CVE-2022 list

CVE-2022 records published in August 2022

Page two of three: records 1,001 to 2,000 of the 2,086 published in August 2022, newest first. The first page carries the figures for August 2022.

CVE-2022 records published in August 2022, newest first: records 1,001 to 2,000 of 2,086
CVE Summary CVSS EPSS Published Signals
CVE-2022-35109swftools out-of-bounds write5.5v3.10.3%2022-08-16
CVE-2022-35108swftools null pointer dereference5.5v3.10.3%2022-08-16
CVE-2022-35107swftools resource exhaustion5.5v3.10.3%2022-08-16
CVE-2022-35106swftools out-of-bounds read5.5v3.10.3%2022-08-16
CVE-2022-35105swftools out-of-bounds write5.5v3.10.3%2022-08-16
CVE-2022-35104swftools out-of-bounds write5.5v3.10.3%2022-08-16
CVE-2022-35101swftools out-of-bounds write5.5v3.10.3%2022-08-16
CVE-2022-35100swftools out-of-bounds read6.5v3.10.7%2022-08-16
CVE-2022-35013Pngdec resource exhaustion6.5v3.10.8%2022-08-16
CVE-2022-35012Pngdec out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35011Pngdec buffer overflow8.8v3.11.0%2022-08-16
CVE-2022-35010Pngdec out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35009Pngdec resource exhaustion6.5v3.10.8%2022-08-16
CVE-2022-35008Pngdec out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35007Pngdec out-of-bounds write6.5v3.10.8%2022-08-16
CVE-2022-35004Bitbank Software JPEGDEC TIFFSHORT parsing vulnerability5.5v3.10.3%2022-08-16
CVE-2022-35003Bitbanksoftware Jpegdec buffer overflow7.8v3.10.3%2022-08-16
CVE-2022-35002Bitbank Software JPEGDEC TIFFSHORT parsing vulnerability5.5v3.10.3%2022-08-16
CVE-2022-35000Bitbank Software JPEGDEC fseek handling vulnerability5.5v3.10.3%2022-08-16
CVE-2022-34999Bitbanksoftware Jpegdec incorrect comparison5.5v3.10.5%2022-08-16
CVE-2022-34998Bitbanksoftware Jpegdec buffer overflow7.8v3.10.3%2022-08-16
CVE-2022-34259Adobe Commerce improper access control security feature bypass5.3CNA v3.11.6%2022-08-16Fix
CVE-2022-34258Adobe Commerce stored XSS arbitrary code execution4.8CNA v3.168.5%2022-08-16Fix
CVE-2022-34257Adobe Commerce stored XSS arbitrary code execution6.1CNA v3.11.0%2022-08-16Fix
CVE-2022-34256Adobe Commerce improper authorization privilege escalation7.5CNA v3.12.1%2022-08-16Fix
CVE-2022-34255Adobe Commerce improper access control privilege escalation8.8CNA v3.12.2%2022-08-16Fix
CVE-2022-34254Adobe Commerce improper limitation of a pathname to a restricted directory arbitrary code execution8.5CNA v3.02.2%2022-08-16Fix
CVE-2022-34253Adobe Commerce XML injection arbitrary code execution9.1CNA v3.04.9%2022-08-16Fix
CVE-2022-34156HJ Holdings 'Hulu / フールー' App improper certificate validation4.8v3.10.2%2022-08-16Fix
CVE-2022-33939Yokogawa Electric CENTUM VP / CS 3000 controller FCS resource exhaustion7.5v3.11.1%2022-08-16Fix
CVE-2022-30576TIBCO Statistica stored cross-site scripting (XSS)8.7CNA v3.10.5%2022-08-16Fix
CVE-2022-30575TIBCO Statistica reflected cross-site scripting (XSS)7.3CNA v3.10.6%2022-08-16Fix
CVE-2022-30264Emerson DL8000 insufficient verification of data authenticity9.8v3.10.5%2022-08-16
CVE-2022-29959Emerson Openbsi insufficiently protected credentials5.5v3.10.3%2022-08-16Fix
CVE-2022-25799An open redirect vulnerability exists in CERT/CC VINCE software prior to6.1v3.10.6%2022-08-16Fix
CVE-2022-24952Jason Gauci Eternal Terminal Several denial of service6.5NVD v3.11.6%2022-08-16Fix
CVE-2022-24951Jason Gauci Eternal Terminal race condition7.0NVD v3.10.3%2022-08-16Fix
CVE-2022-24950Jason Gauci Eternal Terminal race condition7.5NVD v3.11.3%2022-08-16Fix
CVE-2022-24949Jason Gauci Eternal Terminal privilege escalation7.5NVD v3.11.0%2022-08-16Fix
CVE-2022-2847SourceCodester Guest Management System front.php SQL injection9.8v3.10.9%2022-08-16
CVE-2022-2846Calendar Event Multi View Unauthenticated arbitrary Event Creation to stored XSS4.3v3.12.6%2022-08-16Exploit codeFix
CVE-2022-2844MotoPress Timetable and Event Schedule Calendar cross-site scripting6.1v3.10.5%2022-08-16
CVE-2022-2843MotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross-site scripting6.1v3.10.6%2022-08-16
CVE-2022-2838The Eclipse Foundation Eclipse Sphinx XML external entity injection5.3v3.10.5%2022-08-16Fix
CVE-2022-2833Blender Endless infinite loop7.5NVD v3.11.1%2022-08-16Fix
CVE-2022-2832Blender null pointer dereference7.5NVD v3.11.7%2022-08-16Fix
CVE-2022-2831Blender integer overflow7.5NVD v3.11.5%2022-08-16Fix
CVE-2022-2662Sequi PortBloque S improper authentication9.8v3.10.9%2022-08-16
CVE-2022-2661Sequi PortBloque S improper authorization8.8NVD v3.10.8%2022-08-16
CVE-2022-38368Aviatrix Gateway improper authentication8.8v3.10.8%2022-08-15Fix
CVE-2022-38359Eyes of Network cross-site request forgery8.8NVD v3.10.5%2022-08-15
CVE-2022-38358Eyes of Network cross-site scripting6.1NVD v3.10.6%2022-08-15
CVE-2022-38357Eyes of Network Web improper neutralization8.8NVD v3.11.0%2022-08-15
CVE-2022-38223Tats w3m checkType located in etc.c out-of-bounds write7.8v3.10.5%2022-08-15Fix
CVE-2022-38221The Isle Evrima FTcpListener thread buffer overflow9.8v3.11.8%2022-08-15
CVE-2022-38191HTML injection vulnerability in Portal for ArcGIS6.1CNA v3.10.6%2022-08-15Fix
CVE-2022-38190Stored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps6.1CNA v3.10.6%2022-08-15Fix
CVE-2022-38188Esri Portal for ArcGIS reflected cross-site scripting7.1CNA v3.00.6%2022-08-15Fix
CVE-2022-38187Esri Portal for ArcGIS prevent access to sharing/rest/content/features/analyze to unauthorized users7.5CNA v3.10.7%2022-08-15
CVE-2022-38186Esri Portal for ArcGIS reflected cross-site scripting7.1CNA v3.00.6%2022-08-15Fix
CVE-2022-37401Apache OpenOffice Weak Master Keys8.8v3.11.8%2022-08-15Fix
CVE-2022-37400Apache OpenOffice web connection password storage insufficient randomness8.8v3.10.9%2022-08-15Fix
CVE-2022-36526D-Link Go-rt-ac750 authentication bypass7.5v3.11.2%2022-08-15
CVE-2022-36525D-Link Go-rt-ac750 buffer overflow9.8v3.11.6%2022-08-15
CVE-2022-36524D-Link Go-rt-ac750 improper authentication7.5v3.10.9%2022-08-15
CVE-2022-36523D-Link Go-rt-ac750 command injection9.8v3.12.2%2022-08-15
CVE-2022-36262Taogogo taoCMS code injection9.8v3.11.8%2022-08-15
CVE-2022-36010Arbitrary code execution via function parsing in react-editable-json-tree10.0CNA v3.11.5%2022-08-15Fix
CVE-2022-36007Partial path traversal in com.github.jlangch:venice6.1CNA v3.10.4%2022-08-15Fix
CVE-2022-36006arvados authenticated remote code execution due to insecure deserialization (GHSL-2022-063)7.9CNA v3.11.6%2022-08-15Fix
CVE-2022-35978Lua sandbox escape from mod in Minetest7.7CNA v3.12.9%2022-08-15Exploit codeFix
CVE-2022-35961ECDSA signature malleability in OpenZeppelin Contracts7.9CNA v3.10.4%2022-08-15Fix
CVE-2022-35954Delimiter injection vulnerability in @actions/core exportVariable5.0CNA v3.10.7%2022-08-15Fix
CVE-2022-35948CRLF injection in Nodejs undici via Content-Type5.3CNA v3.11.3%2022-08-15Fix
CVE-2022-35822Microsoft Windows Defender Credential Guard security feature bypass7.1CNA v3.10.9%2022-08-15Fix
CVE-2022-35624Nordicsemi NRF5 SDK For Mesh out-of-bounds write8.8v3.10.9%2022-08-15
CVE-2022-35623Nordicsemi NRF5 SDK For Mesh out-of-bounds write8.8v3.10.9%2022-08-15
CVE-2022-34711Microsoft Windows Defender Credential Guard elevation of privilege7.8CNA v3.10.8%2022-08-15Fix
CVE-2022-34294Totd insufficient entropy9.8v3.11.8%2022-08-15
CVE-2022-33993Domain Name Relay Daemon cache poisoning5.3v3.10.9%2022-08-15
CVE-2022-33992DNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka checking disabled) bit set to 1. This leads to disabling of DNSSEC protection provided by upstream resolvers.7.5v3.11.0%2022-08-15
CVE-2022-33991dproxy-nexgen authentication bypass by spoofing5.3v3.10.9%2022-08-15
CVE-2022-33990dproxy-nexgen cache poisoning7.5v3.11.2%2022-08-15
CVE-2022-33989dproxy-nexgen insufficient entropy5.3v3.11.0%2022-08-15
CVE-2022-33988dproxy-nexgen HTTP request smuggling7.5v3.11.1%2022-08-15
CVE-2022-28756Local privilege escalation in Auto Updater for Zoom Client for Meetings for macOS8.8CNA v3.10.2%2022-08-15Fix
CVE-2022-24654Intelbras Ata 200 Firmware "Field Server Address" field stored cross-site scripting5.4v3.11.2%2022-08-15Exploit code
CVE-2022-2824Authorization bypass through user-controlled key in openemr/openemr5.4NVD v3.10.7%2022-08-15Fix
CVE-2022-2822Authentication bypass by primary weakness in OctoPrint/OctoPrint7.5v3.10.8%2022-08-15Fix
CVE-2022-2821Missing critical step in authentication in NamelessMC/Nameless7.5NVD v3.11.3%2022-08-15Fix
CVE-2022-2820Session fixation in NamelessMC/Nameless8.2v3.10.7%2022-08-15Fix
CVE-2022-2819Heap-based buffer overflow in Vim/Vim7.8v3.10.6%2022-08-15Fix
CVE-2022-2818Improper removal of sensitive information before storage or transfer in cockpit-hq/cockpit8.8NVD v3.11.7%2022-08-15Fix
CVE-2022-2817vim/vim GitHub repository use-after-free7.8v3.10.5%2022-08-15Fix
CVE-2022-2816Out-of-bounds read in Vim/Vim7.8v3.10.5%2022-08-15Fix
CVE-2022-2814SourceCodester Simple and Nice Shopping Cart Script login.php cross-site scripting6.1v3.10.6%2022-08-15
CVE-2022-2813SourceCodester Guest Management System cleartext storage7.5v3.10.4%2022-08-15
CVE-2022-2812SourceCodester Guest Management System index.php SQL injection9.8v3.10.9%2022-08-15
CVE-2022-2811SourceCodester Guest Management System myform.php cross-site scripting6.1v3.10.6%2022-08-15
CVE-2022-2535SearchWP Live Ajax Search WordPress plugin unauthenticated arbitrary post Title disclosure5.3NVD v3.11.9%2022-08-15NucleiFix
CVE-2022-2384Digital Publications by Supsystic WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-15Fix
CVE-2022-2381E Unlocked - Student Result WordPress plugin arbitrary file upload via CSRF8.8NVD v3.10.5%2022-08-15
CVE-2022-2379Easy Student Results WordPress plugin sensitive information disclosure via REST API7.5NVD v3.13.4%2022-08-15Nuclei
CVE-2022-2378Easy Student Results WordPress plugin reflected cross-site scripting6.1NVD v3.10.6%2022-08-15
CVE-2022-2354WP-DBManager WordPress plugin Admin+ remote command execution7.2NVD v3.11.3%2022-08-15Fix
CVE-2022-2314VR Calendar WordPress plugin unauthenticated arbitrary function Call9.8NVD v3.117.6%2022-08-15NucleiFix
CVE-2022-2180GREYD.SUITE custom font upload feature unrestricted file upload9.8NVD v3.12.5%2022-08-15Fix
CVE-2022-2152Duplicate Page and Post WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-15Fix
CVE-2022-2116Elementor Contact Form DB WordPress plugin reflected cross-site scripting6.1NVD v3.10.6%2022-08-15Fix
CVE-2022-38183Gitea allowed assignment of private issues6.5v3.10.8%2022-08-12Fix
CVE-2022-38180JetBrain Ktor vulnerable to selection of wrong authentication provider5.3CNA v3.10.7%2022-08-12Fix
CVE-2022-38179JetBrains Ktor was vulnerable to a Reflect File Download attack4.7CNA v3.10.5%2022-08-12Fix
CVE-2022-37423Neo4j Graph apoc plugins partial path traversal7.5v3.11.4%2022-08-12Fix
CVE-2022-37397YugabyteDB YCQL LDAP authentication authentication bypass8.3CNA v3.10.9%2022-08-12
CVE-2022-37044Zimbra Collaboration cross-site scripting6.1v3.10.5%2022-08-12Fix
CVE-2022-37043Zimbra Collaboration cross-site request forgery5.7v3.10.3%2022-08-12Fix
CVE-2022-37041Zimbra Collaboration server-side request forgery7.5v3.10.7%2022-08-12Fix
CVE-2022-35980OpenSearch vulnerable to improper authorization of Index Containing Sensitive Information7.5CNA v3.11.2%2022-08-12Fix
CVE-2022-35956camilova activerecord-update-by-case update_by_case vulnerable to SQL injection5.8CNA v3.10.6%2022-08-12Fix
CVE-2022-35953URL redirection to untrusted site (open redirect) in bookwyrm7.1CNA v3.10.6%2022-08-12Fix
CVE-2022-35949Node.js undici `undici.request` vulnerable to SSRF using absolute URL on `pathname`5.3CNA v3.11.8%2022-08-12Fix
CVE-2022-35943codeigniter4 shield SameSite may allow cross-site request forgery (CSRF) protection to be bypassed5.9CNA v3.10.6%2022-08-12Fix
CVE-2022-35942loopback-connector-postgresql vulnerable to improper sanitization of `contains` Filter9.3CNA v3.10.6%2022-08-12Fix
CVE-2022-35932Missing rate limit when trying to join a password protected Nextcloud Talk conversation3.5CNA v3.11.3%2022-08-12Fix
CVE-2022-35590ForkCMS XSS via `end_date` parameter4.8v3.10.7%2022-08-12Fix
CVE-2022-35589ForkCMS XSS via `publish_on_time` parameter4.8v3.10.8%2022-08-12Fix
CVE-2022-35587ForkCMS XSS via `publish_on_date` parameter4.8v3.10.8%2022-08-12Fix
CVE-2022-35585ForkCMS stored XSS via `start_date` parameter4.8v3.10.8%2022-08-12Fix
CVE-2022-35561Tenda W6 /goform/WifiMacFilterSet stack-based buffer overflow7.5v3.11.0%2022-08-12
CVE-2022-35560Tenda W6 /goform/wifiSSIDset stack-based buffer overflow7.5v3.11.0%2022-08-12
CVE-2022-35559Tenda W6 /goform/setAutoPing stack-based buffer overflow9.8v3.112.0%2022-08-12
CVE-2022-35558Tenda W6 /goform/WifiMacFilterGet stack-based buffer overflow7.5v3.11.0%2022-08-12
CVE-2022-35557Tenda W6 /goform/wifiSSIDget stack-based buffer overflow7.5v3.11.0%2022-08-12
CVE-2022-35555Tenda W6 /goform/exeCommand command injection9.8v3.126.0%2022-08-12
CVE-2022-28636HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution7.4v3.10.2%2022-08-12Fix
CVE-2022-28635HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution7.4v3.10.2%2022-08-12Fix
CVE-2022-28634HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution6.7v3.10.2%2022-08-12Fix
CVE-2022-28633HPE Integrated Lights-Out 5 (iLO 5) unauthorized data modification7.3v3.10.2%2022-08-12Fix
CVE-2022-28632HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution8.8v3.10.4%2022-08-12Fix
CVE-2022-28631HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution8.8v3.10.4%2022-08-12Fix
CVE-2022-28630HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution7.3v3.10.2%2022-08-12Fix
CVE-2022-28629HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution7.8v3.10.2%2022-08-12Fix
CVE-2022-28628HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution8.4v3.10.2%2022-08-12Fix
CVE-2022-28627HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution8.4v3.10.2%2022-08-12Fix
CVE-2022-28626HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution6.7v3.10.2%2022-08-12Fix
CVE-2022-20362Android Bluetooth out-of-bounds write8.8v3.10.3%2022-08-12Fix
CVE-2022-20342Android WiFi information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20341Android ConnectivityService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20340Android SELinux policy information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20339Android information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20338Android Uri.java privilege escalation3.3NVD v3.10.2%2022-08-12Fix
CVE-2022-20336Android settings information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20335Android Wifi Slice privilege escalation3.3v3.10.1%2022-08-12Fix
CVE-2022-20334Android null pointer dereference6.5v3.10.2%2022-08-12Fix
CVE-2022-20333Android Bluetooth crash6.5v3.10.2%2022-08-12Fix
CVE-2022-20332Android PackageManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20331Android the Framework privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20330Android Bluetooth privilege escalation3.5v3.10.1%2022-08-12Fix
CVE-2022-20329Android Wifi privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20328Android PackageManager information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20327Android Wi-Fi information disclosure2.8v3.10.1%2022-08-12Fix
CVE-2022-20326Android Telephony information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20325Android Media code execution7.8v3.10.1%2022-08-12Fix
CVE-2022-20324Android Framework information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20323Android PackageManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20322Android PackageManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20321Android settings information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20320Android ActivityManager information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20319Android DreamServices privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20318Android PackageInstaller information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20317Android SystemUI information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20316Android ContentResolver information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20315Android ActivityManager information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20314Android KeyChain privilege escalation6.7v3.10.1%2022-08-12Fix
CVE-2022-20313Android Bluetooth out-of-bounds write6.8v3.10.2%2022-08-12Fix
CVE-2022-20312Android WifiP2pManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20311Android Telecomm information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20310Android Telecomm information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20309Android PackageInstaller information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20308Android hostapd denial of service7.5v3.10.6%2022-08-12Fix
CVE-2022-20307Android AlarmManagerService information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20306Android Camera Provider HAL memory corruption6.7v3.10.1%2022-08-12Fix
CVE-2022-20305Android ContentService information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20304Android Content information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20303Android ContentService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20302Android settings privilege escalation7.6v3.10.2%2022-08-12Fix
CVE-2022-20301Android Content information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20300Android Content information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20299Android ContentService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20298Android ContentService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20297Android settings privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20296Android ContentService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20295Android ContentService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20294Android Content information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20293Android LauncherApps information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20292Android settings privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20291Android AppOpsService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20290Android Midi privilege escalation5.5v3.10.1%2022-08-12Fix
CVE-2022-20289Android PackageInstaller information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20288Android AppSearchManagerService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20287Android AppSearchManagerService information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20286Android Connectivity privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20285Android PackageManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20284Android Telephony information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20283Android Bluetooth out-of-bounds write8.8v3.10.3%2022-08-12Fix
CVE-2022-20282Android AppWidget privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20281Android Core privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20280Android MMSProvider information disclosure3.3v3.10.2%2022-08-12Fix
CVE-2022-20279Android DevicePolicyManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20278Android Accounts information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20277Android DevicePolicyManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20276Android DevicePolicyManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20275Android DevicePolicyManager information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20274Android missing authorization7.8v3.10.1%2022-08-12Fix
CVE-2022-20273Android Bluetooth out-of-bounds read6.5v3.10.2%2022-08-12Fix
CVE-2022-20272Android PermissionController information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20271Android PermissionController privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20270Android Content information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20269Android Bluetooth out-of-bounds write6.8v3.10.2%2022-08-12Fix
CVE-2022-20268Android RestrictionsManager privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20267Android bluetooth privilege escalation3.3v3.10.1%2022-08-12Fix
CVE-2022-20266Android Companion privilege escalation5.0v3.10.1%2022-08-12Fix
CVE-2022-20265Android settings privilege escalation4.6v3.10.1%2022-08-12Fix
CVE-2022-20263Android missing authorization5.5v3.10.1%2022-08-12Fix
CVE-2022-20262Android ActivityManager information disclosure3.3v3.10.1%2022-08-12Fix
CVE-2022-20261Android LocationManager information disclosure2.3v3.10.1%2022-08-12Fix
CVE-2022-20260Android the Phone app crash5.5v3.10.1%2022-08-12Fix
CVE-2022-20259Android Telephony information disclosure5.5v3.10.1%2022-08-12Fix
CVE-2022-20258Android Bluetooth privilege escalation7.8v3.10.1%2022-08-12Fix
CVE-2022-20257Android Bluetooth privilege escalation3.3v3.10.1%2022-08-12Fix
CVE-2022-20256Android the Audio HAL out-of-bounds write6.4v3.10.1%2022-08-12Fix
CVE-2022-20255Android SettingsProvider privilege escalation4.4v3.10.1%2022-08-12Fix
CVE-2022-20254Android insecure permissions8.8v3.10.2%2022-08-12Fix
CVE-2022-20253Android Bluetooth denial of service6.5v3.10.2%2022-08-12Fix
CVE-2022-2804SourceCodester Zoo Management System apply_vacancy.php unrestricted upload9.8v3.11.0%2022-08-12
CVE-2022-2803SourceCodester Zoo Management System animals.php SQL injection9.8v3.10.8%2022-08-12
CVE-2022-2802SourceCodester Gas Agency Management System login.php SQL injection9.8v3.10.8%2022-08-12
CVE-2022-2801SourceCodester Automated Beer Parlour Billing System Login SQL injection9.8v3.10.6%2022-08-12
CVE-2022-2800SourceCodester Gym Management System clickjacking6.1v3.10.6%2022-08-12
CVE-2022-2797SourceCodester Student Information System view_student.php SQL injection9.8v3.10.6%2022-08-12
CVE-2022-2779SourceCodester Gas Agency Management System oneWord.php unrestricted upload9.8v3.10.9%2022-08-12
CVE-2022-2624Google Chrome PDF heap-based buffer overflow8.8v3.10.9%2022-08-12Fix
CVE-2022-2623Google Chrome Offline use-after-free8.8v3.10.7%2022-08-12Fix
CVE-2022-2622Google Chrome Safe Browsing vulnerability6.5v3.10.7%2022-08-12Fix
CVE-2022-2621Google Chrome extensions use-after-free8.8v3.10.7%2022-08-12Fix
CVE-2022-2620Google Chrome WebUI use-after-free8.8v3.10.7%2022-08-12Fix
CVE-2022-2619Google Chrome improper output encoding4.3v3.10.4%2022-08-12Fix
CVE-2022-2618Google Chrome improper input validation6.5v3.10.7%2022-08-12Fix
CVE-2022-2617Google Chrome Extensions API use-after-free8.8v3.10.4%2022-08-12Fix
CVE-2022-2616Google Chrome Extensions API inappropriate implementation6.5v3.10.5%2022-08-12Fix
CVE-2022-2615Google Chrome Cookies insufficient policy enforcement6.5v3.10.7%2022-08-12Fix
CVE-2022-2614Google Chrome Sign-In Flow use-after-free8.8v3.10.8%2022-08-12Fix
CVE-2022-2613Google Chrome Input use-after-free8.8v3.10.9%2022-08-12Fix
CVE-2022-2612Google Chrome Keyboard input side-channel information leak6.5v3.10.8%2022-08-12Fix
CVE-2022-2611Google Chrome Fullscreen API inappropriate implementation4.3v3.10.6%2022-08-12Fix
CVE-2022-2610Google Chrome Background Fetch insufficient policy enforcement6.5v3.10.8%2022-08-12Fix
CVE-2022-2609Google Chrome Nearby Share use-after-free8.8v3.10.5%2022-08-12Fix
CVE-2022-2608Google Chrome Overview Mode use-after-free8.8v3.10.5%2022-08-12Fix
CVE-2022-2607Google Chrome Tab Strip use-after-free8.8v3.10.5%2022-08-12Fix
CVE-2022-2606Google Chrome Managed devices API use-after-free8.8v3.10.7%2022-08-12Fix
CVE-2022-2605Google Chrome Dawn out-of-bounds read6.5v3.10.7%2022-08-12Fix
CVE-2022-2604Google Chrome Safe Browsing use-after-free8.8v3.10.7%2022-08-12Fix
CVE-2022-2603Google Chrome Omnibox use-after-free8.8v3.10.8%2022-08-12Fix
CVE-2022-2587Google Chrome Chrome OS Audio Server out-of-bounds write9.8v3.10.8%2022-08-12Fix
CVE-2022-2503Linux Kernel LoadPin bypass via dm-verity table reload6.7NVD v3.10.4%2022-08-12Fix
CVE-2022-2390Mutable pending intent in Google Play services SDK6.1CNA v3.10.1%2022-08-12Fix
CVE-2022-38161Gumstix Overo Sbc memory corruption7.5v3.10.6%2022-08-11
CVE-2022-38155Samsung mTower resource exhaustion7.5v3.11.0%2022-08-11
CVE-2022-38150Varnish Cache resource exhaustion7.5v3.11.4%2022-08-11Fix
CVE-2022-37042Synacor Zimbra Collaboration Suite (ZCS) authentication bypass9.8v3.191.9%2022-08-11KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2022-35678Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.7%2022-08-11Fix
CVE-2022-35677Adobe FrameMaker SVG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.5%2022-08-11Fix
CVE-2022-35676Adobe FrameMaker SVG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.5%2022-08-11Fix
CVE-2022-35675Adobe FrameMaker SVG File Parsing use-after-free remote code execution7.8CNA v3.10.5%2022-08-11Fix
CVE-2022-35674Adobe FrameMaker SVG File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2022-08-11Fix
CVE-2022-35673Adobe FrameMaker SVG File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2022-08-11Fix
CVE-2022-35671Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.6%2022-08-11Fix
CVE-2022-35670Adobe Acrobat Reader use-after-free memory leak5.5CNA v3.12.6%2022-08-11Fix
CVE-2022-35668Adobe Acrobat Reader improper input validation memory leak5.5CNA v3.14.3%2022-08-11Fix
CVE-2022-35667Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution7.8CNA v3.12.6%2022-08-11Fix
CVE-2022-35666Adobe Acrobat Reader improper input validation remote code execution7.8CNA v3.17.1%2022-08-11Fix
CVE-2022-35665Adobe Acrobat Reader use-after-free arbitrary code execution7.8CNA v3.13.9%2022-08-11Fix
CVE-2022-34264Adobe FrameMaker Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2022-08-11Fix
CVE-2022-34263Adobe Illustrator Font Parsing use-after-free remote code execution7.8CNA v3.00.5%2022-08-11Fix
CVE-2022-34262Adobe Illustrator Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2022-08-11Fix
CVE-2022-34261Adobe Illustrator Font Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2022-08-11Fix
CVE-2022-34260Adobe Illustrator Font Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2022-08-11Fix
CVE-2022-34235Adobe Premiere Elements uncontrolled search path element privilege escalation7.8CNA v3.10.3%2022-08-11Fix
CVE-2022-28755Improper URL parsing in Zoom Clients9.6CNA v3.10.8%2022-08-11Fix
CVE-2022-28754Zoom On-Premise Deployments: Improper access control7.1CNA v3.10.5%2022-08-11Fix
CVE-2022-28753Zoom On-Premise Deployments: Improper access control7.1CNA v3.10.5%2022-08-11Fix
CVE-2022-28750Zoom On-Premise Deployments: Stack buffer overflow in Meeting Connector7.5CNA v3.12.1%2022-08-11Fix
CVE-2022-20408Google Android kernel vulnerability7.5v3.10.3%2022-08-11Fix
CVE-2022-20407Google Android kernel vulnerability7.5v3.10.3%2022-08-11Fix
CVE-2022-20406Google Android kernel vulnerability7.5v3.10.3%2022-08-11Fix
CVE-2022-20405Google Android kernel vulnerability9.8v3.10.4%2022-08-11Fix
CVE-2022-20404Google Android kernel vulnerability7.5v3.10.3%2022-08-11Fix
CVE-2022-20403Google Android kernel vulnerability9.8v3.10.4%2022-08-11Fix
CVE-2022-20402Google Android kernel vulnerability9.8v3.10.4%2022-08-11Fix
CVE-2022-20401Android SAEMM_ContextManagement.c out-of-bounds read7.5v3.10.6%2022-08-11Fix
CVE-2022-20400Android cd_codec.c out-of-bounds write9.8v3.10.6%2022-08-11Fix
CVE-2022-20384Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A9.8v3.10.4%2022-08-11Fix
CVE-2022-20383Android g3aa_buffer_allocator.cc out-of-bounds write7.8v3.10.1%2022-08-11Fix
CVE-2022-20382Android (TBD) out-of-bounds write6.7v3.10.1%2022-08-11Fix
CVE-2022-20381Product: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A9.8v3.10.4%2022-08-11Fix
CVE-2022-20380Product: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A7.5v3.10.3%2022-08-11Fix
CVE-2022-20379Android lwis_buffer.c arbitrary code execution6.7v3.10.1%2022-08-11Fix
CVE-2022-20378Product: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A9.8v3.10.4%2022-08-11Fix
CVE-2022-20377Android keymaster_ipc.cpp privilege escalation6.7v3.10.1%2022-08-11Fix
CVE-2022-20376Android trusty-log.c use-after-free6.7v3.10.1%2022-08-11Fix
CVE-2022-20375Android LteRrcNr_Codec.c out-of-bounds read7.5v3.10.6%2022-08-11Fix
CVE-2022-20373Android st21nfc.c use-after-free6.4v3.10.1%2022-08-11Fix
CVE-2022-20372Android (TBD) out-of-bounds write6.7NVD v3.10.1%2022-08-11Fix
CVE-2022-20371Android dm-bow.c use-after-free6.4v3.10.1%2022-08-11Fix
CVE-2022-20370Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A7.5v3.10.3%2022-08-11Fix
CVE-2022-20369Android v4l2-mem2mem.c out-of-bounds write6.7v3.10.2%2022-08-11Fix
CVE-2022-20368Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel7.8v3.10.1%2022-08-11Fix
CVE-2022-20367Android lwis_ioctl.c out-of-bounds write6.7v3.10.1%2022-08-11Fix
CVE-2022-20366Android lwis_ioctl.c out-of-bounds write6.7v3.10.1%2022-08-11Fix
CVE-2022-20365Product: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A9.8v3.10.4%2022-08-11Fix
CVE-2022-20252Android PackageManager information disclosure3.3v3.10.1%2022-08-11Fix
CVE-2022-20251Android LocaleManager information disclosure3.3v3.10.1%2022-08-11Fix
CVE-2022-20250Android Messaging privilege escalation7.8v3.10.1%2022-08-11Fix
CVE-2022-20249Android LocaleManager information disclosure3.3v3.10.1%2022-08-11Fix
CVE-2022-20248Android settings privilege escalation7.8v3.10.1%2022-08-11Fix
CVE-2022-20247Android Media out-of-bounds read7.5v3.10.6%2022-08-11Fix
CVE-2022-20246Android WindowManager privilege escalation7.8v3.10.1%2022-08-11Fix
CVE-2022-20245Android WindowManager information disclosure2.4v3.10.1%2022-08-11Fix
CVE-2022-20244Android Bluetooth out-of-bounds write7.5v3.10.2%2022-08-11Fix
CVE-2022-20243Android Core Utilities information disclosure4.4v3.10.1%2022-08-11Fix
CVE-2022-20242Android Telephony information disclosure5.5v3.10.1%2022-08-11Fix
CVE-2022-20241Android Messaging information disclosure3.3v3.10.1%2022-08-11Fix
CVE-2022-20237Android miscdatabuilder.cpp out-of-bounds write9.8v3.10.6%2022-08-11Fix
CVE-2022-20180Android mali_gralloc_reference.cpp arbitrary code execution7.8v3.10.1%2022-08-11Fix
CVE-2022-20158Android backing-dev.c memory corruption6.7v3.10.1%2022-08-11Fix
CVE-2022-2777Cross-site scripting (XSS) Stored in microweber/microweber5.4v3.10.4%2022-08-11Fix
CVE-2022-2776SourceCodester Gym Management System delete_user.php denial of service5.3v3.10.6%2022-08-11
CVE-2022-2774SourceCodester Library Management System student.php SQL injection9.8v3.10.6%2022-08-11
CVE-2022-2773SourceCodester Apartment Visitor Management System profile.php cross-site scripting6.1v3.10.4%2022-08-11
CVE-2022-2772SourceCodester Apartment Visitor Management System action-visitor.php SQL injection9.8v3.10.5%2022-08-11
CVE-2022-2771SourceCodester Simple Online Book Store System bookPerPub.php SQL injection9.8v3.10.5%2022-08-11
CVE-2022-2770SourceCodester Simple Online Book Store System book.php SQL injection9.8v3.10.6%2022-08-11
CVE-2022-2769SourceCodester Company Website CMS contact cross-site scripting5.4v3.10.6%2022-08-11
CVE-2022-2768SourceCodester Library Management System cross-site scripting6.1v3.10.4%2022-08-11
CVE-2022-2767SourceCodester Online Admission System index.php cross-site scripting6.1v3.10.6%2022-08-11
CVE-2022-2766SourceCodester Loan Management System index.php SQL injection9.8v3.11.2%2022-08-11
CVE-2022-2765SourceCodester Company Website CMS settings improper authentication9.8v3.11.1%2022-08-11
CVE-2022-2751SourceCodester Company Website CMS add-portfolio.php unrestricted upload9.8v3.10.7%2022-08-11
CVE-2022-2750SourceCodester Company Website CMS Add service add-service.php unrestricted upload9.8v3.10.7%2022-08-11
CVE-2022-2749SourceCodester Gym Management System unrestricted upload8.8v3.10.8%2022-08-11
CVE-2022-2748SourceCodester Simple Online Book Store System edit.php cross-site scripting6.1v3.10.5%2022-08-11
CVE-2022-2747SourceCodester Simple Online Book Store book.php SQL injection9.8v3.10.6%2022-08-11
CVE-2022-2746SourceCodester Simple Online Book Store System Admin_ add.php unrestricted upload9.8v3.10.5%2022-08-11
CVE-2022-2745SourceCodester Gym Management System Add New Trainer add_trainers.php SQL injection9.8v3.10.5%2022-08-11
CVE-2022-2744SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload9.8v3.10.6%2022-08-11
CVE-2022-2740SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload9.8v3.10.7%2022-08-11
CVE-2022-2736SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload9.8v3.10.7%2022-08-11
CVE-2022-38133JetBrains TeamCity sensitive information in log files3.2CNA v3.10.4%2022-08-10Fix
CVE-2022-38130Keysight Technologies Sensor Management Server SQL injection9.8NVD v3.154.9%2022-08-10Nuclei
CVE-2022-38129Keysight Technologies Sensor Management Server path traversal9.8NVD v3.121.4%2022-08-10
CVE-2022-37024Zoho ManageEngine Firewall Analyzer remote code execution8.8v3.179.5%2022-08-10Fix
CVE-2022-37008Huawei HarmonyOS insufficient verification of data authenticity7.5v3.10.3%2022-08-10Fix
CVE-2022-37007Huawei HarmonyOS out-of-bounds read vulnerability in the ChinaDRM module7.5v3.10.6%2022-08-10Fix
CVE-2022-37006HarmonyOS permission control vulnerability in the network module7.5v3.10.5%2022-08-10Fix
CVE-2022-37005Huawei HarmonyOS argument injection vulnerability in settings7.5v3.10.5%2022-08-10Fix
CVE-2022-37004Huawei HarmonyOS OOBE bypass vulnerability in settings7.5v3.10.6%2022-08-10Fix
CVE-2022-37003Huawei HarmonyOS incorrect permission assignment vulnerability in the AOD lock screen module9.8v3.10.5%2022-08-10Fix
CVE-2022-37002Huawei EMUI unauthorized access vulnerability in the SystemUI module9.8v3.10.5%2022-08-10Fix
CVE-2022-37001Huawei HarmonyOS crash7.5v3.10.6%2022-08-10Fix
CVE-2022-36923Zoho ManageEngine Firewall Analyzer improper exception handling7.5v3.17.9%2022-08-10NucleiFix
CVE-2022-36801Atlassian Jira Server cross-site scripting6.1v3.166.3%2022-08-10Fix
CVE-2022-36750oretnom23 Clinics Patient Management System SQL injection9.8v3.11.0%2022-08-10
CVE-2022-36325Siemens RUGGEDCOM RM1224 LTE(4G) EU cross-site scripting6.8CNA v3.11.0%2022-08-10Fix
CVE-2022-36324Siemens RUGGEDCOM RM1224 LTE(4G) EU resource exhaustion7.5CNA v3.11.7%2022-08-10Fix
CVE-2022-36323Siemens RUGGEDCOM RM1224 LTE(4G) EU injection9.1CNA v3.11.8%2022-08-10Fix
CVE-2022-36270oretnom23 Clinics Patient Management System arbitrary code execution9.8v3.11.4%2022-08-10
CVE-2022-35715IBM InfoSphere Information Server information disclosure through error messages5.3CNA v3.01.0%2022-08-10Fix
CVE-2022-35697Adobe Experience Manager AEM file upload Security issue leading to RXSS5.4CNA v3.10.7%2022-08-10Fix
CVE-2022-35538WAVLINK WN572HP3 command injection9.8v3.12.2%2022-08-10
CVE-2022-35537WAVLINK WN572HP3 command injection9.8v3.12.2%2022-08-10
CVE-2022-35536WAVLINK WN572HP3 command injection9.8v3.12.2%2022-08-10
CVE-2022-35535WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35534WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35533WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35526WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35525WAVLINK WN572HP3 command injection9.8v3.12.4%2022-08-10
CVE-2022-35524WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35523WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35522WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35521WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35520WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35519WAVLINK WN572HP3 command injection9.8v3.12.3%2022-08-10
CVE-2022-35518WAVLINK WN572HP3 command injection9.8v3.11.5%2022-08-10
CVE-2022-35517WAVLINK WN572HP3 command injection8.8v3.12.3%2022-08-10
CVE-2022-35509EyouCMS cross-site scripting5.4v3.10.6%2022-08-10
CVE-2022-35491TOTOLINK A3002RU hard-coded credentials9.8v3.10.8%2022-08-10
CVE-2022-35426UCMS unrestricted file upload9.8v3.11.1%2022-08-10
CVE-2022-35293SAP Enable Now Manager missing authorization9.1v3.10.7%2022-08-10Fix
CVE-2022-35290SAP Authenticator information disclosure7.5v3.10.8%2022-08-10Fix
CVE-2022-35280IBM Robotic Process Automation weak password requirements4.6CNA v3.00.8%2022-08-10Fix
CVE-2022-34661Siemens Teamcenter infinite loop7.5v3.10.7%2022-08-10Fix
CVE-2022-34660Siemens Teamcenter command injection9.8v3.11.2%2022-08-10Fix
CVE-2022-34659Siemens Simcenter STAR-CCM+ information disclosure6.9CNA v4.00.6%2022-08-10Fix
CVE-2022-34365Dell Wyse Management Suite path traversal6.5CNA v3.10.8%2022-08-10Fix
CVE-2022-33931Dell Wyse Management Suite improper access control6.3CNA v3.10.4%2022-08-10Fix
CVE-2022-33930Dell Wyse Management Suite information disclosure through error messages4.3CNA v3.10.6%2022-08-10Fix
CVE-2022-33929Dell Wyse Management Suite cross-site scripting6.1CNA v3.10.5%2022-08-10Fix
CVE-2022-33928Dell Wyse Management Suite plaintext password storage6.4CNA v3.10.3%2022-08-10Fix
CVE-2022-33927Dell Wyse Management Suite session fixation5.4CNA v3.10.4%2022-08-10Fix
CVE-2022-33926Dell Wyse Management Suite improper access control7.1CNA v3.10.5%2022-08-10Fix
CVE-2022-33925Dell Wyse Management Suite improper access control6.5CNA v3.10.8%2022-08-10Fix
CVE-2022-33924Dell Wyse Management Suite improper access control4.3CNA v3.10.5%2022-08-10Fix
CVE-2022-32429Megatech Msnswitch improper authentication9.8v3.175.6%2022-08-10NucleiExploit code
CVE-2022-32245SAP BusinessObjects Business Intelligence Platform cleartext transmission of sensitive information8.2v3.10.5%2022-08-10Fix
CVE-2022-32148Exposure of client IP addresses in net/http6.5v3.11.4%2022-08-10Fix
CVE-2022-31780Apache Traffic Server HTTP/2 framing vulnerabilities7.5v3.12.3%2022-08-10Fix
CVE-2022-31779Apache Traffic Server improper HTTP/2 scheme and method validation7.5v3.12.4%2022-08-10Fix
CVE-2022-31778Apache Traffic Server Transfer-Encoding not treated as hop-by-hop7.5v3.12.0%2022-08-10Fix
CVE-2022-31675VMware vRealize Operations authentication bypass7.5v3.10.8%2022-08-10Fix
CVE-2022-31674VMware vRealize Operations sensitive information in log files4.3v3.10.6%2022-08-10Fix
CVE-2022-31673VMware vRealize Operations information disclosure8.8NVD v3.11.8%2022-08-10Fix
CVE-2022-31672VMware vRealize Operations improper privilege management7.2v3.10.6%2022-08-10Fix
CVE-2022-30635Stack exhaustion when decoding certain messages in encoding/gob7.5v3.11.7%2022-08-10Fix
CVE-2022-30633Stack exhaustion when unmarshaling certain documents in encoding/xml7.5v3.12.0%2022-08-10Fix
CVE-2022-30632Stack exhaustion on crafted paths in path/filepath7.5v3.11.9%2022-08-10Fix
CVE-2022-30631Stack exhaustion when reading certain archives in compress/gzip7.5v3.11.9%2022-08-10Fix
CVE-2022-30630Stack exhaustion in Glob on certain paths in io/fs7.5v3.11.9%2022-08-10Fix
CVE-2022-30629Session tickets lack random ticket_age_add in crypto/tls3.1v3.11.1%2022-08-10Fix
CVE-2022-30580Empty Cmd.Path can trigger unintended binary in os/exec on Windows7.8v3.10.6%2022-08-10Fix
CVE-2022-29804path traversal via Clean on Windows in path/filepath7.5v3.12.1%2022-08-10Fix
CVE-2022-29090Dell Wyse Management Suite information disclosure8.5CNA v3.10.4%2022-08-10Fix
CVE-2022-28881F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service7.5v3.10.5%2022-08-10
CVE-2022-28131Stack exhaustion from deeply nested XML documents in encoding/xml7.5v3.12.3%2022-08-10Fix
CVE-2022-28129Apache Traffic Server Insufficient Validation of HTTP/1.x headers7.5v3.12.3%2022-08-10Fix
CVE-2022-25973mc-kill-port arbitrary command execution7.8v3.10.5%2022-08-10
CVE-2022-25793Autodesk 3ds Max stack-based buffer overflow7.8v3.10.4%2022-08-10Fix
CVE-2022-25763Apache Traffic Server improper input validation on HTTP/2 headers7.5v3.12.0%2022-08-10Fix
CVE-2022-23238NetApp StorageGRID metrics and alert email configuration vulnerability6.5v3.10.7%2022-08-10Fix
CVE-2022-22983VMware Workstation insufficiently protected credentials5.9v3.10.3%2022-08-10Fix
CVE-2022-22490IBM Robotic Process Automation files accessible to external parties4.4CNA v3.00.8%2022-08-10Fix
CVE-2022-22411IBM Spectrum Scale DAS incorrect permission assignment6.3CNA v3.00.6%2022-08-10Fix
CVE-2022-22369IBM Workload Scheduler crash6.2CNA v3.00.2%2022-08-10Fix
CVE-2022-20914Cisco Identity Services Engine sensitive information disclosure4.9CNA v3.11.0%2022-08-10Fix
CVE-2022-20869Cisco BroadWorks Application Delivery Platform software cross-site scripting6.1CNA v3.10.6%2022-08-10Fix
CVE-2022-20866Cisco Adaptive Security Appliance Software RSA key storage information disclosure7.4CNA v3.117.9%2022-08-10Fix
CVE-2022-20852Cisco Webex Meetings web interface cross-site scripting5.4CNA v3.10.5%2022-08-10Fix
CVE-2022-20842Cisco Small Business RV Series Routers buffer overflow9.0CNA v3.11.9%2022-08-10Fix
CVE-2022-20841Cisco Small Business RV Series Routers buffer overflow9.0CNA v3.13.3%2022-08-10Fix
CVE-2022-20827Cisco Small Business RV Series Routers buffer overflow9.0CNA v3.11.9%2022-08-10Fix
CVE-2022-20820Cisco Webex Meetings web interface clickjacking5.4CNA v3.10.5%2022-08-10Fix
CVE-2022-20816Cisco Unified Communications Manager arbitrary file deletion6.5CNA v3.11.3%2022-08-10Fix
CVE-2022-20792Cisco Clam AntiVirus (ClamAV) out-of-bounds read7.8CNA v3.10.6%2022-08-10Fix
CVE-2022-20713Cisco Adaptive Security Appliance (ASA) Software HTTP request smuggling4.3CNA v3.11.8%2022-08-10Fix
CVE-2022-20361Android btif_dm.cc privilege escalation9.8v3.11.2%2022-08-10Exploit codeFix
CVE-2022-20360Android improper privilege management7.8v3.10.2%2022-08-10Exploit codeFix
CVE-2022-20358Android AbstractThreadedSyncAdapter.java information disclosure3.3NVD v3.10.2%2022-08-10Fix
CVE-2022-20357Android SurfaceControl.cpp information disclosure5.5v3.10.1%2022-08-10Fix
CVE-2022-20356Android ActiveServices.java privilege escalation7.8v3.10.1%2022-08-10Fix
CVE-2022-20355Android PacProxyService.java crash5.5v3.10.1%2022-08-10Fix
CVE-2022-20354Android Vpn.java privilege escalation7.8v3.10.1%2022-08-10Fix
CVE-2022-20353Android DefaultRingtonePreference.java information disclosure5.5v3.10.1%2022-08-10Fix
CVE-2022-20352Android LocationManagerService.java information disclosure5.5v3.10.1%2022-08-10Fix
CVE-2022-20350Android information disclosure5.5v3.10.1%2022-08-10Fix
CVE-2022-20349Android privilege escalation7.8v3.10.1%2022-08-10Fix
CVE-2022-20348Android privilege escalation7.8v3.10.1%2022-08-10Fix
CVE-2022-20347Android ConnectedDeviceDashboardFragment.java insecure permissions8.8v3.11.1%2022-08-10Exploit codeFix
CVE-2022-20346Android MPEG4Extractor.cpp out-of-bounds read6.5NVD v3.10.5%2022-08-10Fix
CVE-2022-20345Android l2c_ble.cc out-of-bounds write8.8v3.10.5%2022-08-10Fix
CVE-2022-20344Android EventThread.cpp privilege escalation7.0v3.10.1%2022-08-10Fix
CVE-2022-20239Android improper privilege management9.8v3.10.3%2022-08-10Fix
CVE-2022-2756Server-side request forgery (SSRF) in Kareadita/Kavita6.5NVD v3.13.3%2022-08-10NucleiFix
CVE-2022-2719ImageMagick reachable assertion5.5NVD v3.10.3%2022-08-10Fix
CVE-2022-2634Digi ConnectPort X2D web application vulnerability9.8v3.11.0%2022-08-10
CVE-2022-2458Red Hat Process Automation Manager 7 XML injection8.2v3.10.8%2022-08-10Fix
CVE-2022-2457Red Hat Process Automation Manager 7 missing brute-force protection9.8v3.10.6%2022-08-10
CVE-2022-2242KUKA V/KSS WoV SH access control vulnerability9.8CNA v3.11.2%2022-08-10Fix
CVE-2022-1962Stack exhaustion due to deeply nested types in go/parser5.5v3.10.9%2022-08-10Fix
CVE-2022-1705Improper sanitization of Transfer-Encoding headers in net/http6.5v3.11.4%2022-08-10Fix
CVE-2022-0028Palo Alto Networks PAN-OS Reflected Amplification denial of service8.6CNA v3.12.5%2022-08-10KEVFix
CVE-2022-36125Integer overflow when reading corrupted .avro file in Avro Rust SDK7.5v3.11.5%2022-08-09Fix
CVE-2022-36124Memory overconsumption in Avro Rust SDK7.5v3.11.4%2022-08-09Fix
CVE-2022-35827Visual Studio remote code execution8.8CNA v3.12.2%2022-08-09Fix
CVE-2022-35826Visual Studio remote code execution8.8CNA v3.12.2%2022-08-09Fix
CVE-2022-35825Visual Studio remote code execution8.8CNA v3.12.2%2022-08-09Fix
CVE-2022-35824Microsoft Azure Site Recovery remote code execution7.2CNA v3.12.4%2022-08-09Fix
CVE-2022-35821Microsoft Azure Sphere information disclosure4.4CNA v3.11.1%2022-08-09Fix
CVE-2022-35820Microsoft Windows Bluetooth driver elevation of privilege7.8CNA v3.10.6%2022-08-09Fix
CVE-2022-35819Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35818Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35817Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35816Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35815Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35814Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35813Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35812Microsoft Azure Site Recovery elevation of privilege4.9CNA v3.12.2%2022-08-09Fix
CVE-2022-35811Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35810Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35809Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35808Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35807Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35806Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.11.0%2022-08-09Fix
CVE-2022-35804Microsoft Windows SMB client and server remote code execution8.8CNA v3.12.9%2022-08-09Fix
CVE-2022-35802Microsoft Azure Site Recovery elevation of privilege8.1CNA v3.12.0%2022-08-09Fix
CVE-2022-35801Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35800Microsoft Azure Site Recovery elevation of privilege4.9CNA v3.12.1%2022-08-09Fix
CVE-2022-35799Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35797Microsoft Windows Hello security feature bypass6.1CNA v3.10.6%2022-08-09Fix
CVE-2022-35796Microsoft Edge (Chromium-based) elevation of privilege7.5CNA v3.11.4%2022-08-09Fix
CVE-2022-35795Microsoft Windows Error Reporting service elevation of privilege7.8CNA v3.10.7%2022-08-09Fix
CVE-2022-35794Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.11.9%2022-08-09Fix
CVE-2022-35793Microsoft Windows Print Spooler elevation of privilege7.3CNA v3.19.4%2022-08-09Fix
CVE-2022-35792Microsoft Windows Storage Spaces Direct elevation of privilege7.8CNA v3.10.6%2022-08-09Fix
CVE-2022-35791Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35790Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35789Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35788Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35787Microsoft Azure Site Recovery elevation of privilege4.9CNA v3.12.1%2022-08-09Fix
CVE-2022-35786Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35785Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35784Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.9%2022-08-09Fix
CVE-2022-35783Microsoft Azure Site Recovery elevation of privilege4.4CNA v3.11.7%2022-08-09Fix
CVE-2022-35782Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.8%2022-08-09Fix
CVE-2022-35781Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.8%2022-08-09Fix
CVE-2022-35780Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.8%2022-08-09Fix
CVE-2022-35779Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.10.9%2022-08-09Fix
CVE-2022-35777Visual Studio remote code execution8.8CNA v3.12.0%2022-08-09Fix
CVE-2022-35776Microsoft Azure Site Recovery denial of service6.2CNA v3.10.8%2022-08-09Fix
CVE-2022-35775Microsoft Azure Site Recovery elevation of privilege6.5CNA v3.11.8%2022-08-09Fix
CVE-2022-35774Microsoft Azure Site Recovery elevation of privilege4.9CNA v3.12.0%2022-08-09Fix
CVE-2022-35773Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.10.8%2022-08-09Fix
CVE-2022-35772Microsoft Azure Site Recovery remote code execution7.2CNA v3.12.3%2022-08-09Fix
CVE-2022-35771Microsoft Windows Defender Credential Guard elevation of privilege7.8CNA v3.10.8%2022-08-09Fix
CVE-2022-35769Microsoft Windows Point-to-Point Protocol (PPP) denial of service7.5CNA v3.12.4%2022-08-09Fix
CVE-2022-35768Microsoft Windows Kernel elevation of privilege7.8CNA v3.11.1%2022-08-09Fix
CVE-2022-35767Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.11.8%2022-08-09Fix
CVE-2022-35766Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.11.8%2022-08-09Fix
CVE-2022-35765Microsoft Windows Storage Spaces Direct elevation of privilege7.8CNA v3.10.5%2022-08-09Fix
CVE-2022-35764Microsoft Windows Storage Spaces Direct elevation of privilege7.8CNA v3.10.5%2022-08-09Fix
CVE-2022-35763Microsoft Windows Storage Spaces Direct elevation of privilege7.8CNA v3.10.5%2022-08-09Fix
CVE-2022-35762Microsoft Windows Storage Spaces Direct elevation of privilege7.8CNA v3.10.5%2022-08-09Fix
CVE-2022-35761Microsoft Windows Kernel elevation of privilege7.8CNA v3.14.1%2022-08-09Fix
CVE-2022-35760Microsoft ATA Port driver elevation of privilege7.8CNA v3.10.8%2022-08-09Fix
CVE-2022-35724Denial of service while reading data in Avro Rust SDK7.5v3.11.7%2022-08-09Fix
CVE-2022-34717Microsoft Office remote code execution8.8CNA v3.11.9%2022-08-09Fix
CVE-2022-34716NET information disclosure5.9CNA v3.12.4%2022-08-09Fix
CVE-2022-34715Microsoft Windows Network File System remote code execution9.8CNA v3.180.8%2022-08-09Fix
CVE-2022-34714Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.11.9%2022-08-09Fix
CVE-2022-34713Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution7.8CNA v3.167.8%2022-08-09KEVFix
CVE-2022-34712Microsoft Windows Defender Credential Guard information disclosure5.5CNA v3.11.5%2022-08-09Fix
CVE-2022-34710Microsoft Windows Defender Credential Guard information disclosure5.5CNA v3.11.5%2022-08-09Fix
CVE-2022-34709Microsoft Windows Defender Credential Guard security feature bypass6.0CNA v3.11.2%2022-08-09Fix
CVE-2022-34708Microsoft Windows Kernel information disclosure5.5CNA v3.11.5%2022-08-09Fix
CVE-2022-34707Microsoft Windows Kernel elevation of privilege7.8CNA v3.11.3%2022-08-09Fix
CVE-2022-34706Microsoft Windows Local Security Authority (LSA) elevation of privilege7.8CNA v3.10.5%2022-08-09Fix
CVE-2022-34705Microsoft Windows Defender Credential Guard elevation of privilege7.8CNA v3.10.9%2022-08-09Fix
CVE-2022-34704Microsoft Windows Defender Credential Guard information disclosure4.7CNA v3.11.2%2022-08-09Fix
CVE-2022-34703Microsoft Windows Partition Management driver elevation of privilege7.8CNA v3.10.6%2022-08-09Fix
CVE-2022-34702Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.11.3%2022-08-09Fix
CVE-2022-34701Microsoft Windows Secure Socket Tunneling Protocol (SSTP) denial of service7.5CNA v3.12.9%2022-08-09Fix
CVE-2022-34699Microsoft Windows Win32k elevation of privilege7.8CNA v3.14.5%2022-08-09Fix
CVE-2022-34696Microsoft Windows Hyper-V remote code execution7.8CNA v3.10.3%2022-08-09Fix
CVE-2022-34692Microsoft Exchange Server information disclosure5.3CNA v3.11.7%2022-08-09Fix
CVE-2022-34691Microsoft Windows active Directory Domain services elevation of privilege8.8CNA v3.12.2%2022-08-09Fix
CVE-2022-34690Microsoft Windows Fax service elevation of privilege7.1CNA v3.10.6%2022-08-09Fix
CVE-2022-34687Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.10.8%2022-08-09Fix
CVE-2022-34686Microsoft Azure RTOS GUIX Studio information disclosure5.5CNA v3.10.9%2022-08-09Fix
CVE-2022-34685Microsoft Azure RTOS GUIX Studio information disclosure5.5CNA v3.10.9%2022-08-09Fix
CVE-2022-33670Microsoft Windows Partition Management driver elevation of privilege7.8CNA v3.10.5%2022-08-09Fix
CVE-2022-33649Microsoft Edge (Chromium-based) security feature bypass9.6CNA v3.12.3%2022-08-09Fix
CVE-2022-33648Microsoft Excel remote code execution7.8CNA v3.10.8%2022-08-09Fix
CVE-2022-33646Microsoft Azure Batch Node agent elevation of privilege7.0CNA v3.10.4%2022-08-09Fix
CVE-2022-33640Microsoft System Center Operations Manager: Open Management Infrastructure elevation of privilege7.8CNA v3.10.6%2022-08-09Fix
CVE-2022-33636Microsoft Edge (Chromium-based) remote code execution8.3CNA v3.11.3%2022-08-09Fix
CVE-2022-33631Microsoft Excel security feature bypass7.3CNA v3.10.8%2022-08-09Fix
CVE-2022-32189Panic when decoding Float and Rat types in math/big7.5NVD v3.12.6%2022-08-09Fix
CVE-2022-30574TIBCO FTL and eFTL ftlserver information disclosure4.6CNA v3.10.2%2022-08-09Fix
CVE-2022-30573TIBCO FTL privilege escalation6.7CNA v3.10.8%2022-08-09Fix
CVE-2022-30197Microsoft Windows Kernel information disclosure5.5CNA v3.11.0%2022-08-09Fix
CVE-2022-30194Microsoft Windows WebBrowser control remote code execution7.5CNA v3.11.5%2022-08-09Fix
CVE-2022-30176Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.11.0%2022-08-09Fix
CVE-2022-30175Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.11.2%2022-08-09Fix
CVE-2022-30144Microsoft Windows Bluetooth service remote code execution7.5CNA v3.10.9%2022-08-09Fix
CVE-2022-30134Microsoft Exchange Server information disclosure6.5CNA v3.12.0%2022-08-09Fix
CVE-2022-30133Microsoft Windows Point-to-Point Protocol (PPP) remote code execution9.8CNA v3.12.7%2022-08-09Fix
CVE-2022-29083Dell CPG BIOS improper authentication6.8CNA v3.10.4%2022-08-09Fix
CVE-2022-25907ts-deepmerge prototype pollution9.8v3.11.8%2022-08-09Fix
CVE-2022-24516Microsoft Exchange Server elevation of privilege8.0CNA v3.12.4%2022-08-09Fix
CVE-2022-24477Microsoft Exchange Server elevation of privilege8.0CNA v3.12.2%2022-08-09Fix
CVE-2022-21980Microsoft Exchange Server elevation of privilege8.0CNA v3.12.7%2022-08-09Fix
CVE-2022-21979Microsoft Exchange Server information disclosure4.8CNA v3.12.2%2022-08-09Fix
CVE-2022-2734Improper restriction of rendered UI layers or frames in openemr/openemr5.4NVD v3.10.8%2022-08-09Fix
CVE-2022-2733Cross-site scripting (XSS) Reflected in openemr/openemr6.1NVD v3.195.8%2022-08-09NucleiFix
CVE-2022-2732Missing authorization in openemr/openemr8.3v3.10.9%2022-08-09Fix
CVE-2022-2731Cross-site scripting (XSS) Reflected in openemr/openemr6.1v3.10.6%2022-08-09Fix
CVE-2022-2730Authorization bypass through user-controlled key in openemr/openemr6.5v3.10.8%2022-08-09Fix
CVE-2022-2729Cross-site scripting (XSS) DOM in openemr/openemr5.4v3.10.5%2022-08-09Fix
CVE-2022-2728SourceCodester Gym Management System index.php SQL injection9.8v3.10.7%2022-08-09
CVE-2022-2727SourceCodester Gym Management System login.php SQL injection9.8v3.10.7%2022-08-09
CVE-2022-2726SEMCMS Ant_Check.php SQL injection9.8v3.10.7%2022-08-09
CVE-2022-2725SourceCodester Company Website CMS add-blog.php cross-site scripting6.1v3.10.5%2022-08-09
CVE-2022-2724SourceCodester Employee Management System aprocess.php SQL injection9.8v3.11.0%2022-08-09
CVE-2022-2723SourceCodester Employee Management System eprocess.php SQL injection9.8v3.11.0%2022-08-09
CVE-2022-2722SourceCodester Simple Student Information System manage_course.php SQL injection9.8v3.10.8%2022-08-09
CVE-2022-2715SourceCodester Employee Management System eloginwel.php SQL injection9.8v3.10.8%2022-08-09
CVE-2022-36267Airspan Airspot 5410 command injection9.8v3.153.8%2022-08-08Exploit code
CVE-2022-36266Airspan Airspot 5410 cross-site scripting6.1v3.11.0%2022-08-08
CVE-2022-36265Airspan AirSpot 5410 hidden system command page vulnerability7.2v3.11.4%2022-08-08
CVE-2022-36264Airspan Airspot 5410 unrestricted file upload9.1v3.11.6%2022-08-08
CVE-2022-35493Wrteam Eshop - Ecommerce / Store Website cross-site scripting6.1v3.11.9%2022-08-08Nuclei
CVE-2022-35490zammad missing brute-force protection9.8v3.10.9%2022-08-08Fix
CVE-2022-35489Zammad organization visibility vulnerability6.5v3.10.8%2022-08-08Fix
CVE-2022-35488zammad denial of service7.5v3.10.8%2022-08-08Fix
CVE-2022-35487zammad incorrect authorization7.5v3.10.8%2022-08-08Fix
CVE-2022-34293wolfSSL denial of service7.5v3.11.4%2022-08-08Fix
CVE-2022-2713Insufficient session expiration in cockpit-hq/cockpit9.8v3.11.2%2022-08-08Fix
CVE-2022-2708SourceCodester Gym Management System login.php SQL injection9.8v3.10.5%2022-08-08
CVE-2022-2707SourceCodester Online Class and Exam Scheduling System faculty_sched.php SQL injection9.8v3.10.7%2022-08-08
CVE-2022-2706SourceCodester Online Class and Exam Scheduling System class_sched.php SQL injection9.8v3.10.7%2022-08-08
CVE-2022-2705SourceCodester Simple Student Information System manage_department.php SQL injection9.8v3.10.7%2022-08-08
CVE-2022-2704SourceCodester Simple E-Learning System downloadFiles.php information disclosure7.5v3.10.8%2022-08-08
CVE-2022-2703SourceCodester Gym Management System Exercises module SQL injection8.8v3.10.7%2022-08-08
CVE-2022-2702SourceCodester Company Website CMS Cookie site-settings.php access control6.5NVD v3.10.6%2022-08-08
CVE-2022-2701SourceCodester Simple E-Learning System claire_blake cross-site scripting6.1v3.10.5%2022-08-08
CVE-2022-2700SourceCodester Gym Management System GET parameter SQL injection8.8v3.10.7%2022-08-08
CVE-2022-2699SourceCodester Simple E-Learning System claire_blake SQL injection7.5v3.10.7%2022-08-08
CVE-2022-2698SourceCodester Simple E-Learning System search.php SQL injection9.8v3.10.7%2022-08-08
CVE-2022-2697SourceCodester Simple E-Learning System comment_frame.php SQL injection7.5v3.10.6%2022-08-08
CVE-2022-2460WPDating WordPress plugin Multiple unauthenticated SQLi9.8NVD v3.11.1%2022-08-08Fix
CVE-2022-2426Thinkific Uploader WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2425WP DS Blog Map WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2424Google Maps Anywhere WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2423DW Promobar WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2412Better Tag Cloud WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2411Auto More Tag WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2410mTouch Quiz WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08Fix
CVE-2022-2409Rough Chart WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08
CVE-2022-2398WP Comments Fields WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08Fix
CVE-2022-2395weForms WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08Fix
CVE-2022-2391Inspiro Pro WordPress theme Contributor+ stored cross-site scripting5.4NVD v3.10.6%2022-08-08Fix
CVE-2022-2386Crowdsignal Polls and Ratings WordPress plugin reflected cross-site scripting6.1NVD v3.10.6%2022-08-08Fix
CVE-2022-2372YaySMTP WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-08-08Fix
CVE-2022-2371YaySMTP WordPress plugin Subscriber+ stored cross-site scripting5.4NVD v3.10.6%2022-08-08Fix
CVE-2022-2367WSM Downloader WordPress plugin Domain Name Restriction bypass7.5NVD v3.11.2%2022-08-08
CVE-2022-2357WSM Downloader WordPress plugin unauthenticated arbitrary file download7.5NVD v3.11.4%2022-08-08
CVE-2022-2356User Private Files WordPress plugin Subscriber+ arbitrary file upload8.8NVD v3.11.0%2022-08-08Fix
CVE-2022-2355Easy Username Updater WordPress plugin arbitrary Username update via CSRF6.5NVD v3.10.4%2022-08-08Fix
CVE-2022-2269Website File Changes Monitor WordPress plugin Admin+ SQLi9.8NVD v3.11.3%2022-08-08Fix
CVE-2022-2046Directorist - Business Directory WordPress plugin Admin+ arbitrary file upload4.9NVD v3.11.0%2022-08-08Fix
CVE-2022-1323Discy WordPress theme Subscriber+ broken access control to change settings6.5NVD v3.10.8%2022-08-08Fix
CVE-2022-37452Exim out-of-bounds write9.8v3.13.8%2022-08-07Fix
CVE-2022-37451Exim release of an invalid pointer7.5v3.13.3%2022-08-06Fix
CVE-2022-27944Foxit PDF Editor null pointer dereference7.5v3.11.1%2022-08-06Fix
CVE-2022-26979Foxit PDF Editor null pointer dereference7.5v3.11.1%2022-08-06Fix
CVE-2022-2694SourceCodester Company Website CMS unrestricted upload8.8v3.10.8%2022-08-06
CVE-2022-2693SourceCodester Electronic Medical Records System UPDATE Statement register.php SQL injection8.8v3.10.7%2022-08-06
CVE-2022-2692SourceCodester Wedding Hall Booking System Staff User Profile cross-site scripting5.4v3.10.6%2022-08-06
CVE-2022-2691SourceCodester Wedding Hall Booking System Profile page cross-site scripting5.4v3.10.6%2022-08-06
CVE-2022-2690SourceCodester Wedding Hall Booking System Booking form cross-site scripting5.4v3.10.6%2022-08-06
CVE-2022-2689SourceCodester Wedding Hall Booking System Contact page cross-site scripting5.4v3.10.5%2022-08-06
CVE-2022-2688SourceCodester Expense Management System POST parameter report.php fetch_report_credit SQL injection9.8v3.10.5%2022-08-06
CVE-2022-2687SourceCodester Gym Management System SQL injection9.8v3.10.7%2022-08-06
CVE-2022-2686oretnom23 Fast Food Ordering System Menu List page cross-site scripting5.4v3.10.5%2022-08-06
CVE-2022-37450Go Ethereum block reward validation vulnerability5.9v3.11.2%2022-08-05
CVE-2022-37434zlib buffer overflow9.8NVD v3.119.0%2022-08-05Exploit codeFix
CVE-2022-37431dotCMS A reflected cross-site scripting6.1v3.10.6%2022-08-05
CVE-2022-37416Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.6.5v3.10.9%2022-08-05
CVE-2022-37415Uniwill Sparkio.sys out-of-bounds write7.8v3.10.4%2022-08-05
CVE-2022-37398A stack-based buffer overflow vulnerability was found on ADM8.8v3.10.7%2022-08-05Fix
CVE-2022-36840Samsung Mobile Samsung Update Setup DLL hijacking4.5CNA v3.10.2%2022-08-05Fix
CVE-2022-36839Samsung Mobile Samsung Checkout SQL injection5.9CNA v3.10.3%2022-08-05Fix
CVE-2022-36838Samsung Mobile Galaxy Wearable improper authorization4.0CNA v3.10.2%2022-08-05Fix
CVE-2022-36837Samsung Mobile Samsung Email improper authorization6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-36836Samsung Mobile Charm by Samsung missing authorization6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-36835Samsung Mobile Samsung Internet Browser information disclosure3.3CNA v3.10.2%2022-08-05Fix
CVE-2022-36834Samsung Mobile GameLauncher information disclosure3.3CNA v3.10.2%2022-08-05Fix
CVE-2022-36833Samsung Mobile Game Optimizing Service improper privilege management7.3CNA v3.10.2%2022-08-05Fix
CVE-2022-36832Samsung Mobile Cameralyzer WebApp improper access control4.0CNA v3.10.2%2022-08-05Fix
CVE-2022-36831Samsung Mobile Samsung Notes UriFileUtils path traversal6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-36830Samsung Mobile Charm by Samsung implicit intent for sensitive communication6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-36829Samsung Mobile Charm by Samsung implicit intent for sensitive communication6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-36296ActiveDEMAND WordPress plugin broken authentication5.3v3.10.7%2022-08-05Fix
CVE-2022-36284Affiliate For WooCommerce premium WordPress plugin IDOR vulnerability leading to PayPal email change6.5v3.10.6%2022-08-05Fix
CVE-2022-35936Ethermint DoS through Unintended Contract Selfdestruct8.2CNA v3.11.4%2022-08-05Fix
CVE-2022-35163Complete Online Job Search System cross-site scripting4.8v3.10.5%2022-08-05
CVE-2022-35162Complete Online Job Search System cross-site scripting4.8v3.10.5%2022-08-05
CVE-2022-34769Michlol Rashim web interface insecure direct object references (IDOR)5.5v3.10.4%2022-08-05
CVE-2022-34768Synel eHarmony stored XSS7.5v3.10.5%2022-08-05
CVE-2022-33734Samsung Mobile Charm by Samsung onCharacteristicChanged information disclosure6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-33733Samsung Mobile Charm by Samsung onCharacteristicRead information disclosure6.2CNA v3.10.2%2022-08-05Fix
CVE-2022-33732Samsung Mobile Devices Samsung Dex for PC improper access control6.2CNA v3.10.1%2022-08-05Fix
CVE-2022-33731Samsung Mobile Devices DesktopSystemUI improper access control5.1CNA v3.10.1%2022-08-05Fix
CVE-2022-33730Samsung Mobile Devices Samsung Dex for PC heap-based buffer overflow6.8CNA v3.10.2%2022-08-05Fix
CVE-2022-33729Samsung Mobile Devices improper input validation5.9CNA v3.10.1%2022-08-05Fix
CVE-2022-33728Samsung Mobile Devices Bluetooth information disclosure4.0CNA v3.10.1%2022-08-05Fix
CVE-2022-33727Samsung Mobile Devices clickjacking4.8CNA v3.10.2%2022-08-05Fix
CVE-2022-33726Samsung Galaxy Friends dynamic receiver vulnerability3.3CNA v3.10.1%2022-08-05Fix
CVE-2022-33725Samsung Mobile Devices code injection4.0CNA v3.10.1%2022-08-05Fix
CVE-2022-33724Samsung Mobile Devices information disclosure3.3CNA v3.10.1%2022-08-05Fix
CVE-2022-33723Samsung Mobile Devices clickjacking4.8CNA v3.10.2%2022-08-05Fix
CVE-2022-33722Samsung Mobile Devices improper authorization4.0CNA v3.10.1%2022-08-05Fix
CVE-2022-33721Samsung Mobile Devices code injection4.4CNA v3.10.1%2022-08-05Fix
CVE-2022-33720Samsung Mobile Devices AppLock improper authentication2.4CNA v3.10.1%2022-08-05Fix
CVE-2022-33719Samsung Mobile Devices baseband improper input validation8.6CNA v3.10.4%2022-08-05Fix
CVE-2022-33718Samsung Mobile Devices Wi-Fi service improper access control6.2CNA v3.10.1%2022-08-05Fix
CVE-2022-33717Samsung Mobile Devices out-of-bounds read4.4CNA v3.10.1%2022-08-05Fix
CVE-2022-33716Samsung Mobile Devices uninitialized variable use2.3CNA v3.10.1%2022-08-05Fix
CVE-2022-33715Samsung Mobile Devices LauncherProvider improper access control5.3CNA v3.10.1%2022-08-05Fix
CVE-2022-33714Samsung Mobile Devices SemWifiApBroadcastReceiver improper access control6.2CNA v3.10.1%2022-08-05Fix
CVE-2022-33201MailerLite Signup forms (official) WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2022-08-05Fix
CVE-2022-32543ESTsoft Alyac way integer overflow7.8v3.10.5%2022-08-05
CVE-2022-31665VMware Workspace ONE Access, Identity Manager and vRealize Automation remote code execution7.2v3.12.3%2022-08-05Fix
CVE-2022-31664VMware Workspace ONE Access, Identity Manager and vRealize Automation privilege escalation7.8v3.10.3%2022-08-05Fix
CVE-2022-31663VMware Workspace ONE Access, Identity Manager and vRealize Automation cross-site scripting6.1v3.10.7%2022-08-05Fix
CVE-2022-31662VMware Workspace ONE Access path traversal7.5v3.11.2%2022-08-05Fix
CVE-2022-31661VMware Workspace ONE Access, Identity Manager and vRealize Automation privilege escalation7.8v3.10.3%2022-08-05Fix
CVE-2022-31660VMware Workspace ONE Access, Identity Manager and vRealize Automation privilege escalation7.8v3.11.1%2022-08-05Exploit codeFix
CVE-2022-31659VMware Workspace ONE Access, Identity Manager and vRealize Automation SQL injection7.2v3.12.7%2022-08-05Fix
CVE-2022-31658VMware Workspace ONE Access, Identity Manager and vRealize Automation remote code execution7.2v3.12.1%2022-08-05Fix
CVE-2022-31657VMware Workspace ONE Access, Identity Manager and vRealize Automation open redirect9.8v3.11.3%2022-08-05Fix
CVE-2022-31656VMware Workspace ONE Access, Identity Manager and vRealize Automation authentication bypass9.8v3.124.3%2022-08-05NucleiEmerging ThreatsFix
CVE-2022-31618NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming null pointer dereference5.5CNA v3.10.2%2022-08-05Fix
CVE-2022-31614NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming double free7.0CNA v3.10.3%2022-08-05Fix
CVE-2022-31609NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming improper authorization7.8CNA v3.10.2%2022-08-05Fix
CVE-2022-29886ESTsoft Alyac way integer overflow7.8v3.10.5%2022-08-05
CVE-2022-29465Accusoft ImageGear out-of-bounds write9.8v3.12.0%2022-08-05Exploit code
CVE-2022-29071Arista CloudVision Portal audit and system logs information disclosure4.0CNA v3.10.2%2022-08-05Fix
CVE-2022-28880All F-Secure and WithSecure Endpoint Protection products denial of service (DoS)7.5v3.10.5%2022-08-05
CVE-2022-28665FreshTomato httpd unescape functionality memory corruption9.8v3.11.3%2022-08-05
CVE-2022-28664FreshTomato httpd unescape functionality memory corruption9.8v3.11.5%2022-08-05
CVE-2022-27660TCL LinkHub Mesh Wifi confctl_set_guest_wlan functionality denial of service7.5NVD v3.11.0%2022-08-05
CVE-2022-27633TCL LinkHub Mesh Wifi confctl_get_guest_wlan functionality information disclosure7.5v3.10.9%2022-08-05
CVE-2022-27631DD-WRT httpd unescape functionality memory corruption9.8v3.11.1%2022-08-05
CVE-2022-27630TCL LinkHub Mesh Wifi confctl_get_master_wlan functionality information disclosure7.5v3.10.9%2022-08-05
CVE-2022-27535Kaspersky VPN Secure Connection arbitrary file deletion7.8NVD v3.10.3%2022-08-05Fix
CVE-2022-27185TCL LinkHub Mesh Wifi confctl_set_master_wlan functionality denial of service7.5NVD v3.11.0%2022-08-05
CVE-2022-27178TCL LinkHub Mesh Wifi confctl_set_wan_cfg functionality denial of service9.8v3.11.1%2022-08-05
CVE-2022-26376Asuswrt-Merlin New Gen httpd unescape functionality memory corruption9.8v3.11.3%2022-08-05
CVE-2022-26346TCL LinkHub Mesh Wifi ucloud_del_node functionality denial of service9.8v3.11.2%2022-08-05
CVE-2022-26342TCL LinkHub Mesh Wifi buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-26009TCL LinkHub Mesh Wifi stack-based buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-25996TCL LinkHub Mesh Wifi confsrv addTimeGroup functionality stack-based buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-25649Affiliate For WooCommerce premium WordPress plugin Multiple improper access control8.8v3.10.9%2022-08-05Fix
CVE-2022-24029TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24028TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24027TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24026TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24025TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24024TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24023TCL LinkHub Mesh Wifi GetValue functionality buffer overflow8.8NVD v3.10.9%2022-08-05
CVE-2022-24022TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24021TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24020TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24019TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24018TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24017TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24016TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24015TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24014TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24013TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24012TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24011TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24010TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24009TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24008TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24007TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24006TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-24005TCL LinkHub Mesh Wifi GetValue functionality buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-23919TCL LinkHub Mesh Wifi confsrv set_mf_rule functionality stack-based buffer overflow9.8v3.11.3%2022-08-05
CVE-2022-23918TCL LinkHub Mesh Wifi confsrv set_mf_rule functionality stack-based buffer overflow9.8v3.11.3%2022-08-05
CVE-2022-23399TCL LinkHub Mesh Wifi confsrv set_port_fwd_rule functionality stack-based buffer overflow9.8v3.11.2%2022-08-05
CVE-2022-23103TCL LinkHub Mesh Wifi stack-based buffer overflow9.8v3.11.3%2022-08-05
CVE-2022-22299Fortinet FortiADC format string7.8CNA v3.10.2%2022-08-05Fix
CVE-2022-22144TCL LinkHub Mesh Wifi hard-coded credentials9.8v3.10.9%2022-08-05
CVE-2022-22140TCL LinkHub Mesh Wifi confsrv ucloud_add_node functionality OS command injection9.8v3.13.7%2022-08-05
CVE-2022-21201TCL LinkHub Mesh Wifi confers ucloud_add_node_new functionality stack-based buffer overflow8.8v3.10.9%2022-08-05
CVE-2022-21186@acrontum/filesystem-template arbitrary command injection9.8v3.126.1%2022-08-05Fix
CVE-2022-21178TCL LinkHub Mesh Wifi confsrv ucloud_add_new_node functionality OS command injection9.8v3.13.7%2022-08-05
CVE-2022-2685SourceCodester Interview Management System addQuestion.php cross-site scripting6.1v3.10.9%2022-08-05
CVE-2022-2684SourceCodester Apartment Visitor Management System manage-apartment.php cross-site scripting5.4v3.10.6%2022-08-05
CVE-2022-2683SourceCodester Simple Food Ordering System login.php cross-site scripting5.4v3.10.6%2022-08-05
CVE-2022-2682SourceCodester Alphaware Simple E-Commerce System stockin.php cross-site scripting5.4v3.10.6%2022-08-05
CVE-2022-2681SourceCodester Online Student Admission System edit-profile.php cross-site scripting6.1v3.10.5%2022-08-05
CVE-2022-2680SourceCodester Church Management System login.php SQL injection8.8v3.10.7%2022-08-05
CVE-2022-2679SourceCodester Interview Management System viewReport.php SQL injection9.8v3.10.7%2022-08-05
CVE-2022-2678SourceCodester Alphaware Simple E-Commerce System admin_feature.php unrestricted file upload8.8v3.10.8%2022-08-05
CVE-2022-2677SourceCodester Apartment Visitor Management System index.php SQL injection9.8v3.10.7%2022-08-05
CVE-2022-2676SourceCodester Electronic Medical Records System POST request SQL injection9.8v3.10.7%2022-08-05
CVE-2022-2675Unitree Go 1 Robot Dog Unauthenticated Remote Power Down6.5NVD v3.10.5%2022-08-05Fix
CVE-2022-2674SourceCodester Best Fee Management System admin_class.php login SQL injection9.8v3.10.6%2022-08-05
CVE-2022-2673Rigatur Online Booking and Hotel Management System POST request login.php SQL injection8.8v3.10.5%2022-08-05
CVE-2022-2672SourceCodester Garage Management System createUser.php SQL injection8.8v3.10.5%2022-08-05
CVE-2022-2671SourceCodester Garage Management System removeUser.php SQL injection8.8v3.10.5%2022-08-05
CVE-2022-2668Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console7.2v3.11.0%2022-08-05Fix
CVE-2022-2667SourceCodester Loan Management System delete_lplan.php SQL injection8.8v3.10.9%2022-08-05
CVE-2022-2665SourceCodester Simple E-Learning System classroom.php SQL injection8.8v3.10.6%2022-08-05
CVE-2022-2664Private Cloud Management Platform POST request global_config_query improper authentication9.8v3.10.7%2022-08-05
CVE-2022-2636Code injection in hestiacp/hestiacp8.8v3.11.3%2022-08-05Fix
CVE-2022-2626Incorrect privilege assignment in hestiacp/hestiacp7.2NVD v3.11.3%2022-08-05Fix
CVE-2022-2539GitLab issue filtering vulnerability5.3CNA v3.10.8%2022-08-05Fix
CVE-2022-2534GitLab Datadog integration vulnerability2.2CNA v3.10.6%2022-08-05Fix
CVE-2022-2531GitLab path traversal5.3CNA v3.11.4%2022-08-05Fix
CVE-2022-2512GitLab to-do notifications vulnerability6.5CNA v3.10.9%2022-08-05Fix
CVE-2022-2501GitLab An improper access control5.9CNA v3.11.0%2022-08-05Fix
CVE-2022-2500GitLab cross-site scripting4.4CNA v3.10.7%2022-08-05Fix
CVE-2022-2499GitLab insecure direct object reference3.5CNA v3.10.9%2022-08-05Fix
CVE-2022-2498GitLab improper privilege management6.4CNA v3.10.8%2022-08-05Fix
CVE-2022-2497GitLab integrations vulnerability8.5CNA v3.11.2%2022-08-05Fix
CVE-2022-2459GitLab missing authorization2.7CNA v3.10.8%2022-08-05Fix
CVE-2022-2456GitLab project visibility settings vulnerability4.9CNA v3.10.9%2022-08-05Fix
CVE-2022-2417GitLab improper input validation6.2CNA v3.10.7%2022-08-05Fix
CVE-2022-2326GitLab incorrect authorization6.4CNA v3.10.8%2022-08-05Fix
CVE-2022-2307GitLab incomplete cleanup3.5CNA v3.10.5%2022-08-05Fix
CVE-2022-2303GitLab improper authentication4.3CNA v3.10.8%2022-08-05Fix
CVE-2022-2095GitLab An improper access control4.3CNA v3.11.0%2022-08-05Fix
CVE-2022-2053Undertow vulnerable to DoS via Large AJP request7.5v3.11.0%2022-08-05Fix
CVE-2022-1973Linux kernel A use-after-free7.1NVD v3.10.3%2022-08-05Fix
CVE-2022-1704Inductive Automation Ignition backup and restore XML parser XML external entity injection9.8v3.11.0%2022-08-05Fix
CVE-2022-1158kernel use-after-free7.8NVD v3.10.4%2022-08-05Fix
CVE-2022-1012kernel A memory leak8.2NVD v3.14.3%2022-08-05Fix
CVE-2022-37030Grommunio Gromox incorrect default permissions7.8v3.10.3%2022-08-04
CVE-2022-35930Ability to bypass attestation verification in sigstore PolicyController7.1CNA v3.10.7%2022-08-04Fix
CVE-2022-35929False positive signature verification in cosign7.1CNA v3.10.7%2022-08-04Fix
CVE-2022-35927Unverified DIO prefix info lengths in RPL-Classic in Contiki-NG8.1CNA v3.12.1%2022-08-04Fix
CVE-2022-35926Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG5.9CNA v3.11.2%2022-08-04Fix
CVE-2022-35858Samsung mTower memory leak7.8v3.10.4%2022-08-04
CVE-2022-35735F5 BIG-IP Configuration utility monitor objects privilege escalation7.2CNA v3.10.9%2022-08-04Fix
CVE-2022-35728F5 BIG-IP iControl REST insufficient session expiration8.1CNA v3.10.7%2022-08-04Fix
CVE-2022-35272F5 BIG-IP HTTP Message Routing Framework vulnerability7.5CNA v3.10.5%2022-08-04Fix
CVE-2022-35245F5 BIG-IP APM Traffic Management Microkernel null pointer dereference7.5CNA v3.10.8%2022-08-04Fix
CVE-2022-35243F5 BIG-IP Authenticated iControl REST in Appliance mode vulnerability8.7CNA v3.10.7%2022-08-04Fix
CVE-2022-35241F5 NGINX Instance Manager denial of service6.5CNA v3.10.7%2022-08-04Fix
CVE-2022-35240BIG-IP Message Routing MQTT vulnerability7.5CNA v3.10.8%2022-08-04Fix
CVE-2022-35236F5 BIG-IP HTTP/2 profile denial of service7.5CNA v3.10.8%2022-08-04Fix
CVE-2022-35216ITPison OMICARD EDM use of hard-coded credentials7.5CNA v3.11.4%2022-08-04Fix
CVE-2022-35144Raneto vulnerable to cross-site scripting4.8v3.10.9%2022-08-04Fix
CVE-2022-35143Raneto employs weak password complexity requirements9.8v3.11.6%2022-08-04Fix
CVE-2022-35142Raneto denial of service via crafted payload injected into `Search` parameter7.5v3.11.5%2022-08-04Fix
CVE-2022-34993TOTOLINK A3600R Firmware hard-coded credentials9.8v3.11.0%2022-08-04Fix
CVE-2022-34970Crowcpp Crow off-by-one error9.8NVD v3.14.0%2022-08-04
CVE-2022-34865F5 BIG-IP traffic intelligence feeds vulnerability4.8CNA v3.10.4%2022-08-04Fix
CVE-2022-34862F5 BIG-IP Traffic Management Microkernel infinite loop7.5CNA v3.11.3%2022-08-04Fix
CVE-2022-34851F5 BIG-IP and BIG-IQ iControl SOAP denial of service4.3CNA v3.10.7%2022-08-04Fix
CVE-2022-34844F5 BIG-IP and BIG-IQ DPDK ENA driver vulnerability5.9CNA v3.10.7%2022-08-04Fix
CVE-2022-34655F5 BIG-IP Traffic Management Microkernel uninitialized variable use7.5CNA v3.10.8%2022-08-04Fix
CVE-2022-34651F5 BIG-IP Traffic Management Microkernel null pointer dereference7.5CNA v3.10.8%2022-08-04Fix
CVE-2022-34158Apache JSPWiki user Group privilege escalation8.8v3.11.2%2022-08-04Fix
CVE-2022-33968BIG-IP LTM and APM NTLM vulnerability3.7CNA v3.10.5%2022-08-04Fix
CVE-2022-33962F5 BIG-IP iRules improper privilege management6.7CNA v3.10.2%2022-08-04Fix
CVE-2022-33947F5 BIG-IP DNS Traffic Management User Interface deserialization of untrusted data5.4CNA v3.10.7%2022-08-04Fix
CVE-2022-33203F5 BIG-IP APM and SSL Orchestrator Service Connect agent denial of service7.5CNA v3.10.8%2022-08-04Fix
CVE-2022-32965ITPison OMICARD EDM use of hard-coded credentials9.8CNA v3.11.5%2022-08-04Fix
CVE-2022-32964ITPison OMICARD EDM SQL injection9.8CNA v3.11.4%2022-08-04Fix
CVE-2022-32963ITPison OMICARD EDM path traversal-17.5CNA v3.11.4%2022-08-04Fix
CVE-2022-32455F5 BIG-IP Traffic Management Microkernel vulnerability7.5CNA v3.10.5%2022-08-04Fix
CVE-2022-31793Inglorion Muhttpd path traversal7.5v3.116.9%2022-08-04NucleiExploit codeFix
CVE-2022-31473F5 BIG-IP Access Policy Manager iApps path traversal6.8CNA v3.12.0%2022-08-04Fix
CVE-2022-31132Nextcloud security-advisories unauthenticated SSRF in 3rd party module cerdic/csstidy8.3CNA v3.10.7%2022-08-04Fix
CVE-2022-31120Federated share accepting/declining is not logged in audit log in Nextcloud Server2.1CNA v3.10.9%2022-08-04Fix
CVE-2022-31119Password disclosure in log file in Nextcloud Mail App3.1CNA v3.10.8%2022-08-04Fix
CVE-2022-31118Missing brute force protection on cloud federation sharing in Nextcloud Server6.5CNA v3.10.7%2022-08-04Fix
CVE-2022-30535F5 NGINX Ingress Controller improper input validation6.5CNA v3.10.7%2022-08-04Fix
CVE-2022-28732Apache JSPWiki cross-site scripting vulnerability on WeblogPlugin6.1v3.181.9%2022-08-04Fix
CVE-2022-28731Apache JSPWiki CSRF in UserPreferences.jsp6.5v3.157.8%2022-08-04Fix
CVE-2022-28730Apache JSPWiki cross-site scripting vulnerability on AJAXPreview.jsp6.1v3.185.3%2022-08-04Fix
CVE-2022-27166XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki6.1v3.185.3%2022-08-04Fix
CVE-2022-25168Apache Hadoop command injection in org.Apache.Hadoop.fs.FileUtil.unTarUsingTar9.8v3.14.2%2022-08-04Fix
CVE-2022-2656SourceCodester Multi Language Hotel Management Software SQL injection9.8v3.10.8%2022-08-04
CVE-2022-2653Path traversal in plankanban/planka6.5NVD v3.11.0%2022-08-04Fix
CVE-2022-2652v4l2loopback card label handling format string6.0NVD v3.10.3%2022-08-04Fix
CVE-2022-2651Authentication bypass by primary weakness in bookwyrm-social/bookwyrm9.8v3.116.2%2022-08-04Exploit codeFix
CVE-2022-2648SourceCodester Multi Language Hotel Management Software SQL injection9.8v3.10.8%2022-08-04
CVE-2022-2647jeecg-boot unrestricted upload9.8v3.10.8%2022-08-04
CVE-2022-2646SourceCodester Online Admission System index.php cross-site scripting6.1v3.10.7%2022-08-04
CVE-2022-2645SourceCodester Garage Management System edituser.php cross-site scripting6.1v3.10.5%2022-08-04
CVE-2022-2644SourceCodester Online Admission System GET parameter SQL injection9.8v3.10.8%2022-08-04
CVE-2022-2643SourceCodester Online Admission System POST parameter SQL injection9.8v3.10.8%2022-08-04
CVE-2022-37396JetBrains Rider code injection4.1CNA v3.10.2%2022-08-03Fix
CVE-2022-37394OpenStack Nova Changing vnic_type breaks compute service restart3.3v3.10.3%2022-08-03Fix
CVE-2022-36800Atlassian Jira Service Management Server incorrect permission assignment4.3v3.10.6%2022-08-03Fix
CVE-2022-36359Django vulnerable to Reflected File Download attack8.8v3.10.8%2022-08-03Fix
CVE-2022-36197Bigtree Cms cross-site scripting5.4v3.10.6%2022-08-03
CVE-2022-35928paulej AESCrypt AES Crypt for Linux Password Security vulnerability8.4CNA v3.10.2%2022-08-03Fix
CVE-2022-35867xhyve stack-based buffer overflow6.7NVD v3.10.3%2022-08-03
CVE-2022-35866Vinchin Backup and Recovery hard-coded credentials9.8v3.14.2%2022-08-03
CVE-2022-35865BMC Track-It! missing authentication9.8v3.11.9%2022-08-03Fix
CVE-2022-35864BMC Track-It! SQL injection6.5v3.11.6%2022-08-03Fix
CVE-2022-35737`libsqlite3-sys` via C SQLite improperly validates array index7.5NVD v3.123.6%2022-08-03Exploit codeFix
CVE-2022-35620D-Link DIR‑818L remote code execution9.8v3.132.7%2022-08-03
CVE-2022-35619D-Link DIR‑818L remote code execution9.8v3.12.6%2022-08-03
CVE-2022-35506Triplecross out-of-bounds write7.5v3.10.9%2022-08-03
CVE-2022-35505Triplecross resource exhaustion7.5v3.10.9%2022-08-03
CVE-2022-35161Generalized Electric Vehicle Reverse Engineering Tool buffer overflow9.8v3.11.0%2022-08-03
CVE-2022-35158Tencent Tscancode denial of service7.5v3.10.9%2022-08-03
CVE-2022-34992Luadec out-of-bounds write7.8v3.10.3%2022-08-03
CVE-2022-34974D-Link Dir-810l command injection9.8v3.124.1%2022-08-03
CVE-2022-34973D-Link DIR-820L buffer overflow7.5v3.114.8%2022-08-03
CVE-2022-34969pingcap tidb null pointer dereference7.5v3.10.9%2022-08-03
CVE-2022-34968Percona Server SQL injection7.5v3.10.9%2022-08-03
CVE-2022-34967Monetdb reachable assertion7.5v3.10.9%2022-08-03
CVE-2022-34937Yuba u5CMS cross-site request forgery8.8v3.10.8%2022-08-03
CVE-2022-34928jflyfox jfinal_cms SQL injection8.8v3.10.9%2022-08-03
CVE-2022-34927Milkytracker out-of-bounds write7.8v3.10.4%2022-08-03Fix
CVE-2022-34872Centreon SQL injection6.5v3.12.1%2022-08-03Fix
CVE-2022-34871Centreon SQL injection7.2v3.12.8%2022-08-03Fix
CVE-2022-32293Intel ConnMan use-after-free8.1v3.11.9%2022-08-03Fix
CVE-2022-32292Intel ConnMan out-of-bounds write9.8v3.13.0%2022-08-03Fix
CVE-2022-31197SQL injection in ResultSet.refreshRow with malicious column names in pgjdbc7.1CNA v3.12.2%2022-08-03Fix
CVE-2022-31175Cross-site scripting caused by the editor instance destroying process in ckeditor55.8CNA v3.10.9%2022-08-03Fix
CVE-2022-28684DevExpress deserialization of untrusted data8.8v3.13.1%2022-08-03
CVE-2022-28668Sante DICOM Viewer Pro out-of-bounds write7.8v3.10.5%2022-08-03
CVE-2022-27621Synology USB Copy path traversal5.5CNA v3.10.8%2022-08-03Fix
CVE-2022-27620Synology SSO Server path traversal6.8CNA v3.11.5%2022-08-03Fix
CVE-2022-27619Synology Note Station Client cleartext transmission of sensitive information6.8CNA v3.10.4%2022-08-03Fix
CVE-2022-27618Synology Storage Analyzer path traversal6.8CNA v3.11.4%2022-08-03Fix
CVE-2022-27617Synology Calendar path traversal5.0CNA v3.10.9%2022-08-03Fix
CVE-2022-27616Synology DiskStation Manager (DSM) OS command improper neutralization7.2CNA v3.11.6%2022-08-03Fix
CVE-2022-27551HCL Launch could allow an authenticated user to obtain sensitive information5.3CNA v3.10.5%2022-08-03Fix
CVE-2022-27484Fortinet FortiADC unverified password change5.4CNA v3.10.5%2022-08-03Fix
CVE-2022-23442Fortinet FortiOS improper access control4.3CNA v3.10.6%2022-08-03Fix
CVE-2022-2272Sante PACS Server SQL injection9.8v3.12.7%2022-08-03
CVE-2022-37035FRRouting race condition8.1v3.12.4%2022-08-02Fix
CVE-2022-36968Progress Ipswitch Ws FTP Server cross-site request forgery4.3v3.10.2%2022-08-02Fix
CVE-2022-36967Progress Ipswitch Ws FTP Server cross-site scripting6.1v3.10.8%2022-08-02Fix
CVE-2022-35925Missing rate limit in Authentication in bookwyrm5.3CNA v3.11.7%2022-08-02Fix
CVE-2022-35924nextauthjs next-auth verification requests (magic link) sent to unwanted emails9.1CNA v3.11.4%2022-08-02Fix
CVE-2022-35923Inefficient regular expression complexity in v8n7.5CNA v3.11.7%2022-08-02Fix
CVE-2022-35422Web Based Quiz System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-35421Online Tours And Travels Management System SQL injection7.2v3.10.9%2022-08-02
CVE-2022-35223EasyUse MailHunter Ultimate deserialization of untrusted data9.8CNA v3.11.6%2022-08-02Fix
CVE-2022-35222HiCOS Citizen verification component stack buffer overflow6.8CNA v3.10.4%2022-08-02Fix
CVE-2022-35221TEAMPLUS TECHNOLOGY INC. Teamplus Pro allocation of resources without limits or throttling-25.4CNA v3.10.8%2022-08-02Fix
CVE-2022-35220TEAMPLUS TECHNOLOGY INC. Teamplus Pro allocation of resources without limits or throttling-16.5NVD v3.11.0%2022-08-02Fix
CVE-2022-35219NHI card’s web service component stack-based buffer overflow-25.5CNA v3.10.2%2022-08-02Fix
CVE-2022-35218NHI card’s web service component heap-based buffer overflow5.5CNA v3.10.2%2022-08-02Fix
CVE-2022-35217NHI card’s web service component stack-based buffer overflow-17.8CNA v3.10.2%2022-08-02Fix
CVE-2022-34956Pligg Cms SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34955Pligg Cms SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34954Phptpoint Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34953Phptpoint Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34952Phptpoint Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34951Phptpoint Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34950Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34949Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34948Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34947Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34946Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34945Pharmacy Management System SQL injection9.8v3.10.9%2022-08-02
CVE-2022-34924Landray Office Automation cleartext storage of sensitive information7.5v3.10.6%2022-08-02
CVE-2022-34625mealie code injection7.2v3.12.8%2022-08-02Fix
CVE-2022-34619mealie stored cross-site scripting5.4v3.10.9%2022-08-02Fix
CVE-2022-34618mealie stored cross-site scripting5.4v3.10.9%2022-08-02Fix
CVE-2022-34613mealie unrestricted file upload9.8v3.11.9%2022-08-02Fix
CVE-2022-33917An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make improper GPU processing operations to gain access to already freed memory.5.5v3.10.4%2022-08-02Fix
CVE-2022-30572TIBCO iWay Service Manager directory traversal6.5CNA v3.11.1%2022-08-02Fix
CVE-2022-30571TIBCO iWay Service Manager reflected cross-site scripting (XSS)8.1CNA v3.10.5%2022-08-02Fix
CVE-2022-30285Quest KACE Systems Management Appliance inadequate encryption strength9.8v3.10.5%2022-08-02Fix
CVE-2022-29808Quest KACE Systems Management Appliance insufficient randomness7.5v3.10.7%2022-08-02Fix
CVE-2022-29807Quest KACE Systems Management Appliance SQL injection9.8v3.11.3%2022-08-02Fix
CVE-2022-29154Samba rsync man-in-the-middle7.4NVD v3.12.3%2022-08-02Fix
CVE-2022-25867io.socket:socket.io-client null pointer dereference7.5v3.11.6%2022-08-02Fix
CVE-2022-23733Stored XSS vulnerability in GitHub Enterprise Server leading to injection of arbitrary attributes5.4v3.10.6%2022-08-02Fix
CVE-2022-2631Improper access control in ToolJet/ToolJet8.8NVD v3.11.2%2022-08-02Fix
CVE-2022-1293XSS vulnerability in Citadel5.7CNA v3.10.5%2022-08-02Fix
CVE-2022-37315graphql-go has infinite recursion in the type definition parser7.5v3.10.9%2022-08-01Fix
CVE-2022-36799Atlassian Jira Server code injection7.2v3.146.7%2022-08-01Fix
CVE-2022-36343Enable SVG, WebP and ICO Upload WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.6%2022-08-01Fix
CVE-2022-36302File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain sensitive information.8.8CNA v3.10.6%2022-08-01Fix
CVE-2022-36301Bosch BF-OS weak password requirements9.8CNA v3.11.0%2022-08-01Fix
CVE-2022-35922Memory allocation based on untrusted length in rust-websocket7.5CNA v3.11.9%2022-08-01Fix
CVE-2022-35921User preference to prevent private discussions not respected in fof/byobu3.5CNA v3.10.5%2022-08-01Fix
CVE-2022-35920Improper limitation of a pathname to a restricted directory in sanic8.3CNA v3.11.2%2022-08-01Fix
CVE-2022-35919Authenticated requests for server update admin API allows path traversal in minio7.4CNA v3.152.1%2022-08-01Exploit codeFix
CVE-2022-35918Streamlit directory traversal6.5CNA v3.11.7%2022-08-01Fix
CVE-2022-35917Weakness in Transfer Validation Logic in @solana/pay5.3CNA v3.10.8%2022-08-01Fix
CVE-2022-35916openzeppelin-contracts cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls5.3CNA v3.10.6%2022-08-01Fix
CVE-2022-35915Unbounded gas consumption in @OpenZeppelin/Contracts5.3CNA v3.10.8%2022-08-01Fix
CVE-2022-35716IBM UrbanCode Deploy incorrect authorization5.3CNA v3.00.7%2022-08-01Fix
CVE-2022-35118PyroCMS cross-site scripting6.1v3.10.5%2022-08-01Fix
CVE-2022-34567Uthscsa Multi-image Analysis Gui privilege escalation8.8v3.11.5%2022-08-01Fix
CVE-2022-34530Backdrop Cms weak password recovery5.3v3.10.6%2022-08-01
CVE-2022-34338IBM Robotic Process Automation improper privilege management5.8CNA v3.00.6%2022-08-01Fix
CVE-2022-34307IBM CICS TX Advanced missing encryption4.3CNA v3.00.6%2022-08-01Fix
CVE-2022-34164IBM CICS TX Standard improper input validation5.9CNA v3.00.2%2022-08-01Fix
CVE-2022-34163IBM CICS TX Standard cross-site scripting5.4CNA v3.00.7%2022-08-01Fix
CVE-2022-34162IBM CICS TX Standard clickjacking5.4CNA v3.00.9%2022-08-01Fix
CVE-2022-34161IBM CICS TX Advanced cross-site request forgery4.3CNA v3.00.5%2022-08-01Fix
CVE-2022-34154Enable SVG, WebP and ICO Upload WordPress plugin authenticated arbitrary file upload8.8v3.11.3%2022-08-01Fix
CVE-2022-33955IBM CICS TX Advanced OS command injection4.3CNA v3.00.6%2022-08-01Fix
CVE-2022-33169IBM Robotic Process Automation insufficiently protected credentials5.3CNA v3.00.6%2022-08-01Fix
CVE-2022-32750IBM DataPower Gateway cross-site scripting5.4CNA v3.00.5%2022-08-01Fix
CVE-2022-31776IBM DataPower Gateway server-side request forgery6.5CNA v3.00.5%2022-08-01Fix
CVE-2022-31775IBM DataPower Gateway XML external entity injection5.5CNA v3.01.5%2022-08-01Fix
CVE-2022-31774IBM DataPower Gateway cross-site scripting5.4CNA v3.00.5%2022-08-01Fix
CVE-2022-31321Boltcms Bolt denial of service9.1v3.10.8%2022-08-01
CVE-2022-31198OpenZeppelin Contracts Governor quorum fraction module incorrect calculation7.5CNA v3.10.8%2022-08-01Fix
CVE-2022-31195Path traversal vulnerability in Simple Archive Format package import in DSpace7.2CNA v3.11.4%2022-08-01Fix
CVE-2022-31194Path traversal vulnerabilities in DSpace JSPUI submission upload8.2CNA v3.11.1%2022-08-01Fix
CVE-2022-31193URL redirection to untrusted site in DSpace JSPUI7.1CNA v3.10.7%2022-08-01Fix
CVE-2022-31192Cross-site scripting possible in DSpace JSPUI request a Copy feature7.1CNA v3.10.8%2022-08-01Fix
CVE-2022-31191Cross-site scripting possible in DSpace JSPUI spellcheck and autocomplete tools7.1CNA v3.10.8%2022-08-01Fix