CVE-2022 records published in October 2022
Page two of two: records 1,001 to 1,757 of the 1,757 published in October 2022, newest first. The first page carries the figures for October 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-39103 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-39080 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-39065 | Ikea TRÅDFRI gateway system improper handling of unexpected data types | 6.5v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-39064 | Ikea TRÅDFRI smart lighting system improper handling of unexpected data types | 8.1v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-39011 | Huawei HarmonyOS unauthorized access | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38998 | Huawei HarmonyOS out-of-bounds read | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38986 | Huawei HarmonyOS out-of-bounds write | 9.1v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-38985 | Huawei HarmonyOS input verification vulnerability in the facial recognition module | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38984 | Huawei HarmonyOS out-of-bounds read | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38983 | Huawei HarmonyOS UAF vulnerability in the BT Hfp client module | 9.8v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-38982 | Huawei HarmonyOS improper authentication | 9.8v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-38981 | Huawei HarmonyOS out-of-bounds read | 7.5v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38980 | Huawei HarmonyOS out-of-bounds write | 9.8v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38977 | Huawei HarmonyOS out-of-bounds write | 7.5v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-38698 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-38697 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38690 | UNISOC chipsets camera driver memory corruption | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38689 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-38688 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38687 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38679 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38677 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38676 | UNISOC chipsets gpu driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38673 | UNISOC chipsets face detect driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38672 | UNISOC chipsets face detect driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38671 | UNISOC chipsets camera driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-38670 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-38669 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-38450 | Adobe Acrobat Reader DC XFA Parsing stack overflow remote code execution | 7.8CNA v3.1 | 2.7% | 2022-10-14 | Fix |
| CVE-2022-38449 | Adobe Acrobat Reader DC JP2 File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.2% | 2022-10-14 | Fix |
| CVE-2022-38448 | Adobe Dimension SKP File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-38447 | Adobe Dimension SKP File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-38446 | Adobe Dimension SKP File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-38445 | Adobe Dimension SKP File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2022-10-14 | Fix |
| CVE-2022-38444 | Adobe Dimension SKP File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38443 | Adobe Dimension GLB File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2022-10-14 | Fix |
| CVE-2022-38442 | Adobe Dimension SKP File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38441 | Adobe Dimension GLB File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38440 | Adobe Dimension SKP File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-38437 | Adobe Acrobat Reader use-after-free memory leak | 5.5CNA v3.1 | 2.6% | 2022-10-14 | Fix |
| CVE-2022-38424 | Adobe ColdFusion Application Server directory traversal arbitrary file system write | 7.2CNA v3.1 | 45.2% | 2022-10-14 | Fix |
| CVE-2022-38423 | Adobe ColdFusion Application Server directory traversal information disclosure | 4.9CNA v3.1 | 45.0% | 2022-10-14 | Fix |
| CVE-2022-38422 | Adobe ColdFusion Application Server directory traversal information disclosure | 7.5CNA v3.1 | 44.3% | 2022-10-14 | Fix |
| CVE-2022-38421 | Adobe ColdFusion Application Server directory traversal remote code execution | 7.2CNA v3.1 | 79.2% | 2022-10-14 | Fix |
| CVE-2022-38420 | Adobe ColdFusion use of hard-coded credentials application denial of service | 7.5CNA v3.1 | 44.0% | 2022-10-14 | Fix |
| CVE-2022-38419 | Adobe ColdFusion Solr Service XML external entity Processing arbitrary file system read | 7.5CNA v3.1 | 53.0% | 2022-10-14 | Fix |
| CVE-2022-38418 | Adobe ColdFusion Application Server directory traversal remote code execution | 9.8CNA v3.1 | 80.0% | 2022-10-14 | Fix |
| CVE-2022-37603 | Loader-utils is vulnerable to regular expression denial of service (ReDoS) via URL variable | 7.5v3.1 | 2.2% | 2022-10-14 | Fix |
| CVE-2022-37602 | Grunt-karma vulnerable to prototype pollution | 9.8v3.1 | 1.7% | 2022-10-14 | Fix |
| CVE-2022-36803 | Atlassian Jira Align incorrect default permissions | 8.8v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-36802 | Atlassian Jira Align server-side request forgery | 4.9v3.1 | 0.9% | 2022-10-14 | Fix |
| CVE-2022-35712 | Adobe ColdFusion ODBC agent heap-based buffer overflow remote code execution | 9.8CNA v3.1 | 36.8% | 2022-10-14 | Fix |
| CVE-2022-35711 | Adobe ColdFusion ODBC server heap-based buffer overflow remote code execution | 9.8CNA v3.1 | 73.5% | 2022-10-14 | Fix |
| CVE-2022-35710 | Adobe ColdFusion ODBC server stack-based buffer overflow remote code execution | 9.8CNA v3.1 | 42.6% | 2022-10-14 | Fix |
| CVE-2022-35698 | Adobe Commerce stored XSS arbitrary code execution | 10.0CNA v3.1 | 14.6% | 2022-10-14 | Fix |
| CVE-2022-35691 | Adobe Acrobat Reader null pointer dereference application denial of service | 5.5CNA v3.1 | 4.4% | 2022-10-14 | Fix |
| CVE-2022-35690 | Adobe ColdFusion ODBC agent stack-based buffer overflow remote code execution | 9.8CNA v3.1 | 72.2% | 2022-10-14 | Emerging ThreatsFix |
| CVE-2022-35689 | Adobe Commerce improper access control security feature bypass | 5.3CNA v3.1 | 1.3% | 2022-10-14 | Fix |
| CVE-2022-35059 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35058 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35056 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35055 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35054 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35053 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35052 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35051 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35050 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35049 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35048 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35047 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35046 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35045 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35044 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35043 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35042 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35041 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-35040 | Otfcc out-of-bounds write | 6.5v3.1 | 0.8% | 2022-10-14 | |
| CVE-2022-32177 | Gin-vue-admin unrestricted file upload | 9.0v3.1 | 1.0% | 2022-10-14 | |
| CVE-2022-32149 | Denial of service via crafted Accept-Language header in golang.org/x/Text/language | 7.5v3.1 | 1.6% | 2022-10-14 | Fix |
| CVE-2022-28762 | Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS | 7.3CNA v3.1 | 0.3% | 2022-10-14 | Fix |
| CVE-2022-28761 | Zoom On-Premise Deployments: Improper access control | 6.5CNA v3.1 | 0.7% | 2022-10-14 | Fix |
| CVE-2022-28760 | Zoom On-Premise Deployments: Improper access control | 6.5CNA v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-28759 | Zoom On-Premise Deployments: Improper access control | 8.2CNA v3.1 | 0.6% | 2022-10-14 | Fix |
| CVE-2022-20464 | Android ap_input_processor.c information disclosure | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-20397 | Android SitRilSe.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-3506 | Cross-site scripting (XSS) Stored in barrykooij/related-posts-for-wp | 5.4v3.1 | 1.2% | 2022-10-14 | NucleiFix |
| CVE-2022-3505 | SourceCodester Sanitization Management System cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-14 | |
| CVE-2022-3504 | SourceCodester Sanitization Management System SQL injection | 9.8v3.1 | 0.6% | 2022-10-14 | |
| CVE-2022-3503 | SourceCodester Purchase Order Management System Supplier cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-14 | |
| CVE-2022-3502 | Human Resource Management System Leave cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-14 | |
| CVE-2022-3497 | SourceCodester Human Resource Management System Master List cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-14 | |
| CVE-2022-3496 | SourceCodester Human Resource Management System Admin Panel employeeadd.php access control | 8.8v3.1 | 0.4% | 2022-10-14 | |
| CVE-2022-3495 | SourceCodester Simple Online Public Access Catalog Admin Login SQL injection | 7.2v3.1 | 0.7% | 2022-10-14 | |
| CVE-2022-3479 | Mozilla Network Security Services client authentication vulnerability | 7.5NVD v3.1 | 0.8% | 2022-10-14 | Fix |
| CVE-2022-3439 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 9.8v3.1 | 0.7% | 2022-10-14 | Fix |
| CVE-2022-2985 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-10-14 | Fix |
| CVE-2022-2984 | UNISOC chipsets jpg driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-10-14 | Fix |
| CVE-2022-2963 | JasPer cmdopts_parse memory leak | 7.5NVD v3.1 | 1.4% | 2022-10-14 | Fix |
| CVE-2022-2880 | Incorrect sanitization of forwarded query parameters in net/http/httputil | 7.5v3.1 | 1.1% | 2022-10-14 | Fix |
| CVE-2022-2879 | Unbounded memory consumption when reading headers in archive/tar | 7.5v3.1 | 1.7% | 2022-10-14 | Fix |
| CVE-2022-2850 | 389-ds-base null pointer dereference | 6.5v3.1 | 1.3% | 2022-10-14 | Fix |
| CVE-2022-2780 | Octopus Deploy Octopus Server authentication bypass by replay | 8.1v3.1 | 0.5% | 2022-10-14 | Fix |
| CVE-2022-42906 | Powerline Gitstatus vulnerable to arbitrary code execution | 7.8v3.1 | 0.4% | 2022-10-13 | Fix |
| CVE-2022-42902 | Linaro Lava code injection | 8.8v3.1 | 1.4% | 2022-10-13 | Fix |
| CVE-2022-42901 | Bentley MicroStation out-of-bounds read | 7.8v3.1 | 0.3% | 2022-10-13 | Fix |
| CVE-2022-42900 | Bentley MicroStation out-of-bounds read | 7.8v3.1 | 0.3% | 2022-10-13 | Fix |
| CVE-2022-42899 | Bentley MicroStation out-of-bounds read | 7.8v3.1 | 0.7% | 2022-10-13 | Exploit codeFix |
| CVE-2022-42897 | Array Networks ArrayOS AG command injection | 9.8v3.1 | 1.5% | 2022-10-13 | Fix |
| CVE-2022-42889 | Arbitrary code execution in Apache Commons Text | 9.8NVD v3.1 | 99.9% | 2022-10-13 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-42722 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 0.6% | 2022-10-13 | Fix |
| CVE-2022-42721 | Linux kernel infinite loop | 5.5NVD v3.1 | 0.6% | 2022-10-13 | Fix |
| CVE-2022-42720 | Linux kernel use-after-free | 7.8NVD v3.1 | 0.9% | 2022-10-13 | Fix |
| CVE-2022-42719 | Linux kernel mac80211 stack use-after-free | 8.8NVD v3.1 | 1.4% | 2022-10-13 | Fix |
| CVE-2022-42161 | D-Link Covr 1200 command injection | 8.8v3.1 | 2.7% | 2022-10-13 | |
| CVE-2022-42160 | D-Link Covr 1200 command injection | 8.8v3.1 | 2.7% | 2022-10-13 | |
| CVE-2022-42159 | D-Link Covr 1200 improper seeding | 4.3v3.1 | 0.7% | 2022-10-13 | |
| CVE-2022-42156 | D-Link Covr 1200 command injection | 8.8v3.1 | 2.7% | 2022-10-13 | |
| CVE-2022-41674 | Linux kernel out-of-bounds write | 8.1NVD v3.1 | 4.1% | 2022-10-13 | Fix |
| CVE-2022-41534 | Online Diagnostic Lab Management System unrestricted file upload | 7.2v3.1 | 1.2% | 2022-10-13 | |
| CVE-2022-41533 | Online Diagnostic Lab Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-10-13 | |
| CVE-2022-41497 | Clippercms server-side request forgery | 9.8v3.1 | 0.9% | 2022-10-13 | |
| CVE-2022-41496 | Idreamsoft iCMS server-side request forgery | 9.8v3.1 | 0.9% | 2022-10-13 | |
| CVE-2022-41495 | Clippercms server-side request forgery | 9.8v3.1 | 0.9% | 2022-10-13 | |
| CVE-2022-41489 | WAYOS LQ_09 cross-site request forgery | 8.1v3.1 | 0.4% | 2022-10-13 | |
| CVE-2022-41485 | Tenda AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-10-13 | Fix |
| CVE-2022-41484 | Tenda AP500 buffer overflow | 7.5v3.1 | 0.7% | 2022-10-13 | Fix |
| CVE-2022-41483 | Tenda AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-10-13 | Fix |
| CVE-2022-41482 | Tenda AC6 buffer overflow | 7.5v3.1 | 0.7% | 2022-10-13 | Fix |
| CVE-2022-41481 | Tenda AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-10-13 | Fix |
| CVE-2022-41480 | Tenda AC6 buffer overflow | 7.5v3.1 | 0.7% | 2022-10-13 | Fix |
| CVE-2022-41475 | Rpcms cross-site request forgery | 8.8v3.1 | 0.4% | 2022-10-13 | |
| CVE-2022-41474 | Rpcms cross-site request forgery | 6.5v3.1 | 0.3% | 2022-10-13 | |
| CVE-2022-41473 | Rpcms cross-site scripting | 6.1v3.1 | 1.1% | 2022-10-13 | Nuclei |
| CVE-2022-41391 | OcoMon cross-site scripting | 9.8v3.1 | 0.8% | 2022-10-13 | |
| CVE-2022-41390 | OcoMon SQL injection | 9.8v3.1 | 0.8% | 2022-10-13 | |
| CVE-2022-40187 | Foresightsports GC3 Launch Monitor incorrect default permissions | 8.0v3.1 | 0.8% | 2022-10-13 | |
| CVE-2022-39303 | Ree6 vulnerable to SQL injection | 8.1CNA v3.1 | 0.8% | 2022-10-13 | Fix |
| CVE-2022-39300 | Signature bypass via multiple root elements in node-SAML | 7.7CNA v3.1 | 0.7% | 2022-10-13 | Fix |
| CVE-2022-39295 | Improper neutralization of alternate XSS syntax in Knowage-Server | 6.1CNA v3.1 | 0.6% | 2022-10-13 | Fix |
| CVE-2022-39293 | Azure RTOS USBX Host PIMA vulnerable to read integer underflow with buffer overflow | 8.6CNA v3.1 | 0.7% | 2022-10-13 | Fix |
| CVE-2022-39278 | Istio vulnerable to denial of service attack due to Golang Regex library | 7.5CNA v3.1 | 1.2% | 2022-10-13 | Fix |
| CVE-2022-39229 | Grafana users with email as a username can block other users from signing in | 4.3CNA v3.1 | 0.9% | 2022-10-13 | Fix |
| CVE-2022-39201 | Grafana data source and plugin proxy endpoints information disclosure | 6.8CNA v3.1 | 1.3% | 2022-10-13 | Fix |
| CVE-2022-38902 | Liferay DXP cross-site scripting | 5.4v3.1 | 0.6% | 2022-10-13 | |
| CVE-2022-37208 | jflyfox jfinal_cms SQL injection | 8.8v3.1 | 1.2% | 2022-10-13 | Exploit code |
| CVE-2022-35944 | October CMS Safe Mode bypass leads to authenticated RCE (remote code execution) | 6.2CNA v3.1 | 0.9% | 2022-10-13 | Fix |
| CVE-2022-35612 | Bevywise Mqttroute A cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-13 | |
| CVE-2022-35611 | Bevywise Mqttroute A cross-site request forgery | 4.3v3.1 | 0.3% | 2022-10-13 | |
| CVE-2022-35136 | Boodskap Iot Platform missing authentication | 6.5v3.1 | 0.6% | 2022-10-13 | |
| CVE-2022-35135 | Boodskap Iot Platform improper authentication | 8.8v3.1 | 0.8% | 2022-10-13 | |
| CVE-2022-35134 | Boodskap Iot Platform cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-13 | |
| CVE-2022-35081 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-13 | |
| CVE-2022-35080 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-13 | |
| CVE-2022-34022 | Resiot Iot Platform And Lorawan Network Server SQL injection | 7.2v3.1 | 0.9% | 2022-10-13 | |
| CVE-2022-34021 | Resiot Iot Platform And Lorawan Network Server Multiple cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-13 | |
| CVE-2022-34020 | Resiot Iot Platform And Lorawan Network Server cross-site request forgery | 8.8v3.1 | 0.4% | 2022-10-13 | |
| CVE-2022-31130 | Grafana data source and plugin proxy information disclosure | 4.9CNA v3.1 | 1.1% | 2022-10-13 | Fix |
| CVE-2022-31123 | Grafana plugin signature bypass vulnerability | 6.1CNA v3.1 | 0.3% | 2022-10-13 | Fix |
| CVE-2022-24697 | Apache Kylin vulnerable to remote code execution | 9.8v3.1 | 84.8% | 2022-10-13 | Fix |
| CVE-2022-3493 | SourceCodester Human Resource Management System Add Employee cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-13 | |
| CVE-2022-3492 | SourceCodester Human Resource Management System Profile Photo os command injection | 8.8v3.1 | 1.0% | 2022-10-13 | Fix |
| CVE-2022-3473 | SourceCodester Human Resource Management System getstatecity.php SQL injection | 6.5v3.1 | 0.6% | 2022-10-13 | |
| CVE-2022-3472 | SourceCodester Human Resource Management System city.php SQL injection | 4.9v3.1 | 0.5% | 2022-10-13 | |
| CVE-2022-3471 | SourceCodester Human Resource Management System city.php SQL injection | 4.9v3.1 | 0.5% | 2022-10-13 | |
| CVE-2022-3470 | SourceCodester Human Resource Management System getstatecity.php SQL injection | 6.5v3.1 | 0.5% | 2022-10-13 | |
| CVE-2022-3457 | Origin validation error in ikus060/rdiffweb | 9.8v3.1 | 0.3% | 2022-10-13 | Fix |
| CVE-2022-3456 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 9.8v3.1 | 0.4% | 2022-10-13 | Fix |
| CVE-2022-2828 | Octopus Deploy Octopus Server insecure direct object reference | 6.5v3.1 | 0.6% | 2022-10-13 | Fix |
| CVE-2022-42715 | Vanderbilt REDCap reflected cross-site scripting | 6.1v3.1 | 0.8% | 2022-10-12 | Fix |
| CVE-2022-42711 | Progress WhatsUp Gold cross-site scripting | 9.6v3.1 | 1.1% | 2022-10-12 | Fix |
| CVE-2022-42087 | Tenda AX1803 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-10-12 | |
| CVE-2022-42086 | Tenda AX1803 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-10-12 | |
| CVE-2022-42081 | Tenda AC1206 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-10-12 | |
| CVE-2022-42080 | Tenda AC1206 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-10-12 | |
| CVE-2022-42079 | Tenda AC1206 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-10-12 | |
| CVE-2022-42078 | Tenda AC1206 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-10-12 | |
| CVE-2022-42077 | Tenda AC1206 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-10-12 | |
| CVE-2022-41606 | Nomad Panics on Job Submission with Bad Artifact Stanza Source URL | 6.5v3.1 | 0.8% | 2022-10-12 | Fix |
| CVE-2022-41532 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-12 | |
| CVE-2022-41530 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-12 | |
| CVE-2022-41408 | Online Pet Shop We App SQL injection | 9.8v3.1 | 0.7% | 2022-10-12 | |
| CVE-2022-41407 | Online Pet Shop We App SQL injection | 7.2v3.1 | 0.9% | 2022-10-12 | |
| CVE-2022-41406 | Church Management System /admin/admin_pic.php component arbitrary file upload | 7.2v3.1 | 1.1% | 2022-10-12 | |
| CVE-2022-41403 | Newsletter Subscribe Project Newsletter Subscribe (popup + Regular Module) SQL injection | 9.8v3.1 | 1.1% | 2022-10-12 | |
| CVE-2022-41351 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-12 | Fix |
| CVE-2022-41350 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-12 | Fix |
| CVE-2022-41349 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-12 | Fix |
| CVE-2022-41348 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-12 | Fix |
| CVE-2022-41316 | HashiCorp Vault's revocation list not respected | 5.3v3.1 | 0.4% | 2022-10-12 | Fix |
| CVE-2022-40921 | DedeCMS unrestricted file upload | 7.2v3.1 | 1.0% | 2022-10-12 | |
| CVE-2022-40871 | Dolibarr vulnerable to eval injection | 9.8v3.1 | 33.4% | 2022-10-12 | |
| CVE-2022-40664 | Authentication bypass vulnerability in Shiro when forwarding or including via RequestDispatcher | 9.8v3.1 | 2.6% | 2022-10-12 | Fix |
| CVE-2022-40469 | Ikuai8 Ikuaios code injection | 8.8v3.1 | 2.4% | 2022-10-12 | Fix |
| CVE-2022-40440 | MxGraph vulnerable to cross-site scripting in setTooltips function | 6.1v3.1 | 0.6% | 2022-10-12 | |
| CVE-2022-39299 | Signature bypass via multiple root elements in Passport-SAML | 7.4CNA v3.1 | 3.4% | 2022-10-12 | Exploit codeFix |
| CVE-2022-39298 | melisplatform melis-front deserialization of untrusted data in MelisFront | 7.7CNA v3.1 | 1.0% | 2022-10-12 | Fix |
| CVE-2022-39297 | melisplatform melis-cms deserialization of untrusted data in MelisCms | 7.7CNA v3.1 | 1.0% | 2022-10-12 | Fix |
| CVE-2022-39283 | FreeRDP may read and display out-of-bounds data | 5.9CNA v3.1 | 1.1% | 2022-10-12 | Fix |
| CVE-2022-39282 | FreeRDP RDP client: Read of uninitialized memory with parallel port redirection | 3.5CNA v3.1 | 0.9% | 2022-10-12 | Fix |
| CVE-2022-37614 | Mockery is vulnerable to prototype pollution | 9.8v3.1 | 1.3% | 2022-10-12 | |
| CVE-2022-37611 | Tschaub Gh-pages vulnerable to prototype pollution | 9.8v3.1 | 1.1% | 2022-10-12 | Fix |
| CVE-2022-37601 | Prototype pollution in webpack Loader-utils | 9.8v3.1 | 2.8% | 2022-10-12 | Fix |
| CVE-2022-34391 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-34390 | Dell CPG BIOS uninitialized variable use | 7.5CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-33937 | Dell GeoDrive relative path traversal | 7.1CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-33922 | Dell GeoDrive incorrect default permissions | 7.0CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-33921 | Dell GeoDrive uncontrolled search path | 7.0CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-33920 | Dell GeoDrive unquoted search path | 7.8CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-33919 | Dell GeoDrive information disclosure | 7.8CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-33918 | Dell GeoDrive cleartext storage of sensitive information in memory | 5.5CNA v3.1 | 0.1% | 2022-10-12 | Fix |
| CVE-2022-33106 | Wijungle U250 missing brute-force protection | 9.8v3.1 | 0.8% | 2022-10-12 | |
| CVE-2022-32493 | Dell CPG BIOS stack-based buffer overflow | 6.0CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32491 | Dell CPG BIOS buffer overflow | 4.1CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32489 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32488 | Dell CPG BIOS improper input validation | 8.2CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32487 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32485 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32484 | Dell CPG BIOS improper input validation | 5.6CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-32483 | Dell CPG BIOS improper input validation | 5.6CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-31228 | Dell XtremIO missing brute-force protection | 8.1CNA v3.1 | 0.8% | 2022-10-12 | Fix |
| CVE-2022-28887 | F-Secure Endpoint Protection aerdl.dll unpacker denial of service | 7.5v3.1 | 0.4% | 2022-10-12 | |
| CVE-2022-28866 | Nokia Airframe Bmc Web Gui R18 Firmware Multiple improper access control | 8.8v3.1 | 1.0% | 2022-10-12 | |
| CVE-2022-3467 | Jiusi OA hntdCustomDesktopActionContent SQL injection | 9.8v3.1 | 0.5% | 2022-10-12 | |
| CVE-2022-3465 | Mediabridge Medialink index.asp improper authentication | 9.8v3.1 | 0.8% | 2022-10-12 | |
| CVE-2022-3464 | puppyCMS settings.php cross-site scripting | 6.1v3.1 | 0.6% | 2022-10-12 | Exploit code |
| CVE-2022-3458 | SourceCodester Human Resource Management System Image file employeeview.php unrestricted upload | 9.8v3.1 | 0.4% | 2022-10-12 | |
| CVE-2022-3171 | Google Memory handling vulnerability in ProtocolBuffers Java core and lite | 4.3CNA v3.1 | 1.1% | 2022-10-12 | Fix |
| CVE-2022-2720 | Octopus Deploy Octopus Server personal information exposure | 5.3v3.1 | 0.5% | 2022-10-12 | Fix |
| CVE-2022-2249 | Avaya Aura Communication Manager privilege escalation | 7.7CNA v3.1 | 0.2% | 2022-10-12 | Fix |
| CVE-2022-0030 | PAN-OS: Authentication bypass in Web interface | 8.1CNA v3.1 | 0.9% | 2022-10-12 | Fix |
| CVE-2022-42731 | Django-mfa2 vulnerable to MFA Replay attack | 7.5v3.1 | 1.1% | 2022-10-11 | Fix |
| CVE-2022-42717 | HashiCorp Vagrant arbitrary command execution | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-42238 | Merchandise Online Store Vertical privilege escalation | 8.8v3.1 | 0.9% | 2022-10-11 | |
| CVE-2022-42236 | Merchandise Online Store stored cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-11 | |
| CVE-2022-42235 | Student Clearance System stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-11 | |
| CVE-2022-42230 | Simple Cold Storage Management System Project Simple Cold Storage Managment System SQL injection | 7.2v3.1 | 0.7% | 2022-10-11 | |
| CVE-2022-42229 | Wedding Planner unrestricted file upload | 8.8v3.1 | 1.1% | 2022-10-11 | |
| CVE-2022-42044 | Democritus D8s-asns unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42043 | Democritus D8s-xml unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42042 | Democritus D8s-networking hidden functionality | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42041 | Democritus D8s-file-system hidden functionality | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42040 | Democritus D8s-algorithms unrestricted file upload | 9.8v3.1 | 6.7% | 2022-10-11 | |
| CVE-2022-42039 | Democritus D8s-lists unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42038 | Democritus D8s-ip-addresses unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42037 | Democritus D8s-asns unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42036 | Democritus D8s-urls unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-42034 | Wedding Planner unrestricted file upload | 8.8v3.1 | 1.1% | 2022-10-11 | |
| CVE-2022-41851 | Siemens JTTK uninitialized pointer access | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41665 | A vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.10), SICAM P850 (7KG8500-0AA30-0AA0) (All | 9.8CNA v3.1 | 1.1% | 2022-10-11 | Fix |
| CVE-2022-41550 | GNU Osip integer overflow | 6.5v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41404 | INI4J org.INI4J allows attackers to cause a denial of service (DoS) | 7.5NVD v3.1 | 1.8% | 2022-10-11 | Fix |
| CVE-2022-41387 | Democritus D8s-pdfs unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41386 | Democritus D8s-utility unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41385 | Democritus D8s-html unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41384 | Democritus D8s-domains unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41383 | Democritus D8s-archives unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41382 | Democritus D8s-json unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41381 | Democritus D8s-utility unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41380 | Democritus D8s-yaml unrestricted file upload | 9.8v3.1 | 1.3% | 2022-10-11 | |
| CVE-2022-41376 | Cross-site scripting in Metro UI | 6.1v3.1 | 0.5% | 2022-10-11 | |
| CVE-2022-41210 | SAP Customer Data Cloud (Gigya) weak random number generator | 5.2v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-41209 | SAP Customer Data Cloud (Gigya) inadequate encryption strength | 5.2v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41206 | SAP BusinessObjects Business Intelligence platform cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41204 | SAP Commerce open redirect | 8.8v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-41202 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41201 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41200 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41199 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41198 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41197 | SAP 3D Visual Enterprise Viewer crash | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41196 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41195 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41194 | SAP 3D Visual Enterprise Viewer crash | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41193 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41192 | SAP 3D Visual Enterprise Viewer crash | 7.8v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-41191 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41190 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41189 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41188 | SAP 3D Visual Enterprise Viewer crash | 7.8v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-41187 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41186 | SAP 3D Visual Enterprise Viewer out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-41185 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-41184 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41183 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41182 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41181 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41180 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-41179 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41178 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41177 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41176 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41175 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-41174 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41173 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41172 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41171 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41170 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41169 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41168 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41167 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-41166 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-41083 | Microsoft Visual Studio Code elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-41081 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-41043 | Microsoft Office information disclosure | 3.3CNA v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-41042 | Microsoft Visual Studio Code information disclosure | 7.4CNA v3.1 | 2.0% | 2022-10-11 | Fix |
| CVE-2022-41038 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 2.9% | 2022-10-11 | Fix |
| CVE-2022-41037 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 1.7% | 2022-10-11 | Fix |
| CVE-2022-41036 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 1.7% | 2022-10-11 | Fix |
| CVE-2022-41035 | Microsoft Edge (Chromium-based) spoofing | 5.3CNA v3.1 | 1.4% | 2022-10-11 | Fix |
| CVE-2022-41034 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 67.5% | 2022-10-11 | MetasploitExploit codeFix |
| CVE-2022-41033 | Microsoft Windows COM+ Event System Service privilege escalation | 7.8CNA v3.1 | 1.7% | 2022-10-11 | KEVFix |
| CVE-2022-41032 | Microsoft NET NuGet client elevation of privilege | 7.8CNA v3.1 | 1.1% | 2022-10-11 | Exploit codeFix |
| CVE-2022-41031 | Microsoft Word remote code execution | 7.8CNA v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-40777 | Interspire Email Marketer unrestricted file upload | 8.8v3.1 | 0.9% | 2022-10-11 | |
| CVE-2022-40631 | Siemens SCALANCE X200-4P IRT cross-site scripting | 6.1v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-40227 | Siemens SIMATIC HMI Comfort Panels (incl. SIPLUS variants) improper input validation | 7.5v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-40226 | Siemens SICAM P850 session fixation | 7.5CNA v3.1 | 0.7% | 2022-10-11 | Fix |
| CVE-2022-40182 | Siemens Desigo PXM30-1 execution with unnecessary privileges | 8.8v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-40181 | Siemens Desigo PXM30-1 cross-site scripting | 8.3v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-40180 | Siemens Desigo PXM30-1 cross-site request forgery | 5.3v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-40179 | Siemens Desigo PXM30-1 cross-site request forgery | 8.1v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-40178 | Siemens Desigo PXM30-1 cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-40177 | Siemens Desigo PXM30-1 information disclosure | 5.7v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-40176 | Siemens Desigo PXM30-1 OS command injection | 8.0v3.1 | 1.2% | 2022-10-11 | Fix |
| CVE-2022-40147 | Siemens Industrial Edge Management improper certificate validation | 7.4v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-40138 | Facebook Hermes incorrect numeric conversion | 9.8v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-40047 | FlatPress cross-site scripting | 5.4v3.1 | 1.2% | 2022-10-11 | Nuclei |
| CVE-2022-39808 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-39807 | SAP 3D Visual Enterprise Author crash | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-39806 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-39805 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-39804 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-39803 | SAP 3D Visual Enterprise Author out-of-bounds write | 7.8v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-39802 | SAP Manufacturing Execution path traversal | 7.5v3.1 | 9.1% | 2022-10-11 | Exploit codeFix |
| CVE-2022-39800 | SAP Business Objects Business Intelligence Platform (BI Launchpad) cross-site scripting | 6.1v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-39296 | melisplatform melis-asset-manager path traversal in MelisAssetManager | 8.6CNA v3.1 | 1.7% | 2022-10-11 | Fix |
| CVE-2022-39271 | Traefik HTTP/2 connections management could cause a denial of service | 7.5CNA v3.1 | 1.1% | 2022-10-11 | Fix |
| CVE-2022-39015 | SAP BusinessObjects Business Intelligence Platform (AdminTools/Query Builder) resource exposure | 6.5v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-39013 | SAP BusinessObjects Business Intelligence Platform (Program Objects) information disclosure | 7.6v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38465 | Siemens SIMATIC Drive Controller family insufficiently protected credentials | 9.3CNA v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-38388 | IBM Navigator Mobile improper access control | 4.0CNA v3.0 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-38371 | Siemens APOGEE MBC (PPC) (BACnet) resource exhaustion | 8.7CNA v4.0 | 1.4% | 2022-10-11 | Fix |
| CVE-2022-38138 | Triangle MicroWorks Library: IEC 61850 uninitialized pointer access | 7.5v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-38086 | Shortcodes Ultimate WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-38053 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 76.4% | 2022-10-11 | Fix |
| CVE-2022-38051 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 7.3% | 2022-10-11 | Fix |
| CVE-2022-38050 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 7.3% | 2022-10-11 | Fix |
| CVE-2022-38049 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-38048 | Microsoft Office remote code execution | 7.8CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-38047 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.2% | 2022-10-11 | Fix |
| CVE-2022-38046 | Microsoft Windows Web Account Manager information disclosure | 7.5CNA v3.1 | 1.9% | 2022-10-11 | Fix |
| CVE-2022-38045 | Microsoft Windows Server service elevation of privilege | 8.8CNA v3.1 | 2.3% | 2022-10-11 | Fix |
| CVE-2022-38044 | Microsoft Windows CD-ROM File System driver remote code execution | 7.8CNA v3.1 | 56.3% | 2022-10-11 | Fix |
| CVE-2022-38043 | Microsoft Windows Security Support Provider interface information disclosure | 5.5CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38042 | Microsoft Windows active Directory Domain services elevation of privilege | 7.1CNA v3.1 | 1.4% | 2022-10-11 | Fix |
| CVE-2022-38041 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 2.2% | 2022-10-11 | Fix |
| CVE-2022-38040 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-38039 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38038 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-38037 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-38036 | Microsoft Windows internet Key Exchange (IKE) protocol denial of service | 7.5CNA v3.1 | 2.2% | 2022-10-11 | Fix |
| CVE-2022-38034 | Microsoft Windows Workstation service elevation of privilege | 8.8CNA v3.1 | 3.2% | 2022-10-11 | Fix |
| CVE-2022-38033 | Microsoft Windows Server Remotely Accessible Registry Keys information disclosure | 6.5CNA v3.1 | 1.7% | 2022-10-11 | Fix |
| CVE-2022-38032 | Microsoft Windows Portable Device Enumerator service security feature bypass | 6.6CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38031 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-38030 | Microsoft Windows USB Serial driver information disclosure | 4.3CNA v3.1 | 0.7% | 2022-10-11 | Fix |
| CVE-2022-38029 | Microsoft Windows ALPC elevation of privilege | 7.0CNA v3.1 | 0.7% | 2022-10-11 | Exploit codeFix |
| CVE-2022-38028 | Microsoft Windows Print Spooler privilege escalation | 7.8CNA v3.1 | 14.9% | 2022-10-11 | KEVFix |
| CVE-2022-38027 | Microsoft Windows Storage elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-38026 | Microsoft Windows DHCP client information disclosure | 5.5CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38025 | Microsoft Windows Distributed File System (DFS) information disclosure | 5.5CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38022 | Microsoft Windows Kernel elevation of privilege | 3.3CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38021 | Microsoft Windows Connected User Experiences and Telemetry elevation of privilege | 7.0CNA v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-38017 | Microsoft StorSimple 8000 Series elevation of privilege | 6.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38016 | Microsoft Windows Local Security Authority (LSA) elevation of privilege | 8.8CNA v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-38003 | Microsoft Windows Resilient File System elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-38001 | Microsoft Office spoofing | 6.5CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-38000 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.4% | 2022-10-11 | Fix |
| CVE-2022-37999 | Microsoft Windows Group Policy Preference client elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37998 | Microsoft Windows Local Session Manager (LSM) denial of service | 7.7CNA v3.1 | 3.0% | 2022-10-11 | Fix |
| CVE-2022-37997 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37996 | Microsoft Windows Kernel Memory information disclosure | 5.5CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37995 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37994 | Microsoft Windows Group Policy Preference client elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37993 | Microsoft Windows Group Policy Preference client elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37991 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-37990 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37989 | Microsoft Windows Client Server Run-time Subsystem (CSRSS) elevation of privilege | 7.8CNA v3.1 | 9.3% | 2022-10-11 | Fix |
| CVE-2022-37988 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-37987 | Microsoft Windows Client Server Run-time Subsystem (CSRSS) elevation of privilege | 7.8CNA v3.1 | 9.1% | 2022-10-11 | Fix |
| CVE-2022-37986 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-37985 | Microsoft Windows Graphics component information disclosure | 5.5CNA v3.1 | 38.6% | 2022-10-11 | Fix |
| CVE-2022-37984 | Microsoft Windows WLAN service elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-37983 | Microsoft DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-37982 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-37981 | Microsoft Windows Event Logging service denial of service | 4.3CNA v3.1 | 2.3% | 2022-10-11 | Fix |
| CVE-2022-37980 | Microsoft Windows DHCP client elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37979 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-37978 | Microsoft Windows Active Directory Certificate services security feature bypass | 7.5CNA v3.1 | 1.5% | 2022-10-11 | Fix |
| CVE-2022-37977 | Microsoft Windows local Security Authority subsystem Service (LSASS) denial of service | 6.5CNA v3.1 | 1.9% | 2022-10-11 | Fix |
| CVE-2022-37976 | Microsoft Windows active Directory Certificate services elevation of privilege | 8.8CNA v3.1 | 2.0% | 2022-10-11 | Fix |
| CVE-2022-37975 | Microsoft Windows Group Policy elevation of privilege | 8.8CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-37974 | Microsoft Windows Mixed Reality Developer tools information disclosure | 6.5CNA v3.1 | 36.3% | 2022-10-11 | Fix |
| CVE-2022-37973 | Microsoft Windows Local Session Manager (LSM) denial of service | 7.7CNA v3.1 | 3.0% | 2022-10-11 | Fix |
| CVE-2022-37971 | Microsoft Windows Defender elevation of privilege | 7.1CNA v3.1 | 0.7% | 2022-10-11 | Fix |
| CVE-2022-37970 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 9.8% | 2022-10-11 | Fix |
| CVE-2022-37968 | Microsoft Azure Arc-enabled Kubernetes cluster Connect elevation of privilege | 10.0CNA v3.1 | 2.6% | 2022-10-11 | Fix |
| CVE-2022-37965 | Microsoft Windows Point-to-Point Tunneling protocol denial of service | 5.9CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-37864 | Siemens Solid Edge heap-based buffer overflow | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-37617 | Thlorenz Browserify-shim vulnerable to prototype pollution | 9.8v3.1 | 1.2% | 2022-10-11 | Fix |
| CVE-2022-37616 | xmldom function copy in dom.js in the prototype pollution | 9.8v3.1 | 1.7% | 2022-10-11 | Fix |
| CVE-2022-37609 | js-beautify beautify-web prototype pollution | 9.8v3.1 | 1.4% | 2022-10-11 | Fix |
| CVE-2022-37599 | Loader-utils is vulnerable to regular expression denial of service (ReDoS) | 7.5v3.1 | 2.2% | 2022-10-11 | Fix |
| CVE-2022-36363 | Siemens LOGO! 12/24RCE improper index validation | 5.3CNA v3.1 | 0.4% | 2022-10-11 | |
| CVE-2022-36362 | Siemens LOGO! 12/24RCE improper input validation | 7.5CNA v3.1 | 0.9% | 2022-10-11 | |
| CVE-2022-36361 | Siemens LOGO! 12/24RCE buffer overflow | 9.8CNA v3.1 | 1.0% | 2022-10-11 | |
| CVE-2022-36360 | Siemens LOGO! 8 BM (incl. SIPLUS variants) insufficient verification of data authenticity | 7.5v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-35829 | Microsoft Service Fabric Explorer spoofing | 6.2CNA v3.1 | 18.5% | 2022-10-11 | Fix |
| CVE-2022-35770 | Microsoft Windows NTLM spoofing | 6.5CNA v3.1 | 1.7% | 2022-10-11 | Fix |
| CVE-2022-35299 | SAP SQL Anywhere stack-based buffer overflow | 9.8v3.1 | 1.1% | 2022-10-11 | Fix |
| CVE-2022-35297 | SAP Enable Now cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-35296 | SAP BusinessObjects Business Intelligence Platform information disclosure | 4.9v3.1 | 0.8% | 2022-10-11 | Fix |
| CVE-2022-35289 | Facebook Hermes write-what-where condition | 9.8v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-35226 | SAP Data Services Management Console cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-34689 | Microsoft Windows CryptoAPI spoofing | 7.5CNA v3.1 | 37.9% | 2022-10-11 | Fix |
| CVE-2022-34434 | Dell Cloud Mobility for Dell Storage improper authorization | 6.7CNA v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-34432 | Dell Hybrid Client (DHC) command injection | 7.3CNA v3.1 | 0.4% | 2022-10-11 | Fix |
| CVE-2022-34431 | Dell Hybrid Client (DHC) improper access control | 6.5CNA v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-34430 | Dell Hybrid Client (DHC) path traversal | 7.1CNA v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-34427 | Dell Container Storage Modules OS command injection | 8.8CNA v3.1 | 2.2% | 2022-10-11 | Fix |
| CVE-2022-34426 | Dell Container Storage Modules path traversal | 8.8CNA v3.1 | 1.6% | 2022-10-11 | Fix |
| CVE-2022-33978 | FontMeister WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-10-11 | |
| CVE-2022-33749 | Xapi resource exhaustion | 5.3v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-33748 | Xen improper exception handling | 5.6v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-33747 | Xen improper resource release | 3.8v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-33746 | Xen improper resource release | 6.5v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-33645 | Microsoft Windows TCP/IP driver denial of service | 7.5CNA v3.1 | 2.2% | 2022-10-11 | Fix |
| CVE-2022-33635 | Microsoft Windows GDI+ remote code execution | 7.8CNA v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-33634 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.2% | 2022-10-11 | Fix |
| CVE-2022-32492 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-32486 | Dell CPG BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-32234 | Facebook Hermes An out-of-bounds write | 9.8v3.1 | 1.0% | 2022-10-11 | Fix |
| CVE-2022-32175 | AdGuardHome vulnerable to cross-site request forgery | 5.4v3.1 | 0.3% | 2022-10-11 | Fix |
| CVE-2022-32174 | Gogs vulnerable to cross-site scripting | 9.0v3.1 | 58.0% | 2022-10-11 | |
| CVE-2022-31766 | Siemens RUGGEDCOM RM1224 LTE(4G) EU improper input validation | 8.6CNA v3.1 | 1.1% | 2022-10-11 | Fix |
| CVE-2022-31765 | Siemens RUGGEDCOM RM1224 LTE(4G) EU missing authorization | 8.8CNA v3.1 | 0.9% | 2022-10-11 | Fix |
| CVE-2022-31682 | VMware Aria Operations arbitrary file read | 4.9v3.1 | 0.6% | 2022-10-11 | Fix |
| CVE-2022-30198 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.2% | 2022-10-11 | Fix |
| CVE-2022-24504 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.2% | 2022-10-11 | Fix |
| CVE-2022-22035 | Microsoft Windows Point-to-Point Tunneling protocol remote code execution | 8.1CNA v3.1 | 1.3% | 2022-10-11 | Fix |
| CVE-2022-20440 | Google Android Messaging app vulnerability | 5.5v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20439 | Google Android Messaging app vulnerability | 5.5v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20438 | Google Android Messaging app vulnerability | 5.5v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20437 | Google Android Messaging app vulnerability | 5.5v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20436 | Android incorrect default permissions | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20435 | Android incorrect default permissions | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20434 | Android system service missing authorization | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20433 | Android system service missing authorization | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20432 | Android system service missing authorization | 7.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20431 | Android system service missing authorization | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20430 | Android system service missing authorization | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20429 | Android app packages insecure permissions | 8.8v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20425 | Android ZenModeHelper.java denial of service | 5.5v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20423 | Android rndis.c out-of-bounds write | 4.6v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20422 | Android armv8_deprecated.c privilege escalation | 7.0NVD v3.1 | 0.2% | 2022-10-11 | Fix |
| CVE-2022-20421 | Android binder.c privilege escalation | 7.8NVD v3.1 | 0.6% | 2022-10-11 | Exploit codeFix |
| CVE-2022-20420 | Android AppRestrictionController.java privilege escalation | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20419 | Android ActivityRecord.java privilege escalation | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20418 | Android AAVCAssembler.cpp out-of-bounds read | 7.5v3.1 | 0.5% | 2022-10-11 | Fix |
| CVE-2022-20417 | Android HidlUtils.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20416 | Android HidlUtils.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20415 | Android privilege escalation | 7.8v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20413 | Android Threads.cpp information disclosure | 5.5v3.1 | 0.3% | 2022-10-11 | Exploit codeFix |
| CVE-2022-20412 | Android fdt.c out-of-bounds read | 6.7v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20410 | Android avrc_pars_ct.cc out-of-bounds read | 7.5v3.1 | 0.7% | 2022-10-11 | Fix |
| CVE-2022-20409 | Android io_uring.c privilege escalation | 6.7v3.1 | 0.6% | 2022-10-11 | Exploit codeKCVFix |
| CVE-2022-20394 | Android InputMethodManagerService.java information disclosure | 5.0v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-20351 | Android CallLogProvider.java information disclosure | 5.5v3.1 | 0.1% | 2022-10-11 | Fix |
| CVE-2022-3453 | SourceCodester Book Store Management System transcation.php cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-11 | |
| CVE-2022-3452 | SourceCodester Book Store Management System category.php cross-site scripting | 5.4v3.1 | 0.4% | 2022-10-11 | |
| CVE-2022-3358 | OpenSSL using a Custom Cipher with NID_undef may lead to null encryption | 7.5v3.1 | 3.1% | 2022-10-11 | Exploit codeFix |
| CVE-2022-3140 | The Document Foundation LibreOffice macro URL arbitrary script execution | 6.3v3.1 | 6.9% | 2022-10-11 | Fix |
| CVE-2022-42725 | Linux Mint Warpinator link following | 7.5v3.1 | 1.3% | 2022-10-10 | |
| CVE-2022-42724 | MISP incorrect authorization | 4.3v3.1 | 0.5% | 2022-10-10 | |
| CVE-2022-42012 | Freedesktop Dbus crash | 6.5v3.1 | 1.4% | 2022-10-10 | Fix |
| CVE-2022-42011 | Freedesktop Dbus improper array index validation | 6.5v3.1 | 1.4% | 2022-10-10 | Fix |
| CVE-2022-42010 | Freedesktop Dbus improper signature verification | 6.5v3.1 | 0.9% | 2022-10-10 | Fix |
| CVE-2022-41749 | Trend Micro Apex One An origin validation error | 7.8v3.1 | 0.2% | 2022-10-10 | Fix |
| CVE-2022-41748 | Trend Micro Apex One incorrect default permissions | 6.7v3.1 | 0.2% | 2022-10-10 | Fix |
| CVE-2022-41747 | Trend Micro Apex One improper certificate validation | 7.8v3.1 | 0.2% | 2022-10-10 | Fix |
| CVE-2022-41746 | Trend Micro Apex One forced browsing | 9.1v3.1 | 1.0% | 2022-10-10 | Fix |
| CVE-2022-41745 | Trend Micro Apex One An out-of-bounds access | 7.0v3.1 | 0.7% | 2022-10-10 | Fix |
| CVE-2022-41744 | Trend Micro Apex One time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2022-10-10 | Fix |
| CVE-2022-40257 | An HTML injection vulnerability exists in CERT/CC VINCE software prior to | 5.4v3.1 | 0.4% | 2022-10-10 | Fix |
| CVE-2022-40248 | An HTML injection vulnerability exists in CERT/CC VINCE software prior to | 5.4v3.1 | 0.4% | 2022-10-10 | Fix |
| CVE-2022-39292 | Exposure of sensitive Slack webhook URLs in debug logs and traces | 7.5CNA v3.1 | 0.7% | 2022-10-10 | Fix |
| CVE-2022-39288 | Denial of service in Fastify via Content-Type header | 7.5CNA v3.1 | 59.2% | 2022-10-10 | Fix |
| CVE-2022-36063 | USBX Host CDC ECM integer underflow with buffer overflow | 7.6CNA v3.1 | 1.7% | 2022-10-10 | Fix |
| CVE-2022-34425 | Dell Enterprise SONiC OS hard-coded cryptographic key | 7.5CNA v3.1 | 0.8% | 2022-10-10 | Fix |
| CVE-2022-34402 | Dell Wyse Proprietary OS (Modern ThinOS) regular expression denial of service | 6.8CNA v3.1 | 0.6% | 2022-10-10 | Fix |
| CVE-2022-34334 | IBM Sterling Partner Engagement Manager session fixation | 6.3CNA v3.0 | 0.4% | 2022-10-10 | Fix |
| CVE-2022-26121 | Fortinet FortiAnalyzer resource exposure | 3.7CNA v3.1 | 0.8% | 2022-10-10 | Fix |
| CVE-2022-20944 | Cisco IOS XE Software for Catalyst 9200 Series Switches arbitrary code execution | 6.1CNA v3.1 | 0.2% | 2022-10-10 | Fix |
| CVE-2022-20920 | Cisco IOS and IOS XE Software SSH denial of service | 7.7CNA v3.1 | 0.9% | 2022-10-10 | Fix |
| CVE-2022-20915 | Cisco IOS XE Software IPv6 VPN over MPLS denial of service | 7.4CNA v3.1 | 0.3% | 2022-10-10 | Fix |
| CVE-2022-20870 | Cisco IOS XE Software for Catalyst Switches MPLS denial of service | 8.6CNA v3.1 | 0.9% | 2022-10-10 | Fix |
| CVE-2022-20864 | Cisco IOS XE ROM Monitor Software for Catalyst Switches information disclosure | 4.6CNA v3.1 | 0.3% | 2022-10-10 | Fix |
| CVE-2022-20837 | Cisco IOS XE Software DNS NAT protocol Application Layer Gateway denial of service | 8.6CNA v3.1 | 0.9% | 2022-10-10 | Fix |
| CVE-2022-20830 | Cisco Software-Defined Application Visibility and Control on Cisco vManage authentication bypass | 5.3CNA v3.1 | 0.7% | 2022-10-10 | Fix |
| CVE-2022-3442 | Crealogix EBICS ebics.aspx cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-10 | |
| CVE-2022-3438 | Open redirect in ikus060/rdiffweb | 6.1v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-3433 | aeson hash collision handling denial of service | 6.5NVD v3.1 | 0.8% | 2022-10-10 | Fix |
| CVE-2022-3220 | Advanced Comment Form WordPress plugin Admin+ authenticated stored XSS | 4.8NVD v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-3209 | Soledad WordPress theme reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-3208 | Simple File List WordPress plugin page creation via CSRF | 6.5NVD v3.1 | 0.4% | 2022-10-10 | Fix |
| CVE-2022-3207 | Simple File List WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-3154 | Woo Billingo Plus WordPress plugin Multiple plugins from Viszt Peter multiple CSRF | 7.1NVD v3.1 | 0.4% | 2022-10-10 | Fix |
| CVE-2022-3137 | TaskBuilder WordPress plugin Subscriber+ stored XSS via SVG file upload | 5.4NVD v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-3136 | Social Rocket WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-2981 | Download Monitor WordPress plugin Admin+ arbitrary file download | 4.9NVD v3.1 | 1.0% | 2022-10-10 | Fix |
| CVE-2022-2891 | WP 2FA WordPress plugin time-based side-channel Attack | 5.9NVD v3.1 | 0.8% | 2022-10-10 | Fix |
| CVE-2022-2823 | Slider, Gallery, and Carousel by MetaSlider WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-10-10 | Fix |
| CVE-2022-2629 | Top Bar WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-10 | Fix |
| CVE-2022-2554 | Enable Media Replace WordPress plugin Admin+ path traversal | 4.9NVD v3.1 | 0.9% | 2022-10-10 | Fix |
| CVE-2022-2448 | reSmush.it Image Optimizer WordPress plugin Admin+ cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-10-10 | Fix |
| CVE-2022-2350 | Brainvire Disable User Login settings update cross-site request forgery | 5.3NVD v3.1 | 0.4% | 2022-10-10 | |
| CVE-2022-42703 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.9% | 2022-10-09 | Exploit codeFix |
| CVE-2022-3436 | SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload | 7.5v3.1 | 0.5% | 2022-10-09 | |
| CVE-2022-39281 | Remote denial of service via Tasks endpoint in fat_free_crm | 6.5CNA v3.1 | 1.8% | 2022-10-08 | Fix |
| CVE-2022-3435 | Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds | 4.3v3.1 | 5.1% | 2022-10-08 | Fix |
| CVE-2022-3434 | SourceCodester Web-Based Student Clearance System add-student.php prepare cross-site scripting | 5.4v3.1 | 0.5% | 2022-10-08 | Fix |
| CVE-2022-42092 | Backdrop CMS unrestricted file upload | 7.2v3.1 | 1.6% | 2022-10-07 | Exploit code |
| CVE-2022-42075 | Wedding Planner arbitrary code execution | 9.8v3.1 | 1.2% | 2022-10-07 | |
| CVE-2022-42074 | Online Diagnostic Lab Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-42073 | Online Diagnostic Lab Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-41672 | Apache Airflow session still functional after user is deactivated | 8.1v3.1 | 1.3% | 2022-10-07 | Fix |
| CVE-2022-41574 | gradle Enterprise incorrect authorization | 7.5v3.1 | 0.7% | 2022-10-07 | Fix |
| CVE-2022-41515 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-41514 | Open Source Sacco Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-41513 | Online Diagnostic Lab Management System SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-41512 | Online Diagnostic Lab Management System component /php_action/editFile.php arbitrary file upload | 7.2v3.1 | 1.0% | 2022-10-07 | |
| CVE-2022-41442 | Picuploader cross-site scripting | 6.1v3.1 | 0.5% | 2022-10-07 | |
| CVE-2022-41414 | Liferay Portal insecure default Configuration in auth.login.prompt.enabled | 5.3v3.1 | 0.5% | 2022-10-07 | Fix |
| CVE-2022-41392 | total.js TotalJS commit cross-site scripting | 5.4v3.1 | 0.7% | 2022-10-07 | |
| CVE-2022-41379 | Online Leave Management System arbitrary file upload | 7.2v3.1 | 1.0% | 2022-10-07 | |
| CVE-2022-41378 | Online Pet Shop We App SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-41377 | Online Pet Shop We App SQL injection | 7.2v3.1 | 0.8% | 2022-10-07 | |
| CVE-2022-41291 | IBM InfoSphere Information Server insufficient session expiration | 6.3CNA v3.0 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-40872 | Simple E-Learning System SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | |
| CVE-2022-40835 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40834 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40833 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40832 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40831 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40830 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40829 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40828 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40827 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40826 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40825 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-40824 | Codeigniter SQL injection | 9.8v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-39959 | Panini Everest Engine unquoted search path | 7.8v3.1 | 0.6% | 2022-10-07 | Exploit codeFix |
| CVE-2022-39878 | Samsung Mobile Samsung Checkout improper access control | 4.0CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39877 | Samsung Mobile Group Sharing ProfileSharingAccount improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39876 | Samsung Mobile Reminder sensitive information in log files | 5.9CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39875 | Samsung Mobile Samsung Account improper access control | 5.1CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39874 | Samsung Mobile Samsung Account Sensitive log information disclosure | 4.0CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39873 | Samsung Mobile Samsung Internet improper authorization | 4.3CNA v3.1 | 0.3% | 2022-10-07 | Fix |
| CVE-2022-39872 | Samsung Mobile ShareLive improper handling of insufficient permissions | 5.9CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39871 | Samsung Mobile SmartThings improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39870 | Samsung Mobile SmartThings cloudNotificationManager.java improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39869 | Samsung Mobile SmartThings cloudNotificationManager.java improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39868 | Samsung Mobile SmartThings GedSamsungAccount.kt improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39867 | Samsung Mobile SmartThings cloudNotificationManager.java improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39866 | Samsung Mobile SmartThings RegisteredEventMediator.kt improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39865 | Samsung Mobile SmartThings ContentsSharingActivity.java improper access control | 4.0CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39864 | Samsung Mobile SmartThings WifiSetupLaunchHelper improper access control | 3.3CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39863 | Samsung Mobile Samsung Account improper input validation | 3.6CNA v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-39862 | Samsung Dynamic Lockscreen improper authorization | 5.3CNA v3.1 | 0.6% | 2022-10-07 | Fix |
| CVE-2022-39861 | Samsung Mobile FactoryCamera missing authorization | 5.9CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39860 | Samsung Mobile Quick Share improper access control | 4.4CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39859 | Samsung Mobile UPHelper information disclosure | 4.0CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39858 | Samsung Mobile FactoryCamera AtBroadcastReceiver path traversal | 7.3CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39857 | Samsung Mobile FactoryCameraFB CameraTestActivity improper access control | 7.3CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39856 | Samsung Mobile Devices imsservice application improper access control | 4.0CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39855 | Samsung Mobile Devices FACM application improper access control | 5.1CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39854 | Samsung Mobile Devices unauthorized access | 6.4CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39853 | Samsung Mobile Devices perf-mgr driver use-after-free | 4.4CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39852 | Samsung Mobile Devices heap-based buffer overflow | 8.0CNA v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-39851 | Samsung Mobile Devices CocktailBarService improper access control | 4.0CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39850 | Samsung Mobile Devices mum_container_policy service improper access control | 3.3v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39849 | Samsung Mobile Devices knox_vpn_policy service improper access control | 3.3v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39848 | Samsung Mobile Devices AT_Distributor information disclosure | 4.0CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39847 | Samsung Mobile Devices use-after-free | 4.9CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-39291 | Denial of service through logs in ZoneMinder | 5.4CNA v3.1 | 7.1% | 2022-10-07 | Exploit codeFix |
| CVE-2022-39290 | CSRF key bypass using HTTP methods in ZoneMinder | 8.0CNA v3.1 | 7.9% | 2022-10-07 | Exploit codeFix |
| CVE-2022-39289 | Database log access in ZoneMinder | 9.1CNA v3.1 | 0.9% | 2022-10-07 | Fix |
| CVE-2022-39287 | Plaintext transmission of CSRF tokens in tiny-csrf | 8.1CNA v3.1 | 0.5% | 2022-10-07 | Fix |
| CVE-2022-39285 | Stored cross-site scripting vulnerability in file parameter in ZoneMinder | 7.6CNA v3.1 | 5.1% | 2022-10-07 | Exploit codeFix |
| CVE-2022-37896 | Aruba Access Points: 100 Series cross-site scripting | 6.1v3.1 | 0.6% | 2022-10-07 | Fix |
| CVE-2022-37895 | Aruba Instant denial of service | 4.9v3.1 | 0.8% | 2022-10-07 | Fix |
| CVE-2022-37894 | Aruba Instant denial of service | 6.5v3.1 | 0.4% | 2022-10-07 | Fix |
| CVE-2022-37893 | Aruba Instant command injection | 7.8v3.1 | 0.8% | 2022-10-07 | Fix |
| CVE-2022-37892 | Aruba Access Points: 100 Series cross-site scripting | 5.4v3.1 | 0.6% | 2022-10-07 | Fix |
| CVE-2022-37891 | Aruba Access Points: 100 Series buffer overflow | 9.8v3.1 | 1.1% | 2022-10-07 | Fix |
| CVE-2022-37890 | Aruba Access Points: 100 Series buffer overflow | 9.8v3.1 | 1.1% | 2022-10-07 | Fix |
| CVE-2022-37889 | Aruba Access Points: 100 Series multiple underlying services buffer overflow | 9.8v3.1 | 1.7% | 2022-10-07 | Fix |
| CVE-2022-37887 | Aruba Access Points: 100 Series multiple underlying services buffer overflow | 9.8v3.1 | 1.7% | 2022-10-07 | Fix |
| CVE-2022-37886 | Aruba Access Points: 100 Series multiple underlying services buffer overflow | 9.8v3.1 | 1.5% | 2022-10-07 | Fix |
| CVE-2022-37885 | Aruba Access Points: 100 Series multiple underlying services buffer overflow | 9.8v3.1 | 1.5% | 2022-10-07 | Fix |
| CVE-2022-36868 | Samsung Mobile Devices improper input validation | 5.9CNA v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-36772 | IBM InfoSphere Information Server information disclosure | 4.3CNA v3.0 | 0.7% | 2022-10-07 | Fix |
| CVE-2022-36635 | ZKTeco Zkbiosecurity V5000 SQL injection | 8.8v3.1 | 16.6% | 2022-10-07 | Emerging Threats |
| CVE-2022-36634 | ZKTeco Zkbiosecurity V5000 improper access control | 8.8v3.1 | 1.1% | 2022-10-07 | |
| CVE-2022-34308 | IBM CICS TX Standard resource exhaustion | 6.2CNA v3.0 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-33896 | Hancom Office 2020 way Hword buffer underflow | 7.8v3.1 | 0.5% | 2022-10-07 | |
| CVE-2022-32593 | MediaTek MT6983 improper input validation in vowe | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-32592 | MediaTek chipsets improper input validation in cpu dvfs | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-32591 | MediaTek chipsets improper input validation in ril | 7.5v3.1 | 0.7% | 2022-10-07 | Fix |
| CVE-2022-32590 | MediaTek chipsets improper check or handling of exceptional conditions in wlan | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-32589 | MediaTek chipsets improper resource shutdown or release in Wi-Fi driver | 7.5v3.1 | 0.7% | 2022-10-07 | Fix |
| CVE-2022-31681 | VMware ESXi null pointer dereference | 6.5v3.1 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-31680 | VMware vCenter Server deserialization of untrusted data | 9.1v3.1 | 33.1% | 2022-10-07 | Fix |
| CVE-2022-30613 | IBM QRadar SIEM information disclosure | 4.4CNA v3.0 | 0.2% | 2022-10-07 | Fix |
| CVE-2022-26475 | MediaTek chipsets improper input validation in wlan | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-26474 | MediaTek chipsets incorrect calculation of buffer size in sensorhub | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-26473 | MediaTek chipsets improper synchronization in vdec fmt | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-26472 | MediaTek chipsets deserialization of untrusted data in ims | 7.8v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-26471 | MediaTek chipsets deserialization of untrusted data in telephony | 7.8v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-26452 | MediaTek chipsets improper synchronization in isp | 6.7v3.1 | 0.1% | 2022-10-07 | Fix |
| CVE-2022-22493 | IBM WebSphere Automation for Cloud Pak for Watson AIOps cross-site request forgery | 3.5CNA v3.0 | 0.3% | 2022-10-07 | Fix |
| CVE-2022-22480 | IBM QRadar SIEM information disclosure | 5.3CNA v3.0 | 0.8% | 2022-10-07 | Fix |
| CVE-2022-21936 | Johnson Controls Metasys for Validated Environments SMP UI improper authentication | 8.1CNA v3.1 | 0.6% | 2022-10-07 | Fix |
| CVE-2022-3423 | Allocation of resources without limits or throttling in nocodb/nocodb | 6.5NVD v3.1 | 2.3% | 2022-10-07 | Fix |
| CVE-2022-3422 | Improper privilege management in ToolJet/ToolJet | 7.5NVD v3.1 | 1.0% | 2022-10-07 | Fix |
| CVE-2022-3414 | SourceCodester Web-Based Student Clearance System POST parameter login.php SQL injection | 9.8v3.1 | 0.6% | 2022-10-07 | |
| CVE-2022-3276 | Puppetlabs-mysql command injection | 8.8v3.1 | 1.6% | 2022-10-07 | Fix |
| CVE-2022-3275 | Puppetlabs-apt command injection | 9.8v3.1 | 2.1% | 2022-10-07 | Fix |
| CVE-2022-2929 | ISC DHCP FQDN label parsing memory leak | 6.5CNA v3.1 | 0.7% | 2022-10-07 | Fix |
| CVE-2022-2928 | ISC DHCP an option refcount overflow exists in dhcpd | 6.5CNA v3.1 | 0.7% | 2022-10-07 | Fix |
| CVE-2022-42457 | Generex CS141 remote command execution | 7.2NVD v3.1 | 3.1% | 2022-10-06 | Fix |
| CVE-2022-42250 | oretnom23 Simple Cold Storage Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-42249 | oretnom23 Simple Cold Storage Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-42243 | oretnom23 Simple Cold Storage Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-42242 | oretnom23 Simple Cold Storage Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-42241 | oretnom23 Simple Cold Storage Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41853 | Remote code execution in HyperSQL DataBase | 9.8NVD v3.1 | 5.1% | 2022-10-06 | Fix |
| CVE-2022-41556 | lighttpd gw_backend.c resource leak | 7.5v3.1 | 2.9% | 2022-10-06 | Fix |
| CVE-2022-41528 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41527 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41526 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41525 | TOTOLINK NR1800X OS command injection | 9.8v3.1 | 1.8% | 2022-10-06 | |
| CVE-2022-41524 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41523 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41522 | TOTOLINK NR1800X out-of-bounds write | 9.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41521 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41520 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41518 | TOTOLINK NR1800X OS command injection | 9.8v3.1 | 1.8% | 2022-10-06 | |
| CVE-2022-41517 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41355 | Online Leave Management System SQL injection | 7.2v3.1 | 0.9% | 2022-10-06 | |
| CVE-2022-41294 | IBM Robotic Process Automation origin validation error | 6.5CNA v3.0 | 0.3% | 2022-10-06 | Fix |
| CVE-2022-40895 | Nedi observable discrepancy | 9.1v3.1 | 1.7% | 2022-10-06 | Fix |
| CVE-2022-40494 | Ehang-io Nps improper authentication | 9.8v3.1 | 1.7% | 2022-10-06 | |
| CVE-2022-40160 | Stack overflow in JXPath | 6.5v3.1 | 1.3% | 2022-10-06 | |
| CVE-2022-40159 | Stack overflow in JXPath | 6.5v3.1 | 1.3% | 2022-10-06 | |
| CVE-2022-39988 | Centreon A cross-site scripting | 5.4v3.1 | 0.7% | 2022-10-06 | Fix |
| CVE-2022-39284 | Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued in CodeIgniter4 | 2.6CNA v3.1 | 1.1% | 2022-10-06 | Fix |
| CVE-2022-39280 | Regular expression denial of service in dparse | 5.9CNA v3.1 | 1.3% | 2022-10-06 | Fix |
| CVE-2022-39279 | Discourse-chat plugin susceptible to XSS in channel name and description | 4.3CNA v3.1 | 0.5% | 2022-10-06 | Fix |
| CVE-2022-39275 | Improper object type validation in saleor | 5.3CNA v3.1 | 0.8% | 2022-10-06 | Exploit codeFix |
| CVE-2022-39274 | Buffer overflow in `ProcessRadioRxDone` in LoRaMac-node | 7.5CNA v3.1 | 2.0% | 2022-10-06 | Fix |
| CVE-2022-39273 | Default OAuth Authorization Server secret in FlyteAdmin | 4.8CNA v3.1 | 0.9% | 2022-10-06 | Fix |
| CVE-2022-39270 | Arbitrary HTML injection in table-of-contents theme component in DiscoTOC | 5.4CNA v3.1 | 0.5% | 2022-10-06 | Fix |
| CVE-2022-39269 | Media transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip | 9.1CNA v3.1 | 0.7% | 2022-10-06 | Fix |
| CVE-2022-39265 | Mail settings' command parameter injection in mybb | 7.2CNA v3.1 | 3.0% | 2022-10-06 | Fix |
| CVE-2022-39244 | pjsip pjproject buffer overflow in pjlib scanner and pjmedia | 7.5CNA v3.1 | 1.5% | 2022-10-06 | Fix |
| CVE-2022-39237 | Digital Signature Hash Algorithms not Validated in sylabs/sif | 6.3CNA v3.1 | 0.6% | 2022-10-06 | Fix |
| CVE-2022-39222 | OAuth authorization code exposure in Dex | 9.3CNA v3.1 | 1.6% | 2022-10-06 | Fix |
| CVE-2022-38709 | IBM Robotic Process Automation cross-site scripting | 6.1CNA v3.0 | 0.5% | 2022-10-06 | Fix |
| CVE-2022-37888 | Aruba Access Points: 100 Series multiple underlying services buffer overflow | 9.8v3.1 | 1.6% | 2022-10-06 | Fix |
| CVE-2022-36774 | IBM Robotic Process Automation man-in-the-middle | 6.5CNA v3.0 | 0.3% | 2022-10-06 | Fix |
| CVE-2022-32172 | Zinc cross-site scripting | – | 0.6% | 2022-10-06 | Fix |
| CVE-2022-32171 | Zinc cross-site scripting | – | 0.6% | 2022-10-06 | Fix |
| CVE-2022-31252 | SUSE Linux Enterprise Server 12-SP5 chkstat incorrect authorization | 4.4CNA v3.1 | 0.1% | 2022-10-06 | Fix |
| CVE-2022-31008 | Predictable credential obfuscation seed value used in rabbitmq-server | 5.5CNA v3.1 | 0.4% | 2022-10-06 | Fix |
| CVE-2022-27810 | Facebook Hermes uncontrolled recursion | 7.5v3.1 | 0.8% | 2022-10-06 | Fix |
| CVE-2022-26240 | Beckmancoulter Remisol Advance incorrect permission assignment | 6.5v3.1 | 0.6% | 2022-10-06 | |
| CVE-2022-26239 | Beckmancoulter Remisol Advance incorrect permission assignment | 5.5v3.1 | 0.2% | 2022-10-06 | |
| CVE-2022-26238 | Beckmancoulter Remisol Advance incorrect permission assignment | 5.5v3.1 | 0.2% | 2022-10-06 | |
| CVE-2022-26237 | Beckmancoulter Remisol Advance incorrect permission assignment | 5.5v3.1 | 0.2% | 2022-10-06 | |
| CVE-2022-26236 | Beckmancoulter Remisol Advance incorrect permission assignment | 5.5v3.1 | 0.2% | 2022-10-06 | |
| CVE-2022-26235 | Beckmancoulter Remisol Advance incorrect default permissions | 7.8v3.1 | 0.2% | 2022-10-06 | Fix |
| CVE-2022-22503 | IBM Robotic Process Automation clickjacking | 6.1CNA v3.0 | 0.7% | 2022-10-06 | Fix |
| CVE-2022-3398 | OMRON CX-Programmer out-of-bounds write | 9.8v3.1 | 0.6% | 2022-10-06 | Fix |
| CVE-2022-3397 | OMRON CX-Programmer out-of-bounds write | 9.8v3.1 | 0.6% | 2022-10-06 | Fix |
| CVE-2022-3396 | OMRON CX-Programmer out-of-bounds write | 9.8v3.1 | 0.6% | 2022-10-06 | Fix |
| CVE-2022-3389 | Path traversal in ikus060/rdiffweb | 7.5v3.1 | 1.1% | 2022-10-06 | Fix |
| CVE-2022-3376 | Weak password requirements in ikus060/rdiffweb | 5.3v3.1 | 0.7% | 2022-10-06 | Fix |
| CVE-2022-3273 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 9.8v3.1 | 0.5% | 2022-10-06 | Fix |
| CVE-2022-3002 | Cross-site scripting (XSS) Stored in yetiforcecompany/yetiforcecrm | 5.4v3.1 | 0.6% | 2022-10-06 | Fix |
| CVE-2022-2986 | Moodle cross-site request forgery (CSRF) | 8.8NVD v3.1 | 0.5% | 2022-10-06 | Fix |
| CVE-2022-2975 | Avaya Aura Application Enablement Services weak permissions in web application | 7.7CNA v3.1 | 0.2% | 2022-10-06 | Fix |
| CVE-2022-2783 | Octopus Deploy Octopus Server cross-site request forgery | 5.3v3.1 | 0.2% | 2022-10-06 | Fix |
| CVE-2022-2781 | Octopus Deploy Octopus Server weak cryptographic algorithm | 5.3v3.1 | 0.2% | 2022-10-06 | Fix |
| CVE-2022-2637 | Privilege escalation vulnerability in Hitachi Storage Plug-in for VMware vCenter | 5.4CNA v3.1 | 0.5% | 2022-10-06 | Fix |
| CVE-2022-42308 | Veritas NetBackup path traversal | 7.1NVD v3.1 | 0.2% | 2022-10-03 | Fix |
| CVE-2022-42307 | Veritas NetBackup XML external entity injection | 9.8v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-42306 | Veritas NetBackup null pointer dereference | 5.5v3.1 | 0.2% | 2022-10-03 | Fix |
| CVE-2022-42305 | Veritas NetBackup path traversal | 7.5v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-42304 | Veritas NetBackup SQL injection | 9.8v3.1 | 0.5% | 2022-10-03 | Fix |
| CVE-2022-42303 | Veritas NetBackup SQL injection | 9.8v3.1 | 0.5% | 2022-10-03 | Fix |
| CVE-2022-42302 | Veritas NetBackup SQL injection | 9.8v3.1 | 0.5% | 2022-10-03 | Fix |
| CVE-2022-42301 | Veritas NetBackup XML external entity injection | 8.8v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-42300 | Veritas NetBackup denial of service | 6.5v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-42299 | Veritas NetBackup denial of service | 7.5v3.1 | 0.7% | 2022-10-03 | Fix |
| CVE-2022-42247 | pfSense cross-site scripting | 6.1v3.1 | 2.6% | 2022-10-03 | |
| CVE-2022-41443 | phpipam HTTP header injection | 9.8v3.1 | 1.2% | 2022-10-03 | |
| CVE-2022-41430 | Axiosys Bento4 out-of-bounds write | 8.8v3.1 | 0.7% | 2022-10-03 | |
| CVE-2022-41429 | Axiosys Bento4 out-of-bounds write | 8.8v3.1 | 0.7% | 2022-10-03 | |
| CVE-2022-41428 | Axiosys Bento4 out-of-bounds write | 8.8v3.1 | 0.7% | 2022-10-03 | |
| CVE-2022-41427 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2022-10-03 | |
| CVE-2022-41426 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2022-10-03 | |
| CVE-2022-41425 | Axiosys Bento4 mp4decrypt vulnerability | 6.5v3.1 | 0.6% | 2022-10-03 | |
| CVE-2022-41424 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2022-10-03 | |
| CVE-2022-41423 | Axiosys Bento4 mp4fragment vulnerability | 6.5v3.1 | 0.6% | 2022-10-03 | |
| CVE-2022-41420 | NASM Netwide Assembler out-of-bounds write | 5.5v3.1 | 0.3% | 2022-10-03 | |
| CVE-2022-41419 | Axiosys Bento4 memory leak | 6.5v3.1 | 0.6% | 2022-10-03 | |
| CVE-2022-41301 | Subassembly Composer out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-03 | Fix |
| CVE-2022-41082 | Microsoft Exchange Server remote code execution | 8.0CNA v3.1 | 100.0% | 2022-10-03 | KEVMetasploitEmerging ThreatsSnortExploit codeKCVFix |
| CVE-2022-41040 | Microsoft Exchange Server server-side request forgery | 8.8CNA v3.1 | 100.0% | 2022-10-03 | KEVMetasploitEmerging ThreatsSnortExploit codeKCVFix |
| CVE-2022-40922 | LIEF vulnerable to denial of service through segmentation fault | 6.5v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-40886 | DedeCMS unrestricted file upload | 7.2v3.1 | 1.1% | 2022-10-03 | |
| CVE-2022-40764 | Snyk CLI affected by command injection | 7.8v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-40721 | CreativeDream file uploader php uploader arbitrary file upload | 9.8v3.1 | 1.2% | 2022-10-03 | |
| CVE-2022-40123 | Mojoportal path traversal | 6.5v3.1 | 1.0% | 2022-10-03 | |
| CVE-2022-38817 | Dapr Dashboard vulnerable to Incorrect Access Control | 7.5v3.1 | 3.2% | 2022-10-03 | Nuclei |
| CVE-2022-36551 | Heartex Label Studio Community Edition vulnerable to SSRF in the Data Import module | 6.5NVD v3.1 | 6.9% | 2022-10-03 | Exploit codeFix |
| CVE-2022-33890 | Autodesk Design Review out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-33889 | Autodesk® Design Review out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-03 | Fix |
| CVE-2022-33888 | utodesk® AutoCAD®, Advance Steel and Civil 3D® out-of-bounds write | 7.8v3.1 | 0.6% | 2022-10-03 | Fix |
| CVE-2022-33887 | utodesk® AutoCAD®, Advance Steel and Civil 3D® improper exception handling | 7.8v3.1 | 0.4% | 2022-10-03 | Fix |
| CVE-2022-33886 | Autodesk Maya improper exception handling | 7.8v3.1 | 1.0% | 2022-10-03 | Fix |
| CVE-2022-33885 | utodesk® AutoCAD®, Advance Steel and Civil 3D® out-of-bounds write | 7.8v3.1 | 1.0% | 2022-10-03 | Fix |
| CVE-2022-33884 | utodesk® AutoCAD®, Advance Steel and Civil 3D® out-of-bounds read | 7.5v3.1 | 2.6% | 2022-10-03 | Fix |
| CVE-2022-33883 | Moldflow Synergy out-of-bounds write | 7.8v3.1 | 0.4% | 2022-10-03 | Fix |
| CVE-2022-33882 | Autodesk desktop app privilege escalation | 9.8v3.1 | 0.9% | 2022-10-03 | Fix |
| CVE-2022-32173 | OrchardCore HTML injection | 5.4v3.1 | 0.5% | 2022-10-03 | Fix |
| CVE-2022-3132 | Goolytics - Simple Google Analytics WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.8% | 2022-10-03 | Fix |
| CVE-2022-3128 | Donation Thermometer WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-10-03 | Fix |
| CVE-2022-3125 | Frontend File Manager WordPress plugin Subscriber+ arbitrary file upload | 8.8NVD v3.1 | 1.5% | 2022-10-03 | Fix |
| CVE-2022-3124 | Frontend File Manager WordPress plugin unauthenticated file Renaming | 5.3NVD v3.1 | 8.3% | 2022-10-03 | NucleiFix |
| CVE-2022-2839 | Zephyr Project Manager WordPress plugin Unauthorised AJAX Calls to stored XSS | 5.4NVD v3.1 | 0.5% | 2022-10-03 | Fix |
| CVE-2022-2763 | WP Socializer WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-10-03 | Fix |
| CVE-2022-2628 | DSGVO All in one for WP WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-10-03 | Fix |
| CVE-2022-42004 | Uncontrolled resource consumption in FasterXML jackson-databind | 7.5NVD v3.1 | 3.4% | 2022-10-02 | Fix |
| CVE-2022-42003 | Uncontrolled resource consumption in Jackson-databind | 7.5NVD v3.1 | 3.4% | 2022-10-02 | Fix |
| CVE-2022-42002 | Sonicjs out-of-bounds write | 9.1v3.1 | 1.1% | 2022-10-01 |