CVE-2022 records published in August 2022
This page lists the 2,086 CVE-2022 records published in August 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 42320.3% of these records
- Listed in CISA KEV
- 80.4% of these records
- Reported exploited
- 1under 0.1% of these records
- Detection signal
- 442.1% of these records
- Exploit code
- 442.1% of these records
- Actionable vendor fix
- 1,29261.9% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in August 2022 have had from about 50 months to about 51 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-39047 | freeciv buffer overflow | 8.8v3.1 | 1.2% | 2022-08-31 | Fix |
| CVE-2022-39046 | GNU glibc sensitive information in log files | 5.3NVD v3.1 | 1.8% | 2022-08-31 | Fix |
| CVE-2022-38812 | Aero CMS SQL injection | 6.5v3.1 | 2.6% | 2022-08-31 | Nuclei |
| CVE-2022-38153 | wolfSSL resource exhaustion | 5.9v3.1 | 2.3% | 2022-08-31 | Fix |
| CVE-2022-38152 | wolfSSL improper check for exceptional conditions | 7.5v3.1 | 2.7% | 2022-08-31 | Fix |
| CVE-2022-37184 | Garage Management System unrestricted file upload | 8.8v3.1 | 1.1% | 2022-08-31 | |
| CVE-2022-37183 | Piwigo cross-site scripting | 6.1v3.1 | 0.7% | 2022-08-31 | |
| CVE-2022-37130 | D-Link DIR-816 OS command injection | 9.8v3.1 | 26.3% | 2022-08-31 | |
| CVE-2022-37129 | D-Link DIR-816 OS command injection | 8.8v3.1 | 8.3% | 2022-08-31 | |
| CVE-2022-37128 | D-Link DIR-816 improper initialization | 9.8v3.1 | 21.2% | 2022-08-31 | |
| CVE-2022-37125 | D-Link DIR-816 command injection | 9.8v3.1 | 3.1% | 2022-08-31 | |
| CVE-2022-37123 | D-Link DIR-816 OS command injection | 8.8v3.1 | 2.6% | 2022-08-31 | |
| CVE-2022-37122 | Carel Pcoweb Hvac Bacnet Gateway path traversal | 7.5NVD v3.1 | 23.1% | 2022-08-31 | Nuclei |
| CVE-2022-37023 | Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 | 6.5v3.1 | 1.6% | 2022-08-31 | Fix |
| CVE-2022-37022 | Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 | 8.8v3.1 | 1.6% | 2022-08-31 | Fix |
| CVE-2022-37021 | Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8 | 9.8v3.1 | 2.8% | 2022-08-31 | Fix |
| CVE-2022-36620 | D-Link DIR-816 improper quantity validation | 7.5v3.1 | 23.2% | 2022-08-31 | |
| CVE-2022-36619 | D-Link DIR-816 missing authentication | 7.5v3.1 | 1.1% | 2022-08-31 | |
| CVE-2022-36582 | Garage Management System component /php_action/createProduct.php arbitrary file upload | 7.2v3.1 | 1.4% | 2022-08-31 | |
| CVE-2022-36581 | Online Ordering System SQL injection | 7.5v3.1 | 0.9% | 2022-08-31 | |
| CVE-2022-36580 | Online Ordering System arbitrary file upload | 7.2v3.1 | 1.4% | 2022-08-31 | |
| CVE-2022-36571 | Tenda AC9 out-of-bounds write | 7.2v3.1 | 1.1% | 2022-08-31 | |
| CVE-2022-36570 | Tenda AC9 out-of-bounds write | 7.2v3.1 | 1.1% | 2022-08-31 | |
| CVE-2022-36569 | Tenda AC9 out-of-bounds write | 8.8v3.1 | 1.1% | 2022-08-31 | |
| CVE-2022-36568 | Tenda AC9 out-of-bounds write | 8.8v3.1 | 1.1% | 2022-08-31 | |
| CVE-2022-36566 | yogeshojha rengine OS command injection | 9.8v3.1 | 2.1% | 2022-08-31 | |
| CVE-2022-36203 | Doctors Appointment System cross-site scripting | 6.1v3.1 | 1.0% | 2022-08-31 | |
| CVE-2022-36202 | Doctors Appointment System insecure direct object reference | 9.8v3.1 | 0.9% | 2022-08-31 | |
| CVE-2022-36201 | Doctors Appointment System SQL injection | 9.8v3.1 | 2.3% | 2022-08-31 | |
| CVE-2022-36051 | Broken Authorization in ZITADEL Actions | 8.7CNA v3.1 | 1.0% | 2022-08-31 | Fix |
| CVE-2022-36048 | IP address leak via image proxy bypass in Zulip Server | 4.3CNA v3.1 | 0.6% | 2022-08-31 | Fix |
| CVE-2022-36046 | Unexpected server crash in Next.js | 5.3CNA v3.1 | 1.2% | 2022-08-31 | Fix |
| CVE-2022-36045 | Account takeover via cryptographically weak PRNG in NodeBB Forum | 9.0CNA v3.1 | 1.3% | 2022-08-31 | Fix |
| CVE-2022-36035 | fluxcd flux2 Flux CLI Workload injection | 7.7CNA v3.1 | 0.3% | 2022-08-31 | Fix |
| CVE-2022-34383 | Dell Edge Gateway 5200 command injection | 8.1CNA v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-34373 | Dell CPG SW path traversal | 7.3CNA v3.1 | 0.2% | 2022-08-31 | Fix |
| CVE-2022-31233 | Dell Unisphere for PowerMax client-side enforcement of server-side security | 6.3CNA v3.1 | 0.3% | 2022-08-31 | Fix |
| CVE-2022-30318 | Honeywell ControlEdge PLC hard-coded credentials | 9.8v3.1 | 1.7% | 2022-08-31 | Fix |
| CVE-2022-30317 | Honeywell Experion Lx missing authentication | 9.1v3.1 | 0.8% | 2022-08-31 | Fix |
| CVE-2022-28625 | HPE OneView sensitive information in log files | 5.5v3.1 | 0.2% | 2022-08-31 | Fix |
| CVE-2022-27911 | Joomla! CMS core Multiple Full Path Disclosures because of missing _JEXEC or die check | 5.3v3.1 | 0.6% | 2022-08-31 | Fix |
| CVE-2022-26331 | Micro Focus ArcSight Logger cross-site scripting | 6.1CNA v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-26330 | Micro Focus ArcSight Logger information disclosure | 6.5CNA v3.1 | 0.7% | 2022-08-31 | Fix |
| CVE-2022-21941 | Johnson Controls iSTAR Ultra command injection | 10.0CNA v3.1 | 2.1% | 2022-08-31 | Fix |
| CVE-2022-3028 | Linux kernel A race condition | 7.0NVD v3.1 | 0.2% | 2022-08-31 | Fix |
| CVE-2022-2898 | Measuresoft ScadaPro Server and Client link following | 5.5v3.1 | 0.2% | 2022-08-31 | |
| CVE-2022-2897 | Measuresoft ScadaPro Server and Client link following | 7.8v3.1 | 0.3% | 2022-08-31 | |
| CVE-2022-2896 | Measuresoft ScadaPro Server use-after-free | 7.8v3.1 | 0.3% | 2022-08-31 | |
| CVE-2022-2895 | Measuresoft ScadaPro Server stack-based buffer overflow | 7.8v3.1 | 0.3% | 2022-08-31 | |
| CVE-2022-2894 | Measuresoft ScadaPro Server untrusted pointer dereference | 7.8v3.1 | 0.3% | 2022-08-31 | |
| CVE-2022-2892 | Measuresoft ScadaPro Server out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-31 | Fix |
| CVE-2022-2866 | Fatek Automation FvDesigner out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-31 | Fix |
| CVE-2022-2759 | Delta Electronics Delta Robot Automation Studio (DRAS) XML external entity injection | 8.6v3.1 | 1.2% | 2022-08-31 | Fix |
| CVE-2022-2758 | LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 update | 5.9v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-2590 | Linux kernel way the race condition | 7.0NVD v3.1 | 0.9% | 2022-08-31 | Exploit codeFix |
| CVE-2022-2521 | libtiff release of an invalid pointer | 6.5NVD v3.1 | 1.3% | 2022-08-31 | Fix |
| CVE-2022-2520 | libtiff incorrect buffer size calculation | 6.5NVD v3.1 | 1.2% | 2022-08-31 | Fix |
| CVE-2022-2519 | libtiff rotateImage at tiffcrop.c:8839 found double free | 6.5NVD v3.1 | 1.2% | 2022-08-31 | Fix |
| CVE-2022-2485 | AutomationDirect Stride Field I/O cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.5% | 2022-08-31 | Fix |
| CVE-2022-2466 | Quarkus does not terminate HTTP requests header context | 9.8v3.1 | 1.8% | 2022-08-31 | Exploit codeFix |
| CVE-2022-2153 | kernel null pointer dereference | 5.5NVD v3.1 | 0.5% | 2022-08-31 | Fix |
| CVE-2022-2132 | dpdk A permissive allowlist | 8.6NVD v3.1 | 2.2% | 2022-08-31 | Fix |
| CVE-2022-2044 | Moxa NPort 5110 out-of-bounds write | 8.2v3.1 | 0.7% | 2022-08-31 | Fix |
| CVE-2022-2043 | Moxa NPort 5110 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-08-31 | Fix |
| CVE-2022-2006 | AutomationDirect C-more EA9 HMI uncontrolled search path element | 7.8v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-2005 | AutomationDirect C-more EA9 HMI cleartext transmission | 7.5v3.1 | 0.5% | 2022-08-31 | Fix |
| CVE-2022-2004 | AutomationDirect DirectLOGIC with Ethernet Communication uncontrolled resource consumption | 7.5v3.1 | 1.0% | 2022-08-31 | |
| CVE-2022-2003 | AutomationDirect DirectLOGIC with Serial Communication cleartext transmission | 9.1v3.1 | 0.7% | 2022-08-31 | Fix |
| CVE-2022-1976 | kernel use-after-free | 7.8NVD v3.1 | 0.2% | 2022-08-31 | Fix |
| CVE-2022-1975 | Linux kernel uncaught exception | 5.5NVD v3.1 | 0.2% | 2022-08-31 | Fix |
| CVE-2022-1974 | Linux kernel A use-after-free | 4.1NVD v3.1 | 0.1% | 2022-08-31 | Fix |
| CVE-2022-1888 | Fuji Electric Alpha7 PC Loader project file parser stack-based buffer overflow | 7.8v3.1 | 0.3% | 2022-08-31 | |
| CVE-2022-1841 | zephyrproject-rtos Zephyr out-of-bound write in tcp_flags | 7.2CNA v3.1 | 0.6% | 2022-08-31 | Fix |
| CVE-2022-1552 | PostgreSQL incomplete cleanup | 8.8NVD v3.1 | 16.0% | 2022-08-31 | Fix |
| CVE-2022-1508 | Linux kernel An out-of-bounds read | 6.1NVD v3.1 | 0.2% | 2022-08-31 | Fix |
| CVE-2022-1405 | Delta Electronics CNCSoft stack-based buffer overflow | 7.8v3.1 | 2.2% | 2022-08-31 | Fix |
| CVE-2022-1404 | Delta Electronics CNCSoft out-of-bounds read | 7.1v3.1 | 0.3% | 2022-08-31 | Fix |
| CVE-2022-1355 | libtiff A stack-based buffer overflow | 6.1NVD v3.1 | 0.6% | 2022-08-31 | Fix |
| CVE-2022-1354 | libtiff A heap-based buffer overflow | 5.5NVD v3.1 | 0.6% | 2022-08-31 | Fix |
| CVE-2022-1325 | Clmg resource exhaustion | 5.5NVD v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-1319 | undertow unchecked return value | 7.5v3.1 | 1.6% | 2022-08-31 | Fix |
| CVE-2022-1271 | gzip, xz-utils arbitrary file write | 8.8NVD v3.1 | 5.2% | 2022-08-31 | Fix |
| CVE-2022-1263 | Kernel:KVM null pointer dereference | 5.5NVD v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-1259 | undertow denial of service | 7.5v3.1 | 1.3% | 2022-08-31 | Fix |
| CVE-2022-1247 | kernel race condition | 7.0NVD v3.1 | 0.3% | 2022-08-31 | |
| CVE-2022-1205 | Linux kernel A null pointer dereference | 4.7NVD v3.1 | 0.4% | 2022-08-31 | Fix |
| CVE-2022-39028 | GNU InetUtils null pointer dereference | 7.5v3.1 | 2.1% | 2022-08-30 | Fix |
| CVE-2022-38784 | Freedesktop Poppler integer overflow | 7.8v3.1 | 0.6% | 2022-08-30 | Fix |
| CVE-2022-38118 | HGiga OAKlouds SQL injection | 8.8CNA v3.1 | 1.7% | 2022-08-30 | |
| CVE-2022-38116 | Le-yan Co., Ltd. Personnel and Salary Management System hard-coded password | 9.8CNA v3.1 | 1.1% | 2022-08-30 | |
| CVE-2022-37237 | ZLMediaKit RTMP request handling denial of service | 7.5v3.1 | 0.8% | 2022-08-30 | |
| CVE-2022-37176 | AC6 firmware goform/setWizard vulnerability | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-37173 | Vim Gvim incorrect default permissions | 7.8v3.1 | 0.4% | 2022-08-30 | |
| CVE-2022-37172 | MSYS2 arbitrary code execution | 7.8v3.1 | 0.2% | 2022-08-30 | |
| CVE-2022-37149 | WAVLINK Wl-wn575a3 OS command injection | 9.8v3.1 | 2.7% | 2022-08-30 | |
| CVE-2022-36749 | Sourcefabric RPi-Jukebox-RFID OS command injection | 9.8v3.1 | 2.7% | 2022-08-30 | |
| CVE-2022-36748 | Picuploader cross-site scripting | 6.1v3.1 | 0.4% | 2022-08-30 | |
| CVE-2022-36747 | Cobub Razor cross-site scripting | 6.1v3.1 | 0.7% | 2022-08-30 | |
| CVE-2022-36746 | LibreNMS vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 0.5% | 2022-08-30 | Fix |
| CVE-2022-36745 | LibreNMS vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 0.5% | 2022-08-30 | Fix |
| CVE-2022-36735 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36734 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36733 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36732 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36731 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36730 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36714 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36713 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36712 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36711 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36709 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-36657 | Library Management System cross-site scripting | 4.8v3.1 | 0.6% | 2022-08-30 | |
| CVE-2022-36565 | Wampserver arbitrary code execution | 8.8v3.1 | 1.2% | 2022-08-30 | |
| CVE-2022-36564 | Strawberryperl arbitrary code execution | 8.8v3.1 | 1.2% | 2022-08-30 | |
| CVE-2022-36563 | Rubyinstaller2 arbitrary code execution | 8.8v3.1 | 1.2% | 2022-08-30 | |
| CVE-2022-36562 | Rubyinstaller2 arbitrary code execution | 8.8v3.1 | 1.2% | 2022-08-30 | |
| CVE-2022-36561 | Xpdf AcroForm parser vulnerability | 5.5v3.1 | 0.3% | 2022-08-30 | Fix |
| CVE-2022-36552 | Tendacn AC6 files accessible to external parties | 7.5v3.1 | 0.7% | 2022-08-30 | |
| CVE-2022-34375 | Dell Container Storage Modules path traversal | 8.8CNA v3.1 | 1.3% | 2022-08-30 | Fix |
| CVE-2022-34374 | Dell Container Storage Modules OS command injection | 8.8CNA v3.1 | 1.4% | 2022-08-30 | Fix |
| CVE-2022-34368 | Dell NetWorker Management Console improper handling of insufficient permissions | 6.1CNA v3.1 | 0.4% | 2022-08-30 | Fix |
| CVE-2022-33935 | Dell Data Protection Advisor cross-site scripting | 5.4CNA v3.1 | 0.4% | 2022-08-30 | Fix |
| CVE-2022-31232 | Dell SmartFabric Storage Software OS command injection | 8.6CNA v3.1 | 1.0% | 2022-08-30 | Fix |
| CVE-2022-27563 | Overload/denial of service affects HCL VersionVault Express | 7.5CNA v3.1 | 0.8% | 2022-08-30 | Fix |
| CVE-2022-27560 | HCL VersionVault Express information disclosure | 6.0CNA v3.1 | 0.5% | 2022-08-30 | Fix |
| CVE-2022-26529 | Realtek Linux/Android Bluetooth Mesh SDK buffer overflow | 6.5CNA v3.1 | 0.5% | 2022-08-30 | |
| CVE-2022-26528 | Realtek Linux/Android Bluetooth Mesh SDK buffer overflow | 6.5CNA v3.1 | 0.5% | 2022-08-30 | |
| CVE-2022-26527 | Realtek Linux/Android Bluetooth Mesh SDK buffer overflow | 6.5CNA v3.1 | 0.5% | 2022-08-30 | |
| CVE-2022-25887 | sanitize-html regular expression denial of service (ReDoS) | 7.5v3.1 | 1.4% | 2022-08-30 | Fix |
| CVE-2022-25857 | org.yaml:snakeyaml denial of service (DoS) | 7.5v3.1 | 2.7% | 2022-08-30 | Fix |
| CVE-2022-25646 | x-data-spreadsheet cross-site scripting (XSS) | 6.1v3.1 | 0.9% | 2022-08-30 | |
| CVE-2022-25635 | Realtek Linux/Android Bluetooth Mesh SDK buffer overflow | 6.5v3.1 | 0.4% | 2022-08-30 | |
| CVE-2022-24107 | Glyphandcog Xpdfreader integer overflow | 7.8v3.1 | 0.3% | 2022-08-30 | Fix |
| CVE-2022-24106 | Glyphandcog Xpdfreader integer overflow | 7.8v3.1 | 0.3% | 2022-08-30 | Fix |
| CVE-2022-3037 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-08-30 | Fix |
| CVE-2022-2330 | XXE vulnerability in DLP Endpoint for Windows | 6.5CNA v3.1 | 0.9% | 2022-08-30 | Fix |
| CVE-2022-38772 | Zoho ManageEngine NetFlow Analyzer remote code execution | 8.8v3.1 | 77.6% | 2022-08-29 | Fix |
| CVE-2022-38625 | Patlite Nbm-d88n insufficient verification of data authenticity | 8.8v3.1 | 0.6% | 2022-08-29 | Fix |
| CVE-2022-38511 | TOTOLINK A810R OS command injection | 7.8v3.1 | 1.3% | 2022-08-29 | |
| CVE-2022-38510 | Tenda TX9 Pro buffer overflow | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-37681 | Hitachi Hc-ip9100hd path traversal | 7.5v3.1 | 1.1% | 2022-08-29 | Fix |
| CVE-2022-37680 | Hitachi Hc-ip9100hd missing authentication | 7.5v3.1 | 0.9% | 2022-08-29 | Fix |
| CVE-2022-37177 | Hirevue Hiring Platform weak cryptographic algorithm | 7.5NVD v3.1 | 0.5% | 2022-08-29 | |
| CVE-2022-37059 | Subrion CMS vulnerable to cross-site scripting in admin panel | 4.8v3.1 | 0.6% | 2022-08-29 | |
| CVE-2022-36690 | Ingredient Stock Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-29 | |
| CVE-2022-36689 | Ingredient Stock Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-29 | |
| CVE-2022-36688 | Ingredient Stock Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-29 | |
| CVE-2022-36687 | Ingredient Stock Management System path traversal | 6.5v3.1 | 1.0% | 2022-08-29 | |
| CVE-2022-36686 | Ingredient Stock Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-29 | |
| CVE-2022-36616 | TOTOLINK A810R hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36615 | TOTOLINK A3000RU hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36614 | TOTOLINK A860R hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36613 | TOTOLINK N600R hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36612 | TOTOLINK A950RG hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36611 | TOTOLINK A800R hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36610 | TOTOLINK A720R hard-coded credentials | 7.8v3.1 | 0.3% | 2022-08-29 | |
| CVE-2022-36573 | Pagekit CMS cross-site scripting in Markdown text box where articles are edited | 6.1v3.1 | 0.6% | 2022-08-29 | |
| CVE-2022-36572 | Sinsiu Enterprise Website System remote code execution | 9.8v3.1 | 23.2% | 2022-08-29 | |
| CVE-2022-36560 | Seiko-sol SkyBridge MB-A200 hard-coded credentials | 9.8v3.1 | 0.8% | 2022-08-29 | Fix |
| CVE-2022-36559 | Seiko-sol SkyBridge MB-A200 command injection | 9.8v3.1 | 1.7% | 2022-08-29 | Fix |
| CVE-2022-36558 | Seiko-sol Skybridge Mb-a100 hard-coded credentials | 9.8v3.1 | 0.8% | 2022-08-29 | Fix |
| CVE-2022-36557 | Seiko-sol Skybridge Mb-a100 unrestricted file upload | 9.8v3.1 | 1.1% | 2022-08-29 | Fix |
| CVE-2022-36556 | Seiko-sol Skybridge Mb-a100 command injection | 9.8v3.1 | 1.6% | 2022-08-29 | Fix |
| CVE-2022-36555 | Hytec Hwl-2511-ss inadequate encryption strength | 9.8v3.1 | 0.7% | 2022-08-29 | Fix |
| CVE-2022-36554 | Hytec Hwl-2511-ss CLI command injection | 9.8v3.1 | 2.4% | 2022-08-29 | Fix |
| CVE-2022-36553 | Hytec Hwl-2511-ss command injection | 9.8v3.1 | 90.8% | 2022-08-29 | Reported exploitedNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-36200 | FiberHome Hg150-ub cleartext transmission of sensitive information | 7.5v3.1 | 2.3% | 2022-08-29 | Exploit code |
| CVE-2022-36194 | Centreon cross-site scripting | 5.4v3.1 | 0.9% | 2022-08-29 | Fix |
| CVE-2022-36037 | Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby | 5.9CNA v3.1 | 0.9% | 2022-08-29 | Fix |
| CVE-2022-36036 | Improper control of generation of code (code injection) in mdx-mermaid | 3.6CNA v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-36034 | Possible regular expression denial of service (ReDoS) used on uncontrolled data in nitrado.js | 7.5CNA v3.1 | 0.9% | 2022-08-29 | Fix |
| CVE-2022-36033 | Jsoup may not sanitize cross-site scripting attempts if SafeList.preserveRelativeLinks is enabled | 6.1CNA v3.1 | 1.5% | 2022-08-29 | Fix |
| CVE-2022-35962 | Crafted link in Zulip message can cause disclosure of credentials | 8.0CNA v3.1 | 1.1% | 2022-08-29 | Fix |
| CVE-2022-35020 | Advancemame advancecomp out-of-bounds write | 5.5v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-35019 | Advancecomp v2.3 was discovered to contain a segmentation fault. | 5.5v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-35018 | Advancecomp v2.3 was discovered to contain a segmentation fault. | 5.5v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-35017 | Advancemame advancecomp out-of-bounds write | 5.5v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-35016 | Advancemame advancecomp out-of-bounds write | 5.5v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-35015 | Advancemame advancecomp out-of-bounds write | 5.5v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-35014 | Advancecomp v2.3 contains a segmentation fault. | 5.5v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-34668 | Nvflare unsafe deserialization due to Pickle | 9.8CNA v3.1 | 10.9% | 2022-08-29 | Exploit codeFix |
| CVE-2022-32993 | TOTOLINK A7000R improper access control | 9.8v3.1 | 0.9% | 2022-08-29 | |
| CVE-2022-32548 | DrayTek Vigor1000B buffer overflow | 9.8v3.1 | 33.8% | 2022-08-29 | Exploit codeFix |
| CVE-2022-31677 | Pinniped Supervisor insufficient session expiration | 5.4v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-27558 | HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability | 5.9CNA v3.1 | 0.6% | 2022-08-29 | Fix |
| CVE-2022-27547 | HCL iNotes is susceptible to a link to non-existent domain vulnerability | 6.1CNA v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-27546 | HCL iNotes is susceptible to a reflected cross-site scripting (XSS) | 8.3CNA v3.1 | 0.6% | 2022-08-29 | Fix |
| CVE-2022-25921 | morgan-json arbitrary code execution | 9.8v3.1 | 1.4% | 2022-08-29 | |
| CVE-2022-25644 | @pendo324/get-process-by-name arbitrary code execution | 9.8v3.1 | 1.5% | 2022-08-29 | |
| CVE-2022-25641 | Foxit PDF Reader, PDF Editor and PhantomPDF compressed-object parsing vulnerability | 5.5v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-22897 | Apollo Theme AP Page Builder SQL injection | 9.8v3.1 | 13.4% | 2022-08-29 | Nuclei |
| CVE-2022-21385 | Oracle Linux crash | 6.2CNA v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-21165 | font-converter arbitrary command injection | 9.8v3.1 | 3.0% | 2022-08-29 | |
| CVE-2022-3035 | Cross-site scripting (XSS) Stored in snipe/Snipe-IT | 4.8v3.1 | 0.7% | 2022-08-29 | Fix |
| CVE-2022-3019 | Improper access control in ToolJet/ToolJet | 8.8v3.1 | 0.9% | 2022-08-29 | Fix |
| CVE-2022-2961 | Linux kernel A use-after-free | 7.0NVD v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-2953 | libtiff out-of-bounds read | 5.5CNA v3.1 | 0.6% | 2022-08-29 | Fix |
| CVE-2022-2638 | Export All URLs WordPress plugin Admin+ arbitrary System file Removal | 6.5NVD v3.1 | 1.2% | 2022-08-29 | Fix |
| CVE-2022-2599 | Anti-Malware Security and Brute-Force Firewall WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.3% | 2022-08-29 | NucleiFix |
| CVE-2022-2559 | Fluent Support WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.2% | 2022-08-29 | Fix |
| CVE-2022-2556 | MailChimp for Woocommerce WordPress plugin Admin+ SSRF | 2.7NVD v3.1 | 0.8% | 2022-08-29 | Fix |
| CVE-2022-2538 | WP Hide and Security Enhancer WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-08-29 | Fix |
| CVE-2022-2537 | WooCommerce PDF Invoices and Packing Slips WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-08-29 | Fix |
| CVE-2022-2374 | Simply Schedule Appointments WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-08-29 | Fix |
| CVE-2022-2373 | Simply Schedule Appointments WordPress plugin unauthenticated email Address disclosure | 5.3NVD v3.1 | 1.9% | 2022-08-29 | NucleiFix |
| CVE-2022-2267 | MailChimp for Woocommerce WordPress plugin Subscriber+ SSRF | 4.3NVD v3.1 | 0.7% | 2022-08-29 | Fix |
| CVE-2022-2261 | WPide WordPress plugin Admin+ local file inclusion | 7.2NVD v3.1 | 1.4% | 2022-08-29 | Fix |
| CVE-2022-2080 | Sensei LMS WordPress plugin arbitrary Private Message Sending via IDOR | 4.3NVD v3.1 | 0.8% | 2022-08-29 | Fix |
| CVE-2022-2034 | Sensei LMS WordPress plugin unauthenticated Private Messages disclosure via rest API | 5.3NVD v3.1 | 2.5% | 2022-08-29 | NucleiFix |
| CVE-2022-1663 | Stop Spam Comments WordPress plugin access Token bypass | 6.5NVD v3.1 | 0.7% | 2022-08-29 | |
| CVE-2022-1204 | Linux kernel A use-after-free | 5.5NVD v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-1199 | kernel use-after-free | 7.5NVD v3.1 | 2.0% | 2022-08-29 | Fix |
| CVE-2022-1198 | kernel use-after-free | 5.5NVD v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-1184 | Linux kernel fs/ext4/namei.c:dx_insert_block in the use-after-free | 5.5NVD v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-1123 | Leaflet Maps Marker WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.3% | 2022-08-29 | Fix |
| CVE-2022-1117 | fapolicyd files accessible to external parties | 8.4NVD v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-1115 | ImageMagick denial of service | 5.5NVD v3.1 | 0.6% | 2022-08-29 | Fix |
| CVE-2022-1043 | kernel use-after-free | 8.8NVD v3.1 | 3.9% | 2022-08-29 | Exploit codeFix |
| CVE-2022-1016 | kernel uninitialized pointer access | 5.5NVD v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-0934 | dnsmasq use-after-free | 7.5NVD v3.1 | 2.5% | 2022-08-29 | Fix |
| CVE-2022-0852 | convert2rhel personal information exposure | 5.5v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-0851 | convert2rhel information disclosure | 5.5v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-0850 | kernel information disclosure | 7.1NVD v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-0812 | Linux kernel information disclosure | 4.3NVD v3.1 | 1.4% | 2022-08-29 | Fix |
| CVE-2022-0718 | openstack/python-oslo.utils python-oslo-utils has improper password parsing | 4.9NVD v3.1 | 1.7% | 2022-08-29 | Fix |
| CVE-2022-0669 | dpdk denial of service | 6.5NVD v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-0497 | Openscad out-of-bounds read | 7.1NVD v3.1 | 0.4% | 2022-08-29 | Fix |
| CVE-2022-0496 | Openscad out-of-bounds access | 5.5NVD v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-0485 | libnbd unchecked return value | 4.8v3.1 | 1.0% | 2022-08-29 | Fix |
| CVE-2022-0480 | kernel resource exhaustion | 5.5NVD v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-0400 | kernel out-of-bounds read | 7.5NVD v3.1 | 1.8% | 2022-08-29 | |
| CVE-2022-0367 | libmodbus A heap-based buffer overflow | 7.8NVD v3.1 | 0.5% | 2022-08-29 | Fix |
| CVE-2022-0358 | QEMU virtiofsd privilege escalation | 7.8NVD v3.1 | 0.3% | 2022-08-29 | Fix |
| CVE-2022-0336 | samba incorrect default permissions | 8.8NVD v3.1 | 1.6% | 2022-08-29 | Fix |
| CVE-2022-0284 | ImageMagick out-of-bounds read | 7.1NVD v3.1 | 0.6% | 2022-08-29 | Fix |
| CVE-2022-38571 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38570 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38569 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38568 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38567 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38566 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38565 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38564 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38563 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38562 | Tenda M3 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-08-28 | |
| CVE-2022-38557 | D-Link Dir-845l improper authentication | 9.8v3.1 | 1.0% | 2022-08-28 | |
| CVE-2022-38556 | TRENDnet TEW733GR improper authentication | 9.8v3.1 | 1.1% | 2022-08-28 | |
| CVE-2022-38555 | Linksys E1200 out-of-bounds write | 9.8v3.1 | 10.4% | 2022-08-28 | |
| CVE-2022-37057 | D-Link Go-rt-ac750 OS command injection | 9.8v3.1 | 25.1% | 2022-08-28 | |
| CVE-2022-37056 | D-Link Go-rt-ac750 OS command injection | 9.8v3.1 | 11.4% | 2022-08-28 | Emerging Threats |
| CVE-2022-37055 | D-Link Routers buffer overflow | 9.8v3.1 | 55.5% | 2022-08-28 | KEVEmerging Threats |
| CVE-2022-37053 | TRENDnet TEW733GR code injection | 9.8v3.1 | 2.2% | 2022-08-28 | |
| CVE-2022-36756 | D-Link Dir-845l code injection | 9.8v3.1 | 3.2% | 2022-08-28 | |
| CVE-2022-36755 | D-Link Dir-845l improper authentication | 9.8v3.1 | 1.4% | 2022-08-28 | |
| CVE-2022-36708 | Library Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-28 | |
| CVE-2022-36706 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-28 | |
| CVE-2022-36705 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-28 | |
| CVE-2022-36704 | Library Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-28 | |
| CVE-2022-3017 | Cross-site request forgery (CSRF) in froxlor/froxlor | 6.5v3.1 | 0.4% | 2022-08-28 | Fix |
| CVE-2022-3016 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-08-28 | Fix |
| CVE-2022-38794 | Zaver path traversal | 7.5v3.1 | 3.9% | 2022-08-27 | Nuclei |
| CVE-2022-38792 | Exotel exotel-py includes code execution backdoor inserted by a third party | 9.8v3.1 | 1.5% | 2022-08-27 | |
| CVE-2022-38791 | MariaDB improper locking | 5.5v3.1 | 0.3% | 2022-08-27 | Fix |
| CVE-2022-3015 | oretnom23 Fast Food Ordering System cross-site scripting | 6.1v3.1 | 0.4% | 2022-08-27 | |
| CVE-2022-3014 | SourceCodester Simple Task Managing System cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-27 | |
| CVE-2022-3013 | SourceCodester Simple Task Managing System loginVaLidation.php SQL injection | 9.8v3.1 | 0.5% | 2022-08-27 | |
| CVE-2022-3012 | oretnom23 Fast Food Ordering System index.php SQL injection | 8.8v3.1 | 0.7% | 2022-08-27 | |
| CVE-2022-2787 | Debian schroot stricter rules on chroot names | 4.3v3.1 | 1.0% | 2022-08-27 | Fix |
| CVE-2022-38533 | GNU Binutils out-of-bounds write | 5.5v3.1 | 0.3% | 2022-08-26 | Fix |
| CVE-2022-37152 | Online Diagnostic Lab Management System SQL injection | 9.8v3.1 | 1.1% | 2022-08-26 | |
| CVE-2022-37151 | Online Diagnostic Lab Management System There is an unauthorized access | 7.5v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-37150 | Online Diagnostic Lab Management System cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-26 | |
| CVE-2022-36683 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36682 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36681 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36680 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36679 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36678 | Simple Task Scheduling System SQL injection | 9.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36548 | Hashenudara eDoc Doctor Appointment System cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-26 | |
| CVE-2022-36547 | Hashenudara eDoc Doctor Appointment System cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-26 | |
| CVE-2022-36546 | Hashenudara eDoc Doctor Appointment System cross-site request forgery | 8.8v3.1 | 0.5% | 2022-08-26 | |
| CVE-2022-36545 | Hashenudara eDoc Doctor Appointment System SQL injection | 9.8v3.1 | 1.2% | 2022-08-26 | |
| CVE-2022-36544 | Hashenudara eDoc Doctor Appointment System SQL injection | 9.8v3.1 | 1.2% | 2022-08-26 | |
| CVE-2022-36543 | Hashenudara eDoc Doctor Appointment System SQL injection | 9.8v3.1 | 1.2% | 2022-08-26 | |
| CVE-2022-36542 | Hashenudara eDoc Doctor Appointment System improper access control | 6.5v3.1 | 0.7% | 2022-08-26 | |
| CVE-2022-36537 | ZK Framework AuUploader confused deputy | 7.5v3.1 | 95.4% | 2022-08-26 | KEVNucleiExploit codeFix |
| CVE-2022-36529 | Kensite Cms SQL injection | 8.8v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-36522 | MikroTik RouterOS reachable assertion | 6.5v3.1 | 1.5% | 2022-08-26 | |
| CVE-2022-36521 | cskefu insecure permissions | 7.5v3.1 | 0.7% | 2022-08-26 | |
| CVE-2022-36226 | Siteservercms missing authorization | 7.2v3.1 | 1.1% | 2022-08-26 | |
| CVE-2022-36168 | WuzhiCMS path traversal | 2.7v3.1 | 0.9% | 2022-08-26 | |
| CVE-2022-36121 | Blue Prism Enterprise UpdateOfflineHelpData function improper access control | 5.3v3.1 | 0.8% | 2022-08-26 | Fix |
| CVE-2022-36120 | Blue Prism Enterprise getChartData function improper access control | 8.1v3.1 | 1.0% | 2022-08-26 | Fix |
| CVE-2022-35714 | IBM Maximo Asset Management cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-08-26 | Fix |
| CVE-2022-35192 | D-Link Dsl-3782 Firmware buffer overflow | 7.5v3.1 | 1.0% | 2022-08-26 | |
| CVE-2022-34303 | Eurosoft UEFI Bootloader security feature bypass | 6.7v3.1 | 0.8% | 2022-08-26 | Fix |
| CVE-2022-34302 | Horizondatasys UEFI Bootloader arbitrary code execution | 6.7v3.1 | 1.1% | 2022-08-26 | Fix |
| CVE-2022-34301 | CryptoPro Secure Disk for BitLocker bootloader security feature bypass | 6.7v3.1 | 1.0% | 2022-08-26 | Fix |
| CVE-2022-31773 | IBM DataPower Gateway cross-site request forgery | 8.8CNA v3.0 | 0.4% | 2022-08-26 | Fix |
| CVE-2022-30984 | Rubrik Cdm A buffer overflow | 7.8v3.1 | 0.2% | 2022-08-26 | Fix |
| CVE-2022-29850 | Lexmark B2236 improper input validation | 8.1v3.1 | 1.0% | 2022-08-26 | Fix |
| CVE-2022-25625 | Broadcom Symantec Privileged Access Management administration configuration vulnerability | 8.8NVD v3.1 | 0.8% | 2022-08-26 | Fix |
| CVE-2022-2915 | SonicWall SMA100 heap-based buffer overflow | 8.8v3.1 | 6.7% | 2022-08-26 | Fix |
| CVE-2022-0225 | Stored cross-site scripting (XSS) in Keycloak via groups dropdown | 5.4v3.1 | 3.1% | 2022-08-26 | Fix |
| CVE-2022-0217 | prosody XML entity expansion | 7.5NVD v3.1 | 5.4% | 2022-08-26 | Fix |
| CVE-2022-0216 | QEMU LSI53C895A SCSI adapter emulation use-after-free | 4.4NVD v3.1 | 0.4% | 2022-08-26 | Fix |
| CVE-2022-0207 | vdsm A race condition | 4.7v3.1 | 0.2% | 2022-08-26 | Fix |
| CVE-2022-0175 | virglrenderer missing resource initialization | 5.5NVD v3.1 | 0.3% | 2022-08-26 | Fix |
| CVE-2022-0171 | kernel incomplete cleanup | 5.5NVD v3.1 | 0.3% | 2022-08-26 | Fix |
| CVE-2022-0168 | Linux kernel A denial of service | 4.4NVD v3.1 | 0.3% | 2022-08-26 | Fix |
| CVE-2022-0084 | XNIO `notifyReadClosed` method logging message to unexpected end | 7.5NVD v3.1 | 1.5% | 2022-08-26 | Fix |
| CVE-2022-37953 | WorkstationST Response Splitting in AM Gateway Challenge-Response | 6.1v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2022-37952 | WorkstationST reflected XSS in iHistorian Data Display Tags | 6.1v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2022-37824 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37823 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37822 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37821 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37820 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37819 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37818 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37817 | Tenda AX1803 out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37816 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37815 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37814 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37813 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37812 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37811 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37810 | Tenda AC1206 OS command injection | 9.8v3.1 | 2.4% | 2022-08-25 | |
| CVE-2022-37809 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37808 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37807 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37806 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37805 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37804 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37803 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37802 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37801 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37800 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37799 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37798 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37318 | RSA Archer cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2022-37317 | RSA Archer cross-site scripting | 5.4NVD v3.1 | 0.7% | 2022-08-25 | Fix |
| CVE-2022-37316 | RSA Archer improper access control | 6.5v3.1 | 0.7% | 2022-08-25 | Fix |
| CVE-2022-37292 | Tenda AX12 out-of-bounds write | 5.5v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37245 | Altn Security Gateway For Email Servers cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-25 | Fix |
| CVE-2022-37244 | Altn Security Gateway For Email Servers cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2022-37243 | Altn Security Gateway For Email Servers cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-25 | Fix |
| CVE-2022-37242 | Altn Security Gateway For Email Servers HTTP response splitting | 9.8v3.1 | 1.4% | 2022-08-25 | Fix |
| CVE-2022-37241 | Altn Security Gateway For Email Servers cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-25 | Fix |
| CVE-2022-37240 | Altn Security Gateway For Email Servers HTTP response splitting | 9.8v3.1 | 1.4% | 2022-08-25 | Fix |
| CVE-2022-37239 | Altn Security Gateway For Email Servers cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-25 | Fix |
| CVE-2022-37238 | Altn Security Gateway For Email Servers cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-25 | Fix |
| CVE-2022-37162 | Claroline cross-site scripting | 5.4v3.1 | 0.7% | 2022-08-25 | |
| CVE-2022-37161 | Claroline cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-25 | |
| CVE-2022-37160 | Claroline cross-site scripting | 5.4v3.1 | 0.6% | 2022-08-25 | |
| CVE-2022-37159 | Claroline unrestricted file upload | 9.8v3.1 | 27.2% | 2022-08-25 | |
| CVE-2022-37158 | Iocoder ruoyi-vue-pro weak password requirements | 9.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-37100 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37099 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37098 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37097 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37096 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37095 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37094 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37093 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37092 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37091 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37090 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37089 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37088 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37087 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37086 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37085 | H3C H200 out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37084 | TOTOLINK A7000R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37083 | TOTOLINK A7000R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-37082 | TOTOLINK A7000R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-37081 | TOTOLINK A7000R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-37080 | TOTOLINK A7000R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37079 | TOTOLINK A7000R OS command injection | 7.8v3.1 | 1.2% | 2022-08-25 | |
| CVE-2022-37078 | TOTOLINK A7000R out-of-bounds write | 7.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-37077 | TOTOLINK A7000R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37076 | TOTOLINK A7000R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-37075 | TOTOLINK A7000R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-37074 | H3C Gr-120w out-of-bounds write | 7.8v3.1 | 0.6% | 2022-08-25 | |
| CVE-2022-37073 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37072 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37071 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37070 | H3C GR-1200W OS command injection | 9.8v3.1 | 10.6% | 2022-08-25 | |
| CVE-2022-37069 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37068 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37067 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-37066 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center command injection | 8.8v3.1 | 99.2% | 2022-08-25 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-36721 | Library Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36720 | Library Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36719 | Library Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36716 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36715 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36703 | Ingredients Stock Management System SQL injection | 8.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36701 | Ingredients Stock Management System SQL injection | 8.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36700 | Ingredients Stock Management System SQL injection | 8.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36699 | Ingredients Stock Management System SQL injection | 8.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36698 | Ingredients Stock Management System SQL injection | 8.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36697 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36696 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36695 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36693 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36692 | Ingredients Stock Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36527 | jflyfox jfinal_cms jfinal cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36520 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36519 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.2% | 2022-08-25 | |
| CVE-2022-36518 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.2% | 2022-08-25 | |
| CVE-2022-36517 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36516 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36515 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36514 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36513 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.2% | 2022-08-25 | |
| CVE-2022-36511 | H3C GR-1200W out-of-bounds write | 9.8v3.1 | 1.2% | 2022-08-25 | |
| CVE-2022-36510 | H3C GR-2200 OS command injection | 7.8v3.1 | 11.2% | 2022-08-25 | |
| CVE-2022-36509 | H3C GR-3200 OS command injection | 7.8v3.1 | 11.2% | 2022-08-25 | |
| CVE-2022-36508 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36507 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36506 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.6% | 2022-08-25 | |
| CVE-2022-36505 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36504 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36503 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36502 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36501 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36500 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.6% | 2022-08-25 | |
| CVE-2022-36499 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36498 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.6% | 2022-08-25 | |
| CVE-2022-36497 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36496 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-36495 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36494 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36493 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36492 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36491 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36490 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.5% | 2022-08-25 | |
| CVE-2022-36489 | H3C Magic NX18 Plus out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36488 | TOTOLINK N350RT out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36487 | TOTOLINK N350RT OS command injection | 7.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36486 | TOTOLINK N350RT OS command injection | 7.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36485 | TOTOLINK N350RT OS command injection | 7.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36484 | TOTOLINK N350RT out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36483 | TOTOLINK N350RT out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36482 | TOTOLINK N350RT out-of-bounds write | 7.8v3.1 | 0.9% | 2022-08-25 | |
| CVE-2022-36481 | TOTOLINK N350RT OS command injection | 7.8v3.1 | 1.3% | 2022-08-25 | |
| CVE-2022-36480 | TOTOLINK N350RT out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36479 | TOTOLINK N350RT OS command injection | 7.8v3.1 | 1.1% | 2022-08-25 | |
| CVE-2022-36478 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36477 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36475 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36474 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36473 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36472 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36471 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36470 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36469 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36468 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36467 | H3C B5 Mini out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-25 | |
| CVE-2022-36466 | TOTOLINK A3700R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36465 | TOTOLINK A3700R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36464 | TOTOLINK A3700R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36463 | TOTOLINK A3700R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36462 | TOTOLINK A3700R out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-25 | |
| CVE-2022-36461 | TOTOLINK A3700R OS command injection | 7.8v3.1 | 1.2% | 2022-08-25 | |
| CVE-2022-36460 | TOTOLINK A3700R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36459 | TOTOLINK A3700R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36458 | TOTOLINK A3700R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36456 | TOTOLINK A720R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36455 | TOTOLINK A3600R OS command injection | 7.8v3.1 | 1.0% | 2022-08-25 | |
| CVE-2022-36358 | SEO Scout WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-08-25 | Fix |
| CVE-2022-36119 | Ssctech Blue Prism deserialization of untrusted data | 8.8v3.1 | 1.9% | 2022-08-25 | Fix |
| CVE-2022-36118 | An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the SetProcessAttributes administr | 5.3v3.1 | 0.8% | 2022-08-25 | Fix |
| CVE-2022-36117 | An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for an administrative function. If cre | 3.1v3.1 | 0.7% | 2022-08-25 | Fix |
| CVE-2022-36116 | Blue Prism setValidationInfo function improper access control | 5.3v3.1 | 0.8% | 2022-08-25 | Fix |
| CVE-2022-36115 | Blue Prism process autosave function improper access control | 7.1v3.1 | 0.9% | 2022-08-25 | Fix |
| CVE-2022-34960 | MikroTik RouterOS link following | 9.8v3.1 | 1.4% | 2022-08-25 | |
| CVE-2022-32746 | samba use-after-free | 5.4NVD v3.1 | 1.2% | 2022-08-25 | Fix |
| CVE-2022-32745 | samba out-of-bounds read | 8.1NVD v3.1 | 1.1% | 2022-08-25 | Fix |
| CVE-2022-32744 | samba authentication bypass by spoofing | 8.8NVD v3.1 | 1.1% | 2022-08-25 | Fix |
| CVE-2022-32742 | samba information disclosure | 4.3NVD v3.1 | 1.2% | 2022-08-25 | Fix |
| CVE-2022-32427 | PrinterLogic Windows Client path traversal | 8.8v3.1 | 1.7% | 2022-08-25 | Fix |
| CVE-2022-31798 | Nortekcontrol Emerge E3 session fixation | 6.1v3.1 | 8.5% | 2022-08-25 | NucleiExploit code |
| CVE-2022-31499 | Nortekcontrol Emerge E3 OS command injection | 9.8NVD v3.1 | 64.6% | 2022-08-25 | Nuclei |
| CVE-2022-31269 | Nortekcontrol Emerge E3 hard-coded credentials | 8.2v3.1 | 7.0% | 2022-08-25 | NucleiExploit code |
| CVE-2022-28747 | Gosecure Titan Inbox Detection & Response remote code execution | 9.8v3.1 | 1.5% | 2022-08-25 | Fix |
| CVE-2022-23715 | Elastic Cloud Enterprise sensitive information in log files | 6.5v3.1 | 0.8% | 2022-08-25 | Fix |
| CVE-2022-23235 | NetApp Active IQ Unified Manager AutoSupport telemetry vulnerability | 5.3v3.1 | 0.6% | 2022-08-25 | Fix |
| CVE-2022-22728 | libapreq2 multipart form parse memory corruption | 7.5v3.1 | 5.8% | 2022-08-25 | Fix |
| CVE-2022-20921 | Cisco ACI Multi-Site Orchestrator privilege escalation | 8.8CNA v3.1 | 1.2% | 2022-08-25 | Fix |
| CVE-2022-20865 | Cisco FXOS software command injection | 6.7CNA v3.1 | 0.3% | 2022-08-25 | Fix |
| CVE-2022-20824 | Cisco FXOS and NX-OS Software Cisco Discovery Protocol buffer overflow | 8.8CNA v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2022-20823 | Cisco NX-OS Software OSPFv3 denial of service | 8.6CNA v3.1 | 1.1% | 2022-08-25 | Fix |
| CVE-2022-2997 | Session fixation in snipe/Snipe-IT | 8.0v3.1 | 0.9% | 2022-08-25 | Fix |
| CVE-2022-2991 | Linux kernel A heap-based buffer overflow | 6.7NVD v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2022-2982 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 1.0% | 2022-08-25 | Fix |
| CVE-2022-2980 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.8% | 2022-08-25 | Fix |
| CVE-2022-2959 | Linux kernel A race condition | 7.0NVD v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2022-2957 | SourceCodester Simple and Nice Shopping Cart Script profile.php SQL injection | 9.8v3.1 | 0.8% | 2022-08-25 | |
| CVE-2022-2465 | ISaGRAF Workbench deserialization of untrusted data | 7.8v3.1 | 0.3% | 2022-08-25 | Fix |
| CVE-2022-2464 | ISaGRAF Workbench improper limitation of a pathname to a restricted directory (path traversal) | 7.8v3.1 | 0.3% | 2022-08-25 | Fix |
| CVE-2022-2463 | ISaGRAF Workbench improper limitation of a pathname to a restricted directory (path traversal) | 7.8v3.1 | 2.6% | 2022-08-25 | Fix |
| CVE-2022-2255 | mod_wsgi incorrect header handling in mod-wsgi | 7.5NVD v3.1 | 0.9% | 2022-08-25 | Fix |
| CVE-2022-2031 | samba authentication bypass | 8.8NVD v3.1 | 1.2% | 2022-08-25 | Fix |
| CVE-2022-0135 | virglrenderer VirGL virtual OpenGL renderer out-of-bounds write | 7.8NVD v3.1 | 0.4% | 2022-08-25 | Fix |
| CVE-2022-38132 | Linksys MR8300 Router command injection | 8.8v3.1 | 0.6% | 2022-08-24 | Fix |
| CVE-2022-38089 | Kajitori Exment stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-08-24 | Fix |
| CVE-2022-38080 | Exceedone/Exment and Exceedone/Laravel-admin cross-site scripting | 5.4v3.1 | 0.9% | 2022-08-24 | Fix |
| CVE-2022-38078 | Six Apart Movable Type XMLRPC API code injection | 9.8v3.1 | 2.1% | 2022-08-24 | Fix |
| CVE-2022-37418 | Hyundai authentication bypass by replay | 6.4NVD v3.1 | 1.1% | 2022-08-24 | |
| CVE-2022-37333 | Exceedone/Exment and Exceedone/Laravel-admin SQL injection | 8.8v3.1 | 1.4% | 2022-08-24 | Fix |
| CVE-2022-37305 | Honda authentication bypass by replay | 6.4v3.1 | 1.0% | 2022-08-24 | |
| CVE-2022-37181 | 72crm WukongCRM unrestricted file upload | 9.8v3.1 | 1.2% | 2022-08-24 | |
| CVE-2022-37178 | 72crm WukongCRM SQL injection | 8.8v3.1 | 1.1% | 2022-08-24 | |
| CVE-2022-37153 | Artica Tech Artica Proxy cross-site scripting | 6.1v3.1 | 1.6% | 2022-08-24 | Nuclei |
| CVE-2022-36945 | Mazda authentication bypass by replay | 6.4v3.1 | 1.0% | 2022-08-24 | |
| CVE-2022-36633 | Improper token validation leading to code execution in Teleport | 8.8v3.1 | 49.5% | 2022-08-24 | Exploit codeFix |
| CVE-2022-34838 | ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control | 8.1CNA v3.1 | 0.2% | 2022-08-24 | Fix |
| CVE-2022-34837 | ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control | 6.2CNA v3.1 | 0.1% | 2022-08-24 | Fix |
| CVE-2022-34836 | ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control | 5.9CNA v3.1 | 0.6% | 2022-08-24 | Fix |
| CVE-2022-33172 | de.fac2 User Presence protection security feature bypass | 5.5v3.1 | 0.2% | 2022-08-24 | |
| CVE-2022-32894 | Apple iOS and macOS out-of-bounds write | 7.8v3.1 | 3.3% | 2022-08-24 | KEVFix |
| CVE-2022-32893 | Apple iOS and macOS out-of-bounds write | 8.8v3.1 | 9.9% | 2022-08-24 | KEVFix |
| CVE-2022-32857 | Apple macOS cleartext transmission of sensitive information | 4.3v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2022-32840 | Apple macOS improper privilege management | 7.8v3.1 | 0.6% | 2022-08-24 | Fix |
| CVE-2022-32839 | Apple macOS arbitrary code execution | 9.8v3.1 | 3.8% | 2022-08-24 | Fix |
| CVE-2022-32838 | Apple macOS improper authorization | 5.5v3.1 | 0.5% | 2022-08-24 | Fix |
| CVE-2022-32837 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.8% | 2022-08-24 | Fix |
| CVE-2022-32834 | Apple macOS information disclosure | 5.5v3.1 | 0.6% | 2022-08-24 | Fix |
| CVE-2022-32813 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2022-32812 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.6% | 2022-08-24 | Fix |
| CVE-2022-32811 | Apple macOS improper locking | 7.8v3.1 | 0.5% | 2022-08-24 | Fix |
| CVE-2022-32810 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-08-24 | Fix |
| CVE-2022-32793 | Apple macOS out-of-bounds write | 7.5v3.1 | 1.1% | 2022-08-24 | Fix |
| CVE-2022-27812 | Stormshield Network Security denial of service | 7.5v3.1 | 0.7% | 2022-08-24 | Fix |
| CVE-2022-25903 | opcua denial of service (DoS) | 7.5v3.1 | 1.4% | 2022-08-24 | Fix |
| CVE-2022-24375 | node-opcua denial of service (DoS) | 7.5v3.1 | 1.7% | 2022-08-24 | Fix |
| CVE-2022-20122 | Android use-after-free | 9.8v3.1 | 0.4% | 2022-08-24 | Fix |
| CVE-2022-2978 | Linux kernel flaw use-after-free | 7.8NVD v3.1 | 0.3% | 2022-08-24 | Fix |
| CVE-2022-2569 | ARC Informatique PcVue OAuth database cleartext storage of sensitive information | 5.5v3.1 | 0.1% | 2022-08-24 | Fix |
| CVE-2022-2234 | mySCADA myPRO command injection | 8.8NVD v3.1 | 43.2% | 2022-08-24 | Fix |
| CVE-2022-38665 | RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin | 6.5v3.1 | 0.8% | 2022-08-23 | Fix |
| CVE-2022-38664 | Cross-site scripting in Jenkins Job Configuration History Plugin | 5.4v3.1 | 0.7% | 2022-08-23 | Fix |
| CVE-2022-38663 | Improper masking of credentials Jenkins in Git Plugin | 6.5v3.1 | 0.9% | 2022-08-23 | Fix |
| CVE-2022-38463 | ServiceNow cross-site scripting | 6.1v3.1 | 2.7% | 2022-08-23 | NucleiFix |
| CVE-2022-38172 | ServiceNow cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2022-37428 | PowerDNS Recursor incomplete cleanup | 6.5v3.1 | 1.4% | 2022-08-23 | Fix |
| CVE-2022-37223 | SQL injection in jflyfox jfinal | 9.8v3.1 | 0.9% | 2022-08-23 | |
| CVE-2022-37199 | SQL injection in jflyfox jfinal | 9.8v3.1 | 0.9% | 2022-08-23 | |
| CVE-2022-37113 | Bluecms SQL injection | 9.8v3.1 | 14.4% | 2022-08-23 | |
| CVE-2022-37112 | Bluecms SQL injection | 9.8v3.1 | 0.9% | 2022-08-23 | |
| CVE-2022-37111 | Bluecms SQL injection | 9.8v3.1 | 0.9% | 2022-08-23 | |
| CVE-2022-36405 | amCharts: Charts and Maps WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2022-36394 | Contest Gallery WordPress plugin authenticated SQL injection (SQLi) | 8.8v3.1 | 0.9% | 2022-08-23 | Fix |
| CVE-2022-36389 | Better Messages WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-08-23 | Fix |
| CVE-2022-36379 | ЮKassa для WooCommerce WordPress plugin cross-site request forgery leading to plugin settings update | 8.8v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-36350 | PukiWiki Development Team PukiWiki stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-36347 | Alpine PhotoTile for Pinterest WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-08-23 | |
| CVE-2022-36341 | AS Create Pinterest Pinboard Pages plugin settings stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-23 | |
| CVE-2022-36292 | Gallery PhotoBlocks WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-08-23 | Fix |
| CVE-2022-36288 | Download Manager WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-08-23 | Fix |
| CVE-2022-36285 | Uploading SVG, WEBP and ICO files WordPress plugin authenticated arbitrary file upload | 7.2v3.1 | 1.2% | 2022-08-23 | Fix |
| CVE-2022-36282 | Search Exclude WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-36261 | Taogogo taoCMS path traversal | 9.1v3.1 | 1.1% | 2022-08-23 | |
| CVE-2022-35733 | UNIMO Technology digital video recorders web interface missing authentication | 9.8v3.1 | 1.5% | 2022-08-23 | Fix |
| CVE-2022-35726 | Video Gallery WordPress plugin broken authentication | 9.8v3.1 | 0.7% | 2022-08-23 | Fix |
| CVE-2022-35278 | HTML injection in ActiveMQ Artemis Web console | 6.1v3.1 | 1.7% | 2022-08-23 | Fix |
| CVE-2022-35242 | 59sec THE Leads Management System: 59sec Lite plugin settings vulnerability | 5.3v3.1 | 0.7% | 2022-08-23 | Fix |
| CVE-2022-35235 | WPide WordPress plugin authenticated arbitrary file read | 4.9v3.1 | 1.1% | 2022-08-23 | Fix |
| CVE-2022-35203 | TRENDnet Tv-ip572pi improper access control | 7.2v3.1 | 1.1% | 2022-08-23 | |
| CVE-2022-35191 | D-Link Dsl-3782 Firmware improper resource release | 6.5v3.1 | 1.0% | 2022-08-23 | |
| CVE-2022-35115 | IceWarp Webclient DC2 SQL injection | 9.8v3.1 | 0.7% | 2022-08-23 | Fix |
| CVE-2022-34919 | Zengenti Contensis file upload | 9.8v3.1 | 1.7% | 2022-08-23 | Exploit code |
| CVE-2022-34868 | ЮKassa для WooCommerce WordPress plugin authenticated arbitrary settings update vulnerability | 6.5NVD v3.1 | 1.1% | 2022-08-23 | Fix |
| CVE-2022-34658 | Download Manager WordPress plugin Multiple authenticated persistent cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2022-34648 | Uploading SVG, WEBP and ICO files WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-34486 | PukiWiki Development Team PukiWiki path traversal | 7.2v3.1 | 1.3% | 2022-08-23 | Fix |
| CVE-2022-33916 | OPC Foundation Ua .net Standard Stack information disclosure | 7.5v3.1 | 1.3% | 2022-08-23 | Fix |
| CVE-2022-33142 | Better Messages WordPress plugin denial of service (DoS) | 6.5NVD v3.1 | 1.1% | 2022-08-23 | Fix |
| CVE-2022-31676 | VMware Tools improper privilege management | 7.8v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-29476 | Notification Bar for WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-28883 | F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service | 7.5v3.1 | 0.6% | 2022-08-23 | |
| CVE-2022-28882 | F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service | 7.5v3.1 | 0.4% | 2022-08-23 | |
| CVE-2022-27637 | PukiWiki Development Team PukiWiki reflected cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2022-25888 | opcua denial of service (DoS) | 7.5v3.1 | 1.3% | 2022-08-23 | Fix |
| CVE-2022-25761 | open62541/open62541 denial of service (DoS) | 7.5v3.1 | 1.4% | 2022-08-23 | Fix |
| CVE-2022-25304 | opcua denial of service (DoS) | 7.5v3.1 | 1.3% | 2022-08-23 | Fix |
| CVE-2022-25302 | ASNeG/OpcUaStack denial of service (DoS) | 7.5v3.1 | 0.8% | 2022-08-23 | |
| CVE-2022-25231 | node-opcua denial of service (DoS) | 7.5v3.1 | 1.3% | 2022-08-23 | Fix |
| CVE-2022-24381 | ASNeG/OpcUaStack denial of service (DoS) | 7.5v3.1 | 0.9% | 2022-08-23 | |
| CVE-2022-24298 | FreeOpcUa/freeopcua denial of service (DoS) | 7.5v3.1 | 0.9% | 2022-08-23 | |
| CVE-2022-21208 | node-opcua denial of service (DoS) | 7.5v3.1 | 1.6% | 2022-08-23 | Fix |
| CVE-2022-2965 | Improper restriction of rendered UI layers or frames in notrinos/Notrinoserp | 4.3v3.1 | 0.7% | 2022-08-23 | Fix |
| CVE-2022-2956 | ConsoleTVs Noxen users.php cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-23 | |
| CVE-2022-2946 | vim/vim GitHub repository use-after-free | 7.8NVD v3.1 | 0.5% | 2022-08-23 | Fix |
| CVE-2022-2938 | kernel use-after-free | 7.8NVD v3.1 | 0.3% | 2022-08-23 | Fix |
| CVE-2022-2829 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4NVD v3.1 | 0.8% | 2022-08-23 | Fix |
| CVE-2022-2796 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 4.8v3.1 | 1.6% | 2022-08-23 | Fix |
| CVE-2022-1989 | CODESYS Visualization login dialog vulnerability | 5.3v3.1 | 0.8% | 2022-08-23 | Fix |
| CVE-2022-1513 | Lenovo PC Manager OS command injection | 7.3CNA v3.1 | 0.6% | 2022-08-23 | Fix |
| CVE-2022-38668 | Crowcpp Crow uninitialized resource use | 7.5v3.1 | 1.4% | 2022-08-22 | |
| CVE-2022-38667 | Crowcpp Crow use-after-free | 9.8v3.1 | 2.9% | 2022-08-22 | |
| CVE-2022-38171 | Xpdfreader Xpdf integer overflow | 7.8v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2022-37134 | D-Link DIR-816 improper quantity validation | 9.8v3.1 | 21.2% | 2022-08-22 | |
| CVE-2022-37133 | D-Link DIR-816 improper resource release | 7.5v3.1 | 1.3% | 2022-08-22 | |
| CVE-2022-36346 | MaxButtons WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-36251 | oretnom23 Clinics Patient Management System cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-22 | |
| CVE-2022-36198 | PHPGurukul Bus Pass Management System SQL injection | 9.8v3.1 | 1.2% | 2022-08-22 | |
| CVE-2022-35656 | Pegasystems Pega Infinity cross-site request forgery | 6.8CNA v3.0 | 0.3% | 2022-08-22 | Fix |
| CVE-2022-35655 | Pegasystems Pega Infinity cross-site scripting | 6.1CNA v3.0 | 0.5% | 2022-08-22 | Fix |
| CVE-2022-35654 | Pegasystems Pega Infinity cross-site scripting | 6.1CNA v3.0 | 0.5% | 2022-08-22 | Fix |
| CVE-2022-35583 | wkhtmltopdf server-side request forgery | 9.8v3.1 | 16.4% | 2022-08-22 | Exploit codeFix |
| CVE-2022-35150 | Baijiacms unrestricted file upload | 9.8v3.1 | 1.2% | 2022-08-22 | |
| CVE-2022-34858 | OAuth 2.0 client for SSO WordPress plugin authentication bypass | 9.8v3.1 | 1.7% | 2022-08-22 | Fix |
| CVE-2022-34857 | SP Project and Document Manager WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2022-34776 | Tabit information disclosure | 7.5v3.1 | 0.5% | 2022-08-22 | |
| CVE-2022-34775 | Tabit Excessive data exposure | 7.5v3.1 | 0.5% | 2022-08-22 | |
| CVE-2022-34774 | Tabit account details endpoint vulnerability | 5.3v3.1 | 0.4% | 2022-08-22 | |
| CVE-2022-34773 | Tabit HTTP method manipulation | 9.8v3.1 | 0.6% | 2022-08-22 | |
| CVE-2022-34772 | Tabit OTP login vulnerability | 8.8v3.1 | 0.5% | 2022-08-22 | |
| CVE-2022-34771 | Tabit arbitrary SMS send on Tabits behalf | 3.5NVD v3.1 | 0.4% | 2022-08-22 | |
| CVE-2022-34770 | Tabit sensitive information disclosure | 7.5v3.1 | 0.4% | 2022-08-22 | |
| CVE-2022-34652 | WWBN AVideo ObjectYPT functionality SQL injection | 8.8v3.1 | 1.1% | 2022-08-22 | |
| CVE-2022-34347 | Download Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-34149 | WP OAuth Server WordPress plugin authentication bypass | 9.8v3.1 | 1.3% | 2022-08-22 | Fix |
| CVE-2022-33932 | Dell PowerScale OneFS primary channel vulnerability | 5.3CNA v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-33900 | Easy Digital Downloads WordPress plugin PHP object injection | 7.2v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-33149 | WWBN AVideo ObjectYPT functionality SQL injection | 8.8v3.1 | 1.8% | 2022-08-22 | |
| CVE-2022-33148 | WWBN AVideo ObjectYPT functionality SQL injection | 8.8v3.1 | 1.1% | 2022-08-22 | |
| CVE-2022-33147 | WWBN AVideo ObjectYPT functionality SQL injection | 8.8v3.1 | 1.8% | 2022-08-22 | |
| CVE-2022-32778 | WWBN AVideo cookie functionality information disclosure | 7.5v3.1 | 2.3% | 2022-08-22 | |
| CVE-2022-32777 | WWBN AVideo cookie functionality information disclosure | 7.5v3.1 | 2.3% | 2022-08-22 | |
| CVE-2022-32772 | WWBN AVideo footer alerts functionality cross-site scripting | 6.1NVD v3.1 | 4.0% | 2022-08-22 | Nuclei |
| CVE-2022-32771 | WWBN AVideo footer alerts functionality cross-site scripting | 6.1NVD v3.1 | 4.2% | 2022-08-22 | Nuclei |
| CVE-2022-32770 | WWBN AVideo footer alerts functionality cross-site scripting | 6.1NVD v3.1 | 4.4% | 2022-08-22 | Nuclei |
| CVE-2022-32769 | WWBN AVideo objects id handling functionality authentication bypass | 5.0v3.1 | 0.8% | 2022-08-22 | |
| CVE-2022-32768 | WWBN AVideo objects id handling functionality authentication bypass | 4.2v3.1 | 0.9% | 2022-08-22 | |
| CVE-2022-32761 | WWBN AVideo An information disclosure | 6.5v3.1 | 2.7% | 2022-08-22 | |
| CVE-2022-32572 | WWBN AVideo An OS command injection | 8.8NVD v3.1 | 24.4% | 2022-08-22 | |
| CVE-2022-32480 | Dell PowerScale OneFS insecure default initialization | 4.3CNA v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-32282 | WWBN AVideo login functionality vulnerability | 8.8v3.1 | 1.8% | 2022-08-22 | |
| CVE-2022-31238 | Dell PowerScale OneFS information disclosure | 4.7CNA v3.1 | 0.2% | 2022-08-22 | Fix |
| CVE-2022-31237 | Dell PowerScale OneFS improper preservation of permissions | 3.3CNA v3.1 | 0.2% | 2022-08-22 | Fix |
| CVE-2022-30690 | WWBN AVideo image403 functionality cross-site scripting | 6.1NVD v3.1 | 83.9% | 2022-08-22 | |
| CVE-2022-30605 | WWBN AVideo session id functionality privilege escalation | 8.8v3.1 | 4.8% | 2022-08-22 | |
| CVE-2022-30547 | WWBN AVideo unzipDirectory functionality path traversal | 9.9v3.1 | 63.7% | 2022-08-22 | |
| CVE-2022-30534 | WWBN AVideo An OS command injection | 8.8NVD v3.1 | 75.0% | 2022-08-22 | |
| CVE-2022-29468 | WWBN AVideo cross-site request forgery | 8.8v3.1 | 1.7% | 2022-08-22 | |
| CVE-2022-28712 | WWBN AVideo videoAddNew functionality cross-site scripting | 9.0v3.1 | 3.0% | 2022-08-22 | |
| CVE-2022-28710 | WWBN AVideo chunkFile functionality information disclosure | 6.5v3.1 | 2.6% | 2022-08-22 | |
| CVE-2022-28598 | frappe erpnext cross-site scripting | 6.1v3.1 | 4.0% | 2022-08-22 | Exploit code |
| CVE-2022-26842 | WWBN AVideo charts tab selection functionality reflected cross-site scripting | 9.6v3.1 | 3.8% | 2022-08-22 | |
| CVE-2022-26061 | HDF5 Group libhdf5 gif2h5 functionality heap-based buffer overflow | 7.8v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2022-25972 | HDF5 Group libhdf5 gif2h5 functionality out-of-bounds write | 7.8v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2022-25942 | HDF5 Group libhdf5 gif2h5 functionality out-of-bounds read | 7.8v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2022-25812 | Transposh WordPress Translation plugin Admin+ RCE | 7.2NVD v3.1 | 1.7% | 2022-08-22 | Fix |
| CVE-2022-25811 | Transposh WordPress Translation plugin Admin+ SQL injection | 7.2NVD v3.1 | 1.4% | 2022-08-22 | Fix |
| CVE-2022-25810 | Transposh WordPress Translation plugin Subscriber+ Unauthorised Calls | 6.5NVD v3.1 | 1.0% | 2022-08-22 | Fix |
| CVE-2022-2932 | Cross-site scripting (XSS) Reflected in bustle/mobiledoc-kit | 6.1NVD v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-2930 | Unverified password change in OctoPrint/OctoPrint | 7.8v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2022-2927 | Weak password requirements in notrinos/Notrinoserp | 9.8v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-2923 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.5% | 2022-08-22 | Fix |
| CVE-2022-2890 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4NVD v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-2873 | Linux kernel An out-of-bounds access | 5.5NVD v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2022-2842 | SourceCodester Gym Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2022-08-22 | |
| CVE-2022-2841 | CrowdStrike Falcon uninstallation handler missing authorization | 2.7v3.1 | 4.8% | 2022-08-22 | Exploit code |
| CVE-2022-2600 | Auto-hyperlink URLs WordPress plugin Tab Nabbing | 5.4NVD v3.1 | 0.6% | 2022-08-22 | |
| CVE-2022-2594 | Advanced Custom Fields unauthenticated file upload | 8.8NVD v3.1 | 1.6% | 2022-08-22 | Fix |
| CVE-2022-2593 | Better Search and Replace WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.3% | 2022-08-22 | Fix |
| CVE-2022-2558 | Simple Job Board WordPress plugin Resume disclosure via directory listing | 5.3NVD v3.1 | 1.0% | 2022-08-22 | Fix |
| CVE-2022-2557 | WordPress Team Members Showcase plugin Subscriber+ arbitrary file read and deletion | 8.8NVD v3.1 | 1.6% | 2022-08-22 | Fix |
| CVE-2022-2555 | Yotpo Reviews for WooCommerce WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.4% | 2022-08-22 | |
| CVE-2022-2552 | Duplicator WordPress plugin unauthenticated system information disclosure | 5.3NVD v3.1 | 11.3% | 2022-08-22 | NucleiExploit codeFix |
| CVE-2022-2551 | Duplicator WordPress plugin unauthenticated Backup download | 7.5NVD v3.1 | 17.7% | 2022-08-22 | NucleiExploit codeFix |
| CVE-2022-2544 | Ninja Job Board WordPress plugin Resume disclosure via directory listing | 7.5NVD v3.1 | 4.3% | 2022-08-22 | NucleiFix |
| CVE-2022-2532 | Feed Them Social WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2022-08-22 | Fix |
| CVE-2022-2407 | WP phpMyAdmin WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-08-22 | Fix |
| CVE-2022-2392 | Lana Downloads Manager WordPress plugin Contributor+ arbitrary file download | 6.5NVD v3.1 | 1.1% | 2022-08-22 | Fix |
| CVE-2022-2389 | Automations By Autonami WordPress plugin Subscriber+ Automation creation | 4.3NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-2388 | WP Coder WordPress plugin code deletion via CSRF | 6.5NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-2383 | Feed Them Social WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 6.5% | 2022-08-22 | NucleiFix |
| CVE-2022-2382 | Product Slider for WooCommerce WordPress plugin Subscriber+ arbitrary options deletion | 4.3NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-2377 | Directorist WordPress plugin Subscriber+ arbitrary E-mail Sending | 4.3NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-2375 | WP Sticky Button WordPress plugin unauthenticated arbitrary settings update to stored XSS | 5.4NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-2362 | Download Manager WordPress plugin bypass IP Address Blocking Restriction | 7.5NVD v3.1 | 1.2% | 2022-08-22 | Fix |
| CVE-2022-2361 | Social Chat WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2022-2312 | Student Result or Employee Database WordPress plugin stored cross-site scripting via CSRF | 5.4NVD v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2022-2276 | WP Edit Menu WordPress plugin unauthenticated arbitrary post deletion | 4.3NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-2275 | WP Edit Menu WordPress plugin arbitrary post deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2022-08-22 | Fix |
| CVE-2022-2198 | WPQA WordPress plugin Subscriber+ Private Message disclosure via IDOR | 4.3NVD v3.1 | 0.7% | 2022-08-22 | Fix |
| CVE-2022-2172 | LinkWorth WordPress plugin arbitrary setting update via CSRF | 4.3NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-1932 | Rezgo Online Booking WordPress plugin reflected cross-site-scripting | 6.1NVD v3.1 | 0.6% | 2022-08-22 | Fix |
| CVE-2022-1930 | ReDoS in eth-account encode_structured_data function | 7.5NVD v3.1 | 0.9% | 2022-08-22 | Fix |
| CVE-2022-1340 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4NVD v3.1 | 0.5% | 2022-08-22 | Fix |
| CVE-2022-1322 | Coming Soon - Under Construction WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-08-22 | |
| CVE-2022-1251 | Ask Me WordPress theme CSRF in Edit Profile | 4.3NVD v3.1 | 0.4% | 2022-08-22 | Fix |
| CVE-2022-0446 | Simple Banner WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-08-22 | Fix |
| CVE-2022-34916 | Apache Flume improper input validation (JNDI injection) in JMSMessageConsumer | 9.8v3.1 | 2.8% | 2022-08-21 | Fix |
| CVE-2022-30036 | Malighting Grandma2 Light hard-coded credentials | 8.8v3.1 | 0.8% | 2022-08-21 | Fix |
| CVE-2022-2921 | Exposure of private personal information to an unauthorized actor in notrinos/Notrinoserp | 8.8v3.1 | 1.3% | 2022-08-21 | Fix |
| CVE-2022-2885 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 4.8v3.1 | 0.5% | 2022-08-21 | Fix |
| CVE-2022-38493 | Rhonabwy weak cryptographic algorithm | 7.5v3.1 | 0.3% | 2022-08-20 | Fix |
| CVE-2022-36030 | SQL injection in Project-Nexus | 9.8CNA v3.1 | 0.8% | 2022-08-20 | |
| CVE-2022-2909 | SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload | 8.8v3.1 | 0.8% | 2022-08-20 | |
| CVE-2022-37254 | DolphinPHP cross-site scripting | 5.4v3.1 | 0.5% | 2022-08-19 | |
| CVE-2022-37175 | Tenda AC15 Firmware out-of-bounds write | 9.8v3.1 | 1.0% | 2022-08-19 | |
| CVE-2022-36606 | Yimihome ywoa SQL injection | 9.8v3.1 | 1.0% | 2022-08-19 | |
| CVE-2022-36605 | Yimihome ywoa SQL injection | 9.8v3.1 | 0.8% | 2022-08-19 | |
| CVE-2022-36579 | Wellcms cross-site request forgery | 8.8v3.1 | 0.4% | 2022-08-19 | |
| CVE-2022-36578 | jizhiCMS SQL injection | 9.8v3.1 | 0.9% | 2022-08-19 | |
| CVE-2022-36577 | jizhiCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2022-08-19 | |
| CVE-2022-36263 | Logitech Streamlabs Desktop arbitrary code execution | 7.3v3.1 | 0.4% | 2022-08-19 | |
| CVE-2022-36233 | Tendacn AC9 out-of-bounds write | 5.5v3.1 | 0.3% | 2022-08-19 | |
| CVE-2022-36225 | EyouCMS cross-site request forgery | 8.8v3.1 | 0.5% | 2022-08-19 | |
| CVE-2022-36224 | XunRuiCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2022-08-19 | |
| CVE-2022-36220 | Ethz Safe Exam Browser code execution | 9.8v3.1 | 1.1% | 2022-08-19 | Fix |
| CVE-2022-36171 | Mapgis Igserver hard-coded credentials | 8.1v3.1 | 0.7% | 2022-08-19 | |
| CVE-2022-36170 | Mapgis Igserver hard-coded credentials | 8.8v3.1 | 0.9% | 2022-08-19 | |
| CVE-2022-36157 | Improper privilege management in com.Xuxueli:xxl-job | 8.8v3.1 | 1.5% | 2022-08-19 | Fix |
| CVE-2022-36031 | directus unhandled exception on illegal filename_disk value | 6.5CNA v3.1 | 1.0% | 2022-08-19 | Fix |
| CVE-2022-36009 | Incorrect parsing of access level in gomatrixserverlib and dendrite | 5.0CNA v3.1 | 0.8% | 2022-08-19 | Fix |
| CVE-2022-36008 | Message length overflow in frontier | 7.1CNA v3.1 | 1.2% | 2022-08-19 | |
| CVE-2022-35910 | jellyfin cross-site scripting | 5.4v3.1 | 0.8% | 2022-08-19 | |
| CVE-2022-35909 | Incorrect Access Control and cross-site scripting in Jellyfin | 8.8v3.1 | 1.6% | 2022-08-19 | Fix |
| CVE-2022-35692 | Adobe Commerce improper access control security feature bypass | 5.3CNA v3.1 | 0.8% | 2022-08-19 | Fix |
| CVE-2022-35554 | Bpcbt Smartvista cross-site scripting | 6.1v3.1 | 0.5% | 2022-08-19 | |
| CVE-2022-35201 | Tenda AC18 remote command execution | 9.8v3.1 | 3.4% | 2022-08-19 | |
| CVE-2022-35167 | Prinitix Cloud Print Management incorrect permission assignment | 8.8v3.1 | 0.8% | 2022-08-19 | |
| CVE-2022-34624 | mealie insufficient session expiration | 5.9v3.1 | 0.6% | 2022-08-19 | |
| CVE-2022-34621 | mealie insecure direct object reference | 6.5v3.1 | 1.0% | 2022-08-19 | Fix |
| CVE-2022-34615 | mealie weak password requirements | 9.8v3.1 | 1.5% | 2022-08-19 | Fix |
| CVE-2022-29805 | Fishbowlinventory Fishbowl Java deserialization of untrusted data | 9.8v3.1 | 27.4% | 2022-08-19 | |
| CVE-2022-23460 | Stack overflow in Jsonxx | 7.5NVD v3.1 | 0.7% | 2022-08-19 | |
| CVE-2022-23459 | Double free or use-after-free in Value class of Jsonxx | 9.8NVD v3.1 | 0.9% | 2022-08-19 | |
| CVE-2022-22489 | IBM MQ XML external entity injection | 8.2CNA v3.0 | 1.7% | 2022-08-19 | Fix |
| CVE-2022-2889 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-08-19 | Fix |
| CVE-2022-2886 | Laravel deserialization | 8.8v3.1 | 0.7% | 2022-08-19 | Fix |
| CVE-2022-2793 | Emerson Electric Proficy Machine Edition missing integrity check | 7.8v3.1 | 0.1% | 2022-08-19 | |
| CVE-2022-2792 | Emerson Electric Proficy Machine Edition improper access control | 7.5v3.1 | 0.4% | 2022-08-19 | |
| CVE-2022-2790 | Emerson Electric Proficy Machine Edition improper signature verification | 5.9v3.1 | 0.1% | 2022-08-19 | |
| CVE-2022-2789 | Emerson Electric Proficy Machine Edition insufficient verification of data authenticity | 5.5v3.1 | 0.1% | 2022-08-19 | |
| CVE-2022-2788 | Emerson Electric Proficy Machine Edition path traversal | 7.3v3.1 | 0.2% | 2022-08-19 | Fix |
| CVE-2022-2075 | Octopus Deploy Octopus Server denial of service | 7.5v3.1 | 0.7% | 2022-08-19 | Fix |
| CVE-2022-2074 | Octopus Deploy Octopus Server denial of service | 7.5v3.1 | 0.8% | 2022-08-19 | Fix |
| CVE-2022-2049 | Octopus Deploy Octopus Server denial of service | 7.5v3.1 | 0.7% | 2022-08-19 | Fix |
| CVE-2022-1901 | Octopus Deploy Octopus Server improper privilege management | 5.3v3.1 | 0.5% | 2022-08-19 | Fix |
| CVE-2022-1021 | Insecure storage of sensitive information in chatwoot/chatwoot | 5.4NVD v3.1 | 0.7% | 2022-08-19 | Fix |
| CVE-2022-0542 | Cross-site scripting (XSS) DOM in chatwoot/chatwoot | 6.1NVD v3.1 | 0.9% | 2022-08-19 | Fix |
| CVE-2022-37770 | JPEG Libjpeg denial of service | 6.5v3.1 | 0.7% | 2022-08-18 | Fix |
| CVE-2022-37769 | JPEG Libjpeg denial of service | 6.5v3.1 | 0.7% | 2022-08-18 | Fix |
| CVE-2022-37768 | JPEG Libjpeg infinite loop | 7.5v3.1 | 1.0% | 2022-08-18 | Fix |
| CVE-2022-37422 | Path traversal in Payara | 7.5v3.1 | 1.1% | 2022-08-18 | Exploit codeFix |
| CVE-2022-37063 | Flir AX8 cross-site scripting | 5.4v3.1 | 1.6% | 2022-08-18 | Fix |
| CVE-2022-37062 | Flir AX8 missing authentication | 7.5v3.1 | 3.1% | 2022-08-18 | Fix |
| CVE-2022-37061 | Flir AX8 OS command injection | 9.8v3.1 | 99.6% | 2022-08-18 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-37060 | Flir AX8 path traversal | 7.5v3.1 | 18.0% | 2022-08-18 | Fix |
| CVE-2022-37049 | Broadcom tcpreplay out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-37048 | Broadcom tcpreplay out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-37047 | Broadcom tcpreplay out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-37025 | McAfee Security Scan Plus improper privilege management | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-36947 | FastStone Image Viewer out-of-bounds write | 9.8v3.1 | 2.8% | 2022-08-18 | Fix |
| CVE-2022-36729 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-36728 | Library Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-18 | |
| CVE-2022-36727 | Library Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-36725 | Library Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-18 | |
| CVE-2022-36722 | Library Management System SQL injection | 9.8v3.1 | 1.0% | 2022-08-18 | |
| CVE-2022-36024 | Pycord Development pycord slash command handling vulnerability | 7.5CNA v3.1 | 0.8% | 2022-08-18 | Fix |
| CVE-2022-36023 | Remote denial of service in Hyperledger Fabric Gateway | 7.0CNA v3.1 | 1.1% | 2022-08-18 | Fix |
| CVE-2022-35976 | weaveworks vscode-gitops-tools improper KubeConfig handling allows arbitrary code execution | 5.2CNA v3.1 | 0.5% | 2022-08-18 | |
| CVE-2022-35975 | Improper object validation allows for arbitrary code execution in GitOps Tools extension for VSCode | 9.0CNA v3.1 | 1.3% | 2022-08-18 | |
| CVE-2022-35606 | Inventory Management System SQL injection | 9.8v3.1 | 0.8% | 2022-08-18 | |
| CVE-2022-35605 | Inventory Management System SQL injection | 9.8v3.1 | 0.8% | 2022-08-18 | |
| CVE-2022-35603 | Inventory Management System SQL injection | 9.8v3.1 | 0.8% | 2022-08-18 | |
| CVE-2022-35602 | Inventory Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-35601 | Inventory Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-35599 | Inventory Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-35598 | Inventory Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-35540 | Dotnetcore Agileconfig use of hard-coded credentials in AgileConfig.Client | 9.8v3.1 | 1.4% | 2022-08-18 | Fix |
| CVE-2022-35213 | Ecommerce-CodeIgniter-Bootstrap cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-18 | |
| CVE-2022-35212 | Os Commerce cross-site scripting | 6.1v3.1 | 0.5% | 2022-08-18 | Fix |
| CVE-2022-35204 | Vite vulnerable to directory traversal via crafted URL to victim's service | 4.3v3.1 | 1.2% | 2022-08-18 | Fix |
| CVE-2022-35198 | Contract Management System Project Contract Managment System improper authentication | 7.5v3.1 | 0.8% | 2022-08-18 | |
| CVE-2022-35175 | Barangay Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-18 | |
| CVE-2022-35174 | Cross-site scripting in getkirby/Starterkit | 5.4v3.1 | 0.7% | 2022-08-18 | |
| CVE-2022-35173 | nginx Njs improper check for exceptional conditions | 7.5v3.1 | 1.3% | 2022-08-18 | Fix |
| CVE-2022-35166 | JPEG Libjpeg infinite loop | 5.5v3.1 | 0.3% | 2022-08-18 | |
| CVE-2022-35165 | Axiosys Bento4 infinite loop | 5.5v3.1 | 0.3% | 2022-08-18 | |
| CVE-2022-35164 | GNU LibreDWG use-after-free | 9.8v3.1 | 1.0% | 2022-08-18 | Fix |
| CVE-2022-35154 | Shopro Mall System SQL injection | 9.8v3.1 | 1.0% | 2022-08-18 | |
| CVE-2022-35153 | FusionPBX command injection | 9.8v3.1 | 1.8% | 2022-08-18 | |
| CVE-2022-34488 | Intel(R) NUC Laptop Kits privilege escalation | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-34345 | Intel(R) NUC Laptop Kits firmware for some improper input validation | 6.2v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-33311 | Cybozu Office Address Book information disclosure | 4.3v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-33209 | Intel(R) NUC Laptop Kits firmware for some improper input validation | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-33151 | Cybozu Office specific parameters cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-18 | Fix |
| CVE-2022-32583 | Cybozu Office Scheduler vulnerability | 4.3v3.1 | 0.8% | 2022-08-18 | Fix |
| CVE-2022-32579 | Intel(R) NUC Laptop Kits firmware for some improper initialization | 7.2v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-32544 | Cybozu Office Project vulnerability | 4.3v3.1 | 0.8% | 2022-08-18 | Fix |
| CVE-2022-32453 | Cybozu Office HTTP header injection | 6.5v3.1 | 0.7% | 2022-08-18 | Fix |
| CVE-2022-32283 | Cybozu Office Cabinet vulnerability | 4.3v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-30944 | Intel(R) AMT and Intel(R) Standard Manageability insufficiently protected credentials | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-30693 | Cybozu Office system configuration information disclosure | 5.3v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-30604 | Cybozu Office specific parameters cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-18 | Fix |
| CVE-2022-30601 | Intel(R) AMT and Intel(R) Standard Manageability insufficiently protected credentials | 9.8v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-30296 | Intel Datacenter Group Event Intel(R) insufficiently protected credentials | 7.5v3.1 | 0.7% | 2022-08-18 | Fix |
| CVE-2022-29891 | Cybozu Office Custom App vulnerability | 4.3v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-29550 | Qualys Cloud Agent sensitive information in log files | 5.5v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-29549 | Qualys Cloud Agent For Linux improper integrity check validation | 7.3v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-29507 | Intel Team Blue Intel(R) insufficiently protected credentials | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-29487 | Cybozu Office cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-18 | Fix |
| CVE-2022-28858 | Intel(R) NUC Laptop Kits privilege escalation | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-28757 | Local privilege escalation in Auto Updater for Zoom Client for Meetings for macOS | 8.8CNA v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-28715 | Cybozu Office specific parameters cross-site scripting | 6.1v3.1 | 0.6% | 2022-08-18 | Fix |
| CVE-2022-28709 | Intel(R) E810 Ethernet Controllers firmware for some improper access control | 4.4v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-28697 | Intel(R) AMT and Intel(R) Standard Manageability firmware improper access control | 6.8v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-28696 | Intel(R) Distribution for Python uncontrolled search path | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-27500 | Intel(R) Support Android application incorrect default permissions | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-27493 | Intel(R) NUC Laptop Kits firmware for some improper initialization | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-26844 | version insufficiently protected credentials | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-26374 | version installation binaries for Intel(R) SEAPI all uncontrolled search path | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-26373 | Intel(R) Processors information disclosure | 5.5NVD v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-26344 | version installation binaries for Intel(R) SEAPI all incorrect default permissions | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-26074 | Intel(R) SPS firmware subsystem incomplete cleanup | 4.4v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-26017 | Intel(R) DSA software for improper access control | 8.0v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-25999 | Intel Enpirion Digital Power Configurator Gui uncontrolled search path | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-25986 | Cybozu Office Scheduler information disclosure | 4.3v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-25966 | Intel(R) Edge Insights for Industrial software improper access control | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-25899 | Intel(R) incorrect default permissions | 9.8v3.1 | 1.1% | 2022-08-18 | Fix |
| CVE-2022-25841 | Intel Datacenter Group Event Intel(R) uncontrolled search path | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-25228 | CandidATS SQL injection | 6.5v3.1 | 1.0% | 2022-08-18 | Fix |
| CVE-2022-24378 | Intel(R) Data Center Manager software improper initialization | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-23403 | Intel(R) Data Center Manager software improper input validation | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-23182 | Intel(R) Data Center Manager software improper access control | 8.8v3.1 | 0.4% | 2022-08-18 | Fix |
| CVE-2022-22730 | Intel(R) Edge Insights for Industrial software improper authentication | 9.8v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-21812 | Intel(R) HAXM software improper access control | 7.8v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-21807 | Intel(R) VTune(TM) Profiler software uncontrolled search path | 7.8v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-21793 | Intel(R) Ethernet 500 Series Controller drivers for VMWare insufficient control flow management | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21240 | Intel(R) PROSet/Wireless WiFi products out-of-bounds read | 4.4v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21233 | Intel(R) Processors some improper isolation | 5.5v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-21229 | Intel(R) NUC 9 Extreme Laptop Kit drivers privilege escalation | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21225 | Intel(R) Data Center Manager software improper neutralization | 8.0v3.1 | 1.6% | 2022-08-18 | Fix |
| CVE-2022-21212 | Intel(R) PROSet/Wireless WiFi products improper input validation | 6.5v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-21197 | Intel(R) PROSet/Wireless WiFi products improper input validation | 7.5v3.1 | 0.8% | 2022-08-18 | Fix |
| CVE-2022-21181 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper input validation | 7.8v3.1 | 0.3% | 2022-08-18 | Fix |
| CVE-2022-21172 | Intel(R) PROSet/Wireless WiFi products out-of-bounds write | 6.7v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21160 | Intel(R) PROSet/Wireless WiFi products denial of service | 7.5v3.1 | 0.8% | 2022-08-18 | Fix |
| CVE-2022-21152 | Intel(R) Edge Insights for Industrial software improper access control | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21148 | Intel(R) Edge Insights for Industrial software improper access control | 7.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21140 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper access control | 5.5v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-21139 | Intel(R) PROSet/Wireless WiFi products inadequate encryption strength | 8.8v3.1 | 0.2% | 2022-08-18 | Fix |
| CVE-2022-2876 | SourceCodester Student Management System index.php SQL injection | 9.8v3.1 | 0.7% | 2022-08-18 | |
| CVE-2022-2874 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.5% | 2022-08-18 | Fix |
| CVE-2022-2625 | PostgreSQL mass assignment | 8.0NVD v3.1 | 1.9% | 2022-08-18 | Fix |
| CVE-2022-2568 | Red Hat Ansible Automation Platform privilege escalation | 6.5v3.1 | 0.9% | 2022-08-18 | Fix |
| CVE-2022-38392 | Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported produc | 5.3v3.1 | 0.4% | 2022-08-17 | |
| CVE-2022-38149 | HashiCorp Consul Template could reveal Vault secret contents in error messages | 7.5v3.1 | 0.8% | 2022-08-17 | Fix |
| CVE-2022-37459 | Amperecomputing Ampere Altra Max observable discrepancy | 7.8v3.1 | 0.2% | 2022-08-17 | Fix |
| CVE-2022-36216 | DedeCMS code injection | 7.2v3.1 | 2.1% | 2022-08-17 | |
| CVE-2022-36215 | Dedebiz Dedecmsv6 remote code execution | 7.2v3.1 | 2.2% | 2022-08-17 | |
| CVE-2022-36191 | gpac out-of-bounds write | 5.5v3.1 | 0.4% | 2022-08-17 | Fix |
| CVE-2022-36190 | gpac use-after-free | 9.8v3.1 | 1.0% | 2022-08-17 | Fix |
| CVE-2022-36186 | gpac null pointer dereference | 7.5v3.1 | 0.9% | 2022-08-17 | Fix |
| CVE-2022-35516 | DedeCMS code injection | 9.8v3.1 | 2.5% | 2022-08-17 | |
| CVE-2022-35151 | Keking kkFileView cross-site scripting | 6.1v3.1 | 1.4% | 2022-08-17 | Nuclei |
| CVE-2022-35148 | MacCMS SQL injection | 6.5v3.1 | 0.7% | 2022-08-17 | |
| CVE-2022-35147 | Html-js DoraCMS information disclosure | 9.8v3.1 | 1.4% | 2022-08-17 | |
| CVE-2022-35133 | Cherrytree A cross-site scripting | 6.1v3.1 | 0.5% | 2022-08-17 | Fix |
| CVE-2022-35122 | Ecowitt GW1100 An improper access control | 9.1v3.1 | 1.1% | 2022-08-17 | |
| CVE-2022-35121 | xxyopen Novel-Plus SQL injection | 9.8v3.1 | 0.9% | 2022-08-17 | |
| CVE-2022-35117 | oretnom23 Clinics Patient Management System cross-site scripting | 4.8v3.1 | 0.6% | 2022-08-17 | |
| CVE-2022-31262 | GOG galaxy local privilege escalation | 7.8v3.1 | 0.5% | 2022-08-17 | Exploit code |
| CVE-2022-30262 | Emerson Controlwave Micro insufficient verification of data authenticity | 7.8v3.1 | 0.2% | 2022-08-17 | Fix |
| CVE-2022-28752 | Local privilege escalation in the Zoom Rooms for Windows client | 8.8CNA v3.1 | 0.1% | 2022-08-17 | Fix |
| CVE-2022-28751 | Local privilege escalation in Zoom Client for Meetings for MacOS | 8.8CNA v3.1 | 0.1% | 2022-08-17 | Fix |
| CVE-2022-23765 | Iptime NAS family CSRF | 8.8v3.1 | 0.5% | 2022-08-17 | Fix |
| CVE-2022-23764 | TERUTEN WebCube update remote code execution | 9.8v3.1 | 0.7% | 2022-08-17 | Fix |
| CVE-2022-23747 | Sony Xperia buffer overflow | 9.8NVD v3.1 | 10.2% | 2022-08-17 | |
| CVE-2022-22455 | IBM Security Verify Governance Identity Manager virtual appliance vulnerability | 2.3CNA v3.0 | 0.5% | 2022-08-17 | Fix |
| CVE-2022-2871 | Cross-site scripting (XSS) Stored in notrinos/Notrinoserp | 5.4v3.1 | 0.6% | 2022-08-17 | Fix |
| CVE-2022-2870 | Laravel deserialization | 9.8v3.1 | 0.8% | 2022-08-17 | Fix |
| CVE-2022-2869 | libtiff integer underflow | 5.5NVD v3.1 | 0.3% | 2022-08-17 | Fix |
| CVE-2022-2868 | libtiff improper input validation | 5.5NVD v3.1 | 0.3% | 2022-08-17 | Fix |
| CVE-2022-2867 | libtiff integer underflow | 5.5NVD v3.1 | 0.3% | 2022-08-17 | Fix |
| CVE-2022-2862 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.9% | 2022-08-17 | Fix |
| CVE-2022-2849 | Heap-based buffer overflow in Vim/Vim | 7.8NVD v3.1 | 0.5% | 2022-08-17 | Fix |
| CVE-2022-2845 | Improper validation of specified quantity in input in Vim/Vim | 7.8NVD v3.1 | 0.5% | 2022-08-17 | Fix |
| CVE-2022-2547 | Softing Secure Integration Server null pointer dereference | 7.5v3.1 | 1.5% | 2022-08-17 | |
| CVE-2022-2338 | Softing Secure Integration Server cleartext transmission of sensitive information | 5.3v3.1 | 0.2% | 2022-08-17 | |
| CVE-2022-2337 | Softing Secure Integration Server null pointer dereference | 7.5v3.1 | 1.5% | 2022-08-17 | |
| CVE-2022-2336 | Softing Secure Integration Server improper authentication | 9.8v3.1 | 1.0% | 2022-08-17 | |
| CVE-2022-2335 | Softing Secure Integration Server integer underflow | 7.5v3.1 | 1.5% | 2022-08-17 | |
| CVE-2022-2334 | Softing Secure Integration Server uncontrolled search path element | 7.2v3.1 | 12.2% | 2022-08-17 | MetasploitExploit codeKCV |
| CVE-2022-1748 | Softing Secure Integration Server null pointer dereference | 7.5v3.1 | 1.0% | 2022-08-17 | |
| CVE-2022-1410 | Remote code execution in Device42 ApplianceManager console | 8.8NVD v3.1 | 1.1% | 2022-08-17 | Fix |
| CVE-2022-1401 | Device42 CMDB insufficient validation of provided paths in Exago WrImageResource.axd | 7.5NVD v3.1 | 18.4% | 2022-08-17 | Fix |
| CVE-2022-1400 | Device42 CMDB hard-coded encryption key IV in Exago WebReportsApi.dll | 9.8NVD v3.1 | 0.8% | 2022-08-17 | Fix |
| CVE-2022-1399 | Device42 CMDB remote code execution in scheduled tasks component | 9.1NVD v3.1 | 0.9% | 2022-08-17 | Fix |
| CVE-2022-1373 | Softing Secure Integration Server relative path traversal | 7.2v3.1 | 12.8% | 2022-08-17 | MetasploitExploit codeKCV |
| CVE-2022-1069 | Softing Secure Integration Server out-of-bounds read | 7.5v3.1 | 1.5% | 2022-08-17 | |
| CVE-2022-38362 | Apache Airflow docker Provider RCE vulnerability in example dag | 8.8v3.1 | 1.8% | 2022-08-16 | Fix |
| CVE-2022-38238 | Xpdf out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38237 | Xpdf out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38236 | Xpdf buffer overflow | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38235 | Xpdf improper check for exceptional conditions | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38234 | Xpdf improper check for exceptional conditions | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38233 | Xpdf improper check for exceptional conditions | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38231 | Xpdf out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38230 | Xpdf incorrect comparison | 5.5v3.1 | 0.5% | 2022-08-16 | |
| CVE-2022-38229 | Xpdf out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38228 | Xpdf out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38227 | Xpdf out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-38216 | Mapbox is vulnerable to integer overflow | 7.5NVD v3.1 | 0.8% | 2022-08-16 | Fix |
| CVE-2022-38194 | Portal for ArcGIS system properties are not properly encrypted ( only) | 6.7CNA v3.1 | 0.1% | 2022-08-16 | Fix |
| CVE-2022-38193 | Code injection issue in Portal for ArcGIS ( and) | 6.1CNA v3.1 | 0.9% | 2022-08-16 | Fix |
| CVE-2022-38192 | There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript | 6.1CNA v3.1 | 0.6% | 2022-08-16 | Fix |
| CVE-2022-38189 | There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript | 5.4CNA v3.1 | 0.6% | 2022-08-16 | Fix |
| CVE-2022-38184 | There is an improper access control vulnerability in Portal for ArcGIS | 7.5CNA v3.1 | 1.0% | 2022-08-16 | Fix |
| CVE-2022-37781 | Fdkaac out-of-bounds write | 7.8v3.1 | 0.4% | 2022-08-16 | Fix |
| CVE-2022-37439 | Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input | 5.5v3.1 | 0.2% | 2022-08-16 | Fix |
| CVE-2022-37438 | Information disclosure via the dashboard drilldown in Splunk Enterprise | 3.5v3.1 | 0.5% | 2022-08-16 | Fix |
| CVE-2022-37437 | Ingest Actions UI in Splunk Enterprise disabled TLS certificate validation | 9.8v3.1 | 0.4% | 2022-08-16 | Fix |
| CVE-2022-37393 | Zimbra zmslapd arbitrary module load | 7.8NVD v3.1 | 1.7% | 2022-08-16 | Exploit codeFix |
| CVE-2022-36599 | Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List | 9.8v3.1 | 1.1% | 2022-08-16 | |
| CVE-2022-36530 | Rageframe cross-site scripting | 6.1v3.1 | 0.9% | 2022-08-16 | |
| CVE-2022-36381 | Nintendo Wi-Fi Network Adaptor WAP-001 OS command injection | 7.2v3.1 | 1.5% | 2022-08-16 | Fix |
| CVE-2022-36344 | JustSystems JUST Online Update for J-License' unquoted search path | 9.8v3.1 | 0.8% | 2022-08-16 | Fix |
| CVE-2022-36312 | Airspan AirVelocity cross-site request forgery | 8.8NVD v3.1 | 0.3% | 2022-08-16 | Fix |
| CVE-2022-36311 | Airspan AirVelocity cross-site scripting | 6.1NVD v3.1 | 0.4% | 2022-08-16 | Fix |
| CVE-2022-36310 | Airspan AirVelocity 1500 SNMP service vulnerability | 8.8NVD v3.1 | 1.5% | 2022-08-16 | Fix |
| CVE-2022-36309 | Airspan AirVelocity OS command injection | 8.8NVD v3.1 | 24.6% | 2022-08-16 | Fix |
| CVE-2022-36308 | Airspan AirVelocity plaintext password storage | 9.1NVD v3.1 | 0.7% | 2022-08-16 | Fix |
| CVE-2022-36307 | Airspan AirVelocity insufficiently protected credentials | 6.8NVD v3.1 | 0.3% | 2022-08-16 | Fix |
| CVE-2022-36306 | Airspan AirVelocity 1500 web management interface information disclosure | 6.5NVD v3.1 | 1.0% | 2022-08-16 | Fix |
| CVE-2022-36293 | Nintendo Wi-Fi Network Adaptor WAP-001 buffer overflow | 7.2v3.1 | 1.2% | 2022-08-16 | Fix |
| CVE-2022-36273 | Tenda AC9 OS command injection | 9.8v3.1 | 2.4% | 2022-08-16 | |
| CVE-2022-36272 | Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter | 9.8v3.1 | 1.1% | 2022-08-16 | |
| CVE-2022-36242 | oretnom23 Clinics Patient Management System SQL injection | 9.8v3.1 | 0.9% | 2022-08-16 | |
| CVE-2022-36155 | Monostream Tifig resource exhaustion | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36153 | Monostream Tifig null pointer dereference | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36152 | Monostream Tifig memory leak | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36151 | Monostream Tifig null pointer dereference | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36150 | Monostream Tifig out-of-bounds write | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36149 | Monostream Tifig use-after-free | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36148 | Fdkaac incorrect comparison | 5.5v3.1 | 0.5% | 2022-08-16 | Fix |
| CVE-2022-36146 | Swfmill resource exhaustion | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36145 | Swfmill improper check for exceptional conditions | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36144 | Swfmill out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36143 | Swfmill out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36142 | Swfmill out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36141 | Swfmill improper check for exceptional conditions | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36140 | Swfmill improper check for exceptional conditions | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-36139 | Swfmill out-of-bounds write | 7.8v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-35734 | HJ Holdings 'Hulu / フールー' App hard-coded credentials | 7.5v3.1 | 0.7% | 2022-08-16 | Fix |
| CVE-2022-35486 | Otfcc memory corruption | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35485 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35484 | Otfcc null pointer dereference | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35483 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35482 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35481 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35479 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35478 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35477 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35476 | Otfcc out-of-bounds read | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35475 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35474 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35473 | Otfcc improper check for exceptional conditions | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35472 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35471 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35470 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35469 | Otfcc improper check for exceptional conditions | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35468 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35467 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35466 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35465 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35464 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35463 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35462 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35461 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35460 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35459 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35458 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35456 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35455 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35454 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35453 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35452 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35451 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35450 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35449 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35448 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35447 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-08-16 | |
| CVE-2022-35434 | JPEG Quant Smooth incorrect comparison | 5.5v3.1 | 0.5% | 2022-08-16 | Fix |
| CVE-2022-35433 | ffjpeg JFIF parser memory leak | 6.5v3.1 | 0.7% | 2022-08-16 | |
| CVE-2022-35239 | Contec SolarView Compact improper input validation | 8.8v3.1 | 1.4% | 2022-08-16 | Fix |
| CVE-2022-35114 | swftools out-of-bounds read | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-35113 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-35111 | swftools resource exhaustion | 5.5v3.1 | 0.3% | 2022-08-16 | |
| CVE-2022-35110 | swftools memory leak | 5.5v3.1 | 0.3% | 2022-08-16 |