CVE-2022 records published in August 2022

This page lists the 2,086 CVE-2022 records published in August 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.

Critical
42320.3% of these records
Listed in CISA KEV
80.4% of these records
Reported exploited
1under 0.1% of these records
Detection signal
442.1% of these records
Exploit code
442.1% of these records
Actionable vendor fix
1,29261.9% of these records

Figures as of 2026-10-24 13:45 UTC. Records published in August 2022 have had from about 50 months to about 51 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2022 records published in August 2022, newest first: records 1 to 1,000 of 2,086
CVE Summary CVSS EPSS Published Signals
CVE-2022-39047freeciv buffer overflow8.8v3.11.2%2022-08-31Fix
CVE-2022-39046GNU glibc sensitive information in log files5.3NVD v3.11.8%2022-08-31Fix
CVE-2022-38812Aero CMS SQL injection6.5v3.12.6%2022-08-31Nuclei
CVE-2022-38153wolfSSL resource exhaustion5.9v3.12.3%2022-08-31Fix
CVE-2022-38152wolfSSL improper check for exceptional conditions7.5v3.12.7%2022-08-31Fix
CVE-2022-37184Garage Management System unrestricted file upload8.8v3.11.1%2022-08-31
CVE-2022-37183Piwigo cross-site scripting6.1v3.10.7%2022-08-31
CVE-2022-37130D-Link DIR-816 OS command injection9.8v3.126.3%2022-08-31
CVE-2022-37129D-Link DIR-816 OS command injection8.8v3.18.3%2022-08-31
CVE-2022-37128D-Link DIR-816 improper initialization9.8v3.121.2%2022-08-31
CVE-2022-37125D-Link DIR-816 command injection9.8v3.13.1%2022-08-31
CVE-2022-37123D-Link DIR-816 OS command injection8.8v3.12.6%2022-08-31
CVE-2022-37122Carel Pcoweb Hvac Bacnet Gateway path traversal7.5NVD v3.123.1%2022-08-31Nuclei
CVE-2022-37023Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 116.5v3.11.6%2022-08-31Fix
CVE-2022-37022Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 118.8v3.11.6%2022-08-31Fix
CVE-2022-37021Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 89.8v3.12.8%2022-08-31Fix
CVE-2022-36620D-Link DIR-816 improper quantity validation7.5v3.123.2%2022-08-31
CVE-2022-36619D-Link DIR-816 missing authentication7.5v3.11.1%2022-08-31
CVE-2022-36582Garage Management System component /php_action/createProduct.php arbitrary file upload7.2v3.11.4%2022-08-31
CVE-2022-36581Online Ordering System SQL injection7.5v3.10.9%2022-08-31
CVE-2022-36580Online Ordering System arbitrary file upload7.2v3.11.4%2022-08-31
CVE-2022-36571Tenda AC9 out-of-bounds write7.2v3.11.1%2022-08-31
CVE-2022-36570Tenda AC9 out-of-bounds write7.2v3.11.1%2022-08-31
CVE-2022-36569Tenda AC9 out-of-bounds write8.8v3.11.1%2022-08-31
CVE-2022-36568Tenda AC9 out-of-bounds write8.8v3.11.1%2022-08-31
CVE-2022-36566yogeshojha rengine OS command injection9.8v3.12.1%2022-08-31
CVE-2022-36203Doctors Appointment System cross-site scripting6.1v3.11.0%2022-08-31
CVE-2022-36202Doctors Appointment System insecure direct object reference9.8v3.10.9%2022-08-31
CVE-2022-36201Doctors Appointment System SQL injection9.8v3.12.3%2022-08-31
CVE-2022-36051Broken Authorization in ZITADEL Actions8.7CNA v3.11.0%2022-08-31Fix
CVE-2022-36048IP address leak via image proxy bypass in Zulip Server4.3CNA v3.10.6%2022-08-31Fix
CVE-2022-36046Unexpected server crash in Next.js5.3CNA v3.11.2%2022-08-31Fix
CVE-2022-36045Account takeover via cryptographically weak PRNG in NodeBB Forum9.0CNA v3.11.3%2022-08-31Fix
CVE-2022-36035fluxcd flux2 Flux CLI Workload injection7.7CNA v3.10.3%2022-08-31Fix
CVE-2022-34383Dell Edge Gateway 5200 command injection8.1CNA v3.10.4%2022-08-31Fix
CVE-2022-34373Dell CPG SW path traversal7.3CNA v3.10.2%2022-08-31Fix
CVE-2022-31233Dell Unisphere for PowerMax client-side enforcement of server-side security6.3CNA v3.10.3%2022-08-31Fix
CVE-2022-30318Honeywell ControlEdge PLC hard-coded credentials9.8v3.11.7%2022-08-31Fix
CVE-2022-30317Honeywell Experion Lx missing authentication9.1v3.10.8%2022-08-31Fix
CVE-2022-28625HPE OneView sensitive information in log files5.5v3.10.2%2022-08-31Fix
CVE-2022-27911Joomla! CMS core Multiple Full Path Disclosures because of missing _JEXEC or die check5.3v3.10.6%2022-08-31Fix
CVE-2022-26331Micro Focus ArcSight Logger cross-site scripting6.1CNA v3.10.4%2022-08-31Fix
CVE-2022-26330Micro Focus ArcSight Logger information disclosure6.5CNA v3.10.7%2022-08-31Fix
CVE-2022-21941Johnson Controls iSTAR Ultra command injection10.0CNA v3.12.1%2022-08-31Fix
CVE-2022-3028Linux kernel A race condition7.0NVD v3.10.2%2022-08-31Fix
CVE-2022-2898Measuresoft ScadaPro Server and Client link following5.5v3.10.2%2022-08-31
CVE-2022-2897Measuresoft ScadaPro Server and Client link following7.8v3.10.3%2022-08-31
CVE-2022-2896Measuresoft ScadaPro Server use-after-free7.8v3.10.3%2022-08-31
CVE-2022-2895Measuresoft ScadaPro Server stack-based buffer overflow7.8v3.10.3%2022-08-31
CVE-2022-2894Measuresoft ScadaPro Server untrusted pointer dereference7.8v3.10.3%2022-08-31
CVE-2022-2892Measuresoft ScadaPro Server out-of-bounds write7.8v3.10.3%2022-08-31Fix
CVE-2022-2866Fatek Automation FvDesigner out-of-bounds write7.8v3.10.3%2022-08-31Fix
CVE-2022-2759Delta Electronics Delta Robot Automation Studio (DRAS) XML external entity injection8.6v3.11.2%2022-08-31Fix
CVE-2022-2758LS Industrial Systems (LSIS) Co. Ltd LS Electric XG5000 update5.9v3.10.4%2022-08-31Fix
CVE-2022-2590Linux kernel way the race condition7.0NVD v3.10.9%2022-08-31Exploit codeFix
CVE-2022-2521libtiff release of an invalid pointer6.5NVD v3.11.3%2022-08-31Fix
CVE-2022-2520libtiff incorrect buffer size calculation6.5NVD v3.11.2%2022-08-31Fix
CVE-2022-2519libtiff rotateImage at tiffcrop.c:8839 found double free6.5NVD v3.11.2%2022-08-31Fix
CVE-2022-2485AutomationDirect Stride Field I/O cleartext transmission of sensitive information7.5NVD v3.10.5%2022-08-31Fix
CVE-2022-2466Quarkus does not terminate HTTP requests header context9.8v3.11.8%2022-08-31Exploit codeFix
CVE-2022-2153kernel null pointer dereference5.5NVD v3.10.5%2022-08-31Fix
CVE-2022-2132dpdk A permissive allowlist8.6NVD v3.12.2%2022-08-31Fix
CVE-2022-2044Moxa NPort 5110 out-of-bounds write8.2v3.10.7%2022-08-31Fix
CVE-2022-2043Moxa NPort 5110 out-of-bounds write7.5v3.10.8%2022-08-31Fix
CVE-2022-2006AutomationDirect C-more EA9 HMI uncontrolled search path element7.8v3.10.4%2022-08-31Fix
CVE-2022-2005AutomationDirect C-more EA9 HMI cleartext transmission7.5v3.10.5%2022-08-31Fix
CVE-2022-2004AutomationDirect DirectLOGIC with Ethernet Communication uncontrolled resource consumption7.5v3.11.0%2022-08-31
CVE-2022-2003AutomationDirect DirectLOGIC with Serial Communication cleartext transmission9.1v3.10.7%2022-08-31Fix
CVE-2022-1976kernel use-after-free7.8NVD v3.10.2%2022-08-31Fix
CVE-2022-1975Linux kernel uncaught exception5.5NVD v3.10.2%2022-08-31Fix
CVE-2022-1974Linux kernel A use-after-free4.1NVD v3.10.1%2022-08-31Fix
CVE-2022-1888Fuji Electric Alpha7 PC Loader project file parser stack-based buffer overflow7.8v3.10.3%2022-08-31
CVE-2022-1841zephyrproject-rtos Zephyr out-of-bound write in tcp_flags7.2CNA v3.10.6%2022-08-31Fix
CVE-2022-1552PostgreSQL incomplete cleanup8.8NVD v3.116.0%2022-08-31Fix
CVE-2022-1508Linux kernel An out-of-bounds read6.1NVD v3.10.2%2022-08-31Fix
CVE-2022-1405Delta Electronics CNCSoft stack-based buffer overflow7.8v3.12.2%2022-08-31Fix
CVE-2022-1404Delta Electronics CNCSoft out-of-bounds read7.1v3.10.3%2022-08-31Fix
CVE-2022-1355libtiff A stack-based buffer overflow6.1NVD v3.10.6%2022-08-31Fix
CVE-2022-1354libtiff A heap-based buffer overflow5.5NVD v3.10.6%2022-08-31Fix
CVE-2022-1325Clmg resource exhaustion5.5NVD v3.10.4%2022-08-31Fix
CVE-2022-1319undertow unchecked return value7.5v3.11.6%2022-08-31Fix
CVE-2022-1271gzip, xz-utils arbitrary file write8.8NVD v3.15.2%2022-08-31Fix
CVE-2022-1263Kernel:KVM null pointer dereference5.5NVD v3.10.4%2022-08-31Fix
CVE-2022-1259undertow denial of service7.5v3.11.3%2022-08-31Fix
CVE-2022-1247kernel race condition7.0NVD v3.10.3%2022-08-31
CVE-2022-1205Linux kernel A null pointer dereference4.7NVD v3.10.4%2022-08-31Fix
CVE-2022-39028GNU InetUtils null pointer dereference7.5v3.12.1%2022-08-30Fix
CVE-2022-38784Freedesktop Poppler integer overflow7.8v3.10.6%2022-08-30Fix
CVE-2022-38118HGiga OAKlouds SQL injection8.8CNA v3.11.7%2022-08-30
CVE-2022-38116Le-yan Co., Ltd. Personnel and Salary Management System hard-coded password9.8CNA v3.11.1%2022-08-30
CVE-2022-37237ZLMediaKit RTMP request handling denial of service7.5v3.10.8%2022-08-30
CVE-2022-37176AC6 firmware goform/setWizard vulnerability9.8v3.10.9%2022-08-30
CVE-2022-37173Vim Gvim incorrect default permissions7.8v3.10.4%2022-08-30
CVE-2022-37172MSYS2 arbitrary code execution7.8v3.10.2%2022-08-30
CVE-2022-37149WAVLINK Wl-wn575a3 OS command injection9.8v3.12.7%2022-08-30
CVE-2022-36749Sourcefabric RPi-Jukebox-RFID OS command injection9.8v3.12.7%2022-08-30
CVE-2022-36748Picuploader cross-site scripting6.1v3.10.4%2022-08-30
CVE-2022-36747Cobub Razor cross-site scripting6.1v3.10.7%2022-08-30
CVE-2022-36746LibreNMS vulnerable to cross-site scripting (XSS)6.1v3.10.5%2022-08-30Fix
CVE-2022-36745LibreNMS vulnerable to cross-site scripting (XSS)6.1v3.10.5%2022-08-30Fix
CVE-2022-36735Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36734Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36733Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36732Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36731Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36730Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36714Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36713Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36712Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36711Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36709Library Management System SQL injection9.8v3.10.9%2022-08-30
CVE-2022-36657Library Management System cross-site scripting4.8v3.10.6%2022-08-30
CVE-2022-36565Wampserver arbitrary code execution8.8v3.11.2%2022-08-30
CVE-2022-36564Strawberryperl arbitrary code execution8.8v3.11.2%2022-08-30
CVE-2022-36563Rubyinstaller2 arbitrary code execution8.8v3.11.2%2022-08-30
CVE-2022-36562Rubyinstaller2 arbitrary code execution8.8v3.11.2%2022-08-30
CVE-2022-36561Xpdf AcroForm parser vulnerability5.5v3.10.3%2022-08-30Fix
CVE-2022-36552Tendacn AC6 files accessible to external parties7.5v3.10.7%2022-08-30
CVE-2022-34375Dell Container Storage Modules path traversal8.8CNA v3.11.3%2022-08-30Fix
CVE-2022-34374Dell Container Storage Modules OS command injection8.8CNA v3.11.4%2022-08-30Fix
CVE-2022-34368Dell NetWorker Management Console improper handling of insufficient permissions6.1CNA v3.10.4%2022-08-30Fix
CVE-2022-33935Dell Data Protection Advisor cross-site scripting5.4CNA v3.10.4%2022-08-30Fix
CVE-2022-31232Dell SmartFabric Storage Software OS command injection8.6CNA v3.11.0%2022-08-30Fix
CVE-2022-27563Overload/denial of service affects HCL VersionVault Express7.5CNA v3.10.8%2022-08-30Fix
CVE-2022-27560HCL VersionVault Express information disclosure6.0CNA v3.10.5%2022-08-30Fix
CVE-2022-26529Realtek Linux/Android Bluetooth Mesh SDK buffer overflow6.5CNA v3.10.5%2022-08-30
CVE-2022-26528Realtek Linux/Android Bluetooth Mesh SDK buffer overflow6.5CNA v3.10.5%2022-08-30
CVE-2022-26527Realtek Linux/Android Bluetooth Mesh SDK buffer overflow6.5CNA v3.10.5%2022-08-30
CVE-2022-25887sanitize-html regular expression denial of service (ReDoS)7.5v3.11.4%2022-08-30Fix
CVE-2022-25857org.yaml:snakeyaml denial of service (DoS)7.5v3.12.7%2022-08-30Fix
CVE-2022-25646x-data-spreadsheet cross-site scripting (XSS)6.1v3.10.9%2022-08-30
CVE-2022-25635Realtek Linux/Android Bluetooth Mesh SDK buffer overflow6.5v3.10.4%2022-08-30
CVE-2022-24107Glyphandcog Xpdfreader integer overflow7.8v3.10.3%2022-08-30Fix
CVE-2022-24106Glyphandcog Xpdfreader integer overflow7.8v3.10.3%2022-08-30Fix
CVE-2022-3037vim/vim GitHub repository use-after-free7.8v3.10.5%2022-08-30Fix
CVE-2022-2330XXE vulnerability in DLP Endpoint for Windows6.5CNA v3.10.9%2022-08-30Fix
CVE-2022-38772Zoho ManageEngine NetFlow Analyzer remote code execution8.8v3.177.6%2022-08-29Fix
CVE-2022-38625Patlite Nbm-d88n insufficient verification of data authenticity8.8v3.10.6%2022-08-29Fix
CVE-2022-38511TOTOLINK A810R OS command injection7.8v3.11.3%2022-08-29
CVE-2022-38510Tenda TX9 Pro buffer overflow7.8v3.10.3%2022-08-29
CVE-2022-37681Hitachi Hc-ip9100hd path traversal7.5v3.11.1%2022-08-29Fix
CVE-2022-37680Hitachi Hc-ip9100hd missing authentication7.5v3.10.9%2022-08-29Fix
CVE-2022-37177Hirevue Hiring Platform weak cryptographic algorithm7.5NVD v3.10.5%2022-08-29
CVE-2022-37059Subrion CMS vulnerable to cross-site scripting in admin panel4.8v3.10.6%2022-08-29
CVE-2022-36690Ingredient Stock Management System SQL injection8.8v3.11.0%2022-08-29
CVE-2022-36689Ingredient Stock Management System SQL injection8.8v3.11.0%2022-08-29
CVE-2022-36688Ingredient Stock Management System SQL injection8.8v3.11.0%2022-08-29
CVE-2022-36687Ingredient Stock Management System path traversal6.5v3.11.0%2022-08-29
CVE-2022-36686Ingredient Stock Management System SQL injection8.8v3.11.0%2022-08-29
CVE-2022-36616TOTOLINK A810R hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36615TOTOLINK A3000RU hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36614TOTOLINK A860R hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36613TOTOLINK N600R hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36612TOTOLINK A950RG hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36611TOTOLINK A800R hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36610TOTOLINK A720R hard-coded credentials7.8v3.10.3%2022-08-29
CVE-2022-36573Pagekit CMS cross-site scripting in Markdown text box where articles are edited6.1v3.10.6%2022-08-29
CVE-2022-36572Sinsiu Enterprise Website System remote code execution9.8v3.123.2%2022-08-29
CVE-2022-36560Seiko-sol SkyBridge MB-A200 hard-coded credentials9.8v3.10.8%2022-08-29Fix
CVE-2022-36559Seiko-sol SkyBridge MB-A200 command injection9.8v3.11.7%2022-08-29Fix
CVE-2022-36558Seiko-sol Skybridge Mb-a100 hard-coded credentials9.8v3.10.8%2022-08-29Fix
CVE-2022-36557Seiko-sol Skybridge Mb-a100 unrestricted file upload9.8v3.11.1%2022-08-29Fix
CVE-2022-36556Seiko-sol Skybridge Mb-a100 command injection9.8v3.11.6%2022-08-29Fix
CVE-2022-36555Hytec Hwl-2511-ss inadequate encryption strength9.8v3.10.7%2022-08-29Fix
CVE-2022-36554Hytec Hwl-2511-ss CLI command injection9.8v3.12.4%2022-08-29Fix
CVE-2022-36553Hytec Hwl-2511-ss command injection9.8v3.190.8%2022-08-29Reported exploitedNucleiEmerging ThreatsExploit codeFix
CVE-2022-36200FiberHome Hg150-ub cleartext transmission of sensitive information7.5v3.12.3%2022-08-29Exploit code
CVE-2022-36194Centreon cross-site scripting5.4v3.10.9%2022-08-29Fix
CVE-2022-36037Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby5.9CNA v3.10.9%2022-08-29Fix
CVE-2022-36036Improper control of generation of code (code injection) in mdx-mermaid3.6CNA v3.10.4%2022-08-29Fix
CVE-2022-36034Possible regular expression denial of service (ReDoS) used on uncontrolled data in nitrado.js7.5CNA v3.10.9%2022-08-29Fix
CVE-2022-36033Jsoup may not sanitize cross-site scripting attempts if SafeList.preserveRelativeLinks is enabled6.1CNA v3.11.5%2022-08-29Fix
CVE-2022-35962Crafted link in Zulip message can cause disclosure of credentials8.0CNA v3.11.1%2022-08-29Fix
CVE-2022-35020Advancemame advancecomp out-of-bounds write5.5v3.10.5%2022-08-29Fix
CVE-2022-35019Advancecomp v2.3 was discovered to contain a segmentation fault.5.5v3.10.4%2022-08-29Fix
CVE-2022-35018Advancecomp v2.3 was discovered to contain a segmentation fault.5.5v3.10.4%2022-08-29Fix
CVE-2022-35017Advancemame advancecomp out-of-bounds write5.5v3.10.5%2022-08-29Fix
CVE-2022-35016Advancemame advancecomp out-of-bounds write5.5v3.10.5%2022-08-29Fix
CVE-2022-35015Advancemame advancecomp out-of-bounds write5.5v3.10.5%2022-08-29Fix
CVE-2022-35014Advancecomp v2.3 contains a segmentation fault.5.5v3.10.4%2022-08-29Fix
CVE-2022-34668Nvflare unsafe deserialization due to Pickle9.8CNA v3.110.9%2022-08-29Exploit codeFix
CVE-2022-32993TOTOLINK A7000R improper access control9.8v3.10.9%2022-08-29
CVE-2022-32548DrayTek Vigor1000B buffer overflow9.8v3.133.8%2022-08-29Exploit codeFix
CVE-2022-31677Pinniped Supervisor insufficient session expiration5.4v3.10.4%2022-08-29Fix
CVE-2022-27558HCL iNotes is susceptible to a Broken Password Strength Checks vulnerability5.9CNA v3.10.6%2022-08-29Fix
CVE-2022-27547HCL iNotes is susceptible to a link to non-existent domain vulnerability6.1CNA v3.10.5%2022-08-29Fix
CVE-2022-27546HCL iNotes is susceptible to a reflected cross-site scripting (XSS)8.3CNA v3.10.6%2022-08-29Fix
CVE-2022-25921morgan-json arbitrary code execution9.8v3.11.4%2022-08-29
CVE-2022-25644@pendo324/get-process-by-name arbitrary code execution9.8v3.11.5%2022-08-29
CVE-2022-25641Foxit PDF Reader, PDF Editor and PhantomPDF compressed-object parsing vulnerability5.5v3.10.3%2022-08-29Fix
CVE-2022-22897Apollo Theme AP Page Builder SQL injection9.8v3.113.4%2022-08-29Nuclei
CVE-2022-21385Oracle Linux crash6.2CNA v3.10.4%2022-08-29Fix
CVE-2022-21165font-converter arbitrary command injection9.8v3.13.0%2022-08-29
CVE-2022-3035Cross-site scripting (XSS) Stored in snipe/Snipe-IT4.8v3.10.7%2022-08-29Fix
CVE-2022-3019Improper access control in ToolJet/ToolJet8.8v3.10.9%2022-08-29Fix
CVE-2022-2961Linux kernel A use-after-free7.0NVD v3.10.3%2022-08-29Fix
CVE-2022-2953libtiff out-of-bounds read5.5CNA v3.10.6%2022-08-29Fix
CVE-2022-2638Export All URLs WordPress plugin Admin+ arbitrary System file Removal6.5NVD v3.11.2%2022-08-29Fix
CVE-2022-2599Anti-Malware Security and Brute-Force Firewall WordPress plugin reflected cross-site scripting6.1NVD v3.11.3%2022-08-29NucleiFix
CVE-2022-2559Fluent Support WordPress plugin Admin+ SQLi7.2NVD v3.11.2%2022-08-29Fix
CVE-2022-2556MailChimp for Woocommerce WordPress plugin Admin+ SSRF2.7NVD v3.10.8%2022-08-29Fix
CVE-2022-2538WP Hide and Security Enhancer WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2022-08-29Fix
CVE-2022-2537WooCommerce PDF Invoices and Packing Slips WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2022-08-29Fix
CVE-2022-2374Simply Schedule Appointments WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-08-29Fix
CVE-2022-2373Simply Schedule Appointments WordPress plugin unauthenticated email Address disclosure5.3NVD v3.11.9%2022-08-29NucleiFix
CVE-2022-2267MailChimp for Woocommerce WordPress plugin Subscriber+ SSRF4.3NVD v3.10.7%2022-08-29Fix
CVE-2022-2261WPide WordPress plugin Admin+ local file inclusion7.2NVD v3.11.4%2022-08-29Fix
CVE-2022-2080Sensei LMS WordPress plugin arbitrary Private Message Sending via IDOR4.3NVD v3.10.8%2022-08-29Fix
CVE-2022-2034Sensei LMS WordPress plugin unauthenticated Private Messages disclosure via rest API5.3NVD v3.12.5%2022-08-29NucleiFix
CVE-2022-1663Stop Spam Comments WordPress plugin access Token bypass6.5NVD v3.10.7%2022-08-29
CVE-2022-1204Linux kernel A use-after-free5.5NVD v3.10.4%2022-08-29Fix
CVE-2022-1199kernel use-after-free7.5NVD v3.12.0%2022-08-29Fix
CVE-2022-1198kernel use-after-free5.5NVD v3.10.4%2022-08-29Fix
CVE-2022-1184Linux kernel fs/ext4/namei.c:dx_insert_block in the use-after-free5.5NVD v3.10.3%2022-08-29Fix
CVE-2022-1123Leaflet Maps Marker WordPress plugin Admin+ SQLi7.2NVD v3.11.3%2022-08-29Fix
CVE-2022-1117fapolicyd files accessible to external parties8.4NVD v3.10.3%2022-08-29Fix
CVE-2022-1115ImageMagick denial of service5.5NVD v3.10.6%2022-08-29Fix
CVE-2022-1043kernel use-after-free8.8NVD v3.13.9%2022-08-29Exploit codeFix
CVE-2022-1016kernel uninitialized pointer access5.5NVD v3.10.4%2022-08-29Fix
CVE-2022-0934dnsmasq use-after-free7.5NVD v3.12.5%2022-08-29Fix
CVE-2022-0852convert2rhel personal information exposure5.5v3.10.4%2022-08-29Fix
CVE-2022-0851convert2rhel information disclosure5.5v3.10.3%2022-08-29Fix
CVE-2022-0850kernel information disclosure7.1NVD v3.10.4%2022-08-29Fix
CVE-2022-0812Linux kernel information disclosure4.3NVD v3.11.4%2022-08-29Fix
CVE-2022-0718openstack/python-oslo.utils python-oslo-utils has improper password parsing4.9NVD v3.11.7%2022-08-29Fix
CVE-2022-0669dpdk denial of service6.5NVD v3.10.3%2022-08-29Fix
CVE-2022-0497Openscad out-of-bounds read7.1NVD v3.10.4%2022-08-29Fix
CVE-2022-0496Openscad out-of-bounds access5.5NVD v3.10.5%2022-08-29Fix
CVE-2022-0485libnbd unchecked return value4.8v3.11.0%2022-08-29Fix
CVE-2022-0480kernel resource exhaustion5.5NVD v3.10.3%2022-08-29Fix
CVE-2022-0400kernel out-of-bounds read7.5NVD v3.11.8%2022-08-29
CVE-2022-0367libmodbus A heap-based buffer overflow7.8NVD v3.10.5%2022-08-29Fix
CVE-2022-0358QEMU virtiofsd privilege escalation7.8NVD v3.10.3%2022-08-29Fix
CVE-2022-0336samba incorrect default permissions8.8NVD v3.11.6%2022-08-29Fix
CVE-2022-0284ImageMagick out-of-bounds read7.1NVD v3.10.6%2022-08-29Fix
CVE-2022-38571Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38570Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38569Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38568Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38567Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38566Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38565Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38564Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38563Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38562Tenda M3 out-of-bounds write7.5v3.10.9%2022-08-28
CVE-2022-38557D-Link Dir-845l improper authentication9.8v3.11.0%2022-08-28
CVE-2022-38556TRENDnet TEW733GR improper authentication9.8v3.11.1%2022-08-28
CVE-2022-38555Linksys E1200 out-of-bounds write9.8v3.110.4%2022-08-28
CVE-2022-37057D-Link Go-rt-ac750 OS command injection9.8v3.125.1%2022-08-28
CVE-2022-37056D-Link Go-rt-ac750 OS command injection9.8v3.111.4%2022-08-28Emerging Threats
CVE-2022-37055D-Link Routers buffer overflow9.8v3.155.5%2022-08-28KEVEmerging Threats
CVE-2022-37053TRENDnet TEW733GR code injection9.8v3.12.2%2022-08-28
CVE-2022-36756D-Link Dir-845l code injection9.8v3.13.2%2022-08-28
CVE-2022-36755D-Link Dir-845l improper authentication9.8v3.11.4%2022-08-28
CVE-2022-36708Library Management System SQL injection9.8v3.11.0%2022-08-28
CVE-2022-36706Ingredients Stock Management System SQL injection9.8v3.11.0%2022-08-28
CVE-2022-36705Ingredients Stock Management System SQL injection9.8v3.11.0%2022-08-28
CVE-2022-36704Library Management System SQL injection8.8v3.11.0%2022-08-28
CVE-2022-3017Cross-site request forgery (CSRF) in froxlor/froxlor6.5v3.10.4%2022-08-28Fix
CVE-2022-3016vim/vim GitHub repository use-after-free7.8v3.10.5%2022-08-28Fix
CVE-2022-38794Zaver path traversal7.5v3.13.9%2022-08-27Nuclei
CVE-2022-38792Exotel exotel-py includes code execution backdoor inserted by a third party9.8v3.11.5%2022-08-27
CVE-2022-38791MariaDB improper locking5.5v3.10.3%2022-08-27Fix
CVE-2022-3015oretnom23 Fast Food Ordering System cross-site scripting6.1v3.10.4%2022-08-27
CVE-2022-3014SourceCodester Simple Task Managing System cross-site scripting6.1v3.10.6%2022-08-27
CVE-2022-3013SourceCodester Simple Task Managing System loginVaLidation.php SQL injection9.8v3.10.5%2022-08-27
CVE-2022-3012oretnom23 Fast Food Ordering System index.php SQL injection8.8v3.10.7%2022-08-27
CVE-2022-2787Debian schroot stricter rules on chroot names4.3v3.11.0%2022-08-27Fix
CVE-2022-38533GNU Binutils out-of-bounds write5.5v3.10.3%2022-08-26Fix
CVE-2022-37152Online Diagnostic Lab Management System SQL injection9.8v3.11.1%2022-08-26
CVE-2022-37151Online Diagnostic Lab Management System There is an unauthorized access7.5v3.11.0%2022-08-26
CVE-2022-37150Online Diagnostic Lab Management System cross-site scripting5.4v3.10.6%2022-08-26
CVE-2022-36683Simple Task Scheduling System SQL injection9.8v3.11.0%2022-08-26
CVE-2022-36682Simple Task Scheduling System SQL injection9.8v3.11.0%2022-08-26
CVE-2022-36681Simple Task Scheduling System SQL injection9.8v3.11.0%2022-08-26
CVE-2022-36680Simple Task Scheduling System SQL injection9.8v3.11.0%2022-08-26
CVE-2022-36679Simple Task Scheduling System SQL injection9.8v3.11.0%2022-08-26
CVE-2022-36678Simple Task Scheduling System SQL injection9.8v3.11.0%2022-08-26
CVE-2022-36548Hashenudara eDoc Doctor Appointment System cross-site scripting5.4v3.10.6%2022-08-26
CVE-2022-36547Hashenudara eDoc Doctor Appointment System cross-site scripting6.1v3.10.6%2022-08-26
CVE-2022-36546Hashenudara eDoc Doctor Appointment System cross-site request forgery8.8v3.10.5%2022-08-26
CVE-2022-36545Hashenudara eDoc Doctor Appointment System SQL injection9.8v3.11.2%2022-08-26
CVE-2022-36544Hashenudara eDoc Doctor Appointment System SQL injection9.8v3.11.2%2022-08-26
CVE-2022-36543Hashenudara eDoc Doctor Appointment System SQL injection9.8v3.11.2%2022-08-26
CVE-2022-36542Hashenudara eDoc Doctor Appointment System improper access control6.5v3.10.7%2022-08-26
CVE-2022-36537ZK Framework AuUploader confused deputy7.5v3.195.4%2022-08-26KEVNucleiExploit codeFix
CVE-2022-36529Kensite Cms SQL injection8.8v3.11.0%2022-08-26
CVE-2022-36522MikroTik RouterOS reachable assertion6.5v3.11.5%2022-08-26
CVE-2022-36521cskefu insecure permissions7.5v3.10.7%2022-08-26
CVE-2022-36226Siteservercms missing authorization7.2v3.11.1%2022-08-26
CVE-2022-36168WuzhiCMS path traversal2.7v3.10.9%2022-08-26
CVE-2022-36121Blue Prism Enterprise UpdateOfflineHelpData function improper access control5.3v3.10.8%2022-08-26Fix
CVE-2022-36120Blue Prism Enterprise getChartData function improper access control8.1v3.11.0%2022-08-26Fix
CVE-2022-35714IBM Maximo Asset Management cross-site scripting5.4CNA v3.00.5%2022-08-26Fix
CVE-2022-35192D-Link Dsl-3782 Firmware buffer overflow7.5v3.11.0%2022-08-26
CVE-2022-34303Eurosoft UEFI Bootloader security feature bypass6.7v3.10.8%2022-08-26Fix
CVE-2022-34302Horizondatasys UEFI Bootloader arbitrary code execution6.7v3.11.1%2022-08-26Fix
CVE-2022-34301CryptoPro Secure Disk for BitLocker bootloader security feature bypass6.7v3.11.0%2022-08-26Fix
CVE-2022-31773IBM DataPower Gateway cross-site request forgery8.8CNA v3.00.4%2022-08-26Fix
CVE-2022-30984Rubrik Cdm A buffer overflow7.8v3.10.2%2022-08-26Fix
CVE-2022-29850Lexmark B2236 improper input validation8.1v3.11.0%2022-08-26Fix
CVE-2022-25625Broadcom Symantec Privileged Access Management administration configuration vulnerability8.8NVD v3.10.8%2022-08-26Fix
CVE-2022-2915SonicWall SMA100 heap-based buffer overflow8.8v3.16.7%2022-08-26Fix
CVE-2022-0225Stored cross-site scripting (XSS) in Keycloak via groups dropdown5.4v3.13.1%2022-08-26Fix
CVE-2022-0217prosody XML entity expansion7.5NVD v3.15.4%2022-08-26Fix
CVE-2022-0216QEMU LSI53C895A SCSI adapter emulation use-after-free4.4NVD v3.10.4%2022-08-26Fix
CVE-2022-0207vdsm A race condition4.7v3.10.2%2022-08-26Fix
CVE-2022-0175virglrenderer missing resource initialization5.5NVD v3.10.3%2022-08-26Fix
CVE-2022-0171kernel incomplete cleanup5.5NVD v3.10.3%2022-08-26Fix
CVE-2022-0168Linux kernel A denial of service4.4NVD v3.10.3%2022-08-26Fix
CVE-2022-0084XNIO `notifyReadClosed` method logging message to unexpected end7.5NVD v3.11.5%2022-08-26Fix
CVE-2022-37953WorkstationST Response Splitting in AM Gateway Challenge-Response6.1v3.10.4%2022-08-25Fix
CVE-2022-37952WorkstationST reflected XSS in iHistorian Data Display Tags6.1v3.10.4%2022-08-25Fix
CVE-2022-37824Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37823Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37822Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37821Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37820Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37819Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37818Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37817Tenda AX1803 out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37816Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37815Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37814Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37813Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37812Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37811Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37810Tenda AC1206 OS command injection9.8v3.12.4%2022-08-25
CVE-2022-37809Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37808Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37807Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37806Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37805Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37804Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37803Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37802Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37801Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37800Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37799Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37798Tenda AC1206 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37318RSA Archer cross-site scripting6.1NVD v3.10.5%2022-08-25Fix
CVE-2022-37317RSA Archer cross-site scripting5.4NVD v3.10.7%2022-08-25Fix
CVE-2022-37316RSA Archer improper access control6.5v3.10.7%2022-08-25Fix
CVE-2022-37292Tenda AX12 out-of-bounds write5.5v3.10.3%2022-08-25
CVE-2022-37245Altn Security Gateway For Email Servers cross-site scripting5.4v3.10.6%2022-08-25Fix
CVE-2022-37244Altn Security Gateway For Email Servers cross-site scripting5.4v3.10.5%2022-08-25Fix
CVE-2022-37243Altn Security Gateway For Email Servers cross-site scripting5.4v3.10.6%2022-08-25Fix
CVE-2022-37242Altn Security Gateway For Email Servers HTTP response splitting9.8v3.11.4%2022-08-25Fix
CVE-2022-37241Altn Security Gateway For Email Servers cross-site scripting5.4v3.10.6%2022-08-25Fix
CVE-2022-37240Altn Security Gateway For Email Servers HTTP response splitting9.8v3.11.4%2022-08-25Fix
CVE-2022-37239Altn Security Gateway For Email Servers cross-site scripting5.4v3.10.6%2022-08-25Fix
CVE-2022-37238Altn Security Gateway For Email Servers cross-site scripting5.4v3.10.5%2022-08-25Fix
CVE-2022-37162Claroline cross-site scripting5.4v3.10.7%2022-08-25
CVE-2022-37161Claroline cross-site scripting6.1v3.10.6%2022-08-25
CVE-2022-37160Claroline cross-site scripting5.4v3.10.6%2022-08-25
CVE-2022-37159Claroline unrestricted file upload9.8v3.127.2%2022-08-25
CVE-2022-37158Iocoder ruoyi-vue-pro weak password requirements9.8v3.10.9%2022-08-25
CVE-2022-37100H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37099H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37098H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37097H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37096H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37095H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37094H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37093H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37092H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37091H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37090H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37089H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37088H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37087H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37086H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37085H3C H200 out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37084TOTOLINK A7000R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37083TOTOLINK A7000R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-37082TOTOLINK A7000R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-37081TOTOLINK A7000R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-37080TOTOLINK A7000R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37079TOTOLINK A7000R OS command injection7.8v3.11.2%2022-08-25
CVE-2022-37078TOTOLINK A7000R out-of-bounds write7.8v3.10.9%2022-08-25
CVE-2022-37077TOTOLINK A7000R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37076TOTOLINK A7000R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-37075TOTOLINK A7000R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-37074H3C Gr-120w out-of-bounds write7.8v3.10.6%2022-08-25
CVE-2022-37073H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37072H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37071H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37070H3C GR-1200W OS command injection9.8v3.110.6%2022-08-25
CVE-2022-37069H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37068H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37067H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-37066H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-36804Atlassian Bitbucket Server and Data Center command injection8.8v3.199.2%2022-08-25KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-36721Library Management System SQL injection8.8v3.11.0%2022-08-25
CVE-2022-36720Library Management System SQL injection8.8v3.11.0%2022-08-25
CVE-2022-36719Library Management System SQL injection9.8v3.11.0%2022-08-25
CVE-2022-36716Library Management System SQL injection9.8v3.10.9%2022-08-25
CVE-2022-36715Library Management System SQL injection9.8v3.10.9%2022-08-25
CVE-2022-36703Ingredients Stock Management System SQL injection8.8v3.10.9%2022-08-25
CVE-2022-36701Ingredients Stock Management System SQL injection8.8v3.10.9%2022-08-25
CVE-2022-36700Ingredients Stock Management System SQL injection8.8v3.10.9%2022-08-25
CVE-2022-36699Ingredients Stock Management System SQL injection8.8v3.10.9%2022-08-25
CVE-2022-36698Ingredients Stock Management System SQL injection8.8v3.11.0%2022-08-25
CVE-2022-36697Ingredients Stock Management System SQL injection9.8v3.11.0%2022-08-25
CVE-2022-36696Ingredients Stock Management System SQL injection9.8v3.11.0%2022-08-25
CVE-2022-36695Ingredients Stock Management System SQL injection9.8v3.11.0%2022-08-25
CVE-2022-36693Ingredients Stock Management System SQL injection9.8v3.10.9%2022-08-25
CVE-2022-36692Ingredients Stock Management System SQL injection9.8v3.10.9%2022-08-25
CVE-2022-36527jflyfox jfinal_cms jfinal cross-site scripting5.4v3.10.5%2022-08-25
CVE-2022-36520H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-36519H3C GR-1200W out-of-bounds write9.8v3.11.2%2022-08-25
CVE-2022-36518H3C GR-1200W out-of-bounds write9.8v3.11.2%2022-08-25
CVE-2022-36517H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-36516H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-36515H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-36514H3C GR-1200W out-of-bounds write9.8v3.11.1%2022-08-25
CVE-2022-36513H3C GR-1200W out-of-bounds write9.8v3.11.2%2022-08-25
CVE-2022-36511H3C GR-1200W out-of-bounds write9.8v3.11.2%2022-08-25
CVE-2022-36510H3C GR-2200 OS command injection7.8v3.111.2%2022-08-25
CVE-2022-36509H3C GR-3200 OS command injection7.8v3.111.2%2022-08-25
CVE-2022-36508H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36507H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36506H3C Magic NX18 Plus out-of-bounds write7.8v3.10.6%2022-08-25
CVE-2022-36505H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36504H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36503H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36502H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36501H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36500H3C Magic NX18 Plus out-of-bounds write7.8v3.10.6%2022-08-25
CVE-2022-36499H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36498H3C Magic NX18 Plus out-of-bounds write7.8v3.10.6%2022-08-25
CVE-2022-36497H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36496H3C Magic NX18 Plus out-of-bounds write7.8v3.10.8%2022-08-25
CVE-2022-36495H3C Magic NX18 Plus out-of-bounds write7.8v3.10.5%2022-08-25
CVE-2022-36494H3C Magic NX18 Plus out-of-bounds write7.8v3.10.5%2022-08-25
CVE-2022-36493H3C Magic NX18 Plus out-of-bounds write7.8v3.10.5%2022-08-25
CVE-2022-36492H3C Magic NX18 Plus out-of-bounds write7.8v3.10.5%2022-08-25
CVE-2022-36491H3C Magic NX18 Plus out-of-bounds write7.8v3.10.5%2022-08-25
CVE-2022-36490H3C Magic NX18 Plus out-of-bounds write7.8v3.10.5%2022-08-25
CVE-2022-36489H3C Magic NX18 Plus out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36488TOTOLINK N350RT out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36487TOTOLINK N350RT OS command injection7.8v3.11.1%2022-08-25
CVE-2022-36486TOTOLINK N350RT OS command injection7.8v3.11.1%2022-08-25
CVE-2022-36485TOTOLINK N350RT OS command injection7.8v3.11.1%2022-08-25
CVE-2022-36484TOTOLINK N350RT out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36483TOTOLINK N350RT out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36482TOTOLINK N350RT out-of-bounds write7.8v3.10.9%2022-08-25
CVE-2022-36481TOTOLINK N350RT OS command injection7.8v3.11.3%2022-08-25
CVE-2022-36480TOTOLINK N350RT out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36479TOTOLINK N350RT OS command injection7.8v3.11.1%2022-08-25
CVE-2022-36478H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36477H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36475H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36474H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36473H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36472H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36471H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36470H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36469H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36468H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36467H3C B5 Mini out-of-bounds write7.8v3.10.4%2022-08-25
CVE-2022-36466TOTOLINK A3700R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36465TOTOLINK A3700R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36464TOTOLINK A3700R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36463TOTOLINK A3700R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36462TOTOLINK A3700R out-of-bounds write7.8v3.10.3%2022-08-25
CVE-2022-36461TOTOLINK A3700R OS command injection7.8v3.11.2%2022-08-25
CVE-2022-36460TOTOLINK A3700R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-36459TOTOLINK A3700R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-36458TOTOLINK A3700R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-36456TOTOLINK A720R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-36455TOTOLINK A3600R OS command injection7.8v3.11.0%2022-08-25
CVE-2022-36358SEO Scout WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-08-25Fix
CVE-2022-36119Ssctech Blue Prism deserialization of untrusted data8.8v3.11.9%2022-08-25Fix
CVE-2022-36118An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for the SetProcessAttributes administr5.3v3.10.8%2022-08-25Fix
CVE-2022-36117An issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment that exposes the Blue Prism Application server, it is possible for an authenticated user to reverse engineer the Blue Prism software and circumvent access controls for an administrative function. If cre3.1v3.10.7%2022-08-25Fix
CVE-2022-36116Blue Prism setValidationInfo function improper access control5.3v3.10.8%2022-08-25Fix
CVE-2022-36115Blue Prism process autosave function improper access control7.1v3.10.9%2022-08-25Fix
CVE-2022-34960MikroTik RouterOS link following9.8v3.11.4%2022-08-25
CVE-2022-32746samba use-after-free5.4NVD v3.11.2%2022-08-25Fix
CVE-2022-32745samba out-of-bounds read8.1NVD v3.11.1%2022-08-25Fix
CVE-2022-32744samba authentication bypass by spoofing8.8NVD v3.11.1%2022-08-25Fix
CVE-2022-32742samba information disclosure4.3NVD v3.11.2%2022-08-25Fix
CVE-2022-32427PrinterLogic Windows Client path traversal8.8v3.11.7%2022-08-25Fix
CVE-2022-31798Nortekcontrol Emerge E3 session fixation6.1v3.18.5%2022-08-25NucleiExploit code
CVE-2022-31499Nortekcontrol Emerge E3 OS command injection9.8NVD v3.164.6%2022-08-25Nuclei
CVE-2022-31269Nortekcontrol Emerge E3 hard-coded credentials8.2v3.17.0%2022-08-25NucleiExploit code
CVE-2022-28747Gosecure Titan Inbox Detection & Response remote code execution9.8v3.11.5%2022-08-25Fix
CVE-2022-23715Elastic Cloud Enterprise sensitive information in log files6.5v3.10.8%2022-08-25Fix
CVE-2022-23235NetApp Active IQ Unified Manager AutoSupport telemetry vulnerability5.3v3.10.6%2022-08-25Fix
CVE-2022-22728libapreq2 multipart form parse memory corruption7.5v3.15.8%2022-08-25Fix
CVE-2022-20921Cisco ACI Multi-Site Orchestrator privilege escalation8.8CNA v3.11.2%2022-08-25Fix
CVE-2022-20865Cisco FXOS software command injection6.7CNA v3.10.3%2022-08-25Fix
CVE-2022-20824Cisco FXOS and NX-OS Software Cisco Discovery Protocol buffer overflow8.8CNA v3.10.4%2022-08-25Fix
CVE-2022-20823Cisco NX-OS Software OSPFv3 denial of service8.6CNA v3.11.1%2022-08-25Fix
CVE-2022-2997Session fixation in snipe/Snipe-IT8.0v3.10.9%2022-08-25Fix
CVE-2022-2991Linux kernel A heap-based buffer overflow6.7NVD v3.10.4%2022-08-25Fix
CVE-2022-2982vim/vim GitHub repository use-after-free7.8v3.11.0%2022-08-25Fix
CVE-2022-2980Null pointer dereference in Vim/Vim5.5v3.10.8%2022-08-25Fix
CVE-2022-2959Linux kernel A race condition7.0NVD v3.10.4%2022-08-25Fix
CVE-2022-2957SourceCodester Simple and Nice Shopping Cart Script profile.php SQL injection9.8v3.10.8%2022-08-25
CVE-2022-2465ISaGRAF Workbench deserialization of untrusted data7.8v3.10.3%2022-08-25Fix
CVE-2022-2464ISaGRAF Workbench improper limitation of a pathname to a restricted directory (path traversal)7.8v3.10.3%2022-08-25Fix
CVE-2022-2463ISaGRAF Workbench improper limitation of a pathname to a restricted directory (path traversal)7.8v3.12.6%2022-08-25Fix
CVE-2022-2255mod_wsgi incorrect header handling in mod-wsgi7.5NVD v3.10.9%2022-08-25Fix
CVE-2022-2031samba authentication bypass8.8NVD v3.11.2%2022-08-25Fix
CVE-2022-0135virglrenderer VirGL virtual OpenGL renderer out-of-bounds write7.8NVD v3.10.4%2022-08-25Fix
CVE-2022-38132Linksys MR8300 Router command injection8.8v3.10.6%2022-08-24Fix
CVE-2022-38089Kajitori Exment stored cross-site scripting5.4v3.10.9%2022-08-24Fix
CVE-2022-38080Exceedone/Exment and Exceedone/Laravel-admin cross-site scripting5.4v3.10.9%2022-08-24Fix
CVE-2022-38078Six Apart Movable Type XMLRPC API code injection9.8v3.12.1%2022-08-24Fix
CVE-2022-37418Hyundai authentication bypass by replay6.4NVD v3.11.1%2022-08-24
CVE-2022-37333Exceedone/Exment and Exceedone/Laravel-admin SQL injection8.8v3.11.4%2022-08-24Fix
CVE-2022-37305Honda authentication bypass by replay6.4v3.11.0%2022-08-24
CVE-2022-3718172crm WukongCRM unrestricted file upload9.8v3.11.2%2022-08-24
CVE-2022-3717872crm WukongCRM SQL injection8.8v3.11.1%2022-08-24
CVE-2022-37153Artica Tech Artica Proxy cross-site scripting6.1v3.11.6%2022-08-24Nuclei
CVE-2022-36945Mazda authentication bypass by replay6.4v3.11.0%2022-08-24
CVE-2022-36633Improper token validation leading to code execution in Teleport8.8v3.149.5%2022-08-24Exploit codeFix
CVE-2022-34838ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control8.1CNA v3.10.2%2022-08-24Fix
CVE-2022-34837ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control6.2CNA v3.10.1%2022-08-24Fix
CVE-2022-34836ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control5.9CNA v3.10.6%2022-08-24Fix
CVE-2022-33172de.fac2 User Presence protection security feature bypass5.5v3.10.2%2022-08-24
CVE-2022-32894Apple iOS and macOS out-of-bounds write7.8v3.13.3%2022-08-24KEVFix
CVE-2022-32893Apple iOS and macOS out-of-bounds write8.8v3.19.9%2022-08-24KEVFix
CVE-2022-32857Apple macOS cleartext transmission of sensitive information4.3v3.10.3%2022-08-24Fix
CVE-2022-32840Apple macOS improper privilege management7.8v3.10.6%2022-08-24Fix
CVE-2022-32839Apple macOS arbitrary code execution9.8v3.13.8%2022-08-24Fix
CVE-2022-32838Apple macOS improper authorization5.5v3.10.5%2022-08-24Fix
CVE-2022-32837Apple macOS out-of-bounds write7.8v3.10.8%2022-08-24Fix
CVE-2022-32834Apple macOS information disclosure5.5v3.10.6%2022-08-24Fix
CVE-2022-32813Apple macOS out-of-bounds write7.8v3.10.3%2022-08-24Fix
CVE-2022-32812Apple macOS out-of-bounds write7.8v3.10.6%2022-08-24Fix
CVE-2022-32811Apple macOS improper locking7.8v3.10.5%2022-08-24Fix
CVE-2022-32810Apple macOS out-of-bounds write7.8v3.10.7%2022-08-24Fix
CVE-2022-32793Apple macOS out-of-bounds write7.5v3.11.1%2022-08-24Fix
CVE-2022-27812Stormshield Network Security denial of service7.5v3.10.7%2022-08-24Fix
CVE-2022-25903opcua denial of service (DoS)7.5v3.11.4%2022-08-24Fix
CVE-2022-24375node-opcua denial of service (DoS)7.5v3.11.7%2022-08-24Fix
CVE-2022-20122Android use-after-free9.8v3.10.4%2022-08-24Fix
CVE-2022-2978Linux kernel flaw use-after-free7.8NVD v3.10.3%2022-08-24Fix
CVE-2022-2569ARC Informatique PcVue OAuth database cleartext storage of sensitive information5.5v3.10.1%2022-08-24Fix
CVE-2022-2234mySCADA myPRO command injection8.8NVD v3.143.2%2022-08-24Fix
CVE-2022-38665RabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin6.5v3.10.8%2022-08-23Fix
CVE-2022-38664Cross-site scripting in Jenkins Job Configuration History Plugin5.4v3.10.7%2022-08-23Fix
CVE-2022-38663Improper masking of credentials Jenkins in Git Plugin6.5v3.10.9%2022-08-23Fix
CVE-2022-38463ServiceNow cross-site scripting6.1v3.12.7%2022-08-23NucleiFix
CVE-2022-38172ServiceNow cross-site scripting6.1v3.10.6%2022-08-23Fix
CVE-2022-37428PowerDNS Recursor incomplete cleanup6.5v3.11.4%2022-08-23Fix
CVE-2022-37223SQL injection in jflyfox jfinal9.8v3.10.9%2022-08-23
CVE-2022-37199SQL injection in jflyfox jfinal9.8v3.10.9%2022-08-23
CVE-2022-37113Bluecms SQL injection9.8v3.114.4%2022-08-23
CVE-2022-37112Bluecms SQL injection9.8v3.10.9%2022-08-23
CVE-2022-37111Bluecms SQL injection9.8v3.10.9%2022-08-23
CVE-2022-36405amCharts: Charts and Maps WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.6%2022-08-23Fix
CVE-2022-36394Contest Gallery WordPress plugin authenticated SQL injection (SQLi)8.8v3.10.9%2022-08-23Fix
CVE-2022-36389Better Messages WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2022-08-23Fix
CVE-2022-36379ЮKassa для WooCommerce WordPress plugin cross-site request forgery leading to plugin settings update8.8v3.10.5%2022-08-23Fix
CVE-2022-36350PukiWiki Development Team PukiWiki stored cross-site scripting5.4v3.10.5%2022-08-23Fix
CVE-2022-36347Alpine PhotoTile for Pinterest WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.6%2022-08-23
CVE-2022-36341AS Create Pinterest Pinboard Pages plugin settings stored cross-site scripting5.4v3.10.5%2022-08-23
CVE-2022-36292Gallery PhotoBlocks WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2022-08-23Fix
CVE-2022-36288Download Manager WordPress plugin Multiple cross-site request forgery (CSRF)8.8v3.10.3%2022-08-23Fix
CVE-2022-36285Uploading SVG, WEBP and ICO files WordPress plugin authenticated arbitrary file upload7.2v3.11.2%2022-08-23Fix
CVE-2022-36282Search Exclude WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.5%2022-08-23Fix
CVE-2022-36261Taogogo taoCMS path traversal9.1v3.11.1%2022-08-23
CVE-2022-35733UNIMO Technology digital video recorders web interface missing authentication9.8v3.11.5%2022-08-23Fix
CVE-2022-35726Video Gallery WordPress plugin broken authentication9.8v3.10.7%2022-08-23Fix
CVE-2022-35278HTML injection in ActiveMQ Artemis Web console6.1v3.11.7%2022-08-23Fix
CVE-2022-3524259sec THE Leads Management System: 59sec Lite plugin settings vulnerability5.3v3.10.7%2022-08-23Fix
CVE-2022-35235WPide WordPress plugin authenticated arbitrary file read4.9v3.11.1%2022-08-23Fix
CVE-2022-35203TRENDnet Tv-ip572pi improper access control7.2v3.11.1%2022-08-23
CVE-2022-35191D-Link Dsl-3782 Firmware improper resource release6.5v3.11.0%2022-08-23
CVE-2022-35115IceWarp Webclient DC2 SQL injection9.8v3.10.7%2022-08-23Fix
CVE-2022-34919Zengenti Contensis file upload9.8v3.11.7%2022-08-23Exploit code
CVE-2022-34868ЮKassa для WooCommerce WordPress plugin authenticated arbitrary settings update vulnerability6.5NVD v3.11.1%2022-08-23Fix
CVE-2022-34658Download Manager WordPress plugin Multiple authenticated persistent cross-site scripting (XSS)5.4v3.10.6%2022-08-23Fix
CVE-2022-34648Uploading SVG, WEBP and ICO files WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.5%2022-08-23Fix
CVE-2022-34486PukiWiki Development Team PukiWiki path traversal7.2v3.11.3%2022-08-23Fix
CVE-2022-33916OPC Foundation Ua .net Standard Stack information disclosure7.5v3.11.3%2022-08-23Fix
CVE-2022-33142Better Messages WordPress plugin denial of service (DoS)6.5NVD v3.11.1%2022-08-23Fix
CVE-2022-31676VMware Tools improper privilege management7.8v3.10.5%2022-08-23Fix
CVE-2022-29476Notification Bar for WordPress plugin unauthenticated stored cross-site scripting (XSS)6.1v3.10.5%2022-08-23Fix
CVE-2022-28883F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service7.5v3.10.6%2022-08-23
CVE-2022-28882F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service7.5v3.10.4%2022-08-23
CVE-2022-27637PukiWiki Development Team PukiWiki reflected cross-site scripting6.1v3.10.6%2022-08-23Fix
CVE-2022-25888opcua denial of service (DoS)7.5v3.11.3%2022-08-23Fix
CVE-2022-25761open62541/open62541 denial of service (DoS)7.5v3.11.4%2022-08-23Fix
CVE-2022-25304opcua denial of service (DoS)7.5v3.11.3%2022-08-23Fix
CVE-2022-25302ASNeG/OpcUaStack denial of service (DoS)7.5v3.10.8%2022-08-23
CVE-2022-25231node-opcua denial of service (DoS)7.5v3.11.3%2022-08-23Fix
CVE-2022-24381ASNeG/OpcUaStack denial of service (DoS)7.5v3.10.9%2022-08-23
CVE-2022-24298FreeOpcUa/freeopcua denial of service (DoS)7.5v3.10.9%2022-08-23
CVE-2022-21208node-opcua denial of service (DoS)7.5v3.11.6%2022-08-23Fix
CVE-2022-2965Improper restriction of rendered UI layers or frames in notrinos/Notrinoserp4.3v3.10.7%2022-08-23Fix
CVE-2022-2956ConsoleTVs Noxen users.php cross-site scripting6.1v3.10.6%2022-08-23
CVE-2022-2946vim/vim GitHub repository use-after-free7.8NVD v3.10.5%2022-08-23Fix
CVE-2022-2938kernel use-after-free7.8NVD v3.10.3%2022-08-23Fix
CVE-2022-2829Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm5.4NVD v3.10.8%2022-08-23Fix
CVE-2022-2796Cross-site scripting (XSS) Stored in pimcore/pimcore4.8v3.11.6%2022-08-23Fix
CVE-2022-1989CODESYS Visualization login dialog vulnerability5.3v3.10.8%2022-08-23Fix
CVE-2022-1513Lenovo PC Manager OS command injection7.3CNA v3.10.6%2022-08-23Fix
CVE-2022-38668Crowcpp Crow uninitialized resource use7.5v3.11.4%2022-08-22
CVE-2022-38667Crowcpp Crow use-after-free9.8v3.12.9%2022-08-22
CVE-2022-38171Xpdfreader Xpdf integer overflow7.8v3.10.3%2022-08-22Fix
CVE-2022-37134D-Link DIR-816 improper quantity validation9.8v3.121.2%2022-08-22
CVE-2022-37133D-Link DIR-816 improper resource release7.5v3.11.3%2022-08-22
CVE-2022-36346MaxButtons WordPress plugin Multiple cross-site request forgery (CSRF)8.8v3.10.4%2022-08-22Fix
CVE-2022-36251oretnom23 Clinics Patient Management System cross-site scripting6.1v3.10.6%2022-08-22
CVE-2022-36198PHPGurukul Bus Pass Management System SQL injection9.8v3.11.2%2022-08-22
CVE-2022-35656Pegasystems Pega Infinity cross-site request forgery6.8CNA v3.00.3%2022-08-22Fix
CVE-2022-35655Pegasystems Pega Infinity cross-site scripting6.1CNA v3.00.5%2022-08-22Fix
CVE-2022-35654Pegasystems Pega Infinity cross-site scripting6.1CNA v3.00.5%2022-08-22Fix
CVE-2022-35583wkhtmltopdf server-side request forgery9.8v3.116.4%2022-08-22Exploit codeFix
CVE-2022-35150Baijiacms unrestricted file upload9.8v3.11.2%2022-08-22
CVE-2022-34858OAuth 2.0 client for SSO WordPress plugin authentication bypass9.8v3.11.7%2022-08-22Fix
CVE-2022-34857SP Project and Document Manager WordPress plugin reflected cross-site scripting (XSS)6.1v3.10.6%2022-08-22Fix
CVE-2022-34776Tabit information disclosure7.5v3.10.5%2022-08-22
CVE-2022-34775Tabit Excessive data exposure7.5v3.10.5%2022-08-22
CVE-2022-34774Tabit account details endpoint vulnerability5.3v3.10.4%2022-08-22
CVE-2022-34773Tabit HTTP method manipulation9.8v3.10.6%2022-08-22
CVE-2022-34772Tabit OTP login vulnerability8.8v3.10.5%2022-08-22
CVE-2022-34771Tabit arbitrary SMS send on Tabits behalf3.5NVD v3.10.4%2022-08-22
CVE-2022-34770Tabit sensitive information disclosure7.5v3.10.4%2022-08-22
CVE-2022-34652WWBN AVideo ObjectYPT functionality SQL injection8.8v3.11.1%2022-08-22
CVE-2022-34347Download Manager WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2022-08-22Fix
CVE-2022-34149WP OAuth Server WordPress plugin authentication bypass9.8v3.11.3%2022-08-22Fix
CVE-2022-33932Dell PowerScale OneFS primary channel vulnerability5.3CNA v3.10.9%2022-08-22Fix
CVE-2022-33900Easy Digital Downloads WordPress plugin PHP object injection7.2v3.10.9%2022-08-22Fix
CVE-2022-33149WWBN AVideo ObjectYPT functionality SQL injection8.8v3.11.8%2022-08-22
CVE-2022-33148WWBN AVideo ObjectYPT functionality SQL injection8.8v3.11.1%2022-08-22
CVE-2022-33147WWBN AVideo ObjectYPT functionality SQL injection8.8v3.11.8%2022-08-22
CVE-2022-32778WWBN AVideo cookie functionality information disclosure7.5v3.12.3%2022-08-22
CVE-2022-32777WWBN AVideo cookie functionality information disclosure7.5v3.12.3%2022-08-22
CVE-2022-32772WWBN AVideo footer alerts functionality cross-site scripting6.1NVD v3.14.0%2022-08-22Nuclei
CVE-2022-32771WWBN AVideo footer alerts functionality cross-site scripting6.1NVD v3.14.2%2022-08-22Nuclei
CVE-2022-32770WWBN AVideo footer alerts functionality cross-site scripting6.1NVD v3.14.4%2022-08-22Nuclei
CVE-2022-32769WWBN AVideo objects id handling functionality authentication bypass5.0v3.10.8%2022-08-22
CVE-2022-32768WWBN AVideo objects id handling functionality authentication bypass4.2v3.10.9%2022-08-22
CVE-2022-32761WWBN AVideo An information disclosure6.5v3.12.7%2022-08-22
CVE-2022-32572WWBN AVideo An OS command injection8.8NVD v3.124.4%2022-08-22
CVE-2022-32480Dell PowerScale OneFS insecure default initialization4.3CNA v3.10.9%2022-08-22Fix
CVE-2022-32282WWBN AVideo login functionality vulnerability8.8v3.11.8%2022-08-22
CVE-2022-31238Dell PowerScale OneFS information disclosure4.7CNA v3.10.2%2022-08-22Fix
CVE-2022-31237Dell PowerScale OneFS improper preservation of permissions3.3CNA v3.10.2%2022-08-22Fix
CVE-2022-30690WWBN AVideo image403 functionality cross-site scripting6.1NVD v3.183.9%2022-08-22
CVE-2022-30605WWBN AVideo session id functionality privilege escalation8.8v3.14.8%2022-08-22
CVE-2022-30547WWBN AVideo unzipDirectory functionality path traversal9.9v3.163.7%2022-08-22
CVE-2022-30534WWBN AVideo An OS command injection8.8NVD v3.175.0%2022-08-22
CVE-2022-29468WWBN AVideo cross-site request forgery8.8v3.11.7%2022-08-22
CVE-2022-28712WWBN AVideo videoAddNew functionality cross-site scripting9.0v3.13.0%2022-08-22
CVE-2022-28710WWBN AVideo chunkFile functionality information disclosure6.5v3.12.6%2022-08-22
CVE-2022-28598frappe erpnext cross-site scripting6.1v3.14.0%2022-08-22Exploit code
CVE-2022-26842WWBN AVideo charts tab selection functionality reflected cross-site scripting9.6v3.13.8%2022-08-22
CVE-2022-26061HDF5 Group libhdf5 gif2h5 functionality heap-based buffer overflow7.8v3.10.6%2022-08-22Fix
CVE-2022-25972HDF5 Group libhdf5 gif2h5 functionality out-of-bounds write7.8v3.10.6%2022-08-22Fix
CVE-2022-25942HDF5 Group libhdf5 gif2h5 functionality out-of-bounds read7.8v3.10.6%2022-08-22Fix
CVE-2022-25812Transposh WordPress Translation plugin Admin+ RCE7.2NVD v3.11.7%2022-08-22Fix
CVE-2022-25811Transposh WordPress Translation plugin Admin+ SQL injection7.2NVD v3.11.4%2022-08-22Fix
CVE-2022-25810Transposh WordPress Translation plugin Subscriber+ Unauthorised Calls6.5NVD v3.11.0%2022-08-22Fix
CVE-2022-2932Cross-site scripting (XSS) Reflected in bustle/mobiledoc-kit6.1NVD v3.10.9%2022-08-22Fix
CVE-2022-2930Unverified password change in OctoPrint/OctoPrint7.8v3.10.3%2022-08-22Fix
CVE-2022-2927Weak password requirements in notrinos/Notrinoserp9.8v3.10.9%2022-08-22Fix
CVE-2022-2923Null pointer dereference in Vim/Vim5.5v3.10.5%2022-08-22Fix
CVE-2022-2890Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm5.4NVD v3.10.9%2022-08-22Fix
CVE-2022-2873Linux kernel An out-of-bounds access5.5NVD v3.10.3%2022-08-22Fix
CVE-2022-2842SourceCodester Gym Management System login.php SQL injection9.8v3.10.8%2022-08-22
CVE-2022-2841CrowdStrike Falcon uninstallation handler missing authorization2.7v3.14.8%2022-08-22Exploit code
CVE-2022-2600Auto-hyperlink URLs WordPress plugin Tab Nabbing5.4NVD v3.10.6%2022-08-22
CVE-2022-2594Advanced Custom Fields unauthenticated file upload8.8NVD v3.11.6%2022-08-22Fix
CVE-2022-2593Better Search and Replace WordPress plugin Admin+ SQLi7.2NVD v3.11.3%2022-08-22Fix
CVE-2022-2558Simple Job Board WordPress plugin Resume disclosure via directory listing5.3NVD v3.11.0%2022-08-22Fix
CVE-2022-2557WordPress Team Members Showcase plugin Subscriber+ arbitrary file read and deletion8.8NVD v3.11.6%2022-08-22Fix
CVE-2022-2555Yotpo Reviews for WooCommerce WordPress plugin arbitrary settings update via CSRF6.5NVD v3.10.4%2022-08-22
CVE-2022-2552Duplicator WordPress plugin unauthenticated system information disclosure5.3NVD v3.111.3%2022-08-22NucleiExploit codeFix
CVE-2022-2551Duplicator WordPress plugin unauthenticated Backup download7.5NVD v3.117.7%2022-08-22NucleiExploit codeFix
CVE-2022-2544Ninja Job Board WordPress plugin Resume disclosure via directory listing7.5NVD v3.14.3%2022-08-22NucleiFix
CVE-2022-2532Feed Them Social WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2022-08-22Fix
CVE-2022-2407WP phpMyAdmin WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.8%2022-08-22Fix
CVE-2022-2392Lana Downloads Manager WordPress plugin Contributor+ arbitrary file download6.5NVD v3.11.1%2022-08-22Fix
CVE-2022-2389Automations By Autonami WordPress plugin Subscriber+ Automation creation4.3NVD v3.10.4%2022-08-22Fix
CVE-2022-2388WP Coder WordPress plugin code deletion via CSRF6.5NVD v3.10.4%2022-08-22Fix
CVE-2022-2383Feed Them Social WordPress plugin reflected cross-site scripting6.1NVD v3.16.5%2022-08-22NucleiFix
CVE-2022-2382Product Slider for WooCommerce WordPress plugin Subscriber+ arbitrary options deletion4.3NVD v3.10.4%2022-08-22Fix
CVE-2022-2377Directorist WordPress plugin Subscriber+ arbitrary E-mail Sending4.3NVD v3.10.4%2022-08-22Fix
CVE-2022-2375WP Sticky Button WordPress plugin unauthenticated arbitrary settings update to stored XSS5.4NVD v3.10.4%2022-08-22Fix
CVE-2022-2362Download Manager WordPress plugin bypass IP Address Blocking Restriction7.5NVD v3.11.2%2022-08-22Fix
CVE-2022-2361Social Chat WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-22Fix
CVE-2022-2312Student Result or Employee Database WordPress plugin stored cross-site scripting via CSRF5.4NVD v3.10.3%2022-08-22Fix
CVE-2022-2276WP Edit Menu WordPress plugin unauthenticated arbitrary post deletion4.3NVD v3.10.4%2022-08-22Fix
CVE-2022-2275WP Edit Menu WordPress plugin arbitrary post deletion via CSRF4.3NVD v3.10.3%2022-08-22Fix
CVE-2022-2198WPQA WordPress plugin Subscriber+ Private Message disclosure via IDOR4.3NVD v3.10.7%2022-08-22Fix
CVE-2022-2172LinkWorth WordPress plugin arbitrary setting update via CSRF4.3NVD v3.10.4%2022-08-22Fix
CVE-2022-1932Rezgo Online Booking WordPress plugin reflected cross-site-scripting6.1NVD v3.10.6%2022-08-22Fix
CVE-2022-1930ReDoS in eth-account encode_structured_data function7.5NVD v3.10.9%2022-08-22Fix
CVE-2022-1340Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm5.4NVD v3.10.5%2022-08-22Fix
CVE-2022-1322Coming Soon - Under Construction WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-22
CVE-2022-1251Ask Me WordPress theme CSRF in Edit Profile4.3NVD v3.10.4%2022-08-22Fix
CVE-2022-0446Simple Banner WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2022-08-22Fix
CVE-2022-34916Apache Flume improper input validation (JNDI injection) in JMSMessageConsumer9.8v3.12.8%2022-08-21Fix
CVE-2022-30036Malighting Grandma2 Light hard-coded credentials8.8v3.10.8%2022-08-21Fix
CVE-2022-2921Exposure of private personal information to an unauthorized actor in notrinos/Notrinoserp8.8v3.11.3%2022-08-21Fix
CVE-2022-2885Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm4.8v3.10.5%2022-08-21Fix
CVE-2022-38493Rhonabwy weak cryptographic algorithm7.5v3.10.3%2022-08-20Fix
CVE-2022-36030SQL injection in Project-Nexus9.8CNA v3.10.8%2022-08-20
CVE-2022-2909SourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload8.8v3.10.8%2022-08-20
CVE-2022-37254DolphinPHP cross-site scripting5.4v3.10.5%2022-08-19
CVE-2022-37175Tenda AC15 Firmware out-of-bounds write9.8v3.11.0%2022-08-19
CVE-2022-36606Yimihome ywoa SQL injection9.8v3.11.0%2022-08-19
CVE-2022-36605Yimihome ywoa SQL injection9.8v3.10.8%2022-08-19
CVE-2022-36579Wellcms cross-site request forgery8.8v3.10.4%2022-08-19
CVE-2022-36578jizhiCMS SQL injection9.8v3.10.9%2022-08-19
CVE-2022-36577jizhiCMS cross-site request forgery8.8v3.10.4%2022-08-19
CVE-2022-36263Logitech Streamlabs Desktop arbitrary code execution7.3v3.10.4%2022-08-19
CVE-2022-36233Tendacn AC9 out-of-bounds write5.5v3.10.3%2022-08-19
CVE-2022-36225EyouCMS cross-site request forgery8.8v3.10.5%2022-08-19
CVE-2022-36224XunRuiCMS cross-site request forgery8.8v3.10.4%2022-08-19
CVE-2022-36220Ethz Safe Exam Browser code execution9.8v3.11.1%2022-08-19Fix
CVE-2022-36171Mapgis Igserver hard-coded credentials8.1v3.10.7%2022-08-19
CVE-2022-36170Mapgis Igserver hard-coded credentials8.8v3.10.9%2022-08-19
CVE-2022-36157Improper privilege management in com.Xuxueli:xxl-job8.8v3.11.5%2022-08-19Fix
CVE-2022-36031directus unhandled exception on illegal filename_disk value6.5CNA v3.11.0%2022-08-19Fix
CVE-2022-36009Incorrect parsing of access level in gomatrixserverlib and dendrite5.0CNA v3.10.8%2022-08-19Fix
CVE-2022-36008Message length overflow in frontier7.1CNA v3.11.2%2022-08-19
CVE-2022-35910jellyfin cross-site scripting5.4v3.10.8%2022-08-19
CVE-2022-35909Incorrect Access Control and cross-site scripting in Jellyfin8.8v3.11.6%2022-08-19Fix
CVE-2022-35692Adobe Commerce improper access control security feature bypass5.3CNA v3.10.8%2022-08-19Fix
CVE-2022-35554Bpcbt Smartvista cross-site scripting6.1v3.10.5%2022-08-19
CVE-2022-35201Tenda AC18 remote command execution9.8v3.13.4%2022-08-19
CVE-2022-35167Prinitix Cloud Print Management incorrect permission assignment8.8v3.10.8%2022-08-19
CVE-2022-34624mealie insufficient session expiration5.9v3.10.6%2022-08-19
CVE-2022-34621mealie insecure direct object reference6.5v3.11.0%2022-08-19Fix
CVE-2022-34615mealie weak password requirements9.8v3.11.5%2022-08-19Fix
CVE-2022-29805Fishbowlinventory Fishbowl Java deserialization of untrusted data9.8v3.127.4%2022-08-19
CVE-2022-23460Stack overflow in Jsonxx7.5NVD v3.10.7%2022-08-19
CVE-2022-23459Double free or use-after-free in Value class of Jsonxx9.8NVD v3.10.9%2022-08-19
CVE-2022-22489IBM MQ XML external entity injection8.2CNA v3.01.7%2022-08-19Fix
CVE-2022-2889vim/vim GitHub repository use-after-free7.8v3.10.5%2022-08-19Fix
CVE-2022-2886Laravel deserialization8.8v3.10.7%2022-08-19Fix
CVE-2022-2793Emerson Electric Proficy Machine Edition missing integrity check7.8v3.10.1%2022-08-19
CVE-2022-2792Emerson Electric Proficy Machine Edition improper access control7.5v3.10.4%2022-08-19
CVE-2022-2790Emerson Electric Proficy Machine Edition improper signature verification5.9v3.10.1%2022-08-19
CVE-2022-2789Emerson Electric Proficy Machine Edition insufficient verification of data authenticity5.5v3.10.1%2022-08-19
CVE-2022-2788Emerson Electric Proficy Machine Edition path traversal7.3v3.10.2%2022-08-19Fix
CVE-2022-2075Octopus Deploy Octopus Server denial of service7.5v3.10.7%2022-08-19Fix
CVE-2022-2074Octopus Deploy Octopus Server denial of service7.5v3.10.8%2022-08-19Fix
CVE-2022-2049Octopus Deploy Octopus Server denial of service7.5v3.10.7%2022-08-19Fix
CVE-2022-1901Octopus Deploy Octopus Server improper privilege management5.3v3.10.5%2022-08-19Fix
CVE-2022-1021Insecure storage of sensitive information in chatwoot/chatwoot5.4NVD v3.10.7%2022-08-19Fix
CVE-2022-0542Cross-site scripting (XSS) DOM in chatwoot/chatwoot6.1NVD v3.10.9%2022-08-19Fix
CVE-2022-37770JPEG Libjpeg denial of service6.5v3.10.7%2022-08-18Fix
CVE-2022-37769JPEG Libjpeg denial of service6.5v3.10.7%2022-08-18Fix
CVE-2022-37768JPEG Libjpeg infinite loop7.5v3.11.0%2022-08-18Fix
CVE-2022-37422Path traversal in Payara7.5v3.11.1%2022-08-18Exploit codeFix
CVE-2022-37063Flir AX8 cross-site scripting5.4v3.11.6%2022-08-18Fix
CVE-2022-37062Flir AX8 missing authentication7.5v3.13.1%2022-08-18Fix
CVE-2022-37061Flir AX8 OS command injection9.8v3.199.6%2022-08-18NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-37060Flir AX8 path traversal7.5v3.118.0%2022-08-18Fix
CVE-2022-37049Broadcom tcpreplay out-of-bounds write7.8v3.10.4%2022-08-18Fix
CVE-2022-37048Broadcom tcpreplay out-of-bounds write7.8v3.10.4%2022-08-18Fix
CVE-2022-37047Broadcom tcpreplay out-of-bounds write7.8v3.10.4%2022-08-18Fix
CVE-2022-37025McAfee Security Scan Plus improper privilege management7.8v3.10.2%2022-08-18Fix
CVE-2022-36947FastStone Image Viewer out-of-bounds write9.8v3.12.8%2022-08-18Fix
CVE-2022-36729Library Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-36728Library Management System SQL injection9.8v3.11.0%2022-08-18
CVE-2022-36727Library Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-36725Library Management System SQL injection9.8v3.11.0%2022-08-18
CVE-2022-36722Library Management System SQL injection9.8v3.11.0%2022-08-18
CVE-2022-36024Pycord Development pycord slash command handling vulnerability7.5CNA v3.10.8%2022-08-18Fix
CVE-2022-36023Remote denial of service in Hyperledger Fabric Gateway7.0CNA v3.11.1%2022-08-18Fix
CVE-2022-35976weaveworks vscode-gitops-tools improper KubeConfig handling allows arbitrary code execution5.2CNA v3.10.5%2022-08-18
CVE-2022-35975Improper object validation allows for arbitrary code execution in GitOps Tools extension for VSCode9.0CNA v3.11.3%2022-08-18
CVE-2022-35606Inventory Management System SQL injection9.8v3.10.8%2022-08-18
CVE-2022-35605Inventory Management System SQL injection9.8v3.10.8%2022-08-18
CVE-2022-35603Inventory Management System SQL injection9.8v3.10.8%2022-08-18
CVE-2022-35602Inventory Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-35601Inventory Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-35599Inventory Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-35598Inventory Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-35540Dotnetcore Agileconfig use of hard-coded credentials in AgileConfig.Client9.8v3.11.4%2022-08-18Fix
CVE-2022-35213Ecommerce-CodeIgniter-Bootstrap cross-site scripting6.1v3.10.6%2022-08-18
CVE-2022-35212Os Commerce cross-site scripting6.1v3.10.5%2022-08-18Fix
CVE-2022-35204Vite vulnerable to directory traversal via crafted URL to victim's service4.3v3.11.2%2022-08-18Fix
CVE-2022-35198Contract Management System Project Contract Managment System improper authentication7.5v3.10.8%2022-08-18
CVE-2022-35175Barangay Management System SQL injection9.8v3.10.9%2022-08-18
CVE-2022-35174Cross-site scripting in getkirby/Starterkit5.4v3.10.7%2022-08-18
CVE-2022-35173nginx Njs improper check for exceptional conditions7.5v3.11.3%2022-08-18Fix
CVE-2022-35166JPEG Libjpeg infinite loop5.5v3.10.3%2022-08-18
CVE-2022-35165Axiosys Bento4 infinite loop5.5v3.10.3%2022-08-18
CVE-2022-35164GNU LibreDWG use-after-free9.8v3.11.0%2022-08-18Fix
CVE-2022-35154Shopro Mall System SQL injection9.8v3.11.0%2022-08-18
CVE-2022-35153FusionPBX command injection9.8v3.11.8%2022-08-18
CVE-2022-34488Intel(R) NUC Laptop Kits privilege escalation7.8v3.10.2%2022-08-18Fix
CVE-2022-34345Intel(R) NUC Laptop Kits firmware for some improper input validation6.2v3.10.3%2022-08-18Fix
CVE-2022-33311Cybozu Office Address Book information disclosure4.3v3.10.9%2022-08-18Fix
CVE-2022-33209Intel(R) NUC Laptop Kits firmware for some improper input validation7.8v3.10.2%2022-08-18Fix
CVE-2022-33151Cybozu Office specific parameters cross-site scripting6.1v3.10.6%2022-08-18Fix
CVE-2022-32583Cybozu Office Scheduler vulnerability4.3v3.10.8%2022-08-18Fix
CVE-2022-32579Intel(R) NUC Laptop Kits firmware for some improper initialization7.2v3.10.3%2022-08-18Fix
CVE-2022-32544Cybozu Office Project vulnerability4.3v3.10.8%2022-08-18Fix
CVE-2022-32453Cybozu Office HTTP header injection6.5v3.10.7%2022-08-18Fix
CVE-2022-32283Cybozu Office Cabinet vulnerability4.3v3.10.9%2022-08-18Fix
CVE-2022-30944Intel(R) AMT and Intel(R) Standard Manageability insufficiently protected credentials5.5v3.10.2%2022-08-18Fix
CVE-2022-30693Cybozu Office system configuration information disclosure5.3v3.10.9%2022-08-18Fix
CVE-2022-30604Cybozu Office specific parameters cross-site scripting6.1v3.10.6%2022-08-18Fix
CVE-2022-30601Intel(R) AMT and Intel(R) Standard Manageability insufficiently protected credentials9.8v3.10.9%2022-08-18Fix
CVE-2022-30296Intel Datacenter Group Event Intel(R) insufficiently protected credentials7.5v3.10.7%2022-08-18Fix
CVE-2022-29891Cybozu Office Custom App vulnerability4.3v3.10.9%2022-08-18Fix
CVE-2022-29550Qualys Cloud Agent sensitive information in log files5.5v3.10.4%2022-08-18Fix
CVE-2022-29549Qualys Cloud Agent For Linux improper integrity check validation7.3v3.10.3%2022-08-18Fix
CVE-2022-29507Intel Team Blue Intel(R) insufficiently protected credentials5.5v3.10.2%2022-08-18Fix
CVE-2022-29487Cybozu Office cross-site scripting6.1v3.10.6%2022-08-18Fix
CVE-2022-28858Intel(R) NUC Laptop Kits privilege escalation7.8v3.10.2%2022-08-18Fix
CVE-2022-28757Local privilege escalation in Auto Updater for Zoom Client for Meetings for macOS8.8CNA v3.10.2%2022-08-18Fix
CVE-2022-28715Cybozu Office specific parameters cross-site scripting6.1v3.10.6%2022-08-18Fix
CVE-2022-28709Intel(R) E810 Ethernet Controllers firmware for some improper access control4.4v3.10.2%2022-08-18Fix
CVE-2022-28697Intel(R) AMT and Intel(R) Standard Manageability firmware improper access control6.8v3.10.4%2022-08-18Fix
CVE-2022-28696Intel(R) Distribution for Python uncontrolled search path7.8v3.10.2%2022-08-18Fix
CVE-2022-27500Intel(R) Support Android application incorrect default permissions5.5v3.10.2%2022-08-18Fix
CVE-2022-27493Intel(R) NUC Laptop Kits firmware for some improper initialization7.8v3.10.2%2022-08-18Fix
CVE-2022-26844version insufficiently protected credentials7.8v3.10.2%2022-08-18Fix
CVE-2022-26374version installation binaries for Intel(R) SEAPI all uncontrolled search path7.8v3.10.2%2022-08-18Fix
CVE-2022-26373Intel(R) Processors information disclosure5.5NVD v3.10.4%2022-08-18Fix
CVE-2022-26344version installation binaries for Intel(R) SEAPI all incorrect default permissions7.8v3.10.2%2022-08-18Fix
CVE-2022-26074Intel(R) SPS firmware subsystem incomplete cleanup4.4v3.10.2%2022-08-18Fix
CVE-2022-26017Intel(R) DSA software for improper access control8.0v3.10.4%2022-08-18Fix
CVE-2022-25999Intel Enpirion Digital Power Configurator Gui uncontrolled search path7.8v3.10.2%2022-08-18Fix
CVE-2022-25986Cybozu Office Scheduler information disclosure4.3v3.10.9%2022-08-18Fix
CVE-2022-25966Intel(R) Edge Insights for Industrial software improper access control7.8v3.10.2%2022-08-18Fix
CVE-2022-25899Intel(R) incorrect default permissions9.8v3.11.1%2022-08-18Fix
CVE-2022-25841Intel Datacenter Group Event Intel(R) uncontrolled search path7.8v3.10.2%2022-08-18Fix
CVE-2022-25228CandidATS SQL injection6.5v3.11.0%2022-08-18Fix
CVE-2022-24378Intel(R) Data Center Manager software improper initialization5.5v3.10.2%2022-08-18Fix
CVE-2022-23403Intel(R) Data Center Manager software improper input validation5.5v3.10.2%2022-08-18Fix
CVE-2022-23182Intel(R) Data Center Manager software improper access control8.8v3.10.4%2022-08-18Fix
CVE-2022-22730Intel(R) Edge Insights for Industrial software improper authentication9.8v3.10.9%2022-08-18Fix
CVE-2022-21812Intel(R) HAXM software improper access control7.8v3.10.3%2022-08-18Fix
CVE-2022-21807Intel(R) VTune(TM) Profiler software uncontrolled search path7.8v3.10.3%2022-08-18Fix
CVE-2022-21793Intel(R) Ethernet 500 Series Controller drivers for VMWare insufficient control flow management5.5v3.10.2%2022-08-18Fix
CVE-2022-21240Intel(R) PROSet/Wireless WiFi products out-of-bounds read4.4v3.10.2%2022-08-18Fix
CVE-2022-21233Intel(R) Processors some improper isolation5.5v3.10.3%2022-08-18Fix
CVE-2022-21229Intel(R) NUC 9 Extreme Laptop Kit drivers privilege escalation7.8v3.10.2%2022-08-18Fix
CVE-2022-21225Intel(R) Data Center Manager software improper neutralization8.0v3.11.6%2022-08-18Fix
CVE-2022-21212Intel(R) PROSet/Wireless WiFi products improper input validation6.5v3.10.3%2022-08-18Fix
CVE-2022-21197Intel(R) PROSet/Wireless WiFi products improper input validation7.5v3.10.8%2022-08-18Fix
CVE-2022-21181Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper input validation7.8v3.10.3%2022-08-18Fix
CVE-2022-21172Intel(R) PROSet/Wireless WiFi products out-of-bounds write6.7v3.10.2%2022-08-18Fix
CVE-2022-21160Intel(R) PROSet/Wireless WiFi products denial of service7.5v3.10.8%2022-08-18Fix
CVE-2022-21152Intel(R) Edge Insights for Industrial software improper access control5.5v3.10.2%2022-08-18Fix
CVE-2022-21148Intel(R) Edge Insights for Industrial software improper access control7.8v3.10.2%2022-08-18Fix
CVE-2022-21140Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products improper access control5.5v3.10.2%2022-08-18Fix
CVE-2022-21139Intel(R) PROSet/Wireless WiFi products inadequate encryption strength8.8v3.10.2%2022-08-18Fix
CVE-2022-2876SourceCodester Student Management System index.php SQL injection9.8v3.10.7%2022-08-18
CVE-2022-2874Null pointer dereference in Vim/Vim5.5v3.10.5%2022-08-18Fix
CVE-2022-2625PostgreSQL mass assignment8.0NVD v3.11.9%2022-08-18Fix
CVE-2022-2568Red Hat Ansible Automation Platform privilege escalation6.5v3.10.9%2022-08-18Fix
CVE-2022-38392Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate attackers to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation music video. A reported produc5.3v3.10.4%2022-08-17
CVE-2022-38149HashiCorp Consul Template could reveal Vault secret contents in error messages7.5v3.10.8%2022-08-17Fix
CVE-2022-37459Amperecomputing Ampere Altra Max observable discrepancy7.8v3.10.2%2022-08-17Fix
CVE-2022-36216DedeCMS code injection7.2v3.12.1%2022-08-17
CVE-2022-36215Dedebiz Dedecmsv6 remote code execution7.2v3.12.2%2022-08-17
CVE-2022-36191gpac out-of-bounds write5.5v3.10.4%2022-08-17Fix
CVE-2022-36190gpac use-after-free9.8v3.11.0%2022-08-17Fix
CVE-2022-36186gpac null pointer dereference7.5v3.10.9%2022-08-17Fix
CVE-2022-35516DedeCMS code injection9.8v3.12.5%2022-08-17
CVE-2022-35151Keking kkFileView cross-site scripting6.1v3.11.4%2022-08-17Nuclei
CVE-2022-35148MacCMS SQL injection6.5v3.10.7%2022-08-17
CVE-2022-35147Html-js DoraCMS information disclosure9.8v3.11.4%2022-08-17
CVE-2022-35133Cherrytree A cross-site scripting6.1v3.10.5%2022-08-17Fix
CVE-2022-35122Ecowitt GW1100 An improper access control9.1v3.11.1%2022-08-17
CVE-2022-35121xxyopen Novel-Plus SQL injection9.8v3.10.9%2022-08-17
CVE-2022-35117oretnom23 Clinics Patient Management System cross-site scripting4.8v3.10.6%2022-08-17
CVE-2022-31262GOG galaxy local privilege escalation7.8v3.10.5%2022-08-17Exploit code
CVE-2022-30262Emerson Controlwave Micro insufficient verification of data authenticity7.8v3.10.2%2022-08-17Fix
CVE-2022-28752Local privilege escalation in the Zoom Rooms for Windows client8.8CNA v3.10.1%2022-08-17Fix
CVE-2022-28751Local privilege escalation in Zoom Client for Meetings for MacOS8.8CNA v3.10.1%2022-08-17Fix
CVE-2022-23765Iptime NAS family CSRF8.8v3.10.5%2022-08-17Fix
CVE-2022-23764TERUTEN WebCube update remote code execution9.8v3.10.7%2022-08-17Fix
CVE-2022-23747Sony Xperia buffer overflow9.8NVD v3.110.2%2022-08-17
CVE-2022-22455IBM Security Verify Governance Identity Manager virtual appliance vulnerability2.3CNA v3.00.5%2022-08-17Fix
CVE-2022-2871Cross-site scripting (XSS) Stored in notrinos/Notrinoserp5.4v3.10.6%2022-08-17Fix
CVE-2022-2870Laravel deserialization9.8v3.10.8%2022-08-17Fix
CVE-2022-2869libtiff integer underflow5.5NVD v3.10.3%2022-08-17Fix
CVE-2022-2868libtiff improper input validation5.5NVD v3.10.3%2022-08-17Fix
CVE-2022-2867libtiff integer underflow5.5NVD v3.10.3%2022-08-17Fix
CVE-2022-2862vim/vim GitHub repository use-after-free7.8v3.10.9%2022-08-17Fix
CVE-2022-2849Heap-based buffer overflow in Vim/Vim7.8NVD v3.10.5%2022-08-17Fix
CVE-2022-2845Improper validation of specified quantity in input in Vim/Vim7.8NVD v3.10.5%2022-08-17Fix
CVE-2022-2547Softing Secure Integration Server null pointer dereference7.5v3.11.5%2022-08-17
CVE-2022-2338Softing Secure Integration Server cleartext transmission of sensitive information5.3v3.10.2%2022-08-17
CVE-2022-2337Softing Secure Integration Server null pointer dereference7.5v3.11.5%2022-08-17
CVE-2022-2336Softing Secure Integration Server improper authentication9.8v3.11.0%2022-08-17
CVE-2022-2335Softing Secure Integration Server integer underflow7.5v3.11.5%2022-08-17
CVE-2022-2334Softing Secure Integration Server uncontrolled search path element7.2v3.112.2%2022-08-17MetasploitExploit codeKCV
CVE-2022-1748Softing Secure Integration Server null pointer dereference7.5v3.11.0%2022-08-17
CVE-2022-1410Remote code execution in Device42 ApplianceManager console8.8NVD v3.11.1%2022-08-17Fix
CVE-2022-1401Device42 CMDB insufficient validation of provided paths in Exago WrImageResource.axd7.5NVD v3.118.4%2022-08-17Fix
CVE-2022-1400Device42 CMDB hard-coded encryption key IV in Exago WebReportsApi.dll9.8NVD v3.10.8%2022-08-17Fix
CVE-2022-1399Device42 CMDB remote code execution in scheduled tasks component9.1NVD v3.10.9%2022-08-17Fix
CVE-2022-1373Softing Secure Integration Server relative path traversal7.2v3.112.8%2022-08-17MetasploitExploit codeKCV
CVE-2022-1069Softing Secure Integration Server out-of-bounds read7.5v3.11.5%2022-08-17
CVE-2022-38362Apache Airflow docker Provider RCE vulnerability in example dag8.8v3.11.8%2022-08-16Fix
CVE-2022-38238Xpdf out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-38237Xpdf out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-38236Xpdf buffer overflow7.8v3.10.3%2022-08-16
CVE-2022-38235Xpdf improper check for exceptional conditions5.5v3.10.3%2022-08-16
CVE-2022-38234Xpdf improper check for exceptional conditions5.5v3.10.3%2022-08-16
CVE-2022-38233Xpdf improper check for exceptional conditions5.5v3.10.3%2022-08-16
CVE-2022-38231Xpdf out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-38230Xpdf incorrect comparison5.5v3.10.5%2022-08-16
CVE-2022-38229Xpdf out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-38228Xpdf out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-38227Xpdf out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-38216Mapbox is vulnerable to integer overflow7.5NVD v3.10.8%2022-08-16Fix
CVE-2022-38194Portal for ArcGIS system properties are not properly encrypted ( only)6.7CNA v3.10.1%2022-08-16Fix
CVE-2022-38193Code injection issue in Portal for ArcGIS ( and)6.1CNA v3.10.9%2022-08-16Fix
CVE-2022-38192There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript6.1CNA v3.10.6%2022-08-16Fix
CVE-2022-38189There is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript5.4CNA v3.10.6%2022-08-16Fix
CVE-2022-38184There is an improper access control vulnerability in Portal for ArcGIS7.5CNA v3.11.0%2022-08-16Fix
CVE-2022-37781Fdkaac out-of-bounds write7.8v3.10.4%2022-08-16Fix
CVE-2022-37439Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input5.5v3.10.2%2022-08-16Fix
CVE-2022-37438Information disclosure via the dashboard drilldown in Splunk Enterprise3.5v3.10.5%2022-08-16Fix
CVE-2022-37437Ingest Actions UI in Splunk Enterprise disabled TLS certificate validation9.8v3.10.4%2022-08-16Fix
CVE-2022-37393Zimbra zmslapd arbitrary module load7.8NVD v3.11.7%2022-08-16Exploit codeFix
CVE-2022-36599Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List9.8v3.11.1%2022-08-16
CVE-2022-36530Rageframe cross-site scripting6.1v3.10.9%2022-08-16
CVE-2022-36381Nintendo Wi-Fi Network Adaptor WAP-001 OS command injection7.2v3.11.5%2022-08-16Fix
CVE-2022-36344JustSystems JUST Online Update for J-License' unquoted search path9.8v3.10.8%2022-08-16Fix
CVE-2022-36312Airspan AirVelocity cross-site request forgery8.8NVD v3.10.3%2022-08-16Fix
CVE-2022-36311Airspan AirVelocity cross-site scripting6.1NVD v3.10.4%2022-08-16Fix
CVE-2022-36310Airspan AirVelocity 1500 SNMP service vulnerability8.8NVD v3.11.5%2022-08-16Fix
CVE-2022-36309Airspan AirVelocity OS command injection8.8NVD v3.124.6%2022-08-16Fix
CVE-2022-36308Airspan AirVelocity plaintext password storage9.1NVD v3.10.7%2022-08-16Fix
CVE-2022-36307Airspan AirVelocity insufficiently protected credentials6.8NVD v3.10.3%2022-08-16Fix
CVE-2022-36306Airspan AirVelocity 1500 web management interface information disclosure6.5NVD v3.11.0%2022-08-16Fix
CVE-2022-36293Nintendo Wi-Fi Network Adaptor WAP-001 buffer overflow7.2v3.11.2%2022-08-16Fix
CVE-2022-36273Tenda AC9 OS command injection9.8v3.12.4%2022-08-16
CVE-2022-36272Mingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter9.8v3.11.1%2022-08-16
CVE-2022-36242oretnom23 Clinics Patient Management System SQL injection9.8v3.10.9%2022-08-16
CVE-2022-36155Monostream Tifig resource exhaustion5.5v3.10.3%2022-08-16
CVE-2022-36153Monostream Tifig null pointer dereference5.5v3.10.3%2022-08-16
CVE-2022-36152Monostream Tifig memory leak5.5v3.10.3%2022-08-16
CVE-2022-36151Monostream Tifig null pointer dereference5.5v3.10.3%2022-08-16
CVE-2022-36150Monostream Tifig out-of-bounds write5.5v3.10.3%2022-08-16
CVE-2022-36149Monostream Tifig use-after-free5.5v3.10.3%2022-08-16
CVE-2022-36148Fdkaac incorrect comparison5.5v3.10.5%2022-08-16Fix
CVE-2022-36146Swfmill resource exhaustion5.5v3.10.3%2022-08-16
CVE-2022-36145Swfmill improper check for exceptional conditions5.5v3.10.3%2022-08-16
CVE-2022-36144Swfmill out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-36143Swfmill out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-36142Swfmill out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-36141Swfmill improper check for exceptional conditions5.5v3.10.3%2022-08-16
CVE-2022-36140Swfmill improper check for exceptional conditions5.5v3.10.3%2022-08-16
CVE-2022-36139Swfmill out-of-bounds write7.8v3.10.3%2022-08-16
CVE-2022-35734HJ Holdings 'Hulu / フールー' App hard-coded credentials7.5v3.10.7%2022-08-16Fix
CVE-2022-35486Otfcc memory corruption6.5v3.10.8%2022-08-16
CVE-2022-35485Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35484Otfcc null pointer dereference6.5v3.10.8%2022-08-16
CVE-2022-35483Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35482Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35481Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35479Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35478Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35477Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35476Otfcc out-of-bounds read6.5v3.10.8%2022-08-16
CVE-2022-35475Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35474Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35473Otfcc improper check for exceptional conditions6.5v3.10.8%2022-08-16
CVE-2022-35472Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35471Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35470Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35469Otfcc improper check for exceptional conditions6.5v3.10.8%2022-08-16
CVE-2022-35468Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35467Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35466Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35465Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35464Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35463Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35462Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35461Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35460Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35459Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35458Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35456Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35455Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35454Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35453Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35452Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35451Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35450Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35449Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35448Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35447Otfcc out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35434JPEG Quant Smooth incorrect comparison5.5v3.10.5%2022-08-16Fix
CVE-2022-35433ffjpeg JFIF parser memory leak6.5v3.10.7%2022-08-16
CVE-2022-35239Contec SolarView Compact improper input validation8.8v3.11.4%2022-08-16Fix
CVE-2022-35114swftools out-of-bounds read5.5v3.10.3%2022-08-16
CVE-2022-35113swftools out-of-bounds write5.5v3.10.3%2022-08-16
CVE-2022-35111swftools resource exhaustion5.5v3.10.3%2022-08-16
CVE-2022-35110swftools memory leak5.5v3.10.3%2022-08-16