CVE-2022 records published in October 2022
This page lists the 1,757 CVE-2022 records published in October 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists seven of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 28616.3% of these records
- Listed in CISA KEV
- 70.4% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 412.3% of these records
- Exploit code
- 512.9% of these records
- Actionable vendor fix
- 1,25471.4% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in October 2022 have had from about 48 months to about 49 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-44081 | Lodev lodepng out-of-bounds read | 5.5v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-44079 | Pycdc out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-43752 | Common Desktop Environment buffer overflow | 7.8v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-43152 | tsMuxer out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-43151 | Hzeller Timg memory leak | 5.5v3.1 | 0.3% | 2022-10-31 | Fix |
| CVE-2022-43148 | RTF2HTML out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-42925 | Unrestricted upload of file with dangerous type in Forma LMS | 8.8NVD v3.1 | 0.9% | 2022-10-31 | Fix |
| CVE-2022-42924 | SQL injection in Forma LMS | 6.5NVD v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-42923 | SQL injection in Forma LMS | 8.8v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-41779 | Delta Electronics InfraSuite Device Master deserialization of untrusted data | 9.8v3.1 | 1.1% | 2022-10-31 | Fix |
| CVE-2022-41776 | Delta Electronics InfraSuite Device Master missing authentication | 7.5v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-41772 | Delta Electronics InfraSuite Device Master path traversal | 9.8v3.1 | 24.9% | 2022-10-31 | Fix |
| CVE-2022-41688 | Delta Electronics InfraSuite Device Master missing authentication | 7.5NVD v3.1 | 0.7% | 2022-10-31 | Fix |
| CVE-2022-41681 | File upload vulnerability in Forma LMS | 8.8NVD v3.1 | 0.9% | 2022-10-31 | Fix |
| CVE-2022-41680 | SQL injection in Forma LMS | 6.5NVD v3.1 | 0.3% | 2022-10-31 | Fix |
| CVE-2022-41679 | Cross-site scripting in Forma LMS version | 6.1v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-41657 | Delta Electronics InfraSuite Device Master path traversal | 9.8v3.1 | 20.9% | 2022-10-31 | Fix |
| CVE-2022-41644 | Delta Electronics InfraSuite Device Master missing authentication | 8.8v3.1 | 0.7% | 2022-10-31 | Fix |
| CVE-2022-41629 | Delta Electronics InfraSuite Device Master missing authentication | 9.1v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-40742 | Softnext TECHNOLOGIES CORP. Mail SQR Expert local file inclusion | 6.5CNA v3.1 | 0.7% | 2022-10-31 | Fix |
| CVE-2022-40741 | Softnext TECHNOLOGIES CORP. Mail SQR Expert command injection | 9.8CNA v3.1 | 1.1% | 2022-10-31 | Fix |
| CVE-2022-40739 | Ragic, Inc. Ragic reflected XSS | 5.4CNA v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-40617 | strongSwan denial of service | 7.5v3.1 | 1.7% | 2022-10-31 | Fix |
| CVE-2022-40488 | ProcessWire vulnerable to cross-site request forgery | 6.5v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-40487 | ProcessWire vulnerable to cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-40471 | oretnom23 Clinics Patient Management System remote code execution | 9.8v3.1 | 21.8% | 2022-10-31 | MetasploitExploit code |
| CVE-2022-40296 | Server-side request forgery (SSRF) in PHP Point of Sale, by PHP Point of Sale, LLC | 9.8v3.1 | 0.7% | 2022-10-31 | |
| CVE-2022-40295 | Authenticated sensitive information disclosure in PHP Point of Sale, by PHP Point of Sale, LLC | 4.9v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-40294 | CSV injection in PHP Point of Sale, by PHP Point of Sale, LLC | 8.8v3.1 | 0.8% | 2022-10-31 | |
| CVE-2022-40293 | Session fixation in PHP Point of Sale, by PHP Point of Sale, LLC | 9.8v3.1 | 0.7% | 2022-10-31 | |
| CVE-2022-40292 | Unauthenticated username enumeration in PHP Point of Sale, by PHP Point of Sale, LLC | 5.3v3.1 | 0.5% | 2022-10-31 | |
| CVE-2022-40291 | Cross-site request forgery (CSRF) in PHP Point of Sale, by PHP Point of Sale, LLC | 8.8v3.1 | 0.3% | 2022-10-31 | |
| CVE-2022-40290 | Reflected cross-site scripting in PHP Point of Sale, by PHP Point of Sale, LLC | 6.1v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-40289 | Stored cross-site scripting in PHP Point of Sale, by PHP Point of Sale, LLC | 9.0v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-40288 | Stored cross-site scripting in PHP Point of Sale, by PHP Point of Sale, LLC | 9.0v3.1 | 0.7% | 2022-10-31 | |
| CVE-2022-40287 | Stored cross-site scripting in PHP Point of Sale, by PHP Point of Sale, LLC | 9.0v3.1 | 0.7% | 2022-10-31 | |
| CVE-2022-40202 | Delta Electronics InfraSuite Device Master missing authentication | 9.8v3.1 | 1.3% | 2022-10-31 | Fix |
| CVE-2022-40190 | SAUTER Controls moduWeb cross-site scripting | 9.6v3.1 | 0.7% | 2022-10-31 | |
| CVE-2022-39294 | (DoS) denial of service from unchecked request length in conduit-hyper | 7.5CNA v3.1 | 0.7% | 2022-10-31 | Fix |
| CVE-2022-39027 | e-Excellence Inc. U-Office Force stored XSS | 5.4CNA v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-39026 | e-Excellence Inc. U-Office Force stored XSS | 5.4CNA v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-39025 | e-Excellence Inc. U-Office Force reflected XSS | 6.1CNA v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-39024 | e-Excellence Inc. U-Office Force reflected XSS | 6.1v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-39023 | e-Excellence Inc. U-Office Force path traversal | 6.5CNA v3.1 | 0.9% | 2022-10-31 | Fix |
| CVE-2022-39022 | e-Excellence Inc. U-Office Force path traversal | 6.5CNA v3.1 | 0.9% | 2022-10-31 | Fix |
| CVE-2022-39021 | e-Excellence Inc. U-Office Force open redirect | 6.1CNA v3.1 | 0.5% | 2022-10-31 | |
| CVE-2022-39020 | Cross-site scripting in Schoolbox, by Schoolbox Pty Ltd | 6.1NVD v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-39019 | Broken access controls on PDFtron WebviewerUI in M-Files Hubshare | 7.5v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-39018 | Broken access controls on PDFtron data in M-Files Hubshare | 7.5v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-39017 | XSS in all comments fields in M-Files Hubshare | 5.4NVD v3.1 | 0.4% | 2022-10-31 | |
| CVE-2022-39016 | Javascript injection in PDFtron in M-Files Hubshare | 8.8v3.1 | 0.5% | 2022-10-31 | |
| CVE-2022-38142 | Delta Electronics InfraSuite Device Master deserialization of untrusted data | 9.8v3.1 | 18.2% | 2022-10-31 | Fix |
| CVE-2022-37623 | Thlorenz Browserify-shim vulnerable to prototype pollution | 9.8v3.1 | 1.2% | 2022-10-31 | Fix |
| CVE-2022-37620 | Kangax Html-minifier REDoS | 7.5v3.1 | 1.2% | 2022-10-31 | |
| CVE-2022-31692 | Spring Security authorization rules can be bypassed via forward or include dispatcher types | 9.8v3.1 | 3.6% | 2022-10-31 | Exploit codeFix |
| CVE-2022-31690 | Spring Security spring-security-oauth2-client vulnerable to privilege escalation | 8.1v3.1 | 1.1% | 2022-10-31 | Fix |
| CVE-2022-28763 | Improper URL parsing in Zoom Clients | 8.8CNA v3.1 | 1.2% | 2022-10-31 | Fix |
| CVE-2022-27583 | SICK FlexiCompact improper authorization | 9.1v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-3785 | Axiomatic Bento4 Avcinfo SetDataSize heap-based overflow | 7.8v3.1 | 0.7% | 2022-10-31 | |
| CVE-2022-3784 | Axiomatic Bento4 mp4hls Ap4Mp4AudioInfo.cpp ReadBits heap-based overflow | 7.8v3.1 | 0.6% | 2022-10-31 | |
| CVE-2022-3783 | node-red-dashboard ui_text Format ui-component-ctrl.js cross-site scripting | 6.1v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-3774 | SourceCodester Train Scheduler App resource injection | 9.1v3.1 | 1.2% | 2022-10-31 | |
| CVE-2022-3771 | easyii CMS file upload Management Upload.php file unrestricted upload | 9.8v3.1 | 0.5% | 2022-10-31 | |
| CVE-2022-3770 | Yunjing CMS upload_img.html unrestricted upload | 8.8v3.1 | 0.6% | 2022-10-31 | |
| CVE-2022-3766 | Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ | 6.1NVD v3.1 | 6.1% | 2022-10-31 | NucleiExploit codeFix |
| CVE-2022-3765 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-3499 | Tenable Nessus sensitive information in log files | 6.5NVD v3.1 | 0.9% | 2022-10-31 | |
| CVE-2022-3441 | Rock Convert WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-3440 | Rock Convert WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-3420 | Official Integration for Billingo WordPress plugin ShopManager+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-10-31 | Fix |
| CVE-2022-3419 | Automatic User Roles Switcher WordPress plugin Subscriber+ privilege escalation | 6.5NVD v3.1 | 0.4% | 2022-10-31 | Fix |
| CVE-2022-3408 | WP Word Count WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-3380 | Customizer Export/Import WordPress plugin Admin+ PHP Objection injection | 7.2NVD v3.1 | 1.3% | 2022-10-31 | Fix |
| CVE-2022-3374 | Ocean Extra WordPress plugin Admin+ PHP Objection injection | 7.2NVD v3.1 | 1.2% | 2022-10-31 | Fix |
| CVE-2022-3366 | PublishPress Capabilities WordPress plugin Admin+ PHP Objection injection | 7.2NVD v3.1 | 1.2% | 2022-10-31 | Fix |
| CVE-2022-3360 | LearnPress WordPress plugin unauthenticated PHP object injection via REST API | 8.1NVD v3.1 | 2.0% | 2022-10-31 | Fix |
| CVE-2022-3357 | Smart Slider 3 WordPress plugin PHP object injection | 8.8NVD v3.1 | 2.1% | 2022-10-31 | Fix |
| CVE-2022-3334 | Easy WP SMTP WordPress plugin Admin+ PHP Objection injection | 7.2NVD v3.1 | 1.2% | 2022-10-31 | Fix |
| CVE-2022-3254 | AWP Classifieds WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 5.6% | 2022-10-31 | NucleiFix |
| CVE-2022-3237 | WP Contact Slider WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-3096 | WP Total Hacks WordPress plugin Subscriber+ arbitrary options update to stored XSS | 5.4NVD v3.1 | 0.5% | 2022-10-31 | |
| CVE-2022-3059 | SQL injection in Schoolbox, by Schoolbox Pty Ltd | 7.5v3.1 | 0.5% | 2022-10-31 | |
| CVE-2022-2741 | zephyrproject-rtos Zephyr can: Denial of service can be triggered by a crafted CAN frame | 8.2CNA v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-2627 | Newspaper WordPress theme reflected cross-site scripting | 6.1NVD v3.1 | 1.1% | 2022-10-31 | NucleiFix |
| CVE-2022-2190 | Envira Gallery Lite WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2022-10-31 | Fix |
| CVE-2022-2167 | Newspaper WordPress theme reflected cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-10-31 | Fix |
| CVE-2022-44034 | Linux kernel race condition | 6.4v3.1 | 0.3% | 2022-10-30 | Fix |
| CVE-2022-44033 | Linux kernel race condition | 6.4v3.1 | 0.3% | 2022-10-30 | Fix |
| CVE-2022-44032 | Linux kernel race condition | 6.4v3.1 | 0.3% | 2022-10-30 | Fix |
| CVE-2022-44023 | pwndoc missing brute-force protection | 5.3v3.1 | 0.8% | 2022-10-30 | |
| CVE-2022-44022 | pwndoc missing brute-force protection | 5.3v3.1 | 0.8% | 2022-10-30 | |
| CVE-2022-44020 | OpenStack Sushy-tools and VirtualBMC improper preservation of permissions | 5.5v3.1 | 0.2% | 2022-10-30 | Fix |
| CVE-2022-44019 | total.js OS command injection | 8.8v3.1 | 2.2% | 2022-10-30 | |
| CVE-2022-42916 | curl cleartext transmission of sensitive information | 7.5NVD v3.1 | 2.0% | 2022-10-29 | Fix |
| CVE-2022-42915 | curl HTTP proxy CONNECT handling double free | 8.1NVD v3.1 | 2.9% | 2022-10-29 | Fix |
| CVE-2022-41974 | Opensvc Multipath-tools improper privilege management | 7.8v3.1 | 0.6% | 2022-10-29 | KCVFix |
| CVE-2022-41973 | Opensvc Multipath-tools link following | 7.8v3.1 | 0.7% | 2022-10-29 | Fix |
| CVE-2022-3754 | Weak password requirements in thorsten/phpMyFAQ | 9.8v3.1 | 1.2% | 2022-10-29 | Fix |
| CVE-2022-43286 | F5 Njs use-after-free | 9.8v3.1 | 1.0% | 2022-10-28 | |
| CVE-2022-43285 | F5 Njs out-of-bounds write | 7.5v3.1 | 0.8% | 2022-10-28 | |
| CVE-2022-43284 | F5 NJS scope value handling vulnerability | 7.5v3.1 | 0.9% | 2022-10-28 | |
| CVE-2022-43283 | WebAssembly wabt unrestricted file upload | 5.5v3.1 | 0.3% | 2022-10-28 | Fix |
| CVE-2022-43282 | WebAssembly wabt out-of-bounds read | 7.1v3.1 | 0.3% | 2022-10-28 | Fix |
| CVE-2022-43281 | WebAssembly Wasm out-of-bounds write | 7.8v3.1 | 0.3% | 2022-10-28 | Fix |
| CVE-2022-43280 | WebAssembly wabt out-of-bounds read | 7.1v3.1 | 0.3% | 2022-10-28 | Fix |
| CVE-2022-43276 | Canteen Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-28 | |
| CVE-2022-43275 | Canteen Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-10-28 | |
| CVE-2022-43233 | Canteen Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-28 | |
| CVE-2022-43232 | Canteen Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-28 | |
| CVE-2022-43231 | Canteen Management System unrestricted file upload | 7.2v3.1 | 1.1% | 2022-10-28 | |
| CVE-2022-43230 | Simple Cold Storage Management System Project Simple Cold Storage Managment System SQL injection | 7.2v3.1 | 0.8% | 2022-10-28 | |
| CVE-2022-43229 | Simple Cold Storage Management System Project Simple Cold Storage Managment System SQL injection | 7.2v3.1 | 1.1% | 2022-10-28 | |
| CVE-2022-43228 | Barangay Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-28 | |
| CVE-2022-43170 | Rukovoditel Dashboard Configuration feature stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-10-28 | Nuclei |
| CVE-2022-43169 | Rukovoditel Users Access Groups feature stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-10-28 | Nuclei |
| CVE-2022-43168 | Rukovoditel SQL injection | 9.8v3.1 | 0.9% | 2022-10-28 | |
| CVE-2022-43167 | Rukovoditel Users Alerts feature stored cross-site scripting | 5.4v3.1 | 1.0% | 2022-10-28 | Nuclei |
| CVE-2022-43166 | Rukovoditel Global Entities feature stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-10-28 | Nuclei |
| CVE-2022-43165 | Rukovoditel Global variables feature stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-10-28 | Nuclei |
| CVE-2022-43164 | Rukovoditel Global Lists feature stored cross-site scripting | 5.4v3.1 | 0.9% | 2022-10-28 | Nuclei |
| CVE-2022-41648 | HEIDENHAIN Controller TNC 640 NC Software insecure default initialization | 9.8v3.1 | 0.8% | 2022-10-28 | |
| CVE-2022-41636 | Haas CNC Controller cleartext transmission of sensitive information | 7.5NVD v3.1 | 0.4% | 2022-10-28 | |
| CVE-2022-39367 | davemckain qtiworks vulnerability in handling of uploaded QTI ZIP files | 8.6CNA v3.1 | 1.1% | 2022-10-28 | Fix |
| CVE-2022-39366 | DataHub missing JWT signature check | 9.9CNA v3.1 | 0.9% | 2022-10-28 | Fix |
| CVE-2022-37915 | Aruba EdgeConnect Enterprise Orchestrator (on-premises) OS command injection | 9.8v3.1 | 1.7% | 2022-10-28 | Fix |
| CVE-2022-37914 | Aruba EdgeConnect Enterprise Orchestrator (on-premises) improper authentication | 9.8v3.1 | 1.4% | 2022-10-28 | Fix |
| CVE-2022-37913 | Aruba EdgeConnect Enterprise Orchestrator (on-premises) improper authentication | 9.8v3.1 | 1.4% | 2022-10-28 | Fix |
| CVE-2022-37621 | Thlorenz Browserify-shim vulnerable to prototype pollution | 9.8v3.1 | 1.1% | 2022-10-28 | Fix |
| CVE-2022-37426 | OpenNebula unrestricted file upload | 4.3CNA v3.1 | 0.6% | 2022-10-28 | Fix |
| CVE-2022-37425 | OpenNebula command improper neutralization | 9.9CNA v3.1 | 1.6% | 2022-10-28 | Fix |
| CVE-2022-37424 | OpenNebula files accessible to external parties | 6.5CNA v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2022-33859 | Unrestricted file upload in Eaton Foreseer EPMS | 8.1CNA v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2022-31678 | VMware Cloud Foundation (NSX-V) XML external entity injection | 9.1v3.1 | 8.1% | 2022-10-28 | NucleiFix |
| CVE-2022-26884 | Apache DolphinScheduler vulnerable to path traversal | 6.5v3.1 | 1.6% | 2022-10-28 | Exploit codeFix |
| CVE-2022-3741 | Improper restriction of excessive authentication attempts in chatwoot/chatwoot | 9.8v3.1 | 0.9% | 2022-10-28 | Fix |
| CVE-2022-3735 | seccome Ehoney signup access control | 9.8v3.1 | 0.5% | 2022-10-28 | |
| CVE-2022-3734 | Redis on Windows dbghelp.dll uncontrolled search path | 9.8v3.1 | 0.6% | 2022-10-28 | |
| CVE-2022-3733 | SourceCodester Web-Based Student Clearance System edit-admin.php SQL injection | 8.8v3.1 | 0.6% | 2022-10-28 | |
| CVE-2022-3732 | seccome Ehoney set SQL injection | 9.8v3.1 | 0.5% | 2022-10-28 | |
| CVE-2022-3731 | seccome Ehoney token SQL injection | 9.8v3.1 | 0.5% | 2022-10-28 | |
| CVE-2022-3730 | seccome Ehoney falco SQL injection | 9.8v3.1 | 0.5% | 2022-10-28 | |
| CVE-2022-3729 | seccome Ehoney attack SQL injection | 9.8v3.1 | 0.5% | 2022-10-28 | |
| CVE-2022-3708 | Web Stories WordPress plugin server side request forgery | 8.1NVD v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2022-3697 | Ansible leaks password to logs | 7.5v3.1 | 0.8% | 2022-10-28 | Fix |
| CVE-2022-3616 | OctoRPKI crash when maximum iterations number is reached | 5.4CNA v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2022-3512 | Lock WARP switch bypass using warp-cli add-trusted-ssid command | 6.7CNA v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2022-3402 | Log HTTP Requests WordPress plugin stored cross-site scripting | 6.1v3.1 | 0.7% | 2022-10-28 | Fix |
| CVE-2022-3401 | Bricks WordPress theme remote code execution | 8.8v3.1 | 1.7% | 2022-10-28 | Fix |
| CVE-2022-3400 | Bricks WordPress theme authorization bypass | 6.5v3.1 | 0.6% | 2022-10-28 | Fix |
| CVE-2022-3337 | Lock WARP switch bypass by removing VPN profile on iOS mobile client | 6.7CNA v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2022-3322 | Lock WARP switch bypass on WARP mobile client using iOS quick action | 6.7CNA v3.1 | 0.3% | 2022-10-28 | Fix |
| CVE-2022-3321 | Lock WARP switch feature bypass on WARP mobile client for iOS | 6.7CNA v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2022-3320 | Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command | 6.7CNA v3.1 | 0.4% | 2022-10-28 | Fix |
| CVE-2022-3228 | Host Engineering H0-ECOM100 Communications Module stack-based buffer overflow | 6.5v3.1 | 0.3% | 2022-10-28 | Fix |
| CVE-2022-3018 | GitLab An information disclosure | 6.8CNA v3.1 | 0.7% | 2022-10-28 | Fix |
| CVE-2022-2882 | GitLab resource exposure | 5.5CNA v3.1 | 0.7% | 2022-10-28 | Fix |
| CVE-2022-2864 | demon image annotation WordPress plugin cross-site request forgery | 8.8v3.1 | 0.5% | 2022-10-28 | Fix |
| CVE-2022-2826 | GitLab cross-site scripting | 2.7CNA v3.1 | 0.9% | 2022-10-28 | Fix |
| CVE-2022-2475 | Haas CNC Controller insufficient access control granularity | 8.8NVD v3.1 | 0.7% | 2022-10-28 | |
| CVE-2022-2474 | Haas CNC Controller missing authentication | 8.0NVD v3.1 | 0.8% | 2022-10-28 | |
| CVE-2022-43367 | IP-COM EW9 command injection | 9.8v3.1 | 2.9% | 2022-10-27 | |
| CVE-2022-43366 | IP-COM EW9 information disclosure | 7.5v3.1 | 0.8% | 2022-10-27 | |
| CVE-2022-43365 | IP-COM EW9 buffer overflow | 7.5v3.1 | 0.9% | 2022-10-27 | |
| CVE-2022-43364 | IP-COM EW9 password reset page improper access control | 7.5v3.1 | 0.7% | 2022-10-27 | |
| CVE-2022-43340 | Dzzoffice A cross-site request forgery | 8.8v3.1 | 0.4% | 2022-10-27 | |
| CVE-2022-42993 | Password Storage Application cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-27 | |
| CVE-2022-42992 | Train Scheduler App Multiple stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-27 | |
| CVE-2022-42991 | Simple Online Public Access Catalog stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-27 | |
| CVE-2022-42055 | GL.iNet Goodcloud command injection | 6.5v3.1 | 1.7% | 2022-10-27 | |
| CVE-2022-42054 | GL.iNet Goodcloud stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-27 | |
| CVE-2022-41996 | Avada premium WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.5% | 2022-10-27 | Fix |
| CVE-2022-41773 | Delta Electronics DIAEnergie CheckDIACloud SQL injection | 8.8v3.1 | 7.9% | 2022-10-27 | |
| CVE-2022-41702 | Delta Electronics DIAEnergie InsertReg API stored cross-site scripting | 5.4NVD v3.1 | 11.1% | 2022-10-27 | |
| CVE-2022-41701 | Delta Electronics DIAEnergie PutShift API stored cross-site scripting | 5.4NVD v3.1 | 11.1% | 2022-10-27 | |
| CVE-2022-41651 | Delta Electronics DIAEnergie SetPF API stored cross-site scripting | 5.4NVD v3.1 | 11.1% | 2022-10-27 | |
| CVE-2022-41627 | AliveCor KardiaMobile missing encryption | 7.6v3.1 | 0.1% | 2022-10-27 | |
| CVE-2022-41555 | Delta Electronics DIAEnergie PutLineMessageSetting API stored cross-site scripting | 5.4NVD v3.1 | 11.1% | 2022-10-27 | |
| CVE-2022-41133 | Delta Electronics DIAEnergie line message settings API SQL injection | 8.8v3.1 | 26.6% | 2022-10-27 | |
| CVE-2022-40967 | Delta Electronics DIAEnergie CheckIoTHubNameExisted function SQL injection | 8.8v3.1 | 7.7% | 2022-10-27 | |
| CVE-2022-40965 | Delta Electronics DIAEnergie PostEnergyType API stored cross-site scripting | 5.4NVD v3.1 | 11.1% | 2022-10-27 | |
| CVE-2022-40876 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 1.9% | 2022-10-27 | |
| CVE-2022-40875 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-10-27 | |
| CVE-2022-40874 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-10-27 | |
| CVE-2022-40184 | Stored cross-site scripting (XSS) in VIDEOJET multi 4000 | 5.1CNA v3.1 | 0.3% | 2022-10-27 | Fix |
| CVE-2022-40183 | Reflected cross-site scripting (XSS) in VIDEOJET multi 4000 | 5.8CNA v3.1 | 0.3% | 2022-10-27 | Fix |
| CVE-2022-39978 | Online Pet Shop We App unrestricted file upload | 7.2v3.1 | 1.2% | 2022-10-27 | |
| CVE-2022-39977 | Online Pet Shop We App unrestricted file upload | 7.2v3.1 | 1.2% | 2022-10-27 | |
| CVE-2022-39976 | School Activity Updates With Sms Notification SQL injection | 9.8v3.1 | 0.9% | 2022-10-27 | |
| CVE-2022-39365 | RCE vulnerability in Pimcore/Mail and Dynamic Text Layout | 9.8CNA v3.1 | 1.8% | 2022-10-27 | Fix |
| CVE-2022-39364 | Nextcloud Server SharePoint app logging cleartext storage of sensitive information | 4.0CNA v3.1 | 0.5% | 2022-10-27 | Fix |
| CVE-2022-39330 | Nextcloud security-advisories database resource exhaustion for logged-in users | 4.8CNA v3.1 | 0.9% | 2022-10-27 | Fix |
| CVE-2022-39329 | Nextcloud security-advisories profile of disabled user stays accessible | 3.5CNA v3.1 | 0.7% | 2022-10-27 | Fix |
| CVE-2022-38744 | FactoryTalk Alarm and Events Server vulnerable to denial of service Attack | 7.5CNA v3.1 | 1.2% | 2022-10-27 | |
| CVE-2022-36182 | HashiCorp Boundary vulnerable to clickjacking | 6.1v3.1 | 0.6% | 2022-10-27 | |
| CVE-2022-32407 | Softr cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-27 | |
| CVE-2022-31898 | GL.iNet Gl-mt300n-v2 OS command injection | 6.8v3.1 | 15.9% | 2022-10-27 | Emerging ThreatsExploit code |
| CVE-2022-25918 | shescape regular expression denial of service (ReDoS) | 7.5v3.1 | 1.3% | 2022-10-27 | Fix |
| CVE-2022-24670 | ForgeRock Access Management configuration endpoint information disclosure | 6.5NVD v3.1 | 0.6% | 2022-10-27 | Fix |
| CVE-2022-24669 | ForgeRock Access Management configuration change notifications missing authorization | 6.5v3.1 | 0.4% | 2022-10-27 | Fix |
| CVE-2022-3725 | Wireshark OPUS protocol dissector crash | 6.3CNA v3.1 | 0.9% | 2022-10-27 | Fix |
| CVE-2022-3716 | SourceCodester Online Medicine Ordering System cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-27 | |
| CVE-2022-3714 | SourceCodester Online Medicine Ordering System SQL injection | 9.8v3.1 | 0.4% | 2022-10-27 | |
| CVE-2022-3409 | OpenBMC unauthenticated out-of-bounds stack write in bmcweb | 8.2CNA v3.1 | 0.7% | 2022-10-27 | Fix |
| CVE-2022-3387 | Advantech R-SeeNet path traversal | 5.3v3.1 | 14.0% | 2022-10-27 | Fix |
| CVE-2022-3386 | Advantech R-SeeNet stack-based buffer overflow | 9.8v3.1 | 1.3% | 2022-10-27 | Fix |
| CVE-2022-3385 | Advantech R-SeeNet stack-based buffer overflow | 9.8v3.1 | 1.3% | 2022-10-27 | Fix |
| CVE-2022-3379 | Horner Automation Cscape out-of-bounds write | 7.8v3.1 | 0.2% | 2022-10-27 | Fix |
| CVE-2022-3378 | Horner Automation Cscape uninitialized pointer access | 7.8v3.1 | 0.2% | 2022-10-27 | Fix |
| CVE-2022-3095 | Google Incorrect parsing of the backslash characters in Dart library | 9.8CNA v3.1 | 1.0% | 2022-10-27 | Fix |
| CVE-2022-2809 | OpenBMC unauthenticated out-of-bounds heap write in bmcweb | 8.2CNA v3.1 | 0.7% | 2022-10-27 | Fix |
| CVE-2022-2782 | Octopus Deploy Octopus Server insufficient session expiration | 9.1v3.1 | 0.6% | 2022-10-27 | Fix |
| CVE-2022-2508 | Octopus Deploy Octopus Server information disclosure through error messages | 5.3v3.1 | 0.5% | 2022-10-27 | Fix |
| CVE-2022-0074 | Privilege escalation in OpenLiteSpeed Web Server | 8.8NVD v3.1 | 1.3% | 2022-10-27 | Fix |
| CVE-2022-0073 | Authenticated remote code execution in OpenLiteSpeed Web Server | 8.8NVD v3.1 | 9.7% | 2022-10-27 | Fix |
| CVE-2022-0072 | Directory traversal in OpenLiteSpeed Web Server | 5.8NVD v3.1 | 1.0% | 2022-10-27 | Fix |
| CVE-2022-43776 | Metabase server-side request forgery | 6.5NVD v3.1 | 0.7% | 2022-10-26 | Fix |
| CVE-2022-43775 | Delta Electronics DIAEnergie SQL injection | 9.8NVD v3.1 | 20.6% | 2022-10-26 | |
| CVE-2022-43774 | Delta Electronics DIAEnergie SQL injection | 9.8NVD v3.1 | 0.8% | 2022-10-26 | |
| CVE-2022-43766 | Apache IoTDB allows DoS | 7.5v3.1 | 1.4% | 2022-10-26 | Fix |
| CVE-2022-43750 | Linux kernel out-of-bounds write | 6.7NVD v3.1 | 0.3% | 2022-10-26 | Fix |
| CVE-2022-43749 | Synology Presto File Server summary report improper privilege management | 4.3CNA v3.1 | 0.7% | 2022-10-26 | Fix |
| CVE-2022-43748 | Synology Presto File Server path traversal | 5.8CNA v3.1 | 0.8% | 2022-10-26 | Fix |
| CVE-2022-43747 | baramundi Management Suite remote code execution | 9.8v3.1 | 0.9% | 2022-10-26 | Fix |
| CVE-2022-43003 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-10-26 | |
| CVE-2022-43002 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-10-26 | |
| CVE-2022-43001 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-10-26 | |
| CVE-2022-43000 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-10-26 | |
| CVE-2022-42999 | D-Link DIR-816 OS command injection | 7.5v3.1 | 2.7% | 2022-10-26 | |
| CVE-2022-42998 | D-Link DIR-816 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-10-26 | |
| CVE-2022-42468 | Apache Flume has an improper input validation (JNDI injection) in JMSSource | 9.8v3.1 | 2.9% | 2022-10-26 | Fix |
| CVE-2022-40703 | AliveCor Kardia App authentication bypass | 6.1v3.1 | 0.3% | 2022-10-26 | |
| CVE-2022-40238 | A remote code injection vulnerability exists in CERT software prior to | 8.8v3.1 | 1.3% | 2022-10-26 | Fix |
| CVE-2022-39944 | The Apache Linkis JDBC EngineConn module has a RCE | 8.8v3.1 | 1.9% | 2022-10-26 | Fix |
| CVE-2022-39362 | Metabase vulnerable to arbitrary SQL execution from queryhash | 8.8CNA v3.1 | 0.9% | 2022-10-26 | Fix |
| CVE-2022-39361 | Metabase vulnerable to remote code execution via H2 | 8.8CNA v3.1 | 1.1% | 2022-10-26 | Fix |
| CVE-2022-39360 | Metabase SSO users able to circumvent IdP login by doing password reset | 6.5CNA v3.1 | 0.5% | 2022-10-26 | Fix |
| CVE-2022-39359 | Metabase's GeoJSON validation doesn't prevent redirects to blocked URLs | 6.5CNA v3.1 | 0.6% | 2022-10-26 | Fix |
| CVE-2022-39358 | Metabase vulnerable to circumvention of Locked parameter in Signed Embedding | 6.5CNA v3.1 | 0.5% | 2022-10-26 | Fix |
| CVE-2022-39357 | Winter vulnerable to prototype pollution in Snowboard framework | 8.1CNA v3.1 | 1.1% | 2022-10-26 | Fix |
| CVE-2022-39355 | Discourse Patreon vulnerable to improper validation of email during Patreon authentication | 9.1CNA v3.1 | 0.8% | 2022-10-26 | |
| CVE-2022-39348 | Twisted vulnerable to NameVirtualHost host header injection | 5.4CNA v3.1 | 1.3% | 2022-10-26 | Fix |
| CVE-2022-39286 | jupyter_core execution with unnecessary privileges in JupyterApp | 8.8CNA v3.1 | 1.2% | 2022-10-26 | Fix |
| CVE-2022-37202 | jflyfox jfinal_cms SQL injection | 8.8v3.1 | 1.1% | 2022-10-26 | Exploit code |
| CVE-2022-31256 | SUSE openSUSE Factory sendmail: Mail to root privilege escalation via sm-client.pre script | 7.7CNA v3.1 | 0.2% | 2022-10-26 | Fix |
| CVE-2022-29823 | Feather js Feathers-Sequalize feathers Query __proto__ is converted to real prototype | 9.8v3.1 | 1.5% | 2022-10-26 | Fix |
| CVE-2022-29822 | Feathers-sequelize vulnerable to SQL injection due to improper parameter filtering | 9.8v3.1 | 0.8% | 2022-10-26 | Fix |
| CVE-2022-25849 | joyqi/hyper-down cross-site scripting (XSS) | 6.1v3.1 | 0.5% | 2022-10-26 | |
| CVE-2022-20959 | Cisco Identity Services Engine cross-site scripting | 6.1CNA v3.1 | 0.8% | 2022-10-26 | Fix |
| CVE-2022-20955 | Cisco TelePresence Collaboration Endpoint and RoomOS software path traversal | 5.5CNA v3.1 | 0.4% | 2022-10-26 | Fix |
| CVE-2022-20954 | Cisco TelePresence Collaboration Endpoint and RoomOS software path traversal | 5.5CNA v3.1 | 0.4% | 2022-10-26 | Fix |
| CVE-2022-20953 | Cisco TelePresence Collaboration Endpoint and RoomOS software path traversal | 5.5CNA v3.1 | 0.4% | 2022-10-26 | Fix |
| CVE-2022-20933 | Cisco Meraki MX and Z3 Teleworker Gateway VPN denial of service | 8.6CNA v3.1 | 1.1% | 2022-10-26 | SnortFix |
| CVE-2022-20822 | Cisco Identity Services Engine Unauthorized File Access vulnerability | 7.1CNA v3.1 | 1.3% | 2022-10-26 | Fix |
| CVE-2022-20811 | Cisco TelePresence Collaboration Endpoint and RoomOS Software information disclosure | 5.5CNA v3.1 | 0.7% | 2022-10-26 | Fix |
| CVE-2022-20776 | Cisco TelePresence Collaboration Endpoint and RoomOS Software information disclosure | 5.5CNA v3.1 | 0.5% | 2022-10-26 | Fix |
| CVE-2022-3705 | Vim autocmd quickfix.c qf_update_buffer use-after-free | 7.5v3.1 | 1.3% | 2022-10-26 | Fix |
| CVE-2022-3704 | Ruby on Rails _table.html.erb cross-site scripting | 5.4v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3674 | SourceCodester Sanitization Management System missing authentication | 9.8v3.1 | 0.5% | 2022-10-26 | |
| CVE-2022-3673 | SourceCodester Sanitization Management System Master.php cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-26 | |
| CVE-2022-3672 | SourceCodester Sanitization Management System SystemSettings.php cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-26 | |
| CVE-2022-3671 | SourceCodester eLearning System manage.php SQL injection | 9.8v3.1 | 1.0% | 2022-10-26 | Fix |
| CVE-2022-3670 | Axiomatic Bento4 mp42hevc WriteSample heap-based overflow | 7.8v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3669 | Axiomatic Bento4 mp4edit Create memory leak | 5.5v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3668 | Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak | 5.5v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3667 | Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow | 7.5v3.1 | 1.2% | 2022-10-26 | |
| CVE-2022-3666 | Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use-after-free | 7.8v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3665 | Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow | 7.8v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3664 | Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow | 7.8v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3663 | Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference | 5.5v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3662 | Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use-after-free | 7.8v3.1 | 0.7% | 2022-10-26 | |
| CVE-2022-3474 | Google Bazel leaks user credentials through the remote assets API | 5.1CNA v4.0 | 0.3% | 2022-10-26 | Fix |
| CVE-2022-3363 | Business Logic Errors in ikus060/rdiffweb | 9.8v3.1 | 0.8% | 2022-10-26 | Fix |
| CVE-2022-2422 | Feather js Feathers-Sequalize feathers SQL injection via attribute aliases | 9.8v3.1 | 0.8% | 2022-10-26 | Fix |
| CVE-2022-2421 | Socket.io-Parser Socket.io improper type validation in attachment parsing | 9.8v3.1 | 1.2% | 2022-10-26 | Fix |
| CVE-2022-42890 | Apache Batik allows RCE via scripting | 7.5v3.1 | 2.6% | 2022-10-25 | Fix |
| CVE-2022-41711 | Badaso vulnerable to remote code execution via malicious file upload | 9.8v3.1 | 1.7% | 2022-10-25 | Fix |
| CVE-2022-41704 | Apache Batik allows RCE when loading untrusted SVG input | 7.5v3.1 | 2.4% | 2022-10-25 | Fix |
| CVE-2022-39837 | GENIVI Diagnostic Log And Trace null pointer dereference | 5.5v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-39836 | GENIVI Diagnostic Log And Trace out-of-bounds read | 5.5v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-39354 | evm has incorrect is_static parameter for custom stateful precompiles | 5.9CNA v3.1 | 0.6% | 2022-10-25 | Fix |
| CVE-2022-39351 | OWASP Dependency-Track audit log cleartext storage of sensitive information | 4.4CNA v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-39350 | @DependencyTrack/frontend vulnerable to persistent cross-site-scripting via vulnerability Details | 5.4CNA v3.1 | 0.7% | 2022-10-25 | Fix |
| CVE-2022-39349 | tasks tasks.org vulnerable to data exfiltration by malicous app or adb | 5.5CNA v3.1 | 0.3% | 2022-10-25 | Fix |
| CVE-2022-39345 | Gin-vue-admin arbitrary file upload vulnerability caused by path traversal | 9.8CNA v3.1 | 1.4% | 2022-10-25 | Fix |
| CVE-2022-39342 | OpenFGA authorization bypass | 5.9CNA v3.1 | 1.0% | 2022-10-25 | Fix |
| CVE-2022-39341 | OpenFGA authorization bypass | 5.9CNA v3.1 | 1.0% | 2022-10-25 | Fix |
| CVE-2022-39340 | OpenFGA information disclosure | 5.3CNA v3.1 | 0.8% | 2022-10-25 | Fix |
| CVE-2022-39327 | Improper control of generation of code (code injection) in Azure CLI | 8.1CNA v3.1 | 3.5% | 2022-10-25 | Fix |
| CVE-2022-39326 | Kartverket/github-workflows's run-terraform allows for RCE via terraform plan | 8.8CNA v3.1 | 1.3% | 2022-10-25 | Fix |
| CVE-2022-39322 | keystonejs keystone field-level access-control bypass for multiselect field | 9.1CNA v3.1 | 1.2% | 2022-10-25 | Fix |
| CVE-2022-39321 | GitHub Actions Runner vulnerable to Docker Command Escaping | 8.8CNA v3.1 | 1.6% | 2022-10-25 | Fix |
| CVE-2022-39315 | Kirby CMS vulnerable to user enumeration in the brute force protection | 6.5CNA v3.1 | 0.7% | 2022-10-25 | Fix |
| CVE-2022-39312 | Dataease Mysql Data Source JDBC Connection parameters not Verified leads to deserialization | 9.8CNA v3.1 | 1.6% | 2022-10-25 | Fix |
| CVE-2022-38870 | free5gc missing authentication | 7.5v3.1 | 3.1% | 2022-10-25 | Nuclei |
| CVE-2022-38580 | Skipper vulnerable to SSRF via X-Skipper-Proxy | 9.8v3.1 | 15.9% | 2022-10-25 | Exploit codeFix |
| CVE-2022-38436 | Adobe Illustrator CDR File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.6% | 2022-10-25 | Fix |
| CVE-2022-38435 | Adobe Illustrator PCX File Parsing memory corruption remote code execution | 7.8CNA v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-38200 | Bug-000142376 reflected cross-site scripting (XSS) vulnerability in ArcGIS Server | 6.1CNA v3.1 | 0.4% | 2022-10-25 | |
| CVE-2022-38199 | Bug-000144172 Remote file download issue in ArcGIS Server | 6.1CNA v3.1 | 0.3% | 2022-10-25 | Fix |
| CVE-2022-38198 | Bug-000146513 reflected XSS vulnerability in ArcGIS Server | 6.1CNA v3.1 | 0.6% | 2022-10-25 | Fix |
| CVE-2022-38197 | Bug-000148347 unvalidated redirect issues in ArcGIS Server | 6.1CNA v3.1 | 0.6% | 2022-10-25 | Fix |
| CVE-2022-38196 | Bug-000150537 ArcGIS Server has a local file inclusion (LFI) | 6.5CNA v3.1 | 1.1% | 2022-10-25 | Fix |
| CVE-2022-38195 | Bug-000150540 reflected XSS vulnerability in ArcGIS Server | 6.1CNA v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-38181 | Arm Mali GPU Kernel driver use-after-free | 8.8v3.1 | 18.5% | 2022-10-25 | KEVExploit codeKCVFix |
| CVE-2022-38162 | WithSecure F-secure Policy Manager reflected cross-site scripting | 6.1v3.1 | 0.7% | 2022-10-25 | |
| CVE-2022-36783 | AlgoSec FireFlow reflected cross-site-scripting (RXSS) | 5.4v3.1 | 0.4% | 2022-10-25 | |
| CVE-2022-36454 | Mitel MiCollab improper authorization | 6.5v3.1 | 0.5% | 2022-10-25 | Fix |
| CVE-2022-36453 | Mitel MiCollab improper authorization | 8.8v3.1 | 0.6% | 2022-10-25 | Fix |
| CVE-2022-36452 | Mitel MiCollab unrestricted file upload | 9.8v3.1 | 0.9% | 2022-10-25 | Fix |
| CVE-2022-36451 | Mitel MiCollab server-side request forgery | 8.8v3.1 | 0.6% | 2022-10-25 | Fix |
| CVE-2022-35887 | abode systems iota All-In-One Security Kit format string | 8.8v3.1 | 1.3% | 2022-10-25 | |
| CVE-2022-35886 | abode systems iota All-In-One Security Kit format string | 8.8v3.1 | 1.3% | 2022-10-25 | |
| CVE-2022-35885 | abode systems iota All-In-One Security Kit format string | 8.8v3.1 | 1.3% | 2022-10-25 | |
| CVE-2022-35884 | abode systems iota All-In-One Security Kit format string | 8.8v3.1 | 1.3% | 2022-10-25 | |
| CVE-2022-35881 | abode systems iota All-In-One Security Kit UPnP logging functionality format string | 8.8v3.1 | 0.8% | 2022-10-25 | |
| CVE-2022-35880 | abode systems iota All-In-One Security Kit UPnP logging functionality format string | 8.8v3.1 | 0.8% | 2022-10-25 | |
| CVE-2022-35879 | abode systems iota All-In-One Security Kit UPnP logging functionality format string | 8.8v3.1 | 0.8% | 2022-10-25 | |
| CVE-2022-35878 | abode systems iota All-In-One Security Kit UPnP logging functionality format string | 8.8v3.1 | 0.8% | 2022-10-25 | |
| CVE-2022-35877 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality format string | 9.8v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35876 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality format string | 9.8v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35875 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality format string | 9.8v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35874 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality format string | 9.8v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35739 | Paessler PRTG Network Monitor cross-site scripting | 5.3v3.1 | 0.8% | 2022-10-25 | Fix |
| CVE-2022-35271 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35270 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35269 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35268 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35267 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35266 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35265 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35264 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35263 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35262 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-35261 | Robustel R1510 web_server hashFirst functionality denial of service | 7.5v3.1 | 1.1% | 2022-10-25 | |
| CVE-2022-35244 | abode systems iota All-In-One Security Kit XCMD getVarHA functionality format string | 9.8v3.1 | 1.3% | 2022-10-25 | |
| CVE-2022-35132 | Webmin Usermin OS command injection | 8.8v3.1 | 2.8% | 2022-10-25 | Fix |
| CVE-2022-34870 | Apache Geode stored cross-site scripting | 5.4v3.1 | 1.2% | 2022-10-25 | Fix |
| CVE-2022-34850 | Robustel R1510 OS command injection | 7.2NVD v3.1 | 3.5% | 2022-10-25 | |
| CVE-2022-34845 | Robustel R1510 insufficient verification of data authenticity | 2.7NVD v3.1 | 0.4% | 2022-10-25 | |
| CVE-2022-33938 | abode systems iota All-In-One Security Kit ghome_process_control_packet functionality format string | 9.8v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-33897 | Robustel R1510 web_server /ajax/remove/ functionality path traversal | 9.1v3.1 | 1.5% | 2022-10-25 | |
| CVE-2022-33757 | Tenable Nessus improper access control | 6.5v3.1 | 0.8% | 2022-10-25 | Fix |
| CVE-2022-33207 | abode systems iota All-In-One Security Kit OS command injection | 9.9v3.1 | 4.3% | 2022-10-25 | |
| CVE-2022-33206 | abode systems iota All-In-One Security Kit OS command injection | 9.9v3.1 | 4.3% | 2022-10-25 | |
| CVE-2022-33205 | abode systems iota All-In-One Security Kit OS command injection | 9.9v3.1 | 4.3% | 2022-10-25 | |
| CVE-2022-33204 | abode systems iota All-In-One Security Kit OS command injection | 9.9v3.1 | 4.3% | 2022-10-25 | |
| CVE-2022-33195 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality OS command injection | 10.0v3.1 | 3.3% | 2022-10-25 | |
| CVE-2022-33194 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality OS command injection | 10.0v3.1 | 3.2% | 2022-10-25 | |
| CVE-2022-33193 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality OS command injection | 10.0v3.1 | 3.2% | 2022-10-25 | |
| CVE-2022-33192 | abode systems iota All-In-One Security Kit XCMD testWifiAP functionality OS command injection | 10.0v3.1 | 3.3% | 2022-10-25 | |
| CVE-2022-33189 | abode systems iota All-In-One Security Kit XCMD setAlexa functionality OS command injection | 9.8v3.1 | 3.3% | 2022-10-25 | |
| CVE-2022-33185 | Brocade Fabric OS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-10-25 | Fix |
| CVE-2022-33184 | Brocade Fabric OS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-10-25 | Fix |
| CVE-2022-33183 | Brocade Fabric OS out-of-bounds write | 8.8v3.1 | 1.5% | 2022-10-25 | Fix |
| CVE-2022-33182 | Brocade Fabric OS privilege escalation | 7.8v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-33181 | Brocade Fabric OS An information disclosure | 5.5v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-33180 | Brocade Fabric OS CLI vulnerability | 5.5v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-33179 | Brocade Fabric OS privilege escalation | 8.8v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-33178 | Brocade Fabric OS arbitrary code execution | 7.2v3.1 | 1.4% | 2022-10-25 | Fix |
| CVE-2022-33150 | Robustel R1510 js_package install functionality OS command injection | 9.8v3.1 | 3.4% | 2022-10-25 | |
| CVE-2022-32775 | abode systems iota All-In-One Security Kit integer overflow | 8.8NVD v3.1 | 1.5% | 2022-10-25 | |
| CVE-2022-32773 | abode systems iota All-In-One Security Kit XCMD doDebug functionality OS command injection | 9.8v3.1 | 3.3% | 2022-10-25 | |
| CVE-2022-32765 | Robustel R1510 sysupgrade command injection functionality OS command injection | 9.8v3.1 | 3.5% | 2022-10-25 | |
| CVE-2022-32760 | abode systems iota All-In-One Security Kit XCMD doDebug functionality denial of service | 7.5v3.1 | 0.9% | 2022-10-25 | |
| CVE-2022-32586 | abode systems iota All-In-One Security Kit OS command injection | 8.8v3.1 | 3.9% | 2022-10-25 | |
| CVE-2022-32574 | abode systems iota All-In-One Security Kit double free | 6.5NVD v3.1 | 1.6% | 2022-10-25 | |
| CVE-2022-32454 | abode systems iota All-In-One Security Kit XCMD setIPCam functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2022-10-25 | |
| CVE-2022-31468 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-25 | |
| CVE-2022-30603 | abode systems iota All-In-One Security Kit OS command injection | 8.8NVD v3.1 | 5.6% | 2022-10-25 | |
| CVE-2022-30541 | abode systems iota All-In-One Security Kit XCMD setUPnP functionality OS command injection | 9.8v3.1 | 3.3% | 2022-10-25 | |
| CVE-2022-29889 | abode systems iota All-In-One Security Kit telnet functionality hard-coded credentials | 9.8v3.1 | 1.2% | 2022-10-25 | |
| CVE-2022-29851 | Open-Xchange OX App Suite OS command injection | 9.8v3.1 | 3.6% | 2022-10-25 | |
| CVE-2022-29520 | abode systems iota All-In-One Security Kit console_main_loop :sys functionality OS command injection | 9.8v3.1 | 2.9% | 2022-10-25 | |
| CVE-2022-29477 | abode systems iota All-In-One Security Kit authentication bypass | 9.8v3.1 | 1.3% | 2022-10-25 | |
| CVE-2022-29475 | abode systems iota All-In-One Security Kit XFINDER functionality information disclosure | 8.1v3.1 | 0.6% | 2022-10-25 | |
| CVE-2022-29472 | abode systems iota All-In-One Security Kit OS command injection | 9.8v3.1 | 4.5% | 2022-10-25 | |
| CVE-2022-28170 | Brocade Fabric OS insecure storage of sensitive information | 6.5v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-28169 | Brocade Fabric OS improper privilege management | 8.8v3.1 | 0.8% | 2022-10-25 | Fix |
| CVE-2022-27913 | Joomla! CMS core RXSS through reflection of user input in headings | 6.1NVD v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-27912 | Joomla! CMS core Debug Mode leaks full request payloads including passwords | 5.3v3.1 | 0.5% | 2022-10-25 | Fix |
| CVE-2022-27805 | abode systems iota All-In-One Security Kit GHOME control functionality authentication bypass | 9.8v3.1 | 1.4% | 2022-10-25 | |
| CVE-2022-27804 | abode systems iota All-In-One Security Kit OS command injection | 9.8v3.1 | 3.7% | 2022-10-25 | |
| CVE-2022-27623 | Synology DiskStation Manager (DSM) iSCSI management functionality missing authentication | 7.4CNA v3.1 | 0.8% | 2022-10-25 | Fix |
| CVE-2022-27622 | Synology DiskStation Manager (DSM) Package Center functionality server-side request forgery | 4.1CNA v3.1 | 0.7% | 2022-10-25 | Fix |
| CVE-2022-3644 | Plaintext storage of tokens in pulp_ansible | 5.5v3.1 | 0.3% | 2022-10-25 | Fix |
| CVE-2022-3395 | WP All Export Pro WordPress plugin authenticated SQLi | 8.8NVD v3.1 | 1.0% | 2022-10-25 | Fix |
| CVE-2022-3394 | WP All Export Pro WordPress plugin authenticated code injection | 7.2NVD v3.1 | 1.5% | 2022-10-25 | Fix |
| CVE-2022-3393 | Post to CSV by BestWebSoft WordPress plugin Author+ CSV injection | 9.8NVD v3.1 | 1.5% | 2022-10-25 | Fix |
| CVE-2022-3392 | WP Humans.txt WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-10-25 | |
| CVE-2022-3391 | Retain Live Chat WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-25 | |
| CVE-2022-3350 | Contact Bank WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-10-25 | |
| CVE-2022-3344 | Linux kernel expected behavior violation | 5.5NVD v3.1 | 0.2% | 2022-10-25 | Fix |
| CVE-2022-3335 | Kadence WooCommerce Email Designer WordPress plugin Admin+ PHP Objection injection | 7.2NVD v3.1 | 1.3% | 2022-10-25 | Fix |
| CVE-2022-3302 | Anti-Spam by CleanTalk WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2022-10-25 | Fix |
| CVE-2022-3300 | Form Maker by 10Web WordPress plugin Admin+ SQLI | 7.2NVD v3.1 | 1.1% | 2022-10-25 | Fix |
| CVE-2022-3247 | Blog2Social WordPress plugin Subscriber+ SSRF | 6.5NVD v3.1 | 0.7% | 2022-10-25 | Fix |
| CVE-2022-3246 | Blog2Social WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 1.2% | 2022-10-25 | Fix |
| CVE-2022-3097 | LBStopAttack WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-2762 | AdminPad WordPress plugin Note update via CSRF | 6.5NVD v3.1 | 0.4% | 2022-10-25 | Fix |
| CVE-2022-43680 | libexpat use-after-free | 7.5NVD v3.1 | 2.5% | 2022-10-24 | Exploit codeFix |
| CVE-2022-43677 | free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders | 5.5v3.1 | 0.7% | 2022-10-24 | |
| CVE-2022-41986 | Internet Initiative Japan IIJ SmartKey Android App ' information disclosure | 7.5v3.1 | 0.7% | 2022-10-24 | Fix |
| CVE-2022-41799 | WESEEK GROWI v5 series and v4 series improper access control | 6.5v3.1 | 0.8% | 2022-10-24 | Fix |
| CVE-2022-41797 | ByteDance Lemon8 App handler for custom URL scheme vulnerability improper authorization | 6.5v3.1 | 0.9% | 2022-10-24 | Fix |
| CVE-2022-41796 | Sony Content Transfer installer untrusted search path | 7.8v3.1 | 0.2% | 2022-10-24 | Fix |
| CVE-2022-40984 | Yokogawa Test & Measurement WTViewerE series stack-based buffer overflow | 9.8v3.1 | 0.8% | 2022-10-24 | Fix |
| CVE-2022-40690 | BookStack cross-site scripting | 5.4v3.1 | 0.7% | 2022-10-24 | Fix |
| CVE-2022-39314 | getkirby kirby user enumeration in the code-based login and password reset forms | 4.8CNA v3.0 | 0.4% | 2022-10-24 | Fix |
| CVE-2022-39313 | parse-server crashes when receiving file download request with invalid byte range | 7.5CNA v3.1 | 0.7% | 2022-10-24 | Fix |
| CVE-2022-39305 | Gin-vue-admin vulnerable to unrestricted upload of file with dangerous type | 9.8CNA v3.1 | 1.2% | 2022-10-24 | |
| CVE-2022-38117 | Juiker app hard-coded credentials | 6.1v3.1 | 0.3% | 2022-10-24 | |
| CVE-2022-36368 | IPFire web user interface stored cross-site scripting | 4.8v3.1 | 0.7% | 2022-10-24 | Fix |
| CVE-2022-3676 | The Eclipse Foundation Eclipse OpenJ9 type confusion | 6.5v3.1 | 0.6% | 2022-10-24 | Fix |
| CVE-2022-39272 | Flux2 vulnerable to denial of service due to Improper use of metav1.Duration | 5.0CNA v3.1 | 0.7% | 2022-10-22 | Fix |
| CVE-2022-43400 | Siemens Siveillance Video Mobile Server V2022 R2 weak authentication | 9.8v3.1 | 0.9% | 2022-10-21 | Fix |
| CVE-2022-42944 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42943 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42942 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42941 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42940 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42939 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42938 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42937 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42936 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42935 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42934 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42933 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-42206 | PHPGurukul Hospital Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-21 | |
| CVE-2022-42205 | PHPGurukul Hospital Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-21 | |
| CVE-2022-42189 | emlog unrestricted file upload | 7.2v3.1 | 1.6% | 2022-10-21 | |
| CVE-2022-41638 | Pop-Up Chop Chop WordPress plugin Auth. stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-10-21 | |
| CVE-2022-41575 | gradle Enterprise insufficiently protected credentials | 7.5v3.1 | 0.8% | 2022-10-21 | Fix |
| CVE-2022-41310 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-41309 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-40311 | Analytics Cat WordPress plugin authenticated stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-39259 | skylot jadx jadx-gui subject to denial of service via Swing HTML rendering | 3.3CNA v3.1 | 0.3% | 2022-10-21 | Fix |
| CVE-2022-38104 | Accordions WordPress plugin Auth. WordPress options Change vulnerability | 7.2v3.1 | 1.0% | 2022-10-21 | Fix |
| CVE-2022-37454 | SHA3 buffer overflow in sponge queue functions | 9.8NVD v3.1 | 7.4% | 2022-10-21 | Fix |
| CVE-2022-36122 | Automox incorrect permission assignment | 7.8v3.1 | 0.2% | 2022-10-21 | Fix |
| CVE-2022-34439 | Dell PowerScale OneFS resource exhaustion | 5.3CNA v3.1 | 0.9% | 2022-10-21 | Fix |
| CVE-2022-34438 | Dell PowerScale OneFS improper privilege management | 6.7CNA v3.1 | 0.2% | 2022-10-21 | Fix |
| CVE-2022-34437 | Dell PowerScale OneFS OS command injection | 6.7CNA v3.1 | 0.5% | 2022-10-21 | Fix |
| CVE-2022-31239 | Dell PowerScale OneFS sensitive information in log files | 6.7CNA v3.1 | 0.2% | 2022-10-21 | Fix |
| CVE-2022-27494 | Aethon TUG Home Base Server cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-10-21 | Fix |
| CVE-2022-26870 | Dell PowerStore authentication bypass | 7.0CNA v3.1 | 0.7% | 2022-10-21 | Fix |
| CVE-2022-26423 | Aethon TUG Home Base Server missing authorization | 7.5v3.1 | 0.7% | 2022-10-21 | Fix |
| CVE-2022-23462 | Stack buffer overflow in iowow | 7.5NVD v3.1 | 0.7% | 2022-10-21 | |
| CVE-2022-3649 | Linux Kernel BPF inode.c nilfs_new_inode use-after-free | 7.0NVD v3.1 | 1.1% | 2022-10-21 | Fix |
| CVE-2022-3647 | Redis crash Report debug.c sigsegvHandler denial of service | 3.3v3.1 | 0.6% | 2022-10-21 | Fix |
| CVE-2022-3646 | Linux Kernel BPF segment.c nilfs_attach_log_writer memory leak | 4.3NVD v3.1 | 1.1% | 2022-10-21 | Fix |
| CVE-2022-3640 | Linux Kernel Bluetooth l2cap_core.c l2cap_conn_del use-after-free | 8.8v3.1 | 1.1% | 2022-10-21 | Fix |
| CVE-2022-3639 | GitLab denial of service | 4.3CNA v3.1 | 0.9% | 2022-10-21 | Fix |
| CVE-2022-3637 | Linux Kernel BlueZ jlink.c jlink_init denial of service | 5.5v3.1 | 0.3% | 2022-10-21 | |
| CVE-2022-3636 | Linux Kernel Ethernet mtk_ppe.c __mtk_ppe_check_skb use-after-free | 7.8v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-3635 | Linux Kernel IPsec idt77252.c tst_timer use-after-free | 7.0NVD v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-3633 | Linux Kernel transport.c j1939_session_destroy memory leak | 3.3NVD v3.1 | 0.3% | 2022-10-21 | Fix |
| CVE-2022-3630 | Linux Kernel IPsec cookie.c memory leak | 5.5v3.1 | 0.3% | 2022-10-21 | Fix |
| CVE-2022-3629 | Linux Kernel af_vsock.c vsock_connect memory leak | 3.3NVD v3.1 | 0.4% | 2022-10-21 | Fix |
| CVE-2022-3627 | libtiff out-of-bounds write | 5.5CNA v3.1 | 1.1% | 2022-10-21 | Fix |
| CVE-2022-3626 | libtiff out-of-bounds write | 5.5CNA v3.1 | 1.0% | 2022-10-21 | Fix |
| CVE-2022-3625 | Linux Kernel IPsec devlink.c devlink_param_get use-after-free | 7.8NVD v3.1 | 0.3% | 2022-10-21 | Fix |
| CVE-2022-3624 | Linux Kernel IPsec bond_alb.c rlb_arp_xmit memory leak | 3.3v3.1 | 0.3% | 2022-10-21 | |
| CVE-2022-3599 | libtiff out-of-bounds read | 5.5CNA v3.1 | 1.0% | 2022-10-21 | Fix |
| CVE-2022-3598 | libtiff out-of-bounds write | 5.5CNA v3.1 | 1.0% | 2022-10-21 | Fix |
| CVE-2022-3597 | libtiff out-of-bounds write | 5.5CNA v3.1 | 1.0% | 2022-10-21 | Fix |
| CVE-2022-3570 | libtiff out-of-bounds write | 7.7CNA v3.1 | 0.5% | 2022-10-21 | Fix |
| CVE-2022-3203 | ORing net IAP-420(+) hidden functionality | 9.8v3.1 | 0.9% | 2022-10-21 | |
| CVE-2022-1070 | Aethon TUG Home Base Server CHANNEL ACCESSIBLE BY NON-ENDPOINT | 8.1v3.1 | 0.6% | 2022-10-21 | Fix |
| CVE-2022-1066 | Aethon TUG Home Base Server missing authorization | 8.2v3.1 | 0.6% | 2022-10-21 | Fix |
| CVE-2022-1059 | Aethon TUG Home Base Server cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-10-21 | Fix |
| CVE-2022-42344 | Magento IDOR leads to account takeover | 8.8CNA v3.1 | 1.2% | 2022-10-20 | Fix |
| CVE-2022-42233 | Tenda 11N improper authentication | 9.8v3.1 | 42.7% | 2022-10-20 | Nuclei |
| CVE-2022-42201 | Simple Exam Reviewer Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-10-20 | |
| CVE-2022-42200 | Simple Exam Reviewer Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-20 | |
| CVE-2022-42199 | Simple Exam Reviewer Management System cross-site request forgery | 8.8v3.1 | 0.5% | 2022-10-20 | |
| CVE-2022-42198 | Simple Exam Reviewer Management System unrestricted file upload | 8.8v3.1 | 1.0% | 2022-10-20 | |
| CVE-2022-42197 | Simple Exam Reviewer Management System forced browsing | 6.5v3.1 | 0.6% | 2022-10-20 | |
| CVE-2022-42176 | Pctechsoft Pcsecure hard-coded credentials | 7.8v3.1 | 0.3% | 2022-10-20 | Exploit code |
| CVE-2022-42021 | Best Student Result Management System SQL injection | 9.8v3.1 | 0.9% | 2022-10-20 | |
| CVE-2022-41358 | Garage Management System stored cross-site scripting | 5.4v3.1 | 3.1% | 2022-10-20 | Exploit code |
| CVE-2022-40084 | OpenCRX vulnerable to password enumeration via error messages in password reset | 5.3v3.1 | 0.7% | 2022-10-20 | Fix |
| CVE-2022-39823 | Softing OPC use-after-free | 7.5v3.1 | 0.7% | 2022-10-20 | Fix |
| CVE-2022-38108 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 65.9% | 2022-10-20 | Exploit codeFix |
| CVE-2022-37598 | Uglifyjs function DEFNODE in ast.js in mishoo prototype pollution | 9.8v3.1 | 1.4% | 2022-10-20 | Fix |
| CVE-2022-37453 | Softing OPC out-of-bounds write | 7.5v3.1 | 0.8% | 2022-10-20 | Fix |
| CVE-2022-37298 | Shinken Solutions Shinken Monitoring vulnerable to Incorrect Access Control | 9.8v3.1 | 2.2% | 2022-10-20 | Exploit code |
| CVE-2022-36966 | Insecure direct object reference vulnerability: Orion Platform | 5.4CNA v3.1 | 0.4% | 2022-10-20 | Fix |
| CVE-2022-36958 | SolarWinds Platform deserialization of untrusted data | 8.8CNA v3.1 | 81.5% | 2022-10-20 | Fix |
| CVE-2022-36957 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 14.7% | 2022-10-20 | Fix |
| CVE-2022-31366 | EVE-NG apiImportLabs function in api_labs.php arbitrary file upload | 7.2v3.1 | 1.2% | 2022-10-20 | |
| CVE-2022-27626 | Synology DiskStation Manager (DSM) race condition | 10.0CNA v3.1 | 1.1% | 2022-10-20 | Fix |
| CVE-2022-27625 | Synology DiskStation Manager (DSM) arbitrary command execution | 10.0CNA v3.1 | 1.6% | 2022-10-20 | Fix |
| CVE-2022-27624 | Synology DiskStation Manager (DSM) arbitrary command execution | 10.0CNA v3.1 | 1.6% | 2022-10-20 | Fix |
| CVE-2022-26954 | nopCommerce Multiple open redirect | 6.1v3.1 | 0.7% | 2022-10-20 | Fix |
| CVE-2022-3623 | Linux Kernel BPF gup.c follow_page_pte race condition | 7.5v3.1 | 0.8% | 2022-10-20 | Fix |
| CVE-2022-3621 | Linux Kernel nilfs2 inode.c nilfs_bmap_lookup_at_level null pointer dereference | 6.5NVD v3.1 | 1.7% | 2022-10-20 | Fix |
| CVE-2022-3620 | Exim DMARC dmarc.c dmarc_dns_lookup use-after-free | 9.8v3.1 | 0.8% | 2022-10-20 | Fix |
| CVE-2022-3619 | Linux Kernel Bluetooth l2cap_core.c l2cap_recv_acldata memory leak | 4.3v3.1 | 0.6% | 2022-10-20 | Fix |
| CVE-2022-3577 | Linux kernel Kid-friendly Wired Controller driver out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2022-10-20 | Fix |
| CVE-2022-3576 | Synology DiskStation Manager (DSM) out-of-bounds read | 5.3CNA v3.1 | 1.0% | 2022-10-20 | Fix |
| CVE-2022-3327 | Missing authentication for critical function in ikus060/rdiffweb | 9.8v3.1 | 0.8% | 2022-10-20 | Fix |
| CVE-2022-2069 | Siemens JT2Go datalogics APDFL library heap-based buffer overflow | 7.8v3.1 | 0.4% | 2022-10-20 | Fix |
| CVE-2022-43435 | Content-Security-Policy protection for user content can be disabled in Jenkins 360 FireLine Plugin | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43434 | Jenkins NeuVector vulnerability Scanner Plugin protection mechanism failure | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43433 | Content-Security-Policy protection for user content disabled by Jenkins ScreenRecorder Plugin | 4.3v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43432 | Content-Security-Policy protection for user content disabled by Jenkins XFramium Builder Plugin | 4.3v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-43431 | Jenkins Compuware Strobe Measurement Plugin missing authorization | 4.3v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43430 | XXE vulnerability in Jenkins Compuware Topaz For Total Test Plugin | 7.5v3.1 | 0.8% | 2022-10-19 | Fix |
| CVE-2022-43429 | Jenkins Compuware Topaz For Total Test Plugin vulnerable to protection mechanism failure | 7.5v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-43428 | Agent-to-controller security bypass vulnerabilities in Jenkins Compuware Topaz For Total Test Plugin | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43427 | Jenkins Compuware Topaz for Total Test Plugin missing authorization | 4.3v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43426 | AWS secrets displayed without masking by Jenkins S3 Explorer Plugin | 5.3v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43425 | Stored XSS vulnerability in Jenkins Custom Checkbox Parameter Plugin | 5.4v3.1 | 0.8% | 2022-10-19 | Fix |
| CVE-2022-43424 | Agent-to-controller security bypass vulnerability in Jenkins Compuware Xpediter Code Coverage Plugin | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43423 | Jenkins Compuware Source Code Download for Endevor externally controlled resource reference | 5.3v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-43422 | Agent-to-controller security bypass vulnerability in Jenkins Compuware Topaz Utilities Plugin | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43421 | Jenkins Tuleap Git Branch Source Plugin missing authorization | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43420 | Stored XSS vulnerability in Jenkins Contrast Continuous Application Security Plugin | 5.4v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43419 | API keys stored in plain text by Jenkins Katalon Plugin | 6.5v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43418 | CSRF vulnerability in Jenkins Katalon Plugin allows capturing credentials | 4.3v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-43417 | Missing permission checks in Jenkins Katalon Plugin allow capturing credentials | 4.3v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-43416 | Jenkins Katalon Plugin vulnerable to protection mechanism failure | 8.8v3.1 | 1.2% | 2022-10-19 | Fix |
| CVE-2022-43415 | XXE vulnerability in Jenkins REPO Plugin | 7.5v3.1 | 0.9% | 2022-10-19 | Fix |
| CVE-2022-43414 | Jenkins NUnit Plugin vulnerable to protection mechanism failure | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43413 | Jenkins Job Import Plugin missing authorization | 4.3v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-43412 | Non-constant time webhook token comparison in Jenkins Generic Webhook Trigger Plugin | 5.3v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43411 | Non-constant time webhook token comparison in Jenkins GitLab Plugin | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43410 | Webhook endpoint discloses job names to unauthorized users in Jenkins Mercurial Plugin | 5.3v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43409 | Stored XSS vulnerability in Jenkins Pipeline: Supporting APIs Plugin | 5.4v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-43408 | Jenkins Pipeline: Stage View Plugin allows CSRF protection bypass of any target URL in Jenkins | 6.5v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43407 | CSRF protection for any URL can be bypassed in Jenkins Pipeline: Input Step Plugin | 8.8v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-43406 | Sandbox bypass vulnerability in Jenkins Pipeline: Deprecated Groovy Libraries Plugin | 9.9v3.1 | 1.2% | 2022-10-19 | Fix |
| CVE-2022-43405 | Jenkins Pipeline: Groovy Libraries Plugin sandbox escape | 9.9v3.1 | 1.3% | 2022-10-19 | Fix |
| CVE-2022-43404 | Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin | 9.9v3.1 | 1.2% | 2022-10-19 | Fix |
| CVE-2022-43403 | Jenkins Script Security Plugin sandbox bypass | 9.9v3.1 | 1.5% | 2022-10-19 | Fix |
| CVE-2022-43402 | Jenkins Pipeline: Groovy Plugin allows sandbox protection bypass and arbitrary code execution | 9.9v3.1 | 1.3% | 2022-10-19 | Fix |
| CVE-2022-43401 | Sandbox bypass vulnerabilities in Jenkins Script Security Plugin and in Pipeline: Groovy Plugin | 9.9v3.1 | 1.3% | 2022-10-19 | Fix |
| CVE-2022-43185 | Rukovoditel Configuration/Holidays module stored cross-site scripting | 5.4v3.1 | 1.0% | 2022-10-19 | Nuclei |
| CVE-2022-43184 | D-Link DIR-878 OS command injection | 9.8v3.1 | 1.8% | 2022-10-19 | Fix |
| CVE-2022-43045 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-43044 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-43043 | gpac out-of-bounds read | 5.5v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-43042 | gpac out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-43040 | gpac out-of-bounds write | 7.8v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-43039 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-43038 | Axiosys Bento4 out-of-bounds write | 6.5v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-43037 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-43035 | Axiosys Bento4 out-of-bounds write | 6.5v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-43034 | Axiosys Bento4 out-of-bounds write | 6.5v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-43033 | Axiosys Bento4 use-after-free | 6.5v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-43032 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-43029 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43028 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43027 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43026 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43025 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43024 | Tenda TX3 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43023 | OpenCATS SQL injection | 6.5v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43022 | OpenCATS SQL injection | 6.5v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43021 | OpenCATS SQL injection | 6.5v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43020 | OpenCATS SQL injection | 6.5v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43019 | OpenCATS deserialization of untrusted data | 9.8v3.1 | 2.0% | 2022-10-19 | |
| CVE-2022-43018 | OpenCATS cross-site scripting | 6.1v3.1 | 1.4% | 2022-10-19 | Nuclei |
| CVE-2022-43017 | OpenCATS cross-site scripting | 6.1v3.1 | 1.4% | 2022-10-19 | Nuclei |
| CVE-2022-43016 | OpenCATS cross-site scripting | 6.1v3.1 | 1.4% | 2022-10-19 | Nuclei |
| CVE-2022-43015 | OpenCATS cross-site scripting | 6.1v3.1 | 1.4% | 2022-10-19 | Nuclei |
| CVE-2022-43014 | OpenCATS cross-site scripting | 6.1v3.1 | 1.4% | 2022-10-19 | Nuclei |
| CVE-2022-42467 | Apache Isis h2 webconsole should nevertheless be disabled by default | 5.3v3.1 | 1.3% | 2022-10-19 | Fix |
| CVE-2022-42466 | Apache Isis XSS vulnerability, eg for String properties | 6.1v3.1 | 1.3% | 2022-10-19 | Fix |
| CVE-2022-42227 | Jsonlint C++ out-of-bounds write | 7.5v3.1 | 1.0% | 2022-10-19 | |
| CVE-2022-41983 | F5 BIG-IP cleartext transmission of sensitive information | 3.7CNA v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-41836 | F5 BIG-IP Advanced WAF and ASM bd process denial of service | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41835 | F5OS file permissions privilege escalation | 7.3CNA v3.1 | 0.2% | 2022-10-19 | Fix |
| CVE-2022-41833 | F5 BIG-IP iRule HTTP::collect command denial of service | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41832 | F5 BIG-IP SIP profile memory leak | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41813 | BIG-IP PEM and AFM TMUI, TMSH and iControl vulnerability | 6.5CNA v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-41806 | F5 BIG-IP AFM NAT64 policy denial of service | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41787 | F5 BIG-IP DNS DNS Express null pointer dereference | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41780 | F5OS CLI path traversal | 5.5CNA v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-41770 | F5 BIG-IP iControl REST denial of service | 6.5CNA v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-41743 | F5 NGINX Plus hls module out-of-bounds write | 7.0CNA v3.1 | 0.2% | 2022-10-19 | Fix |
| CVE-2022-41742 | F5 NGINX mp4 module out-of-bounds write | 7.1CNA v3.1 | 1.1% | 2022-10-19 | Fix |
| CVE-2022-41741 | F5 NGINX mp4 module out-of-bounds write | 7.0CNA v3.1 | 0.8% | 2022-10-19 | Exploit codeFix |
| CVE-2022-41709 | Markdownify subject to remote code execution via malicious markdown file | 7.8v3.1 | 0.4% | 2022-10-19 | |
| CVE-2022-41708 | relatedcode/Messenger improper preservation of permissions | 4.3v3.1 | 0.5% | 2022-10-19 | |
| CVE-2022-41707 | relatedcode/Messenger information disclosure | 6.5v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-41694 | F5 BIG-IP and BIG-IQ mcpd vulnerability | 4.9CNA v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-41691 | F5 BIG-IP Advanced WAF and ASM bd process denial of service | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41624 | F5 BIG-IP iRules memory leak | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-41617 | F5 BIG-IP Advanced WAF and ASM iControl REST interface remote code execution | 7.2CNA v3.1 | 1.2% | 2022-10-19 | Fix |
| CVE-2022-41415 | Acer Altos W2000h-w570h F4 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-19 | |
| CVE-2022-40885 | Axiosys Bento4 resource exhaustion | 5.5v3.1 | 0.2% | 2022-10-19 | |
| CVE-2022-40884 | Axiosys Bento4 memory leak | 5.5v3.1 | 0.3% | 2022-10-19 | |
| CVE-2022-40798 | OcoMon account takeover | 7.5v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-39301 | sra-admin is vulnerable to storage cross-site scripting (XSS) via unrestricted file upload | 8.2CNA v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-39267 | Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups | 8.8CNA v3.1 | 0.8% | 2022-10-19 | Fix |
| CVE-2022-39260 | Git vulnerable to remote code execution via heap overflow in `git shell` | 8.5CNA v3.1 | 3.3% | 2022-10-19 | Fix |
| CVE-2022-39253 | Git subject to exposure of sensitive information via local clone of symbolic links | 5.5CNA v3.1 | 1.3% | 2022-10-19 | Exploit codeFix |
| CVE-2022-39233 | Tuleap subject to missing authorization allowing for branch prefix modification | 4.3CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-38901 | Liferay DXP cross-site scripting | 5.4v3.1 | 0.6% | 2022-10-19 | |
| CVE-2022-38107 | SolarWinds SQL Sentry sensitive data disclosure | 5.3CNA v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-36795 | BIG-IP software SYN cookies vulnerability | 5.3CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-35860 | Corsair K63 missing encryption | 6.8v3.1 | 0.2% | 2022-10-19 | Fix |
| CVE-2022-33217 | Buffer copy without checking size of input in Qualcomm IPC | 7.8CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-33214 | Qualcomm Snapdragon time-of-check time-of-use race condition in Display | 8.4CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-33210 | Qualcomm Snapdragon use of out-of-range pointer offset in Automotive Multimedia | 8.4CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-33077 | nopCommerce An improper access control | 7.5v3.1 | 0.7% | 2022-10-19 | |
| CVE-2022-31684 | Invalid HTTP requests in Reactor Netty HTTP Server may reveal access tokens | 4.3v3.1 | 0.6% | 2022-10-19 | Fix |
| CVE-2022-25750 | Qualcomm Snapdragon double free in BTHOST | 8.4CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-25749 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-25748 | Qualcomm Snapdragon integer overflow to buffer overflow in WLAN | 9.8CNA v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-25736 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-25723 | Qualcomm Snapdragon use-after-free in Multimedia Frameworks | 8.4CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-25720 | Qualcomm Snapdragon improper validation of array index in WLAN | 9.8CNA v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-25719 | Qualcomm Snapdragon buffer over-read in WLAN | 8.2CNA v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-25718 | Qualcomm Snapdragon unchecked return value | 9.1CNA v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-25687 | Qualcomm Snapdragon buffer copy without checking size of input in Video | 7.3CNA v3.1 | 0.3% | 2022-10-19 | Fix |
| CVE-2022-25666 | Qualcomm Snapdragon use-after-free in DSP services | 6.7CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-25665 | Qualcomm Snapdragon buffer over-read in Kernel | 6.8CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-25664 | Qualcomm Snapdragon information exposure in Graphics Linux | 6.2CNA v3.1 | 0.2% | 2022-10-19 | Fix |
| CVE-2022-25663 | Qualcomm Snapdragon buffer over-read in WLAN | 5.5CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-25662 | Qualcomm Snapdragon untrusted pointer dereference in Video | 5.3CNA v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-25661 | Qualcomm Snapdragon untrusted pointer dereference in Kernel | 8.4CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-25660 | Qualcomm Snapdragon double free in Kernel | 7.8CNA v3.1 | 0.1% | 2022-10-19 | Fix |
| CVE-2022-23734 | GitHub Enterprise Server SVNBridge deserialization of untrusted data | 8.8v3.1 | 2.0% | 2022-10-19 | Fix |
| CVE-2022-23241 | Clustered Data ONTAP improper access control | 8.1v3.1 | 0.7% | 2022-10-19 | Fix |
| CVE-2022-22078 | Qualcomm Snapdragon integer overflow or wraparound issues in BOOT | 4.6CNA v3.1 | 0.2% | 2022-10-19 | Fix |
| CVE-2022-22077 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.1% | 2022-10-19 | Exploit codeFix |
| CVE-2022-3608 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 8.4v3.1 | 1.0% | 2022-10-19 | Fix |
| CVE-2022-3607 | Failure to sanitize special elements into a different plane in OctoPrint/OctoPrint | 6.0v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-3606 | Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference | 5.5NVD v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-3586 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-2805 | ovirt-engine cleartext storage of sensitive information | 6.5v3.1 | 0.4% | 2022-10-19 | Fix |
| CVE-2022-1738 | Fuji Electric D300win out-of-bounds read | 7.5v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-1523 | Fuji Electric D300win write-what-where condition | 9.1v3.1 | 0.5% | 2022-10-19 | Fix |
| CVE-2022-1414 | 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks. | 8.8v3.1 | 0.8% | 2022-10-19 | |
| CVE-2022-43260 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-10-18 | |
| CVE-2022-43259 | Tenda AC15 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-10-18 | |
| CVE-2022-42218 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-18 | |
| CVE-2022-42202 | TP-Link TL-WR841N cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-18 | |
| CVE-2022-42188 | LavaLite vulnerable to arbitrary file read via directory traversal | 7.5v3.1 | 1.0% | 2022-10-18 | |
| CVE-2022-42117 | Liferay portal and Liferay DXP vulnerable to XSS in the Frontend Taglib module | 6.1v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-42116 | Liferay DXP Frontend Editor module's integration cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-42115 | Liferay Portal vulnerable to XSS in the object module | 5.4v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-42114 | Liferay portal and Liferay DXP vulnerable to XSS via the Role module | 5.4v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-42113 | Liferay Portal and Liferay DXP vulnerable to XSS via the Document library module | 6.1v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-42112 | Liferay portal and Liferay DXP vulnerable to XSS via the Portal Search module | 5.4v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-41547 | Opensecurity Mobile Security Framework remote file inclusion | 7.5v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-41544 | GetSimpleCMS code injection | 9.8v3.1 | 14.3% | 2022-10-18 | Exploit code |
| CVE-2022-41541 | TP-Link AX10 authentication bypass by replay | 8.1v3.1 | 1.2% | 2022-10-18 | Fix |
| CVE-2022-41540 | TP-Link AX10 hard-coded credentials | 5.9v3.1 | 1.2% | 2022-10-18 | Exploit codeFix |
| CVE-2022-41537 | Online Tours and Travels Management System profile.php unrestricted file upload | 7.2v3.1 | 1.1% | 2022-10-18 | |
| CVE-2022-41504 | Billing System component /php_action/editProductImage.php arbitrary file upload | 7.2v3.1 | 1.1% | 2022-10-18 | |
| CVE-2022-41500 | EyouCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2022-10-18 | |
| CVE-2022-41479 | DevExpress Asp.net Web Forms Controls insecure direct object reference | 7.5v3.1 | 1.2% | 2022-10-18 | |
| CVE-2022-40889 | PHPOK deserialization of untrusted data | 9.8v3.1 | 1.0% | 2022-10-18 | |
| CVE-2022-40684 | Fortinet Multiple Products authentication bypass | 9.8CNA v3.1 | 100.0% | 2022-10-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-39428 | Oracle Web Applications Desktop Integrator upload component takeover | 9.8CNA v3.1 | 36.5% | 2022-10-18 | Fix |
| CVE-2022-39427 | Oracle VM VirtualBox Core component takeover | 8.8CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-39426 | Oracle VM VirtualBox Core component takeover | 8.1CNA v3.1 | 1.2% | 2022-10-18 | Fix |
| CVE-2022-39425 | Oracle VM VirtualBox Core component takeover | 8.1CNA v3.1 | 1.8% | 2022-10-18 | Exploit codeFix |
| CVE-2022-39424 | Oracle VM VirtualBox Core component takeover | 8.1CNA v3.1 | 1.5% | 2022-10-18 | Fix |
| CVE-2022-39423 | Oracle VM VirtualBox Core component unauthorized data access | 6.0CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-39422 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-39421 | Oracle VM VirtualBox Core component takeover | 7.3CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-39420 | Oracle Supply Chain Transportation Management unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-39419 | Oracle Database Java VM component information disclosure | 4.3CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-39417 | Oracle Solaris Filesystem component denial of service | 5.5CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-39412 | Oracle Access Manager Admin console component unauthorized data access | 7.5CNA v3.1 | 1.9% | 2022-10-18 | Fix |
| CVE-2022-39411 | Oracle Supply Chain Transportation Management unauthorized data access | 4.9CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-39410 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-39409 | Oracle Supply Chain Transportation Management denial of service | 2.7CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-39408 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-39407 | Oracle PeopleSoft Enterprise PeopleTools Security component unauthorized data access | 5.5CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-39406 | Oracle PeopleSoft Enterprise Common Components Approval Framework component unauthorized data access | 8.1CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-39405 | Oracle Access Manager Authentication Engine component unauthorized data modification | 5.3CNA v3.1 | 1.1% | 2022-10-18 | Fix |
| CVE-2022-39404 | Oracle MySQL Installer General component unauthorized data modification | 4.2CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-39403 | Oracle MySQL Shell Core client component unauthorized data modification | 3.9CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-39402 | Oracle MySQL Shell Core client component information disclosure | 4.3CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-39401 | Oracle Solaris Kernel component denial of service | 5.5CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-39400 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-39399 | Oracle Java SE, Oracle GraalVM Enterprise Edition unauthorized data modification | 3.7CNA v3.1 | 1.6% | 2022-10-18 | Fix |
| CVE-2022-39198 | Apache Dubbo Hession deserialization vulnerability Gadgets Bypass | 9.8v3.1 | 2.6% | 2022-10-18 | Fix |
| CVE-2022-39058 | CHANGING Information Technology Inc. RAVA certificate validation system path traversal | 7.5v3.1 | 1.8% | 2022-10-18 | |
| CVE-2022-39057 | CHANGING Information Technology Inc. RAVA certificate validation system command injection | 7.2CNA v3.1 | 0.8% | 2022-10-18 | |
| CVE-2022-39056 | CHANGING Information Technology Inc. RAVA certificate validation system SQL injection | 9.8CNA v3.1 | 0.8% | 2022-10-18 | |
| CVE-2022-39055 | CHANGING Information Technology Inc. RAVA certificate validation system server-side request forgery | 5.3CNA v3.1 | 0.5% | 2022-10-18 | |
| CVE-2022-36439 | ASUS System Control Interface incorrect default permissions | 6.0v3.1 | 0.2% | 2022-10-18 | |
| CVE-2022-36438 | ASUS System Control Interface incorrect default permissions | 7.8v3.1 | 0.2% | 2022-10-18 | |
| CVE-2022-35846 | Fortinet FortiTester missing brute-force protection | 8.1CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-35844 | Fortinet FortiTester OS command injection | 6.7CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-33874 | Fortinet FortiTester OS command injection | 9.8CNA v3.1 | 3.0% | 2022-10-18 | Fix |
| CVE-2022-33873 | Fortinet FortiTester OS command injection | 6.8CNA v3.1 | 2.6% | 2022-10-18 | Fix |
| CVE-2022-33872 | Fortinet FortiTester OS command injection | 9.8CNA v3.1 | 3.0% | 2022-10-18 | Fix |
| CVE-2022-31122 | wireapp wire-server improper authentication | 9.8CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-31037 | OroCommerce vulnerable to cross-site scripting via Shipping rule editing page | 6.9CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-29055 | Fortinet FortiOS, FortiProxy A uninitialized pointer access | 7.5CNA v3.1 | 1.0% | 2022-10-18 | Fix |
| CVE-2022-22251 | Juniper Junos OS cSRX container filesystem privilege escalation | 7.8CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-22250 | Juniper Networks Junos OS Packet Forwarding Engine improper resource control | 6.5CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-22249 | Junos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domain | 6.5CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-22248 | Juniper Networks Junos OS Evolved shell processing incorrect permission assignment | 7.3CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-22247 | Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a denial of service | 7.5CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-22246 | Junos OS: PHP file inclusion vulnerability in J-Web | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Emerging ThreatsFix |
| CVE-2022-22245 | Junos OS: Path traversal vulnerability in J-Web | 4.3CNA v3.1 | 0.7% | 2022-10-18 | Emerging ThreatsFix |
| CVE-2022-22244 | Junos OS: Unauthenticated XPath injection vulnerability in J-Web | 5.3CNA v3.1 | 0.5% | 2022-10-18 | Emerging ThreatsFix |
| CVE-2022-22243 | Junos OS: Xpath injection vulnerability in J-Web | 4.3CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-22242 | Junos OS: Cross-site scripting (XSS) vulnerability in J-Web | 6.1CNA v3.1 | 2.8% | 2022-10-18 | NucleiEmerging ThreatsFix |
| CVE-2022-22241 | Junos OS: Vulnerability in J-Web may allow deserialization without authentication | 8.1CNA v3.1 | 1.2% | 2022-10-18 | Emerging ThreatsFix |
| CVE-2022-22240 | Juniper Junos OS and Junos OS Evolved RPD RIB sharding memory leak | 5.5CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-22239 | Junos OS Evolved: The SSH CLI command always runs as root which can lead to privilege escalation | 8.2CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-22238 | Juniper Networks Junos OS routing protocol daemon improper check for exceptional conditions | 5.3CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-22237 | Juniper Networks Junos OS kernel improper authentication | 6.5CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-22236 | Junos OS: SRX Series and MX Series: When specific valid SIP packets are received the PFE will crash | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22235 | Junos OS: SRX Series: A flowd core will be observed when malformed GPRS traffic is processed | 5.9CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-22234 | Juniper Networks Junos OS denial of service | 5.5CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-22233 | Juniper Networks Junos OS Routing protocol daemon null pointer dereference | 5.5CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-22232 | Juniper Networks Junos OS Packet Forwarding Engine null pointer dereference | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22231 | Juniper Networks Junos OS Packet Forwarding Engine null pointer dereference | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22230 | Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs | 6.5CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-22229 | Paragon Active Assurance: Stored cross-site scripting vulnerability in web administration | 8.4CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22228 | Juniper Networks Junos OS routing protocol daemon improper type validation | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22227 | Juniper Networks Junos OS Evolved Packet Forwarding Engine improper check for exceptional conditions | 5.3CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-22226 | Juniper Junos OS PFE VXLAN packet processing memory leak | 6.5CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-22225 | Juniper Networks Junos OS Routing protocol daemon time-of-check time-of-use race condition | 5.9CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-22224 | Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV | 6.5CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-22223 | Juniper Junos OS QFX10000 Series LAG interfaces improper index validation | 6.5CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-22220 | Juniper Networks Junos OS Routing protocol daemon time-of-check time-of-use race condition | 5.9CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-22219 | Juniper Junos OS and Junos OS Evolved improper handling of unexpected data types | 5.9CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-22218 | Juniper Junos OS SRX Series pkid CMPv2 auto re-enrollment improper check for exceptional conditions | 7.5CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-22211 | Juniper Junos OS Evolved PTX Series FPC SNMP polling resource exhaustion | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22208 | Juniper Networks Junos OS Routing protocol daemon use-after-free | 5.9CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-22201 | Juniper Networks Junos OS packet forwarding engine improper index validation | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-22192 | Junos OS Evolved: PTX Series: An attacker can cause a kernel panic | 7.5CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-21641 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2022-10-18 | Fix |
| CVE-2022-21640 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21639 | Oracle PeopleSoft Enterprise PeopleTools unauthorized data modification | 6.1CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-21638 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2022-10-18 | Fix |
| CVE-2022-21637 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21636 | Oracle E-Business Suite Applications Framework Session Management component unauthorized data access | 6.5CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-21635 | Oracle MySQL Server InnoDB component unauthorized data modification | 6.5CNA v3.1 | 1.1% | 2022-10-18 | Fix |
| CVE-2022-21634 | Oracle GraalVM Enterprise Edition LLVM Interpreter component denial of service | 7.5CNA v3.1 | 1.5% | 2022-10-18 | Fix |
| CVE-2022-21633 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21632 | Oracle MySQL Server Security Privileges component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21631 | Oracle JD Edwards EnterpriseOne Tools Design Tools SEC component unauthorized data modification | 6.1CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-21630 | Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification | 6.1CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-21629 | Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-21628 | Oracle Java SE, Oracle GraalVM Enterprise Edition denial of service | 5.3CNA v3.1 | 2.3% | 2022-10-18 | Fix |
| CVE-2022-21627 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-21626 | Oracle Java SE, Oracle GraalVM Enterprise Edition Security component denial of service | 5.3CNA v3.1 | 1.9% | 2022-10-18 | Fix |
| CVE-2022-21625 | Oracle MySQL Server Optimizer component denial of service | 4.4CNA v3.1 | 1.2% | 2022-10-18 | Fix |
| CVE-2022-21624 | Oracle Java SE, Oracle GraalVM Enterprise Edition JNDI component unauthorized data modification | 3.7CNA v3.1 | 1.6% | 2022-10-18 | Fix |
| CVE-2022-21623 | Oracle Enterprise Manager Base Platform unauthorized data modification | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21622 | Oracle SOA Suite Adapters component unauthorized data modification | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21621 | Oracle VM VirtualBox Core component denial of service | 6.0CNA v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-21620 | Oracle VM VirtualBox Core component takeover | 7.5CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-21619 | Oracle Java SE, Oracle GraalVM Enterprise Edition Security component unauthorized data modification | 3.7CNA v3.1 | 2.7% | 2022-10-18 | Fix |
| CVE-2022-21618 | Oracle Java SE, Oracle GraalVM Enterprise Edition JGSS component unauthorized data modification | 5.3CNA v3.1 | 2.3% | 2022-10-18 | Fix |
| CVE-2022-21617 | Oracle MySQL Server Connection Handling component denial of service | 4.9CNA v3.1 | 1.5% | 2022-10-18 | Fix |
| CVE-2022-21616 | Oracle WebLogic Server Web Container component unauthorized data modification | 5.2CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-21615 | Oracle Enterprise Data Quality Dashboard component unauthorized data access | 7.4CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-21614 | Oracle Enterprise Data Quality Dashboard component unauthorized data access | 7.5CNA v3.1 | 0.9% | 2022-10-18 | Fix |
| CVE-2022-21613 | Oracle Enterprise Data Quality Dashboard component unauthorized data access | 8.8CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-21612 | Oracle Enterprise Data Quality Dashboard component unauthorized data access | 8.1CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-21611 | Oracle MySQL Server InnoDB component denial of service | 4.1CNA v3.1 | 0.4% | 2022-10-18 | Fix |
| CVE-2022-21610 | Oracle Solaris LDoms component denial of service | 3.3CNA v3.1 | 0.2% | 2022-10-18 | Fix |
| CVE-2022-21609 | Oracle Business Intelligence Enterprise Edition Analytics Server component unauthorized data access | 5.7CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-21608 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.5% | 2022-10-18 | Fix |
| CVE-2022-21607 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2022-10-18 | Fix |
| CVE-2022-21606 | Oracle Services for Microsoft Transaction Server cross-site scripting | 6.1CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-21605 | Oracle MySQL Server Data Dictionary component denial of service | 4.9CNA v3.1 | 1.1% | 2022-10-18 | Fix |
| CVE-2022-21604 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21603 | Oracle Database takeover | 7.2CNA v3.1 | 0.9% | 2022-10-18 | Fix |
| CVE-2022-21602 | Oracle PeopleSoft Enterprise PeopleTools portal component information disclosure | 5.3CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21601 | Oracle Communications Billing and Revenue Management Connection Manager component denial of service | 6.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21600 | Oracle MySQL Server Optimizer component takeover | 7.2CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21599 | Oracle MySQL Server Stored Procedure component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21598 | Oracle Siebel Core - DB Deployment and Configuration unauthorized data modification | 7.5CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21597 | Oracle GraalVM Enterprise Edition JavaScript component information disclosure | 5.3CNA v3.1 | 0.8% | 2022-10-18 | Fix |
| CVE-2022-21596 | Oracle Database takeover | 7.2CNA v3.1 | 0.9% | 2022-10-18 | Fix |
| CVE-2022-21595 | Oracle MySQL Server C API component denial of service | 4.4CNA v3.1 | 1.2% | 2022-10-18 | Fix |
| CVE-2022-21594 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2022-10-18 | Fix |
| CVE-2022-21593 | Oracle HTTP Server OHS Config MBeans component unauthorized data access | 7.1CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21592 | Oracle MySQL Server Security Encryption component information disclosure | 4.3CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21591 | Oracle Supply Chain Transportation Management unauthorized data modification | 5.4CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-21590 | Oracle BI Publisher Core Formatting API component unauthorized data access | 7.6CNA v3.1 | 0.7% | 2022-10-18 | Fix |
| CVE-2022-21589 | Oracle MySQL Server Security Privileges component information disclosure | 4.3CNA v3.1 | 1.0% | 2022-10-18 | Fix |
| CVE-2022-21587 | Oracle E-Business Suite missing authentication | 9.8CNA v3.1 | 98.3% | 2022-10-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-3595 | Linux Kernel CIFS sess.c sess_free_buffer double free | 5.5v3.1 | 0.3% | 2022-10-18 | Fix |
| CVE-2022-3594 | Linux Kernel BPF r8152.c intr_callback logging of excessive data | 5.3NVD v3.1 | 3.1% | 2022-10-18 | Fix |
| CVE-2022-3587 | SourceCodester Simple Cold Storage Management System My Account cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-18 | |
| CVE-2022-3585 | SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery | 4.3v3.1 | 0.3% | 2022-10-18 | |
| CVE-2022-3584 | SourceCodester Canteen Management System edituser.php SQL injection | 8.8v3.1 | 0.7% | 2022-10-18 | |
| CVE-2022-3583 | SourceCodester Canteen Management System login.php SQL injection | 9.8v3.1 | 0.7% | 2022-10-18 | |
| CVE-2022-3582 | SourceCodester Simple Cold Storage Management System cross-site request forgery | 3.5NVD v3.1 | 0.3% | 2022-10-18 | |
| CVE-2022-3581 | SourceCodester Cashier Queuing System Cashiers Tab cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-18 | |
| CVE-2022-3580 | SourceCodester Cashier Queuing System User Creation cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-18 | |
| CVE-2022-3579 | SourceCodester Cashier Queuing System Login page login.php SQL injection | 9.8v3.1 | 0.7% | 2022-10-18 | |
| CVE-2022-3339 | Reflected XSS in Trellix ePO server | 5.4CNA v3.1 | 0.6% | 2022-10-18 | Fix |
| CVE-2022-3338 | XXE in Trellix ePO server | 5.4CNA v3.1 | 0.5% | 2022-10-18 | Fix |
| CVE-2022-42983 | anji-plus AJ-Report authentication bypass by spoofing | 8.8v3.1 | 1.3% | 2022-10-17 | |
| CVE-2022-42980 | go-admin hard-coded credentials | 9.8v3.1 | 0.8% | 2022-10-17 | |
| CVE-2022-42975 | Phoenix mishandles check_origin wildcarding | 7.5v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-42237 | Merchandise Online Store SQL injection | 9.8v3.1 | 0.9% | 2022-10-17 | |
| CVE-2022-42221 | NETGEAR R6220 command injection | 8.8v3.1 | 1.8% | 2022-10-17 | Fix |
| CVE-2022-42171 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42170 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42169 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42168 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42167 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42166 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42165 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42164 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42163 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42154 | 74cmsse component /apiadmin/upload/attach of arbitrary file upload | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-42149 | Keking kkFileView server-side request forgery | 9.8v3.1 | 2.3% | 2022-10-17 | Nuclei |
| CVE-2022-42147 | Keking kkFileView cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-17 | |
| CVE-2022-42143 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-17 | |
| CVE-2022-42142 | Online Tours And Travels Management System arbitrary code execution | 7.2v3.1 | 1.1% | 2022-10-17 | |
| CVE-2022-42029 | Chamilo unrestricted file upload | 8.8v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-41751 | jhead OS command injection | 7.8v3.1 | 0.5% | 2022-10-17 | Fix |
| CVE-2022-41542 | Devhubapp Devhub insufficient session expiration | 5.4v3.1 | 0.6% | 2022-10-17 | |
| CVE-2022-41498 | Billing System SQL injection | 7.2v3.1 | 0.8% | 2022-10-17 | |
| CVE-2022-41472 | 74cmsse cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-17 | |
| CVE-2022-41471 | 74cmsSE administrator account management vulnerability | 6.5v3.1 | 0.6% | 2022-10-17 | |
| CVE-2022-41431 | Mindskip Xzs cross-site scripting | 5.4v3.1 | 0.7% | 2022-10-17 | |
| CVE-2022-41139 | Caldera cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-17 | |
| CVE-2022-40606 | Caldera cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-40605 | Caldera cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-40055 | Gxgroup Gpon Ont Titanium 2122a missing brute-force protection | 9.8v3.1 | 0.7% | 2022-10-17 | |
| CVE-2022-39052 | OTRS DoS attack using email | 7.5CNA v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-38743 | FactoryTalk VantagePoint improper access control | 8.8v3.1 | 1.4% | 2022-10-17 | Fix |
| CVE-2022-32176 | Gin-vue-admin unrestricted file upload | 9.0v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-28291 | Nessus Professional insufficiently protected credentials | 6.5v3.1 | 0.7% | 2022-10-17 | |
| CVE-2022-26375 | AB Press Optimizer WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-10-17 | |
| CVE-2022-23771 | Iptime NAS1dual CSRF | 8.8v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-23770 | WISA Smart Wing CMS remote command execution | 9.8v3.1 | 1.5% | 2022-10-17 | Fix |
| CVE-2022-23769 | Secuever reverseWall-MDS remote code execution | 9.8v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-22128 | Tableau Server path traversal | 9.8v3.1 | 1.4% | 2022-10-17 | Fix |
| CVE-2022-3569 | Synacor Zimbra Collaboration Suite (ZCS) local privilege escalation | 7.8NVD v3.1 | 0.7% | 2022-10-17 | Exploit code |
| CVE-2022-3567 | Linux Kernel IPv6 inet6_dgram_ops race condition | 6.4v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-3566 | Linux Kernel TCP tcp_setsockopt race condition | 7.1v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-3565 | Linux Kernel Bluetooth l1oip_core.c del_timer use-after-free | 7.8NVD v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3564 | Linux Kernel Bluetooth l2cap_core.c l2cap_reassemble_sdu use-after-free | 7.1NVD v3.1 | 1.5% | 2022-10-17 | Fix |
| CVE-2022-3563 | Linux Kernel BlueZ mgmt-tester.c read_50_controller_cap_complete null pointer dereference | 5.7v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3559 | Exim Regex use-after-free | 7.5v3.1 | 5.0% | 2022-10-17 | Fix |
| CVE-2022-3553 | X.Org Server xquartz X11Controller.m denial of service | 6.5v3.1 | 1.3% | 2022-10-17 | Fix |
| CVE-2022-3552 | Unrestricted upload of file with dangerous type in Boxbilling/Boxbilling | 7.2v3.1 | 44.0% | 2022-10-17 | Exploit codeFix |
| CVE-2022-3551 | X.Org Server xkb.c ProcXkbGetKbdByName memory leak | 6.5v3.1 | 1.8% | 2022-10-17 | Fix |
| CVE-2022-3550 | X.Org Server xkb.c _GetCountedString buffer overflow | 8.8v3.1 | 1.6% | 2022-10-17 | Fix |
| CVE-2022-3549 | SourceCodester Simple Cold Storage Management System Avatar unrestricted upload | 7.2v3.1 | 0.6% | 2022-10-17 | |
| CVE-2022-3548 | SourceCodester Simple Cold Storage Management System Add New Storage cross-site scripting | 4.8v3.1 | 0.5% | 2022-10-17 | |
| CVE-2022-3547 | SourceCodester Simple Cold Storage Management System setting cross-site scripting | 4.8v3.1 | 0.5% | 2022-10-17 | |
| CVE-2022-3546 | SourceCodester Simple Cold Storage Management System Create User cross-site scripting | 4.8v3.1 | 0.6% | 2022-10-17 | Exploit code |
| CVE-2022-3545 | Linux Kernel IPsec nfp_cppcore.c area_cache_get use-after-free | 7.8NVD v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3544 | Linux Kernel Netfilter sysfs.c damon_sysfs_add_target memory leak | 5.5v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-3543 | Linux Kernel BPF af_unix.c unix_release_sock memory leak | 5.5v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-3541 | Linux Kernel BPF spl2sw_driver.c spl2sw_nvmem_get_mac_address use-after-free | 7.8v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3540 | The hunter2 Contributors hunter2 cleartext storage of sensitive information | 6.5CNA v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3534 | Linux Kernel libbpf btf_dump.c btf_dump_name_dups use-after-free | 8.0NVD v3.1 | 1.0% | 2022-10-17 | Fix |
| CVE-2022-3533 | Linux Kernel BPF usdt.c parse_usdt_arg memory leak | 5.7v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3517 | minimatch regular expression denial of service | 7.5NVD v3.1 | 1.8% | 2022-10-17 | Fix |
| CVE-2022-3501 | Information exposure of template content due to missing check of permissions | 3.5CNA v3.1 | 0.5% | 2022-10-17 | Fix |
| CVE-2022-3421 | Privilege escalation in Google Drive for Desktop on MacOS | 5.6CNA v3.1 | 0.1% | 2022-10-17 | Fix |
| CVE-2022-3382 | HIWIN Robot System Software denial of service | 7.5v3.1 | 0.8% | 2022-10-17 | |
| CVE-2022-3368 | Software Updater of Avira Security for Windows vulnerable to privilege escalation | 8.8NVD v3.1 | 1.1% | 2022-10-17 | Exploit codeFix |
| CVE-2022-3351 | GitLab group member events webhook vulnerability | 4.3CNA v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-3331 | GitLab insecure direct object reference | 3.5CNA v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-3330 | It was possible for a guest user to read a todo targeting an inaccessible note in Gitlab CE/EE affecting all versions from 15.0 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1. | 4.3CNA v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-3325 | GitLab improper access control | 2.7CNA v3.1 | 0.5% | 2022-10-17 | Fix |
| CVE-2022-3293 | GitLab sensitive information in log files | 3.5CNA v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-3291 | GitLab deserialization of untrusted data | 6.5CNA v3.1 | 0.8% | 2022-10-17 | Fix |
| CVE-2022-3288 | GitLab modification of assumed-immutable data | 3.5CNA v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-3286 | GitLab improper access control | 5.3CNA v3.1 | 0.5% | 2022-10-17 | Fix |
| CVE-2022-3283 | GitLab denial of service | 7.5CNA v3.1 | 1.4% | 2022-10-17 | Fix |
| CVE-2022-3282 | Drag and Drop Multiple File Upload WordPress plugin file upload Size Limit bypass | 4.3NVD v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-3281 | WAGO: Multiple products Loss of MAC-Address-Filtering after reboot | 7.5v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-3279 | GitLab job log parsing improper error handling | 2.7CNA v3.1 | 1.0% | 2022-10-17 | Fix |
| CVE-2022-3244 | Import all XML, CSV and TXT into WordPress plugin missing authorisation | 4.2NVD v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3243 | Import all XML, CSV and TXT into WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2022-10-17 | Fix |
| CVE-2022-3206 | Passster WordPress plugin insecure Storage of password | 5.9NVD v3.1 | 0.5% | 2022-10-17 | Fix |
| CVE-2022-3165 | QEMU An integer underflow | 6.5NVD v3.1 | 1.2% | 2022-10-17 | Fix |
| CVE-2022-3158 | FactoryTalk VantagePoint SQL injection | 8.8v3.1 | 3.4% | 2022-10-17 | Fix |
| CVE-2022-3151 | WP Custom Cursors WordPress plugin arbitrary Cursor deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-3150 | WP Custom Cursors WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2022-10-17 | Fix |
| CVE-2022-3149 | WP Custom Cursors WordPress plugin stored cross-site scripting via CSRF | 6.1NVD v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-3139 | We’re Open! WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-10-17 | Fix |
| CVE-2022-3131 | Search Logger WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2022-10-17 | |
| CVE-2022-3126 | Frontend File Manager WordPress plugin file upload via CSRF | 4.3NVD v3.1 | 0.3% | 2022-10-17 | Fix |
| CVE-2022-3082 | miniOrange Discord Integration WordPress plugin Subscriber+ App Disabling | 6.5NVD v3.1 | 0.4% | 2022-10-17 | Fix |
| CVE-2022-3067 | GitLab improper access control | 6.5CNA v3.1 | 0.8% | 2022-10-17 | Fix |
| CVE-2022-3066 | GitLab improper access control | 5.4CNA v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-3060 | GitLab path traversal | 7.3CNA v3.1 | 1.0% | 2022-10-17 | Fix |
| CVE-2022-3031 | GitLab missing brute-force protection | 3.7CNA v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-3030 | GitLab An improper access control | 4.3CNA v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-2992 | GitLab remote code execution | 9.9CNA v3.1 | 86.2% | 2022-10-17 | MetasploitExploit codeFix |
| CVE-2022-2931 | GitLab denial of service | 7.5CNA v3.1 | 1.2% | 2022-10-17 | Fix |
| CVE-2022-2908 | GitLab regular expression denial of service | 4.3CNA v3.1 | 1.0% | 2022-10-17 | Fix |
| CVE-2022-2884 | GitLab OS command injection | 9.9CNA v3.1 | 75.7% | 2022-10-17 | Exploit codeFix |
| CVE-2022-2865 | GitLab cross-site scripting | 7.3CNA v3.1 | 0.8% | 2022-10-17 | Fix |
| CVE-2022-2834 | Helpful WordPress plugin information disclosure | 5.3NVD v3.1 | 0.8% | 2022-10-17 | Fix |
| CVE-2022-2630 | GitLab An improper access control | 4.3CNA v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-2592 | GitLab improper quantity validation | 6.5CNA v3.1 | 1.2% | 2022-10-17 | Fix |
| CVE-2022-2574 | Meks Easy Social Share WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-2563 | Tutor LMS WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-17 | Fix |
| CVE-2022-2533 | GitLab improper authentication | 6.5CNA v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-2527 | GitLab cross-site scripting | 7.3CNA v3.1 | 0.9% | 2022-10-17 | Fix |
| CVE-2022-2455 | GitLab project import denial of service | 6.5CNA v3.1 | 1.1% | 2022-10-17 | Fix |
| CVE-2022-2428 | GitLab cross-site scripting | 6.4CNA v3.1 | 0.8% | 2022-10-17 | Fix |
| CVE-2022-2052 | TRUMPF TruTops default user accounts vulnerability | 9.8CNA v3.1 | 0.7% | 2022-10-17 | Fix |
| CVE-2022-0699 | shapelib contrib/shpsort.c double free | 9.8NVD v3.1 | 1.3% | 2022-10-17 | Fix |
| CVE-2022-42969 | pytest Py regular expression denial of service | 7.5v3.1 | 1.7% | 2022-10-16 | Fix |
| CVE-2022-42968 | Gitea vulnerable to argument injection | 9.8v3.1 | 1.1% | 2022-10-16 | Fix |
| CVE-2022-41323 | Django denial of service vulnerability in internationalized URLs | 7.5v3.1 | 3.0% | 2022-10-16 | Fix |
| CVE-2022-3526 | Linux Kernel skb macvlan.c macvlan_handle_frame memory leak | 7.5v3.1 | 1.0% | 2022-10-16 | Fix |
| CVE-2022-3524 | Linux Kernel IPv6 ipv6_renew_options memory leak | 5.5NVD v3.1 | 1.1% | 2022-10-16 | Fix |
| CVE-2022-3523 | Linux Kernel driver memory.c use-after-free | 5.3v3.1 | 0.9% | 2022-10-16 | Fix |
| CVE-2022-3521 | Linux Kernel kcm kcmsock.c kcm_tx_work race condition | 2.5NVD v3.1 | 0.2% | 2022-10-16 | Fix |
| CVE-2022-42961 | wolfSSL improper authorization | 5.3v3.1 | 0.6% | 2022-10-15 | Fix |
| CVE-2022-3519 | SourceCodester Sanitization Management System Quote Requests Tab cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-15 | |
| CVE-2022-3518 | SourceCodester Sanitization Management System User Creation cross-site scripting | 4.8v3.1 | 0.6% | 2022-10-15 | Exploit code |
| CVE-2022-42488 | OpenHarmony param service privilege escalation | 8.4CNA v3.1 | 0.2% | 2022-10-14 | |
| CVE-2022-42464 | OpenHarmony /dev/mmz_userdev device driver privilege escalation | 6.7CNA v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-42463 | OpenHarmony Softbus server callback handler authentication bypass | 8.3CNA v3.1 | 0.3% | 2022-10-14 | |
| CVE-2022-42342 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-42341 | Adobe ColdFusion improper restriction of XML external entity reference arbitrary file system read | 7.5CNA v3.1 | 35.5% | 2022-10-14 | Fix |
| CVE-2022-42340 | Adobe ColdFusion improper input validation arbitrary file system read | 7.5CNA v3.1 | 33.8% | 2022-10-14 | Fix |
| CVE-2022-42339 | Adobe Acrobat Reader DC XFA Parsing stack overflow remote code execution | 7.8CNA v3.1 | 2.9% | 2022-10-14 | Fix |
| CVE-2022-42234 | UCMS template management module file inclusion | 8.8v3.1 | 0.9% | 2022-10-14 | |
| CVE-2022-42232 | oretnom23 Simple Cold Storage Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-14 | |
| CVE-2022-42071 | oretnom23 Online Birth Certificate Management System cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-14 | |
| CVE-2022-42070 | oretnom23 Online Birth Certificate Management System cross-site request forgery | 8.8v3.1 | 0.3% | 2022-10-14 | |
| CVE-2022-42069 | oretnom23 Online Birth Certificate Management System cross-site scripting | 5.4v3.1 | 0.3% | 2022-10-14 | |
| CVE-2022-42067 | oretnom23 Online Birth Certificate Management System insecure direct object reference | 4.3v3.1 | 0.4% | 2022-10-14 | |
| CVE-2022-42066 | Projectworlds Online Examination System cross-site scripting | 6.1v3.1 | 0.6% | 2022-10-14 | |
| CVE-2022-42064 | Online Diagnostic Lab Management System SQL injection | 9.8v3.1 | 1.2% | 2022-10-14 | |
| CVE-2022-41715 | Memory exhaustion when compiling regular expressions in regexp/syntax | 7.5v3.1 | 1.4% | 2022-10-14 | Fix |
| CVE-2022-41686 | Openatom OpenHarmony mmz_userdev device driver out-of-bounds write | 5.1CNA v3.1 | 0.3% | 2022-10-14 | |
| CVE-2022-41623 | VillaTheme ALD information disclosure | 7.5v3.1 | 0.8% | 2022-10-14 | Fix |
| CVE-2022-41603 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41602 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41601 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41600 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41598 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41597 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41595 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41594 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41593 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41592 | Huawei HarmonyOS out-of-bounds read | 3.4v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41589 | Huawei HarmonyOS interface misuse vulnerability in the Maple DFX stack module | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-41588 | Huawei HarmonyOS service logic exception vulnerability in the home screen module | 7.5v3.1 | 0.3% | 2022-10-14 | Fix |
| CVE-2022-41587 | EMUI uncaptured exceptions in the home screen module | 5.3v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-41586 | Huawei HarmonyOS untruncated data vulnerability in the communication framework module | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-41585 | Huawei HarmonyOS out-of-bounds read vulnerability in the kernel module | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-41584 | Huawei HarmonyOS out-of-bounds read vulnerability in the kernel module | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-41583 | Huawei HarmonyOS out-of-bounds read | 7.5v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-41582 | Huawei HarmonyOS configuration defects.in the security module | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-41581 | Huawei HarmonyOS vulnerability of not verifying the read content in the HW_KEYMASTER module | 9.1v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-41580 | Huawei HarmonyOS vulnerability of not verifying the read content in the HW_KEYMASTER module | 9.8v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-41578 | Huawei HarmonyOS out-of-bounds write vulnerability in the mptcp module | 9.8v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-41577 | Huawei HarmonyOS out-of-bounds read | 7.1v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-41576 | Huawei HarmonyOS boot.sh script that can be modified by malicious programs in the rphone module | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-41539 | Wedding Planner unrestricted file upload | 8.8v3.1 | 1.1% | 2022-10-14 | |
| CVE-2022-41538 | Wedding Planner unrestricted file upload | 8.8v3.1 | 1.0% | 2022-10-14 | |
| CVE-2022-41536 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-41535 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-41477 | Webidsupport WeBid server-side request forgery | 9.1v3.1 | 1.1% | 2022-10-14 | |
| CVE-2022-41436 | Oxhoo TP50 improper authentication | 9.1v3.1 | 0.7% | 2022-10-14 | |
| CVE-2022-41416 | Online Tours and Travels Management System update_booking.php SQL injection | 7.2v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-41308 | Subassembly Composer out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-41307 | Subassembly Composer out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-41306 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-41305 | Subassembly Composer out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-14 | |
| CVE-2022-41304 | Autodesk Fbx Software Development Kit An out-of-bounds write | 7.8v3.1 | 0.3% | 2022-10-14 | Fix |
| CVE-2022-41303 | FBX SDK use-after-free | 7.8v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-41302 | Autodesk Fbx Software Development Kit An out-of-bounds read | 7.8v3.1 | 0.3% | 2022-10-14 | Fix |
| CVE-2022-39311 | Compromised agents may be able to execute remote code on GoCD Server | 9.1CNA v3.1 | 1.7% | 2022-10-14 | Fix |
| CVE-2022-39310 | Malicious agent may be able to impersonate another agent in GoCD | 4.9CNA v3.1 | 0.7% | 2022-10-14 | Fix |
| CVE-2022-39309 | GoCD server secret encryption/decryption key leaked to agents during material serialization | 4.9CNA v3.1 | 0.9% | 2022-10-14 | Fix |
| CVE-2022-39308 | GoCD API authentication of user access tokens subject to timing attack during comparison | 6.5CNA v3.1 | 0.7% | 2022-10-14 | Fix |
| CVE-2022-39302 | Ree6 may bypass webhook protection | 5.5CNA v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-39128 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39127 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39126 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39125 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39124 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39123 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39122 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39121 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39120 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39117 | UNISOC chipsets missing authorization | 5.5NVD v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39115 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39114 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39113 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39112 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39111 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39110 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39109 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39108 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39107 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39105 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |