CVE-2022 list

CVE-2022 records published in September 2022

Page two of three: records 1,001 to 2,000 of the 2,031 published in September 2022, newest first. The first page carries the figures for September 2022.

CVE-2022 records published in September 2022, newest first: records 1,001 to 2,000 of 2,031
CVE Summary CVSS EPSS Published Signals
CVE-2022-35986Google TensorFlow RaggedBincount denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35985`CHECK` fail in `LRNGrad` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35984`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35983`CHECK` fail in `Save` and `SaveSlices` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35982Google TensorFlow SparseBincount denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35981`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35979tensorflow segfault in `QuantizedRelu` and `QuantizedRelu6`5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35974Google TensorFlow QuantizeDownAndShrinkRange denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35973Google TensorFlow QuantizedMatMul denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35972Google TensorFlow QuantizedBiasAdd denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35971`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35970Google TensorFlow QuantizedInstanceNorm denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35969`CHECK` fail in `Conv2DBackpropInput` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35968`CHECK` fail in `AvgPoolGrad` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35967Google TensorFlow QuantizedAdd denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35966Google TensorFlow QuantizedAvgPool denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35965Segfault in `LowerBound` and `UpperBound` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35964Google TensorFlow BlockLSTMGradV2 denial of service5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35963`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35960TensorFlow vulnerable to `CHECK` failure in `TensorListReserve` via missing validation5.9CNA v3.10.7%2022-09-16Fix
CVE-2022-35959`CHECK` failures in `AvgPool3DGrad` in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35952`CHECK` failures in `UnbatchGradOp` in TensorFlow5.9CNA v3.10.7%2022-09-16Fix
CVE-2022-35941Google TensorFlow AvgPoolOp reachable assertion5.9CNA v3.10.7%2022-09-16Fix
CVE-2022-35940tensorflow Int overflow in `RaggedRangeOp` in Tensoflow5.9CNA v3.10.7%2022-09-16Fix
CVE-2022-35939Out-of-bounds write in `scatter_nd` op in TensorFlow Lite7.0CNA v3.10.6%2022-09-16Fix
CVE-2022-35938OOB read in `Gather_nd` op in TensorFlow Lite Micro7.0CNA v3.10.6%2022-09-16Fix
CVE-2022-35937OOB read in `Gather_nd` op in TensorFlow Lite7.0CNA v3.10.6%2022-09-16Fix
CVE-2022-35935`CHECK` failure in `SobolSample` via missing validation in TensorFlow5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35934TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows5.9CNA v3.10.5%2022-09-16Fix
CVE-2022-35713Adobe Photoshop U3D File Parsing out-of-bounds write remote code execution7.8CNA v3.10.4%2022-09-16Fix
CVE-2022-35664Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.6%2022-09-16Fix
CVE-2022-35415NI Configuration Manager NI System improper input validation7.8v3.10.2%2022-09-16Fix
CVE-2022-35195TestLink missing authorization7.2v3.11.1%2022-09-16
CVE-2022-35194TestLink cross-site scripting5.4v3.10.6%2022-09-16
CVE-2022-35193TestLink SQL injection7.2v3.11.0%2022-09-16
CVE-2022-34218Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.6%2022-09-16Fix
CVE-2022-34002Pdssoftware Pds Vista 7 path traversal6.5v3.11.0%2022-09-16
CVE-2022-30686Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.6%2022-09-16Fix
CVE-2022-30685Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.6%2022-09-16Fix
CVE-2022-30684Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.6%2022-09-16Fix
CVE-2022-30683Adobe Experience Manager AEM Violation of Secure Design Principles security feature bypass5.3CNA v3.00.7%2022-09-16Fix
CVE-2022-30682Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.10.6%2022-09-16Fix
CVE-2022-30681Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.00.6%2022-09-16Fix
CVE-2022-30680Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.00.6%2022-09-16Fix
CVE-2022-30678Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.00.6%2022-09-16Fix
CVE-2022-30677Adobe Experience Manager AEM reflected XSS arbitrary code execution5.4CNA v3.00.6%2022-09-16Fix
CVE-2022-30676Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-30675Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-30674Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-30673Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-30672Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-30671Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-29489Sucuri Security WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-09-16Fix
CVE-2022-28857Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-28856Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-28855Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-28854Adobe InDesign 2022 out-of-bound read memory leak5.5CNA v3.10.5%2022-09-16Fix
CVE-2022-28853Adobe InDesign 2022 out-of-bound write arbitrary code execution7.8CNA v3.10.5%2022-09-16Fix
CVE-2022-28852Adobe InDesign 2022 out-of-bound write arbitrary code execution7.8CNA v3.10.5%2022-09-16Fix
CVE-2022-28758Zoom On-Premise Deployments: Improper access control8.2CNA v3.10.7%2022-09-16Fix
CVE-2022-26959Globalnorthstar Northstar Club Management SQL injection9.8v3.10.8%2022-09-16
CVE-2022-25708Qualcomm Snapdragon buffer copy without checking size of input in WLAN9.8CNA v3.10.5%2022-09-16Fix
CVE-2022-25706Qualcomm Snapdragon buffer over-read in Bluetooth8.2CNA v3.10.4%2022-09-16Fix
CVE-2022-25696Qualcomm Snapdragon time-of-check time-of-use race condition in Display8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-25693Qualcomm Snapdragon use-after-free in Graphics8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-25690Qualcomm Snapdragon improper validation of array index in WLAN7.5CNA v3.10.4%2022-09-16Fix
CVE-2022-25688Qualcomm Snapdragon buffer copy without checking size of input in Video7.3CNA v3.10.4%2022-09-16Fix
CVE-2022-25686Qualcomm Snapdragon buffer copy without checking size of input in Video7.3CNA v3.10.4%2022-09-16Fix
CVE-2022-25670Qualcomm Snapdragon buffer over-read in WLAN host7.5CNA v3.10.6%2022-09-16Fix
CVE-2022-25669Qualcomm Snapdragon buffer over-read in Video7.5CNA v3.10.5%2022-09-16Fix
CVE-2022-25656Qualcomm Snapdragon integer overflow or wraparound in Kernel8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-25654Qualcomm Snapdragon improper input validation in Kernel6.7CNA v3.10.1%2022-09-16Fix
CVE-2022-25653Qualcomm Snapdragon buffer over-read in Video6.8CNA v3.10.1%2022-09-16Fix
CVE-2022-25652Qualcomm Snapdragon improper authentication9.0CNA v3.10.1%2022-09-16Fix
CVE-2022-22105Qualcomm Snapdragon integer overflow or wraparound in Automotive Connectivity9.4CNA v3.10.5%2022-09-16Fix
CVE-2022-22095Qualcomm Snapdragon use-after-free in Synx driver8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-22094Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Kernel7.8CNA v3.10.1%2022-09-16Fix
CVE-2022-22093Qualcomm Snapdragon time-of-check time-of-use (TOCTOU) race condition in Kernel7.8CNA v3.10.1%2022-09-16Fix
CVE-2022-22092Qualcomm Snapdragon use-after-free in Kernel7.8CNA v3.10.1%2022-09-16Fix
CVE-2022-22091Qualcomm Snapdragon improper authorization in LTE7.5CNA v3.10.5%2022-09-16Fix
CVE-2022-22089Qualcomm Snapdragon integer overflow or wraparound in Audio8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-22081Qualcomm Snapdragon buffer over-read in Audio8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-22074Qualcomm Snapdragon integer overflow to buffer overflow in Audio8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-22066Qualcomm Snapdragon buffer over-read in content Protection8.4CNA v3.10.1%2022-09-16Fix
CVE-2022-3225Improper control of dynamically-managed code resources in Budibase/Budibase5.7NVD v3.11.0%2022-09-16Fix
CVE-2022-3223Cross-site scripting (XSS) Stored in jgraph/drawio6.1v3.10.7%2022-09-16Fix
CVE-2022-3217VISAM VBASE Web-Remote login information disclosure7.5NVD v3.11.4%2022-09-16
CVE-2022-3214Delta Electronics DIAEnergy use of hard-coded credentials9.8v3.11.6%2022-09-16
CVE-2022-3176Linux kernel io_uring in the use-after-free7.8NVD v3.10.3%2022-09-16Fix
CVE-2022-2913Login No Captcha reCAPTCHA WordPress plugin IP check bypass4.3NVD v3.10.8%2022-09-16Fix
CVE-2022-2912Craw Data WordPress plugin server side request forgery4.3NVD v3.10.7%2022-09-16
CVE-2022-2887WP Server Health Stats WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-09-16Fix
CVE-2022-2877Titan Anti-spam and Security WordPress plugin Protection bypass due to IP spoofing5.3NVD v3.10.8%2022-09-16Fix
CVE-2022-2863WPvivid Backup WordPress plugin Admin+ arbitrary file read4.9NVD v3.125.3%2022-09-16NucleiFix
CVE-2022-2799Affiliates Manager WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-09-16Fix
CVE-2022-2798Affiliates Manager WordPress plugin Affiliate CSV injection8.0NVD v3.11.2%2022-09-16Fix
CVE-2022-2737WP STAGING WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-09-16Fix
CVE-2022-2669WP Taxonomy Import WordPress plugin reflected cross-site scripting6.1NVD v3.10.6%2022-09-16
CVE-2022-2655Classified Listing Pro WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2022-09-16Fix
CVE-2022-2654Classima WordPress plugin reflected cross-site scripting6.1NVD v3.10.6%2022-09-16Fix
CVE-2022-2635Autoptimize WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-09-16Fix
CVE-2022-2575WBW Currency Switcher for WooCommerce WordPress plugin Admin+ stored XSS4.8NVD v3.10.6%2022-09-16Fix
CVE-2022-2351Post SMTP WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.7%2022-09-16Fix
CVE-2022-2333Honeywell SoftMaster uncontrolled search path element7.8v3.11.1%2022-09-16Exploit codeFix
CVE-2022-2332Honeywell SoftMaster incorrect permission assignment for critical resource7.8v3.10.2%2022-09-16Fix
CVE-2022-1194Mobile Events Manager WordPress plugin Admin+ CSV injection8.8NVD v3.11.3%2022-09-16Fix
CVE-2022-40738Axiosys Bento4 null pointer dereference6.5v3.10.6%2022-09-15
CVE-2022-40737Axiosys Bento4 out-of-bounds read6.5v3.10.6%2022-09-15
CVE-2022-40736Axiosys Bento4 Ap4CttsAtom parser vulnerability6.5v3.10.6%2022-09-15
CVE-2022-40663NIKON NIS-Elements Viewer out-of-bounds read7.8v3.10.7%2022-09-15Fix
CVE-2022-40662NIKON NIS-Elements Viewer out-of-bounds read7.8v3.11.0%2022-09-15Fix
CVE-2022-40661NIKON NIS-Elements Viewer heap-based buffer overflow7.8v3.10.9%2022-09-15Fix
CVE-2022-40660NIKON NIS-Elements Viewer heap-based buffer overflow7.8v3.11.1%2022-09-15Fix
CVE-2022-40659NIKON NIS-Elements Viewer out-of-bounds write7.8v3.11.2%2022-09-15Fix
CVE-2022-40658NIKON NIS-Elements Viewer out-of-bounds write7.8v3.10.8%2022-09-15
CVE-2022-40657NIKON NIS-Elements Viewer out-of-bounds write7.8v3.11.2%2022-09-15Fix
CVE-2022-40656NIKON NIS-Elements Viewer out-of-bounds read7.8v3.11.1%2022-09-15Fix
CVE-2022-40655NIKON NIS-Elements Viewer heap-based buffer overflow7.8v3.11.0%2022-09-15
CVE-2022-40654Ansys SpaceClaim out-of-bounds write7.8v3.10.5%2022-09-15
CVE-2022-40653Ansys SpaceClaim out-of-bounds write7.8v3.10.5%2022-09-15
CVE-2022-40652Ansys SpaceClaim out-of-bounds write7.8v3.10.5%2022-09-15
CVE-2022-40651Ansys SpaceClaim out-of-bounds write7.8v3.10.8%2022-09-15
CVE-2022-40650Ansys SpaceClaim out-of-bounds write7.8v3.10.6%2022-09-15
CVE-2022-40649Ansys SpaceClaim uninitialized pointer access7.8v3.10.6%2022-09-15
CVE-2022-40648Ansys SpaceClaim out-of-bounds write7.8v3.10.8%2022-09-15
CVE-2022-40647Ansys SpaceClaim out-of-bounds read7.8v3.10.5%2022-09-15
CVE-2022-40646Ansys SpaceClaim uninitialized pointer access7.8v3.10.6%2022-09-15
CVE-2022-40645Ansys SpaceClaim uninitialized pointer access7.8v3.10.6%2022-09-15
CVE-2022-40644Ansys SpaceClaim out-of-bounds write7.8v3.10.5%2022-09-15
CVE-2022-40643Ansys SpaceClaim uninitialized pointer access7.8v3.10.6%2022-09-15
CVE-2022-40642Ansys SpaceClaim uninitialized pointer access7.8v3.10.6%2022-09-15
CVE-2022-40641Ansys SpaceClaim out-of-bounds write7.8v3.10.5%2022-09-15
CVE-2022-40640Ansys SpaceClaim out-of-bounds read7.8v3.10.5%2022-09-15
CVE-2022-40639Ansys SpaceClaim use-after-free7.8v3.10.6%2022-09-15
CVE-2022-40638Ansys SpaceClaim use-after-free7.8v3.10.6%2022-09-15
CVE-2022-40637Ansys SpaceClaim use-after-free7.8v3.10.5%2022-09-15
CVE-2022-40636Ansys SpaceClaim out-of-bounds read7.8v3.10.5%2022-09-15
CVE-2022-40306Ecisolutions Printanista Managed Print Service denial of service5.9v3.11.1%2022-09-15Fix
CVE-2022-39215The readDir Endpoint Scope can be Bypassed with Symbolic Links in Tauri8.3CNA v3.11.0%2022-09-15Fix
CVE-2022-39213Out-of-bounds read in go-cvss7.5CNA v3.11.7%2022-09-15Fix
CVE-2022-39209Uncontrolled resource consumption in cmark-gfm7.5CNA v3.12.2%2022-09-15Fix
CVE-2022-38890F5 Njs out-of-bounds read5.5v3.10.3%2022-09-15
CVE-2022-38866Mplayerhq Mencoder out-of-bounds write5.5v3.10.3%2022-09-15Fix
CVE-2022-38865Mplayerhq Mencoder divide by zero5.5v3.10.3%2022-09-15Fix
CVE-2022-38864Mplayerhq Mencoder out-of-bounds write5.5v3.10.4%2022-09-15Fix
CVE-2022-38863Mplayerhq Mencoder out-of-bounds write5.5v3.10.4%2022-09-15Fix
CVE-2022-38862Mplayerhq Mencoder out-of-bounds write7.8v3.10.3%2022-09-15Fix
CVE-2022-38861Mplayerhq Mplayer out-of-bounds write5.5v3.10.3%2022-09-15Fix
CVE-2022-38860Mplayerhq Mencoder divide by zero5.5v3.10.3%2022-09-15Fix
CVE-2022-38858Mplayerhq Mencoder out-of-bounds write5.5v3.10.4%2022-09-15Fix
CVE-2022-38856Mplayerhq Mencoder out-of-bounds write5.5v3.10.3%2022-09-15Fix
CVE-2022-38855Mplayerhq Mencoder out-of-bounds write5.5v3.10.4%2022-09-15Fix
CVE-2022-38853Mplayerhq Mencoder out-of-bounds write5.5v3.10.3%2022-09-15Fix
CVE-2022-38851Mplayerhq Mencoder out-of-bounds read5.5v3.10.3%2022-09-15Fix
CVE-2022-38850Mplayerhq Mencoder divide by zero5.5v3.10.3%2022-09-15Fix
CVE-2022-38814FiberHome An5506-02-b auth_settings component stored cross-site scripting5.4v3.12.7%2022-09-15
CVE-2022-38789AirTies Air 4920 insecure direct object reference9.1v3.11.0%2022-09-15Exploit codeFix
CVE-2022-38788Nokia FastMile 5G Receiver Bluetooth pairing vulnerability4.3v3.10.6%2022-09-15Fix
CVE-2022-38600Mplayerhq Mplayer memory leak5.5v3.10.4%2022-09-15Fix
CVE-2022-38595Church Management System SQL injection7.2v3.10.8%2022-09-15
CVE-2022-38594Church Management System SQL injection7.2v3.10.8%2022-09-15
CVE-2022-38535TOTOLINK A720R OS command injection7.2v3.11.8%2022-09-15
CVE-2022-38534TOTOLINK A720R OS command injection7.2v3.11.8%2022-09-15
CVE-2022-38352ThinkPHP deserialization9.8v3.120.2%2022-09-15
CVE-2022-38334Xpdfreader Xpdf uncontrolled recursion5.5v3.10.4%2022-09-15Fix
CVE-2022-38326Tendacn AC15 buffer overflow9.8v3.11.0%2022-09-15
CVE-2022-38325Tendacn AC15 buffer overflow9.8v3.11.0%2022-09-15
CVE-2022-38323Event Management System unrestricted file upload7.2v3.11.0%2022-09-15
CVE-2022-37861Tenhot Tws-100 remote code execution9.8v3.12.0%2022-09-15Fix
CVE-2022-37266Steal vulnerable to prototype pollution via key variable in babel.js9.8v3.11.1%2022-09-15Fix
CVE-2022-37264Steal vulnerable to prototype pollution via optionName variable9.8v3.11.3%2022-09-15Fix
CVE-2022-37262Steal vulnerable to regular expression denial of service via source and sourceWithComments7.5v3.11.1%2022-09-15Fix
CVE-2022-37260Steal vulnerable to regular expression denial of service via input variable7.5v3.11.1%2022-09-15Fix
CVE-2022-37257Steal vulnerable to prototype pollution via requestedVersion variable9.8v3.11.1%2022-09-15Fix
CVE-2022-37207jflyfox jfinal_cms SQL injection8.8v3.11.2%2022-09-15Exploit code
CVE-2022-37201jflyfox jfinal_cms SQL injection8.8v3.11.2%2022-09-15Exploit code
CVE-2022-36075File list exposure in Nextcloud Files Access Control2.6CNA v3.10.6%2022-09-15Fix
CVE-2022-36074Authentication headers exposed on by Nextcloud Server6.4CNA v3.10.8%2022-09-15Fix
CVE-2022-31735OpenAM consortium OpenAM (OpenAM Consortium Edition) open redirect6.1v3.10.5%2022-09-15Fix
CVE-2022-29649Qsmart Next cross-site scripting6.1v3.10.4%2022-09-15
CVE-2022-29240Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla8.1CNA v3.11.3%2022-09-15Fix
CVE-2022-27561HCL Traveler is susceptible to a reflected cross-site scripting vulnerability in the web admin7.5CNA v3.10.5%2022-09-15Fix
CVE-2022-3224Parse-url parses HTTP URLs incorrectly, making it vulnerable to host name spoofing6.1NVD v3.10.8%2022-09-15Fix
CVE-2022-3222Uncontrolled recursion in gpac/gpac5.5v3.10.7%2022-09-15Fix
CVE-2022-3221Cross-site request forgery (CSRF) in ikus060/rdiffweb8.8v3.10.7%2022-09-15Fix
CVE-2022-3211Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.5%2022-09-15Fix
CVE-2022-3001Vulnerability in Milesight Video Management Systems (VMS)7.5v3.11.2%2022-09-15Fix
CVE-2022-2472EZVIZ CS-C6N-A0-1C2WFR improper initialization vulnerability in local server authentication logic5.5NVD v3.10.3%2022-09-15Fix
CVE-2022-2471Stack-based buffer overflow vulnerability in the EZVIZ Motion Detection component9.8NVD v3.11.5%2022-09-15Fix
CVE-2022-1798Google path traversal vulnerability in Kubevirt8.7CNA v3.10.4%2022-09-15Fix
CVE-2022-40734UniSharp Laravel Filemanager directory traversal6.5v3.14.2%2022-09-14NucleiFix
CVE-2022-40674libexpat use-after-free8.1NVD v3.12.3%2022-09-14Fix
CVE-2022-40673Kdiskmark missing authorization7.8v3.10.4%2022-09-14Fix
CVE-2022-40626Reflected XSS in the backurl parameter of Zabbix Frontend4.8CNA v3.10.8%2022-09-14Fix
CVE-2022-40476Linux kernel fs/io_uring.c in the null pointer dereference5.5v3.10.3%2022-09-14Fix
CVE-2022-40439Axiosys Bento4 AP4_StdcFileByteStream::Create in mp42ts memory leak6.5v3.10.6%2022-09-14
CVE-2022-40438Axiosys Bento4 buffer overflow6.5v3.10.6%2022-09-14
CVE-2022-40365Ouqiang Gocron cross-site scripting6.1v3.10.5%2022-09-14
CVE-2022-38796Feehi CMS host header injection6.1v3.10.5%2022-09-14
CVE-2022-38308TOTOLINK A7000RU OS command injection9.8v3.120.3%2022-09-14
CVE-2022-38301onedev path traversal8.8v3.11.2%2022-09-14
CVE-2022-37724Apple Webobjects cross-site scripting6.1v3.10.6%2022-09-14
CVE-2022-37661Adtran SR506N remote code execution9.8v3.133.9%2022-09-14Exploit code
CVE-2022-37140Techvill Paymoney unrestricted file upload8.0v3.11.4%2022-09-14
CVE-2022-37139Razormist Loan Management System cross-site scripting5.4v3.10.5%2022-09-14
CVE-2022-37138Razormist Loan Management System SQL injection9.8v3.11.0%2022-09-14
CVE-2022-37137Techvill Paymoney cross-site scripting5.4v3.10.5%2022-09-14
CVE-2022-36669Hospital Information System SQL injection9.8v3.12.2%2022-09-14
CVE-2022-36668Garage Management System cross-site scripting5.4v3.10.5%2022-09-14
CVE-2022-36667Garage Management System unrestricted file upload8.8v3.124.4%2022-09-14
CVE-2022-36436VNCAuthProxy authentication bypass9.8v3.11.7%2022-09-14Fix
CVE-2022-36114rust-lang cargo extracting malicious crates can fill the file system4.8CNA v3.10.9%2022-09-14Fix
CVE-2022-36113rust-lang cargo extracting malicious crates can corrupt arbitrary files4.6CNA v3.11.2%2022-09-14Fix
CVE-2022-36112Blind server-side request forgery (SSRF) in GLPI3.5CNA v3.10.6%2022-09-14Fix
CVE-2022-36056Sigstore Cosign verify-blob improper signature verification5.5CNA v3.10.2%2022-09-14Fix
CVE-2022-35947SQL injection in GLPI10.0CNA v3.11.2%2022-09-14Fix
CVE-2022-35946SQL injection through plugin controller in GLPI5.5CNA v3.10.9%2022-09-14Fix
CVE-2022-35945Cross-site scripting (XSS) via registration API in GLPI6.3CNA v3.10.7%2022-09-14Fix
CVE-2022-34831Primekey EJBCA improper certificate validation9.8v3.10.5%2022-09-14Fix
CVE-2022-31187Stored cross-site scripting (XSS) through global search in GLPI6.8CNA v3.10.7%2022-09-14Fix
CVE-2022-31143Leak of sensitive information through login page error in GLPI5.3CNA v3.10.9%2022-09-14Fix
CVE-2022-29922Hitachi Energy MicroSCADA X SYS600 improper input validation7.5CNA v3.10.8%2022-09-14Fix
CVE-2022-29492Hitachi Energy MicroSCADA X SYS600 handling of a malformed IEC improper input validation5.3CNA v3.10.7%2022-09-14Fix
CVE-2022-22520User enumeration vulnerability in MB connect line and Helmholz products5.3v3.10.9%2022-09-14Fix
CVE-2022-20364Android TBD out-of-bounds write7.8v3.10.1%2022-09-14Fix
CVE-2022-20231Android arm_gic.c out-of-bounds write6.7v3.10.1%2022-09-14Fix
CVE-2022-3216Nintendo Game Boy Color Mobile Adapter GB Tetsuji memory corruption8.8v3.10.5%2022-09-14
CVE-2022-3212DoS in axum-core due to missing request size limit7.5NVD v3.11.0%2022-09-14Fix
CVE-2022-3202kernel A null pointer dereference7.1NVD v3.10.3%2022-09-14Fix
CVE-2022-2977Linux kernel use-after-free7.8NVD v3.10.2%2022-09-14Fix
CVE-2022-2900Server-side request forgery (SSRF) in ionicabizau/Parse-url9.1v3.11.0%2022-09-14Fix
CVE-2022-2277Hitachi Energy MicroSCADA X SYS600 improper input validation7.5CNA v3.10.8%2022-09-14Fix
CVE-2022-1778Hitachi Energy MicroSCADA X SYS600 improper input validation7.5CNA v3.10.5%2022-09-14Fix
CVE-2022-0029Cortex XDR Agent: Improper Link Resolution vulnerability when Generating a Tech Support file5.5CNA v3.10.2%2022-09-14Fix
CVE-2022-40635Improper control of dynamically-managed code resources in Crafter Studio7.2v3.11.3%2022-09-13Exploit codeFix
CVE-2022-40634Improper control of dynamically-managed code resources in Crafter Studio7.2v3.11.3%2022-09-13Exploit codeFix
CVE-2022-40623WAVLINK Quantum D4G (WN531G3) CSRF8.8NVD v3.10.7%2022-09-13
CVE-2022-40622WAVLINK Quantum D4G (WN531G3) Session Management by IP Address8.8NVD v3.10.7%2022-09-13
CVE-2022-40621WAVLINK Quantum D4G (WN531G3) Pass-The-Hash7.5NVD v3.10.8%2022-09-13
CVE-2022-39821Nokia 1350 Optical Management System sensitive information in log files7.5v3.10.7%2022-09-13
CVE-2022-39819Nokia 1350 Optical Management System OS command injection8.8v3.11.5%2022-09-13
CVE-2022-39817Nokia 1350 Optical Management System SQL injection8.8v3.10.8%2022-09-13
CVE-2022-39816Nokia 1350 Optical Management System insufficiently protected credentials6.5v3.10.6%2022-09-13
CVE-2022-39815Nokia 1350 Optical Management System OS command injection9.8v3.12.1%2022-09-13
CVE-2022-39814Nokia 1350 Optical Management System open redirect6.1v3.10.4%2022-09-13
CVE-2022-39801SAP GRC Access Control Emergency Access Management improper authentication7.5v3.10.6%2022-09-13Fix
CVE-2022-39799SAP NetWeaver AS ABAP cross-site scripting6.1v3.10.5%2022-09-13Fix
CVE-2022-39208Git Repository Disclosure in Onedev7.5CNA v3.11.9%2022-09-13Fix
CVE-2022-39207Persistent XSS in OneDev5.4CNA v3.11.0%2022-09-13Fix
CVE-2022-39206OneDev Docker job executor privilege escalation9.9CNA v3.12.1%2022-09-13Fix
CVE-2022-39205Access Control Bypass in Onedev9.0CNA v3.12.4%2022-09-13Fix
CVE-2022-39203Parsing issue in matrix-org/node-irc leading to room takeovers8.8CNA v3.10.9%2022-09-13Fix
CVE-2022-39202IRC mode parameter confusion in matrix-appservice-irc4.3CNA v3.10.9%2022-09-13Fix
CVE-2022-39158Siemens RUGGEDCOM i800 resource exhaustion5.3CNA v3.11.5%2022-09-13Fix
CVE-2022-39156Siemens Parasolid out-of-bounds read7.8v3.10.2%2022-09-13Fix
CVE-2022-39155Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39154Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39153Siemens Parasolid out-of-bounds read7.8v3.10.2%2022-09-13Fix
CVE-2022-39152Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39151Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39150Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39149Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39148Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39147Siemens Parasolid uninitialized pointer access7.8v3.10.2%2022-09-13Fix
CVE-2022-39146Siemens Parasolid uninitialized pointer access7.8v3.10.2%2022-09-13Fix
CVE-2022-39145Siemens Parasolid out-of-bounds read7.8v3.10.2%2022-09-13Fix
CVE-2022-39144Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39143Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39142Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39141Siemens Parasolid out-of-bounds read7.8v3.10.2%2022-09-13Fix
CVE-2022-39140Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39139Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39138Siemens Parasolid out-of-bounds write7.8v3.10.2%2022-09-13Fix
CVE-2022-39137Siemens Parasolid out-of-bounds read7.8v3.10.2%2022-09-13Fix
CVE-2022-39014SAP BusinessObjects Business Intelligence Platform (CMC) missing encryption5.3v3.10.4%2022-09-13Fix
CVE-2022-38771Transtek Mojodat Fixed Asset Management SQL injection9.8v3.11.1%2022-09-13Fix
CVE-2022-38770Transtek Mojodat Fixed Asset Management mobile application vulnerability5.3v3.10.7%2022-09-13Fix
CVE-2022-38769Transtek Mojodat Fixed Asset Management mobile application vulnerability7.5v3.10.8%2022-09-13Fix
CVE-2022-38768Transtek Mojodat Fixed Asset Management authentication bypass9.8v3.11.0%2022-09-13Fix
CVE-2022-38637Hospital Management System SQL injection9.8v3.16.1%2022-09-13Nuclei
CVE-2022-38633Genymobile Genymotion Desktop uncontrolled search path7.8v3.10.2%2022-09-13
CVE-2022-38616Bpcbt Smartvista Front-end SQL injection8.8v3.10.8%2022-09-13
CVE-2022-38542Archerydms Archery SQL injection9.8v3.10.9%2022-09-13
CVE-2022-38541Archerydms Archery SQL injection9.8v3.11.0%2022-09-13
CVE-2022-38540Archerydms Archery SQL injection9.8v3.10.9%2022-09-13
CVE-2022-38539Archerydms Archery SQL injection9.8v3.10.9%2022-09-13
CVE-2022-38538Archerydms Archery SQL injection9.8v3.10.9%2022-09-13
CVE-2022-38537Archerydms Archery SQL injection9.8v3.10.9%2022-09-13
CVE-2022-38497LIEF contains a segmentation violation5.5v3.10.3%2022-09-13Fix
CVE-2022-38496LIEF reachable assertion5.5v3.10.3%2022-09-13Fix
CVE-2022-38495LIEF vulnerable to heap based buffer overflow via print_binary function7.8v3.10.3%2022-09-13Fix
CVE-2022-38466Siemens CoreShield One-Way Gateway (OWG) Software insecure permissions7.8v3.10.2%2022-09-13Fix
CVE-2022-38453Contec Health CMS8000 active debug code4.4v3.10.2%2022-09-13
CVE-2022-38342Safe Fme Server XML external entity injection6.5NVD v3.10.6%2022-09-13Fix
CVE-2022-38329Shopxian Cms cross-site request forgery4.3v3.10.4%2022-09-13
CVE-2022-38307LIEF contains segmentation violation5.5v3.10.3%2022-09-13Fix
CVE-2022-38306LIEF vulnerable to heap based buffer overflow7.8v3.10.3%2022-09-13Fix
CVE-2022-38305Aero CMS unrestricted file upload8.8v3.11.0%2022-09-13
CVE-2022-38139RD Station WordPress plugin Multiple cross-site request forgery (CSRF)8.8v3.10.3%2022-09-13Fix
CVE-2022-38100Contec Health CMS8000 denial of service7.5v3.10.8%2022-09-13
CVE-2022-38069Contec Health CMS8000 hard-coded credentials6.1v3.10.3%2022-09-13
CVE-2022-38020Microsoft Visual Studio Code elevation of privilege7.3CNA v3.11.1%2022-09-13Fix
CVE-2022-38019Microsoft AV1 Video Extension remote code execution7.8CNA v3.10.9%2022-09-13Fix
CVE-2022-38013Microsoft .NET Core and Visual Studio denial of service7.5CNA v3.14.0%2022-09-13Fix
CVE-2022-38012Microsoft Edge (Chromium-based) remote code execution7.7CNA v3.10.9%2022-09-13Fix
CVE-2022-38011Microsoft Raw Image Extension remote code execution7.3CNA v3.10.9%2022-09-13Fix
CVE-2022-38010Microsoft Office Visio remote code execution7.8CNA v3.10.9%2022-09-13Fix
CVE-2022-38009Microsoft SharePoint server remote code execution8.8CNA v3.12.1%2022-09-13Fix
CVE-2022-38008Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2022-09-13Fix
CVE-2022-38007Microsoft Azure Guest Configuration and Azure Arc-enabled servers elevation of privilege7.8CNA v3.10.7%2022-09-13Fix
CVE-2022-38006Microsoft Windows Graphics component information disclosure6.5CNA v3.12.3%2022-09-13Fix
CVE-2022-38005Microsoft Windows Print Spooler elevation of privilege7.8CNA v3.10.9%2022-09-13Fix
CVE-2022-38004Microsoft Windows Fax service remote code execution7.8CNA v3.11.1%2022-09-13Fix
CVE-2022-37969Microsoft Windows Common Log File System (CLFS) driver privilege escalation7.8CNA v3.128.3%2022-09-13KEVExploit codeFix
CVE-2022-37964Microsoft Windows Kernel elevation of privilege7.8CNA v3.11.1%2022-09-13Fix
CVE-2022-37963Microsoft Office Visio remote code execution7.8CNA v3.11.1%2022-09-13Fix
CVE-2022-37962Microsoft PowerPoint remote code execution7.8CNA v3.11.4%2022-09-13Fix
CVE-2022-37961Microsoft SharePoint server remote code execution8.8CNA v3.150.9%2022-09-13Fix
CVE-2022-37959Microsoft Windows network Device Enrollment Service (NDES) security feature bypass6.5CNA v3.12.4%2022-09-13Fix
CVE-2022-37958Microsoft Windows SPNEGO Extended Negotiation (NEGOEX) Security Mechanism remote code execution8.1CNA v3.186.1%2022-09-13Fix
CVE-2022-37957Microsoft Windows Kernel elevation of privilege7.8CNA v3.113.6%2022-09-13Fix
CVE-2022-37956Microsoft Windows Kernel elevation of privilege7.8CNA v3.11.3%2022-09-13Fix
CVE-2022-37955Microsoft Windows Group Policy elevation of privilege7.8CNA v3.12.1%2022-09-13Fix
CVE-2022-37954Microsoft Windows DirectX Graphics Kernel elevation of privilege7.8CNA v3.144.9%2022-09-13Fix
CVE-2022-37703Amanda path traversal3.3v3.10.7%2022-09-13Exploit codeFix
CVE-2022-37302Schneider Electric EcoStruxure Control Expert memory corruption5.5CNA v3.10.2%2022-09-13Fix
CVE-2022-37191Cuppacms inclusion of untrusted functionality6.5v3.12.8%2022-09-13Nuclei
CVE-2022-37190Cuppacms remote code execution8.8v3.145.8%2022-09-13Nuclei
CVE-2022-37011Siemens Mendix SAML (Mendix 7 compatible) authentication bypass by replay9.8v3.11.1%2022-09-13Fix
CVE-2022-36782Pal Electronics Systems Pal Gate Authorization Errors8.6v3.10.4%2022-09-13
CVE-2022-36780Avdor CIS crystal quality Credentials Management Errors5.3v3.10.4%2022-09-13
CVE-2022-36779PROSCEND ADVICE ICR 111WG OS command injection9.8v3.12.4%2022-09-13Exploit code
CVE-2022-36778Synel eHarmony stored XSS5.4v3.10.4%2022-09-13
CVE-2022-36768IBM AIX privilege escalation8.4CNA v3.00.2%2022-09-13Fix
CVE-2022-36385Contec Health CMS8000 USB firmware update improper access control6.8v3.10.4%2022-09-13
CVE-2022-36108Cross-site scripting in TYPO3/cms-core6.5CNA v3.10.9%2022-09-13Fix
CVE-2022-36107typo3 stored cross-site scripting via FileDumpController6.5CNA v3.10.9%2022-09-13Fix
CVE-2022-36106Missing check for expiration time of password reset token in TYPO35.4CNA v3.11.0%2022-09-13Fix
CVE-2022-36105User Enumeration via Response Timing in TYPO35.3CNA v3.11.3%2022-09-13Fix
CVE-2022-36104Denial of service via Page Error Handling in TYPO3/cms5.9CNA v3.11.6%2022-09-13Fix
CVE-2022-36103Talos worker join token can be used to get elevated access level to the Talos API7.2CNA v3.10.7%2022-09-13Fix
CVE-2022-36020Bypass of cross-site scripting Protection in TYPO3/html-sanitizer6.1CNA v3.10.8%2022-09-13Fix
CVE-2022-35841Microsoft Windows Enterprise App Management service remote code execution8.8CNA v3.13.6%2022-09-13Fix
CVE-2022-35840Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.2%2022-09-13Fix
CVE-2022-35838Microsoft Windows HTTP V3 denial of service7.5CNA v3.12.7%2022-09-13Fix
CVE-2022-35837Microsoft Windows Graphics component information disclosure6.5CNA v3.12.5%2022-09-13Fix
CVE-2022-35836Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.2%2022-09-13Fix
CVE-2022-35835Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.2%2022-09-13Fix
CVE-2022-35834Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.2%2022-09-13Fix
CVE-2022-35833Microsoft Windows Secure Channel denial of service7.5CNA v3.13.0%2022-09-13Fix
CVE-2022-35832Microsoft Windows Event Tracing denial of service5.5CNA v3.10.9%2022-09-13Fix
CVE-2022-35831Microsoft Windows Remote Access Connection Manager information disclosure5.5CNA v3.10.9%2022-09-13Fix
CVE-2022-35830Microsoft Windows remote Procedure Call Runtime remote code execution8.1CNA v3.11.8%2022-09-13Fix
CVE-2022-35828Microsoft Defender For Endpoint for Mac elevation of privilege7.8CNA v3.10.5%2022-09-13Fix
CVE-2022-35823Microsoft SharePoint remote code execution8.8CNA v3.153.8%2022-09-13Fix
CVE-2022-35805Microsoft Dynamics CRM (on-premises) remote code execution8.8CNA v3.13.1%2022-09-13Fix
CVE-2022-35803Microsoft Windows Common Log File System driver elevation of privilege7.8CNA v3.123.8%2022-09-13Fix
CVE-2022-35637IBM Db2 denial of service6.5CNA v3.01.3%2022-09-13Fix
CVE-2022-35582Pentasecurity Wapples hard-coded credentials8.8v3.10.8%2022-09-13
CVE-2022-35413Pentasecurity Wapples hard-coded credentials9.8v3.118.0%2022-09-13NucleiFix
CVE-2022-35298SAP NetWeaver Enterprise Portal (KMC) cross-site scripting6.1v3.10.4%2022-09-13Fix
CVE-2022-35295SAP Host Agent (SAPOSCOL) improper exception handling4.9v3.11.3%2022-09-13Fix
CVE-2022-35294SAP NetWeaver AS ABAP cross-site scripting5.4v3.10.5%2022-09-13Fix
CVE-2022-35292SAP Business One unquoted search path7.8v3.10.2%2022-09-13Fix
CVE-2022-34734Microsoft ODBC driver remote code execution8.8CNA v3.12.7%2022-09-13Fix
CVE-2022-34733Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.2%2022-09-13Fix
CVE-2022-34732Microsoft ODBC driver remote code execution8.8CNA v3.12.7%2022-09-13Fix
CVE-2022-34731Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.12.2%2022-09-13Fix
CVE-2022-34730Microsoft ODBC driver remote code execution8.8CNA v3.12.7%2022-09-13Fix
CVE-2022-34729Microsoft Windows GDI elevation of privilege7.8CNA v3.110.5%2022-09-13Fix
CVE-2022-34728Microsoft Windows Graphics component information disclosure5.5CNA v3.14.3%2022-09-13Fix
CVE-2022-34727Microsoft ODBC driver remote code execution8.8CNA v3.12.7%2022-09-13Fix
CVE-2022-34726Microsoft ODBC driver remote code execution8.8CNA v3.12.7%2022-09-13Fix
CVE-2022-34725Microsoft Windows ALPC elevation of privilege7.0CNA v3.15.4%2022-09-13Fix
CVE-2022-34724Microsoft Windows DNS server denial of service7.5CNA v3.13.7%2022-09-13Fix
CVE-2022-34723Microsoft Windows DPAPI (Data Protection Application Programming interface) information disclosure5.5CNA v3.11.1%2022-09-13Fix
CVE-2022-34722Microsoft Windows Internet Key Exchange (IKE) protocol extensions remote code execution9.8CNA v3.12.8%2022-09-13Fix
CVE-2022-34721Microsoft Windows Internet Key Exchange (IKE) protocol extensions remote code execution9.8CNA v3.176.2%2022-09-13Fix
CVE-2022-34720Microsoft Windows Internet Key Exchange (IKE) extension denial of service7.5CNA v3.13.6%2022-09-13Fix
CVE-2022-34719Microsoft Windows Distributed File System (DFS) elevation of privilege7.8CNA v3.11.1%2022-09-13Fix
CVE-2022-34718Microsoft Windows TCP/IP remote code execution9.8CNA v3.154.4%2022-09-13Exploit codeFix
CVE-2022-34700Microsoft Dynamics CRM (on-premises) remote code execution8.8CNA v3.13.7%2022-09-13Fix
CVE-2022-34356IBM VIOS privilege escalation8.4CNA v3.00.2%2022-09-13Fix
CVE-2022-34336IBM WebSphere Application Server cross-site scripting5.4CNA v3.00.5%2022-09-13Fix
CVE-2022-34102Crestron Airmedia improper access control8.8v3.10.9%2022-09-13Fix
CVE-2022-34101Crestron Airmedia uncontrolled search path7.8v3.10.4%2022-09-13Fix
CVE-2022-34100Crestron AirMedia repair operation vulnerability8.8v3.11.1%2022-09-13Fix
CVE-2022-33679Microsoft Windows Kerberos elevation of privilege8.1CNA v3.111.1%2022-09-13Exploit codeFix
CVE-2022-33647Microsoft Windows Kerberos elevation of privilege8.1CNA v3.12.2%2022-09-13Fix
CVE-2022-32555Unisys DATA Exchange Management Studio cross-site request forgery8.8v3.10.3%2022-09-13Fix
CVE-2022-32244SAP BusinessObjects Business Intelligence Platform (Commentary DB) information disclosure5.2v3.10.5%2022-09-13Fix
CVE-2022-32190Failure to strip relative path components in net/url7.5v3.11.8%2022-09-13Fix
CVE-2022-31861ThingsBoard cross-site scripting5.4v3.10.5%2022-09-13
CVE-2022-31324Pentasecurity Wapples arbitrary file read6.5v3.10.4%2022-09-13Fix
CVE-2022-31322Pentasecurity Wapples hard-coded credentials7.8v3.10.3%2022-09-13Fix
CVE-2022-30200Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution7.8CNA v3.11.3%2022-09-13Fix
CVE-2022-30196Microsoft Windows Secure Channel denial of service8.2CNA v3.12.1%2022-09-13Fix
CVE-2022-30170Microsoft Windows Credential Roaming service elevation of privilege7.3CNA v3.11.6%2022-09-13Fix
CVE-2022-26929NET Framework remote code execution7.8CNA v3.11.6%2022-09-13Fix
CVE-2022-26928Microsoft Windows Photo Import API elevation of privilege7.0CNA v3.10.8%2022-09-13Fix
CVE-2022-22483IBM Db2 improper privilege management6.5CNA v3.01.1%2022-09-13Fix
CVE-2022-22330IBM Control Desk incorrect permission assignment3.7CNA v3.00.9%2022-09-13Fix
CVE-2022-22329IBM Control Desk session cookies information disclosure4.3CNA v3.00.7%2022-09-13Fix
CVE-2022-20399Android system apps information disclosure5.5v3.10.1%2022-09-13Fix
CVE-2022-20398Android WifiServiceImpl.java privilege escalation7.8v3.10.1%2022-09-13Fix
CVE-2022-20396Android SettingsActivity.java privilege escalation5.5v3.10.1%2022-09-13Fix
CVE-2022-20395Android MediaProvider.java file deletion7.8v3.10.1%2022-09-13Fix
CVE-2022-20393Android TextDescriptions.cpp out-of-bounds read5.5v3.10.1%2022-09-13Fix
CVE-2022-20392Android ParsedPermissionUtils.java privilege escalation7.8v3.10.1%2022-09-13Fix
CVE-2022-20391Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2382570009.8v3.10.4%2022-09-13Fix
CVE-2022-20390Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2382570029.8v3.10.4%2022-09-13Fix
CVE-2022-20389Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2382570049.8v3.10.4%2022-09-13Fix
CVE-2022-20388Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2382273239.8v3.10.4%2022-09-13Fix
CVE-2022-20387Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2382273249.8v3.10.4%2022-09-13Fix
CVE-2022-20386Summary:Product: AndroidVersions: Android SoCAndroid ID: A-2382273289.8v3.10.4%2022-09-13Fix
CVE-2022-20385Android improper quantity validation9.8v3.10.4%2022-09-13Fix
CVE-2022-3205Controller: Cross-site scripting in automation controller UI4.6CNA v3.10.5%2022-09-13
CVE-2022-3190SharkFest Foundation Wireshark F5 Ethernet Trailer protocol dissector infinite loop6.3CNA v3.12.3%2022-09-13Fix
CVE-2022-3182Devolutions Remote Desktop Manager Duo SMS two-factor improper access control7.0v3.10.2%2022-09-13Fix
CVE-2022-3179Weak password requirements in ikus060/rdiffweb8.8v3.10.8%2022-09-13Fix
CVE-2022-3175Missing Custom Error page in ikus060/rdiffweb5.3v3.10.7%2022-09-13Fix
CVE-2022-3174Sensitive Cookie in HTTPS Session without Secure attribute in ikus060/rdiffweb7.5v3.10.6%2022-09-13Fix
CVE-2022-3170Linux kernel An out-of-bounds access7.8NVD v3.10.2%2022-09-13Fix
CVE-2022-3029NLnet Labs Routinator fatal error on incorrect base64 data in RRDP7.5v3.10.8%2022-09-13Fix
CVE-2022-3027Contec Health CMS8000 Wi-Fi connection improper access control5.7v3.10.3%2022-09-13
CVE-2022-2990Buildah's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1v3.10.3%2022-09-13Fix
CVE-2022-2989Podman's incorrect handling of the supplementary groups may lead to data disclosure, modification7.1v3.10.3%2022-09-13Fix
CVE-2022-2962QEMU heap-based buffer overflow7.8NVD v3.10.4%2022-09-13Fix
CVE-2022-1602A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service Pack 10 (SP10) to remediate the potential vulnerability introduced in SP8.5.5v3.10.2%2022-09-13Fix
CVE-2022-1278WildFly vulnerable to insecure default initialization of Resource7.5v3.10.8%2022-09-13Fix
CVE-2022-39200matrix-org dendrite signature checks not applied to some retrieved missing events7.3CNA v3.10.4%2022-09-12Fix
CVE-2022-38972ARK-Web A-Form Movable Type plugin cross-site scripting6.1v3.10.8%2022-09-12Fix
CVE-2022-38610Garage Management System SQL injection7.2v3.10.9%2022-09-12
CVE-2022-38606Garage Management System SQL injection7.2v3.10.9%2022-09-12
CVE-2022-38605Church Management System SQL injection7.2v3.10.9%2022-09-12
CVE-2022-38304Online Leave Management System SQL injection7.2v3.10.9%2022-09-12
CVE-2022-38303Online Leave Management System SQL injection7.2v3.10.9%2022-09-12
CVE-2022-38302Online Leave Management System SQL injection7.2v3.10.9%2022-09-12
CVE-2022-38299Appsmith Elasticsearch plugin vulnerability4.3v3.10.5%2022-09-12Fix
CVE-2022-38298Appsmith server-side request forgery8.8v3.10.7%2022-09-12Fix
CVE-2022-38297UCMS cookie reliance without validation9.8v3.11.1%2022-09-12
CVE-2022-38296Cuppacms unrestricted file upload9.8v3.15.1%2022-09-12Nuclei
CVE-2022-38295Cuppacms cross-site scripting6.1v3.11.1%2022-09-12Nuclei
CVE-2022-38292SLIMS Senayan Library Management System server-side request forgery9.8v3.10.8%2022-09-12
CVE-2022-38291SLIMS Senayan Library Management System cross-site scripting6.1v3.10.4%2022-09-12
CVE-2022-38135Photospace Gallery WordPress plugin broken access control4.3v3.10.5%2022-09-12
CVE-2022-37860TP-Link M7350 OS command injection9.8v3.180.0%2022-09-12Fix
CVE-2022-37835Torguard VPN insecure storage of sensitive information7.5v3.10.6%2022-09-12
CVE-2022-37797lighttpd null pointer dereference7.5v3.12.1%2022-09-12Fix
CVE-2022-37796oretnom23 Simple Online Book Store System cross-site scripting5.4v3.10.4%2022-09-12
CVE-2022-37794Library Management System SQL injection9.8v3.10.9%2022-09-12
CVE-2022-37767Pebble Templates protection mechanism bypass can lead to arbitrary code execution9.8v3.11.2%2022-09-12
CVE-2022-37734Graphql-java vulnerable to denial of service via GraphQL query that consumes CPU resources7.5v3.12.2%2022-09-12Fix
CVE-2022-37300Schneider Electric EcoStruxure Control Expert weak password recovery9.8CNA v3.10.8%2022-09-12Fix
CVE-2022-36259Inventory Management System SQL injection7.5v3.11.0%2022-09-12
CVE-2022-36258Inventory Management System SQL injection7.5v3.10.8%2022-09-12
CVE-2022-36257Inventory Management System SQL injection7.5v3.10.8%2022-09-12
CVE-2022-36256Inventory Management System SQL injection7.5v3.10.8%2022-09-12
CVE-2022-36255Inventory Management System SQL injection7.5v3.10.8%2022-09-12
CVE-2022-36254Hotel Management System index.php in tramyardg stored cross-site scripting5.4v3.10.6%2022-09-12
CVE-2022-36174Freshworks Freshservice Agent improper integrity check validation8.1v3.10.5%2022-09-12Fix
CVE-2022-36173Freshworks Freshservice Agent improper certificate validation8.1v3.10.8%2022-09-12Fix
CVE-2022-36102shopware acess control list bypassed via crafted specific URLs6.3CNA v3.10.8%2022-09-12Fix
CVE-2022-36101Shopware customer detail view information disclosure5.4CNA v3.10.7%2022-09-12Fix
CVE-2022-35572Linksys E5350 missing authentication7.5v3.10.8%2022-09-12
CVE-2022-34110MSI Micro-star International Feature Navigator arbitrary file read5.5v3.10.2%2022-09-12
CVE-2022-34109MSI Micro-star International Feature Navigator arbitrary file write7.1v3.10.3%2022-09-12
CVE-2022-34108MSI Micro-star International Feature Navigator denial of service7.1v3.10.3%2022-09-12
CVE-2022-31226Dell CPG BIOS stack-based buffer overflow7.1CNA v3.10.2%2022-09-12Fix
CVE-2022-31225Dell CPG BIOS unchecked return value3.0CNA v3.10.2%2022-09-12Fix
CVE-2022-31224Dell BIOS versions contain an Improper Protection Against Voltage and Clock Glitches vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by triggering a fault condition in order to change the behavior of the system.2.0CNA v3.10.2%2022-09-12Fix
CVE-2022-31223Dell CPG BIOS improper neutralization2.3CNA v3.10.2%2022-09-12Fix
CVE-2022-31222Dell CPG BIOS memory leak2.3CNA v3.10.2%2022-09-12Fix
CVE-2022-31221Dell CPG BIOS information disclosure2.3CNA v3.10.2%2022-09-12Fix
CVE-2022-31220Dell CPG BIOS unchecked return value3.0CNA v3.10.2%2022-09-12Fix
CVE-2022-29490Hitachi Energy MicroSCADA X SYS600 improper authorization8.5CNA v3.10.6%2022-09-12Fix
CVE-2022-3178Buffer over-read in gpac/gpac7.8v3.10.4%2022-09-12Fix
CVE-2022-2979OMRON CX-Programmer use-after-free7.8v3.10.2%2022-09-12Fix
CVE-2022-1700Forcepoint Data Loss Prevention (DLP) Policy Engine XML external entity injection7.5CNA v3.10.8%2022-09-12Fix
CVE-2022-40325SysAid Helpdesk cross-site scripting6.1v3.10.4%2022-09-11Fix
CVE-2022-40324SysAid Helpdesk cross-site scripting6.1v3.10.4%2022-09-11Fix
CVE-2022-40323SysAid Helpdesk cross-site scripting6.1v3.10.4%2022-09-11Fix
CVE-2022-40322SysAid Helpdesk cross-site scripting6.1v3.10.4%2022-09-11Fix
CVE-2022-39135Apache Calcite vulnerable to potential XML external entity (XXE) attack9.8v3.12.0%2022-09-11Fix
CVE-2022-26049com.diffplug.gradle:goomph arbitrary file write via Archive Extraction (Zip Slip)8.8v3.11.9%2022-09-11Exploit codeFix
CVE-2022-25295github.com/gophish/gophish open redirect5.4v3.10.6%2022-09-11Fix
CVE-2022-40320Libconfuse out-of-bounds read8.8v3.11.1%2022-09-09Fix
CVE-2022-40317OpenKM cross-site scripting5.4v3.10.9%2022-09-09Exploit code
CVE-2022-40307Linux kernel race condition4.7NVD v3.10.2%2022-09-09Fix
CVE-2022-40305Canto server-side request forgery9.8v3.11.3%2022-09-09
CVE-2022-40299Singular insufficient randomness7.8v3.10.3%2022-09-09Fix
CVE-2022-40297UBports Ubuntu Touch improper privilege management7.8v3.10.5%2022-09-09Exploit code
CVE-2022-40191Contact Form By Mega Forms WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.5%2022-09-09Fix
CVE-2022-40133Linux Kernel there is an UAF vulnerability in vmwgfx driver5.5NVD v3.10.6%2022-09-09Fix
CVE-2022-39846Samsung Mobile Smart Switch PC DLL hijacking6.2CNA v3.10.2%2022-09-09Fix
CVE-2022-39845Samsung Mobile Samsung Kies improper input validation5.5CNA v3.10.1%2022-09-09Fix
CVE-2022-39844Samsung Mobile Smart Switch PC improper input validation5.5CNA v3.10.2%2022-09-09Fix
CVE-2022-39810WSO2 Enterprise Integrator cross-site scripting6.1v3.157.3%2022-09-09
CVE-2022-39809WSO2 Enterprise Integrator cross-site scripting6.1v3.10.5%2022-09-09
CVE-2022-39119UNISOC chipsets missing authorization7.8v3.10.1%2022-09-09Fix
CVE-2022-38701OpenHarmony IPC heap-based buffer overflow6.2CNA v3.10.2%2022-09-09
CVE-2022-38700OpenHarmony camera service authentication bypass8.8CNA v3.10.4%2022-09-09
CVE-2022-38639Inkdrop Markdown Nice Markdown-Nice vulnerable to cross-site scripting5.4v3.10.4%2022-09-09
CVE-2022-38638Casdoor arbitrary file write9.1v3.11.0%2022-09-09Fix
CVE-2022-38615Bpcbt Smartvista Front-end SQL injection8.8v3.10.8%2022-09-09
CVE-2022-38614Bpcbt Smartvista Cardgen path traversal7.5v3.10.9%2022-09-09
CVE-2022-38613Bpcbt Smartvista Cardgen path traversal6.5v3.10.9%2022-09-09
CVE-2022-38457Linux Kernel there is an UAF vulnerability in vmwgfx driver5.5NVD v3.10.6%2022-09-09Fix
CVE-2022-38286jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38285jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38284jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38283jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38282jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38281jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38280jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38279jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38278jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38277jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38276jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38275jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38274jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38273jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38272jflyfox jfinal_cms SQL injection7.2v3.10.9%2022-09-09
CVE-2022-38266Leptonica divide by zero6.5v3.11.4%2022-09-09Fix
CVE-2022-38144wpForo Forum WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2022-09-09Fix
CVE-2022-38096Linux Kernel there is a null pointer vulnerability in vmwgfx driver5.5NVD v3.10.8%2022-09-09Fix
CVE-2022-38093All in One SEO WordPress plugin Multiple cross-site request forgery (CSRF)8.8v3.10.3%2022-09-09Fix
CVE-2022-38081OpenHarmony Tokensync authentication bypass6.2CNA v3.10.2%2022-09-09
CVE-2022-38070Pop-up WordPress plugin privilege escalation8.8v3.10.8%2022-09-09Fix
CVE-2022-38068Export Post Info WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-38067Event Calendar Calendar WordPress plugin unauthenticated Event deletion vulnerability5.3v3.10.6%2022-09-09Fix
CVE-2022-38064OpenHarmony window manager authentication bypass6.2CNA v3.10.2%2022-09-09
CVE-2022-38059Access Code Feeder WordPress plugin cross-site request forgery (CSRF)8.0v3.10.3%2022-09-09Fix
CVE-2022-38058WP Shamsi WordPress plugin authenticated plugin setting change vulnerability4.3v3.10.6%2022-09-09Fix
CVE-2022-37412Better Delete Revision WordPress plugin authenticated reflected cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-37411Captcha Code WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2022-09-09Fix
CVE-2022-37407Gallery PhotoBlocks WordPress plugin Multiple authenticated stored cross-site scripting (XSS)5.4v3.10.5%2022-09-09Fix
CVE-2022-37405Better Font Awesome WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2022-09-09Fix
CVE-2022-37404add2fav WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-37403Nikhil Vaghela Add User Role (WordPress plugin) cross-site scripting4.8v3.10.5%2022-09-09Fix
CVE-2022-37335Word Search Puzzles game WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-37299Shirne Cms path traversal6.5v3.13.1%2022-09-09Nuclei
CVE-2022-36878Samsung Mobile Find My Mobile information disclosure3.3CNA v3.10.2%2022-09-09Fix
CVE-2022-36877Samsung Mobile Samsung Members FaqSymptomCardViewModel information disclosure2.8CNA v3.10.2%2022-09-09Fix
CVE-2022-36876Samsung Mobile Samsung Pass UPI payment improper authorization1.8CNA v3.10.3%2022-09-09Fix
CVE-2022-36875Samsung Mobile com.samsung.android.waterplugin improper access control6.6CNA v3.10.2%2022-09-09Fix
CVE-2022-36874Samsung Mobile Waterplugin improper handling of insufficient permissions5.9CNA v3.10.2%2022-09-09Fix
CVE-2022-36873Samsung Mobile com.samsung.android.waterplugin improper input validation5.9CNA v3.10.2%2022-09-09Fix
CVE-2022-36872Samsung Mobile Samsung Pay improper authorization5.0CNA v3.10.2%2022-09-09Fix
CVE-2022-36871Samsung Mobile Samsung Pay improper authorization5.0CNA v3.10.2%2022-09-09Fix
CVE-2022-36870Samsung Mobile Samsung Pay improper authorization5.0CNA v3.10.2%2022-09-09Fix
CVE-2022-36869Samsung Contacts Provider ContactsDumpActivity of? improper access control6.6CNA v3.10.2%2022-09-09Fix
CVE-2022-36867Samsung Mobile Editor Lite improper access control5.9CNA v3.10.2%2022-09-09Fix
CVE-2022-36866Samsung Mobile Group Sharing Broadcaster improper access control4.0CNA v3.10.2%2022-09-09Fix
CVE-2022-36865Samsung Mobile Group Sharing improper access control4.0CNA v3.10.2%2022-09-09Fix
CVE-2022-36864Samsung Mobile Samsung Email improper access control4.0CNA v3.10.2%2022-09-09Fix
CVE-2022-36863Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36862Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36861Samsung Mobile Devices improper privilege management5.9CNA v3.10.1%2022-09-09Fix
CVE-2022-36860Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36859Samsung Mobile SmartTagPlugin improper input validation5.7CNA v3.10.4%2022-09-09Fix
CVE-2022-36858Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36857Samsung Photo Editor improper authorization1.9CNA v3.10.1%2022-09-09Fix
CVE-2022-36856Samsung Mobile Devices Telecom application improper access control4.0CNA v3.10.1%2022-09-09Fix
CVE-2022-36855Samsung Mobile Devices iva_ctl driver use-after-free4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36854Samsung Mobile Devices libapexjni.media.samsung.so out-of-bounds read4.0CNA v3.10.1%2022-09-09Fix
CVE-2022-36853Samsung Mobile Devices improper input validation3.3CNA v3.10.2%2022-09-09Fix
CVE-2022-36852Samsung Mobile Devices Video Editor improper authorization1.9CNA v3.10.1%2022-09-09Fix
CVE-2022-36851Samsung Mobile Samsung Pass improper access control3.9CNA v3.10.3%2022-09-09Fix
CVE-2022-36850Samsung Mobile Devices CallBGProvider path traversal4.0CNA v3.10.1%2022-09-09Fix
CVE-2022-36849Samsung Mobile Devices use-after-free4.9CNA v3.10.1%2022-09-09Fix
CVE-2022-36848Samsung Mobile Devices setDualDARPolicyCmd improper authorization5.1CNA v3.10.1%2022-09-09Fix
CVE-2022-36847Samsung Mobile Devices mtp_send_signal function of MTP driver use-after-free4.9CNA v3.10.1%2022-09-09Fix
CVE-2022-36846Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36845Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36844Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36843Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36842Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36841Samsung Mobile Devices heap-based buffer overflow4.4CNA v3.10.1%2022-09-09Fix
CVE-2022-36793WP Shop WordPress plugin unauthenticated plugin settings Change and data deletion vulnerabilities9.1v3.10.8%2022-09-09Fix
CVE-2022-36617Haystacksoftware Arq Backup insufficiently protected credentials4.9v3.10.5%2022-09-09Fix
CVE-2022-36423OpenAtom OpenHarmony cJSON library stack overflow7.4CNA v3.10.3%2022-09-09
CVE-2022-36422WP-PostRatings WordPress plugin Rating increase/decrease via race condition3.1NVD v3.10.5%2022-09-09Fix
CVE-2022-36376Rank Math SEO WordPress plugin server-side request forgery (SSRF)9.8v3.10.8%2022-09-09Fix
CVE-2022-36356Culture Object WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-36280Linux Kernel there is an out-of-bounds write vulnerability in vmwgfx driver5.5NVD v3.10.8%2022-09-09Fix
CVE-2022-36110Netmaker vulnerable to insufficient granularity of access control8.8CNA v3.10.9%2022-09-09Fix
CVE-2022-36109Moby vulnerability relating to supplementary group permissions5.3CNA v3.11.0%2022-09-09Fix
CVE-2022-36087OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI5.7CNA v3.11.7%2022-09-09Fix
CVE-2022-35725wp-forecast WordPress plugin authenticated stored cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-35277GetResponse WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2022-09-09Fix
CVE-2022-35275Advanced Order Export For WooCommerce WordPress plugin reflected cross-site scripting (XSS)4.8v3.10.5%2022-09-09Fix
CVE-2022-34165IBM WebSphere Application Server HTTP header injection5.4CNA v3.00.6%2022-09-09Fix
CVE-2022-31006Hyperledger Indy DOS7.5CNA v3.11.1%2022-09-09Fix
CVE-2022-29061Fortinet FortiSOAR OS command injection7.2CNA v3.11.6%2022-09-09Fix
CVE-2022-28742aEnrich a+HRD improper access control7.5v3.10.7%2022-09-09
CVE-2022-28741aEnrich a+HRD path traversal8.1v3.10.9%2022-09-09
CVE-2022-28740aEnrich a+HRD information disclosure7.5v3.10.7%2022-09-09
CVE-2022-26394Baxter Spectrum Wireless Battery Module (WBM) unauthenticated network reconfiguration via TCP/UDP5.5CNA v3.10.4%2022-09-09Fix
CVE-2022-26393Baxter Spectrum Wireless Battery Module (WBM) format string5.0CNA v3.10.7%2022-09-09Fix
CVE-2022-26392Baxter Spectrum Wireless Battery Module (WBM) format string3.1CNA v3.10.7%2022-09-09Fix
CVE-2022-26390Baxter Spectrum Wireless Battery Module (WBM) unencrypted internal storage of security credentials4.2CNA v3.10.5%2022-09-09Fix
CVE-2022-25765pdfkit command injection9.8v3.141.6%2022-09-09Exploit codeFix
CVE-2022-3169kernel denial of service5.5NVD v3.10.3%2022-09-09Fix
CVE-2022-3147Mattermost server-side denial of service while processing a specifically crafted JPEG file3.1CNA v3.11.0%2022-09-09Fix
CVE-2022-3133OS command injection in jgraph/drawio7.8v3.11.3%2022-09-09Fix
CVE-2022-3077kernel buffer overflow5.5NVD v3.10.2%2022-09-09Fix
CVE-2022-2964kernel memory corruption7.8NVD v3.10.3%2022-09-09Fix
CVE-2022-2925Cross-site scripting (XSS) Stored in Appwrite/Appwrite5.4NVD v3.10.8%2022-09-09Fix
CVE-2022-2905kernel out-of-bounds read5.5NVD v3.10.4%2022-09-09Fix
CVE-2022-2528Octopus Deploy Octopus Server incorrect default permissions6.5v3.10.5%2022-09-09Fix
CVE-2022-2526systemd-resolved use-after-free9.8NVD v3.11.3%2022-09-09Fix
CVE-2022-40281Samsung Tizenrt memory leak7.5v3.10.5%2022-09-08
CVE-2022-40280Samsung Tizenrt missing resource release7.5v3.11.0%2022-09-08
CVE-2022-38531Fpt G-97rg6m OS command injection8.8v3.11.9%2022-09-08
CVE-2022-38400SYNCK GRAPHICA Mailform Pro CGI information disclosure5.9v3.11.3%2022-09-08Fix
CVE-2022-38399PLANEX COMMUNICATIONS SmaCam CS-QR10 and SmaCam Night Vision CS-QR20 improper authentication6.8v3.10.4%2022-09-08
CVE-2022-38394Allied Telesis CentreCOM AR260S V2 hard-coded credentials9.8v3.11.0%2022-09-08Fix
CVE-2022-38269School Activity Updates With Sms Notification SQL injection7.2v3.10.8%2022-09-08
CVE-2022-38268School Activity Updates With Sms Notification SQL injection7.2v3.10.8%2022-09-08
CVE-2022-38267School Activity Updates With Sms Notification SQL injection7.2v3.10.8%2022-09-08
CVE-2022-38265Apartment Visitor Management System SQL injection7.2v3.10.8%2022-09-08
CVE-2022-38260Janobe Interview Management System SQL injection7.2v3.10.9%2022-09-08
CVE-2022-38258D-Link Dir-819 A local file inclusion8.1v3.11.2%2022-09-08
CVE-2022-38256TastyIgniter cross-site scripting5.4v3.10.5%2022-09-08
CVE-2022-38255Janobe Interview Management System SQL injection7.2v3.10.9%2022-09-08
CVE-2022-38094Allied Telesis CentreCOM AR260S V2 telnet function OS command injection8.8v3.11.6%2022-09-08Fix
CVE-2022-37857Hauk cleartext storage of sensitive information7.5v3.10.4%2022-09-08
CVE-2022-37779Phicomm FIR151B remote command execution7.2v3.11.8%2022-09-08
CVE-2022-37778Phicomm FIR151B remote command execution7.2v3.11.8%2022-09-08
CVE-2022-37777Phicomm FIR151B remote command execution7.2v3.11.8%2022-09-08
CVE-2022-37164Ontrack improper authentication9.8v3.10.6%2022-09-08
CVE-2022-37163Ihatetobudget improper authentication9.8v3.10.5%2022-09-08
CVE-2022-37146PlexTrac observable discrepancy5.3v3.10.7%2022-09-08
CVE-2022-37145PlexTrac missing brute-force protection7.5v3.10.9%2022-09-08
CVE-2022-37144PlexTrac missing brute-force protection8.8v3.10.8%2022-09-08
CVE-2022-36736Jitsi web UI clickjacking6.1v3.10.6%2022-09-08
CVE-2022-36588D-Link DAP-1650 buffer overflow9.8v3.11.6%2022-09-08Fix
CVE-2022-36586Tenda G3 buffer overflow9.8v3.10.8%2022-09-08Fix
CVE-2022-36403Ricoh Installer of Device Software Manager untrusted search path7.8v3.10.2%2022-09-08Fix
CVE-2022-36100XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to eval injection9.9CNA v3.173.6%2022-09-08Fix
CVE-2022-36099XWiki Platform Wiki UI Main Wiki eval injection9.9CNA v3.176.3%2022-09-08Fix
CVE-2022-36098XWiki Platform Mentions UI vulnerable to cross-site scripting8.9CNA v3.171.6%2022-09-08Fix
CVE-2022-36097XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form8.9CNA v3.158.2%2022-09-08Fix
CVE-2022-36096XWiki Platform vulnerable to cross-site scripting in the deleted attachments list8.9CNA v3.160.2%2022-09-08Fix
CVE-2022-36095XWiki cross-site request forgery (CSRF) for actions on tags4.3CNA v3.10.4%2022-09-08Fix
CVE-2022-36094XWiki Platform Web Parent POM vulnerable to XSS in the attachment history8.9CNA v3.164.8%2022-09-08Fix
CVE-2022-36093XWiki Platform distribution wizard authentication bypass8.5CNA v3.10.9%2022-09-08Fix
CVE-2022-36092XWiki Platform Old Core vulnerable to authentication bypass using the Login action7.5CNA v3.11.1%2022-09-08Fix
CVE-2022-36091XWiki Platform suggestion feature information disclosure7.5CNA v3.10.8%2022-09-08Fix
CVE-2022-36090XWiki Platform improper authorization check for inactive users8.1CNA v3.11.2%2022-09-08Fix
CVE-2022-36085OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions7.4CNA v3.11.6%2022-09-08Fix
CVE-2022-36084cruddl vulnerable to AQL injection through flexSearch9.9CNA v3.11.5%2022-09-08Fix
CVE-2022-35273Allied Telesis CentreCOM AR260S V2 GUI setting page OS command injection8.8v3.11.6%2022-09-08Fix
CVE-2022-34869Allied Telesis CentreCOM AR260S telnet service vulnerability8.8v3.11.0%2022-09-08Fix
CVE-2022-33941Alfasado PowerCMS XMLRPC API OS command injection9.8v3.11.7%2022-09-08Fix
CVE-2022-30079NETGEAR R6200 OS command injection8.8v3.124.7%2022-09-08Fix
CVE-2022-28220STARTTLS command injection in Apache James7.5v3.11.8%2022-09-08Fix
CVE-2022-27969Cynet 360 web portal deception user list vulnerability5.3v3.10.6%2022-09-08Fix
CVE-2022-27968Cynet 360 web portal file monitor settings vulnerability5.3v3.10.6%2022-09-08Fix
CVE-2022-27967Cynet 360 web portal exclusions settings vulnerability5.3v3.10.6%2022-09-08Fix
CVE-2022-27593QNAP Photo Station externally controlled resource reference10.0CNA v3.187.9%2022-09-08KEVNucleiFix
CVE-2022-25914com.google.cloud.tools:jib-core remote code execution (RCE)9.8v3.11.4%2022-09-08Fix
CVE-2022-25897org.eclipse.milo:sdk-server denial of service (DoS)7.5v3.11.0%2022-09-08Fix
CVE-2022-22314IBM Planning Analytics Local information disclosure4.0CNA v3.00.2%2022-09-08Fix
CVE-2022-20923Cisco Small Business RV Series Routers IPSec VPN server authentication bypass4.0CNA v3.10.9%2022-09-08
CVE-2022-20863Cisco Webex Meetings App Character Interface Manipulation vulnerability4.3CNA v3.10.9%2022-09-08Fix
CVE-2022-20696Cisco SD-WAN vManage software unauthenticated access to Messaging services7.5CNA v3.10.4%2022-09-08Fix
CVE-2022-3167Improper restriction of rendered UI layers or frames in ikus060/rdiffweb8.8NVD v3.11.2%2022-09-08Fix
CVE-2022-3153Null pointer dereference in Vim/Vim5.5v3.10.5%2022-09-08Fix
CVE-2022-3148Cross-site scripting (XSS) Generic in jgraph/drawio6.1v3.10.6%2022-09-08Fix
CVE-2022-3138Cross-site scripting (XSS) Generic in jgraph/drawio6.1v3.10.6%2022-09-08Fix
CVE-2022-40023mako is vulnerable to regular expression denial of service7.5v3.11.7%2022-09-07Fix
CVE-2022-38314Tenda AC18 out-of-bounds write9.8v3.11.0%2022-09-07
CVE-2022-38313Tenda AC18 out-of-bounds write9.8v3.11.0%2022-09-07
CVE-2022-38312Tenda AC18 out-of-bounds write9.8v3.11.0%2022-09-07
CVE-2022-38311Tenda AC18 out-of-bounds write9.8v3.11.0%2022-09-07
CVE-2022-38310Tenda AC18 out-of-bounds write9.8v3.11.0%2022-09-07
CVE-2022-38309Tenda AC18 out-of-bounds write9.8v3.11.0%2022-09-07
CVE-2022-38254Nagios XI cross-site scripting6.1v3.11.8%2022-09-07Fix
CVE-2022-38251Nagios XI cross-site scripting4.8v3.11.8%2022-09-07Fix
CVE-2022-38250Nagios XI SQL injection9.8v3.12.6%2022-09-07Fix
CVE-2022-38249Nagios XI cross-site scripting6.1v3.11.8%2022-09-07Fix
CVE-2022-38248Nagios XI cross-site scripting6.1v3.11.8%2022-09-07Fix
CVE-2022-38247Nagios XI cross-site scripting4.8v3.11.8%2022-09-07Fix
CVE-2022-37780Phicomm FIR151B remote command execution7.2v3.11.8%2022-09-07
CVE-2022-37731ftcms cross-site scripting6.1v3.10.5%2022-09-07
CVE-2022-37730ftcms cross-site request forgery8.8v3.10.4%2022-09-07
CVE-2022-37189MEI2Volpiano is vulnerable to XML external entity (XXE), leading to a denial of service (DoS)7.5v3.11.1%2022-09-07
CVE-2022-37108Securonix Snypr syslog-ng configuration wizard injection7.2v3.11.0%2022-09-07
CVE-2022-36661xhyve null pointer dereference6.5v3.10.8%2022-09-07
CVE-2022-36660xhyve out-of-bounds write9.8v3.10.9%2022-09-07
CVE-2022-36659xhyve null pointer dereference6.5v3.10.8%2022-09-07
CVE-2022-36587Tenda G3 buffer overflow9.8v3.10.8%2022-09-07Fix
CVE-2022-36585Tenda G3 buffer overflow9.8v3.10.8%2022-09-07Fix
CVE-2022-36539Eigen&wijzer Ouderapp insecure direct object reference7.5v3.11.3%2022-09-07Exploit codeFix
CVE-2022-36271Outbyte PC Repair uncontrolled search path7.8v3.10.5%2022-09-07Exploit code
CVE-2022-36089kubevela VelaUX APIServer vulnerable to authentication bypass by capture-replay8.2CNA v3.10.9%2022-09-07Fix
CVE-2022-36088Thoughtworks GoCD Windows installer improper access control5.0CNA v3.10.2%2022-09-07Fix
CVE-2022-36086rust-osdev linked_list_allocator Heap initialization out-of-bounds write8.4CNA v3.10.9%2022-09-07Fix
CVE-2022-36083JOSE vulnerable to resource exhaustion via specifically crafted JWE5.3CNA v3.11.5%2022-09-07Fix
CVE-2022-36082mangadex-downloader vulnerable to unauthorized file reading5.3CNA v3.10.7%2022-09-07Fix
CVE-2022-36081Wikmd vulnerable to Local File Enumeration when accessing /list7.5CNA v3.11.0%2022-09-07Fix
CVE-2022-36080Wikmd cross-site scripting6.1CNA v3.10.5%2022-09-07Fix
CVE-2022-36079parse-community parse-server parse Server vulnerable to brute force guessing of user sensitive data8.6CNA v3.11.3%2022-09-07Fix
CVE-2022-36073RubyGems allows creation of users with arbitrary unverified emails8.3CNA v3.11.0%2022-09-07Fix
CVE-2022-36070Poetry's untrusted search path can lead to local code execution on Windows7.3CNA v3.10.4%2022-09-07Fix
CVE-2022-36069Poetry argument injection vulnerability can lead to local code execution7.3CNA v3.11.4%2022-09-07Fix
CVE-2022-36049Flux2 Helm controller denial of service7.7CNA v3.11.4%2022-09-07Fix
CVE-2022-35513Blink1Control2 uses weak password encryption7.5v3.15.9%2022-09-07Exploit codeFix
CVE-2022-31414D-Link Dir-1960 Firmware buffer overflow7.5v3.11.8%2022-09-07Fix
CVE-2022-31251SUSE openSUSE Factory slurm: %post for slurm-testsuite operates as root in user owned directory6.5CNA v3.10.2%2022-09-07Fix
CVE-2022-31247Rancher: Downstream cluster privilege escalation9.1CNA v3.11.0%2022-09-07Fix
CVE-2022-31167XWiki Platform security cache improper authorization7.1CNA v3.10.8%2022-09-07Fix
CVE-2022-31166XWiki.WebHome vulnerable to improper privilege management in XWiki resolving groups8.1CNA v3.11.5%2022-09-07Fix
CVE-2022-31149ActivityWatch vulnerable to DNS rebinding attack8.8CNA v3.11.3%2022-09-07Fix
CVE-2022-30312Honeywell Trend IQ411 cleartext transmission of sensitive information6.5v3.10.2%2022-09-07
CVE-2022-30078NETGEAR R6200 OS command injection8.8v3.11.6%2022-09-07Fix
CVE-2022-21950Canna: Unsafe handling of /tmp/.iroha_unix directory5.3CNA v3.10.2%2022-09-07Fix
CVE-2022-3152Unverified password change in PHPFusion/PHPFusion8.8NVD v3.10.9%2022-09-07Fix
CVE-2022-3130codeprojects Online Driving School login.php SQL injection9.8v3.10.8%2022-09-07
CVE-2022-3129codeprojects Online Driving School registration.php unrestricted upload9.8v3.10.8%2022-09-07
CVE-2022-1807Sophos Firewall Webadmin SQL injection7.2CNA v3.11.1%2022-09-07Fix
CVE-2022-40112TOTOLINK A3002R buffer overflow7.5v3.10.7%2022-09-06
CVE-2022-40111TOTOLINK A3002R hard-coded credentials9.8v3.10.8%2022-09-06
CVE-2022-40110TOTOLINK A3002R buffer overflow7.5v3.10.7%2022-09-06
CVE-2022-40109TOTOLINK A3002R incorrect default permissions9.8v3.10.8%2022-09-06
CVE-2022-38530gpac out-of-bounds write7.8v3.10.4%2022-09-06Fix
CVE-2022-38529tinyexr out-of-bounds write7.8v3.10.3%2022-09-06Fix
CVE-2022-38528assimp out-of-bounds read6.5v3.10.7%2022-09-06Fix
CVE-2022-38176YSoft Safeq privilege escalation7.8v3.10.4%2022-09-06Fix
CVE-2022-38131RStudio Connect open redirect6.1NVD v3.11.7%2022-09-06Nuclei
CVE-2022-37843TOTOLINK A860R command injection9.8v3.11.6%2022-09-06
CVE-2022-37842TOTOLINK A860R buffer overflow9.8v3.10.8%2022-09-06
CVE-2022-37841TOTOLINK A860R hard-coded credentials7.5v3.10.6%2022-09-06
CVE-2022-37840TOTOLINK A860R buffer overflow9.8v3.10.8%2022-09-06
CVE-2022-37839TOTOLINK A860R buffer overflow9.8v3.10.8%2022-09-06
CVE-2022-37771IObit Malware Fighter incorrect permission assignment6.7v3.10.4%2022-09-06
CVE-2022-37344Accommodation System WordPress plugin missing access control9.8v3.10.8%2022-09-06
CVE-2022-37253Crime Reporting System stored cross-site scripting5.4v3.10.7%2022-09-06
CVE-2022-37185Ems school information query interface SQL injection7.5v3.10.8%2022-09-06
CVE-2022-36670Pcprotect endpoint incorrect permission assignment6.7v3.10.3%2022-09-06
CVE-2022-36663Gluu Oxauth vulnerable to server-side request forgery attacks via a crafted request_uri parameter9.8v3.12.1%2022-09-06Exploit codeFix
CVE-2022-36584Tenda G3 buffer overflow9.8v3.10.8%2022-09-06Fix
CVE-2022-36427About Rentals WordPress plugin missing access control9.8v3.10.7%2022-09-06
CVE-2022-36425Beaver Builder WordPress plugin broken access control9.8v3.10.8%2022-09-06Fix
CVE-2022-36387About Me WordPress plugin broken access control9.8v3.10.8%2022-09-06
CVE-2022-36072mesosoi silverwaregames-io-issue-tracker SilverwareGames.io used == for hashing instead of ===5.9CNA v3.10.6%2022-09-06Fix
CVE-2022-36067vm2 vulnerable to sandbox escape10.0CNA v3.147.9%2022-09-06Exploit codeFix
CVE-2022-36065GrowthBook account creation and file upload vulnerability in self-hosted configurations7.5CNA v3.11.4%2022-09-06Fix
CVE-2022-36064Shescape inefficient regular expression complexity5.9CNA v3.11.4%2022-09-06Fix
CVE-2022-36061Elrond go can execute on same context checks in VM6.5CNA v3.11.2%2022-09-06Fix
CVE-2022-36058elrond-go MultiESDTNFTTransfer call on a SC address with missing function name7.5CNA v3.11.3%2022-09-06Fix
CVE-2022-36057Discourse-Chat cross-site scripting issue for channel names and descriptions5.4CNA v3.10.5%2022-09-06Fix
CVE-2022-36044Rizin out-of-bounds write vulnerability in Lua binary plugin7.8CNA v3.10.4%2022-09-06Fix
CVE-2022-36043Rizin double free in bobj.c when using qnx binary plugin7.8CNA v3.10.4%2022-09-06Fix
CVE-2022-36042Rizin out-of-bounds write vulnerability in dyld cache binary plugin7.8CNA v3.10.4%2022-09-06Fix
CVE-2022-36041Rizin out-of-bounds write vulnerability in Mach-O binary plugin7.8CNA v3.10.4%2022-09-06Fix
CVE-2022-36040Rizin out-of-bounds write vulnerability in pyc/marshal.c7.8CNA v3.10.4%2022-09-06Fix
CVE-2022-36039Out-of-bounds write when parsing DEX files in Rizin7.8CNA v3.10.4%2022-09-06Fix
CVE-2022-36038CircuitVerse potential RCE vulnerability via Oj.load8.8CNA v3.11.1%2022-09-06Fix
CVE-2022-36032ReactPHP HTTP cookie name decoding improper input validation5.3CNA v3.11.0%2022-09-06Fix
CVE-2022-35931Nextcloud Password Policy's generated passwords are not fully validated by HIBPValidator2.7CNA v3.10.5%2022-09-06Fix
CVE-2022-35913Kayako Samourai denial of service4.3v3.10.7%2022-09-06
CVE-2022-35847Fortinet FortiSOAR code injection6.3CNA v3.10.8%2022-09-06Fix
CVE-2022-34883OS command injection vulnerability in RAID Manager Storage Replication Adapter7.2CNA v3.11.3%2022-09-06Fix
CVE-2022-34882Information exposure vulnerability in RAID Manager Storage Replication Adapter9.0CNA v3.10.9%2022-09-06Fix
CVE-2022-34867WP Libre Form 2 WordPress plugin unauthenticated sensitive information disclosure6.5NVD v3.10.8%2022-09-06Fix
CVE-2022-34747Zyxel NAS326 firmware format string9.8CNA v3.11.7%2022-09-06Fix
CVE-2022-34656Poll, Survey, Questionnaire and Voting system WordPress plugin cross-site scripting (XSS)4.8v3.10.5%2022-09-06Fix
CVE-2022-33177Booking Calendar WordPress plugin cross-site request forgery (CSRF) vulnerabiulity4.3v3.10.3%2022-09-06Fix
CVE-2022-32277Squiz Matrix insecure direct object reference5.3v3.10.5%2022-09-06
CVE-2022-32264FreeBSD improper exception handling7.5v3.10.7%2022-09-06Fix
CVE-2022-31860openremote code injection9.8v3.11.8%2022-09-06
CVE-2022-31792WatchGuard Fireware management web interface stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-31791WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.7.8v3.10.2%2022-09-06Fix
CVE-2022-31790WatchGuard Fireware authentication endpoints vulnerability7.5v3.11.6%2022-09-06Fix
CVE-2022-31789WatchGuard Fireware An integer overflow9.8v3.11.5%2022-09-06Fix
CVE-2022-31020hyperledger indy-node remote code execution in Indy's NODE_UPGRADE transaction8.8CNA v3.12.3%2022-09-06Fix
CVE-2022-30298Fortinet FortiSOAR improper privilege management7.0CNA v3.10.2%2022-09-06Fix
CVE-2022-29062Fortinet FortiSOAR path traversal6.3CNA v3.10.8%2022-09-06Fix
CVE-2022-29058Fortinet FortiAP SQL injection7.8CNA v3.10.5%2022-09-06Fix
CVE-2022-29053Fortinet FortiOS keytab file encryption vulnerability2.3CNA v3.10.3%2022-09-06Fix
CVE-2022-28885WithSecure F-Secure Linux Security 64 F-Secure Atlant denial of service (DoS)7.5v3.10.4%2022-09-06Fix
CVE-2022-28884F-Secure and WithSecure All F-Secure and WithSecure Endpoint Protection products denial of service7.5v3.10.4%2022-09-06Fix
CVE-2022-27664Go golang.org/x/net/http2 denial of service7.5v3.12.6%2022-09-06Fix
CVE-2022-27491Fortinet FortiOS A improper verification of communication source6.8CNA v3.11.4%2022-09-06Fix
CVE-2022-26861Dell CPG BIOS arbitrary code execution7.9CNA v3.10.2%2022-09-06Fix
CVE-2022-26860Dell CPG BIOS stack-based buffer overflow7.5CNA v3.10.2%2022-09-06Fix
CVE-2022-26859Dell CPG BIOS time-of-check time-of-use race condition6.1CNA v3.10.1%2022-09-06Fix
CVE-2022-26858Dell CPG BIOS improper authentication6.1CNA v3.10.2%2022-09-06Fix
CVE-2022-26470MediaTek chipsets improper input validation in aie6.7v3.10.1%2022-09-06Fix
CVE-2022-26469MediaTek chipsets use of externally-controlled input to select classes or code in MtkEmail7.8v3.10.2%2022-09-06Fix
CVE-2022-26468MediaTek chipsets improper input validation in preloader (usb)6.6v3.10.2%2022-09-06Fix
CVE-2022-26467MediaTek chipsets improper input validation in rpmb6.7v3.10.1%2022-09-06Fix
CVE-2022-26466MediaTek chipsets integer overflow or wraparound in audio ipi6.7v3.10.1%2022-09-06Fix
CVE-2022-26465MediaTek chipsets improper input validation in audio ipi6.7v3.10.1%2022-09-06Fix
CVE-2022-26464MediaTek chipsets improper input validation in vow6.7v3.10.1%2022-09-06Fix
CVE-2022-26463MediaTek chipsets improper input validation in vow4.4v3.10.1%2022-09-06Fix
CVE-2022-26462MediaTek chipsets improper input validation in vow4.4v3.10.1%2022-09-06Fix
CVE-2022-26461MediaTek chipsets undefined behavior for input to API in vow6.7v3.10.1%2022-09-06Fix
CVE-2022-26460MediaTek chipsets improper input validation in vow6.7v3.10.1%2022-09-06Fix
CVE-2022-26459MediaTek chipsets integer overflow or wraparound in vow4.4v3.10.1%2022-09-06Fix
CVE-2022-26458MediaTek chipsets improper input validation in vow6.7v3.10.1%2022-09-06Fix
CVE-2022-26457MediaTek chipsets improper input validation in vow6.7v3.10.1%2022-09-06Fix
CVE-2022-26456MediaTek chipsets unix symbolic link (symlink) following in vow4.4v3.10.1%2022-09-06Fix
CVE-2022-26455MediaTek chipsets improper handling of exceptional conditions in gz6.7v3.10.1%2022-09-06Fix
CVE-2022-26454MediaTek chipsets integer overflow or wraparound in teei6.7v3.10.1%2022-09-06Fix
CVE-2022-26453MediaTek chipsets use-after-free in teei6.7v3.10.1%2022-09-06Fix
CVE-2022-26451MediaTek chipsets improper synchronization in ged6.7v3.10.1%2022-09-06Fix
CVE-2022-26450MediaTek chipsets concurrent execution using shared resource with improper synchronization in apusys6.4v3.10.1%2022-09-06Fix
CVE-2022-26449MediaTek chipsets improper input validation in apusys6.7v3.10.1%2022-09-06Fix
CVE-2022-26448MediaTek chipsets improper input validation in apusys6.7v3.10.1%2022-09-06Fix
CVE-2022-26447MediaTek chipsets improper input validation in BT firmware9.8v3.10.6%2022-09-06Fix
CVE-2022-26114Fortinet FortiMail cross-site scripting5.4CNA v3.10.5%2022-09-06Fix
CVE-2022-25310fribidi bidi mark removal function denial of service5.5NVD v3.10.5%2022-09-06Fix
CVE-2022-25309fribidi A heap-based buffer overflow5.5NVD v3.10.5%2022-09-06Fix
CVE-2022-25308fribidi A stack-based buffer overflow7.8NVD v3.10.5%2022-09-06Fix
CVE-2022-23691A vulnerability exists in certain AOS-CX switch models which could allow an attacker with access to the recovery console to bypass normal authentication. A successful exploit allows an attacker to bypass system authentication and achieve total switch compromise in ArubaOS-CX Switches version(s): AOS6.8v3.10.4%2022-09-06Fix
CVE-2022-23690Aruba AOS-CX web management interface information disclosure5.3v3.10.8%2022-09-06Fix
CVE-2022-23689Aruba AOS-CX LLDP service vulnerability4.3v3.10.3%2022-09-06Fix
CVE-2022-23688Aruba AOS-CX LLDP service vulnerability4.3v3.10.3%2022-09-06Fix
CVE-2022-23687Aruba AOS-CX LLDP service vulnerability4.3v3.10.3%2022-09-06Fix
CVE-2022-23686Aruba AOS-CX LLDP service vulnerability4.3v3.10.3%2022-09-06Fix
CVE-2022-23684Aruba CX 6200F Switch Series privilege escalation8.8v3.11.0%2022-09-06Fix
CVE-2022-23683Aruba AOS-CX Authenticated command injection7.2v3.11.7%2022-09-06Fix
CVE-2022-23682Aruba CX 6200F Switch Series OS command injection7.8v3.10.6%2022-09-06Fix
CVE-2022-23681Aruba CX 6200F Switch Series OS command injection7.8v3.10.6%2022-09-06Fix
CVE-2022-23680Aruba CX 6200F Switch Series cross-site request forgery8.8v3.10.4%2022-09-06Fix
CVE-2022-23679Aruba CX 6200F Switch Series cross-site request forgery8.8v3.10.4%2022-09-06Fix
CVE-2022-23678A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows oper5.9v3.10.8%2022-09-06Fix
CVE-2022-23451openstack-barbican incorrect authorization8.1NVD v3.11.3%2022-09-06Fix
CVE-2022-3134vim/vim GitHub repository use-after-free7.8v3.10.6%2022-09-06Fix
CVE-2022-3026WP Users Exporter WordPress plugin CSV injection8.8v3.11.1%2022-09-06
CVE-2022-2945WordPress Infinite Scroll Ajax Load More plugin directory traversal2.7NVD v3.11.7%2022-09-06Fix
CVE-2022-2943WordPress Infinite Scroll Ajax Load More plugin authenticated (Admin+) arbitrary file read4.9v3.11.4%2022-09-06Fix
CVE-2022-2941WP-UserOnline WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.17.3%2022-09-06Exploit codeFix
CVE-2022-2939WP Cerber Security WordPress plugin user enumeration bypass5.3v3.10.7%2022-09-06Fix
CVE-2022-2936Image Hover Effects Ultimate WordPress plugin stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-2935Image Hover Effects Ultimate WordPress plugin stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-2934Beaver Builder WordPress Page Builder plugin authenticated stored cross-site scripting via Image URL5.4v3.10.5%2022-09-06Fix
CVE-2022-2901Improper authorization in chatwoot/chatwoot7.1v3.10.5%2022-09-06Fix
CVE-2022-2735ClusterLabs/pcs incorrect default permissions7.8v3.10.3%2022-09-06Fix
CVE-2022-2718JoomSport for Sports: Team and League, Football, Hockey and more WordPress plugin SQL injection4.9NVD v3.11.5%2022-09-06Fix
CVE-2022-2717JoomSport WordPress plugin SQL injection4.9NVD v3.11.5%2022-09-06Fix
CVE-2022-2716Beaver Builder WordPress Page Builder plugin stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-2714Improper handling of length parameter inconsistency in francoisjacquet/RosarioSIS9.8v3.10.8%2022-09-06Fix
CVE-2022-2695Beaver Builder WordPress Page Builder plugin authenticated stored cross-site scripting via caption5.4v3.10.5%2022-09-06Fix
CVE-2022-2633All-in-One Video Gallery WordPress plugin server-side request forgery8.2v3.133.8%2022-09-06NucleiFix
CVE-2022-2542uContext for Clickbank WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-09-06Fix
CVE-2022-2541uContext for Amazon WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-09-06Fix
CVE-2022-2540Link Optimizer Lite WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-09-06Fix
CVE-2022-2518Stockists Manager for Woocommerce WordPress plugin cross-site request forgery6.1NVD v3.10.5%2022-09-06
CVE-2022-2517Beaver Builder WordPress Page Builder plugin stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-2516Visual Composer Website Builder WordPress plugin authenticated stored cross-site scripting via Title5.4v3.10.5%2022-09-06Fix
CVE-2022-2515Simple Banner WordPress plugin authenticated stored cross-site scripting5.4v3.10.8%2022-09-06Fix
CVE-2022-2473WP-UserOnline WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.11.0%2022-09-06Fix
CVE-2022-2462Transposh WordPress Translation plugin sensitive information disclosure5.3v3.13.2%2022-09-06NucleiFix
CVE-2022-2461Transposh WordPress Translation plugin unauthorized settings Change5.3v3.13.9%2022-09-06NucleiFix
CVE-2022-2442Migration, Backup, Staging WPvivid WordPress plugin authenticated (Admin+) PHAR deserialization7.2v3.11.4%2022-09-06Fix
CVE-2022-2438Broken Link Checker WordPress plugin authenticated (Admin+) PHAR deserialization7.2v3.11.4%2022-09-06Fix
CVE-2022-2436Download Manager WordPress plugin authenticated (Contributor+) PHAR deserialization8.8v3.11.5%2022-09-06Fix
CVE-2022-2434String Locator WordPress plugin cross-site request forgery to PHAR deserialization8.8v3.11.3%2022-09-06Fix
CVE-2022-2433WordPress Infinite Scroll Ajax Load More plugin cross-site request forgery to PHAR deserialization8.8NVD v3.11.7%2022-09-06Fix
CVE-2022-2432Ecwid Ecommerce Shopping Cart WordPress plugin cross-site request forgery to Settings/Options update4.3NVD v3.10.6%2022-09-06Fix
CVE-2022-2431Download Manager WordPress plugin authenticated (Contributor+) arbitrary file deletion8.8v3.12.8%2022-09-06Fix
CVE-2022-2430Visual Composer Website Builder WordPress plugin stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-2429Ultimate SMS Notifications for WooCommerce WordPress plugin CSV injection8.0v3.10.7%2022-09-06Fix
CVE-2022-2402Stack overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows6.5CNA v3.10.2%2022-09-06Fix
CVE-2022-2233Banner Cycler WordPress plugin cross-site request forgery to cross-site scripting8.8v3.10.6%2022-09-06Fix
CVE-2022-1697Okta Active Directory Agent unquoted search path3.9v3.10.2%2022-09-06Fix
CVE-2022-1628Simple SEO WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.5%2022-09-06Fix
CVE-2022-1525Cognex 3D-A1000 Dimensioning System client-side enforcement of server-side security9.1v3.10.7%2022-09-06
CVE-2022-1522Cognex 3D-A1000 Dimensioning System improper output neutralization for logs5.3v3.10.5%2022-09-06
CVE-2022-1368Cognex 3D-A1000 Dimensioning System missing authentication for critical function9.8v3.10.8%2022-09-06
CVE-2022-39843Lotus 1-2-3 out-of-bounds write7.8v3.10.5%2022-09-05Fix
CVE-2022-39842Linux kernel integer overflow6.1v3.10.6%2022-09-05Fix
CVE-2022-39840Cotonti Siena cross-site scripting4.8v3.10.4%2022-09-05
CVE-2022-39839Cotonti Siena cross-site scripting4.8v3.10.4%2022-09-05
CVE-2022-39838Systematicalpha Systematic Fix Adapter path traversal8.6v3.11.7%2022-09-05Exploit codeFix
CVE-2022-39832GNU PSPP out-of-bounds write7.8v3.10.5%2022-09-05Fix
CVE-2022-39831GNU PSPP out-of-bounds write7.8v3.10.5%2022-09-05Fix
CVE-2022-39830Samsung mTower denial of service7.5v3.11.1%2022-09-05
CVE-2022-39829Samsung mTower aes256_encrypt null pointer dereference7.5v3.11.1%2022-09-05
CVE-2022-39828Samsung mTower denial of service7.5v3.11.1%2022-09-05
CVE-2022-39824Appsmith Server-side JavaScript injection8.9v3.10.9%2022-09-05Fix
CVE-2022-39196Blackboard Learn bbcms execute module information disclosure6.5v3.11.4%2022-09-05Exploit code
CVE-2022-39051OTRS Perl code execution in Template Toolkit6.8CNA v3.10.8%2022-09-05Fix
CVE-2022-39050OTRS customer URL field vulnerability4.6CNA v3.10.5%2022-09-05Fix
CVE-2022-39049OTRS possible XSS in Admin interface3.5CNA v3.10.6%2022-09-05Fix
CVE-2022-38752snakeYAML vulnerable to denial of service due to out-of-bounds write6.5NVD v3.12.5%2022-09-05Fix
CVE-2022-38751snakeYAML vulnerable to denial of service due to out-of-bounds write6.5NVD v3.11.9%2022-09-05Fix
CVE-2022-38750snakeYAML vulnerable to denial of service due to out-of-bounds write5.5NVD v3.11.3%2022-09-05Fix
CVE-2022-38749snakeYAML vulnerable to denial of service due to out-of-bounds write6.5NVD v3.12.1%2022-09-05Fix
CVE-2022-38370Apache IoTDB no authorization of DatabaseConnectController in grafana-connector7.5v3.11.2%2022-09-05Fix
CVE-2022-38369Apache IoTDB login check vulnerability by session Id8.8v3.11.1%2022-09-05Fix
CVE-2022-38367Netic User Export For Jira missing authorization5.3v3.10.5%2022-09-05Fix
CVE-2022-31814Netgate Pfblockerng OS command injection9.8v3.191.9%2022-09-05NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2022-30331Tigergraph improper input validation8.8v3.10.9%2022-09-05Fix
CVE-2022-3127Cross-site scripting (XSS) Stored in jgraph/drawio5.4v3.10.5%2022-09-05Fix
CVE-2022-3123Cross-site scripting (XSS) Reflected in splitbrain/DokuWiki6.1v3.10.9%2022-09-05Fix
CVE-2022-3122SourceCodester Clinics Patient Management System medicine_details.php SQL injection9.8v3.10.7%2022-09-05
CVE-2022-3121SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery8.8v3.10.2%2022-09-05
CVE-2022-3120SourceCodester Clinics Patient Management System Login index.php SQL injection9.8v3.10.7%2022-09-05
CVE-2022-3008Command injection on tinygltf8.8NVD v3.13.0%2022-09-05Fix
CVE-2022-2830Deserialization of untrusted data in GravityZone Console On-Premise (VA-10573)8.8CNA v3.10.9%2022-09-05Fix
CVE-2022-2775Fast Flow WordPress plugin Admin+ stored cross-site scripting5.5NVD v3.10.7%2022-09-05Fix
CVE-2022-2657Multivendor Marketplace Solution for WooCommerce WordPress plugin Unauthorised AJAX Calls4.3NVD v3.10.3%2022-09-05Fix
CVE-2022-2597Visual Portfolio WordPress plugin Contributor+ CSS injection5.4NVD v3.10.5%2022-09-05Fix
CVE-2022-2565Paymattic Simple Payment Donations and Subscriptions stored cross-site scripting7.2NVD v3.10.7%2022-09-05Fix
CVE-2022-2543Visual Portfolio WordPress plugin unauthenticated CSS injection6.1NVD v3.10.6%2022-09-05Fix
CVE-2022-2376Directorist WordPress plugin unauthenticated email Address disclosure5.3NVD v3.11.8%2022-09-05NucleiFix
CVE-2022-2271WP Database Backup WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2022-09-05Fix
CVE-2022-2083Simple Single Sign On WordPress plugin authentication bypass7.5NVD v3.10.8%2022-09-05
CVE-2022-3118SourceCodeHero ERP System Project processlogin.php SQL injection9.8v3.10.8%2022-09-04
CVE-2022-3099vim/vim GitHub repository use-after-free7.8v3.10.5%2022-09-03Fix
CVE-2022-39194mediawiki resource exhaustion4.9v3.11.0%2022-09-02Fix
CVE-2022-39190Linux kernel denial of service5.5NVD v3.10.3%2022-09-02Fix
CVE-2022-39189Linux kernel x86 KVM subsystem vulnerability7.8v3.10.3%2022-09-02Fix
CVE-2022-39188Linux kernel race condition4.7NVD v3.10.2%2022-09-02Fix
CVE-2022-39177BlueZ denial of service8.8v3.10.7%2022-09-02Fix
CVE-2022-39176BlueZ information disclosure8.8v3.10.7%2022-09-02Fix
CVE-2022-39170Libdwarf double free8.8v3.11.1%2022-09-02Fix
CVE-2022-38170Apache Airflow overly permissive umask for daemons4.7v3.10.6%2022-09-02Fix
CVE-2022-38054Apache Airflow session fixation9.8v3.12.1%2022-09-02Fix
CVE-2022-37679Miniblog.core cross-site scripting4.8v3.10.5%2022-09-02Fix
CVE-2022-37458Discourse invitation system vulnerability7.2v3.11.4%2022-09-02Fix
CVE-2022-36759oretnom23 Online Food Ordering System SQL injection9.8v3.11.1%2022-09-02
CVE-2022-36754oretnom23 Expense Management System SQL injection7.2v3.10.9%2022-09-02
CVE-2022-36647DAVS2 buffer overflow5.5v3.10.3%2022-09-02
CVE-2022-36642Telosalliance Omnia Mpx Node missing authorization9.8v3.112.6%2022-09-02NucleiFix
CVE-2022-36640Influxdata Influxdb incorrect default permissions9.8v3.12.5%2022-09-02Fix
CVE-2022-36639Garage Management System /client.php stored cross-site scripting5.4v3.10.6%2022-09-02
CVE-2022-36638Garage Management System component print.php improper access control5.3v3.10.9%2022-09-02
CVE-2022-36637Garage Management System cross-site scripting5.4v3.10.6%2022-09-02
CVE-2022-36636Garage Management System SQL injection8.8v3.11.0%2022-09-02
CVE-2022-36609oretnom23 Clinics Patient Management System SQL injection9.8v3.10.7%2022-09-02
CVE-2022-36600BlogEngine.NET cross-site scripting4.8v3.10.5%2022-09-02
CVE-2022-36594Mybatis Mapper SQL injection9.8v3.10.9%2022-09-02
CVE-2022-36593Keking kkFileView path traversal6.5v3.10.9%2022-09-02
CVE-2022-36078Slice memory allocation with excessive size value in binary8.8CNA v3.11.2%2022-09-02Fix
CVE-2022-36076Account takeover via SSO plugins in NodeBB8.8CNA v3.10.6%2022-09-02Fix
CVE-2022-36071Recovery codes abuse in SFTPGo8.3CNA v3.10.5%2022-09-02Fix
CVE-2022-35933PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)4.3CNA v3.00.5%2022-09-02Fix
CVE-2022-34382Dell Command Update (DCU) local privilege escalation7.8CNA v3.10.2%2022-09-02Fix
CVE-2022-34378Dell PowerScale OneFS relative path traversal5.5CNA v3.10.2%2022-09-02Fix
CVE-2022-34371Dell PowerScale OneFS insufficiently protected credentials8.1CNA v3.10.7%2022-09-02Fix
CVE-2022-34369Dell PowerScale OneFS sensitive information in log files8.1CNA v3.10.7%2022-09-02Fix
CVE-2022-31196Server-side request forgery (SSRF) vulnerability in Databasir7.6CNA v3.11.0%2022-09-02Fix
CVE-2022-31176Grafana Image Renderer leaking files8.3CNA v3.11.1%2022-09-02Fix
CVE-2022-31152Synapse vulnerable to denial of service due to incorrect application of event authorization rules6.4CNA v3.11.2%2022-09-02Fix
CVE-2022-29158Regular expression denial of service (ReDoS) vulnerability in Apache OFBiz7.5v3.12.0%2022-09-02Fix
CVE-2022-29063Java deserialization via RMI Connection from the Solr plugin of Apache OFBiz9.8v3.14.7%2022-09-02Exploit codeFix
CVE-2022-25813Server-side template injection affecting the ecommerce plugin of Apache OFBiz7.5v3.167.3%2022-09-02Exploit codeFix
CVE-2022-25680Qualcomm Snapdragon buffer copy without checking size of input in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-25668Qualcomm Snapdragon double free in Video7.3CNA v3.10.4%2022-09-02Fix
CVE-2022-25659Qualcomm Snapdragon buffer copy without checking size of input in Video7.3CNA v3.10.4%2022-09-02Fix
CVE-2022-25658Qualcomm Snapdragon untrusted pointer dereference in Video7.3CNA v3.10.4%2022-09-02Fix
CVE-2022-25657Qualcomm Snapdragon buffer copy without checking size of input in Video7.3CNA v3.10.4%2022-09-02Fix
CVE-2022-25371Unauth path traversal with file corruption affecting the Birt plugin of Apache OFBiz9.8v3.15.1%2022-09-02Fix
CVE-2022-25370Unauth stored XSS vulnerability in the Birt plugin of Apache OFBiz5.4v3.12.6%2022-09-02Fix
CVE-2022-22106Qualcomm Snapdragon integer overflow to buffer overflow in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22104Qualcomm Snapdragon use of out-of-range pointer offset in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22102Qualcomm Snapdragon incorrect type conversion or cast in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22101Qualcomm Snapdragon uncontrolled resource consumption in Automotive Multimedia6.2CNA v3.10.1%2022-09-02Fix
CVE-2022-22100Qualcomm Snapdragon memory corruption8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22099Qualcomm Snapdragon improper validation of array index in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22098Qualcomm Snapdragon untrusted pointer dereference in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22097Qualcomm Snapdragon use-after-free in Automotive Multimedia8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22096Qualcomm Snapdragon stack-based buffer overflow in Bluetooth host9.8CNA v3.10.5%2022-09-02Fix
CVE-2022-22080Qualcomm Snapdragon use of out-of-range pointer offset in Audio8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-22070Qualcomm Snapdragon improper input validation in Audio7.8CNA v3.10.1%2022-09-02Fix
CVE-2022-22069Qualcomm Snapdragon Cryptographic issues in Content Protection7.7CNA v3.10.1%2022-09-02Fix
CVE-2022-22067Qualcomm Snapdragon Improper Release of Memory before Removing Last Reference in Modem7.5CNA v3.10.3%2022-09-02Fix
CVE-2022-22062Qualcomm Snapdragon buffer over-read in Data Modem8.2CNA v3.10.3%2022-09-02Fix
CVE-2022-22061Qualcomm Snapdragon string Errors in HLOS7.8CNA v3.10.1%2022-09-02Fix
CVE-2022-22059Qualcomm Snapdragon improper validation of array index in Video8.4CNA v3.10.1%2022-09-02Fix
CVE-2022-3065Improper access control in jgraph/drawio7.5v3.11.3%2022-09-02Fix
CVE-2022-38790weaveworks Gitops cross-site scripting5.4v3.10.8%2022-09-01Fix
CVE-2022-37435Apache ShenYu admin improper privilege management8.8v3.11.3%2022-09-01Fix
CVE-2022-36796CallRail Phone Call Tracking plugin cross-site request forgery6.1v3.10.4%2022-09-01Fix
CVE-2022-36773IBM Cognos Analytics XML external entity injection7.1CNA v3.01.9%2022-09-01Fix
CVE-2022-36676Simple Task Scheduling System SQL injection7.2v3.11.0%2022-09-01
CVE-2022-36675Simple Task Scheduling System SQL injection7.2v3.11.0%2022-09-01
CVE-2022-36674Simple Task Scheduling System SQL injection7.2v3.11.0%2022-09-01
CVE-2022-36672xxyopen Novel-Plus hard-coded credentials9.8v3.11.2%2022-09-01
CVE-2022-36671xxyopen Novel-Plus download without integrity check7.5v3.10.5%2022-09-01
CVE-2022-36622Samsung mTower null pointer dereference7.5v3.11.4%2022-09-01
CVE-2022-36621Samsung mTower null pointer dereference7.5v3.11.3%2022-09-01
CVE-2022-36604Canaan Avalon Asic Miner improper access control7.5v3.10.7%2022-09-01
CVE-2022-36603Innosilicon T3t+ remote code execution8.8v3.11.7%2022-09-01
CVE-2022-36602Innosilicon A10 remote code execution8.8v3.11.7%2022-09-01
CVE-2022-36601Jinglemining Jasminer X4 Server privilege escalation9.8v3.11.2%2022-09-01
CVE-2022-36583DedeCMS cross-site scripting6.1v3.10.6%2022-09-01
CVE-2022-36449Arm Bifrost GPU Kernel Driver use-after-free6.5v3.11.2%2022-09-01Fix
CVE-2022-36373Simon Ward MP3-jPlayer (WordPress plugin) Multiple cross-site request forgery8.8v3.10.5%2022-09-01
CVE-2022-36355Easy Org Chart WordPress plugin authenticated stored cross-site scripting (XSS)5.4v3.10.6%2022-09-01
CVE-2022-36130HashiCorp Boundary insufficient verification of data authenticity9.9v3.10.5%2022-09-01Fix
CVE-2022-36055Denial of service in Helm6.5CNA v3.11.0%2022-09-01Fix
CVE-2022-36054Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG6.8CNA v3.10.8%2022-09-01Fix