CVE-2022 records published in November 2022
This page lists the 1,872 CVE-2022 records published in November 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 14 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 28215.1% of these records
- Listed in CISA KEV
- 140.7% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 351.9% of these records
- Exploit code
- 683.6% of these records
- Actionable vendor fix
- 1,39974.7% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in November 2022 have had from about 47 months to about 48 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-46338 | G810-led incorrect permission assignment | 6.5v3.1 | 0.7% | 2022-11-30 | Fix |
| CVE-2022-46162 | Discourse BBCode plugin vulnerable to arbitrary CSS injection | 8.8CNA v3.1 | 1.2% | 2022-11-30 | |
| CVE-2022-46156 | Grafana's default installation of `synthetic-monitoring-agent` exposes sensitive information | 7.2CNA v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-46149 | capnproto cap'n Proto vulnerable to out-of-bounds read due to logic error handling list-of-list | 5.4CNA v3.1 | 0.9% | 2022-11-30 | Fix |
| CVE-2022-45869 | Linux kernel x86 KVM subsystem in the race condition | 5.5v3.1 | 0.3% | 2022-11-30 | Fix |
| CVE-2022-45842 | WP ULike WordPress plugin race condition | 3.7NVD v3.1 | 0.4% | 2022-11-30 | Fix |
| CVE-2022-45337 | Tenda TX9 Pro out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-30 | |
| CVE-2022-45332 | GNU LibreDWG out-of-bounds write | 7.8v3.1 | 0.3% | 2022-11-30 | |
| CVE-2022-45328 | Church Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-30 | |
| CVE-2022-44296 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-30 | |
| CVE-2022-44295 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-30 | |
| CVE-2022-44294 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-30 | |
| CVE-2022-44151 | Sanitization Management System SQL injection | 9.8v3.1 | 0.8% | 2022-11-30 | |
| CVE-2022-44136 | Zenario CMS is vulnerable to remote code execution (RCE) | 9.8v3.1 | 1.1% | 2022-11-30 | Exploit codeFix |
| CVE-2022-44097 | Bookstore Management System hard-coded credentials | 9.8v3.1 | 0.8% | 2022-11-30 | |
| CVE-2022-44096 | Sanitization Management System hard-coded credentials | 9.8v3.1 | 0.8% | 2022-11-30 | |
| CVE-2022-41413 | Perfsonar cross-site request forgery | 4.3v3.1 | 2.0% | 2022-11-30 | Exploit code |
| CVE-2022-41412 | Perfsonar server-side request forgery | 8.6v3.1 | 4.1% | 2022-11-30 | Nuclei |
| CVE-2022-40265 | Denial of service (DoS) vulnerability in MELSEC iQ-R Series Ethernet interface module | 8.6CNA v3.1 | 1.0% | 2022-11-30 | Fix |
| CVE-2022-38803 | ZKTeco BioTime cross-site scripting | 6.8v3.1 | 0.6% | 2022-11-30 | |
| CVE-2022-38802 | ZKTeco BioTime cross-site scripting | 6.2v3.1 | 0.6% | 2022-11-30 | |
| CVE-2022-38801 | ZKTeco BioTime cross-site scripting | 5.4v3.1 | 0.3% | 2022-11-30 | |
| CVE-2022-26366 | AdRotate Banner Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-30 | Fix |
| CVE-2022-24441 | Snyk CLI build file analysis code injection | 8.8v3.1 | 0.7% | 2022-11-30 | Fix |
| CVE-2022-23746 | Gateway and Management, IPsec VPN blade SNX portal missing brute-force protection | 7.5NVD v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-22984 | snyk command injection | 6.3v3.1 | 3.0% | 2022-11-30 | Fix |
| CVE-2022-4234 | SourceCodester Canteen Management System brand.php builtin_echo cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-30 | |
| CVE-2022-4233 | SourceCodester Event Registration System cross-site scripting | 6.1v3.1 | 0.3% | 2022-11-30 | |
| CVE-2022-4232 | SourceCodester Event Registration System unrestricted upload | 9.8v3.1 | 0.4% | 2022-11-30 | |
| CVE-2022-4231 | Tribal Systems Zenario CMS Remember Me session fixiation | 5.4v3.1 | 0.4% | 2022-11-30 | |
| CVE-2022-4229 | SourceCodester Book Store Management System index.php access control | 9.8v3.1 | 0.9% | 2022-11-30 | |
| CVE-2022-4228 | SourceCodester Book Store Management System information disclosure | 7.5v3.1 | 1.2% | 2022-11-30 | |
| CVE-2022-4222 | SourceCodester Canteen Management System POST request ajax_invoice.php query SQL injection | 9.8v3.1 | 0.7% | 2022-11-30 | |
| CVE-2022-4195 | Google Chrome Safe Browsing insufficient policy enforcement | 4.3v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-4194 | Google Chrome Accessibility use-after-free | 8.8v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-4193 | Google Chrome File System API insufficient policy enforcement | 8.8v3.1 | 0.7% | 2022-11-30 | Fix |
| CVE-2022-4192 | Google Chrome Live Caption use-after-free | 8.8v3.1 | 0.8% | 2022-11-30 | Fix |
| CVE-2022-4191 | Google Chrome Sign-In use-after-free | 8.8v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-4190 | Google Chrome Directory improper input validation | 8.8v3.1 | 0.7% | 2022-11-30 | Fix |
| CVE-2022-4189 | Google Chrome DevTools insufficient policy enforcement | 4.3v3.1 | 0.4% | 2022-11-30 | Fix |
| CVE-2022-4188 | Google Chrome injection | 4.3v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-4187 | Google Chrome DevTools insufficient policy enforcement | 6.5v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-4186 | Google Chrome improper input validation | 4.3v3.1 | 0.4% | 2022-11-30 | Fix |
| CVE-2022-4185 | Google Chrome Navigation inappropriate implementation | 4.3v3.1 | 0.8% | 2022-11-30 | Fix |
| CVE-2022-4184 | Google Chrome Autofill insufficient policy enforcement | 4.3v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-4183 | Google Chrome Popup Blocker insufficient policy enforcement | 4.3v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-4182 | Google Chrome Fenced Frames inappropriate implementation | 4.3v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-4181 | Google Chrome forms use-after-free | 8.8v3.1 | 0.7% | 2022-11-30 | Fix |
| CVE-2022-4180 | Google Chrome Mojo use-after-free | 8.8v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-4179 | Google Chrome Audio use-after-free | 8.8v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-4178 | Google Chrome Mojo use-after-free | 8.8v3.1 | 23.9% | 2022-11-30 | Fix |
| CVE-2022-4177 | Google Chrome extensions use-after-free | 8.8v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-4176 | Google Chrome Lacros Graphics out-of-bounds write | 8.8v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-4175 | Google Chrome Camera Capture use-after-free | 8.8v3.1 | 0.7% | 2022-11-30 | Fix |
| CVE-2022-4174 | Google Chrome V8 type confusion | 8.8v3.1 | 0.9% | 2022-11-30 | Exploit codeFix |
| CVE-2022-3859 | Trellix Agent An uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2022-11-30 | Fix |
| CVE-2022-1911 | Information disclosure in M-Files Server | 5.3CNA v3.1 | 0.6% | 2022-11-30 | Fix |
| CVE-2022-1606 | Incorrect privilege assignment in M-Files Server | 2.4CNA v3.1 | 0.5% | 2022-11-30 | Fix |
| CVE-2022-46155 | Airtable.js credentials exposed in browser builds | 7.6CNA v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-46152 | OP-TEE Trusted OS vulnerable to improper validation of array index in the cleanup_shm_refs function | 8.2CNA v3.1 | 0.5% | 2022-11-29 | Exploit codeFix |
| CVE-2022-46150 | Discourse may allow exposure of hidden tags in the subject of notification emails | 4.3CNA v3.1 | 0.6% | 2022-11-29 | Fix |
| CVE-2022-46148 | Discourse allows self-XSS through malicious composer message | 7.1CNA v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-46146 | Prometheus Exporter Toolkit vulnerable to basic authentication bypass | 6.2CNA v3.1 | 1.3% | 2022-11-29 | Fix |
| CVE-2022-45343 | GPAC BIFS unquantize decoder use-after-free | 7.8v3.1 | 0.3% | 2022-11-29 | Fix |
| CVE-2022-45329 | Aero CMS SQL injection | 7.5v3.1 | 0.8% | 2022-11-29 | |
| CVE-2022-45307 | Chocolatey PHP insecure permissions | 4.3v3.1 | 0.4% | 2022-11-29 | |
| CVE-2022-45306 | Chocolatey Azure-pipelines-agent insecure permissions | 4.3v3.1 | 0.4% | 2022-11-29 | |
| CVE-2022-45305 | Chocolatey Python3 insecure permissions | 4.3v3.1 | 0.4% | 2022-11-29 | |
| CVE-2022-45304 | Chocolatey Cmder insecure permissions | 4.3v3.1 | 0.4% | 2022-11-29 | |
| CVE-2022-45301 | Chocolatey Ruby insecure permissions | 4.3v3.1 | 0.4% | 2022-11-29 | |
| CVE-2022-45204 | GPAC 3GPP box parser memory leak | 5.5v3.1 | 0.3% | 2022-11-29 | Fix |
| CVE-2022-45202 | gpac out-of-bounds write | 7.8v3.1 | 0.3% | 2022-11-29 | Fix |
| CVE-2022-44635 | Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal | 8.8v3.1 | 68.8% | 2022-11-29 | Fix |
| CVE-2022-44356 | WAVLINK Wl-wn531g3 files accessible to external parties | 7.5v3.1 | 2.7% | 2022-11-29 | Nuclei |
| CVE-2022-44355 | Contec SolarView Compact cross-site scripting | 6.1v3.1 | 1.6% | 2022-11-29 | |
| CVE-2022-44354 | Contec SolarView Compact unrestricted file upload | 9.8v3.1 | 2.1% | 2022-11-29 | |
| CVE-2022-44279 | Garage Management System cross-site scripting | 6.1v3.1 | 0.6% | 2022-11-29 | |
| CVE-2022-44038 | Russound Xsourceplayer 777D code injection | 9.8v3.1 | 1.6% | 2022-11-29 | |
| CVE-2022-44037 | Apsystems Ecu-c An improper access control | 8.8v3.1 | 0.6% | 2022-11-29 | |
| CVE-2022-43326 | Telosalliance Omnia Mpx Node insecure direct object reference | 7.5v3.1 | 0.7% | 2022-11-29 | |
| CVE-2022-42109 | Online Shopping System Advanced SQL injection | 9.8v3.1 | 1.1% | 2022-11-29 | |
| CVE-2022-42100 | Klik cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-42099 | Klik cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-41676 | TEAM JOHNLONG software CO., LTD. MAILD Mail Server cross-site scripting | 5.4CNA v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-41675 | TEAM JOHNLONG software CO., LTD. MAILD Mail Server formula injection | 8.0CNA v3.1 | 0.9% | 2022-11-29 | Fix |
| CVE-2022-41568 | LINE client resource exhaustion | 7.5v3.1 | 0.6% | 2022-11-29 | |
| CVE-2022-40799 | D-Link DNR-322L download of code without integrity check | 8.8NVD v3.1 | 33.7% | 2022-11-29 | KEV |
| CVE-2022-36964 | SolarWinds Platform deserialization of untrusted data | 8.8CNA v3.1 | 17.4% | 2022-11-29 | Fix |
| CVE-2022-36962 | SolarWinds Platform command injection | 7.2CNA v3.1 | 9.2% | 2022-11-29 | Fix |
| CVE-2022-36960 | SolarWinds Platform improper input validation | 8.8CNA v3.1 | 0.9% | 2022-11-29 | Fix |
| CVE-2022-36433 | Amasty Blog Pro cross-site scripting | 6.1v3.1 | 0.6% | 2022-11-29 | Exploit code |
| CVE-2022-36137 | ChurchCRM cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-36136 | ChurchCRM cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-32967 | Realtek RTL8111EP-CG/RTL8111FP-CG use of hard-coded credentials | 2.1CNA v3.1 | 0.2% | 2022-11-29 | Fix |
| CVE-2022-32966 | Realtek RTL8111FP-CG missing authorization | 6.5CNA v3.1 | 0.3% | 2022-11-29 | Fix |
| CVE-2022-25848 | static-dev-server directory traversal | 7.5v3.1 | 1.0% | 2022-11-29 | |
| CVE-2022-21126 | com.github.samtools:htsjdk creation of temporary file in directory with insecure permissions | 7.8v3.1 | 0.7% | 2022-11-29 | Fix |
| CVE-2022-4202 | GPAC lsr_dec.c lsr_translate_coords integer overflow | 8.8v3.1 | 0.8% | 2022-11-29 | Fix |
| CVE-2022-4172 | QEMU (ACPI ERST) ACPI Error Record Serialization Table integer overflow | 6.5NVD v3.1 | 0.4% | 2022-11-29 | Fix |
| CVE-2022-4144 | QEMU (QXL device) QXL display device emulation out-of-bounds read | 6.5NVD v3.1 | 0.3% | 2022-11-29 | Fix |
| CVE-2022-4036 | Appointment Hour Booking WordPress plugin CAPTCHA bypass | 5.3v3.1 | 0.4% | 2022-11-29 | Fix |
| CVE-2022-4035 | Appointment Hour Booking WordPress plugin unauthenticated iFrame injection via Appointment form | 6.1NVD v3.1 | 0.7% | 2022-11-29 | Fix |
| CVE-2022-4034 | Appointment Hour Booking WordPress plugin CSV injection | 7.8v3.1 | 0.6% | 2022-11-29 | Fix |
| CVE-2022-4033 | Quiz and Survey Master WordPress plugin improper input validation | 5.3v3.1 | 0.7% | 2022-11-29 | Fix |
| CVE-2022-4032 | Quiz and Survey Master WordPress plugin unauthenticated iFrame injection | 6.1NVD v3.1 | 0.8% | 2022-11-29 | Fix |
| CVE-2022-4031 | Simple:Press WordPress plugin authenticated (Admin+) path traversal to arbitrary file modification | 4.9v3.1 | 0.7% | 2022-11-29 | Fix |
| CVE-2022-4030 | Simple:Press WordPress plugin authenticated (Subscriber+) path traversal to arbitrary file deletion | 8.1v3.1 | 1.6% | 2022-11-29 | Fix |
| CVE-2022-4029 | Simple:Press WordPress plugin reflected cross-site scripting via Cookie Value | 4.7v3.1 | 0.6% | 2022-11-29 | Fix |
| CVE-2022-4028 | Simple:Press WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-4027 | Simple:Press WordPress plugin unauthenticated stored cross-site scripting via Forum Replies | 5.4NVD v3.1 | 0.6% | 2022-11-29 | Fix |
| CVE-2022-3995 | TeraWallet For WooCommerce WordPress plugin insecure direct object reference | 4.3v3.1 | 0.6% | 2022-11-29 | Fix |
| CVE-2022-3991 | Photospace Gallery WordPress plugin authenticated (Subscriber+) stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-11-29 | |
| CVE-2022-3898 | WP Affiliate Platform WordPress plugin cross-site request forgery | 6.5NVD v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-3897 | WP Affiliate Platform WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-29 | Fix |
| CVE-2022-3896 | WP Affiliate Platform WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2022-11-29 | Fix |
| CVE-2022-3751 | SQL injection in owncast/owncast | 9.8v3.1 | 0.9% | 2022-11-29 | Fix |
| CVE-2022-3747 | Becustom WordPress plugin cross-site request forgery | 6.5NVD v3.1 | 0.8% | 2022-11-29 | Fix |
| CVE-2022-3384 | Ultimate Member WordPress plugin remote code execution | 7.2v3.1 | 2.7% | 2022-11-29 | Fix |
| CVE-2022-3383 | Ultimate Member WordPress plugin remote code execution | 7.2v3.1 | 2.8% | 2022-11-29 | Fix |
| CVE-2022-3361 | Ultimate Member WordPress plugin path traversal | 4.3v3.1 | 2.5% | 2022-11-29 | Fix |
| CVE-2022-46147 | openedx xblock-drag-and-drop-v2 Drag and Drop XBlock v2 has XSS issues in Xblock Input fields | 8.4CNA v3.1 | 0.9% | 2022-11-28 | Fix |
| CVE-2022-45939 | GNU Emacs OS command injection | 7.8v3.1 | 0.6% | 2022-11-28 | Fix |
| CVE-2022-45921 | FusionAuth vulnerable to directory traversal attack | 7.5v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2022-45442 | Sinatra vulnerable to Reflected File Download attack | 8.8CNA v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2022-45224 | Web-Based Student Clearance System cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-45223 | Web-Based Student Clearance System cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-45221 | Web-Based Student Clearance System cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-45214 | Sanitization Management System cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-28 | |
| CVE-2022-44937 | Bosscms cross-site request forgery | 6.5v3.1 | 0.3% | 2022-11-28 | |
| CVE-2022-44401 | Online Tours and Travels Management System file.php unrestricted file upload | 9.8v3.1 | 0.9% | 2022-11-28 | |
| CVE-2022-44400 | Purchase Order Management System unrestricted file upload | 9.8v3.1 | 1.1% | 2022-11-28 | |
| CVE-2022-44399 | Poultry Farm Management System SQL injection | 9.8v3.1 | 0.8% | 2022-11-28 | |
| CVE-2022-44284 | Dinstar Dag2000-16o cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-44283 | AVS4YOU AVS Audio Converter buffer overflow | 9.8v3.1 | 1.1% | 2022-11-28 | |
| CVE-2022-43590 | Callback technologies CBFS Filter null pointer dereference | 5.5v3.1 | 0.3% | 2022-11-28 | |
| CVE-2022-43589 | Callback technologies CBFS Filter handle_ioctl_8314C functionality null pointer dereference | 5.5v3.1 | 0.3% | 2022-11-28 | |
| CVE-2022-43588 | Callback technologies CBFS Filter handle_ioctl_83150 functionality null pointer dereference | 5.5v3.1 | 0.3% | 2022-11-28 | |
| CVE-2022-41965 | Apereo Opencast Paella authentication page open redirect | 5.7CNA v3.1 | 0.4% | 2022-11-28 | Fix |
| CVE-2022-41957 | muhammara vulnerable to unchecked return value to null pointer dereference | 7.5CNA v3.1 | 1.1% | 2022-11-28 | Fix |
| CVE-2022-41944 | Discourse users can see notifications for topics they no longer have access to | 3.5CNA v3.1 | 0.5% | 2022-11-28 | Fix |
| CVE-2022-41921 | Discourse chat messages should have a maximum character limit | 3.5CNA v3.1 | 0.6% | 2022-11-28 | Fix |
| CVE-2022-41912 | Crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements | 9.1CNA v3.1 | 2.3% | 2022-11-28 | Fix |
| CVE-2022-41732 | IBM Maximo information disclosure | 6.2CNA v3.1 | 0.2% | 2022-11-28 | Fix |
| CVE-2022-38900 | decode-uri-component vulnerable to denial of service (DoS) | 7.5v3.1 | 23.8% | 2022-11-28 | Fix |
| CVE-2022-38753 | NetIQ Advanced Authentication authentication bypass | 6.3v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-38140 | SEO Plugin by Squirrly SEO WordPress plugin arbitrary file upload | 8.8v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2022-36193 | lahirudanushka School Management System SQL injection | 9.8v3.1 | 1.4% | 2022-11-28 | Exploit code |
| CVE-2022-34654 | Manage Notification E-mails WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-28 | Fix |
| CVE-2022-31877 | MSI Center insufficient verification of data authenticity | 8.8v3.1 | 0.4% | 2022-11-28 | |
| CVE-2022-24190 | Sz-fujia Ourphoto missing authentication | 7.5v3.1 | 0.7% | 2022-11-28 | |
| CVE-2022-24189 | Sz-fujia Ourphoto incorrect authorization | 6.5v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-24188 | Sz-fujia Ourphoto cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-24187 | Sz-fujia Ourphoto insecure direct object reference | 7.5v3.1 | 0.7% | 2022-11-28 | |
| CVE-2022-4169 | Theme and plugin translation for Polylang WordPress plugin missing authorization | 5.3v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2022-4129 | Linux kernel (l2tp) improper locking | 5.5NVD v3.1 | 0.2% | 2022-11-28 | Fix |
| CVE-2022-4128 | Linux kernel (mptcp) A null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-11-28 | Fix |
| CVE-2022-4127 | Linux kernel (io_uring) A null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-11-28 | Fix |
| CVE-2022-4104 | Dropbox Lepton infinite loop | 5.5NVD v3.1 | 0.3% | 2022-11-28 | |
| CVE-2022-4020 | Acer Aspire A315-22 incorrect default permissions | 8.2NVD v3.1 | 0.2% | 2022-11-28 | Fix |
| CVE-2022-3865 | WP User Merger WordPress plugin Admin+ SQLi via ID | 8.8NVD v3.1 | 1.1% | 2022-11-28 | Fix |
| CVE-2022-3850 | Find and Replace All WordPress plugin arbitrary Replacement via CSRF | 4.3NVD v3.1 | 0.3% | 2022-11-28 | Fix |
| CVE-2022-3849 | WP User Merger WordPress plugin Admin+ SQLi via user_id | 8.8NVD v3.1 | 1.1% | 2022-11-28 | Fix |
| CVE-2022-3848 | WP User Merger WordPress plugin Admin+ SQLi via wpsu_user_id | 8.8NVD v3.1 | 1.1% | 2022-11-28 | Fix |
| CVE-2022-3847 | Showing URL in QR Code WordPress plugin stored XSS via CSRF | 6.1NVD v3.1 | 0.3% | 2022-11-28 | |
| CVE-2022-3839 | Analytics for WP WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-3834 | Google Forms WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-3833 | Fancier Author Box by ThematoSoup WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-3831 | reCAPTCHA WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-11-28 | |
| CVE-2022-3828 | Video Thumbnails WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-3824 | WP Admin UI Customize WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-11-28 | Fix |
| CVE-2022-3823 | Beautiful Cookie Consent Banner WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-28 | Fix |
| CVE-2022-3822 | Donations via PayPal WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2022-11-28 | Fix |
| CVE-2022-3769 | OWM Weather WordPress plugin Contributor+ SQLi | 8.8NVD v3.1 | 1.1% | 2022-11-28 | Fix |
| CVE-2022-3768 | WPSmartContracts WordPress plugin Author+ SQLi | 8.8NVD v3.1 | 4.0% | 2022-11-28 | NucleiFix |
| CVE-2022-3689 | HTML Forms WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.9% | 2022-11-28 | Exploit codeFix |
| CVE-2022-3610 | Jeeng Push Notifications WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-11-28 | Fix |
| CVE-2022-3603 | Export customers list CSV for WooCommerce WordPress plugin CSV injection | 9.8NVD v3.1 | 1.1% | 2022-11-28 | Fix |
| CVE-2022-3601 | Image Hover Effects Css3 WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-28 | |
| CVE-2022-3511 | Awesome Support WordPress plugin Subscriber+ arbitrary Exported Tickets download | 6.5NVD v3.1 | 0.7% | 2022-11-28 | Fix |
| CVE-2022-3490 | Checkout Field Editor for WooCommerce WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 1.2% | 2022-11-28 | Fix |
| CVE-2022-3088 | Moxa UC-2100 System Image execution with unnecessary privileges | 7.8v3.1 | 0.2% | 2022-11-28 | Fix |
| CVE-2022-2983 | Salat Times WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-11-28 | Fix |
| CVE-2022-2311 | Find and Replace All WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-11-28 | Fix |
| CVE-2022-45934 | Linux kernel integer overflow | 7.8v3.1 | 0.7% | 2022-11-27 | Exploit codeFix |
| CVE-2022-45933 | KubeView vulnerable to full cluster takeover due to improper authentication | 9.8v3.1 | 51.7% | 2022-11-27 | Nuclei |
| CVE-2022-45932 | Linux Foundation OpenDayLight AAA SQL injection | 7.5v3.1 | 0.6% | 2022-11-27 | Fix |
| CVE-2022-45931 | Linux Foundation OpenDayLight AAA SQL injection | 7.5v3.1 | 0.5% | 2022-11-27 | Fix |
| CVE-2022-45930 | Linux Foundation OpenDayLight AAA SQL injection | 7.5v3.1 | 0.7% | 2022-11-27 | Fix |
| CVE-2022-45919 | Linux kernel use-after-free | 7.0v3.1 | 0.3% | 2022-11-27 | Fix |
| CVE-2022-45914 | Electronic Shelf Label Protocol authentication bypass by replay | 6.5v3.1 | 0.7% | 2022-11-27 | |
| CVE-2022-43705 | botan improper certificate validation | 9.1v3.1 | 0.4% | 2022-11-27 | Fix |
| CVE-2022-45909 | Drachtio-server out-of-bounds read | 9.1v3.1 | 1.0% | 2022-11-26 | |
| CVE-2022-45908 | PaddlePaddle vulnerable to code injection via winstr | 9.8v3.1 | 1.3% | 2022-11-26 | Fix |
| CVE-2022-45907 | PyTorch vulnerable to arbitrary code execution | 9.8v3.1 | 1.2% | 2022-11-26 | Fix |
| CVE-2022-24999 | Qs vulnerable to prototype pollution | 7.5NVD v3.1 | 15.6% | 2022-11-26 | Fix |
| CVE-2022-45888 | Linux kernel race condition | 6.4v3.1 | 0.7% | 2022-11-25 | Fix |
| CVE-2022-45887 | Linux kernel race condition | 4.7v3.1 | 0.3% | 2022-11-25 | Fix |
| CVE-2022-45886 | Linux kernel race condition | 7.0v3.1 | 0.3% | 2022-11-25 | Fix |
| CVE-2022-45885 | Linux kernel race condition | 7.0v3.1 | 0.3% | 2022-11-25 | Fix |
| CVE-2022-45884 | Linux kernel race condition | 7.0v3.1 | 0.3% | 2022-11-25 | Fix |
| CVE-2022-45476 | Tiny File Manager unrestricted file upload | 9.8v3.1 | 1.0% | 2022-11-25 | |
| CVE-2022-45475 | Tiny File Manager missing authorization | 6.5v3.1 | 0.8% | 2022-11-25 | |
| CVE-2022-45225 | Bookstore Management System cross-site scripting | 6.1v3.1 | 0.5% | 2022-11-25 | |
| CVE-2022-45218 | oretnom23 Human Resource Management System cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-25 | |
| CVE-2022-45210 | JeecgBoot Jeecg-boot vulnerable to SQL injection | 4.3v3.1 | 0.5% | 2022-11-25 | Fix |
| CVE-2022-45208 | JeecgBoot Jeecg-boot vulnerable to SQL injection via /sys/user/putRecycleBin | 4.3v3.1 | 0.5% | 2022-11-25 | Fix |
| CVE-2022-45207 | JeecgBoot Jeecg-boot vulnerable to SQL injection via updateNullByEmptyString | 9.8v3.1 | 0.9% | 2022-11-25 | Fix |
| CVE-2022-45206 | JeecgBoot Jeecg-boot vulnerable to SQL injection | 9.8v3.1 | 0.7% | 2022-11-25 | Fix |
| CVE-2022-45205 | JeecgBoot SQL injection | 5.3v3.1 | 0.6% | 2022-11-25 | |
| CVE-2022-45152 | Moodle blind server-side request forgery (SSRF) vulnerability in LTI provider library | 9.1NVD v3.1 | 1.4% | 2022-11-25 | Fix |
| CVE-2022-45040 | WBCE_CMS /admin/pages/sections_save.php cross-site scripting | 5.4v3.1 | 0.4% | 2022-11-25 | |
| CVE-2022-45039 | WBCE_CMS Server settings module arbitrary file upload | 7.2v3.1 | 1.0% | 2022-11-25 | |
| CVE-2022-45038 | WBCE_CMS /admin/settings/save.php cross-site scripting | 5.4v3.1 | 1.0% | 2022-11-25 | Nuclei |
| CVE-2022-45037 | WBCE_CMS /admin/users/index.php cross-site scripting | 5.4v3.1 | 1.0% | 2022-11-25 | Nuclei |
| CVE-2022-45036 | WBCE_CMS Search settings module cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-25 | |
| CVE-2022-44860 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-25 | |
| CVE-2022-44859 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-25 | |
| CVE-2022-44858 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.8% | 2022-11-25 | |
| CVE-2022-44844 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2022-11-25 | |
| CVE-2022-44843 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2022-11-25 | |
| CVE-2022-44411 | Web Based Quiz System cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2022-11-25 | |
| CVE-2022-43984 | Browsershot Server Side XSS to LFR via HTML | 8.2v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-43983 | Browsershot Server Side XSS to LFR via HTML | 8.2v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-41958 | Deserialization vulnerability by yaml config input in super-xray | 7.3CNA v3.1 | 0.4% | 2022-11-25 | Fix |
| CVE-2022-41954 | joniles mpxj temporary file information disclosure | 3.3CNA v3.1 | 0.2% | 2022-11-25 | Fix |
| CVE-2022-41926 | Nextcloud Talk Android broadcast incorrect permission handling | 3.3CNA v3.1 | 0.3% | 2022-11-25 | Fix |
| CVE-2022-41712 | Frappe path traversal | 6.5v3.1 | 0.9% | 2022-11-25 | |
| CVE-2022-41706 | Browsershot Server Side XSS to LFR via URL | 8.2v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-41705 | Badaso vulnerable to remote code execution (RCE) | 9.8v3.1 | 1.8% | 2022-11-25 | Fix |
| CVE-2022-41158 | eyoom builder remote code execution | 9.8v3.1 | 1.8% | 2022-11-25 | |
| CVE-2022-41157 | Webcash sERP Server ERP solution remote code execution | 9.8v3.1 | 0.5% | 2022-11-25 | |
| CVE-2022-41156 | ETMS OndiskPlayerAgent OndiskPlayer remote code execution | 7.8v3.1 | 0.2% | 2022-11-25 | |
| CVE-2022-40282 | Belden Hirschmann Bat-c2 command injection | 8.8v3.1 | 4.0% | 2022-11-25 | |
| CVE-2022-39346 | Missing length validation of user displayname in Nextcloud Server | 3.5CNA v3.1 | 1.1% | 2022-11-25 | Fix |
| CVE-2022-39339 | Nextcloud security-advisories cleartext transmission of sensitive information in user_oidc | 4.3CNA v3.1 | 0.5% | 2022-11-25 | Fix |
| CVE-2022-39338 | Nextcloud security-advisories stored cross-site scripting vulnerability | 3.5CNA v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-39334 | Nextcloud security-advisories nextcloudcmd incorrectly trusts bad TLS certificates | 3.9CNA v3.1 | 0.2% | 2022-11-25 | Fix |
| CVE-2022-39333 | Cross-site scripting (XSS) in Nextcloud Desktop client | 4.6CNA v3.1 | 0.9% | 2022-11-25 | Fix |
| CVE-2022-39332 | Cross-site scripting (XSS) in Nextcloud Desktop client | 4.6CNA v3.1 | 1.0% | 2022-11-25 | Fix |
| CVE-2022-39331 | Cross-site scripting (XSS) in Nexcloud Desktop client | 4.6CNA v3.1 | 1.0% | 2022-11-25 | Fix |
| CVE-2022-39325 | Cross-site scripting vulnerability in BaserCMS | 4.6CNA v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-38813 | Phpgurukul Blood Donor Management System resource exposure | 8.1v3.1 | 1.5% | 2022-11-25 | Exploit code |
| CVE-2022-38767 | Wind River Vxworks denial of service | 7.5v3.1 | 1.0% | 2022-11-25 | Fix |
| CVE-2022-38377 | Fortinet FortiManager improper access control | 4.1CNA v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-38166 | F-Secure Elements Endpoint Protection uncaught exception | 7.5v3.1 | 0.7% | 2022-11-25 | Fix |
| CVE-2022-37721 | PyroCMS vulnerable to stored cross-site scripting | 9.0v3.1 | 0.7% | 2022-11-25 | Fix |
| CVE-2022-37720 | OrchardCore Orchard Cms cross-site scripting | 9.0v3.1 | 0.8% | 2022-11-25 | |
| CVE-2022-36133 | Epson Tm-c3500 improper authentication | 9.1v3.1 | 0.7% | 2022-11-25 | Fix |
| CVE-2022-29833 | Mitsubishi Electric GX Works3 insufficiently protected credentials | 6.8CNA v3.1 | 1.0% | 2022-11-25 | Fix |
| CVE-2022-29832 | Mitsubishi Electric GX Works3 Memory vulnerability cleartext storage of sensitive information | 3.7CNA v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-29831 | Mitsubishi Electric GX Works3 hard-coded password | 7.5CNA v3.1 | 1.3% | 2022-11-25 | Fix |
| CVE-2022-29830 | Mitsubishi Electric GX Works3 hard-coded cryptographic key | 9.1CNA v3.1 | 1.3% | 2022-11-25 | Fix |
| CVE-2022-29829 | Mitsubishi Electric GX Works3 hard-coded cryptographic key | 6.8CNA v3.1 | 1.1% | 2022-11-25 | Fix |
| CVE-2022-29828 | Mitsubishi Electric GX Works3 hard-coded cryptographic key | 6.8CNA v3.1 | 1.1% | 2022-11-25 | Fix |
| CVE-2022-29827 | Mitsubishi Electric GX Works3 hard-coded cryptographic key | 6.8CNA v3.1 | 1.1% | 2022-11-25 | Fix |
| CVE-2022-29826 | Mitsubishi Electric GX Works3 cleartext storage of sensitive information | 6.8CNA v3.1 | 0.7% | 2022-11-25 | Fix |
| CVE-2022-29825 | Mitsubishi Electric GX Works3 hard-coded password | 5.6CNA v3.1 | 0.5% | 2022-11-25 | Fix |
| CVE-2022-25164 | Mitsubishi Electric GX Works3 cleartext storage of sensitive information | 8.6CNA v3.1 | 0.9% | 2022-11-25 | Fix |
| CVE-2022-23044 | Tiny File Manager cross-site request forgery | 8.8v3.1 | 0.4% | 2022-11-25 | |
| CVE-2022-4141 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.4% | 2022-11-25 | Fix |
| CVE-2022-4135 | Google Chromium GPU heap buffer overflow | 9.6v3.1 | 31.9% | 2022-11-25 | KEVKCVFix |
| CVE-2022-4091 | SourceCodester Canteen Management System food.php query cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-25 | |
| CVE-2022-2721 | Octopus Deploy Octopus Server sensitive information in log files | 7.5v3.1 | 0.6% | 2022-11-25 | Fix |
| CVE-2022-0698 | Microweber vulnerable to cross-site scripting (XSS) | 6.1v3.1 | 0.7% | 2022-11-25 | |
| CVE-2022-44749 | KNIME Analytics Platform ZIP archive extraction routines path traversal | 5.5CNA v3.1 | 0.4% | 2022-11-24 | Fix |
| CVE-2022-44748 | Uploading workflows to KNIME Server may override arbitrary file system contents | 7.1CNA v3.1 | 1.4% | 2022-11-24 | Fix |
| CVE-2022-40977 | Pilz PASvisu configuration file import path traversal | 7.5v3.1 | 0.9% | 2022-11-24 | Fix |
| CVE-2022-40976 | PILZ PAScal path traversal | 5.5v3.1 | 0.2% | 2022-11-24 | Fix |
| CVE-2022-40266 | Denial of service (DoS) vulnerability in FTP Server function on GOT2000 Series | 5.3CNA v3.1 | 0.9% | 2022-11-24 | Fix |
| CVE-2022-26885 | Apache DolphinScheduler config file read by task risk | 7.5v3.1 | 1.2% | 2022-11-24 | Fix |
| CVE-2022-4136 | Exposed dangerous method or function in qmpaas/Leadshop | 9.8v3.1 | 0.9% | 2022-11-24 | Fix |
| CVE-2022-4090 | rickxy Stock Management System cross-site request forgery | 8.8v3.1 | 0.2% | 2022-11-24 | |
| CVE-2022-4089 | rickxy Stock Management System processlogin.php cross-site scripting | 5.4v3.1 | 0.4% | 2022-11-24 | |
| CVE-2022-4088 | rickxy Stock Management System processlogin.php SQL injection | 9.8v3.1 | 0.6% | 2022-11-24 | |
| CVE-2022-2650 | Improper restriction of excessive authentication attempts in wger-project/Wger | 9.8v3.1 | 0.7% | 2022-11-24 | Exploit codeFix |
| CVE-2022-45873 | systemd systemd-coredump deadlock | 5.5NVD v3.1 | 0.3% | 2022-11-23 | Fix |
| CVE-2022-45872 | iTerm2 improper input validation | 9.8v3.1 | 0.9% | 2022-11-23 | Fix |
| CVE-2022-45868 | Password exposure in H2 Database | 7.8v3.1 | 0.3% | 2022-11-23 | Fix |
| CVE-2022-45866 | Qpress path traversal | 5.3v3.1 | 1.3% | 2022-11-23 | Fix |
| CVE-2022-45472 | Caehealthcare Learningspace Enterprise cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-23 | Exploit codeFix |
| CVE-2022-45462 | Apache DolphinScheduler have command execution | 9.8v3.1 | 2.8% | 2022-11-23 | Fix |
| CVE-2022-45280 | EyouCMS Url parameter in /login.php cross-site scripting | 5.4v3.1 | 0.3% | 2022-11-23 | |
| CVE-2022-45278 | jizhiCMS SQL injection | 8.8v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-45276 | Eyunjing Yjcms forced browsing | 9.8v3.1 | 0.8% | 2022-11-23 | |
| CVE-2022-45151 | Moodle stored-XSS vulnerability in some social user profile fields | 5.4NVD v3.1 | 0.7% | 2022-11-23 | Fix |
| CVE-2022-45150 | Moodle reflected cross-site scripting vulnerability in policy tool | 6.1NVD v3.1 | 0.7% | 2022-11-23 | Fix |
| CVE-2022-45149 | Cross-site request forgery in Moodle | 5.4NVD v3.1 | 0.4% | 2022-11-23 | Fix |
| CVE-2022-44789 | Artifex MuJS out-of-bounds write | 8.8v3.1 | 2.2% | 2022-11-23 | Exploit codeFix |
| CVE-2022-44280 | Automotive Shop Management System path traversal | 6.5v3.1 | 0.8% | 2022-11-23 | |
| CVE-2022-44278 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-44260 | TOTOLINK LR350 out-of-bounds write | 8.8v3.1 | 2.1% | 2022-11-23 | |
| CVE-2022-44259 | TOTOLINK LR350 out-of-bounds write | 8.8v3.1 | 2.1% | 2022-11-23 | |
| CVE-2022-44258 | TOTOLINK LR350 out-of-bounds write | 8.8v3.1 | 2.3% | 2022-11-23 | |
| CVE-2022-44257 | TOTOLINK LR350 out-of-bounds write | 8.8v3.1 | 2.1% | 2022-11-23 | |
| CVE-2022-44256 | TOTOLINK NR1800X out-of-bounds write | 8.8v3.1 | 2.1% | 2022-11-23 | |
| CVE-2022-44255 | TOTOLINK LR350 out-of-bounds write | 9.8v3.1 | 2.2% | 2022-11-23 | |
| CVE-2022-44254 | TOTOLINK LR350 out-of-bounds write | 8.8v3.1 | 2.1% | 2022-11-23 | |
| CVE-2022-44253 | TOTOLINK LR350 out-of-bounds write | 8.8v3.1 | 2.1% | 2022-11-23 | |
| CVE-2022-44252 | TOTOLINK LR350 OS command injection | 9.8v3.1 | 1.8% | 2022-11-23 | |
| CVE-2022-44251 | TOTOLINK LR350 OS command injection | 9.8v3.1 | 1.8% | 2022-11-23 | |
| CVE-2022-44250 | TOTOLINK LR350 OS command injection | 9.8v3.1 | 1.8% | 2022-11-23 | |
| CVE-2022-44249 | TOTOLINK LR350 OS command injection | 9.8v3.1 | 1.8% | 2022-11-23 | |
| CVE-2022-44140 | jizhiCMS SQL injection | 8.8v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-44139 | Apartment Visitors Management System SQL injection | 9.8v3.1 | 0.8% | 2022-11-23 | |
| CVE-2022-44120 | Dedebiz Dedecmsv6 SQL injection | 9.8v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-44118 | Dedebiz Dedecmsv6 remote code execution | 9.8v3.1 | 1.6% | 2022-11-23 | Exploit code |
| CVE-2022-44117 | Boa username field SQL injection | 9.8v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-43751 | McAfee Total Protection uncontrolled search path | 7.8v3.1 | 0.2% | 2022-11-23 | Fix |
| CVE-2022-43213 | Billing System Project SQL injection | 9.8v3.1 | 0.8% | 2022-11-23 | |
| CVE-2022-43196 | Dedebiz Dedecmsv6 arbitrary file deletion | 9.1v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-42896 | Linux kernel There are use-after-free | 8.8NVD v3.1 | 2.5% | 2022-11-23 | Fix |
| CVE-2022-42895 | Linux kernel Bluetooth L2CAP information disclosure | 6.5NVD v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-42095 | Cross-site scripting in Backdrop CMS | 4.8v3.1 | 1.9% | 2022-11-23 | NucleiExploit codeFix |
| CVE-2022-41946 | TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc | 4.7CNA v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-41935 | XWiki Platform Livetable macro information disclosure | 5.3CNA v3.1 | 0.8% | 2022-11-23 | Fix |
| CVE-2022-41934 | XWiki Platform menu macro vulnerability | 9.9CNA v3.1 | 1.3% | 2022-11-23 | Fix |
| CVE-2022-41933 | XWiki Platform password reset feature cleartext storage of sensitive information | 6.2CNA v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-41932 | xwiki-platform creation of new database tables through login form on PostgreSQL | 7.5CNA v3.1 | 0.6% | 2022-11-23 | Fix |
| CVE-2022-41931 | XWiki Platform icon picker macro eval injection | 9.9CNA v3.1 | 1.3% | 2022-11-23 | Fix |
| CVE-2022-41930 | XWiki Platform user profile sheet missing authorization | 7.5CNA v3.1 | 0.9% | 2022-11-23 | Fix |
| CVE-2022-41929 | XWiki Platform user disabled status handling missing authorization | 4.9CNA v3.1 | 0.8% | 2022-11-23 | Fix |
| CVE-2022-41928 | XWiki Platform AttachmentSelector macro eval injection | 9.9CNA v3.1 | 1.0% | 2022-11-23 | Fix |
| CVE-2022-41927 | XWiki Platform vulnerable to cross-site request forgery (CSRF) allowing to delete or rename tags | 7.4CNA v3.1 | 0.3% | 2022-11-23 | Fix |
| CVE-2022-41925 | Tailscale daemon is vulnerable to information disclosure via CSRF | 3.8CNA v3.0 | 0.6% | 2022-11-23 | Fix |
| CVE-2022-41924 | Tailscale Windows daemon is vulnerable to RCE via CSRF | 9.6CNA v3.0 | 1.8% | 2022-11-23 | Fix |
| CVE-2022-41923 | Grails Spring Security Core plugin vulnerable to privilege escalation | 9.1CNA v3.1 | 1.9% | 2022-11-23 | Exploit codeFix |
| CVE-2022-41922 | yiisoft yii prevent RCE when deserializing untrusted user input | 8.1CNA v3.1 | 1.2% | 2022-11-23 | Fix |
| CVE-2022-41875 | Remote code execution in Optica | 10.0CNA v3.1 | 1.7% | 2022-11-23 | Fix |
| CVE-2022-41446 | Record Management System /Admin/dashboard.php improper access control | 5.4NVD v3.1 | 1.1% | 2022-11-23 | |
| CVE-2022-40870 | Parallels Remote Application Server host header injection | 8.1v3.1 | 1.9% | 2022-11-23 | |
| CVE-2022-40772 | Zoho ManageEngine AssetExplorer information disclosure | 6.5v3.1 | 3.0% | 2022-11-23 | Fix |
| CVE-2022-40771 | Zoho ManageEngine AssetExplorer XML external entity injection | 4.9v3.1 | 3.5% | 2022-11-23 | Fix |
| CVE-2022-40770 | Zoho ManageEngine ServiceDesk Plus command injection | 7.2v3.1 | 81.3% | 2022-11-23 | Fix |
| CVE-2022-40304 | libxml2 XML entity parsing double free | 7.8NVD v3.1 | 5.8% | 2022-11-23 | Fix |
| CVE-2022-39833 | FileCloud code injection | 7.2v3.1 | 2.6% | 2022-11-23 | Fix |
| CVE-2022-38724 | Silverstripe XSS in shortcodes | 5.4v3.1 | 0.7% | 2022-11-23 | Fix |
| CVE-2022-38147 | silverstripe Framework XSS via uploaded gpx file | 5.4v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-38145 | silverstripe Framework stored XSS in Compare Mode | 5.4v3.1 | 0.6% | 2022-11-23 | Fix |
| CVE-2022-38115 | Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT | 5.3CNA v3.1 | 0.7% | 2022-11-23 | Fix |
| CVE-2022-38114 | SolarWinds Security Event Manager HTTP request smuggling | 6.1CNA v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-38113 | SolarWinds SEM information disclosure | 5.3CNA v3.1 | 0.7% | 2022-11-23 | Fix |
| CVE-2022-37774 | Maarch Rm There is a missing authorization | 5.3v3.1 | 0.5% | 2022-11-23 | |
| CVE-2022-37773 | Maarch Rm statistics page SQL injection | 6.5v3.1 | 0.7% | 2022-11-23 | |
| CVE-2022-37772 | Maarch Rm missing brute-force protection | 7.5v3.1 | 1.1% | 2022-11-23 | |
| CVE-2022-37430 | silverstripe Framework stored XSS using uppercase characters in HTMLEditor | 5.4v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-37429 | silverstripe Framework stored XSS using HTMLEditor | 5.4v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-37421 | Silverstripe silverstipe CMS stored XSS in custom meta tags | 5.4v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-36337 | Insyde Kernel stack-based buffer overflow | 8.2v3.1 | 0.2% | 2022-11-23 | Fix |
| CVE-2022-36111 | codenotary immudb immundb has insufficient verification of data authenticity | 5.4CNA v3.1 | 0.4% | 2022-11-23 | Fix |
| CVE-2022-35501 | Amasty Blog Pro stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-23 | Exploit code |
| CVE-2022-35500 | Amasty Blog Pro cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-23 | Exploit code |
| CVE-2022-34830 | Arm Utgard GPU Kernel Driver time-of-check time-of-use race condition | 7.5v3.1 | 0.5% | 2022-11-23 | Fix |
| CVE-2022-23740 | GitHub Enterprise Server GitHub Pages builds argument injection | 8.8v3.1 | 1.1% | 2022-11-23 | Fix |
| CVE-2022-4045 | Denial of service in Mattermost | 3.1CNA v3.1 | 0.6% | 2022-11-23 | Fix |
| CVE-2022-4044 | Denial of service in Mattermost | 4.3CNA v3.1 | 1.1% | 2022-11-23 | Fix |
| CVE-2022-4019 | Mattermost Playbooks Plugin denial of service | 4.3CNA v3.1 | 0.8% | 2022-11-23 | Fix |
| CVE-2022-45536 | Aero CMS SQL injection | 4.9v3.1 | 0.8% | 2022-11-22 | |
| CVE-2022-45535 | Aero CMS SQL injection | 4.9v3.1 | 0.8% | 2022-11-22 | |
| CVE-2022-45529 | Aero CMS SQL injection | 4.9v3.1 | 0.7% | 2022-11-22 | |
| CVE-2022-45363 | Betheme premium WordPress theme Auth. stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-11-22 | Fix |
| CVE-2022-45331 | Aero CMS SQL injection | 7.5v3.1 | 0.8% | 2022-11-22 | |
| CVE-2022-45330 | Aero CMS SQL injection | 7.5v3.1 | 0.8% | 2022-11-22 | |
| CVE-2022-44808 | D-Link DIR-823G OS command injection | 9.8v3.1 | 3.8% | 2022-11-22 | |
| CVE-2022-44807 | D-Link DIR-882 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-11-22 | |
| CVE-2022-44806 | D-Link DIR-882 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-11-22 | |
| CVE-2022-44804 | D-Link DIR-882 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-11-22 | |
| CVE-2022-44801 | D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control. | 9.8v3.1 | 1.1% | 2022-11-22 | |
| CVE-2022-44737 | All In One WP Security WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-22 | Fix |
| CVE-2022-44202 | D-Link DIR-878 out-of-bounds write | 9.8v3.1 | 1.2% | 2022-11-22 | |
| CVE-2022-44201 | D-Link DIR-823G OS command injection | 9.8v3.1 | 1.2% | 2022-11-22 | |
| CVE-2022-44200 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.0% | 2022-11-22 | Fix |
| CVE-2022-44199 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.0% | 2022-11-22 | Fix |
| CVE-2022-44198 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.0% | 2022-11-22 | Fix |
| CVE-2022-44197 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44196 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44194 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.4% | 2022-11-22 | Fix |
| CVE-2022-44193 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44191 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44190 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44188 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44187 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44186 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-44184 | NETGEAR R7000P out-of-bounds write | 9.8v3.1 | 1.0% | 2022-11-22 | Fix |
| CVE-2022-43709 | mybb cross-site scripting | 4.9v3.1 | 0.7% | 2022-11-22 | Fix |
| CVE-2022-43708 | mybb cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-22 | Fix |
| CVE-2022-43707 | mybb cross-site scripting | 6.1v3.1 | 0.5% | 2022-11-22 | Fix |
| CVE-2022-43685 | CKAN contains improper authentication leading to account takeover | 8.8v3.1 | 0.7% | 2022-11-22 | Fix |
| CVE-2022-43215 | Billing System SQL injection | 9.8v3.1 | 0.9% | 2022-11-22 | |
| CVE-2022-43214 | Billing System SQL injection | 9.8v3.1 | 0.9% | 2022-11-22 | |
| CVE-2022-43212 | Billing System Project SQL injection | 9.8v3.1 | 0.9% | 2022-11-22 | |
| CVE-2022-42989 | Sankhya Om cross-site scripting | 9.0v3.1 | 0.8% | 2022-11-22 | |
| CVE-2022-42098 | KLiK SocialMediaWebsite SQL injection | 8.8v3.1 | 1.2% | 2022-11-22 | Exploit codeFix |
| CVE-2022-42097 | Cross-site scripting in Backdrop CMS | 4.8NVD v3.1 | 0.8% | 2022-11-22 | Fix |
| CVE-2022-42094 | Cross-site scripting in Backdrop CMS | 4.8v3.1 | 2.5% | 2022-11-22 | NucleiExploit codeFix |
| CVE-2022-41952 | Uncontrolled resource consumption in Matrix Synapse | 6.5CNA v3.1 | 0.9% | 2022-11-22 | Fix |
| CVE-2022-41950 | 4ra1n super-xray privilege escalation vulnerability by wrong chmod param | 6.4CNA v3.1 | 0.4% | 2022-11-22 | Fix |
| CVE-2022-41943 | Incorrect default permissions found in Sourcegraph | 9.0CNA v3.1 | 1.8% | 2022-11-22 | Fix |
| CVE-2022-41942 | Sourcegraph vulnerable to Comand injection via gitserver | 7.9CNA v3.1 | 2.8% | 2022-11-22 | Fix |
| CVE-2022-41940 | Uncaught exception in engine.io | 7.1CNA v3.1 | 2.1% | 2022-11-22 | Fix |
| CVE-2022-41937 | Missing authorization in XWiki Platform | 9.6CNA v3.1 | 0.8% | 2022-11-22 | Fix |
| CVE-2022-41936 | XWiki Platform modifications REST endpoint information disclosure | 5.3CNA v3.1 | 0.8% | 2022-11-22 | Fix |
| CVE-2022-41919 | Fastify vulnerable to cross-site request forgery (CSRF) attack via incorrect content type | 4.2CNA v3.1 | 0.4% | 2022-11-22 | Fix |
| CVE-2022-41445 | Teacher Record Management System Record Management System using CodeIgniter cross-site scripting | 4.8v3.1 | 1.0% | 2022-11-22 | Exploit code |
| CVE-2022-41326 | Mitel MiCollab missing authorization | 9.8v3.1 | 1.4% | 2022-11-22 | Fix |
| CVE-2022-41223 | Mitel MiVoice Connect code injection | 6.8v3.1 | 10.6% | 2022-11-22 | KEVFix |
| CVE-2022-41131 | Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection) | 7.8v3.1 | 1.8% | 2022-11-22 | Fix |
| CVE-2022-40954 | Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files | 5.5v3.1 | 1.4% | 2022-11-22 | Fix |
| CVE-2022-40842 | Ndk-design Ndkadvancedcustomizationfields server-side request forgery | 9.1v3.1 | 0.8% | 2022-11-22 | |
| CVE-2022-40765 | Mitel MiVoice Connect command injection | 6.8v3.1 | 10.6% | 2022-11-22 | KEVFix |
| CVE-2022-40602 | Zyxel LTE3301-M209 improper authentication | 9.8CNA v3.1 | 1.1% | 2022-11-22 | Fix |
| CVE-2022-40303 | libxml2 integer overflow | 7.5NVD v3.1 | 41.4% | 2022-11-22 | Fix |
| CVE-2022-40228 | IBM DataPower Gateway session fixation | 3.7CNA v3.1 | 0.3% | 2022-11-22 | Fix |
| CVE-2022-40189 | Apache Airlfow Pig Provider RCE | 9.8v3.1 | 3.9% | 2022-11-22 | Fix |
| CVE-2022-39397 | Exposure of sensitive information in Aliyun-oss-client | 5.6CNA v3.1 | 0.5% | 2022-11-22 | Fix |
| CVE-2022-39199 | CodeNotary immudb client SDK vulnerability | 5.8CNA v3.1 | 0.3% | 2022-11-22 | Fix |
| CVE-2022-39070 | ZXA10 C3XX improper access control | 9.8v3.1 | 0.8% | 2022-11-22 | Fix |
| CVE-2022-39067 | MF286R ZTE buffer overflow | 6.5v3.1 | 0.6% | 2022-11-22 | Fix |
| CVE-2022-39066 | MF286R ZTE SQL injection | 8.8v3.1 | 26.5% | 2022-11-22 | Exploit codeFix |
| CVE-2022-38649 | Apache Airflow Pinot Provider allowed command injection | 9.8v3.1 | 3.2% | 2022-11-22 | Fix |
| CVE-2022-38462 | silverstripe Framework reflected XSS in querystring parameters | 6.1v3.1 | 0.5% | 2022-11-22 | Fix |
| CVE-2022-37931 | A vulnerability in NetBatch-Plus software allows unauthorized access to the application | 7.3CNA v3.1 | 0.2% | 2022-11-22 | Fix |
| CVE-2022-37301 | Schneider Electric Modicon M340 CPU integer underflow | 7.5CNA v3.1 | 0.8% | 2022-11-22 | Fix |
| CVE-2022-36227 | libarchive null pointer dereference | 9.8NVD v3.1 | 2.4% | 2022-11-22 | Fix |
| CVE-2022-36180 | FusionDirectory cross-site scripting | 9.6v3.1 | 0.9% | 2022-11-22 | |
| CVE-2022-36179 | FusionDirectory insufficient session expiration | 9.8v3.1 | 0.9% | 2022-11-22 | |
| CVE-2022-35407 | Insyde Kernel out-of-bounds write | 7.8v3.1 | 0.2% | 2022-11-22 | Fix |
| CVE-2022-33012 | microweber account takeover through Password Reset Poisoning | 8.8v3.1 | 1.3% | 2022-11-22 | |
| CVE-2022-30529 | Isic.lk asith-eranga ISIC tour booking file upload | 7.2v3.1 | 1.0% | 2022-11-22 | |
| CVE-2022-4116 | Code injection in Quarkus dev UI config editor | 9.8v3.1 | 32.5% | 2022-11-22 | Fix |
| CVE-2022-4111 | Improper validation of specified quantity in input in ToolJet/ToolJet | 6.5v3.1 | 0.8% | 2022-11-22 | Fix |
| CVE-2022-3910 | Linux kernel use-after-free | 7.8NVD v3.1 | 1.1% | 2022-11-22 | Exploit codeFix |
| CVE-2022-3500 | Keylime: Unhandled exceptions could lead to invalid attestation states | 5.1v3.1 | 0.2% | 2022-11-22 | Fix |
| CVE-2022-2791 | Emerson Electric Proficy Machine Edition unrestricted file upload | 7.8v3.1 | 0.2% | 2022-11-22 | Fix |
| CVE-2022-2513 | Hitachi Energy PCM600 IED credential storage vulnerability | 7.1CNA v3.1 | 0.2% | 2022-11-22 | Fix |
| CVE-2022-0222 | Schneider Electric Modicon M340 CPUs improper privilege management | 7.5CNA v3.1 | 0.6% | 2022-11-22 | Fix |
| CVE-2022-45470 | Apache Hama allows XSS and information disclosure | 7.5v3.1 | 1.3% | 2022-11-21 | Fix |
| CVE-2022-45422 | LG PC uncontrolled search path | 7.8v3.1 | 0.2% | 2022-11-21 | Fix |
| CVE-2022-45146 | Garbage collection issue in BC-FJA in Java 13 and later | 5.5v3.1 | 0.4% | 2022-11-21 | Fix |
| CVE-2022-45017 | WBCE_CMS Overview page settings module cross-site scripting | 4.8v3.1 | 0.6% | 2022-11-21 | |
| CVE-2022-45016 | WBCE_CMS Search settings module cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-45015 | WBCE_CMS Search settings module cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-45014 | WBCE_CMS Search settings module cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-45013 | WBCE_CMS Show Advanced option module cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-45012 | WBCE_CMS Modify page module cross-site scripting | 4.8v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-44830 | Event Registration Application CSV injection | 7.8v3.1 | 0.6% | 2022-11-21 | Exploit code |
| CVE-2022-44788 | Maggioli Appalti & Contratti session fixation | 6.5v3.1 | 0.6% | 2022-11-21 | |
| CVE-2022-44787 | Maggioli Appalti & Contratti cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-21 | |
| CVE-2022-44786 | Maggioli Appalti & Contratti remote file inclusion | 7.5v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44785 | Maggioli Appalti & Contratti SQL injection | 9.8v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44784 | Maggioli Appalti & Contratti missing authentication | 8.8v3.1 | 1.0% | 2022-11-21 | |
| CVE-2022-44183 | Tenda AC18 buffer overflow | 9.8v3.1 | 1.0% | 2022-11-21 | |
| CVE-2022-44180 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44178 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44177 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44176 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44175 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44174 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44172 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44171 | Tenda AC18 buffer overflow | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-44169 | Tenda AC15 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44168 | Tenda AC15 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44167 | Tenda AC15 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44163 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44158 | Tenda AC21 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-44156 | Tenda AC15 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-11-21 | |
| CVE-2022-43143 | Beekeeper Studio A cross-site scripting | 9.6v3.1 | 0.8% | 2022-11-21 | Exploit code |
| CVE-2022-43117 | Password Storage Application cross-site scripting | 5.4v3.1 | 0.8% | 2022-11-21 | Exploit code |
| CVE-2022-42096 | Cross-site scripting in Backdrop CMS | 4.8NVD v3.1 | 2.1% | 2022-11-21 | NucleiFix |
| CVE-2022-41945 | Remote code execution (RCE) vulnerability in super-xray via URL input | 6.5CNA v3.1 | 0.8% | 2022-11-21 | Fix |
| CVE-2022-40746 | IBM i command injection | 7.2CNA v3.1 | 0.4% | 2022-11-21 | Fix |
| CVE-2022-40470 | PHPGurukul Blood Donor Management System cross-site scripting | 4.8v3.1 | 0.6% | 2022-11-21 | Exploit code |
| CVE-2022-40129 | Foxit PDF Reader JavaScript engine of Foxit Software's use-after-free | 7.8v3.1 | 1.0% | 2022-11-21 | Fix |
| CVE-2022-38755 | Filr Remote unauthenticated user enumeration for versions | 5.3CNA v3.1 | 0.7% | 2022-11-21 | Fix |
| CVE-2022-38148 | silverstripe Framework blind SQL injection via GridFieldSortableHeader | 8.8v3.1 | 0.7% | 2022-11-21 | Fix |
| CVE-2022-38146 | silverstripe Framework URL XSS vulnerability due to outdated jquery in CMS | 5.4v3.1 | 0.5% | 2022-11-21 | Fix |
| CVE-2022-38097 | Foxit PDF Reader JavaScript engine of Foxit Software's use-after-free | 7.8v3.1 | 1.2% | 2022-11-21 | Fix |
| CVE-2022-37332 | Foxit PDF Reader JavaScript engine of Foxit Software's use-after-free | 7.8v3.1 | 1.4% | 2022-11-21 | Exploit codeFix |
| CVE-2022-35897 | Insyde Kernel out-of-bounds write | 6.8v3.1 | 0.4% | 2022-11-21 | Fix |
| CVE-2022-32774 | Foxit PDF Reader JavaScript engine of Foxit Software's use-after-free | 7.8v3.1 | 1.0% | 2022-11-21 | Fix |
| CVE-2022-30258 | Technitium DNS Server incorrectly resolved name or reference | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-30257 | Technitium DNS Server incorrectly resolved name or reference | 9.8v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-4105 | Cross-site scripting (XSS) Stored in kiwitcms/kiwi | 5.4NVD v3.1 | 0.5% | 2022-11-21 | Fix |
| CVE-2022-4096 | Server-side request forgery (SSRF) in appsmithorg/Appsmith | 6.5NVD v3.1 | 1.6% | 2022-11-21 | Exploit codeFix |
| CVE-2022-4093 | SQL injection in Dolibarr/Dolibarr | 9.8v3.1 | 4.1% | 2022-11-21 | Fix |
| CVE-2022-4087 | iPXE TLS tls.c tls_new_ciphertext information exposure | 4.3v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-3861 | Betheme WordPress theme authenticated (Subscriber+) PHP object injection | 8.8v3.1 | 2.1% | 2022-11-21 | Fix |
| CVE-2022-3763 | Booster for WooCommerce Checkout Files Deletion via CSRF | 8.1NVD v3.1 | 0.4% | 2022-11-21 | Fix |
| CVE-2022-3762 | Booster for WooCommerce ShopManager+ arbitrary file download | 6.5NVD v3.1 | 1.0% | 2022-11-21 | Fix |
| CVE-2022-3753 | Evaluate WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-11-21 | |
| CVE-2022-3750 | Ask Me WordPress theme post deletion via CSRF | 4.7NVD v3.1 | 0.4% | 2022-11-21 | Fix |
| CVE-2022-3720 | Event Monster WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2022-11-21 | Fix |
| CVE-2022-3691 | DeepL Pro API Translation WordPress plugin API key disclosure | 7.5NVD v3.1 | 0.9% | 2022-11-21 | Fix |
| CVE-2022-3690 | Popup Maker WordPress plugin Contributor+ stored cross-site scripting | 4.8NVD v3.1 | 0.7% | 2022-11-21 | Fix |
| CVE-2022-3688 | WPQA WordPress plugin Follow/Unfollow via CSRF | 8.8NVD v3.1 | 0.5% | 2022-11-21 | Fix |
| CVE-2022-3634 | Contact Form 7 Database Addon WordPress plugin CSV injection | 9.8NVD v3.1 | 3.9% | 2022-11-21 | Fix |
| CVE-2022-3618 | Spacer WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-11-21 | Fix |
| CVE-2022-3600 | Easy Digital Downloads WordPress plugin unauthenticated CSV injection | 9.8NVD v3.1 | 1.3% | 2022-11-21 | Fix |
| CVE-2022-3589 | Miele: Vulnerability in cloud service used by appWash | 8.1CNA v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-3388 | Input validation vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products | 8.8CNA v3.1 | 0.3% | 2022-11-21 | Fix |
| CVE-2022-3336 | Event Monster WordPress plugin Visitors deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2022-11-21 | Fix |
| CVE-2022-1581 | WP-Polls WordPress plugin IP validation bypass | 5.3NVD v3.1 | 0.7% | 2022-11-21 | Fix |
| CVE-2022-1579 | Login Block IPs WordPress plugin IP spoofing bypass | 7.5NVD v3.1 | 0.7% | 2022-11-21 | |
| CVE-2022-1578 | My wpdb WordPress plugin arbitrary SQL Query via CSRF | 8.8NVD v3.1 | 0.5% | 2022-11-21 | Fix |
| CVE-2022-0421 | Five Star Plugins Five Star Restaurant Reservations stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-11-21 | Fix |
| CVE-2022-4070 | Insufficient session expiration in librenms/librenms | 9.8v3.1 | 0.6% | 2022-11-20 | Fix |
| CVE-2022-4069 | Cross-site scripting (XSS) Generic in librenms/librenms | 4.8v3.1 | 93.3% | 2022-11-20 | Fix |
| CVE-2022-4068 | Improperly controlled modification of dynamically-determined object attributes in librenms/librenms | 5.4NVD v3.1 | 35.9% | 2022-11-20 | Fix |
| CVE-2022-4067 | Cross-site scripting (XSS) Stored in librenms/librenms | 5.4v3.1 | 93.7% | 2022-11-20 | Fix |
| CVE-2022-3562 | Cross-site scripting (XSS) Stored in librenms/librenms | 5.4v3.1 | 94.2% | 2022-11-20 | Fix |
| CVE-2022-3561 | Cross-site scripting (XSS) Generic in librenms/librenms | 6.1v3.1 | 0.5% | 2022-11-20 | Fix |
| CVE-2022-3525 | Deserialization of untrusted data in librenms/librenms | 8.8NVD v3.1 | 0.9% | 2022-11-20 | Fix |
| CVE-2022-3516 | Cross-site scripting (XSS) Stored in librenms/librenms | 6.1v3.1 | 0.5% | 2022-11-20 | Fix |
| CVE-2022-41939 | Credential exposure when running third-party builders in knative/func | 6.1CNA v3.1 | 1.0% | 2022-11-19 | Fix |
| CVE-2022-41938 | Cross-site scripting vulnerability with discussion titles in Flarum | 9.0CNA v3.1 | 0.7% | 2022-11-19 | Fix |
| CVE-2022-41609 | Better Messages WordPress plugin server-side request forgery (SSRF) | 8.8v3.1 | 0.6% | 2022-11-19 | Fix |
| CVE-2022-41155 | Pascal iQ Block Country (WordPress) improper access control | 9.8v3.1 | 0.7% | 2022-11-19 | Fix |
| CVE-2022-34667 | NVIDIA CUDA Toolkit stack-based buffer overflow | 4.4CNA v3.1 | 0.4% | 2022-11-19 | Fix |
| CVE-2022-34665 | NVIDIA GPU Display Driver kernel mode layer null pointer dereference | 6.5CNA v3.1 | 0.2% | 2022-11-19 | Fix |
| CVE-2022-31617 | NVIDIA Cloud Gaming (guest driver) out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2022-11-19 | Fix |
| CVE-2022-31616 | NVIDIA Cloud Gaming (guest driver) out-of-bounds read | 6.1CNA v3.1 | 0.2% | 2022-11-19 | Fix |
| CVE-2022-31615 | NVIDIA GeForce null pointer dereference | 5.5CNA v3.1 | 0.2% | 2022-11-19 | Fix |
| CVE-2022-31613 | NVIDIA Cloud Gaming (guest driver) null pointer dereference | 7.1CNA v3.1 | 0.2% | 2022-11-19 | Fix |
| CVE-2022-31612 | NVIDIA Cloud Gaming (guest driver) out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2022-11-19 | Fix |
| CVE-2022-31610 | NVIDIA Cloud Gaming (guest driver) out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2022-11-19 | Fix |
| CVE-2022-31608 | NVIDIA GeForce improper preservation of permissions | 7.8CNA v3.1 | 0.3% | 2022-11-19 | Fix |
| CVE-2022-31607 | NVIDIA GPU Display Driver kernel mode layer improper input validation | 7.8CNA v3.1 | 0.3% | 2022-11-19 | Fix |
| CVE-2022-31606 | NVIDIA Cloud Gaming (guest driver) out-of-bounds write | 7.8CNA v3.1 | 0.4% | 2022-11-19 | Fix |
| CVE-2022-30256 | MaraDNS operation on a released resource | 7.5v3.1 | 0.9% | 2022-11-19 | Fix |
| CVE-2022-4066 | davidmoreno onion Log response.c onion_response_flush allocation of resources | 8.2v3.1 | 1.1% | 2022-11-19 | |
| CVE-2022-4065 | cbeust testng XML file Parser JarFileUtils.java testngXmlExistsInJar path traversal | 7.8v3.1 | 0.9% | 2022-11-19 | Exploit codeFix |
| CVE-2022-4064 | Dalli Meta protocol request_formatter.rb self.meta_set injection | 3.7NVD v3.1 | 1.4% | 2022-11-19 | Fix |
| CVE-2022-4055 | xdg-utils xdg-mail vulnerability | 7.4NVD v3.1 | 0.7% | 2022-11-19 | Fix |
| CVE-2022-45474 | Drachtio-server use-after-free | 9.8v3.1 | 1.0% | 2022-11-18 | |
| CVE-2022-45473 | drachtio-server log directory and log file vulnerability | 5.5v3.1 | 0.3% | 2022-11-18 | |
| CVE-2022-45471 | JetBrains Hub resource exhaustion | 3.5CNA v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-45369 | Plugin for Google Reviews WordPress plugin Auth. broken access control | 4.3v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-45163 | NXP I.mx 8M Mini observable discrepancy | 4.6v3.1 | 0.6% | 2022-11-18 | |
| CVE-2022-45132 | Linaro Lava code injection | 9.8v3.1 | 1.9% | 2022-11-18 | Fix |
| CVE-2022-45082 | Accordions WordPress plugin Multiple Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-45073 | REST API Authentication WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-18 | Fix |
| CVE-2022-44820 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.8% | 2022-11-18 | |
| CVE-2022-44740 | Creative Mail WordPress plugin Multiple cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-18 | Fix |
| CVE-2022-44641 | Linaro Lava XML entity expansion | 6.5v3.1 | 1.0% | 2022-11-18 | Fix |
| CVE-2022-44634 | S2W Import Shopify to WooCommerce WordPress plugin Auth. arbitrary file read | 4.9v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-44584 | WatchTowerHQ WordPress plugin Unauth. arbitrary file deletion | 9.1v3.1 | 0.9% | 2022-11-18 | Fix |
| CVE-2022-44583 | WatchTowerHQ WordPress plugin Unauth. arbitrary file download | 7.5v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-44415 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.8% | 2022-11-18 | |
| CVE-2022-44414 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.8% | 2022-11-18 | |
| CVE-2022-44413 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.8% | 2022-11-18 | |
| CVE-2022-44379 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.8% | 2022-11-18 | |
| CVE-2022-44378 | Automotive Shop Management System SQL injection | 7.2v3.1 | 1.0% | 2022-11-18 | |
| CVE-2022-44204 | D-Link Dir-3060 buffer overflow | 9.8v3.1 | 1.3% | 2022-11-18 | |
| CVE-2022-43673 | wire sensitive information in log files | 4.7v3.1 | 0.3% | 2022-11-18 | |
| CVE-2022-43492 | Comments wpDiscuz WordPress plugin Auth. insecure direct object references (IDOR) | 8.8v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-43482 | Appointment Booking Calendar WordPress plugin missing authorization | 8.8v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-43463 | Custom Product Tabs for WooCommerce WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-43308 | Intelbras Sg 2404 Mr improper privilege management | 7.8v3.1 | 0.3% | 2022-11-18 | |
| CVE-2022-42904 | Zoho ManageEngine ADManager Plus command injection | 7.2v3.1 | 83.0% | 2022-11-18 | Fix |
| CVE-2022-42883 | Quiz And Survey Master WordPress plugin sensitive information disclosure | 7.5v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-42698 | Api2Cart Bridge Connector WordPress plugin arbitrary file upload | 9.8v3.1 | 0.9% | 2022-11-18 | Fix |
| CVE-2022-42497 | Api2Cart Bridge Connector WordPress plugin arbitrary code execution | 9.8v3.1 | 1.1% | 2022-11-18 | Fix |
| CVE-2022-42461 | miniOrange's Google Authenticator WordPress plugin broken access control | 8.8v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-42459 | Image Hover Effects Ultimate WordPress plugin Auth. WordPress options Change vulnerability | 7.2v3.1 | 0.8% | 2022-11-18 | Fix |
| CVE-2022-41911 | Invalid char to bool conversion when printing a tensor in TensorFlow | 4.8CNA v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41909 | Google TensorFlow CompositeTensorVariantToComponents operation improper input validation | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41908 | `CHECK` fail via inputs in `PyFunc` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41907 | Google TensorFlow ResizeNearestNeighborGrad operation vulnerability | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41901 | `CHECK_EQ` fail via input in `SparseMatrixNNZ` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41900 | FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in TensorFlow | 7.1CNA v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-41899 | `CHECK` fail via inputs in `SdcaOptimizer` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41898 | `CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41897 | `FractionalMaxPoolGrad` heap out-of-bounds read in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41896 | `tf.raw_ops.Mfcc` crashes in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41895 | `MirrorPadGrad` heap out-of-bounds read in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41894 | tensorflow buffer overflow in `CONV_3D_TRANSPOSE` on TFLite | 7.1CNA v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-41893 | `CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41891 | Segfault in `tf.raw_ops.TensorListConcat` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41890 | `CHECK` fail in `BCast` overflow in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41889 | Segfault via invalid attributes in `pywrap_tfe_src.cc` in TensorFlow | 5.5CNA v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41888 | Unckecked rank size in `tf.image.generate_bounding_box_proposals` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41887 | Overflow in `tf.keras.losses.poisson` in TensorFlow | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41886 | Google TensorFlow ImageProjectiveTransformV2 operation vulnerability | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41885 | Google TensorFlow FusedResizeAndPadConv2D operation vulnerability | 4.8CNA v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41884 | Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in TensorFlow | 4.8CNA v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41883 | Out-of-bounds segmentation fault due to unequal op inputs in TensorFlow | 6.8CNA v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41880 | ThreadUnsafeUnigramCandidateSampler Heap out-of-bounds in TensorFlow | 6.8CNA v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41840 | Welcart eCommerce WordPress plugin Unauth. directory traversal | 9.8v3.1 | 5.1% | 2022-11-18 | NucleiExploit codeFix |
| CVE-2022-41839 | LoginPress WordPress plugin broken access control | 5.3v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41805 | Booster for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2022-11-18 | Fix |
| CVE-2022-41788 | Soledad premium WordPress theme Auth. cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41781 | Permalink Manager Lite WordPress plugin broken access control | 9.8v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-41692 | Appointment Hour Booking WordPress plugin missing authorization | 8.8v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-41685 | Visztpeter Integration For Szamlazz.hu & Woocommerce Viszt Péter's cross-site request forgery | 8.8v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41655 | Phone Orders for WooCommerce WordPress plugin Auth. sensitive data exposure | 6.5v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-41652 | Quiz And Survey Master WordPress plugin bypass vulnerability | 9.8v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-41643 | Accessibility WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-41634 | Media Library Folders WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-18 | Fix |
| CVE-2022-41618 | Media Library Assistant WordPress plugin unauthenticated error Log disclosure vulnerability | 5.3v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-41615 | Store Locator WordPress plugin cross-site scripting (XSS) via cross-site request forgery (CSRF) | 6.1v3.1 | 0.2% | 2022-11-18 | Fix |
| CVE-2022-41135 | Modula WordPress plugin Unauth. plugin settings Change vulnerability | 5.3v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-40963 | WP Page Builder WordPress plugin Multiple Auth. stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-40698 | Quiz And Survey Master WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-40695 | SEO Redirection WordPress plugin Multiple cross-site scripting (CSRF) | 8.8v3.1 | 0.3% | 2022-11-18 | Fix |
| CVE-2022-40687 | Creative Mail WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-40686 | Creative Mail WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-18 | Fix |
| CVE-2022-40216 | Better Messages WordPress plugin Auth. Messaging block bypass vulnerability | 6.5v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-40130 | WP-Polls WordPress plugin Auth. race condition | 3.1NVD v3.1 | 0.4% | 2022-11-18 | Fix |
| CVE-2022-38974 | WPML Multilingual CMS premium WordPress plugin broken access control | 4.3v3.1 | 0.5% | 2022-11-18 | Fix |
| CVE-2022-38871 | Free5gc vulnerable to uncontrolled resource consumption | 7.5v3.1 | 0.7% | 2022-11-18 | Fix |
| CVE-2022-38075 | Carlos Doral Mantenimiento web cross-site request forgery | 6.1v3.1 | 0.2% | 2022-11-18 | Fix |
| CVE-2022-37197 | IObit Iotransfer unquoted search path | 7.8v3.1 | 1.1% | 2022-11-18 | Exploit code |
| CVE-2022-34827 | Carel Boss Mini improper access control | 9.9v3.1 | 0.8% | 2022-11-18 | |
| CVE-2022-31694 | VMware InstallBuilder uncontrolled search path | 7.3v3.1 | 0.2% | 2022-11-18 | Fix |
| CVE-2022-24939 | Malformed Zigbee packet with invalid destination address causes Assert | 5.7CNA v3.1 | 0.3% | 2022-11-18 | Fix |
| CVE-2022-24038 | Unauthorized modification in Karmasis Informatics Infraskope SIEM+ | 7.5NVD v3.1 | 0.6% | 2022-11-18 | Fix |
| CVE-2022-24037 | Unauthorized modification in Karmasis Informatics Infraskope SIEM+ | 7.5NVD v3.1 | 0.8% | 2022-11-18 | Fix |
| CVE-2022-45461 | Veritas NetBackup OS command injection | 8.8v3.1 | 0.8% | 2022-11-17 | Fix |
| CVE-2022-45375 | iFeature Slider WordPress plugin Auth. stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-45077 | Betheme WordPress theme Auth. PHP object injection | 8.8v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-45072 | WPML Multilingual CMS premium WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2022-11-17 | Fix |
| CVE-2022-45071 | WPML Multilingual CMS premium WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-11-17 | Fix |
| CVE-2022-45069 | Crowdsignal Dashboard WordPress plugin privilege escalation | 8.8v3.1 | 0.7% | 2022-11-17 | Fix |
| CVE-2022-45066 | WooSwipe WooCommerce Gallery WordPress plugin Auth. broken access control | 8.8v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-44736 | Chameleon WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-44725 | OPC Foundation Local Discovery Server incorrect permission assignment | 7.8v3.1 | 0.2% | 2022-11-17 | Fix |
| CVE-2022-44591 | Anthologize WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-44403 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-17 | |
| CVE-2022-44402 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-17 | |
| CVE-2022-44384 | rConfig An arbitrary file upload | 8.8v3.1 | 5.0% | 2022-11-17 | MetasploitExploit code |
| CVE-2022-44001 | Backclick missing authentication | 9.8v3.1 | 1.1% | 2022-11-17 | |
| CVE-2022-43782 | Atlassian Crowd user management REST API vulnerability | 9.8v3.1 | 0.9% | 2022-11-17 | Fix |
| CVE-2022-43781 | Atlassian Bitbucket Server command injection | 9.8v3.1 | 98.1% | 2022-11-17 | MetasploitExploit codeFix |
| CVE-2022-43506 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 0.7% | 2022-11-17 | |
| CVE-2022-43457 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-43452 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 7.7% | 2022-11-17 | |
| CVE-2022-43447 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-43332 | WonderCMS A cross-site scripting | 6.1v3.1 | 0.6% | 2022-11-17 | Exploit code |
| CVE-2022-43192 | DedeCMS component /dede/file_manage_control.php arbitrary file upload | 6.7v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-43183 | XXL-JOB vulnerable to server-side request forgery (SSRF) | 8.8v3.1 | 1.6% | 2022-11-17 | Fix |
| CVE-2022-43179 | Online Leave Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-17 | |
| CVE-2022-43171 | LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind | 6.5v3.1 | 0.7% | 2022-11-17 | Fix |
| CVE-2022-43163 | Online Diagnostic Lab Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-17 | |
| CVE-2022-43162 | Online Diagnostic Lab Management System SQL injection | 7.2v3.1 | 0.7% | 2022-11-17 | |
| CVE-2022-43142 | Password Storage Application add-fee.php component cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-43140 | Keking kkFileView server-side request forgery | 7.5v3.1 | 2.0% | 2022-11-17 | Nuclei |
| CVE-2022-43138 | Dolibarr vulnerable to privilege escalation | 9.8v3.1 | 1.2% | 2022-11-17 | Fix |
| CVE-2022-43096 | M5T Mediatrix 4102 UART port vulnerability | 6.8v3.1 | 0.5% | 2022-11-17 | Exploit codeFix |
| CVE-2022-42985 | Scratch-wiki Scratch Login cross-site scripting | 4.8v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-42982 | Bund Bkg Professional Ntripcaster missing authentication | 7.5v3.1 | 0.7% | 2022-11-17 | Fix |
| CVE-2022-42960 | Equalweb Accessibility Widget cross-site scripting | 5.4v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-42954 | Keyfactor Kefactor Ejbca cross-site scripting | 5.4v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-42903 | Zoho Manageengine Supportcenter Plus missing authorization | 3.3v3.1 | 0.5% | 2022-11-17 | Fix |
| CVE-2022-42894 | Siemens syngo Dynamics server-side request forgery | 7.5v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42893 | Siemens syngo Dynamics external control of a file path | 7.5v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42892 | Siemens syngo Dynamics relative path traversal | 5.3v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42891 | Siemens syngo Dynamics external control of a file path | 7.5v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42734 | Siemens syngo Dynamics external control of a file path | 7.5v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42733 | Siemens syngo Dynamics external control of a file path | 7.5v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42732 | Siemens syngo Dynamics external control of a file path | 7.5v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-42533 | Android SharedMetadata.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2022-11-17 | Fix |
| CVE-2022-42246 | Duofoxtechnologies Duofox Cms cross-site request forgery | 8.8v3.1 | 0.3% | 2022-11-17 | |
| CVE-2022-42245 | Dreamer CMS SQL injection | 9.8v3.1 | 0.8% | 2022-11-17 | |
| CVE-2022-42187 | hustoj cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-41920 | Lancet vulnerable to path traversal when unzipping files | 6.3CNA v3.1 | 0.8% | 2022-11-17 | Fix |
| CVE-2022-41791 | ProfileGrid WordPress plugin Auth. CSV injection | 8.8v3.1 | 0.7% | 2022-11-17 | Fix |
| CVE-2022-41775 | Delta Electronics DIAEnergie SQL injection | 8.8v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-41315 | Ezoic WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-41132 | Ezoic WordPress plugin unauthenticated plugin settings Change Leading to stored XSS | 6.1v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-40881 | Contec SolarView Compact command injection | 9.8v3.1 | 31.2% | 2022-11-17 | NucleiExploit code |
| CVE-2022-40751 | IBM UrbanCode Deploy information disclosure | 4.9CNA v3.1 | 0.6% | 2022-11-17 | Fix |
| CVE-2022-40694 | News Announcement Scroll WordPress plugin Auth. stored cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-40200 | wpForo Forum WordPress plugin Auth. arbitrary file upload | 8.8NVD v3.1 | 1.0% | 2022-11-17 | Fix |
| CVE-2022-40192 | wpForo Forum WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-39834 | Keyfactor Primekey Ejbca cross-site scripting | 5.4v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-39389 | Witness Block Parsing DoS vulnerability in lnd | 8.2CNA v3.1 | 1.1% | 2022-11-17 | Fix |
| CVE-2022-39181 | GLPI Reports plugin for GLPI reflected cross-site-scripting (RXSS) | 6.1v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-39180 | College Management System SQL injection (SQLi) | 9.8v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-39179 | College Management System authenticated remote code execution | 7.2v3.1 | 1.1% | 2022-11-17 | |
| CVE-2022-39178 | Webvendome webvendome Internal Server IP Disclosure | 5.3v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-38461 | WPML Multilingual CMS premium WordPress plugin broken access control | 4.3v3.1 | 0.5% | 2022-11-17 | Fix |
| CVE-2022-38390 | IBM Business Automation Workflow cross-site scripting | 5.4CNA v3.1 | 0.4% | 2022-11-17 | Fix |
| CVE-2022-38165 | WithSecure F-secure Policy Manager arbitrary file write | 9.8v3.1 | 0.9% | 2022-11-17 | Fix |
| CVE-2022-36924 | Local privilege escalation in Zoom Rooms Installer for Windows | 8.8CNA v3.1 | 0.3% | 2022-11-17 | Fix |
| CVE-2022-36787 | webvendome webvendome SQL injection | 9.8v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-36786 | DLINK DSL-224 Post-auth RCE | 9.9v3.1 | 0.9% | 2022-11-17 | Fix |
| CVE-2022-36785 | D-Link G integrated Access Device4 information disclosure and authorization bypass | 7.5v3.1 | 1.9% | 2022-11-17 | |
| CVE-2022-36784 | Elsight Elsight Halo remote code execution (RCE) | 9.8v3.1 | 1.1% | 2022-11-17 | Fix |
| CVE-2022-36432 | Amasty Blog Pro cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-17 | Exploit code |
| CVE-2022-36357 | ULTIMATE TABLES WordPress plugin Unauth. reflected cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-28768 | Local privilege escalation in Zoom Client Installer for macOS | 8.8CNA v3.1 | 0.2% | 2022-11-17 | Fix |
| CVE-2022-28766 | DLL injection in Zoom Windows Clients | 3.3CNA v3.1 | 0.5% | 2022-11-17 | Fix |
| CVE-2022-23748 | Dante Discovery process control vulnerability | 7.8NVD v3.1 | 9.1% | 2022-11-17 | KEVFix |
| CVE-2022-20460 | Android (TBD) privilege escalation | 6.7v3.1 | 0.1% | 2022-11-17 | Fix |
| CVE-2022-20459 | Android (TBD) code execution | 6.7v3.1 | 0.1% | 2022-11-17 | Fix |
| CVE-2022-20428 | Android (TBD) out-of-bounds write | 6.7v3.1 | 0.1% | 2022-11-17 | Fix |
| CVE-2022-20427 | Android (TBD) privilege escalation | 6.7v3.1 | 0.1% | 2022-11-17 | Fix |
| CVE-2022-4053 | Student Attendance Management System createClass.php cross-site scripting | 4.8v3.1 | 0.4% | 2022-11-17 | |
| CVE-2022-4052 | Student Attendance Management System createClass.php SQL injection | 7.2v3.1 | 0.5% | 2022-11-17 | |
| CVE-2022-4051 | Hostel Searching Project view-property.php SQL injection | 9.8v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-3090 | Red Lion Controls Crimson path traversal | 5.3NVD v3.1 | 0.6% | 2022-11-17 | |
| CVE-2022-45047 | Apache MINA Sshd: Java unsafe deserialization | 9.8v3.1 | 3.6% | 2022-11-16 | Exploit codeFix |
| CVE-2022-44073 | Cross-site scripting in Zenario | 5.4v3.1 | 0.5% | 2022-11-16 | Fix |
| CVE-2022-44071 | Cross-site scripting in Zenario | 5.4v3.1 | 0.5% | 2022-11-16 | Fix |
| CVE-2022-44070 | Cross-site scripting in Zenario | 5.4v3.1 | 0.5% | 2022-11-16 | Fix |
| CVE-2022-44069 | Cross-site scripting in Zenario | 5.4v3.1 | 0.5% | 2022-11-16 | Fix |
| CVE-2022-44008 | Backclick path traversal | 6.5v3.1 | 0.8% | 2022-11-16 | |
| CVE-2022-44007 | Backclick session fixation | 8.8v3.1 | 0.8% | 2022-11-16 | |
| CVE-2022-44006 | Backclick path traversal | 9.8v3.1 | 2.0% | 2022-11-16 | |
| CVE-2022-44005 | Backclick insecure direct object reference | 5.3v3.1 | 0.6% | 2022-11-16 | |
| CVE-2022-44004 | Backclick weak password recovery | 9.8v3.1 | 1.2% | 2022-11-16 | |
| CVE-2022-44003 | Backclick SQL injection | 9.8v3.1 | 1.5% | 2022-11-16 | |
| CVE-2022-44002 | Backclick cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-16 | |
| CVE-2022-44000 | Backclick missing authentication | 9.8v3.1 | 1.0% | 2022-11-16 | |
| CVE-2022-43999 | Backclick missing authentication | 9.8v3.1 | 1.0% | 2022-11-16 | |
| CVE-2022-43264 | Guitar Pro path traversal | 7.5v3.1 | 0.9% | 2022-11-16 | |
| CVE-2022-43263 | Guitar Pro Arobas Music cross-site scripting | 6.1v3.1 | 0.5% | 2022-11-16 | |
| CVE-2022-43262 | oretnom23 Human Resource Management System SQL injection | 9.8v3.1 | 0.8% | 2022-11-16 | |
| CVE-2022-43256 | Seacms SQL injection | 9.8v3.1 | 0.9% | 2022-11-16 | |
| CVE-2022-43234 | Hoosk /attachments component arbitrary file upload | 9.8v3.1 | 1.0% | 2022-11-16 | |
| CVE-2022-43135 | Online Diagnostic Lab Management System SQL injection | 9.8v3.1 | 0.8% | 2022-11-16 | |
| CVE-2022-41917 | Incorrect Error Handling Allowed Partial File Reads over REST API in OpenSearch | 4.3CNA v3.1 | 0.6% | 2022-11-16 | Fix |
| CVE-2022-41914 | Non-constant-time SCIM token comparison in Zulip Server | 3.7CNA v3.1 | 0.6% | 2022-11-16 | Fix |
| CVE-2022-41877 | Missing input length validation in `drive` channel in FreeRDP | 4.6CNA v3.1 | 0.8% | 2022-11-16 | Fix |
| CVE-2022-40752 | IBM InfoSphere DataStage command injection | 9.8CNA v3.1 | 1.8% | 2022-11-16 | Fix |
| CVE-2022-39383 | SSRF vulnerability in KubeVela VelaUX APIServer | 4.9CNA v3.1 | 0.4% | 2022-11-16 | Fix |
| CVE-2022-39347 | Missing path sanitation with `drive` channel in FreeRDP | 2.6CNA v3.1 | 1.0% | 2022-11-16 | Fix |
| CVE-2022-39320 | FreeRDP heap buffer overflow in urbdrc channel | 5.5CNA v3.1 | 0.7% | 2022-11-16 | Fix |
| CVE-2022-39319 | Missing length validation in urbdrc channel in FreeRDP | 4.6CNA v3.1 | 0.8% | 2022-11-16 | Fix |
| CVE-2022-39318 | Division by zero in urbdrc channel in FreeRDP | 4.8CNA v3.1 | 1.0% | 2022-11-16 | Fix |
| CVE-2022-39317 | Out-of-bounds read in zgfx decoder in FreeRDP | 4.6CNA v3.1 | 0.7% | 2022-11-16 | Fix |
| CVE-2022-39316 | Out of bound read in FreeRDP | 4.8CNA v3.1 | 1.1% | 2022-11-16 | Fix |
| CVE-2022-34354 | IBM Sterling Partner Engagement Manager information disclosure | 4.0CNA v3.1 | 0.2% | 2022-11-16 | Fix |
| CVE-2022-24036 | Unauthorized modification in Karmasis Informatics Infraskope SIEM+ | 5.3NVD v3.1 | 0.5% | 2022-11-16 | Fix |
| CVE-2022-4022 | SVG Support WordPress plugin cross-site scripting | 5.4v3.1 | 0.4% | 2022-11-16 | Fix |
| CVE-2022-4021 | Permalink Manager Lite WordPress plugin cross-site request forgery | 4.3NVD v3.1 | 0.5% | 2022-11-16 | Fix |
| CVE-2022-4018 | Missing authentication for critical function in ikus060/rdiffweb | 4.3v3.1 | 0.8% | 2022-11-16 | Fix |
| CVE-2022-4015 | Sports Club Management System make_payments.php SQL injection | 9.8v3.1 | 0.5% | 2022-11-16 | |
| CVE-2022-4014 | FeehiCMS Post My Comment Tab cross-site request forgery | 4.3v3.1 | 0.2% | 2022-11-16 | |
| CVE-2022-4013 | Hospital Management Center appointment.php cross-site request forgery | 8.8v3.1 | 0.3% | 2022-11-16 | |
| CVE-2022-4012 | Hospital Management Center patient-info.php SQL injection | 9.8v3.1 | 0.5% | 2022-11-16 | |
| CVE-2022-4011 | Simple History Plugin header neutralization for logs | 9.8v3.1 | 1.0% | 2022-11-16 | |
| CVE-2022-3980 | Sophos Mobile managed on-premises XML external entity injection | 9.8CNA v3.1 | 9.8% | 2022-11-16 | NucleiFix |
| CVE-2022-3920 | Consul Peering Imported Nodes/Services leak | 5.3CNA v3.1 | 0.7% | 2022-11-16 | Fix |
| CVE-2022-2166 | Improper restriction of excessive authentication attempts in mastodon/mastodon | 9.8v3.1 | 1.1% | 2022-11-16 | Fix |
| CVE-2022-45402 | Apache Airflow: Open redirect during login | 6.1v3.1 | 81.8% | 2022-11-15 | Fix |
| CVE-2022-45401 | Jenkins Associated Files Plugin vulnerable to cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-45400 | XXE vulnerability in Jenkins Japex Plugin | 9.8v3.1 | 1.1% | 2022-11-15 | Fix |
| CVE-2022-45399 | Jenkins Cluster Statistics Plugin missing authorization | 4.3v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-45398 | Cross-site request forgery in Jenkins Cluster Statistics Plugin | 4.3v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-45397 | XXE vulnerability on agents in Jenkins OSF Builder Suite:: XML Linter Plugin | 9.8v3.1 | 1.0% | 2022-11-15 | Fix |
| CVE-2022-45396 | XXE vulnerability on agents in Jenkins SourceMonitor Plugin | 9.8v3.1 | 1.0% | 2022-11-15 | Fix |
| CVE-2022-45395 | XML external entity Reference in Jenkins Cccc Plugin | 9.8v3.1 | 1.1% | 2022-11-15 | Fix |
| CVE-2022-45394 | Missing permission check in Jenkins DELETE Log Plugin | 4.3v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-45393 | Cross-site request forgery in Jenkins DELETE Log Plugin | 3.5v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-45392 | Plaintext storage of a password in Jenkins NS-ND Integration Performance Publisher Plugin | 6.5v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-45391 | Jenkins NS-ND Integration Performance Publisher Plugin improper certificate validation | 7.5v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-45390 | Missing permission check in Jenkins Loader.io Plugin allows enumerating credentials IDs | 4.3v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-45389 | Missing authorization in Jenkins XP-Dev Plugin | 5.3v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-45388 | Jenkins Config Rotator Plugin vulnerable to path traversal | 7.5v3.1 | 1.1% | 2022-11-15 | Fix |
| CVE-2022-45387 | Jenkins Bart Plugin vulnerable to cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-45386 | XML external entity Reference in Jenkins Violations Plugin | 5.5v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-45385 | Lack of authentication mechanism for webhook in CloudBees Docker Hub/Registry Notification Plugin | 7.5v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-45384 | Jenkins Reverse Proxy Auth Plugin vulnerable due to plaintext storage of passwords | 6.5v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-45383 | Incorrect permission checks in Jenkins Support Core Plugin | 6.5v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-45382 | Cross-site scripting in Jenkins Naginator Plugin | 5.4v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-45381 | Arbitrary file read vulnerability in Jenkins Pipeline Utility Steps Plugin | 8.1v3.1 | 1.4% | 2022-11-15 | Fix |
| CVE-2022-45380 | Jenkins JUnit Plugin subject to cross-site scripting via URL conversion | 5.4v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-45379 | Whole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions | 7.5v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-43279 | LimeSurvey SQL injection | 7.2v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-43265 | Canteen Management System component /pages/save_user.php arbitrary file upload | 9.8v3.1 | 0.9% | 2022-11-15 | |
| CVE-2022-43071 | Xpdfreader Xpdf Catalog::readPageLabelTree2(Object*) function stack-based buffer overflow | 5.5v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-42984 | WoWonder SQL injection | 9.8v3.1 | 0.7% | 2022-11-15 | |
| CVE-2022-42978 | Atlassian Confluence Data Center incorrect authorization | 7.5v3.1 | 0.8% | 2022-11-15 | |
| CVE-2022-42977 | Atlassian Confluence Data Center path traversal | 7.5v3.1 | 1.0% | 2022-11-15 | |
| CVE-2022-42785 | Wiesemann and Theis: Authentication bypass in Com-Server family | 9.8CNA v3.1 | 1.1% | 2022-11-15 | Fix |
| CVE-2022-42132 | Liferay portal and Liferay DXP Includes LDAP Credentials in the Page URL | 5.9v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-42131 | Improper certificate validation in Liferay portal | 4.8v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-42130 | Incorrect default permissions in Liferay portal | 4.3v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-42129 | Authorization bypass in Liferay Portal | 4.3v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-42128 | Incorrect default permissions in Liferay Portal | 5.3v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-42127 | Incorrect default permissions in Liferay Portal | 5.3v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-42126 | Missing permissions check in Liferay Portal | 4.3v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-42125 | Path traversal in Liferay Portal | 7.5v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-42124 | Inefficient regular expression complexity in Liferay Portal | 7.5v3.1 | 1.3% | 2022-11-15 | Fix |
| CVE-2022-42123 | Path traversal in Liferay Portal | 7.5v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-42122 | Liferay Portal and Liferay DXP vulnerable to SQL injection via Friendly URL module | 9.8v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-42121 | Liferay portal and Liferay DXP vulnerable to SQL injection via the Layout module | 8.8v3.1 | 1.0% | 2022-11-15 | Fix |
| CVE-2022-42120 | Liferay Portal and Liferay DXP vulnerable to SQL injection via the Fragment module | 9.8v3.1 | 0.8% | 2022-11-15 | Fix |
| CVE-2022-42119 | Liferay Portal and Liferay DXP vulnerable to XSS via the Commerce module | 5.4v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-42118 | Liferay portal and Liferay DXP vulnerable to XSS via the Portal Search module | 6.1v3.1 | 0.9% | 2022-11-15 | NucleiFix |
| CVE-2022-42111 | Liferay Portal and Liferay DXP vulnerable to XSS via the Sharing module | 5.4v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-42110 | Liferay portal and Liferay DXP vulnerable to XSS via the Announcements module | 6.1v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-42060 | Tenda W15E stack-based buffer overflow | 7.5v3.1 | 1.1% | 2022-11-15 | |
| CVE-2022-42058 | Tenda W15E out-of-bounds write | 9.8v3.1 | 1.2% | 2022-11-15 | |
| CVE-2022-42053 | Tenda W15E OS command injection | 7.8v3.1 | 1.0% | 2022-11-15 | |
| CVE-2022-42001 | Hallo Welt! BlueSpice potential XSS in book navigation | 5.4v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-42000 | Hallo Welt! BlueSpice potential XSS in comment section | 5.4v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-41918 | opensearch-project security issue with fine-grained access control of indices backing data streams | 6.3CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-41916 | heimdal read one byte past a buffer when normalizing Unicode | 5.9CNA v3.1 | 1.0% | 2022-11-15 | Fix |
| CVE-2022-41814 | Hallo Welt! BlueSpice potential XSS in history view | 5.4v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-41789 | Hallo Welt! BlueSpice potential XSS on default page header | 5.4v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-41611 | Hallo Welt! BlueSpice potential XSS on sidebar navigation | 4.8v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-41558 | TIBCO Spotfire stored cross-site scripting (XSS) | 9.0CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-41396 | Tenda W15E OS command injection | 7.8v3.1 | 1.4% | 2022-11-15 | |
| CVE-2022-41395 | Tenda W15E OS command injection | 7.8v3.1 | 1.4% | 2022-11-15 | |
| CVE-2022-40847 | Tenda W15E OS command injection | 7.8v3.1 | 1.0% | 2022-11-15 | |
| CVE-2022-40846 | Tenda W15E cross-site scripting | 4.8v3.1 | 0.6% | 2022-11-15 | |
| CVE-2022-40845 | Tenda W15E forced browsing | 6.5v3.1 | 0.7% | 2022-11-15 | |
| CVE-2022-40844 | Tenda W15E cross-site scripting | 5.4v3.1 | 0.6% | 2022-11-15 | |
| CVE-2022-40843 | Tenda W15E improper authorization | 4.9v3.1 | 28.8% | 2022-11-15 | Nuclei |
| CVE-2022-40753 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-40405 | WoWonder SQL injection | 7.5v3.1 | 0.6% | 2022-11-15 | |
| CVE-2022-40309 | Apache Archiva allows an authenticated user to delete arbitrary directories | 4.3v3.1 | 1.4% | 2022-11-15 | Fix |
| CVE-2022-40308 | Apache Archiva may allow the anonymous user to read arbitrary files | 7.5v3.1 | 1.2% | 2022-11-15 | Fix |
| CVE-2022-38666 | Jenkins NS-ND Integration Performance Publisher Plugin improper certificate validation | 7.5v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-38385 | IBM Cloud Pak for Security improper input validation | 7.1CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-38201 | An unvalidated redirect vulnerability exists in Esri ArcGIS Quick Capture Web Designer to | 6.1CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-35613 | Konker Platform cross-site request forgery | 8.8v3.1 | 0.3% | 2022-11-15 | |
| CVE-2022-33986 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-33985 | Insyde Kernel time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-33984 | Insyde Kernel time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-33983 | Insyde Kernel time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-33909 | Insyde Kernel time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-33908 | Insyde Kernel time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-33906 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-33905 | Insyde Kernel time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-33239 | Qualcomm Snapdragon loop with unreachable exit condition in WLAN | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-33237 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-33236 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-33234 | Qualcomm Snapdragon configuration weakness in video | 7.3CNA v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-32267 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-31243 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-30774 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-30772 | Insyde Kernel out-of-bounds write | 8.2v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-30771 | Insyde Kernel out-of-bounds write | 8.2v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-30769 | zoneminder session fixation | 4.6v3.1 | 0.5% | 2022-11-15 | |
| CVE-2022-30768 | zoneminder A stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-30283 | Insyde Kernel time-of-check time-of-use race condition | 7.5v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-29279 | Insyde Kernel tampering | 8.2v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-29278 | Insyde Kernel improper check for exceptional conditions | 8.2v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-29277 | Intel Bakerville out-of-bounds write | 8.8v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-29276 | Insyde Kernel out-of-bounds write | 8.2v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-29275 | Insyde Kernel tampering | 8.2v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-27895 | A component in Foundry logging was found to be capturing sensitive information in logs | 4.2CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-25743 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-25742 | Qualcomm Snapdragon loop with unreachable exit condition in MODEM | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-25741 | Qualcomm Snapdragon null pointer dereference in WLAN | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-25727 | Qualcomm Snapdragon use of out-of-range pointer offset in MODEM | 9.8CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-25724 | Qualcomm Snapdragon buffer copy without checking size of input in Graphics | 8.4CNA v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-25710 | Qualcomm Snapdragon dereferencing a pointer that is already freed | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-25679 | Qualcomm Snapdragon improper access control in Video | 6.2CNA v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-25676 | Qualcomm Snapdragon buffer over-read in Video | 6.8CNA v3.1 | 0.1% | 2022-11-15 | Fix |
| CVE-2022-25674 | Qualcomm Snapdragon WPA/WPA2 group key handshake vulnerability | 6.5CNA v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-25671 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-25667 | Qualcomm Snapdragon information disclosure in Kernel | 7.5CNA v3.1 | 0.4% | 2022-11-15 | Fix |
| CVE-2022-24942 | Silabs Micrium Uc-http HTTP Server functionality heap-based buffer overflow | 9.1CNA v3.1 | 2.0% | 2022-11-15 | Fix |
| CVE-2022-20950 | Cisco Firepower Threat Defense Software resource exhaustion | 5.8CNA v3.1 | 0.8% | 2022-11-15 | Fix |
| CVE-2022-20949 | Cisco Firepower Threat Defense Software resource management error | 6.5CNA v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-20947 | Cisco Adaptive Security Appliance (ASA) Software denial of service | 8.6CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-20946 | Cisco Firepower Threat Defense Software heap-based buffer overflow | 8.6CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-20943 | Cisco Firepower Threat Defense Software denial of service | 5.8CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-20941 | Cisco Firepower Management Center insufficient randomness | 5.3CNA v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-20940 | Cisco Firepower Threat Defense Software observable discrepancy | 5.3CNA v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-20938 | Cisco Firepower Management Center XML external entity injection | 4.3CNA v3.1 | 0.6% | 2022-11-15 | Fix |
| CVE-2022-20936 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20935 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20934 | Cisco Firepower Threat Defense Software command injection | 6.0CNA v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-20932 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20928 | Cisco Adaptive Security Appliance (ASA) Software incorrect authorization | 5.8CNA v3.1 | 0.7% | 2022-11-15 | Fix |
| CVE-2022-20927 | Cisco Adaptive Security Appliance (ASA) Software buffer overflow | 7.7CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20926 | Cisco Firepower Management Center command injection | 6.3CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-20925 | Cisco Firepower Management Center command injection | 6.3CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-20924 | Cisco Adaptive Security Appliance (ASA) Software improper input validation | 7.7CNA v3.1 | 0.8% | 2022-11-15 | Fix |
| CVE-2022-20922 | Cisco Firepower Threat Defense Software denial of service | 5.8CNA v3.1 | 0.8% | 2022-11-15 | Fix |
| CVE-2022-20918 | Cisco Firepower Management Center improper access control | 7.5CNA v3.1 | 0.9% | 2022-11-15 | SnortFix |
| CVE-2022-20905 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20872 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20854 | Cisco Firepower Management Center improper error handling | 7.5CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-20843 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20840 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20839 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20838 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20836 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20835 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20834 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20833 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20832 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20831 | Cisco Firepower Management Center cross-site scripting | 4.8CNA v3.1 | 0.5% | 2022-11-15 | Fix |
| CVE-2022-20826 | Cisco Adaptive Security Appliance (ASA) Software trust boundary violation | 6.4CNA v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-4006 | WBCE CMS header class.login.php increase_attempts excessive authentication | 7.5v3.1 | 0.8% | 2022-11-15 | |
| CVE-2022-3998 | MonikaBrzica scm uredi_korisnika.php SQL injection | 9.8v3.1 | 0.5% | 2022-11-15 | |
| CVE-2022-3997 | MonikaBrzica scm upis_u_bazu.php SQL injection | 6.1v3.1 | 0.4% | 2022-11-15 | |
| CVE-2022-3958 | Hallo Welt! BlueSpice potential XSS on personal menu navigation | 5.4v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-3895 | Potential XSS in Common User Interface Component library | 6.1v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-3893 | Hallo Welt! BlueSpice potential XSS on custom menu navigation | 4.8v3.1 | 0.3% | 2022-11-15 | Fix |
| CVE-2022-3737 | Out-of-bounds read in Phoenix Contact Automationworx Software Suite | 7.8CNA v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-3480 | Denial of service vulnerability in Phoenix Contact mGuard product family | 7.5CNA v3.1 | 0.9% | 2022-11-15 | Fix |
| CVE-2022-3461 | Buffer overflow in Phoenix Contact Automationworx Software Suite | 7.8CNA v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-3377 | Horner Automation Cscape uninitialized pointer access | 7.8v3.1 | 0.2% | 2022-11-15 | Fix |
| CVE-2022-3240 | Follow Me WordPress plugin cross-site request forgery to cross-site scripting | 8.8v3.1 | 0.6% | 2022-11-15 | |
| CVE-2022-45378 | Apache SOAP allows unauthenticated users to potentially invoke arbitrary code | 9.8v3.1 | 2.3% | 2022-11-14 | Fix |
| CVE-2022-45199 | Pillow subject to DoS via SAMPLESPERPIXEL tag | 7.5v3.1 | 1.2% | 2022-11-14 | Fix |
| CVE-2022-45198 | Pillow vulnerable to Data Amplification attack | 7.5v3.1 | 1.2% | 2022-11-14 | Fix |
| CVE-2022-45184 | Ironmansoftware PowerShell Universal path traversal | 7.2v3.1 | 2.0% | 2022-11-14 | Fix |
| CVE-2022-45183 | Ironmansoftware PowerShell Universal Web Server in Ironman software privilege escalation | 8.8v3.1 | 0.8% | 2022-11-14 | Fix |
| CVE-2022-45136 | Apache Jena vulnerable to deserialization of untrusted data | 9.8v3.1 | 1.6% | 2022-11-14 | Fix |
| CVE-2022-44390 | EyouCMS A cross-site scripting | 5.4v3.1 | 0.3% | 2022-11-14 | |
| CVE-2022-44389 | EyouCMS cross-site request forgery | 6.5v3.1 | 0.2% | 2022-11-14 | |
| CVE-2022-44387 | EyouCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2022-11-14 | |
| CVE-2022-43968 | Concrete CMS vulnerable to reflected cross-site scripting via dashboard icons | 6.1v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43967 | Concrete CMS vulnerable to cross-site scripting via multilingual report | 6.1v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43695 | Concrete CMS cross-site scripting | 4.8v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43694 | Concrete CMS vulnerable to reflected cross-site scripting via image manipulation library | 6.1v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43693 | Concrete CMS vulnerable to cross-site request forgery | 8.8v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-43692 | Concrete CMS vulnerable to reflected cross-site scripting | 6.1v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43691 | Concrete CMS vulnerable to cleartext transmission of sensitive information | 5.3v3.1 | 0.4% | 2022-11-14 | Fix |
| CVE-2022-43690 | Concrete CMS vulnerable to improper authentication | 6.3v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43689 | Concrete CMS vulnerable to XML external entity | 5.3v3.1 | 0.7% | 2022-11-14 | Fix |
| CVE-2022-43688 | Concrete CMS vulnerable to cross-site scripting | 4.8v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43687 | Concrete CMS vulnerable to session fixation | 5.4v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-43686 | Concrete CMS vulnerable to uncontrolled resource consumption leading to DoS | 6.5v3.1 | 1.0% | 2022-11-14 | Fix |
| CVE-2022-43342 | Eramba Add function stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-43323 | EyouCMS cross-site request forgery | 8.8v3.1 | 0.4% | 2022-11-14 | |
| CVE-2022-43295 | Xpdfreader Xpdf stack-based buffer overflow | 5.5v3.1 | 0.3% | 2022-11-14 | Fix |
| CVE-2022-43294 | Tasmota out-of-bounds write | 9.8v3.1 | 0.9% | 2022-11-14 | |
| CVE-2022-43288 | Rukovoditel SQL injection | 8.8v3.1 | 0.8% | 2022-11-14 | |
| CVE-2022-43146 | Canteen Management System image upload function arbitrary file upload | 7.2v3.1 | 1.0% | 2022-11-14 | |
| CVE-2022-43030 | Siyucms weak password requirements | 7.2v3.1 | 1.9% | 2022-11-14 | |
| CVE-2022-41913 | Discourse-calendar exposes members of hidden groups | 4.3CNA v3.1 | 0.4% | 2022-11-14 | Fix |
| CVE-2022-40903 | AIPHONE Gt-dmb-n missing brute-force protection | 6.5v3.1 | 0.3% | 2022-11-14 | |
| CVE-2022-40735 | Diffie-hellman Key Exchange resource exhaustion | 7.5v3.1 | 2.4% | 2022-11-14 | Fix |
| CVE-2022-40127 | Apache Airflow has an RCE in a bash example | 8.8v3.1 | 85.7% | 2022-11-14 | NucleiExploit codeFix |
| CVE-2022-39385 | Users erroneously and transparently added to private messages in Discourse | 6.5CNA v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-38705 | IBM CICS TX reverse tabnabbing | 5.3CNA v3.1 | 0.7% | 2022-11-14 | Fix |
| CVE-2022-38167 | Nintex Workflow cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-14 | Fix |
| CVE-2022-37290 | GNOME Nautilus null pointer dereference | 5.5v3.1 | 0.3% | 2022-11-14 | Fix |
| CVE-2022-37109 | Camp insufficiently protected credentials | 9.8v3.1 | 49.2% | 2022-11-14 | Exploit code |
| CVE-2022-35719 | IBM MQ Internet Pass-Thru sensitive information in log files | 5.1CNA v3.1 | 0.2% | 2022-11-14 | Fix |
| CVE-2022-34329 | IBM CICS TX information disclosure | 5.3CNA v3.1 | 0.7% | 2022-11-14 | Fix |
| CVE-2022-34325 | InsydeH2O time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2022-11-14 | Fix |
| CVE-2022-34320 | IBM CICS TX information disclosure | 5.9CNA v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-34319 | IBM CICS TX information disclosure | 5.9CNA v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-34317 | IBM CICS TX cross-site scripting | 5.4CNA v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-34316 | IBM CICS TX information disclosure | 3.7CNA v3.1 | 0.7% | 2022-11-14 | Fix |
| CVE-2022-34315 | IBM CICS TX cross-site scripting | 5.4CNA v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-34314 | IBM CICS TX information disclosure | 4.0CNA v3.1 | 0.2% | 2022-11-14 | Fix |
| CVE-2022-34313 | IBM CICS TX session cookies information disclosure | 4.3CNA v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-34312 | IBM CICS TX information disclosure | 4.0CNA v3.1 | 0.2% | 2022-11-14 | Fix |
| CVE-2022-33982 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.2% | 2022-11-14 | Fix |
| CVE-2022-33907 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.2% | 2022-11-14 | Fix |
| CVE-2022-32266 | Insyde Kernel out-of-bounds write | 6.4v3.1 | 0.2% | 2022-11-14 | Fix |
| CVE-2022-31630 | PHP OOB read due to insufficient input validation in imageloadfont | 6.5CNA v3.1 | 2.3% | 2022-11-14 | Exploit codeFix |
| CVE-2022-30773 | Insyde Kernel time-of-check time-of-use race condition | 6.4v3.1 | 0.1% | 2022-11-14 | Fix |
| CVE-2022-28764 | Local information exposure in Zoom Clients | 3.3CNA v3.1 | 0.3% | 2022-11-14 | Fix |
| CVE-2022-27949 | Apache Airflow may include sensitive values in rendered template | 7.5v3.1 | 1.9% | 2022-11-14 | Fix |
| CVE-2022-27896 | The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure | 4.2CNA v3.1 | 0.4% | 2022-11-14 | |
| CVE-2022-24938 | Malformed Zigbee packet causes Assert in EmberZNet | 6.5CNA v3.1 | 0.7% | 2022-11-14 | Fix |
| CVE-2022-24937 | Malformed Zigbee packet causes Assert in EmberZNet | 6.5CNA v3.1 | 0.7% | 2022-11-14 | Fix |
| CVE-2022-3993 | Improper restriction of excessive authentication attempts in Kareadita/Kavita | 9.8v3.1 | 1.1% | 2022-11-14 | Fix |
| CVE-2022-3992 | SourceCodester Sanitization Management System Banner Image cross-site scripting | 6.1v3.1 | 0.5% | 2022-11-14 | Exploit code |
| CVE-2022-3988 | Frappe Search navbar_search.html cross-site scripting | 6.1v3.1 | 0.6% | 2022-11-14 | |
| CVE-2022-3903 | kernel type confusion | 4.6NVD v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-3632 | OAuth Client by DigitialPixies WordPress plugin CSRF | 6.5NVD v3.1 | 0.4% | 2022-11-14 | |
| CVE-2022-3631 | OAuth Client by DigitialPixies WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-11-14 | |
| CVE-2022-3578 | ProfileGrid WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2022-11-14 | NucleiFix |
| CVE-2022-3574 | WPForms Pro WordPress plugin CSV injection | 9.8NVD v3.1 | 1.4% | 2022-11-14 | Fix |
| CVE-2022-3539 | Themepoints Testimonials plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-3538 | Webmaster Tools Verification WordPress plugin unauthenticated arbitrary plugin deactivation | 6.5NVD v3.1 | 0.4% | 2022-11-14 | |
| CVE-2022-3484 | WPB Show Core reflected cross-site scripting | 6.1NVD v3.1 | 1.0% | 2022-11-14 | Nuclei |
| CVE-2022-3477 | tagDiv Composer WordPress theme unauthenticated account takeover | 9.8NVD v3.1 | 3.8% | 2022-11-14 | NucleiFix |
| CVE-2022-3469 | WP Attachments WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-3415 | Chat Bubble WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-3362 | Insufficient session expiration in ikus060/rdiffweb | 9.8v3.1 | 0.9% | 2022-11-14 | Fix |
| CVE-2022-3238 | Linux kernel A double free | 7.8NVD v3.1 | 0.2% | 2022-11-14 | |
| CVE-2022-2450 | reSmush.it Image Optimizer WordPress plugin Subscriber+ AJAX Calls | 4.3NVD v3.1 | 0.5% | 2022-11-14 | Fix |
| CVE-2022-2449 | reSmush.it Image Optimizer WordPress plugin Multiple CSRF | 6.5NVD v3.1 | 0.3% | 2022-11-14 | Fix |
| CVE-2022-0324 | Buffer overflow in Dhcp6relay in Software For Open Networking In The Cloud (SONiC) | 7.5v3.1 | 1.2% | 2022-11-14 | Exploit code |
| CVE-2022-0137 | michaelrsweet htmldoc image_set_mask function heap-based buffer overflow | 5.5NVD v3.1 | 0.6% | 2022-11-14 | Fix |
| CVE-2022-3979 | NagVis CoreLogonMultisite.php checkAuthCookie type conversion | 8.1v3.1 | 1.0% | 2022-11-13 | Fix |
| CVE-2022-3978 | NodeBB abort cross-site request forgery | 4.3v3.1 | 0.4% | 2022-11-13 | Fix |
| CVE-2022-3976 | MZ Automation libiec61850 MMS file services mms_client_files.c path traversal | 8.8v3.1 | 0.5% | 2022-11-13 | |
| CVE-2022-3975 | NukeViet CMS Data URL Request.php filterAttr cross-site scripting | 6.1v3.1 | 0.5% | 2022-11-13 | Fix |
| CVE-2022-3974 | Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow | 8.8v3.1 | 0.7% | 2022-11-13 | |
| CVE-2022-3973 | Pingkon HMS-PHP Data Pump Metadata admin.php SQL injection | 9.8v3.1 | 0.6% | 2022-11-13 | |
| CVE-2022-3972 | Pingkon HMS-PHP adminlogin.php SQL injection | 9.8v3.1 | 0.6% | 2022-11-13 | |
| CVE-2022-3971 | matrix-appservice-irc PgDataStore.ts SQL injection | 5.6v3.1 | 0.5% | 2022-11-13 | Fix |
| CVE-2022-3970 | LibTIFF tif_getimage.c TIFFReadRGBATileExt integer overflow | 8.8v3.1 | 1.3% | 2022-11-13 | Fix |
| CVE-2022-3969 | OpenKM FileUtils.java getFileExtension temp file | 5.5v3.1 | 0.5% | 2022-11-13 | Fix |
| CVE-2022-3968 | emlog article_save.php cross-site scripting | 6.1v3.1 | 0.4% | 2022-11-13 | |
| CVE-2022-3967 | Vesta Control Panel sed main.sh argument injection | 7.8v3.1 | 0.2% | 2022-11-13 | |
| CVE-2022-3966 | Ultimate Member Plugin template class-shortcodes.php load_template pathname traversal | 7.5v3.1 | 0.7% | 2022-11-13 | Fix |
| CVE-2022-3965 | FFmpeg QuickTime Graphics Video Encoder smcenc.c smc_encode_stream out-of-bounds | 8.1v3.1 | 0.9% | 2022-11-13 | Fix |
| CVE-2022-3964 | FFmpeg QuickTime RPZA Video Encoder rpzaenc.c out-of-bounds | 8.1v3.1 | 3.6% | 2022-11-13 | Fix |
| CVE-2022-45196 | hyperledger fabric incorrect control flow | 7.5v3.1 | 0.8% | 2022-11-12 | Fix |
| CVE-2022-45195 | Simplex Chat weak cryptographic algorithm | 5.3v3.1 | 0.6% | 2022-11-12 | Fix |
| CVE-2022-45194 | Bruhn-newtech Cbrn-analysis XML external entity injection | 4.7v3.1 | 0.4% | 2022-11-12 | |
| CVE-2022-45193 | Bruhn-newtech Cbrn-analysis incorrect permission assignment | 8.8v3.1 | 0.5% | 2022-11-12 | |
| CVE-2022-45188 | Netatalk heap-based buffer overflow | 7.8v3.1 | 0.6% | 2022-11-12 | Fix |
| CVE-2022-43672 | Zoho ManageEngine Password Manager Pro SQL injection | 9.8v3.1 | 67.1% | 2022-11-12 | Fix |
| CVE-2022-43671 | Zoho ManageEngine Password Manager Pro SQL injection | 9.8v3.1 | 74.8% | 2022-11-12 | Fix |