProvider vulnerability | 6.5v3.1 | 0.3% | 2022-07-13 | Fix |
| CVE-2022-20216 | Google Android Sprd firewall service vulnerability | 9.8v3.1 | 0.5% | 2022-07-13 | Fix |
| CVE-2022-20212 | Android AndroidManifest.xml elevation of privilege | 7.8v3.1 | 0.1% | 2022-07-13 | Fix |
| CVE-2022-2380 | kernel out-of-bounds read | 5.5NVD v3.1 | 0.2% | 2022-07-13 | Fix |
| CVE-2022-35648 | Nautilus T616 denial of service | 2.4v3.1 | 0.3% | 2022-07-12 | Fix |
| CVE-2022-35628 | IN2CODE Living User Experience SQL injection in typo3 extension LUX TYPO3 Marketing Automation | 9.8v3.1 | 26.3% | 2022-07-12 | Fix |
| CVE-2022-35403 | Zoho ManageEngine AssetExplorer ticket creation email vulnerability | 7.5v3.1 | 5.8% | 2022-07-12 | Fix |
| CVE-2022-35228 | SAP BusinessObjects Business Intelligence Platform cross-site request forgery | 8.8v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-35227 | SAP NetWeaver Enterprise Portal (WPC) cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-35225 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-35224 | SAP Enterprise Portal cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-35172 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-35171 | SAP 3D Visual Enterprise Viewer crash | 5.5v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-35170 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-35169 | SAP BusinessObjects Business Intelligence Platform (LCM) information disclosure | 6.0v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-35168 | SAP Business One XML external entity injection | 7.5v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-34821 | Siemens RUGGEDCOM RM1224 LTE(4G) EU code injection | 8.8CNA v4.0 | 2.4% | 2022-07-12 | Fix |
| CVE-2022-34820 | Siemens SIMATIC CP 1242-7 V2 command injection | 8.4CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-34819 | Siemens SIMATIC CP 1242-7 V2 heap-based buffer overflow | 10.0CNA v3.1 | 2.1% | 2022-07-12 | Fix |
| CVE-2022-34748 | Siemens Simcenter Femap out-of-bounds write | 7.8v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-34743 | Huawei HarmonyOS out-of-bounds read vulnerability in the AT commands of the USB port | 7.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-34742 | Huawei HarmonyOS Read/Write vulnerability in system components | 7.5v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-34741 | Huawei HarmonyOS buffer overflow vulnerability in the NFC module | 6.5v3.1 | 0.3% | 2022-07-12 | Fix |
| CVE-2022-34740 | Huawei HarmonyOS buffer overflow vulnerability in the NFC module | 6.5v3.1 | 0.3% | 2022-07-12 | Fix |
| CVE-2022-34739 | Huawei HarmonyOS addition overflow vulnerability in the fingerprint sensor module | 7.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-34738 | Huawei EMUI permission control vulnerability in the SystemUI module | 7.5v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-34737 | Huawei HarmonyOS incorrect permission assignment vulnerability in the application security module | 9.1v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-34736 | Huawei HarmonyOS null pointer vulnerability in the frame scheduling module | 7.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-34735 | Huawei HarmonyOS null pointer vulnerability in the frame scheduling module | 7.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-34663 | Siemens RUGGEDCOM i800 code injection | 8.0CNA v3.1 | 0.9% | 2022-07-12 | Fix |
| CVE-2022-34467 | Siemens Mendix Excel Importer Module (Mendix 8 compatible) XML entity expansion | 6.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-34466 | Siemens Mendix Applications using Mendix 9 injection | 6.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-34465 | Siemens Parasolid out-of-bounds read | 7.8v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-34464 | Siemens SICAM GridEdge (Classic) files accessible to external parties | 5.3CNA v4.0 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-34291 | Siemens PADS Standard/Plus Viewer information disclosure | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34290 | Siemens PADS Standard/Plus Viewer information disclosure | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34289 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34288 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34287 | Siemens PADS Standard/Plus Viewer information disclosure | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34286 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34285 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34284 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34283 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34282 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 5.5v3.1 | 1.1% | 2022-07-12 | |
| CVE-2022-34281 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34280 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34279 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34278 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34277 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34276 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34275 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34274 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34273 | Siemens PADS Standard/Plus Viewer out-of-bounds write | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-34272 | Siemens PADS Standard/Plus Viewer out-of-bounds read | 7.8v3.1 | 1.4% | 2022-07-12 | |
| CVE-2022-33911 | Couchbase Server sensitive information in log files | 5.3v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-33736 | Siemens Opcenter Quality flawed authentication | 7.5v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2022-33713 | Samsung Mobile Samsung Cloud improper authorization | 7.5v3.1 | 0.9% | 2022-07-12 | Fix |
| CVE-2022-33712 | Samsung Mobile Camera improper authorization | 5.3v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-33711 | Samsung Mobile Samsung USB Driver Windows Installer for Mobile Phones improper input validation | 5.5v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33710 | Samsung Mobile Galaxy Store BillingPackageInsraller improper input validation | 7.8v3.1 | 0.2% | 2022-07-12 | Fix |
| CVE-2022-33709 | Samsung Mobile Galaxy Store ApexPackageInstaller improper input validation | 7.8v3.1 | 0.2% | 2022-07-12 | Fix |
| CVE-2022-33708 | Samsung Mobile Galaxy Store AppsPackageInstaller improper input validation | 7.8v3.1 | 0.2% | 2022-07-12 | Fix |
| CVE-2022-33707 | Samsung Mobile Find My Mobile insufficient randomness | 5.3v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-33706 | Samsung Mobile Samsung Gallery improper access control | 2.4v3.1 | 0.2% | 2022-07-12 | Fix |
| CVE-2022-33705 | Samsung Mobile Calendar information disclosure | 3.3v3.1 | 0.2% | 2022-07-12 | Fix |
| CVE-2022-33704 | Samsung Mobile Devices ucmRetParcelable of KnoxSDK improper input validation | 8.5CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33703 | Samsung Mobile Devices CACertificateInfo improper input validation | 8.5CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33702 | Samsung Mobile Devices Knoxguard improper authorization | 6.2CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33701 | Samsung Mobile Devices KnoxCustomManagerService improper access control | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33700 | Samsung Mobile Devices putDsaSimImsi in TelephonyUI information disclosure | 2.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33699 | Samsung Mobile Devices getDsaSimImsi in TelephonyUI information disclosure | 2.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33698 | Samsung Mobile Devices Telecom application information disclosure | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33697 | Samsung Mobile Devices ImsServiceSwitchBase in ImsCore information disclosure | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33696 | Samsung Mobile Devices Telephony service information disclosure | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33695 | Samsung Mobile Devices InputManagerService improper permissions | 5.1CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33694 | Samsung Mobile Devices CSC application information disclosure | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33693 | Samsung Mobile Devices CID Manager information disclosure | 2.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33692 | Samsung Mobile Devices Messaging application information disclosure | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33691 | Samsung Mobile Devices score driver race condition | 6.2CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33690 | Samsung Mobile Devices Contacts Storage improper input validation | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33689 | Samsung Mobile Devices TelephonyUI improper access control | 6.2CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33688 | Samsung Mobile Devices EventType in SecTelephonyProvider information disclosure | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33687 | Samsung Mobile Devices telephony-common.jar information disclosure | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33686 | Samsung Mobile Devices GsmAlarmManager information disclosure | 2.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33685 | Samsung Mobile Devices Wearable Manager Service vulnerability | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-33678 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-07-12 | Fix |
| CVE-2022-33677 | Microsoft Azure Site Recovery elevation of privilege | 7.2CNA v3.1 | 2.3% | 2022-07-12 | Fix |
| CVE-2022-33676 | Microsoft Azure Site Recovery remote code execution | 7.2CNA v3.1 | 2.4% | 2022-07-12 | Fix |
| CVE-2022-33675 | Microsoft Azure Site Recovery elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-33674 | Microsoft Azure Site Recovery elevation of privilege | 8.3CNA v3.1 | 1.1% | 2022-07-12 | Fix |
| CVE-2022-33673 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33672 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33671 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33669 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33668 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33667 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 2.1% | 2022-07-12 | Fix |
| CVE-2022-33666 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33665 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33664 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33663 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33662 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33661 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33660 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33659 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33658 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33657 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33656 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33655 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 2.0% | 2022-07-12 | Fix |
| CVE-2022-33654 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.4% | 2022-07-12 | Fix |
| CVE-2022-33653 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33652 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33651 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33650 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33644 | Microsoft Windows xbox Live Save service elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-33643 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33642 | Microsoft Azure Site Recovery elevation of privilege | 4.9CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-33641 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-33637 | Microsoft Defender For Endpoint tampering | 6.5CNA v3.1 | 1.7% | 2022-07-12 | Fix |
| CVE-2022-33633 | Skype for Business and Lync remote code execution | 7.2CNA v3.1 | 2.3% | 2022-07-12 | Fix |
| CVE-2022-33632 | Microsoft Office security feature bypass | 4.7CNA v3.1 | 1.2% | 2022-07-12 | Fix |
| CVE-2022-33173 | Couchbase Server Analytics Remote Links vulnerability | 7.5v3.1 | 1.2% | 2022-07-12 | Fix |
| CVE-2022-33157 | Libconnect extension for Typo3 Vulnerable to XSS | 6.1v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-33156 | Matomo Integration brotkrueml/typo3-matomo-integration vulnerable to cross-site scripting | 6.1v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-33155 | Ameos Tarteaucitron cross-site scripting in ameos_tarteaucitron | 5.4v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-33154 | Brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS | 5.4v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-33138 | Siemens SIMATIC MV540 H missing authentication | 7.5v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2022-33137 | Siemens SIMATIC MV540 H insufficient session expiration | 8.0v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-32249 | SAP Business One resource exposure | 7.5v3.1 | 0.9% | 2022-07-12 | Fix |
| CVE-2022-32248 | SAP S/4HANA improper input validation | 5.3v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-32247 | SAP NetWeaver Enterprise Portal cross-site scripting | 6.1v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-32246 | SAP BusinessObjects Business Intelligence Platform (Visual Difference Application) SQL injection | 4.6v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-31904 | Uberrider Media Center cross-site scripting | 6.1v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-31655 | VMware vRealize Log Insight cross-site scripting | 5.4v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-31654 | VMware vRealize Log Insight cross-site scripting | 5.4v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-31598 | SAP Business Objects insufficient verification of data authenticity | 5.4v3.1 | 0.2% | 2022-07-12 | Fix |
| CVE-2022-31597 | SAP S/4HANA missing authorization | 5.4v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-31593 | SAP Business One injection | 8.8v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-31592 | SAP Enterprise Extension Defense Forces and Public Security (EA-DFPS) missing authorization | 4.3v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-31591 | SAP BusinessObjects (BW Publisher Service) unquoted search path | 7.8v3.1 | 0.3% | 2022-07-12 | Fix |
| CVE-2022-31257 | Siemens Mendix Applications using Mendix 7 improper access control | 7.5v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-31134 | Zulip Server public data export contains attachments that are non-public | 4.9CNA v3.1 | 0.9% | 2022-07-12 | Fix |
| CVE-2022-31105 | argoproj argo-cd argo CD's certificate verification is skipped for connections to OIDC providers | 8.3CNA v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-31102 | argoproj argo-cd cross-site scripting for Argo CD single sign on users | 2.6CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-31012 | Git for Windows' installer can be tricked into executing an untrusted binary | 8.2CNA v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-30938 | Siemens EN100 Ethernet module DNP3 IP variant memory corruption | 7.5v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2022-30758 | Samsung Mobile Devices incorrect default permissions | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30757 | Samsung Mobile Devices isemtelephony improper authorization | 4.0CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30756 | Samsung Mobile Devices improper input validation | 8.5CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30755 | Samsung Mobile Devices AppLock improper authentication | 7.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30754 | Samsung Mobile Devices improper input validation | 8.5CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30753 | Samsung Mobile Devices information disclosure | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30752 | Samsung Mobile Devices improper access control | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30751 | Samsung Mobile Devices improper access control | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30750 | Samsung Mobile Devices improper access control | 3.3CNA v3.1 | 0.1% | 2022-07-12 | Fix |
| CVE-2022-30517 | MoguBlog cross-site scripting | 6.1v3.1 | 0.6% | 2022-07-12 | |
| CVE-2022-30226 | Microsoft Windows Print Spooler elevation of privilege | 7.1CNA v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-30225 | Microsoft Windows Media Player Network Sharing service elevation of privilege | 7.1CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-30224 | Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege | 7.0CNA v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-30223 | Microsoft Windows Hyper-V information disclosure | 5.7CNA v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-30222 | Microsoft Windows Shell remote code execution | 8.4CNA v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-30221 | Microsoft Windows Graphics component remote code execution | 8.8CNA v3.1 | 2.1% | 2022-07-12 | Fix |
| CVE-2022-30220 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 5.2% | 2022-07-12 | Fix |
| CVE-2022-30216 | Microsoft Windows Server service tampering | 8.8CNA v3.1 | 88.6% | 2022-07-12 | Fix |
| CVE-2022-30215 | Microsoft Windows active Directory Federation services elevation of privilege | 7.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-30214 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 1.1% | 2022-07-12 | Fix |
| CVE-2022-30213 | Microsoft Windows GDI+ information disclosure | 5.5CNA v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-30212 | Microsoft Windows Connected Devices Platform service information disclosure | 4.7CNA v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-30211 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) remote code execution | 7.5CNA v3.1 | 2.1% | 2022-07-12 | Fix |
| CVE-2022-30209 | Microsoft Windows IIS server elevation of privilege | 7.4CNA v3.1 | 2.6% | 2022-07-12 | Fix |
| CVE-2022-30208 | Microsoft Windows Security Account Manager (SAM) denial of service | 6.5CNA v3.1 | 2.5% | 2022-07-12 | Fix |
| CVE-2022-30206 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 2.2% | 2022-07-12 | Exploit codeFix |
| CVE-2022-30205 | Microsoft Windows Group Policy elevation of privilege | 6.6CNA v3.1 | 1.2% | 2022-07-12 | Fix |
| CVE-2022-30203 | Microsoft Windows Boot Manager security feature bypass | 7.4CNA v3.1 | 1.5% | 2022-07-12 | Exploit codeFix |
| CVE-2022-30202 | Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege | 7.0CNA v3.1 | 4.5% | 2022-07-12 | Fix |
| CVE-2022-30187 | Microsoft Azure Storage library information disclosure | 4.7CNA v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-30181 | Microsoft Azure Site Recovery elevation of privilege | 6.5CNA v3.1 | 1.9% | 2022-07-12 | Fix |
| CVE-2022-29901 | Intel Microprocessors Arbitrary Memory Disclosure through CPU side-channel Attacks (Retbleed) | 5.6CNA v3.1 | 5.0% | 2022-07-12 | Fix |
| CVE-2022-29900 | AMD Processors improper removal of sensitive information | 6.5v3.1 | 3.8% | 2022-07-12 | Fix |
| CVE-2022-29884 | Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C missing resource release | 7.5v3.1 | 1.2% | 2022-07-12 | Fix |
| CVE-2022-29619 | SAP BusinessObjects Business Intelligence Platform incorrect authorization | 6.5v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-29602 | Grid Elements cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-29601 | Oliverklee Seminars SQL injection | 9.8v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-29600 | Oliverklee Oelib SQL injection | 9.8v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-29560 | Siemens RUGGEDCOM ROX MX5000 command injection | 7.2v3.1 | 1.6% | 2022-07-12 | Fix |
| CVE-2022-29187 | Bypass of safe.directory protections in Git | 7.8CNA v3.1 | 0.4% | 2022-07-12 | Fix |
| CVE-2022-28771 | SAP Business One License service API missing authentication | 7.5v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-26649 | Siemens SCALANCE X200-4P IRT buffer overflow | 9.6CNA v3.1 | 1.4% | 2022-07-12 | Fix |
| CVE-2022-26648 | Siemens SCALANCE X200-4P IRT buffer overflow | 8.2CNA v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-26647 | Siemens SCALANCE X200-4P IRT insufficient randomness | 8.8CNA v3.1 | 1.2% | 2022-07-12 | Fix |
| CVE-2022-25875 | svelte cross-site scripting (XSS) | 6.1v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2022-25303 | whoogle-search cross-site scripting (XSS) | 6.1v3.1 | 0.9% | 2022-07-12 | Fix |
| CVE-2022-24800 | Race condition in October CMS upload process | 8.1CNA v3.1 | 1.5% | 2022-07-12 | Fix |
| CVE-2022-22998 | Protecting AWS credentials stored in plaintext on My Cloud Home | 8.0CNA v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-22997 | Command injection vulnerability on My Cloud Home | 6.8CNA v3.1 | 1.5% | 2022-07-12 | Fix |
| CVE-2022-22711 | Microsoft Windows BitLocker information disclosure | 5.7CNA v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-22682 | Synology Calendar cross-site scripting | 6.5CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-22050 | Microsoft Windows Fax service elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-22049 | Microsoft Windows Client Server Run-time Subsystem (CSRSS) elevation of privilege | 7.8CNA v3.1 | 1.1% | 2022-07-12 | Fix |
| CVE-2022-22048 | Microsoft Windows BitLocker security feature bypass | 6.1CNA v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-22047 | Microsoft Windows Client Server Runtime Subsystem (CSRSS) privilege escalation | 7.8CNA v3.1 | 18.8% | 2022-07-12 | KEVFix |
| CVE-2022-22045 | Microsoft Windows Windows.Devices.Picker.dll elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-22043 | Microsoft Windows Fast FAT File System driver elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-22042 | Microsoft Windows Hyper-V information disclosure | 6.5CNA v3.1 | 2.7% | 2022-07-12 | Fix |
| CVE-2022-22041 | Microsoft Windows Print Spooler elevation of privilege | 6.8CNA v3.1 | 2.7% | 2022-07-12 | Fix |
| CVE-2022-22040 | Microsoft Windows Internet Information Services Dynamic Compression module denial of service | 7.3CNA v3.1 | 1.5% | 2022-07-12 | Fix |
| CVE-2022-22039 | Microsoft Windows Network File System remote code execution | 7.5CNA v3.1 | 2.3% | 2022-07-12 | Fix |
| CVE-2022-22038 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.1CNA v3.1 | 2.5% | 2022-07-12 | Fix |
| CVE-2022-22037 | Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege | 7.5CNA v3.1 | 2.5% | 2022-07-12 | Fix |
| CVE-2022-22036 | Microsoft Performance Counters for Windows elevation of privilege | 7.0CNA v3.1 | 0.5% | 2022-07-12 | Fix |
| CVE-2022-22034 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 6.2% | 2022-07-12 | Fix |
| CVE-2022-22031 | Microsoft Windows Credential Guard Domain-joined Public Key elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-22029 | Microsoft Windows Network File System remote code execution | 8.1CNA v3.1 | 5.2% | 2022-07-12 | Exploit codeFix |
| CVE-2022-22028 | Microsoft Windows Network file system information disclosure | 5.9CNA v3.1 | 2.4% | 2022-07-12 | Fix |
| CVE-2022-22027 | Microsoft Windows Fax service remote code execution | 7.8CNA v3.1 | 2.2% | 2022-07-12 | Fix |
| CVE-2022-22026 | Microsoft Windows Client Server Run-time Subsystem (CSRSS) elevation of privilege | 8.8CNA v3.1 | 1.0% | 2022-07-12 | Fix |
| CVE-2022-22025 | Microsoft Windows Internet Information Services Cachuri module denial of service | 7.5CNA v3.1 | 32.7% | 2022-07-12 | Fix |
| CVE-2022-22024 | Microsoft Windows Fax service remote code execution | 7.8CNA v3.1 | 2.1% | 2022-07-12 | Fix |
| CVE-2022-22023 | Microsoft Windows Portable Device Enumerator service security feature bypass | 6.6CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-22022 | Microsoft Windows Print Spooler elevation of privilege | 7.1CNA v3.1 | 0.8% | 2022-07-12 | Fix |
| CVE-2022-21845 | Microsoft Windows Kernel information disclosure | 4.7CNA v3.1 | 0.7% | 2022-07-12 | Fix |
| CVE-2022-2385 | Kubernetes aws-iam-authenticator AccessKeyID validation bypass | 8.1CNA v3.1 | 1.1% | 2022-07-12 | Fix |
| CVE-2022-2366 | Mattermost incorrect defaults can cause attackers to bypass rate limitations | 5.6CNA v3.1 | 0.6% | 2022-07-12 | Fix |
| CVE-2022-2364 | SourceCodester Simple Parking Management System category cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-12 | |
| CVE-2022-2363 | SourceCodester Simple Parking Management System cross-site scripting | 4.6v3.1 | 0.6% | 2022-07-12 | |
| CVE-2022-2298 | SourceCodester Clinics Patient Management System Login page index.php SQL injection | 9.8v3.1 | 0.9% | 2022-07-12 | |
| CVE-2022-2297 | SourceCodester Clinics Patient Management System unrestricted upload | 8.8v3.1 | 3.3% | 2022-07-12 | MetasploitExploit codeKCV |
| CVE-2022-2293 | SourceCodester Simple Sales Management System create cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-12 | |
| CVE-2022-2292 | SourceCodester Hotel Management System Room Edit page 1 cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-12 | |
| CVE-2022-2291 | SourceCodester Hotel Management System Search search cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-12 | |
| CVE-2022-2263 | Online Hotel Booking System Room edit_room_cat.php SQL injection | 7.2v3.1 | 0.8% | 2022-07-12 | |
| CVE-2022-2262 | Online Hotel Booking System Room edit_all_room.php SQL injection | 7.2v3.1 | 0.8% | 2022-07-12 | |
| CVE-2022-2211 | libguestfs buffer overflow | 6.5v3.1 | 0.9% | 2022-07-12 | Fix |
| CVE-2022-1737 | Pyramid Solutions EtherNet/IP Adapter Development Kit out-of-bound write | 7.5NVD v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2022-1025 | ArgoCD improper access control allows admin privilege escalation in Argo CD | 8.8NVD v3.1 | 1.3% | 2022-07-12 | Fix |
| CVE-2022-35416 | H3C SSL VPN cross-site scripting | 6.1v3.1 | 2.9% | 2022-07-11 | NucleiExploit code |
| CVE-2022-35414 | QEMU uninitialized resource use | 8.8v3.1 | 0.7% | 2022-07-11 | Fix |
| CVE-2022-32294 | Zimbra Collaboration incorrect authorization | 9.8v3.1 | 2.5% | 2022-07-11 | |
| CVE-2022-31588 | Testplatform path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31587 | Kg-fashion-chatbot path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31586 | Changepop-back path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31585 | Home Internet path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31584 | S3LABEL path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31583 | Automatedquizeval path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31582 | Videoserver path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31581 | Scorelab Openmf path traversal | 9.3v3.1 | 1.5% | 2022-07-11 | |
| CVE-2022-31580 | Caretakerr-api path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31579 | Iasset path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31578 | Bt Lnmp path traversal | 7.5v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31577 | Audio Aligner App path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31576 | Shackerpanel path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31575 | Livro Python path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31574 | Realestate path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31573 | Chainerrl-visualizer ChainerRL Visualizer vulnerable to path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31572 | Cockybook path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31571 | Python-flask-restful-api path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31570 | Ceneo-web-scrapper path traversal | 9.8v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31568 | Rexians Rex-web path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31567 | DATA Stream Algorithm Benchmark path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31566 | DATA Stream Algorithm Benchmark path traversal | 8.6v3.1 | 1.1% | 2022-07-11 | |
| CVE-2022-31565 | Syrabond path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31564 | Munhak-moa path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31563 | Vprj Flask send_file function path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31562 | Internshipsystem path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31561 | Sphere Imagebackend path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31560 | Photo Tag path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31559 | Flask-yeoman path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31558 | Shiva-server path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31557 | Golem path traversal | 9.3v3.1 | 1.2% | 2022-07-11 | |
| CVE-2022-31556 | Trainenergyserver path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31555 | Nurse Quest path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31554 | Movie-review-sentiment-analysis path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31553 | Sleep Learner path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31552 | Anuvaad-corpus path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31551 | Flask-mongo-skel path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31550 | Python Athena Stack path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31549 | Helm-flask-celery path traversal | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31548 | homepage path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31547 | Sphere path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31546 | Glance path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31545 | Modelconverter path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31544 | Xtomo Robo-tom path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31543 | Setupbox path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31542 | Mdweb path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31541 | Barry Voice Assistant path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31540 | Hin-eng-preprocessing path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31539 | Kotekan path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31538 | Mp-m08-interface path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31537 | Solar-system-simulator path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31536 | Ytdl-sync path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31535 | Fishtank path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31534 | Pythonweb path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31533 | Umbral path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31532 | Travel Blahg path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31531 | Dainst Cilantro path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31530 | Csm Server path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31529 | monorepo path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31528 | Bonn Activity Maps Annotation Tool path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31527 | Flask-file-server path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31526 | Thunderatz Thunderdocs path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31525 | Deep Learning Studio path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31524 | Pure Storage Pure Swagger path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31523 | PaddlePaddle Anakin path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31522 | Karaokey path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31521 | Mosaic path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31520 | Logstash-management-api path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31519 | windmill path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31518 | Python-recipe-database path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31517 | Mercury Sample Manager path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31516 | Harveyzyh Python path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31515 | Carceresbe path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31514 | Fan Platform path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31513 | Krypton path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31512 | Flask-mvc path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31511 | Equanimity path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31510 | Simple-rat path traversal | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31509 | Iedadata Usap-dc Web Submission And Dataset Search path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31508 | Idayrus E-voting path traversal | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31507 | Ganga allows absolute path traversal | 9.3v3.1 | 1.6% | 2022-07-11 | Fix |
| CVE-2022-31506 | SatyaLab Opendiamond vulnerable to path traversal because Flask send_file function used unsafely | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31505 | Mercadoenlineaback path traversal | 9.3v3.1 | 1.3% | 2022-07-11 | |
| CVE-2022-31504 | Baiduwenkuspider Flaskweb path traversal | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31503 | orchest path traversal | 9.3v3.1 | 1.5% | 2022-07-11 | Fix |
| CVE-2022-31502 | Wormnest path traversal | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31501 | Onyxforum path traversal | 9.3v3.1 | 1.4% | 2022-07-11 | |
| CVE-2022-31472 | Cybozu Garoon Cabinet module vulnerability | 4.3v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-31140 | Valinor error messages leading to potential data exfiltration | 7.5CNA v3.1 | 1.5% | 2022-07-11 | Fix |
| CVE-2022-31139 | No security checking for UnsafeAccess.getInstance in UnsafeAccessor | 5.9CNA v3.1 | 1.2% | 2022-07-11 | Fix |
| CVE-2022-31138 | OS command injection in Mailcow | 8.8CNA v3.1 | 3.3% | 2022-07-11 | Exploit codeFix |
| CVE-2022-31080 | KubeEdge Websocket client in package Viaduct: DoS from large response message | 4.4CNA v3.1 | 0.7% | 2022-07-11 | Fix |
| CVE-2022-31079 | KubeEdge Cloud Stream and Edge Stream DoS from large stream message | 4.4CNA v3.1 | 0.7% | 2022-07-11 | Fix |
| CVE-2022-31078 | KubeEdge CloudCore Router memory exhaustion | 4.4CNA v3.1 | 0.7% | 2022-07-11 | Fix |
| CVE-2022-31075 | KubeEdge DoS when signing the CSR from EdgeCore | 4.9CNA v3.1 | 1.0% | 2022-07-11 | Fix |
| CVE-2022-31074 | KubeEdge Cloud AdmissionController component DoS | 4.5CNA v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-31073 | KubeEdge Edge ServiceBus module DoS | 6.5CNA v3.1 | 1.7% | 2022-07-11 | Fix |
| CVE-2022-30943 | Cybozu Garoon Bulletin information disclosure | 4.3v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-30792 | CODESYS Control RTE (SL) resource exhaustion | 7.5v3.1 | 0.9% | 2022-07-11 | Fix |
| CVE-2022-30791 | CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections | 7.5v3.1 | 0.9% | 2022-07-11 | Fix |
| CVE-2022-30602 | Operation restriction bypass in multiple applications of Cybozu Garoon 4.0.0 to 5.9.1 allows a remote authenticated attacker to alter the file information and/or delete the files. | 8.1v3.1 | 1.1% | 2022-07-11 | Fix |
| CVE-2022-29512 | Cybozu Garoon multiple applications information disclosure | 6.5v3.1 | 1.0% | 2022-07-11 | Fix |
| CVE-2022-27168 | LiteCart cross-site scripting | 6.1v3.1 | 1.1% | 2022-07-11 | Fix |
| CVE-2022-2368 | Authentication bypass by spoofing in microweber/microweber | 9.8v3.1 | 1.1% | 2022-07-11 | Fix |
| CVE-2022-2302 | Lenze: Missing password verification in authorisation procedure | 9.8v3.1 | 2.0% | 2022-07-11 | Fix |
| CVE-2022-2123 | WP Opt-in WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-07-11 | |
| CVE-2022-2093 | WP Duplicate Page WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-11 | Fix |
| CVE-2022-2092 | WooCommerce PDF Invoices and Packing Slips WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-2091 | Cache Images WordPress plugin Image upload / import via CSRF | 6.5NVD v3.1 | 0.5% | 2022-07-11 | Fix |
| CVE-2022-2089 | Bold Page Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 1.1% | 2022-07-11 | Fix |
| CVE-2022-2050 | maxfoundry WP-Paginate stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-11 | Fix |
| CVE-2022-1957 | Comment License WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-07-11 | Fix |
| CVE-2022-1956 | Shortcut Macros WordPress plugin Subscriber+ arbitrary settings update | 4.3NVD v3.1 | 0.4% | 2022-07-11 | |
| CVE-2022-1952 | eaSYNC WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 24.6% | 2022-07-11 | NucleiFix |
| CVE-2022-1951 | Core Plugin for Kitestudio Themes WordPress plugin reflected cross-site-scripting | 6.1NVD v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-1938 | Awin Data Feed WordPress plugin unauthenticated stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2022-07-11 | Fix |
| CVE-2022-1937 | Awin Data Feed WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.8% | 2022-07-11 | NucleiFix |
| CVE-2022-1910 | Shortcodes and extra features for Phlox WordPress plugin reflected cross-site-scripting | 6.1NVD v3.1 | 1.4% | 2022-07-11 | NucleiFix |
| CVE-2022-1894 | Popup Builder WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-11 | Fix |
| CVE-2022-1794 | Plaintext storage of a password in CODESYS V3 OPC DA Server | 5.5v3.1 | 0.2% | 2022-07-11 | Fix |
| CVE-2022-1757 | Pagebar WordPress plugin arbitrary settings update via CSRF to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-07-11 | Fix |
| CVE-2022-1732 | Rename wp-login.php WordPress plugin Secret URL update via CSRF | 6.5NVD v3.1 | 0.6% | 2022-07-11 | |
| CVE-2022-1626 | Sharebar WordPress plugin arbitrary settings update to stored XSS via CSRF | 5.4NVD v3.1 | 0.3% | 2022-07-11 | |
| CVE-2022-1599 | Admin Management Xtended WordPress plugin post Visibility/Date/Comment Status update via CSRF | 6.5NVD v3.1 | 0.7% | 2022-07-11 | Fix |
| CVE-2022-1576 | WP Maintenance Mode and Coming Soon WordPress plugin Subscribed users deletion via CSRF | 6.5NVD v3.1 | 0.5% | 2022-07-11 | Fix |
| CVE-2022-1546 | WooCommerce - Product Importer WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-1474 | WP Event Manager WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-1220 | FoxyShop WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-07-11 | Fix |
| CVE-2022-1057 | Pricing Deals for WooCommerce WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 8.0% | 2022-07-11 | NucleiFix |
| CVE-2022-27910 | Extension Joomlatools DOCman reflected cross-site scripting (XSS) in an image upload function | 6.1NVD v3.1 | 0.5% | 2022-07-10 | Fix |
| CVE-2022-2365 | Cross-site scripting (XSS) Stored in zadam/Trilium | 5.4v3.1 | 0.4% | 2022-07-10 | Fix |
| CVE-2022-2353 | Cross-site request forgery (CSRF) in microweber/microweber | 6.1v3.1 | 0.5% | 2022-07-09 | Fix |
| CVE-2022-35412 | Digital Guardian Agent 7.7.4.0042 allows an administrator (who ordinarily does not have a supported way to uninstall the product) to disable some of the agent functionality and then exfiltrate files to an external USB device. | 5.1v3.1 | 0.2% | 2022-07-08 | |
| CVE-2022-35411 | Rpc.py vulnerable to deserialization of untrusted data | 9.8v3.1 | 45.9% | 2022-07-08 | Exploit code |
| CVE-2022-35410 | MAT2 allows directory traversal during the ZIP archive cleaning process | 7.5v3.1 | 2.2% | 2022-07-08 | Fix |
| CVE-2022-35406 | PortSwigger Burp Suite open redirect | 4.3v3.1 | 0.7% | 2022-07-08 | Fix |
| CVE-2022-34914 | Webswing HTTP header injection | 9.8v3.1 | 1.0% | 2022-07-08 | Fix |
| CVE-2022-34306 | IBM CICS TX Standard cross-site scripting | 5.4CNA v3.0 | 0.7% | 2022-07-08 | Fix |
| CVE-2022-34167 | IBM CICS TX Standard cross-site scripting | 5.4CNA v3.0 | 0.7% | 2022-07-08 | Fix |
| CVE-2022-34166 | IBM CICS TX Standard cross-site scripting | 5.4CNA v3.0 | 0.7% | 2022-07-08 | Fix |
| CVE-2022-34160 | IBM CICS TX Standard cross-site scripting | 5.4CNA v3.0 | 1.1% | 2022-07-08 | Fix |
| CVE-2022-33011 | Known vulnerable to account takeover via host header injection attack in | 8.8v3.1 | 1.5% | 2022-07-08 | |
| CVE-2022-32115 | Known vulnerable to code execution via SVG file in | 6.1v3.1 | 1.3% | 2022-07-08 | |
| CVE-2022-31290 | Known cross-site scripting | 5.4v3.1 | 0.8% | 2022-07-08 | Fix |
| CVE-2022-31137 | Unauthenticated remote code execution in Roxy-WI | 10.0CNA v3.1 | 90.6% | 2022-07-08 | NucleiMetasploitExploit codeFix |
| CVE-2022-30852 | Known contains insecure direct object reference | 4.3v3.1 | 0.9% | 2022-07-08 | |
| CVE-2022-28624 | HPE FlexNetwork 5130 EI Switch Series cross-site scripting | 4.8v3.1 | 0.4% | 2022-07-08 | Fix |
| CVE-2022-28623 | HPE IceWall SSO SQL injection | 9.8v3.1 | 0.9% | 2022-07-08 | Fix |
| CVE-2022-22476 | IBM WebSphere Application Server authentication bypass by spoofing | 5.0CNA v3.0 | 0.9% | 2022-07-08 | Fix |
| CVE-2022-22465 | IBM Security Verify Access privilege escalation | 6.3CNA v3.0 | 0.2% | 2022-07-08 | Fix |
| CVE-2022-22464 | IBM Security Verify Access inadequate encryption strength | 5.9CNA v3.0 | 0.7% | 2022-07-08 | Fix |
| CVE-2022-22463 | IBM Security Verify Access SQL injection | 5.4CNA v3.0 | 1.0% | 2022-07-08 | Fix |
| CVE-2022-22370 | IBM Security Verify Access cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-07-08 | Fix |
| CVE-2022-2345 | vim/vim GitHub repository use-after-free | 7.8NVD v3.1 | 1.3% | 2022-07-08 | Fix |
| CVE-2022-2344 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.3% | 2022-07-08 | Fix |
| CVE-2022-2343 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-07-08 | Fix |
| CVE-2022-1245 | Keycloak vulnerable to privilege escalation on Token Exchange feature | 9.8v3.1 | 1.3% | 2022-07-08 | Fix |
| CVE-2022-34592 | WAVLINK Wl-wn575a3 command injection | 9.8v3.1 | 3.2% | 2022-07-07 | |
| CVE-2022-34007 | Eqs Integrity Line cross-site scripting | 6.1v3.1 | 1.5% | 2022-07-07 | |
| CVE-2022-33996 | Devolutions Server incorrect default permissions | 8.8v3.1 | 1.0% | 2022-07-07 | Fix |
| CVE-2022-33936 | Dell Cloud Mobility for Dell Storage remote code execution | 8.0CNA v3.1 | 1.0% | 2022-07-07 | Fix |
| CVE-2022-33680 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.8% | 2022-07-07 | Fix |
| CVE-2022-33098 | Magnolia CMS cross-site scripting | 6.1v3.1 | 52.7% | 2022-07-07 | Exploit code |
| CVE-2022-32567 | Appfire Jira Misc Custom Fields cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-07 | |
| CVE-2022-32481 | Dell Cyber Recovery privilege escalation | 7.8CNA v3.1 | 0.2% | 2022-07-07 | Fix |
| CVE-2022-32449 | TOTOLINK EX300 V2 command injection | 9.8v3.1 | 18.4% | 2022-07-07 | |
| CVE-2022-32441 | Hex-Rays IDA memory corruption | 5.5v3.1 | 0.7% | 2022-07-07 | |
| CVE-2022-32208 | https://github.com/curl/curl man-in-the-middle | 5.9NVD v3.1 | 8.4% | 2022-07-07 | Fix |
| CVE-2022-32207 | https://github.com/curl/curl business logic error | 9.8NVD v3.1 | 12.3% | 2022-07-07 | Fix |
| CVE-2022-32206 | https://github.com/curl/curl resource exhaustion | 6.5NVD v3.1 | 36.3% | 2022-07-07 | Fix |
| CVE-2022-32205 | https://github.com/curl/curl resource exhaustion | 4.3NVD v3.1 | 31.5% | 2022-07-07 | Fix |
| CVE-2022-32061 | Snipe-IT vulnerable to cross-site scripting | 4.8v3.1 | 0.7% | 2022-07-07 | Fix |
| CVE-2022-32060 | Snipe-IT vulnerable to cross-site scripting via arbitrary file upload in Update Branding settings | 4.8NVD v3.1 | 1.2% | 2022-07-07 | Fix |
| CVE-2022-32058 | TP-Link Tl-wr741n function httpRpmPass infinite loop | 7.5v3.1 | 1.3% | 2022-07-07 | |
| CVE-2022-32056 | Online Accreditation Management System SQL injection | 9.8v3.1 | 1.2% | 2022-07-07 | |
| CVE-2022-32055 | Nesote Inout Homestay SQL injection | 7.5v3.1 | 1.2% | 2022-07-07 | |
| CVE-2022-32054 | Tenda AC10 OS command injection | 9.8v3.1 | 34.0% | 2022-07-07 | |
| CVE-2022-31854 | Codologic Codoforum unrestricted file upload | 7.2v3.1 | 32.2% | 2022-07-07 | NucleiExploit code |
| CVE-2022-31136 | Cross-site scripting in BookWyrm | 6.3CNA v3.1 | 0.6% | 2022-07-07 | Fix |
| CVE-2022-31135 | AttorneyOnline akashi maliciously crafted evidence packet may cause denial of service | 6.5CNA v3.1 | 0.9% | 2022-07-07 | Fix |
| CVE-2022-31133 | Cross-site scripting in HumHub | 5.9CNA v3.1 | 0.7% | 2022-07-07 | Fix |
| CVE-2022-31121 | Improper input validation in fabric hyperledger | 7.5CNA v3.1 | 2.1% | 2022-07-07 | Fix |
| CVE-2022-31029 | Authenticated XSS in Pi-hole AdminLTE | 5.9CNA v3.1 | 0.5% | 2022-07-07 | Fix |
| CVE-2022-28889 | Apache Druid clickjacking in the web console | 4.3v3.1 | 1.8% | 2022-07-07 | Fix |
| CVE-2022-25048 | Control Web Panel Webpanel CWP v0.9.8.1126 command injection | 8.8v3.1 | 19.8% | 2022-07-07 | |
| CVE-2022-25047 | Control Web Panel Webpanel insufficient randomness | 5.9v3.1 | 2.0% | 2022-07-07 | |
| CVE-2022-25046 | Control Web Panel Webpanel loader.php of CWP v0.9.8.1122 path traversal | 9.8v3.1 | 57.8% | 2022-07-07 | |
| CVE-2022-23744 | Enterprise Endpoint Security Windows Clients unsafe reflection | 2.3NVD v3.1 | 4.6% | 2022-07-07 | Fix |
| CVE-2022-2342 | Cross-site scripting (XSS) Stored in Outline/Outline | 5.4NVD v3.1 | 0.7% | 2022-07-07 | Fix |
| CVE-2022-2339 | Server-side request forgery (SSRF) in nocodb/nocodb | 7.5NVD v3.1 | 1.9% | 2022-07-07 | Fix |
| CVE-2022-2191 | Jetty SslConnection does not release pooled ByteBuffers in case of errors | 7.5CNA v3.1 | 2.2% | 2022-07-07 | Fix |
| CVE-2022-2048 | Jetty vulnerable to Invalid HTTP/2 requests that can lead to denial of service | 7.5CNA v3.1 | 2.6% | 2022-07-07 | Fix |
| CVE-2022-2047 | Jetty invalid URI parsing may produce invalid HttpURI.authority | 2.7CNA v3.1 | 1.3% | 2022-07-07 | Fix |
| CVE-2022-35230 | Reflected XSS in graphs page of Zabbix Frontend | 3.7CNA v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-35229 | Reflected XSS in discovery page of Zabbix Frontend | 3.7CNA v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-34598 | H3C Magic R100 arbitrary command execution | 9.8v3.1 | 6.8% | 2022-07-06 | |
| CVE-2022-34597 | Tenda AX1806 OS command injection | 9.8v3.1 | 2.3% | 2022-07-06 | |
| CVE-2022-34596 | Tenda AX1803 OS command injection | 9.8v3.1 | 2.3% | 2022-07-06 | |
| CVE-2022-34595 | Tenda AX1803 OS command injection | 9.8v3.1 | 2.3% | 2022-07-06 | |
| CVE-2022-33980 | Apache Commons Configuration insecure interpolation defaults | 9.8v3.1 | 45.1% | 2022-07-06 | Exploit codeFix |
| CVE-2022-33738 | OpenVPN Access Server insufficient entropy | 7.5v3.1 | 0.9% | 2022-07-06 | Fix |
| CVE-2022-33737 | OpenVPN Access Server installer log file vulnerability | 7.5v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-33047 | Otfcc out-of-bounds write | 9.8v3.1 | 1.1% | 2022-07-06 | |
| CVE-2022-32533 | Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues | 9.8v3.1 | 4.0% | 2022-07-06 | Fix |
| CVE-2022-32386 | Tendacn AC23 AC2100 out-of-bounds write | 9.8v3.1 | 9.6% | 2022-07-06 | |
| CVE-2022-32385 | Tendacn AC23 AC2100 out-of-bounds write | 9.8v3.1 | 2.0% | 2022-07-06 | |
| CVE-2022-32383 | Tendacn AC23 AC2100 out-of-bounds write | 9.8v3.1 | 1.5% | 2022-07-06 | |
| CVE-2022-32290 | Northern.tech Mender incorrect authorization | 4.3v3.1 | 0.2% | 2022-07-06 | Fix |
| CVE-2022-31131 | Ownership check missing when updating or deleting mail attachments in Nextcloud Mail | 5.4CNA v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-31129 | Inefficient regular expression complexity in moment | 7.5CNA v3.1 | 5.6% | 2022-07-06 | Fix |
| CVE-2022-31127 | Improper handling of email input in next-auth | 7.1CNA v3.1 | 1.1% | 2022-07-06 | Fix |
| CVE-2022-31126 | Unauthenticated remote code execution in Roxy-wi | 10.0CNA v3.1 | 52.6% | 2022-07-06 | NucleiExploit codeFix |
| CVE-2022-31125 | Authentication bypass in Roxy-wi | 10.0CNA v3.1 | 20.3% | 2022-07-06 | Exploit codeFix |
| CVE-2022-31124 | Possible leak of key's raw field if declared length is incorrect in openssh_key_parser | 7.7CNA v3.1 | 1.3% | 2022-07-06 | Fix |
| CVE-2022-31111 | Discrepency in transfer value and actual value due to incorrect truncation in Frontier | 5.3CNA v3.1 | 1.4% | 2022-07-06 | Fix |
| CVE-2022-30929 | Mini-Tmall incorrect permission assignment | 8.8v3.1 | 1.8% | 2022-07-06 | Exploit code |
| CVE-2022-30619 | Agile Point Agile Point NX SQL injection (SQLi) | 8.8v3.1 | 0.7% | 2022-07-06 | |
| CVE-2022-30591 | quic-go denial of service | 7.5v3.1 | 3.0% | 2022-07-06 | Exploit code |
| CVE-2022-28935 | TOTOLINK A3000RU command injection | 7.2v3.1 | 3.2% | 2022-07-06 | |
| CVE-2022-27549 | HCL Launch could disclose sensitive database information to a local user in plain text | 4.0CNA v3.1 | 0.2% | 2022-07-06 | Fix |
| CVE-2022-27548 | HCL Launch is vulnerable to information disclosure which can be read by a local user | 4.9CNA v3.1 | 0.5% | 2022-07-06 | Fix |
| CVE-2022-26348 | Gallagher Command Centre SQL injection | 8.2CNA v3.1 | 0.3% | 2022-07-06 | Fix |
| CVE-2022-26078 | Gallagher Controller 6000 improper check for exceptional conditions | 7.5CNA v3.1 | 0.9% | 2022-07-06 | Fix |
| CVE-2022-24141 | IObit iTop VPN named pipe server vulnerability | 5.4v3.1 | 0.6% | 2022-07-06 | |
| CVE-2022-24140 | IObit Advanced SystemCare download without integrity check | 6.6v3.1 | 0.7% | 2022-07-06 | |
| CVE-2022-24139 | IObit Advanced SystemCare privilege escalation | 7.8v3.1 | 0.4% | 2022-07-06 | |
| CVE-2022-24138 | IObit Advanced SystemCare files accessible to external parties | 7.8v3.1 | 0.6% | 2022-07-06 | |
| CVE-2022-23714 | Elastic Endpoint Security ransomware canaries features local privilege escalation | 7.8v3.1 | 0.2% | 2022-07-06 | Fix |
| CVE-2022-23713 | Elastic Kibana cross-site scripting | 6.1v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-23173 | Priority Priority Web insecure direct object references (IDOR) | 6.3v3.1 | 0.5% | 2022-07-06 | |
| CVE-2022-23172 | Priority password reset vulnerability | 4.3v3.1 | 0.4% | 2022-07-06 | Fix |
| CVE-2022-22681 | Synology Photo Station access control management session fixation | 8.1CNA v3.1 | 1.0% | 2022-07-06 | Fix |
| CVE-2022-21787 | MediaTek chipsets improper input validation in audio DSP | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21786 | MediaTek chipsets incorrect type conversion or cast in audio DSP | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21785 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21784 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21783 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21782 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21781 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21780 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21779 | MediaTek chipsets improper input validation in WLAN driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21777 | MediaTek chipsets improper access control in Autoboot | 7.8v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21776 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in MDP | 6.4v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21775 | MediaTek chipsets improper synchronization in sched driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21774 | MediaTek chipsets TEEI driver use-after-free | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21773 | MediaTek chipsets TEEI driver use-after-free | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21772 | MediaTek chipsets TEEI driver type confusion | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21771 | MediaTek chipsets GED driver use-after-free | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21770 | MediaTek chipsets unix symbolic link (symlink) following in sound driver | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21769 | MediaTek chipsets improper input validation in CCCI | 4.4v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21768 | MediaTek chipsets heap-based buffer overflow in Bluetooth | 8.8v3.1 | 0.3% | 2022-07-06 | Fix |
| CVE-2022-21767 | MediaTek chipsets heap-based buffer overflow in Bluetooth | 8.8v3.1 | 0.3% | 2022-07-06 | Fix |
| CVE-2022-21766 | MediaTek chipsets improper input validation in CCCI | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21765 | MediaTek chipsets improper input validation in CCCI | 6.7v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21764 | MediaTek chipsets improper access control in telecom service | 5.5v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21763 | MediaTek chipsets improper access control in telecom service | 5.5v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-21744 | MediaTek chipsets out-of-bounds write in Modem 2G RR | 9.8v3.1 | 3.3% | 2022-07-06 | Fix |
| CVE-2022-20862 | Cisco Unified Communications Manager arbitrary file read | 4.3CNA v3.1 | 1.5% | 2022-07-06 | Fix |
| CVE-2022-20859 | Cisco Unified Communications Products access control vulnerability | 6.5CNA v3.1 | 1.3% | 2022-07-06 | Fix |
| CVE-2022-20815 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-20813 | Cisco TelePresence Video Communication Server (VCS) Expressway arbitrary file write | 9.0CNA v3.1 | 1.1% | 2022-07-06 | Fix |
| CVE-2022-20812 | Cisco TelePresence Video Communication Server (VCS) Expressway arbitrary file write | 9.0CNA v3.1 | 1.9% | 2022-07-06 | Fix |
| CVE-2022-20808 | Cisco Smart Software Manager On-prem denial of service | 7.7CNA v3.1 | 1.0% | 2022-07-06 | Fix |
| CVE-2022-20800 | Cisco Unified Communications Products cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-07-06 | Fix |
| CVE-2022-20791 | Cisco Unified Communications Products arbitrary file read | 6.5CNA v3.1 | 1.5% | 2022-07-06 | Fix |
| CVE-2022-20768 | Cisco TelePresence Collaboration Endpoint and RoomOS software information disclosure | 4.9CNA v3.1 | 1.0% | 2022-07-06 | Fix |
| CVE-2022-20752 | Cisco Unified Communications Products Timing Attack vulnerability | 5.3CNA v3.1 | 1.0% | 2022-07-06 | Fix |
| CVE-2022-20083 | MediaTek chipsets out-of-bounds write in Modem 2G/3G CC | 9.8v3.1 | 2.7% | 2022-07-06 | Fix |
| CVE-2022-20082 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in GPU | 7.0v3.1 | 0.1% | 2022-07-06 | Fix |
| CVE-2022-2318 | kernel use-after-free | 5.5NVD v3.1 | 0.4% | 2022-07-06 | Fix |
| CVE-2022-2316 | Devolutions Server secure messages HTML injection | 5.4v3.1 | 0.5% | 2022-07-06 | Fix |
| CVE-2022-34972 | So Filter Shop BY SQL injection | 9.8v3.1 | 1.5% | 2022-07-05 | |
| CVE-2022-34879 | VICIdial AST Agent Time Sheet interface reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-07-05 | Fix |
| CVE-2022-34878 | VICIdial User Stats interface SQL injection | 8.8NVD v3.1 | 3.3% | 2022-07-05 | Fix |
| CVE-2022-34877 | VICIdial AST Agent Time Sheet interface SQL injection | 8.8NVD v3.1 | 3.3% | 2022-07-05 | Fix |
| CVE-2022-34876 | VICIdial admin interface SQL injection | 8.8NVD v3.1 | 3.4% | 2022-07-05 | Fix |
| CVE-2022-33744 | Linux kernel denial of service | 4.7v3.1 | 0.3% | 2022-07-05 | Fix |
| CVE-2022-33743 | Linux kernel Xen netfront driver vulnerability | 7.8v3.1 | 0.4% | 2022-07-05 | Fix |
| CVE-2022-33742 | Linux kernel information disclosure | 7.1v3.1 | 0.3% | 2022-07-05 | Fix |
| CVE-2022-33741 | Linux kernel information disclosure | 7.1v3.1 | 0.3% | 2022-07-05 | Fix |
| CVE-2022-33740 | Linux kernel improper removal of sensitive information | 7.1v3.1 | 0.3% | 2022-07-05 | Fix |
| CVE-2022-33075 | PHPGurukul Zoo Management System Add Classification function stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-05 | Exploit code |
| CVE-2022-32413 | Dice An arbitrary file upload | 9.8v3.1 | 1.8% | 2022-07-05 | |
| CVE-2022-32311 | Ingredient Stock Management System SQL injection | 9.8v3.1 | 1.5% | 2022-07-05 | |
| CVE-2022-32310 | Ingredient Stock Management System improper access control | 9.8v3.1 | 1.6% | 2022-07-05 | |
| CVE-2022-31856 | Newsletter Module SQL injection | 9.8v3.1 | 1.5% | 2022-07-05 | |
| CVE-2022-31836 | Path traversal in Beego | 9.8v3.1 | 1.6% | 2022-07-05 | Fix |
| CVE-2022-31770 | IBM App Connect Enterprise Certified Container denial of service | 4.9CNA v3.0 | 0.9% | 2022-07-05 | Fix |
| CVE-2022-31117 | ultrajson double free of buffer during string decoding in ujson | 5.9CNA v3.1 | 1.9% | 2022-07-05 | Fix |
| CVE-2022-31116 | ultrajson incorrect handling of invalid surrogate pair characters in ujson | 7.5CNA v3.1 | 2.5% | 2022-07-05 | Fix |
| CVE-2022-31014 | SMTP command injection in iCalendar Attachments to emails via newlines in Nextcloud Server | 5.4CNA v3.1 | 2.5% | 2022-07-05 | Fix |
| CVE-2022-30290 | Citeum opencti missing authorization | 7.5v3.1 | 1.0% | 2022-07-05 | Fix |
| CVE-2022-30289 | Citeum opencti cross-site scripting | 5.4v3.1 | 0.5% | 2022-07-05 | Fix |
| CVE-2022-26365 | Linux kernel memory leak | 7.1v3.1 | 0.3% | 2022-07-05 | Fix |
| CVE-2022-2321 | Improper restriction of excessive authentication attempts in heroiclabs/Nakama | 9.8v3.1 | 1.5% | 2022-07-05 | Fix |
| CVE-2022-2309 | Null pointer dereference in lxml/lxml | 7.5v3.1 | 2.6% | 2022-07-05 | Fix |
| CVE-2022-2306 | Insufficient session expiration in heroiclabs/Nakama | 7.5v3.1 | 0.9% | 2022-07-05 | Fix |
| CVE-2022-2304 | Stack-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.5% | 2022-07-05 | Fix |
| CVE-2022-2097 | OpenSSL AES OCB fails to encrypt some bytes | 5.3NVD v3.1 | 4.9% | 2022-07-05 | Fix |
| CVE-2022-34918 | Linux kernel type confusion | 7.8NVD v3.1 | 5.5% | 2022-07-04 | Exploit codeFix |
| CVE-2022-34829 | Zoho ManageEngine ADSelfService Plus denial of service | 7.5v3.1 | 4.0% | 2022-07-04 | Fix |
| CVE-2022-34265 | Django `Trunc` and `Extract` database functions vulnerable to SQL injection | 9.8v3.1 | 73.3% | 2022-07-04 | NucleiExploit codeFix |
| CVE-2022-34151 | OMRON Machine automation controller NJ series hard-coded credentials | 8.1NVD v3.1 | 1.3% | 2022-07-04 | Fix |
| CVE-2022-33971 | OMRON Machine automation controller NJ series authentication bypass by replay | 7.5v3.1 | 1.2% | 2022-07-04 | Fix |
| CVE-2022-33948 | KDDI HOME SPOT CUBE2 OS command injection | 8.8v3.1 | 0.9% | 2022-07-04 | Fix |
| CVE-2022-33208 | OMRON Machine automation controller NJ series authentication bypass by replay | 8.1v3.1 | 1.8% | 2022-07-04 | Fix |
| CVE-2022-33171 | SQL injection in typeORM | 9.8v3.1 | 21.4% | 2022-07-04 | Exploit codeFix |
| CVE-2022-32284 | Yokogawa AW810D Vnet/IP communication module insufficient randomness | 7.5v3.1 | 3.3% | 2022-07-04 | |
| CVE-2022-31603 | NVIDIA DGX A100 improper array index validation | 6.4CNA v3.1 | 0.2% | 2022-07-04 | Fix |
| CVE-2022-31602 | NVIDIA DGX A100 out-of-bounds write | 6.4CNA v3.1 | 0.2% | 2022-07-04 | Fix |
| CVE-2022-31601 | NVIDIA DGX A100 out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2022-07-04 | Fix |
| CVE-2022-31600 | NVIDIA DGX A100 integer overflow | 7.5CNA v3.1 | 0.2% | 2022-07-04 | Fix |
| CVE-2022-31599 | NVIDIA DGX A100 uninitialized pointer access | 8.2CNA v3.1 | 0.2% | 2022-07-04 | Fix |
| CVE-2022-29892 | Cybozu Garoon Space improper input validation | 6.5v3.1 | 1.0% | 2022-07-04 | Fix |
| CVE-2022-29513 | Cybozu Garoon Scheduler cross-site scripting | 4.8v3.1 | 0.5% | 2022-07-04 | Fix |
| CVE-2022-29484 | Cybozu Garoon Space vulnerability | 8.1v3.1 | 1.1% | 2022-07-04 | Fix |
| CVE-2022-29471 | Cybozu Garoon Bulletin vulnerability | 4.3v3.1 | 0.8% | 2022-07-04 | Fix |
| CVE-2022-29467 | Cybozu Garoon Address information disclosure | 4.3v3.1 | 0.8% | 2022-07-04 | Fix |
| CVE-2022-28718 | Cybozu Garoon Bulletin vulnerability | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-28713 | Cybozu Garoon Scheduler improper authentication | 5.3v3.1 | 1.0% | 2022-07-04 | Fix |
| CVE-2022-28692 | Cybozu Garoon Scheduler improper input validation | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-27807 | Cybozu Garoon Link improper input validation | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-27803 | Cybozu Garoon Space improper input validation | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-27661 | Cybozu Garoon Workflow vulnerability | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-27627 | Cybozu Garoon Organization's Information cross-site scripting | 6.1v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-26368 | Cybozu Garoon Cabinet vulnerability | 5.4v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-26054 | Cybozu Garoon Link vulnerability | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-26051 | Cybozu Garoon Portal vulnerability | 4.3v3.1 | 0.7% | 2022-07-04 | Fix |
| CVE-2022-2301 | Buffer over-read in hpjansson/Chafa | 5.5v3.1 | 0.6% | 2022-07-04 | Fix |
| CVE-2022-2300 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4v3.1 | 0.5% | 2022-07-04 | Fix |
| CVE-2022-2268 | WP All Import WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 1.4% | 2022-07-04 | Fix |
| CVE-2022-1967 | WP Championship WordPress plugin Multiple CSRF | 6.5NVD v3.1 | 0.5% | 2022-07-04 | Fix |
| CVE-2022-1946 | Gallery WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.8% | 2022-07-04 | NucleiFix |
| CVE-2022-1301 | WP Contact Slider WordPress plugin Editor+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-07-04 | Fix |
| CVE-2022-0250 | Redirection for Contact Form 7 WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.6% | 2022-07-04 | NucleiFix |
| CVE-2022-2290 | Cross-site scripting (XSS) Reflected in zadam/Trilium | 6.1v3.1 | 2.8% | 2022-07-03 | NucleiFix |
| CVE-2022-2289 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.3% | 2022-07-03 | Fix |
| CVE-2022-2288 | Out-of-bounds write in Vim/Vim | 7.8v3.1 | 1.4% | 2022-07-03 | Fix |
| CVE-2022-34913 | MD2ROFF out-of-bounds write | 9.8v3.1 | 2.9% | 2022-07-02 | Exploit code |
| CVE-2022-34912 | MediaWiki Special:Contributions page title vulnerability | 6.1v3.1 | 1.0% | 2022-07-02 | Fix |
| CVE-2022-34911 | mediawiki cross-site scripting | 6.1v3.1 | 1.0% | 2022-07-02 | Fix |
| CVE-2022-32551 | Zoho Manageengine Servicedesk Plus Msp path traversal | 7.5v3.1 | 3.5% | 2022-07-02 | Fix |
| CVE-2022-28200 | NVIDIA DGX A100 code execution | 8.2CNA v3.1 | 0.2% | 2022-07-02 | Fix |
| CVE-2022-2287 | Out-of-bounds read in Vim/Vim | 7.1NVD v3.1 | 1.4% | 2022-07-02 | Fix |
| CVE-2022-2286 | Out-of-bounds read in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-07-02 | Fix |
| CVE-2022-2285 | Integer overflow or wraparound in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-07-02 | Fix |
| CVE-2022-2284 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 1.4% | 2022-07-02 | Fix |
| CVE-2022-34903 | GnuPG status line output injection | 6.5v3.1 | 2.8% | 2022-07-01 | Fix |
| CVE-2022-34894 | JetBrains Hub improper access control | 3.5CNA v3.1 | 0.6% | 2022-07-01 | Fix |
| CVE-2022-33103 | denx U-Boot out-of-bounds write | 7.8v3.1 | 0.5% | 2022-07-01 | Fix |
| CVE-2022-33099 | Lua out-of-bounds write | 7.5v3.1 | 2.7% | 2022-07-01 | Fix |
| CVE-2022-32988 | ASUS DSL-N14U_B1 router cross-site scripting | 5.4v3.1 | 0.6% | 2022-07-01 | Exploit code |
| CVE-2022-32420 | College Management System remote code execution | 8.8v3.1 | 20.4% | 2022-07-01 | |
| CVE-2022-32412 | HongCMS template editor vulnerability | 7.2v3.1 | 0.9% | 2022-07-01 | |
| CVE-2022-32411 | HongCMS language config file vulnerability | 7.2v3.1 | 0.9% | 2022-07-01 | |
| CVE-2022-32384 | Tendacn AC23 AC2100 out-of-bounds write | 8.8v3.1 | 0.6% | 2022-07-01 | |
| CVE-2022-32325 | Jpegoptim out-of-bounds read | 6.5v3.1 | 1.0% | 2022-07-01 | Fix |
| CVE-2022-32324 | Pdfalto out-of-bounds write | 9.8v3.1 | 1.2% | 2022-07-01 | |
| CVE-2022-32295 | Ampere Computing Altra and Altra Max UEFI vulnerability | 9.8v3.1 | 1.3% | 2022-07-01 | Fix |
| CVE-2022-32095 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-07-01 | |
| CVE-2022-32094 | Hospital Management System SQL injection | 9.8v3.1 | 7.5% | 2022-07-01 | Nuclei |
| CVE-2022-32093 | Hospital Management System SQL injection | 9.8v3.1 | 1.6% | 2022-07-01 | |
| CVE-2022-32091 | MariaDB use-after-free | 7.5v3.1 | 2.2% | 2022-07-01 | Fix |
| CVE-2022-32089 | MariaDB st_select_lex_unit::exclude_level vulnerability | 7.5v3.1 | 2.1% | 2022-07-01 | Fix |
| CVE-2022-32088 | MariaDB filesort vulnerability | 7.5v3.1 | 1.9% | 2022-07-01 | Fix |
| CVE-2022-32087 | MariaDB Item_args::walk_args vulnerability | 7.5v3.1 | 1.8% | 2022-07-01 | Fix |
| CVE-2022-32086 | MariaDB Item_field::fix_outer_field vulnerability | 7.5v3.1 | 1.5% | 2022-07-01 | Fix |
| CVE-2022-32085 | MariaDB Item_func_in::cleanup vulnerability | 7.5v3.1 | 1.9% | 2022-07-01 | Fix |
| CVE-2022-32084 | MariaDB sub_select vulnerability | 7.5v3.1 | 2.1% | 2022-07-01 | Fix |
| CVE-2022-32083 | MariaDB Item_subselect::init_expr_cache_tracker vulnerability | 7.5v3.1 | 1.9% | 2022-07-01 | Fix |
| CVE-2022-32082 | MariaDB reachable assertion | 7.5v3.1 | 2.0% | 2022-07-01 | Fix |
| CVE-2022-32081 | MariaDB use-after-free | 7.5v3.1 | 2.1% | 2022-07-01 | Fix |
| CVE-2022-32053 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32052 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32051 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32050 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32049 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32048 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32047 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32046 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32045 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32044 | TOTOLINK T6 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32043 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32041 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32040 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32039 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32037 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32036 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32035 | Tenda M3 out-of-bounds write | 7.5v3.1 | 14.4% | 2022-07-01 | |
| CVE-2022-32034 | Tenda M3 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32033 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32032 | Tenda AX1806 out-of-bounds write | 9.8v3.1 | 10.4% | 2022-07-01 | |
| CVE-2022-32031 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-32030 | Tenda AX1806 out-of-bounds write | 7.5v3.1 | 1.1% | 2022-07-01 | |
| CVE-2022-31943 | Unrestricted upload of file with dangerous type in MCMS | 9.8v3.1 | 1.5% | 2022-07-01 | |
| CVE-2022-31605 | Unsafe yaml deserialization in NVFlare | 9.8CNA v3.1 | 2.1% | 2022-07-01 | Fix |
| CVE-2022-31604 | Unsafe deserialisation in the PKI implementation scheme of NVFlare | 9.8CNA v3.1 | 2.1% | 2022-07-01 | Fix |
| CVE-2022-31113 | thinkst canarytokens cross-site scripting in Canarytoken history | 6.3CNA v3.1 | 0.6% | 2022-07-01 | |
| CVE-2022-27904 | Automox time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2022-07-01 | Fix |
| CVE-2022-25900 | git-clone command injection | 9.8v3.1 | 3.7% | 2022-07-01 | |
| CVE-2022-25898 | jsrsasign improper verification of cryptographic signature | 9.8v3.1 | 1.1% | 2022-07-01 | Fix |
| CVE-2022-25896 | passport session fixation | 4.8v3.1 | 1.1% | 2022-07-01 | Fix |
| CVE-2022-25876 | link-preview-js server-side request forgery (SSRF) | 5.5v3.1 | 0.4% | 2022-07-01 | Fix |
| CVE-2022-25758 | scss-tokenizer regular expression denial of service (ReDoS) | 7.5v3.1 | 2.1% | 2022-07-01 | Fix |
| CVE-2022-22373 | IBM InfoSphere Information Server improper input validation | 4.6CNA v3.0 | 0.5% | 2022-07-01 | Fix |
| CVE-2022-22367 | IBM UrbanCode Deploy cleartext storage of sensitive information | 4.0CNA v3.0 | 0.1% | 2022-07-01 | Fix |
| CVE-2022-22366 | IBM UrbanCode Deploy cleartext storage of sensitive information | 4.9CNA v3.0 | 0.4% | 2022-07-01 | Fix |
| CVE-2022-2281 | GitLab An information disclosure | 2.6CNA v3.1 | 0.9% | 2022-07-01 | Fix |
| CVE-2022-2280 | Cross-site scripting (XSS) Stored in microweber/microweber | 5.4v3.1 | 0.6% | 2022-07-01 | Fix |
| CVE-2022-2279 | Null pointer dereference in bfabiszewski/Libmobi | 5.5v3.1 | 0.6% | 2022-07-01 | Fix |
| CVE-2022-2274 | OpenSSL RSA implementation bug in AVX512IFMA instructions | 9.8NVD v3.1 | 48.2% | 2022-07-01 | Exploit codeFix |
| CVE-2022-2270 | GitLab incorrect default permissions | 3.5CNA v3.1 | 0.9% | 2022-07-01 | Fix |
| CVE-2022-2264 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 1.3% | 2022-07-01 | Fix |
| CVE-2022-2254 | Distributed Data Systems WebHMI cross-site scripting | 4.8v3.1 | 0.5% | 2022-07-01 | |
| CVE-2022-2253 | Distributed Data Systems WebHMI OS command injection | 9.1v3.1 | 1.2% | 2022-07-01 | |
| CVE-2022-2250 | GitLab An open redirect | 4.7CNA v3.1 | 1.7% | 2022-07-01 | Fix |
| CVE-2022-2244 | GitLab An improper authorization | 4.3CNA v3.1 | 0.8% | 2022-07-01 | Fix |
| CVE-2022-2243 | GitLab insecure direct object reference | 5.0CNA v3.1 | 0.8% | 2022-07-01 | Fix |
| CVE-2022-2235 | GitLab cross-site scripting | 8.7CNA v3.1 | 0.9% | 2022-07-01 | Fix |
| CVE-2022-2230 | GitLab project settings page stored cross-site scripting | 8.1CNA v3.1 | 57.4% | 2022-07-01 | Fix |
| CVE-2022-2229 | GitLab An improper authorization | 7.5CNA v3.1 | 1.3% | 2022-07-01 | Fix |
| CVE-2022-2228 | GitLab information disclosure | 5.3CNA v3.1 | 0.8% | 2022-07-01 | Fix |
| CVE-2022-2227 | GitLab runner jobs API improper access control | 3.1CNA v3.1 | 0.8% | 2022-07-01 | Fix |
| CVE-2022-2185 | GitLab OS command injection | 9.9CNA v3.1 | 76.7% | 2022-07-01 | NucleiExploit codeFix |
| CVE-2022-1999 | GitLab label description API vulnerability | 3.1CNA v3.1 | 0.7% | 2022-07-01 | Fix |
| CVE-2022-1983 | GitLab incorrect authorization | 6.5CNA v3.1 | 0.7% | 2022-07-01 | Fix |
| CVE-2022-1981 | GitLab incorrect authorization | 2.7CNA v3.1 | 0.8% | 2022-07-01 | Fix |
| CVE-2022-1963 | GitLab two-factor authentication status vulnerability | 5.3CNA v3.1 | 1.4% | 2022-07-01 | Fix |
| CVE-2022-1954 | GitLab regular expression denial of service | 4.3CNA v3.1 | 1.0% | 2022-07-01 | Fix |
| CVE-2022-0167 | GitLab cross-site scripting | 3.1CNA v3.1 | 0.8% | 2022-07-01 | Fix |