CVE-2022 records published in September 2022
This page lists the 2,031 CVE-2022 records published in September 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 12 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 29414.5% of these records
- Listed in CISA KEV
- 120.6% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 341.7% of these records
- Exploit code
- 643.2% of these records
- Actionable vendor fix
- 1,43970.9% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in September 2022 have had from about 49 months to about 50 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-41975 | Realvnc VNC Server improper privilege management | 7.8v3.1 | 0.2% | 2022-09-30 | Fix |
| CVE-2022-41870 | Innovaphone Firmware command injection | 7.2v3.1 | 1.2% | 2022-09-30 | Fix |
| CVE-2022-41850 | Linux kernel race condition | 4.7NVD v3.1 | 0.2% | 2022-09-30 | Fix |
| CVE-2022-41849 | Linux kernel race condition | 4.2NVD v3.1 | 0.3% | 2022-09-30 | Fix |
| CVE-2022-41848 | Linux kernel race condition | 4.2v3.1 | 0.3% | 2022-09-30 | Fix |
| CVE-2022-41847 | Axiosys Bento4 memory leak | 5.5v3.1 | 0.4% | 2022-09-30 | |
| CVE-2022-41846 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.3% | 2022-09-30 | |
| CVE-2022-41845 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.3% | 2022-09-30 | |
| CVE-2022-41844 | Xpdfreader Xpdf out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-30 | Fix |
| CVE-2022-41843 | Xpdfreader Xpdf null pointer dereference | 5.5v3.1 | 0.3% | 2022-09-30 | Fix |
| CVE-2022-41842 | Xpdfreader Xpdf out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-30 | Fix |
| CVE-2022-41841 | Axiosys Bento4 null pointer dereference | 5.5v3.1 | 0.3% | 2022-09-30 | |
| CVE-2022-41440 | Billing System Project SQL injection | 7.2v3.1 | 0.8% | 2022-09-30 | |
| CVE-2022-41439 | Billing System Project SQL injection | 7.2v3.1 | 0.8% | 2022-09-30 | |
| CVE-2022-41437 | Billing System Project unrestricted file upload | 7.2v3.1 | 1.4% | 2022-09-30 | |
| CVE-2022-40944 | PHPGurukul Dairy Farm Shop Management System SQL injection | 9.8v3.1 | 1.2% | 2022-09-30 | |
| CVE-2022-40943 | PHPGurukul Dairy Farm Shop Management System SQL injection | 9.8v3.1 | 1.1% | 2022-09-30 | |
| CVE-2022-40923 | LIEF vulnerable to denial of service through segmentation fault | 6.5v3.1 | 0.6% | 2022-09-30 | |
| CVE-2022-40756 | Actian Psql incorrect permission assignment | 8.8v3.1 | 0.7% | 2022-09-30 | Fix |
| CVE-2022-40341 | Mojoportal unrestricted file upload | 8.8v3.1 | 1.2% | 2022-09-30 | |
| CVE-2022-40316 | Moodle No groups filtering in H5P activity attempts report | 4.3NVD v3.1 | 0.7% | 2022-09-30 | Fix |
| CVE-2022-40315 | Moodle Minor SQL injection risk in admin user browsing | 9.8NVD v3.1 | 1.0% | 2022-09-30 | Fix |
| CVE-2022-40314 | Moodle remote code execution | 9.8NVD v3.1 | 2.0% | 2022-09-30 | Fix |
| CVE-2022-40313 | Moodle stored cross-site scripting and page denial of service | 7.1NVD v3.1 | 0.6% | 2022-09-30 | Fix |
| CVE-2022-40277 | Joplin remote code execution | 7.8v3.1 | 0.5% | 2022-09-30 | |
| CVE-2022-40274 | Gridea code injection | 7.8v3.1 | 0.4% | 2022-09-30 | |
| CVE-2022-39268 | orchest vulnerable to cross-site request forgery that allows control of a user instance | 8.1CNA v3.1 | 0.5% | 2022-09-30 | Fix |
| CVE-2022-37461 | Canon Medical Vitrea View cross-site scripting | 6.1v3.1 | 1.0% | 2022-09-30 | Fix |
| CVE-2022-36965 | Stored and DOM XSS in QoE Applications: Orion Platform | 6.1CNA v3.1 | 0.8% | 2022-09-30 | Fix |
| CVE-2022-36961 | Orion Platform SQL injection privilege escalation | 8.8CNA v3.1 | 74.2% | 2022-09-30 | Fix |
| CVE-2022-35156 | PHPGurukul Bus Pass Management System SQL injection | 9.8v3.1 | 1.2% | 2022-09-30 | |
| CVE-2022-35155 | PHPGurukul Bus Pass Management System cross-site scripting | 6.1v3.1 | 2.1% | 2022-09-30 | Exploit code |
| CVE-2022-34429 | Dell Hybrid Client (DHC) path traversal | 6.5CNA v3.1 | 0.2% | 2022-09-30 | Fix |
| CVE-2022-34428 | Dell Hybrid Client (DHC) regular expression denial of service | 5.0CNA v3.1 | 0.6% | 2022-09-30 | Fix |
| CVE-2022-32540 | Bosch BVMS Operator client application information disclosure | 7.4CNA v3.0 | 0.4% | 2022-09-30 | |
| CVE-2022-28851 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 36.8% | 2022-09-30 | Fix |
| CVE-2022-24373 | react-native-reanimated regular expression denial of service (ReDoS) | 7.5v3.1 | 1.3% | 2022-09-30 | Fix |
| CVE-2022-23726 | Ping Identity PingCentral information disclosure | 5.4CNA v3.1 | 0.7% | 2022-09-30 | Fix |
| CVE-2022-21826 | Pulse Connect Secure VPN Server HTTP request smuggling | 5.4v3.1 | 45.2% | 2022-09-30 | Fix |
| CVE-2022-21222 | css-what regular expression denial of service (ReDoS) | 7.5v3.1 | 1.5% | 2022-09-30 | Fix |
| CVE-2022-20945 | Cisco Catalyst 9100 Series Access Points Association request denial of service | 7.4CNA v3.1 | 0.5% | 2022-09-30 | Fix |
| CVE-2022-20930 | Cisco SD-WAN software arbitrary File Corruption vulnerability | 6.7CNA v3.1 | 0.3% | 2022-09-30 | Fix |
| CVE-2022-20919 | Cisco IOS and IOS XE Software Common Industrial protocol request denial of service | 8.6CNA v3.1 | 1.2% | 2022-09-30 | Fix |
| CVE-2022-20856 | Cisco IOS XE Wireless Controller Software CAPWAP mobility message processing denial of service | 8.6CNA v3.1 | 1.3% | 2022-09-30 | Fix |
| CVE-2022-20855 | Cisco IOS XE Software self-healing functionality privilege escalation | 7.9CNA v3.1 | 0.4% | 2022-09-30 | Fix |
| CVE-2022-20851 | Cisco IOS XE Software Web UI command injection | 5.5CNA v3.1 | 1.1% | 2022-09-30 | Fix |
| CVE-2022-20850 | Cisco SD-WAN arbitrary file deletion | 5.5CNA v3.1 | 0.2% | 2022-09-30 | Fix |
| CVE-2022-20848 | Cisco IOS XE Software UDP datagram processing denial of service | 8.6CNA v3.1 | 1.0% | 2022-09-30 | Fix |
| CVE-2022-20847 | Cisco IOS XE Wireless Controller Software DHCP message processing denial of service | 8.6CNA v3.1 | 1.3% | 2022-09-30 | Fix |
| CVE-2022-20844 | Cisco SD-WAN vManage SD-AVC GUI hard-coded credentials | 5.3CNA v3.1 | 0.9% | 2022-09-30 | Fix |
| CVE-2022-20818 | Cisco SD-WAN software privilege escalation | 7.8CNA v3.1 | 0.6% | 2022-09-30 | Fix |
| CVE-2022-20810 | Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP information disclosure | 6.5CNA v3.1 | 0.8% | 2022-09-30 | Fix |
| CVE-2022-20775 | Cisco SD-WAN path traversal | 7.8CNA v3.1 | 12.5% | 2022-09-30 | KEVKCVFix |
| CVE-2022-20769 | Cisco Wireless LAN Controller AireOS Software FIPS Mode denial of service | 7.4CNA v3.1 | 0.5% | 2022-09-30 | Fix |
| CVE-2022-20728 | Cisco Access Points VLAN Bypass from Native VLAN vulnerability | 4.7CNA v3.1 | 0.3% | 2022-09-30 | Fix |
| CVE-2022-20662 | Cisco Duo for macOS authentication bypass | 6.1CNA v3.1 | 0.4% | 2022-09-30 | Fix |
| CVE-2022-3371 | Rdiffweb's lack of token name length limit can result in DoS or memory corruption | 7.5v3.1 | 1.1% | 2022-09-30 | Fix |
| CVE-2022-2922 | Relative path traversal in dnnsoftware/dnn.platform | 4.9v3.1 | 1.1% | 2022-09-30 | Fix |
| CVE-2022-2778 | Octopus Deploy Octopus Server login vulnerability | 9.8v3.1 | 0.7% | 2022-09-30 | Fix |
| CVE-2022-2529 | Cloudflare goflow multiple DoS Attack Vectors in sflow packet handling | 7.5CNA v3.1 | 0.9% | 2022-09-30 | Fix |
| CVE-2022-1959 | AppLock improper access control | 6.6v3.1 | 0.4% | 2022-09-30 | |
| CVE-2022-41828 | Amazon Web Services Redshift Java Database Connectivity Driver incorrect type conversion | 8.1v3.1 | 1.5% | 2022-09-29 | Exploit codeFix |
| CVE-2022-40931 | Dutchoders Transfer.sh contains an XSS vulnerability via malicious file upload | 6.1v3.1 | 0.5% | 2022-09-29 | |
| CVE-2022-40890 | Open5GS improper resource release | 7.5v3.1 | 0.9% | 2022-09-29 | |
| CVE-2022-40887 | Best Student Result Management System SQL injection | 9.8v3.1 | 1.0% | 2022-09-29 | |
| CVE-2022-40879 | Keking kkFileView cross-site scripting | 6.1v3.1 | 1.2% | 2022-09-29 | Nuclei |
| CVE-2022-40475 | TOTOLINK A860R OS command injection | 9.8v3.1 | 3.4% | 2022-09-29 | |
| CVE-2022-40472 | Zktec ZKBio Time CSV injection | 8.0v3.1 | 0.9% | 2022-09-29 | |
| CVE-2022-40408 | FeehiCMS vulnerable to cross-site scripting via crafted payload | 5.4v3.1 | 0.4% | 2022-09-29 | |
| CVE-2022-40407 | Chamilo unrestricted file upload | 8.8v3.1 | 1.3% | 2022-09-29 | |
| CVE-2022-40363 | Flipper Zero A buffer overflow | 5.5v3.1 | 0.3% | 2022-09-29 | Exploit code |
| CVE-2022-40279 | Samsung Tizenrt unchecked return value | 7.5v3.1 | 1.2% | 2022-09-29 | |
| CVE-2022-40278 | Samsung Tizenrt use-after-free | 7.5v3.1 | 1.3% | 2022-09-29 | |
| CVE-2022-40126 | Clash files accessible to external parties | 7.8v3.1 | 0.3% | 2022-09-29 | Exploit code |
| CVE-2022-40048 | FlatPress unrestricted file upload | 7.2v3.1 | 1.4% | 2022-09-29 | |
| CVE-2022-39266 | isolated-vm CachedDataOptions API vulnerability | 9.7CNA v3.1 | 1.3% | 2022-09-29 | Fix |
| CVE-2022-39254 | matrix-nio room key forwarding improper authentication | 8.6CNA v3.1 | 0.7% | 2022-09-29 | Fix |
| CVE-2022-39252 | Matrix.org matrix-rust-sdk room key forwarding improper authentication | 8.6CNA v3.1 | 0.6% | 2022-09-29 | Fix |
| CVE-2022-39250 | Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification | 8.6CNA v3.1 | 1.2% | 2022-09-29 | Fix |
| CVE-2022-39232 | Discourse vulnerable to incomplete quote causing a topic to crash in the browser | 6.5CNA v3.1 | 1.2% | 2022-09-29 | Fix |
| CVE-2022-39226 | Discourse user profile location and website fields were not sufficiently length-limited | 4.3CNA v3.1 | 1.0% | 2022-09-29 | Fix |
| CVE-2022-39173 | wolfSSL out-of-bounds write | 7.5v3.1 | 5.8% | 2022-09-29 | Fix |
| CVE-2022-39168 | IBM Robotic Process Automation insufficiently protected credentials | 4.6CNA v3.0 | 0.9% | 2022-09-29 | Fix |
| CVE-2022-38732 | SnapCenter improperly implemented security check | 7.5v3.1 | 0.6% | 2022-09-29 | Fix |
| CVE-2022-38222 | Xpdfreader Xpdf use-after-free | 7.8v3.1 | 0.5% | 2022-09-29 | Fix |
| CVE-2022-36068 | Discourse moderators can edit themes via the API | 7.2CNA v3.1 | 0.9% | 2022-09-29 | Fix |
| CVE-2022-36066 | Discourse vulnerable to RCE via admins uploading maliciously zipped file | 9.1CNA v3.1 | 2.0% | 2022-09-29 | Fix |
| CVE-2022-35888 | Amperecomputing Ampere Altra Max observable discrepancy | 6.5v3.1 | 0.6% | 2022-09-29 | Fix |
| CVE-2022-35137 | Dgiotcloud Dgiot cross-site scripting | 5.4v3.1 | 0.5% | 2022-09-29 | |
| CVE-2022-33880 | Hospital Management System Mini-project SQL injection | 9.8v3.1 | 0.7% | 2022-09-29 | |
| CVE-2022-29503 | uClibC libpthread linuxthreads functionality memory corruption | 9.8v3.1 | 1.2% | 2022-09-29 | Fix |
| CVE-2022-3364 | Rdiffweb's unlimited length Fullname field can lead to DoS | 7.5v3.1 | 1.0% | 2022-09-29 | Fix |
| CVE-2022-3355 | Cross-site scripting (XSS) Stored in InvenTree/InvenTree | 5.4NVD v3.1 | 0.9% | 2022-09-29 | Fix |
| CVE-2022-3352 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-09-29 | Fix |
| CVE-2022-3326 | Weak password requirements in ikus060/rdiffweb | 4.3v3.1 | 0.6% | 2022-09-29 | Fix |
| CVE-2022-1725 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.5% | 2022-09-29 | Fix |
| CVE-2022-1719 | trudesk ticket filter reflected cross-site scripting | 5.4v3.1 | 0.7% | 2022-09-29 | Fix |
| CVE-2022-1718 | trudesk signup full name field integer overflow | 7.5v3.1 | 1.0% | 2022-09-29 | Fix |
| CVE-2022-40942 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 8.1% | 2022-09-28 | |
| CVE-2022-40929 | XXL-JOB contains a command execution vulnerability in background tasks | 9.8v3.1 | 1.3% | 2022-09-28 | Fix |
| CVE-2022-40912 | Etaplighting ETAP Safety Manager cross-site scripting | 6.1v3.1 | 0.5% | 2022-09-28 | |
| CVE-2022-40710 | Trend Micro Deep Security A link following | 7.8v3.1 | 0.2% | 2022-09-28 | Fix |
| CVE-2022-40709 | Trend Micro Deep Security An out-of-bounds read | 3.3v3.1 | 0.4% | 2022-09-28 | Fix |
| CVE-2022-40708 | Trend Micro Deep Security An out-of-bounds read | 3.3v3.1 | 0.2% | 2022-09-28 | Fix |
| CVE-2022-40707 | Trend Micro Deep Security An out-of-bounds read | 3.3v3.1 | 0.2% | 2022-09-28 | Fix |
| CVE-2022-40497 | wazuh code injection | 8.8v3.1 | 1.3% | 2022-09-28 | |
| CVE-2022-40486 | TP-Link Archer AX10 V1 Firmware code injection | 8.8v3.1 | 1.6% | 2022-09-28 | |
| CVE-2022-40083 | Labstack Echo open redirect | 9.6v3.1 | 2.5% | 2022-09-28 | NucleiFix |
| CVE-2022-40082 | Hertz contains path traversal via normalizePath function | 7.5v3.1 | 0.9% | 2022-09-28 | Fix |
| CVE-2022-39264 | nheko vulnerable to secret poisoning using MITM on secret requests by the homeserver | 8.6CNA v3.1 | 0.8% | 2022-09-28 | Fix |
| CVE-2022-39263 | nextauthjs next-auth NextAuth.js Upstash Adapter missing token verification | 6.8CNA v3.1 | 0.7% | 2022-09-28 | Fix |
| CVE-2022-39261 | Twig may load a template outside a configured directory when using the filesystem loader | 7.5CNA v3.1 | 3.2% | 2022-09-28 | Fix |
| CVE-2022-39257 | Matrix iOS SDK vulnerable to impersonation via forwarded Megolm sessions | 7.5CNA v3.1 | 1.0% | 2022-09-28 | Fix |
| CVE-2022-39255 | Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion | 8.6CNA v3.1 | 1.0% | 2022-09-28 | Fix |
| CVE-2022-39251 | Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion | 8.6CNA v3.1 | 1.2% | 2022-09-28 | Fix |
| CVE-2022-39249 | Matrix Javascript SDK vulnerable to impersonation via forwarded Megolm sessions | 7.5CNA v3.1 | 1.3% | 2022-09-28 | Fix |
| CVE-2022-39248 | matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion | 8.6CNA v3.1 | 1.0% | 2022-09-28 | Fix |
| CVE-2022-39246 | matrix-android-sdk2 vulnerable to impersonation via forwarded Megolm sessions | 7.5CNA v3.1 | 0.8% | 2022-09-28 | Fix |
| CVE-2022-39236 | Matrix Javascript SDK improper beacon events can cause availability issues | 4.3CNA v3.1 | 1.3% | 2022-09-28 | Fix |
| CVE-2022-39054 | COWELL information SYSTEM CO., LTD. enterprise travel management system reflected XSS | 6.1CNA v3.1 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-39053 | Heimavista INC. Rpage reflected XSS | 6.1v3.1 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-39035 | Smart eVision stored XSS | 6.1v3.1 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-39034 | Smart eVision path traversal -2 | 6.5CNA v3.1 | 1.4% | 2022-09-28 | Fix |
| CVE-2022-39033 | Smart eVision path traversal -1 | 9.8CNA v3.1 | 1.8% | 2022-09-28 | Fix |
| CVE-2022-39032 | Smart eVision improper privilege management | 8.8CNA v3.1 | 0.9% | 2022-09-28 | Fix |
| CVE-2022-39031 | Smart eVision exposure of sensitive information to an unauthorized actor -3 | 5.3CNA v3.1 | 0.7% | 2022-09-28 | Fix |
| CVE-2022-39030 | Smart eVision exposure of sensitive information to an unauthorized actor -2 | 7.5CNA v3.1 | 0.9% | 2022-09-28 | Fix |
| CVE-2022-39029 | Smart eVision exposure of sensitive information to an unauthorized actor -1 | 6.5CNA v3.1 | 0.8% | 2022-09-28 | Fix |
| CVE-2022-38934 | Toaruos out-of-bounds read | 3.3v3.1 | 0.3% | 2022-09-28 | |
| CVE-2022-38699 | ASUS Armoury Crate Service arbitrary file creation via elevation of privilege Flaw | 5.9CNA v3.1 | 0.3% | 2022-09-28 | Fix |
| CVE-2022-36781 | ConnectWise ScreenConnect Session Code Bypass | 5.3v3.1 | 0.5% | 2022-09-28 | |
| CVE-2022-36771 | IBM QRadar User Behavior Analytics information disclosure | 4.3CNA v3.0 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-36448 | InsydeH2O memory corruption | 8.2v3.1 | 0.3% | 2022-09-28 | Fix |
| CVE-2022-35722 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-35282 | IBM WebSphere Application Server server-side request forgery | 4.3CNA v3.0 | 0.3% | 2022-09-28 | Fix |
| CVE-2022-34424 | Dell Networking OS10 out-of-bounds write | 7.5CNA v3.1 | 0.7% | 2022-09-28 | Fix |
| CVE-2022-34394 | Dell Networking OS10 improper certificate validation | 3.7CNA v3.1 | 0.4% | 2022-09-28 | Fix |
| CVE-2022-32170 | bytebase improper authorization | 4.3CISA ADP v3.1 | 0.6% | 2022-09-28 | |
| CVE-2022-32169 | bytebase improper authorization | 4.3CISA ADP v3.1 | 0.6% | 2022-09-28 | |
| CVE-2022-32168 | notepad-plus-plus DLL hijacking | 7.8v3.1 | 0.7% | 2022-09-28 | |
| CVE-2022-32166 | ovs buffer over-read | 6.1CISA ADP v3.1 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-31629 | The PHP Group PHP cookie name parsing improper input validation | 6.5v3.1 | 49.3% | 2022-09-28 | Exploit codeFix |
| CVE-2022-31628 | PHP phar wrapper can occur DoS when using quine gzip file | 2.3CNA v3.1 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-30935 | b2evolution An authorization bypass | 9.1v3.1 | 1.1% | 2022-09-28 | Fix |
| CVE-2022-29089 | Dell Networking OS10 insufficiently protected credentials | 6.4CNA v3.1 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-28816 | Reflected XSS in Carlo Gavazzi UWP | 6.1v3.1 | 0.4% | 2022-09-28 | Fix |
| CVE-2022-28815 | SQL-injection in Carlo Gavazzi UWP Sentilo Proxy | 2.7v3.1 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-28814 | Path traversal in Carlo Gavazzi UWP could lead to full device access | 9.8CNA v3.1 | 1.3% | 2022-09-28 | Fix |
| CVE-2022-28813 | SQL-injection in Car Park Server allows for full database access | 7.5v3.1 | 0.9% | 2022-09-28 | Fix |
| CVE-2022-28812 | Carlo Gavazzi CPY Car Park Server SuperUser authentication hard-coded credentials | 9.8CNA v3.1 | 1.0% | 2022-09-28 | Fix |
| CVE-2022-28811 | Carlo Gavazzi CPY Car Park Server API parameter handling OS command injection | 9.8CNA v3.1 | 1.2% | 2022-09-28 | Fix |
| CVE-2022-23716 | Elastic Cloud Enterprise sensitive information in log files | 5.3v3.1 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-22526 | Missing authentication for API in Carlo Gavazzi UWP Car Park Server | 9.8CNA v3.1 | 0.8% | 2022-09-28 | Fix |
| CVE-2022-22525 | Carlo Gavazzi CPY Car Park Server arbitrary command execution | 7.2CNA v3.1 | 1.2% | 2022-09-28 | Fix |
| CVE-2022-22524 | SQL-injection in Carlo Gavazzi UWP allows for full database access | 9.4v3.1 | 1.0% | 2022-09-28 | Fix |
| CVE-2022-22523 | Carlo Gavazzi UWP WebApp allows for authentication bypass | 7.5v3.1 | 0.7% | 2022-09-28 | Fix |
| CVE-2022-22522 | Carlo Gavazzi CPY Car Park Server hard-coded credentials | 9.8CNA v3.1 | 1.1% | 2022-09-28 | Fix |
| CVE-2022-22387 | IBM Application Gateway cross-site scripting | 5.4CNA v3.0 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-3354 | Open5GS UDP Packet ogs-tlv-msg.c denial of service | 7.5v3.1 | 0.8% | 2022-09-28 | |
| CVE-2022-3349 | Sony PS4/PS5 exFAT UVFAT_readupcasetable heap-based overflow | 6.8v3.1 | 0.5% | 2022-09-28 | |
| CVE-2022-3348 | Exposure of sensitive information to an unauthorized actor in ToolJet/ToolJet | 4.9v3.1 | 0.9% | 2022-09-28 | Fix |
| CVE-2022-3333 | Zephyr Project Manager REST Call cross-site scripting | 5.4v3.1 | 0.4% | 2022-09-28 | |
| CVE-2022-3332 | SourceCodester Food Ordering Management System POST parameter router.php SQL injection | 9.8v3.1 | 0.6% | 2022-09-28 | |
| CVE-2022-3292 | rdiffweb vulnerable to use of cache containing sensitive information | 4.6v3.1 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-3287 | fwupd plaintext password storage | 6.5NVD v3.1 | 0.8% | 2022-09-28 | Fix |
| CVE-2022-3215 | SwiftNIO vulnerable to improper neutralization of CRLF sequences in HTTP headers | 7.5v3.1 | 0.6% | 2022-09-28 | Fix |
| CVE-2022-3193 | ovirt-engine cross-site scripting | 6.1v3.1 | 0.4% | 2022-09-28 | |
| CVE-2022-2760 | Octopus Deploy Octopus Server information disclosure through error messages | 4.3v3.1 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-1270 | GraphicsMagick heap-based buffer overflow | 7.8NVD v3.1 | 0.5% | 2022-09-28 | Fix |
| CVE-2022-41604 | Check Point ZoneAlarm Extreme Security before 15.8.211.19229 allows local users to escalate privileges. This occurs because of weak permissions for the %PROGRAMDATA%\CheckPoint\ZoneAlarm\Data\Updates directory, and a self-protection driver bypass that allows creation of a junction directory. This ca | 8.8v3.1 | 0.6% | 2022-09-27 | Fix |
| CVE-2022-41571 | EyesOfNetwork local file inclusion | 9.8v3.1 | 0.9% | 2022-09-27 | |
| CVE-2022-41570 | EyesOfNetwork SQL injection | 9.8v3.1 | 0.7% | 2022-09-27 | |
| CVE-2022-40878 | Exam Reviewer Management System unrestricted file upload | 8.8v3.1 | 23.2% | 2022-09-27 | |
| CVE-2022-40877 | Exam Reviewer Management System SQL injection | 9.8v3.1 | 1.1% | 2022-09-27 | |
| CVE-2022-40817 | zammad incorrect permission assignment | 4.3v3.1 | 0.4% | 2022-09-27 | Fix |
| CVE-2022-40816 | zammad incorrect authorization | 6.5v3.1 | 0.7% | 2022-09-27 | Fix |
| CVE-2022-40354 | Online Tours and Travels Management System update_booking.php SQL injection | 7.2v3.1 | 0.9% | 2022-09-27 | |
| CVE-2022-40353 | Online Tours and Travels Management System up_booking.php SQL injection | 7.2v3.1 | 0.9% | 2022-09-27 | |
| CVE-2022-40352 | Online Tours and Travels Management System update_traveller.php SQL injection | 7.2v3.1 | 0.8% | 2022-09-27 | |
| CVE-2022-40199 | EC-CUBE directory traversal | 2.7v3.1 | 1.1% | 2022-09-27 | Fix |
| CVE-2022-39835 | Gajim improper access control | 5.3v3.1 | 0.5% | 2022-09-27 | Fix |
| CVE-2022-39258 | mailcow Swagger UI documentation UI misrepresentation | 8.1CNA v3.1 | 1.8% | 2022-09-27 | NucleiFix |
| CVE-2022-39256 | Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution | 9.0CNA v3.1 | 1.6% | 2022-09-27 | Fix |
| CVE-2022-38975 | EC-CUBE DOM-based cross-site scripting | 5.4v3.1 | 0.6% | 2022-09-27 | Fix |
| CVE-2022-38932 | Toaruos out-of-bounds write | 7.8v3.1 | 0.3% | 2022-09-27 | |
| CVE-2022-38335 | Vtiger CRM cross-site scripting | 5.4v3.1 | 0.7% | 2022-09-27 | Fix |
| CVE-2022-37346 | EC-CUBE Product Image Bulk Upload Plugin unrestricted file upload | 9.8v3.1 | 1.0% | 2022-09-27 | Fix |
| CVE-2022-37209 | jflyfox jfinal_cms SQL injection | 8.8v3.1 | 1.2% | 2022-09-27 | Exploit code |
| CVE-2022-37193 | Chipolo One insufficiently protected credentials | 7.4v3.1 | 0.6% | 2022-09-27 | |
| CVE-2022-37028 | Iris Isams cross-site scripting | 5.4v3.1 | 0.5% | 2022-09-27 | |
| CVE-2022-34326 | Realtek RTL8195AM resource exhaustion | 7.5v3.1 | 0.7% | 2022-09-27 | Fix |
| CVE-2022-31367 | Strapi mishandles hidden attributes within admin API responses | 8.8v3.1 | 1.4% | 2022-09-27 | Fix |
| CVE-2022-23006 | Buffer overflow vulnerability in Western Digital My Cloud Home Products and SanDisk ibi | 1.8CNA v3.1 | 0.3% | 2022-09-27 | Fix |
| CVE-2022-3324 | Stack-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.5% | 2022-09-27 | Fix |
| CVE-2022-3323 | Advantech iView SQL injection | 7.5NVD v3.1 | 29.1% | 2022-09-27 | Fix |
| CVE-2022-3303 | Linux kernel A race condition | 4.7NVD v3.1 | 0.3% | 2022-09-27 | Fix |
| CVE-2022-41352 | Synacor Zimbra Collaboration Suite (ZCS) arbitrary file upload | 9.8v3.1 | 95.5% | 2022-09-26 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-41347 | Zimbra Collaboration Sudo NGINX configuration vulnerability | 7.8v3.1 | 0.4% | 2022-09-26 | Fix |
| CVE-2022-40928 | Online Leave Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40927 | Online Leave Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40926 | Online Leave Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40925 | PHPGurukul Zoo Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-40924 | PHPGurukul Zoo Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-40785 | Mipcm Mipc Camera Firmware OS command injection | 8.8v3.1 | 2.1% | 2022-09-26 | |
| CVE-2022-40784 | Mipcm Mipc Camera Firmware out-of-bounds write | 8.8v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-40485 | Wedding Planner SQL injection | 9.8v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-40484 | Wedding Planner SQL injection | 9.8v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-40483 | Wedding Planner SQL injection | 9.8v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-40404 | Wedding Planner SQL injection | 8.8v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40403 | Wedding Planner SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40402 | Wedding Planner SQL injection | 8.8v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40099 | Online Tours and Travels Management System update_expense_category.php SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40098 | Online Tours and Travels Management System update_expense.php SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40097 | Online Tours And Travels Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40050 | zfile unrestricted file upload | 9.8v3.1 | 0.9% | 2022-09-26 | |
| CVE-2022-40044 | Centreon contains cross-site scripting vulnerability via esc_name parameter | 5.4v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-40043 | Centreon SQL injection vulnerability via esc_name parameter | 8.8v3.1 | 1.2% | 2022-09-26 | Fix |
| CVE-2022-39245 | Mist vulnerable to user providing a Sudo binary for authentication checks | 8.4CNA v3.1 | 0.2% | 2022-09-26 | Fix |
| CVE-2022-39243 | NuProcess vulnerable to command-line injection through insertion of NUL character(s) | 8.4CNA v3.1 | 1.6% | 2022-09-26 | Fix |
| CVE-2022-39219 | Bifrost users using basic authntication can bypass write permission limit | 8.5CNA v3.1 | 1.2% | 2022-09-26 | Fix |
| CVE-2022-38970 | Hipcam Realserver insufficient randomness | 6.5v3.1 | 1.1% | 2022-09-26 | |
| CVE-2022-38553 | Creativeitem Academy Learning Management System cross-site scripting | 6.1v3.1 | 2.5% | 2022-09-26 | NucleiExploit code |
| CVE-2022-36159 | Contec FXA3200 hard-coded credentials | 8.8v3.1 | 1.0% | 2022-09-26 | Fix |
| CVE-2022-36158 | Contec FXA3200 forced browsing | 8.0v3.1 | 1.5% | 2022-09-26 | Fix |
| CVE-2022-30004 | Online Market Place Site SQL injection | 9.8v3.1 | 1.6% | 2022-09-26 | |
| CVE-2022-30003 | Online Market Place Site cross-site scripting | 5.4v3.1 | 0.5% | 2022-09-26 | |
| CVE-2022-28722 | Certain HP inkjet printers buffer overflow | 9.8v3.1 | 1.1% | 2022-09-26 | Fix |
| CVE-2022-28721 | Certain HP inkjet printers remote code execution | 9.8v3.1 | 1.7% | 2022-09-26 | Fix |
| CVE-2022-22058 | Qualcomm Snapdragon possible use-after-free in Kernel | 8.4CNA v3.1 | 0.2% | 2022-09-26 | Fix |
| CVE-2022-21797 | joblib arbitrary code execution | 9.8v3.1 | 2.1% | 2022-09-26 | Fix |
| CVE-2022-21169 | express-xss-sanitizer prototype pollution | 6.1NVD v3.1 | 1.0% | 2022-09-26 | Fix |
| CVE-2022-3301 | Improper Cleanup on Thrown Exception in ikus060/rdiffweb | 2.4NVD v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3299 | Open5GS AMF client.c denial of service | 6.5v3.1 | 1.0% | 2022-09-26 | |
| CVE-2022-3298 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 7.5v3.1 | 1.0% | 2022-09-26 | Fix |
| CVE-2022-3295 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 7.5v3.1 | 1.0% | 2022-09-26 | Fix |
| CVE-2022-3290 | Improper handling of length parameter inconsistency in ikus060/rdiffweb | 7.5v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-3272 | Improper handling of length parameter inconsistency in ikus060/rdiffweb | 7.5v3.1 | 1.5% | 2022-09-26 | Fix |
| CVE-2022-3204 | NLnet Labs Unbound NRDelegation Attack | 7.5v3.1 | 1.3% | 2022-09-26 | Fix |
| CVE-2022-3201 | Google Chrome improper input validation | 5.4v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-3200 | Google Chrome Internals heap-based buffer overflow | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3199 | Google Chrome Frames use-after-free | 8.8v3.1 | 2.1% | 2022-09-26 | Fix |
| CVE-2022-3198 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-3197 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-3196 | Google Chrome PDF use-after-free | 8.8v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-3195 | Google Chrome Storage out-of-bounds write | 8.8v3.1 | 1.1% | 2022-09-26 | Fix |
| CVE-2022-3135 | SEO Smart Links WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-09-26 | |
| CVE-2022-3119 | OAuth client Single Sign On for WordPress plugin settings cross-site request forgery | 7.5NVD v3.1 | 0.4% | 2022-09-26 | Fix |
| CVE-2022-3103 | Linux io_uring module off-by-one error | 7.8NVD v3.1 | 0.3% | 2022-09-26 | |
| CVE-2022-3098 | Login Block IPs WordPress plugin arbitrary setting update via CSRF | 4.3NVD v3.1 | 0.3% | 2022-09-26 | |
| CVE-2022-3076 | CM Download Manager WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 1.5% | 2022-09-26 | Fix |
| CVE-2022-3075 | Google Chromium Mojo insufficient data validation | 9.6v3.1 | 5.8% | 2022-09-26 | KEVFix |
| CVE-2022-3074 | Slider Hero WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-3071 | Google Chrome Tab Strip use-after-free | 8.8v3.1 | 0.5% | 2022-09-26 | Fix |
| CVE-2022-3070 | Generate PDF using Contact Form 7 WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3069 | Wordlift WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-3062 | Simple File List WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 44.1% | 2022-09-26 | NucleiFix |
| CVE-2022-3058 | Google Chrome Sign-In Flow use-after-free | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3057 | Google Chrome iframe Sandbox inappropriate implementation | 6.5v3.1 | 0.5% | 2022-09-26 | Fix |
| CVE-2022-3056 | Google Chrome Content Security Policy insufficient policy enforcement | 6.5v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-3055 | Google Chrome Passwords use-after-free | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3054 | Google Chrome DevTools insufficient policy enforcement | 6.5v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-3053 | Google Chrome Pointer Lock inappropriate implementation | 4.3v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-3052 | Google Chrome Window Manager heap-based buffer overflow | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-3051 | Google Chrome Exosphere heap-based buffer overflow | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3050 | Google Chrome WebUI heap-based buffer overflow | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-3049 | Google Chrome SplitScreen use-after-free | 8.8v3.1 | 0.5% | 2022-09-26 | Fix |
| CVE-2022-3048 | Google Chrome Chrome OS lockscreen inappropriate implementation | 6.8v3.1 | 0.4% | 2022-09-26 | Fix |
| CVE-2022-3047 | Google Chrome Extensions API insufficient policy enforcement | 6.5v3.1 | 0.5% | 2022-09-26 | Fix |
| CVE-2022-3046 | Google Chrome Browser Tag use-after-free | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-3045 | Google Chrome out-of-bounds write | 8.8v3.1 | 1.0% | 2022-09-26 | Fix |
| CVE-2022-3044 | Google Chrome Site Isolation inappropriate implementation | 6.5v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-3043 | Google Chrome Screen Capture heap-based buffer overflow | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-3042 | Google Chrome PhoneHub use-after-free | 8.8v3.1 | 0.5% | 2022-09-26 | Fix |
| CVE-2022-3041 | Google Chrome WebSQL use-after-free | 8.8v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-3040 | Google Chrome Layout use-after-free | 8.8v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-3039 | Google Chrome WebSQL use-after-free | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-3038 | Google Chromium Network Service use-after-free | 8.8v3.1 | 24.7% | 2022-09-26 | KEVFix |
| CVE-2022-3025 | Bitcoin / Altcoin Faucet WordPress plugin settings update to stored XSS via CSRF | 5.4NVD v3.1 | 0.3% | 2022-09-26 | |
| CVE-2022-3024 | Simple Bitcoin Faucets WordPress plugin Unauthorised AJAX Call to stored XSS | 5.4NVD v3.1 | 0.3% | 2022-09-26 | |
| CVE-2022-2998 | Google Chrome Browser Creation use-after-free | 8.8v3.1 | 30.3% | 2022-09-26 | Fix |
| CVE-2022-2987 | LDAP WP Login / Active Directory Integration authentication bypass | 7.5NVD v3.1 | 0.5% | 2022-09-26 | Fix |
| CVE-2022-2926 | Download Manager WordPress plugin Admin+ arbitrary File/Folder access via path traversal | 4.9NVD v3.1 | 1.7% | 2022-09-26 | Fix |
| CVE-2022-2903 | Ninja Forms import feature insecure deserialization | 7.2NVD v3.1 | 1.4% | 2022-09-26 | Fix |
| CVE-2022-2861 | Google Chrome Extensions API inappropriate implementation | 6.5v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-2860 | Google Chrome Cookies insufficient policy enforcement | 6.5v3.1 | 0.9% | 2022-09-26 | Fix |
| CVE-2022-2859 | Google Chrome Chrome OS Shell use-after-free | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-2858 | Google Chrome Sign-In Flow use-after-free | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-2857 | Google Chrome Blink use-after-free | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-2856 | Google Chromium Intents insufficient input validation | 6.5v3.1 | 4.5% | 2022-09-26 | KEVFix |
| CVE-2022-2855 | Google Chrome ANGLE use-after-free | 8.8v3.1 | 0.8% | 2022-09-26 | Fix |
| CVE-2022-2854 | Google Chrome SwiftShader use-after-free | 8.8v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-2853 | Google Chrome Downloads heap-based buffer overflow | 8.8v3.1 | 1.9% | 2022-09-26 | Fix |
| CVE-2022-2852 | Google Chrome FedCM use-after-free | 8.8v3.1 | 2.6% | 2022-09-26 | Fix |
| CVE-2022-2405 | WP Popup Builder WordPress plugin Subscriber+ arbitrary Popup deletion | 4.3NVD v3.1 | 0.3% | 2022-09-26 | Fix |
| CVE-2022-2404 | WP Popup Builder WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-2352 | Post SMTP WordPress plugin Admin+ blind SSRF | 7.2NVD v3.1 | 1.3% | 2022-09-26 | Fix |
| CVE-2022-1755 | SVG Support WordPress plugin Author+ stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-09-26 | Fix |
| CVE-2022-1613 | Restricted Site Access WordPress plugin access bypass via IP spoofing | 5.3NVD v3.1 | 0.7% | 2022-09-26 | Fix |
| CVE-2022-41343 | Dompdf allows remote file inclusion because URI validation failure does not halt font registration | 7.5v3.1 | 6.0% | 2022-09-25 | Exploit codeFix |
| CVE-2022-3297 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-09-25 | Fix |
| CVE-2022-3296 | Stack-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.6% | 2022-09-25 | Fix |
| CVE-2022-41340 | Secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery | 7.5v3.1 | 0.5% | 2022-09-24 | Fix |
| CVE-2022-39242 | Incorrect calculation in Frontier leads to inflated Ethereum chain gas prices | 5.3CNA v3.1 | 0.7% | 2022-09-24 | |
| CVE-2022-39240 | Improper neutralization of script-related HTML tags in a web page (basic XSS) in MyGraph | 5.4CNA v3.1 | 0.8% | 2022-09-24 | Fix |
| CVE-2022-36025 | Incorrect conversion between numeric types in Besu Ethereum client | 9.1CNA v3.1 | 1.0% | 2022-09-24 | Fix |
| CVE-2022-23464 | Potential server side request forgery (SSRF) in Nepxion Discovery | 7.5NVD v3.1 | 0.7% | 2022-09-24 | |
| CVE-2022-23463 | SpEL injection in Nepxion Discovery | 9.8NVD v3.1 | 2.3% | 2022-09-24 | |
| CVE-2022-23461 | Cross-site scripting (XSS) in Jodit Editor | 6.1NVD v3.1 | 0.6% | 2022-09-24 | |
| CVE-2022-41322 | kitty arbitrary code execution | 7.8v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-41320 | Veritas System Recovery insecure storage of sensitive information | 6.5v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-41319 | Veritas Desktop And Laptop Option cross-site scripting | 6.1v3.1 | 0.4% | 2022-09-23 | Fix |
| CVE-2022-40979 | JetBrains TeamCity sensitive information in log files | 4.4CNA v3.1 | 0.4% | 2022-09-23 | Fix |
| CVE-2022-40869 | Tendacn AC15 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-09-23 | |
| CVE-2022-40868 | Tenda W20E out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40867 | Tenda W20E out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40866 | Tenda W20E out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40865 | Tendacn AC15 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-09-23 | |
| CVE-2022-40864 | Tendacn AC15 out-of-bounds write | 9.8v3.1 | 1.3% | 2022-09-23 | |
| CVE-2022-40862 | Tendacn AC15 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-09-23 | |
| CVE-2022-40861 | Tenda AC18 out-of-bounds write | 7.2v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40860 | Tendacn AC15 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40855 | Tenda W20E out-of-bounds write | 9.8v3.1 | 13.5% | 2022-09-23 | |
| CVE-2022-40854 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40853 | Tendacn AC15 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40851 | Tenda AC15 out-of-bounds write | 9.8v3.1 | 9.5% | 2022-09-23 | |
| CVE-2022-40748 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.0 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-40716 | HashiCorp Consul vulnerable to authorization bypass | 6.5v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-40672 | CPO Shortcodes WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-40671 | Rate my Post WP Rating System WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-40630 | Improper Session Management vulnerability in Tacitine Firewall | 9.8v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-40629 | Sensitive information disclosure vulnerability in Tacitine Firewall | 7.5v3.1 | 1.4% | 2022-09-23 | Fix |
| CVE-2022-40628 | Remote code execution vulnerability in Tacitine Firewall | 9.8v3.1 | 2.0% | 2022-09-23 | Fix |
| CVE-2022-40359 | Kfm cross-site scripting | 6.1v3.1 | 1.5% | 2022-09-23 | Nuclei |
| CVE-2022-40358 | AjaXplorer cross-site scripting | 5.4v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-40310 | Rate my Post WP Rating System WordPress plugin race condition | 3.1NVD v3.1 | 0.4% | 2022-09-23 | Fix |
| CVE-2022-40298 | Crestron Airmedia incorrect permission assignment | 8.8v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-40215 | Tabs WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-40213 | GS Testimonial Slider WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-40195 | PCA Predict WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-40194 | Customer Reviews for WooCommerce WordPress plugin sensitive information disclosure | 7.5v3.1 | 0.8% | 2022-09-23 | Fix |
| CVE-2022-40193 | Awesome Filterable Portfolio WordPress plugin unauthenticated stored cross-site scripting (XSS) | 6.1v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-40188 | NIC Knot Resolver algorithmic complexity | 7.5v3.1 | 1.6% | 2022-09-23 | Fix |
| CVE-2022-40132 | Seriously Simple Podcasting WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-40122 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40121 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40120 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40119 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40118 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40117 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40116 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40115 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40114 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40113 | Online Banking System SQL injection | 9.8v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40107 | Tenda i9 out-of-bounds write | 7.5v3.1 | 1.0% | 2022-09-23 | |
| CVE-2022-40106 | Tenda i9 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-40105 | Tenda i9 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-40104 | Tenda i9 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-40103 | Tenda i9 out-of-bounds write | 5.5v3.1 | 0.2% | 2022-09-23 | |
| CVE-2022-40102 | Tenda i9 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-40101 | Tenda i9 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-40100 | Tenda i9 command injection | 9.8v3.1 | 1.5% | 2022-09-23 | |
| CVE-2022-40093 | Online Tours And Travels Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40092 | Online Tours And Travels Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-40091 | Online Tours And Travels Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-39239 | netlify-ipx nefly-ipx subject to server-side request forgery and stored cross-site scripting | 6.1CNA v3.1 | 0.4% | 2022-09-23 | Fix |
| CVE-2022-39238 | Improper authentication in Arvados when using PAM as identity provider | 4.2CNA v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-39231 | parse-server auth adapter app ID validation can be circumvented | 3.7CNA v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-39230 | AWS fhir-works-on-aws-authz-smart search API endpoint information disclosure | 6.5CNA v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-39227 | Python-jwt subject to authentication bypass by spoofing | 9.1CNA v3.1 | 5.3% | 2022-09-23 | Exploit codeFix |
| CVE-2022-39225 | parse-community parse-server parse Server subject to incorrect resource transfer between spheres | 4.3CNA v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-38936 | Pbc unchecked return value | 7.5v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-38742 | Rockwell Automation ThinManager ThinServer heap-based buffer overflow | 8.1CNA v3.1 | 22.2% | 2022-09-23 | Fix |
| CVE-2022-38704 | SEO Redirection WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-38703 | Button Plugin MaxButtons WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-38573 | 10-Strike Network Inventory Explorer buffer overflow | 9.8v3.1 | 1.5% | 2022-09-23 | |
| CVE-2022-38470 | Customer Reviews for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-38460 | NOTICE BOARD WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-38454 | Kraken.io Image Optimizer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-38439 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-38438 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-38134 | Customer Reviews for WooCommerce WordPress plugin authenticated broken access control | 8.8v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-38095 | Advanced Dynamic Pricing for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-38085 | Read more By Adam WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-38079 | Backup Scheduler WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-38061 | Export Post Info WordPress plugin authenticated CSV injection | 5.7v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-37342 | Michael Simpson Add Shortcodes Actions And Filters (WordPress plugin) cross-site scripting | 4.8v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-37339 | Meet My Team WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-37338 | Blossom Recipe Maker WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-37330 | WHA Crossword WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-37328 | History Timeline WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-37235 | NETGEAR R7000 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | Fix |
| CVE-2022-37232 | NETGEAR WNR2000V4 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-23 | Fix |
| CVE-2022-36944 | Scala-lang Scala deserialization of untrusted data | 9.8v3.1 | 10.6% | 2022-09-23 | Exploit codeFix |
| CVE-2022-36798 | Mega Addons For WPBakery Page Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-09-23 | |
| CVE-2022-36791 | Torro Forms WordPress plugin authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-23 | |
| CVE-2022-36417 | 3D Tag Cloud WordPress plugin Multiple stored cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-36388 | YDS Support Ticket System WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-09-23 | |
| CVE-2022-36340 | MailOptin WordPress plugin unauthenticated Optin Campaign Cache deletion vulnerability | 5.3v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-36338 | InsydeH2O arbitrary code execution | 8.2v3.1 | 0.4% | 2022-09-23 | Fix |
| CVE-2022-35951 | Redis subject to integer overflow leading to remote code execution via heap overflow | 7.0CNA v3.1 | 3.9% | 2022-09-23 | Fix |
| CVE-2022-35893 | InsydeH2O memory corruption | 8.2v3.1 | 0.2% | 2022-09-23 | Fix |
| CVE-2022-35721 | IBM Jazz for Service Management cross-site scripting | 6.4CNA v3.0 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-35257 | UI Desktop A local privilege escalation | 7.8v3.1 | 0.2% | 2022-09-23 | Fix |
| CVE-2022-35252 | https://github.com/curl/curl improper input validation | 3.7NVD v3.1 | 3.8% | 2022-09-23 | Fix |
| CVE-2022-35251 | Rocket.Chat cross-site scripting | 5.4v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-35250 | Rocket.Chat privilege escalation | 4.3v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-35249 | Rocket.Chat information disclosure | 4.3v3.1 | 0.7% | 2022-09-23 | |
| CVE-2022-35248 | Rocket.Chat improper authentication | 8.8v3.1 | 1.3% | 2022-09-23 | |
| CVE-2022-35247 | Rocket.Chat information disclosure | 4.3v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-35246 | Rocket.Chat NoSQL injection | 4.3v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-35238 | Awesome Filterable Portfolio WordPress plugin unauthenticated plugin settings Change vulnerability | 5.3v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-35099 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35098 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35097 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35096 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35095 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35094 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35093 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35092 | swftools out-of-bounds write | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-35091 | swftools incorrect comparison | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-34348 | IBM Partner Engagement Manager XML external entity injection | 7.1CNA v3.0 | 1.7% | 2022-09-23 | Fix |
| CVE-2022-33683 | Apache Pulsar Brokers and Proxies vulnerable to improper certificate validation | 5.9v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-33682 | Apache Pulsar disabled hostname verification makes Brokers, Proxies vulnerable to MITM attack | 5.9v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-33681 | Apache Pulsar improper hostname verification in Java client and Proxy can expose authentication data | 5.9v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32853 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32852 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-32851 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32849 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2022-09-23 | Fix |
| CVE-2022-32848 | Apple macOS logic flaw | 5.5v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32847 | Apple macOS denial of service | 9.1v3.1 | 2.8% | 2022-09-23 | Fix |
| CVE-2022-32845 | Apple macOS sandbox escape | 10.0v3.1 | 4.7% | 2022-09-23 | Fix |
| CVE-2022-32843 | Apple macOS out-of-bounds write | 7.1v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32842 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-32841 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32832 | Apple macOS arbitrary code execution | 6.7v3.1 | 0.9% | 2022-09-23 | Exploit codeFix |
| CVE-2022-32831 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32829 | Apple macOS improper privilege management | 7.8v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32828 | Apple iOS, iPadOS, tvOS and macOS kernel information disclosure | 5.5v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-32826 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32825 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32823 | Apple macOS improper initialization | 5.5v3.1 | 0.2% | 2022-09-23 | Fix |
| CVE-2022-32821 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-32820 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32819 | Apple macOS improper privilege management | 7.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32818 | Apple macOS information disclosure | 5.5v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-32817 | Apple macOS out-of-bounds read | 5.5v3.1 | 0.8% | 2022-09-23 | Fix |
| CVE-2022-32816 | Apple macOS UI misrepresentation | 6.5v3.1 | 8.2% | 2022-09-23 | Fix |
| CVE-2022-32815 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32814 | Apple macOS type confusion | 7.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32807 | Apple macOS arbitrary file write | 7.1v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-32805 | Apple macOS information disclosure | 5.5v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-32801 | Apple macOS improper privilege management | 7.8v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-32800 | Apple macOS improper access control | 5.5v3.1 | 2.6% | 2022-09-23 | Fix |
| CVE-2022-32799 | Apple macOS out-of-bounds read | 5.9v3.1 | 1.4% | 2022-09-23 | Fix |
| CVE-2022-32798 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.6% | 2022-09-23 | Fix |
| CVE-2022-32797 | Apple macOS improper input validation | 7.1v3.1 | 1.0% | 2022-09-23 | Fix |
| CVE-2022-32796 | Apple macOS out-of-bounds write | 7.8v3.1 | 1.1% | 2022-09-23 | Fix |
| CVE-2022-32792 | Apple macOS out-of-bounds write | 8.8v3.1 | 2.0% | 2022-09-23 | Fix |
| CVE-2022-32790 | Apple macOS denial of service | 7.5v3.1 | 1.8% | 2022-09-23 | Fix |
| CVE-2022-32789 | Apple macOS logic flaw | 5.5v3.1 | 1.0% | 2022-09-23 | Fix |
| CVE-2022-32787 | Apple macOS out-of-bounds write | 8.8v3.1 | 1.3% | 2022-09-23 | Fix |
| CVE-2022-32786 | Apple macOS improper input validation | 5.5v3.1 | 2.7% | 2022-09-23 | Fix |
| CVE-2022-32785 | Apple macOS null pointer dereference | 5.5v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-32783 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2022-09-23 | Fix |
| CVE-2022-32782 | Apple macOS improper privilege management | 4.4v3.1 | 0.2% | 2022-09-23 | Fix |
| CVE-2022-32781 | Apple macOS improper privilege management | 4.4v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-32229 | Rocket.Chat information disclosure | 4.3v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-32228 | Rocket.Chat An information disclosure | 4.3v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-32227 | Rocket.Chat cleartext transmission of sensitive information | 6.5v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-32226 | Rocket.Chat An improper access control | 4.3v3.1 | 0.7% | 2022-09-23 | |
| CVE-2022-32220 | Rocket.Chat An information disclosure | 6.5v3.1 | 0.9% | 2022-09-23 | |
| CVE-2022-32219 | Rocket.Chat An information disclosure | 4.3v3.1 | 0.8% | 2022-09-23 | |
| CVE-2022-32218 | Rocket.Chat An information disclosure | 4.3v3.1 | 0.7% | 2022-09-23 | |
| CVE-2022-32217 | Rocket.Chat cleartext storage of sensitive information | 5.3v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-32211 | Rocket.Chat SQL injection | 8.8v3.1 | 1.1% | 2022-09-23 | |
| CVE-2022-30426 | Acer Veriton B630 49 out-of-bounds write | 7.8v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-30124 | Rocket.Chat Mobile app An improper authentication | 6.8v3.1 | 0.6% | 2022-09-23 | |
| CVE-2022-30121 | Ivanti Endpoint Manager improper privilege management | 6.7v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-28886 | F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service | 5.5v3.1 | 0.4% | 2022-09-23 | |
| CVE-2022-27492 | Meta WhatsApp Business An integer underflow | 7.8NVD v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-26707 | Apple macOS improper input validation | 5.5v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-26700 | Apple macOS out-of-bounds write | 8.8v3.1 | 1.3% | 2022-09-23 | Fix |
| CVE-2022-26112 | Apache Pinot has Groovy function support enabled by default | 9.8v3.1 | 1.4% | 2022-09-23 | Fix |
| CVE-2022-24280 | Apache Pulsar Proxy target broker address isn't validated | 6.5v3.1 | 1.3% | 2022-09-23 | Fix |
| CVE-2022-23144 | ZXvSTB ZTE missing authorization | 9.1v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-22637 | Apple Safari origin validation error | 8.8v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-22629 | Apple Safari out-of-bounds write | 8.8v3.1 | 5.1% | 2022-09-23 | Exploit codeFix |
| CVE-2022-22628 | Apple Safari use-after-free | 8.8v3.1 | 1.1% | 2022-09-23 | Fix |
| CVE-2022-22624 | Apple Safari use-after-free | 8.8v3.1 | 1.1% | 2022-09-23 | Fix |
| CVE-2022-22610 | Apple Safari out-of-bounds write | 8.8v3.1 | 1.0% | 2022-09-23 | Fix |
| CVE-2022-22423 | IBM CCA for MTM 4767 improper input validation | 6.5CNA v3.0 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-3278 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-3269 | Session fixation in ikus060/rdiffweb | 9.8v3.1 | 0.8% | 2022-09-23 | Fix |
| CVE-2022-3263 | Measuresoft ScadaPro Server improper access control | 7.8v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-3257 | Mattermost server-side denial of service while processing a specifically crafted GIF file | 3.1CNA v3.1 | 1.3% | 2022-09-23 | Fix |
| CVE-2022-3236 | Sophos Firewall code injection | 9.8CNA v3.1 | 98.9% | 2022-09-23 | KEVNucleiFix |
| CVE-2022-3144 | Wordfence Security Firewall and Malware Scan WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.7% | 2022-09-23 | Fix |
| CVE-2022-2973 | MZ Automation libIEC61850 null pointer dereference | 7.5v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-2972 | MZ Automation libIEC61850 stack-based buffer overflow | 9.8v3.1 | 1.3% | 2022-09-23 | Fix |
| CVE-2022-2971 | MZ Automation libIEC61850 access of resource using incompatible type (type confusion) | 7.5v3.1 | 0.9% | 2022-09-23 | Fix |
| CVE-2022-2970 | MZ Automation libIEC61850 stack-based buffer overflow | 9.8v3.1 | 1.2% | 2022-09-23 | Fix |
| CVE-2022-2937 | Image Hover Effects Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-09-23 | Fix |
| CVE-2022-2785 | Arbitrary Memory read in BPF Linux Kernel | 5.5NVD v3.1 | 0.3% | 2022-09-23 | Fix |
| CVE-2022-2566 | FFmpeg heap-based buffer overflow | 7.8NVD v3.1 | 0.8% | 2022-09-23 | Fix |
| CVE-2022-2347 | u-boot Unchecked Download size in Uboot | 7.1NVD v3.1 | 0.6% | 2022-09-23 | Fix |
| CVE-2022-2070 | Grandstream GSD3710 stack-based buffer overflow | 9.8v3.1 | 5.8% | 2022-09-23 | Exploit codeFix |
| CVE-2022-2025 | Grandstream GSD3710 stack-based buffer overflow | 9.8v3.1 | 4.5% | 2022-09-23 | Exploit codeFix |
| CVE-2022-40935 | Online Pet Shop Web Application SQL injection | 7.2v3.1 | 0.9% | 2022-09-22 | |
| CVE-2022-40934 | Online Pet Shop Web Application SQL injection | 7.2v3.1 | 0.9% | 2022-09-22 | |
| CVE-2022-40933 | Online Pet Shop Web Application SQL injection | 7.2v3.1 | 0.9% | 2022-09-22 | |
| CVE-2022-40932 | PHPGurukul Zoo Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-09-22 | |
| CVE-2022-40705 | Apache SOAP: XML external entity injection allows unauthenticated users to read arbitrary files | 7.5v3.1 | 1.6% | 2022-09-22 | Fix |
| CVE-2022-40447 | ZZCMS baojia_list.php SQL injection | 7.2v3.1 | 0.9% | 2022-09-22 | |
| CVE-2022-40446 | ZZCMS sendmailto.php SQL injection | 7.2v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-40444 | zzcms path traversal | 5.3v3.1 | 0.9% | 2022-09-22 | |
| CVE-2022-40443 | zzcms An absolute path traversal | 5.3v3.1 | 2.2% | 2022-09-22 | Nuclei |
| CVE-2022-40186 | HashiCorp Vault vulnerable to incorrect metadata access | 9.1v3.1 | 0.8% | 2022-09-22 | Fix |
| CVE-2022-40146 | Apache XML Graphics jar URL should be blocked by DefaultScriptSecurity | 7.5v3.1 | 7.4% | 2022-09-22 | Exploit codeFix |
| CVE-2022-40089 | Simple College Website A remote file inclusion | 9.8v3.1 | 2.1% | 2022-09-22 | |
| CVE-2022-40088 | Simple College Website cross-site scripting | 6.1v3.1 | 0.7% | 2022-09-22 | |
| CVE-2022-40087 | Simple College Website unrestricted file upload | 9.8v3.1 | 1.5% | 2022-09-22 | |
| CVE-2022-39975 | Liferay portal missing authorization | 4.3v3.1 | 0.5% | 2022-09-22 | Fix |
| CVE-2022-39197 | Fortra Cobalt Strike Teamserver cross-site scripting (XSS) | 6.1NVD v3.1 | 46.4% | 2022-09-22 | KEVExploit codeFix |
| CVE-2022-38648 | Apache XML Graphics PDFTranscoder does not block external resources | 5.3v3.1 | 2.0% | 2022-09-22 | Fix |
| CVE-2022-38512 | Liferay portal and Liferay DXP fails to Check Permissions in Translation module | 6.5v3.1 | 0.6% | 2022-09-22 | Fix |
| CVE-2022-38398 | Apache XML Graphics server-side request forgery information disclosure | 5.3v3.1 | 2.1% | 2022-09-22 | Fix |
| CVE-2022-37234 | NETGEAR R7000 out-of-bounds write | 7.8v3.1 | 0.5% | 2022-09-22 | Fix |
| CVE-2022-36934 | Meta WhatsApp An integer overflow | 9.8NVD v3.1 | 2.4% | 2022-09-22 | Exploit codeFix |
| CVE-2022-36062 | Grafana folders admin only permission privilege escalation | 7.6CNA v3.1 | 0.7% | 2022-09-22 | Fix |
| CVE-2022-35896 | InsydeH2O SMM driver memory leak | 6.0v3.1 | 0.3% | 2022-09-22 | Fix |
| CVE-2022-35894 | InsydeH2O memory leak | 6.0v3.1 | 0.3% | 2022-09-22 | Fix |
| CVE-2022-35408 | InsydeH2O write-what-where condition | 8.2v3.1 | 0.3% | 2022-09-22 | Fix |
| CVE-2022-35039 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35038 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35037 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35036 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35035 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35034 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35032 | Otfcc memory corruption | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35031 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35030 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35029 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35028 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35027 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35026 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35025 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35024 | Otfcc memory corruption | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35023 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35022 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-35021 | Otfcc buffer overflow | 6.5v3.1 | 0.8% | 2022-09-22 | |
| CVE-2022-34026 | ICEcoder vulnerable to path traversal | 7.5v3.1 | 1.4% | 2022-09-22 | |
| CVE-2022-31937 | NETGEAR WNR2000V4 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-22 | Fix |
| CVE-2022-28982 | Liferay Portal and Liferay DXP vulnerable to XSS via Tag Name | 6.1v3.1 | 0.4% | 2022-09-22 | Fix |
| CVE-2022-28981 | Liferay Portal path traversal vulnerability via the Hypermedia REST APIs module | 7.5v3.1 | 1.1% | 2022-09-22 | Fix |
| CVE-2022-28980 | Liferay Portal and Liferay DXP vulnerable to XSS via the filter_ Prefix | 6.1v3.1 | 0.4% | 2022-09-22 | Fix |
| CVE-2022-28979 | Liferay portal and Liferay DXP vulnerable to XSS in the Portal Search module | 6.1v3.1 | 0.4% | 2022-09-22 | Fix |
| CVE-2022-28978 | Liferay portal and Liferay DXP vulnerable to XSS in the Site module | 5.4v3.1 | 0.6% | 2022-09-22 | Fix |
| CVE-2022-28977 | Liferay portal and Liferay DXP HtmlUtil.escapeRedirect can be Circumvented | 6.1v3.1 | 0.5% | 2022-09-22 | Fix |
| CVE-2022-23458 | Toast UI Grid vulnerable to cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-09-22 | Fix |
| CVE-2022-3274 | rdiffweb cross-site request forgery vulnerability can lead to user email ID being changed | 3.5NVD v3.1 | 0.5% | 2022-09-22 | Fix |
| CVE-2022-3268 | Weak password requirements in ikus060/Minarca | 9.8v3.1 | 1.1% | 2022-09-22 | Fix |
| CVE-2022-3267 | Cross-site request forgery (CSRF) in ikus060/rdiffweb | 4.3v3.1 | 0.3% | 2022-09-22 | Fix |
| CVE-2022-3256 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-09-22 | Fix |
| CVE-2022-2266 | Reflected XSS University Library Automation System | 6.1v3.1 | 0.4% | 2022-09-22 | Fix |
| CVE-2022-1941 | Google protobuf-cpp out of Memory issue in ProtocolBuffers for cpp and python | 7.5v3.1 | 1.2% | 2022-09-22 | Fix |
| CVE-2022-41255 | API token stored in plain text by Jenkins CONS3RT Plugin | 6.5v3.1 | 0.7% | 2022-09-21 | Fix |
| CVE-2022-41254 | Missing permission checks in Jenkins CONS3RT Plugin allow capturing credentials | 6.5v3.1 | 0.7% | 2022-09-21 | Fix |
| CVE-2022-41253 | CSRF vulnerability in Jenkins CONS3RT Plugin allow capturing credentials | 8.8v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41252 | Missing permission checks in Jenkins CONS3RT Plugin allow enumerating credentials IDs | 4.3v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41251 | Jenkins Apprenda Plugin has missing authorization | 4.3v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41250 | Missing permission check in Jenkins SCM HttpClient Plugin allow capturing credentials | 6.5v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41249 | Jenkins SCM HttpClient Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-41248 | Jenkins BigPanda Notifier Plugin Missing Password Field Masking | 5.3v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-41247 | Jenkins BigPanda Notifier Plugin stores BigPanda API key unencrypted | 4.3v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41246 | Jenkins Worksoft Execution Manager Plugin CSRF vulnerability and mM | 6.5v3.1 | 0.7% | 2022-09-21 | Fix |
| CVE-2022-41245 | CSRF vulnerability in Jenkins Worksoft Execution Manager Plugin allows capturing credentials | 8.8v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41244 | Missing hostname validation in Jenkins VIEW26 Test-reporting Plugin | 8.1v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41243 | Jenkins SmallTest Plugin missing hostname validation | 8.1v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41242 | Jenkins Extreme-feedback Plugin vulnerable to missing authorization | 5.4v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41241 | Jenkins Rqm Plugin vulnerable to improper restriction of XML external entity reference | 9.1v3.1 | 0.8% | 2022-09-21 | Fix |
| CVE-2022-41240 | Stored XSS vulnerability in Jenkins Walti Plugin | 5.4v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41239 | Stored XSS vulnerability in Jenkins DotCi Plugin | 5.4v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41238 | Lack of authentication mechanism in Jenkins DotCi Plugin webhook | 9.8v3.1 | 0.9% | 2022-09-21 | Fix |
| CVE-2022-41237 | RCE vulnerability in Jenkins DotCi Plugin | 9.8v3.1 | 1.4% | 2022-09-21 | Fix |
| CVE-2022-41236 | CSRF vulnerability in Jenkins Security Inspector Plugin | 8.8v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-41235 | Jenkins WildFly Deployer Plugin vulnerable to path traversal | 5.3v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41234 | Missing webhook endpoint authorization in Jenkins Rundeck Plugin | 8.8v3.1 | 0.9% | 2022-09-21 | Fix |
| CVE-2022-41233 | Jenkins Rundeck Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41232 | Jenkins Build-publisher Plugin vulnerable to cross-site request forgery | 8.0v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41231 | Path traversal in Jenkins Build-publisher Plugin | 5.7v3.1 | 1.3% | 2022-09-21 | Fix |
| CVE-2022-41230 | Missing permission check in Jenkins Build-publisher Plugin | 4.3v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41229 | Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to cross-site scripting | 5.4v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41228 | Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to missing authorization | 8.8v3.1 | 0.9% | 2022-09-21 | Fix |
| CVE-2022-41227 | Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41226 | Jenkins Compuware Common Configuration Plugin XML external entity injection | 9.8v3.1 | 0.8% | 2022-09-21 | Fix |
| CVE-2022-41225 | Jenkins Anchore Container Image Scanner Plugin vulnerable to cross-site scripting | 5.4v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-41224 | Jenkins vulnerable to stored cross-site scripting in the I:helpIcon component | 5.4v3.1 | 1.0% | 2022-09-21 | Fix |
| CVE-2022-41222 | Linux kernel use-after-free | 7.0NVD v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-41220 | MD2ROFF out-of-bounds write | 9.8NVD v3.1 | 2.1% | 2022-09-21 | |
| CVE-2022-41218 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.8% | 2022-09-21 | Exploit codeFix |
| CVE-2022-40754 | Apache Airflow open redirect | 6.1v3.1 | 1.6% | 2022-09-21 | Fix |
| CVE-2022-40616 | IBM Maximo Asset Management improper authentication | 6.5CNA v3.0 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-40604 | Apache Airflow format string | 7.5v3.1 | 1.7% | 2022-09-21 | Fix |
| CVE-2022-40219 | FavIcon Switcher WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-40217 | WPide WordPress plugin authenticated arbitrary file Edit/Upload vulnerability | 7.2v3.1 | 0.9% | 2022-09-21 | Fix |
| CVE-2022-40030 | Simple Task Managing System SQL injection | 9.8v3.1 | 1.2% | 2022-09-21 | |
| CVE-2022-40029 | Simple Task Managing System cross-site scripting | 4.8v3.1 | 0.5% | 2022-09-21 | |
| CVE-2022-40028 | Simple Task Managing System cross-site scripting | 4.8v3.1 | 0.5% | 2022-09-21 | |
| CVE-2022-40027 | Simple Task Managing System cross-site scripting | 6.1v3.1 | 0.6% | 2022-09-21 | |
| CVE-2022-40026 | Simple Task Managing System SQL injection | 7.2v3.1 | 0.8% | 2022-09-21 | |
| CVE-2022-39224 | arr-pm RPM extract and files methods OS command injection | 7.0CNA v3.1 | 1.5% | 2022-09-21 | Fix |
| CVE-2022-39221 | Improper limitation of a pathname to a restricted directory McWebserver Minecraft Mod | 7.5CNA v3.1 | 1.0% | 2022-09-21 | Fix |
| CVE-2022-38928 | Xpdfreader Xpdf null pointer dereference | 7.8v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-38619 | Bpcbt Smartvista Front-end SQL injection | 9.8v3.1 | 0.8% | 2022-09-21 | |
| CVE-2022-38178 | ISC BIND 9 memory leaks in EdDSA DNSSEC verification code | 7.5CNA v3.1 | 3.0% | 2022-09-21 | Fix |
| CVE-2022-38177 | ISC BIND 9 memory leak in ECDSA DNSSEC verification code | 7.5CNA v3.1 | 3.2% | 2022-09-21 | Fix |
| CVE-2022-38073 | Awesome Support WordPress plugin Multiple authenticated persistent XSS | 5.4v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-37246 | Craft CMS cross-site scripting | 5.4v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-37027 | Ahsay Cloud Backup Suite argument injection | 7.2v3.1 | 21.7% | 2022-09-21 | Fix |
| CVE-2022-37026 | Erlang/OTP authentication bypass | 9.8v3.1 | 1.2% | 2022-09-21 | Fix |
| CVE-2022-36390 | Event Calendar Calendar WordPress plugin authenticated reflected cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-36386 | Import any XML or CSV File to WordPress plugin authenticated arbitrary code execution | 7.2NVD v3.1 | 1.5% | 2022-09-21 | Fix |
| CVE-2022-36383 | Word Search Puzzles game WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-09-21 | |
| CVE-2022-36365 | WHA Crossword WordPress plugin Multiple authenticated stored cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-09-21 | |
| CVE-2022-35895 | InsydeH2O out-of-bounds write | 8.2v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-35621 | Evohclaimable improper access control | 5.3v3.1 | 0.8% | 2022-09-21 | |
| CVE-2022-35090 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-35089 | swftools resource exhaustion | 5.5v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-35088 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-35087 | swftools out-of-bounds read | 5.5v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-35086 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-35085 | swftools memory leak | 5.5v3.1 | 0.3% | 2022-09-21 | |
| CVE-2022-31679 | Spring Data REST can expose hidden entity attributes | 3.7v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-30578 | TIBCO EBX Add-ons stored XSS | 8.0CNA v3.1 | 1.0% | 2022-09-21 | Fix |
| CVE-2022-30577 | TIBCO EBX stored XSS | 8.0CNA v3.1 | 0.8% | 2022-09-21 | Fix |
| CVE-2022-29800 | networkd-dispatcher time-of-check time-of-use race condition | 4.7NVD v3.1 | 7.2% | 2022-09-21 | Exploit codeKCVFix |
| CVE-2022-29799 | networkd-dispatcher path traversal | 5.5NVD v3.1 | 11.8% | 2022-09-21 | Exploit codeKCVFix |
| CVE-2022-28802 | Zapier Code BY Zapier incorrect permission assignment | 9.9v3.1 | 1.0% | 2022-09-21 | Fix |
| CVE-2022-23952 | keylime information disclosure | 7.5NVD v3.1 | 1.4% | 2022-09-21 | |
| CVE-2022-23951 | keylime resource exhaustion | 5.5NVD v3.1 | 0.4% | 2022-09-21 | |
| CVE-2022-23950 | keylime insecure temporary file | 7.5NVD v3.1 | 1.6% | 2022-09-21 | |
| CVE-2022-23949 | keylime authentication bypass by spoofing | 7.5NVD v3.1 | 1.4% | 2022-09-21 | |
| CVE-2022-23948 | keylime information disclosure | 7.5NVD v3.1 | 1.4% | 2022-09-21 | |
| CVE-2022-3255 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 4.8v3.1 | 0.7% | 2022-09-21 | Fix |
| CVE-2022-3252 | SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression | 7.5v3.1 | 0.8% | 2022-09-21 | Fix |
| CVE-2022-3251 | Sensitive Cookie in HTTPS Session without Secure attribute in ikus060/Minarca | 5.3NVD v3.1 | 0.7% | 2022-09-21 | Fix |
| CVE-2022-3250 | Sensitive Cookie in HTTPS Session without Secure attribute in ikus060/rdiffweb | 5.3v3.1 | 0.4% | 2022-09-21 | Fix |
| CVE-2022-3233 | Cross-site request forgery (CSRF) in ikus060/rdiffweb | 4.3v3.1 | 0.3% | 2022-09-21 | Fix |
| CVE-2022-3080 | ISC BIND 9 stale cache answering denial of service | 7.5CNA v3.1 | 1.9% | 2022-09-21 | Fix |
| CVE-2022-3068 | Improper privilege management in OctoPrint/OctoPrint | 8.8v3.1 | 0.5% | 2022-09-21 | Fix |
| CVE-2022-2906 | ISC BIND 9 memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL+ only) | 7.5CNA v3.1 | 2.1% | 2022-09-21 | Fix |
| CVE-2022-2888 | Insufficient session expiration in OctoPrint/OctoPrint | 4.4v3.1 | 0.3% | 2022-09-21 | Fix |
| CVE-2022-2881 | ISC BIND 9 buffer overread in statistics channel code | 5.5CNA v3.1 | 1.4% | 2022-09-21 | Fix |
| CVE-2022-2872 | Unrestricted upload of file with dangerous type in OctoPrint/OctoPrint | 5.4v3.1 | 0.6% | 2022-09-21 | Fix |
| CVE-2022-2795 | ISC BIND 9 processing large delegations may severely degrade resolver performance | 5.3CNA v3.1 | 2.2% | 2022-09-21 | Fix |
| CVE-2022-2315 | SQL injection in Database Accreditation System | 9.8NVD v3.1 | 0.8% | 2022-09-21 | Fix |
| CVE-2022-2265 | Path traversal in Identity And Directory Management System | 7.5v3.1 | 0.8% | 2022-09-21 | Fix |
| CVE-2022-0495 | SQL injection in KOHA | 9.8NVD v3.1 | 0.7% | 2022-09-21 | Fix |
| CVE-2022-41138 | Zutty code injection | 9.8v3.1 | 1.8% | 2022-09-20 | Fix |
| CVE-2022-40955 | Deserialization attack in Apache InLong prior to allows RCE via JDBC | 8.8v3.1 | 2.3% | 2022-09-20 | Fix |
| CVE-2022-40357 | Zblogcn Z-BlogPHP server-side request forgery | 9.8v3.1 | 1.3% | 2022-09-20 | |
| CVE-2022-40262 | AMI Aptio S3Resume2Pei module write-what-where condition | 8.2v3.1 | 0.3% | 2022-09-20 | |
| CVE-2022-40261 | AMI Aptio SMM memory corruption vulnerability in OverClockSmiHandler SMM driver | 8.2v3.1 | 0.3% | 2022-09-20 | |
| CVE-2022-40250 | AMI Aptio stack overflow vulnerability in SMI handler on SmmSmbiosElog | 8.8v3.1 | 0.5% | 2022-09-20 | |
| CVE-2022-40246 | AMI Aptio SbPei module write-what-where condition | 7.2v3.1 | 0.5% | 2022-09-20 | |
| CVE-2022-40009 | swftools use-after-free | 9.8v3.1 | 1.1% | 2022-09-20 | |
| CVE-2022-40008 | swftools out-of-bounds write | 9.8v3.1 | 1.0% | 2022-09-20 | |
| CVE-2022-39974 | WASM3 improper input validation | 7.5v3.1 | 0.8% | 2022-09-20 | |
| CVE-2022-39958 | OWASP ModSecurity Core Rule Set Range header handling incorrect authorization | 7.5v3.1 | 1.0% | 2022-09-20 | Fix |
| CVE-2022-39957 | OWASP ModSecurity Core Rule Set Accept header charset handling protection mechanism failure | 7.5v3.1 | 0.8% | 2022-09-20 | Fix |
| CVE-2022-39956 | OWASP ModSecurity Core Rule Set multipart request header parsing incorrect authorization | 9.8v3.1 | 1.0% | 2022-09-20 | Fix |
| CVE-2022-39955 | OWASP ModSecurity Core Rule Set Content-Type header charset handling incorrect authorization | 9.8v3.1 | 1.2% | 2022-09-20 | Fix |
| CVE-2022-39220 | drakkan sftpgo XSS vulnerabilities in WebClient | 6.1CNA v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-39218 | Fastly js-compute-runtime random number seed fixed during compilation | 7.5CNA v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-38956 | NETGEAR WPN824EXT improper integrity check validation | 5.3v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2022-38955 | NETGEAR WPN824EXT improper integrity check validation | 7.5v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2022-38931 | Baijiacms fetch_net_file_upload function server-side request forgery | 8.8v3.1 | 1.2% | 2022-09-20 | |
| CVE-2022-38916 | Pagekit vulnerable to unrestricted upload of file with dangerous type | 9.8v3.1 | 17.6% | 2022-09-20 | |
| CVE-2022-38340 | Safe Fme Server path traversal | 7.2NVD v3.1 | 1.3% | 2022-09-20 | Fix |
| CVE-2022-37972 | Microsoft Endpoint Configuration Manager spoofing | 7.5CNA v3.1 | 1.9% | 2022-09-20 | Fix |
| CVE-2022-37884 | Aruba ClearPass Policy Manager denial of service | 7.5v3.1 | 0.8% | 2022-09-20 | Fix |
| CVE-2022-37883 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 1.4% | 2022-09-20 | Fix |
| CVE-2022-37882 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 1.4% | 2022-09-20 | Fix |
| CVE-2022-37881 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 1.4% | 2022-09-20 | Fix |
| CVE-2022-37880 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 1.4% | 2022-09-20 | Fix |
| CVE-2022-37879 | Aruba ClearPass Policy Manager command injection | 7.2v3.1 | 1.4% | 2022-09-20 | Fix |
| CVE-2022-37878 | Aruba ClearPass Policy Manager OS command injection | 7.2v3.1 | 1.4% | 2022-09-20 | Fix |
| CVE-2022-37877 | Aruba ClearPass Policy Manager arbitrary code execution | 7.8v3.1 | 0.2% | 2022-09-20 | Fix |
| CVE-2022-37395 | CV81-WDM FW denial of service | 7.5v3.1 | 0.5% | 2022-09-20 | Fix |
| CVE-2022-37265 | Steal vulnerable to prototype pollution via alias variable | 9.8v3.1 | 1.2% | 2022-09-20 | Fix |
| CVE-2022-37259 | Steal inefficient regular expression complexity vulnerability via string variable | 7.5v3.1 | 1.1% | 2022-09-20 | Fix |
| CVE-2022-37205 | jflyfox jfinal_cms SQL injection | 8.8v3.1 | 1.2% | 2022-09-20 | Exploit code |
| CVE-2022-37204 | jflyfox jfinal_cms SQL injection | 9.8v3.1 | 1.2% | 2022-09-20 | Exploit code |
| CVE-2022-35957 | Authentication bypass in Grafana via auth proxy allowing escalation from admin to server admin | 6.6CNA v3.1 | 1.6% | 2022-09-20 | Fix |
| CVE-2022-35196 | TestLink cross-site request forgery | 8.8v3.1 | 0.4% | 2022-09-20 | |
| CVE-2022-34917 | Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers | 7.5v3.1 | 1.3% | 2022-09-20 | Fix |
| CVE-2022-34746 | Zyxel GS1900 series firmware insufficient entropy | 5.9CNA v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-33735 | WS7200-10 missing brute-force protection | 6.5v3.1 | 0.2% | 2022-09-20 | Fix |
| CVE-2022-32917 | Apple iOS, iPadOS, and macOS remote code execution | 7.8v3.1 | 5.6% | 2022-09-20 | KEVFix |
| CVE-2022-32912 | Apple iOS out-of-bounds read | 8.8v3.1 | 1.2% | 2022-09-20 | Fix |
| CVE-2022-32911 | Apple iOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-32908 | Apple iOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-32886 | Apple iOS out-of-bounds write | 8.8v3.1 | 1.5% | 2022-09-20 | Fix |
| CVE-2022-32883 | Apple iOS logic flaw | 5.5v3.1 | 0.5% | 2022-09-20 | Exploit codeFix |
| CVE-2022-32882 | This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.4, macOS Big Sur 11.6.6. An app may be able to bypass Privacy preferences. | 9.8v3.1 | 0.8% | 2022-09-20 | Fix |
| CVE-2022-32880 | Apple macOS improper access control | 6.5v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-32872 | Apple iOS logic flaw | 2.4v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-32868 | Apple iOS logic flaw | 4.3v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-32864 | Apple iOS, macOS, iPadOS, tvOS and watchOS kernel information disclosure | 5.5v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-32863 | Apple macOS out-of-bounds write | 9.8v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-32861 | Apple macOS logic flaw | 5.3v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-32854 | This issue was addressed with improved checks. This issue is fixed in iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An app may be able to bypass Privacy preferences. | 5.5v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2022-32802 | Apple macOS logic flaw | 7.8v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-32795 | Apple iOS and iPadOS address bar spoofing | 4.3v3.1 | 0.7% | 2022-09-20 | Fix |
| CVE-2022-32788 | Apple macOS buffer overflow | 9.8v3.1 | 2.2% | 2022-09-20 | Fix |
| CVE-2022-32167 | Cloudreve stored XSS | 5.4v3.1 | 0.5% | 2022-09-20 | Fix |
| CVE-2022-30579 | TIBCO Spotfire Server Blind SSRF | 7.1CNA v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-28640 | HPE Integrated Lights-Out 5 (iLO 5) code injection | 8.8v3.1 | 0.5% | 2022-09-20 | Fix |
| CVE-2022-28639 | HPE Integrated Lights-Out 5 (iLO 5) denial of service | 8.8v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-28638 | HPE Integrated Lights-Out 5 (iLO 5) arbitrary code execution | 7.8v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2022-28637 | HPE Integrated Lights-Out 5 (iLO 5) denial of service | 7.8v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2022-26873 | AMI Aptio PlatformInitAdvancedPreMem module stack-based buffer overflow | 8.2v3.1 | 0.4% | 2022-09-20 | |
| CVE-2022-26696 | Apple macOS protection mechanism failure | 8.8v3.1 | 0.3% | 2022-09-20 | Fix |
| CVE-2022-23696 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-23695 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-23694 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-23693 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-23692 | Aruba ClearPass Policy Manager SQL injection | 8.8v3.1 | 0.9% | 2022-09-20 | Fix |
| CVE-2022-23685 | Aruba ClearPass Policy Manager cross-site request forgery | 8.8v3.1 | 0.4% | 2022-09-20 | Fix |
| CVE-2022-3245 | Code injection in display of tag title on saving tags in microweber/microweber | 6.1v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-3242 | HTML code injection in template search keyword in microweber/microweber | 6.1v3.1 | 1.5% | 2022-09-20 | NucleiFix |
| CVE-2022-3079 | Festo: Cpx-cec-c1 and CMXX, missing authentication for Critical Webpage function | 7.5CNA v3.1 | 0.8% | 2022-09-20 | |
| CVE-2022-3005 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-3004 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-3000 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4v3.1 | 0.6% | 2022-09-20 | Fix |
| CVE-2022-2924 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4NVD v3.1 | 0.8% | 2022-09-20 | Fix |
| CVE-2022-2177 | SQL injection in Kayrasoft | 9.8NVD v3.1 | 0.7% | 2022-09-20 | Fix |
| CVE-2022-40980 | Trend Micro Mobile Security for Enterprise file deletion | 9.1v3.1 | 1.1% | 2022-09-19 | Fix |
| CVE-2022-40978 | JetBrains IntelliJ IDEA uncontrolled search path | 7.5CNA v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-40812 | Democritus Pdfs hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40811 | Democritus URLS hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40810 | Democritus IP Addresses hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40809 | Democritus Dicts hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40808 | Democritus Dates hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40807 | Democritus Domains hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40806 | Democritus Uuids hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40805 | Democritus URLS hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40778 | OPSWAT Metadefender stored cross-site scripting | 5.4v3.1 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-40715 | Nokia 1350 Optical Management System path traversal | 6.5v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40714 | Nokia 1350 Optical Management System cross-site scripting | 6.1v3.1 | 0.5% | 2022-09-19 | |
| CVE-2022-40713 | Nokia 1350 Optical Management System path traversal | 6.5v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40712 | Nokia 1350 Optical Management System cross-site scripting | 6.1v3.1 | 0.5% | 2022-09-19 | |
| CVE-2022-40608 | IBM Spectrum Protect Plus path traversal | 5.9CNA v3.0 | 1.8% | 2022-09-19 | Fix |
| CVE-2022-40468 | Tinyproxy insecure default initialization | 7.5v3.1 | 1.5% | 2022-09-19 | Fix |
| CVE-2022-40432 | D8s-strings unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-40431 | D8s-pdfs unrestricted file upload | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40430 | D8s-utility hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40429 | D8s-ip-addresses hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40428 | D8S MPEG hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40427 | Democritus Domains hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40426 | D8s-asns hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40425 | D8s-html hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40424 | Democritus URLS hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-40234 | IBM Spectrum Protect Plus resource exposure | 5.9CNA v3.0 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-40144 | Trend Micro Apex One improper authentication | 9.8v3.1 | 2.2% | 2022-09-19 | Fix |
| CVE-2022-40143 | Trend Micro Apex One link following | 7.3v3.1 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-40142 | Trend Micro Apex One security link following | 7.8v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-40141 | A vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to intercept and decode certain communication strings that may contain some identification attributes of a particular Apex One server. | 7.5v3.1 | 1.2% | 2022-09-19 | Fix |
| CVE-2022-40140 | Trend Micro Apex One An origin validation error | 5.5NVD v3.1 | 0.3% | 2022-09-19 | Exploit codeFix |
| CVE-2022-40139 | Trend Micro Apex One and Apex One as a Service improper validation | 7.2v3.1 | 3.3% | 2022-09-19 | KEVFix |
| CVE-2022-40076 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40075 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40074 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40073 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40072 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40071 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40070 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40069 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40068 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-40067 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-38887 | D8s-python unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38886 | D8s-xml unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38885 | D8s-netstrings unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38884 | D8s-grammars unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38883 | D8s-math unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38882 | D8s-json unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38881 | D8s-archives unrestricted file upload | 9.8v3.1 | 1.3% | 2022-09-19 | |
| CVE-2022-38880 | Democritus URLS hidden functionality | 9.8v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-38764 | Trend Micro HouseCall (Consumer) incorrect default permissions | 7.8v3.1 | 0.2% | 2022-09-19 | Fix |
| CVE-2022-38618 | Bpcbt Smartvista SQL injection | 8.8v3.1 | 0.7% | 2022-09-19 | |
| CVE-2022-38617 | Bpcbt Smartvista SQL injection | 8.8v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-38577 | ProcessMaker improper preservation of permissions | 8.8v3.1 | 1.6% | 2022-09-19 | Exploit codeFix |
| CVE-2022-38576 | Janobe Interview Management System SQL injection | 7.2v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-38550 | Jeesns /weibo/list component stored cross-site scripting | 5.4v3.1 | 0.4% | 2022-09-19 | |
| CVE-2022-38545 | Valine code injection | 9.6v3.1 | 34.1% | 2022-09-19 | Fix |
| CVE-2022-38532 | MSI Center privilege escalation | 7.8v3.1 | 0.5% | 2022-09-19 | Exploit code |
| CVE-2022-38527 | UCMS cross-site scripting | 6.1v3.1 | 0.5% | 2022-09-19 | |
| CVE-2022-38509 | Wedding Planner SQL injection | 9.8v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-38425 | Adobe Bridge DCM File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.5% | 2022-09-19 | Fix |
| CVE-2022-38351 | supremainc BioStar 2 improper privilege management | 8.8v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-38341 | Safe Software FME Server v2021.2.5 and below does not employ server-side validation. | 7.1v3.1 | 0.5% | 2022-09-19 | Fix |
| CVE-2022-38339 | Safe Fme Server cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-38333 | openwrt out-of-bounds read | 7.5v3.1 | 1.1% | 2022-09-19 | |
| CVE-2022-37700 | EasyCorp ZenTao path traversal | 7.5v3.1 | 2.7% | 2022-09-19 | |
| CVE-2022-37348 | Trend Micro Security (Consumer) out-of-bounds read | 5.5v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-37347 | Trend Micro Security (Consumer) out-of-bounds read | 5.5v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-37203 | jflyfox jfinal_cms SQL injection | 9.8v3.1 | 1.3% | 2022-09-19 | Exploit code |
| CVE-2022-37032 | FRRouting BGP daemon out-of-bounds read | 9.1v3.1 | 1.7% | 2022-09-19 | Exploit codeFix |
| CVE-2022-35914 | Teclib GLPI remote code execution | 9.8NVD v3.1 | 99.9% | 2022-09-19 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-35709 | Adobe Bridge DCM File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-35708 | Adobe Bridge SGI File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-35707 | Adobe Bridge SGI File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-19 | Fix |
| CVE-2022-35706 | Adobe Bridge SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.7% | 2022-09-19 | Fix |
| CVE-2022-35705 | Adobe Bridge MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-19 | Fix |
| CVE-2022-35704 | Adobe Bridge SVG File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-19 | Fix |
| CVE-2022-35703 | Adobe Bridge SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-35702 | Adobe Bridge SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.0 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-35701 | Adobe Bridge SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-35700 | Adobe Bridge SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-35699 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-35070 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35069 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35068 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35067 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35066 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35065 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35064 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35063 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35062 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35061 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-35060 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-09-19 | |
| CVE-2022-34893 | Trend Micro Security (Consumer) link following | 7.8v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-29908 | Fabasoft Cloud Enterprise Client improper certificate validation | 7.8v3.1 | 0.2% | 2022-09-19 | |
| CVE-2022-29835 | WD Discovery's Use of weak hashing Algorithm for Code Signing | 5.3CNA v3.1 | 0.2% | 2022-09-19 | Fix |
| CVE-2022-28321 | Linux-PAM improper authentication | 9.8NVD v3.1 | 1.6% | 2022-09-19 | Fix |
| CVE-2022-28204 | mediawiki denial of service | 7.5v3.1 | 0.9% | 2022-09-19 | Fix |
| CVE-2022-28203 | mediawiki denial of service | 7.5v3.1 | 1.2% | 2022-09-19 | Fix |
| CVE-2022-28201 | mediawiki uncontrolled recursion | 4.4v3.1 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-23768 | Neo Information Sys. Nis-hap11ac remote access and manipulation vulnerability | 9.8v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-23767 | SecureGate authentication bypass | 9.8v3.1 | 0.9% | 2022-09-19 | |
| CVE-2022-23766 | Bluetree BigFileAgent improper input validation | 8.8v3.1 | 0.5% | 2022-09-19 | |
| CVE-2022-3239 | Linux kernel flaw use-after-free | 7.8NVD v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-3218 | Necta WiFi Mouse (Mouse Server) client-side authentication bypass | 9.8NVD v3.1 | 74.0% | 2022-09-19 | Exploit code |
| CVE-2022-3213 | ImageMagick heap-based buffer overflow | 5.5NVD v3.1 | 0.5% | 2022-09-19 | Fix |
| CVE-2022-3142 | NEX-Forms WordPress plugin authenticated SQLi | 8.8NVD v3.1 | 14.7% | 2022-09-19 | NucleiExploit codeFix |
| CVE-2022-3141 | Translatepress Multilinugal WordPress plugin Admin+ SQLi | 8.8NVD v3.1 | 5.2% | 2022-09-19 | Exploit codeFix |
| CVE-2022-3036 | Gettext override translations WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-09-19 | Fix |
| CVE-2022-3021 | Slickr Flickr WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-09-19 | |
| CVE-2022-2995 | CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure | 7.1v3.1 | 0.4% | 2022-09-19 | Fix |
| CVE-2022-2958 | BadgeOS WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 1.3% | 2022-09-19 | Fix |
| CVE-2022-2840 | Zephyr Project Manager WordPress plugin Multiple unauthenticated SQLi | 9.8NVD v3.1 | 13.2% | 2022-09-19 | Exploit codeFix |
| CVE-2022-2754 | Ketchup Restaurant Reservations WordPress plugin unauthenticated blind SQLi | 9.8NVD v3.1 | 39.1% | 2022-09-19 | |
| CVE-2022-2753 | Ketchup Restaurant Reservations WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 83.7% | 2022-09-19 | |
| CVE-2022-2710 | Scroll To Top WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-2709 | Float to Top Button WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-09-19 | |
| CVE-2022-2567 | Form Builder CP WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-1591 | WordPress Ping Optimizer plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.3% | 2022-09-19 | Fix |
| CVE-2022-1580 | Site Offline WordPress plugin access bypass | 4.3NVD v3.1 | 1.6% | 2022-09-19 | NucleiFix |
| CVE-2022-0143 | LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password | 9.8v3.1 | 0.6% | 2022-09-19 | Fix |
| CVE-2022-40775 | Axiosys Bento4 null pointer dereference | 5.5v3.1 | 0.3% | 2022-09-18 | |
| CVE-2022-40774 | Axiosys Bento4 null pointer dereference | 5.5v3.1 | 0.3% | 2022-09-18 | |
| CVE-2022-40769 | Profanity weak random number generator | 7.5NVD v3.1 | 1.5% | 2022-09-18 | |
| CVE-2022-40768 | Linux kernel uninitialized resource use | 5.5NVD v3.1 | 0.3% | 2022-09-18 | Fix |
| CVE-2022-40766 | Moderncampus Omni Cms SQL injection | 9.8v3.1 | 0.9% | 2022-09-18 | Fix |
| CVE-2022-25873 | Vuetify cross-site scripting (XSS) | 5.4v3.1 | 0.7% | 2022-09-18 | Fix |
| CVE-2022-3235 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.5% | 2022-09-18 | Fix |
| CVE-2022-39960 | Netic Group Export missing authorization | 5.3v3.1 | 25.7% | 2022-09-17 | Nuclei |
| CVE-2022-39217 | Improper neutralization of formula elements in a CSV file in ghas-to-csv | 5.8CNA v3.1 | 0.6% | 2022-09-17 | Fix |
| CVE-2022-39212 | Last video frame is still sent after video is disabled in a call in Nextcloud Talk | 4.3CNA v3.1 | 0.7% | 2022-09-17 | Fix |
| CVE-2022-39210 | Access to internal files of the Nextcloud Android app | 3.2CNA v3.1 | 0.3% | 2022-09-17 | Fix |
| CVE-2022-3234 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.5% | 2022-09-17 | Fix |
| CVE-2022-3232 | Cross-site request forgery (CSRF) in ikus060/rdiffweb | 4.3v3.1 | 0.4% | 2022-09-17 | Fix |
| CVE-2022-3231 | Cross-site scripting (XSS) Stored in librenms/librenms | 5.4v3.1 | 0.6% | 2022-09-17 | Fix |
| CVE-2022-3173 | Improper authentication in snipe/Snipe-IT | 4.3v3.1 | 0.8% | 2022-09-17 | Fix |
| CVE-2022-40762 | Samsung mTower TEE_Realloc function excessive memory allocation | 7.5v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-40761 | Samsung mTower improper quantity validation | 7.5v3.1 | 1.3% | 2022-09-16 | |
| CVE-2022-40760 | Samsung mTower TEE_MACUpdate function buffer access with incorrect length | 7.5v3.1 | 1.2% | 2022-09-16 | |
| CVE-2022-40759 | Samsung mTower TEE_MACCompareFinal function null pointer dereference | 7.5v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-40758 | Samsung mTower TEE_CipherUpdate function buffer access with incorrect length | 7.5v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-40757 | Samsung mTower TEE_MACComputeFinal function buffer access with incorrect length | 7.5v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-40755 | jasper reachable assertion | 5.5v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-40337 | Aspiresoftware Open Aviation Strategic Engineering System arbitrary code execution | 8.8v3.1 | 1.2% | 2022-09-16 | Fix |
| CVE-2022-40300 | Zoho ManageEngine Access Manager Plus SQL injection | 9.8v3.1 | 99.3% | 2022-09-16 | Emerging ThreatsFix |
| CVE-2022-40152 | Stack buffer overflow in Woodstox | 7.5NVD v3.1 | 18.2% | 2022-09-16 | Fix |
| CVE-2022-40151 | Stack buffer overflow in xstream | 7.5NVD v3.1 | 2.2% | 2022-09-16 | Fix |
| CVE-2022-40150 | Stack buffer overflow in Jettison | 7.5NVD v3.1 | 1.6% | 2022-09-16 | Fix |
| CVE-2022-40149 | Stack buffer overflow in Jettison | 7.5NVD v3.1 | 1.7% | 2022-09-16 | Fix |
| CVE-2022-39211 | Server-side request forgery (SSRF) via potential filter bypass in Nextcloud Server | 3.0CNA v3.1 | 1.0% | 2022-09-16 | Fix |
| CVE-2022-39063 | Open5GS use of a dangerous function | 7.5v3.1 | 1.1% | 2022-09-16 | Fix |
| CVE-2022-39010 | Huawei HarmonyOS permission control vulnerability in the HwChrService module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-39009 | Huawei HarmonyOS permission verification vulnerability in the WLAN module | 9.8v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-39008 | Huawei HarmonyOS bundle serialization/deserialization mismatch vulnerability in the NFC module | 9.1v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-39007 | Huawei HarmonyOS permission verification bypass vulnerability in the Location module | 9.8v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-39006 | Huawei HarmonyOS race condition vulnerability in the MPTCP module | 5.9v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-39005 | Huawei HarmonyOS memory leak vulnerability in the MPTCP module | 7.5v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-39004 | Huawei HarmonyOS memory leak vulnerability in the MPTCP module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-39003 | Huawei EMUI buffer overflow vulnerability in the video framework | 9.1v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-39002 | HarmonyOS double free vulnerability in the storage module | 9.8v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-39001 | Huawei HarmonyOS path traversal vulnerability in the number identification module | 7.5v3.1 | 0.8% | 2022-09-16 | Fix |
| CVE-2022-39000 | Huawei HarmonyOS malicious app control vulnerability in the iAware module | 9.8v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38999 | Huawei HarmonyOS improper update of reference count vulnerability in the AOD module | 9.8v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38997 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38996 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38995 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38994 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38993 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38992 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38991 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38990 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38989 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38988 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38987 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38979 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38978 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38878 | School Activity Updates With Sms Notification SQL injection | 7.2v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-38877 | Garage Management System unrestricted file upload | 7.2v3.1 | 1.2% | 2022-09-16 | |
| CVE-2022-38846 | espocrm cleartext transmission of sensitive information | 5.9v3.1 | 0.4% | 2022-09-16 | |
| CVE-2022-38845 | espocrm Import feature cross-site scripting | 6.1v3.1 | 0.7% | 2022-09-16 | |
| CVE-2022-38844 | espocrm Create Contacts CSV injection | 8.0v3.1 | 1.2% | 2022-09-16 | |
| CVE-2022-38843 | espocrm unrestricted file upload | 8.8v3.1 | 1.2% | 2022-09-16 | |
| CVE-2022-38833 | School Activity Updates With Sms Notification SQL injection | 7.2v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-38832 | School Activity Updates With Sms Notification SQL injection | 7.2v3.1 | 0.9% | 2022-09-16 | |
| CVE-2022-38831 | Tenda RX9 Pro buffer overflow | 9.8v3.1 | 1.0% | 2022-09-16 | |
| CVE-2022-38830 | Tenda RX9 Pro buffer overflow | 9.8v3.1 | 1.0% | 2022-09-16 | |
| CVE-2022-38829 | Tenda RX9 Pro buffer overflow | 9.8v3.1 | 1.0% | 2022-09-16 | |
| CVE-2022-38828 | TOTOLINK T6 OS command injection | 9.8v3.1 | 19.3% | 2022-09-16 | |
| CVE-2022-38827 | TOTOLINK T6 buffer overflow | 9.8v3.1 | 12.0% | 2022-09-16 | |
| CVE-2022-38826 | TOTOLINK T6 OS command injection | 9.8v3.1 | 1.2% | 2022-09-16 | |
| CVE-2022-38823 | TOTOLINK T6 hard-coded credentials | 9.8v3.1 | 1.0% | 2022-09-16 | |
| CVE-2022-38808 | Yimihome ywoa SQL injection | 8.8v3.1 | 0.8% | 2022-09-16 | |
| CVE-2022-38621 | Doufox remote code execution | 9.8v3.1 | 24.1% | 2022-09-16 | |
| CVE-2022-38611 | Watchdog Anti-Virus DLL hijacking | 7.8v3.1 | 0.4% | 2022-09-16 | |
| CVE-2022-38434 | Adobe Photoshop SVG File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38433 | Adobe Photoshop SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38432 | Adobe Photoshop SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38431 | Adobe Photoshop SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38430 | Adobe Photoshop MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38429 | Adobe Photoshop SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38428 | Adobe Photoshop DCM File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38427 | Adobe Photoshop U3D File Parsing uninitialized variable remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38426 | Adobe Photoshop U3D File Parsing uninitialized variable remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38417 | Adobe InDesign SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-38416 | Adobe InDesign SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-38415 | Adobe InDesign PCX File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38414 | Adobe InDesign SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38413 | Adobe InDesign SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38412 | Adobe Animate SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38411 | Adobe Animate SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2022-38410 | Adobe Illustrator EPS File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-38409 | Adobe Illustrator EPS File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-38408 | Adobe Illustrator improper input validation arbitrary code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38407 | Adobe InCopy EPS File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-38406 | Adobe InCopy EPS File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-38405 | Adobe InCopy SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38404 | Adobe InCopy SVG File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38403 | Adobe InCopy SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-38402 | Adobe InCopy SVG File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-38401 | Adobe InCopy PCX File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-37775 | Genesys Pureconnect cross-site scripting | 6.1v3.1 | 0.8% | 2022-09-16 | Fix |
| CVE-2022-37709 | Tesla Model 3 authentication bypass by spoofing | 5.3v3.1 | 0.6% | 2022-09-16 | |
| CVE-2022-37258 | Steal vulnerable to prototype pollution | 9.8v3.1 | 1.3% | 2022-09-16 | Fix |
| CVE-2022-37251 | Craft CMS vulnerable to cross-site scripting via entry revisions and drafts | 5.4v3.1 | 0.4% | 2022-09-16 | Fix |
| CVE-2022-37250 | Craft CMS stored cross-site scripting in User Addresses Title | 5.4v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-37248 | Craft CMS cross-site scripting | 5.4v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-37247 | Craft CMS vulnerable to stored cross-site scripting via /admin/settings/fields page | 5.4v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36536 | Syncovery insufficient randomness | 9.8v3.1 | 4.1% | 2022-09-16 | MetasploitExploit code |
| CVE-2022-36534 | Syncovery remote code execution | 8.8v3.1 | 51.8% | 2022-09-16 | MetasploitExploit code |
| CVE-2022-36533 | Syncovery cross-site scripting | 5.4v3.1 | 42.6% | 2022-09-16 | |
| CVE-2022-36532 | Bolt Cms remote code execution | 8.8v3.1 | 23.4% | 2022-09-16 | Exploit code |
| CVE-2022-36402 | Linux Kernel there is an int overflow vulnerability in vmwgfx driver | 5.5NVD v3.1 | 0.6% | 2022-09-16 | Fix |
| CVE-2022-36027 | Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow | 5.9CNA v3.1 | 0.8% | 2022-09-16 | Fix |
| CVE-2022-36026 | `CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36019 | `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36018 | `CHECK` fail in `RaggedTensorToVariant` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36017 | Google TensorFlow Requantize denial of service | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36016 | `CHECK`-fail in `TensorFlow::full_type::SubstituteFromAttrs` in TensorFlow | 5.9CNA v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2022-36015 | Integer overflow in math ops in TensorFlow | 5.9CNA v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2022-36014 | Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow | 5.9CNA v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2022-36013 | Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow | 5.9CNA v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2022-36012 | Assertion fail on MLIR empty edge names in TensorFlow | 5.9CNA v3.1 | 0.7% | 2022-09-16 | Fix |
| CVE-2022-36011 | Null dereference on MLIR on empty function attributes in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36005 | `CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36004 | `CHECK` fail in `tf.random.gamma` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36003 | `CHECK` fail in `RandomPoissonV2` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36002 | `CHECK` fail in `Unbatch` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36001 | `CHECK` fail in `DrawBoundingBoxes` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-36000 | Null dereference on MLIR on empty function attributes in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35999 | `CHECK` fail in `Conv2DBackpropInput` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35998 | `CHECK` fail in `EmptyTensorList` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35997 | `CHECK` fail in `tf.sparse.cross` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35996 | Floating point exception in `Conv2D` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35995 | `CHECK` fail in `AudioSummaryV2` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35994 | `CHECK` fail in `CollectiveGather` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35993 | `CHECK` fail in `SetSize` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35992 | `CHECK` fail in `TensorListFromTensor` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35991 | `CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35990 | `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35989 | `CHECK` fail in `MaxPool` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35988 | `CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |
| CVE-2022-35987 | `CHECK` fail in `DenseBincount` in TensorFlow | 5.9CNA v3.1 | 0.5% | 2022-09-16 | Fix |