CVE-2022 list

CVE-2022 records published in November 2022

Page two of two: records 1,001 to 1,872 of the 1,872 published in November 2022, newest first. The first page carries the figures for November 2022.

CVE-2022 records published in November 2022, newest first: records 1,001 to 1,872 of 1,872
CVE Summary CVSS EPSS Published Signals
CVE-2022-41339Zoho Manageengine Mobile Device Manager Plus improper privilege management7.8v3.10.5%2022-11-12Fix
CVE-2022-40773Zoho Manageengine Servicedesk Plus Msp privilege escalation8.8v3.14.6%2022-11-12Fix
CVE-2022-38652VMware Hyperic Agent deserialization of untrusted data9.9v3.10.8%2022-11-12
CVE-2022-38651VMware Hyperic Server missing authorization9.8v3.10.8%2022-11-12
CVE-2022-38650VMware Hyperic Server deserialization of untrusted data10.0v3.10.8%2022-11-12
CVE-2022-3963gnuboard5 FAQ Key ID faq.php cross-site scripting5.4v3.10.4%2022-11-12
CVE-2022-45182Pi-star Digital Voice Dashboard improper parameter handling9.8v3.10.9%2022-11-11
CVE-2022-41906OpenSearch Notifications is vulnerable to server-side request forgery (SSRF)7.7CNA v3.00.7%2022-11-11Fix
CVE-2022-41905wsgidav is vulnerable to cross-site scripting (XSS) when directory browsing is enabled8.2CNA v3.10.4%2022-11-11Fix
CVE-2022-41904Element iOS Megolm session trust indicator vulnerability6.4CNA v3.10.4%2022-11-11Fix
CVE-2022-41892Arches vulnerable to SQL injection8.6CNA v3.10.6%2022-11-11Fix
CVE-2022-41882Nextcloud Desktop vulnerable to code injection via malicious link6.6CNA v3.10.5%2022-11-11Fix
CVE-2022-41873contiki-ng out-of-bounds read and write in BLE L2CAP module4.2CNA v3.10.3%2022-11-11Fix
CVE-2022-41854Stack overflow in SnakeYAML6.5NVD v3.11.5%2022-11-11Fix
CVE-2022-40750IBM WebSphere Application Server cross-site scripting5.4CNA v3.10.4%2022-11-11Fix
CVE-2022-38387IBM Cloud Pak for Security OS command injection7.1CNA v3.10.9%2022-11-11Fix
CVE-2022-38099Intel(R) NUC 11 Compute Elements BIOS firmware for some improper input validation7.5CNA v3.10.2%2022-11-11Fix
CVE-2022-37345Intel(R) NUC Kits BIOS firmware[A1] for some improper authentication7.8CNA v3.10.2%2022-11-11Fix
CVE-2022-37334Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards improper initialization7.0CNA v3.10.2%2022-11-11Fix
CVE-2022-36938Facebook Redex out-of-bounds read9.8v3.11.2%2022-11-11Fix
CVE-2022-36789Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs improper access control7.5CNA v3.10.2%2022-11-11Fix
CVE-2022-36776IBM Cloud Pak for Security cross-site scripting5.4CNA v3.10.4%2022-11-11Fix
CVE-2022-36400Intel(r) NUC Kit Wireless Adapter drivers installer software for some path traversal6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-36384Intel(r) NUC Kit Wireless Adapter drivers installer software for some unquoted search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-36380Intel(r) NUC Kit Wireless Adapter drivers installer software for some uncontrolled search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-36377Intel Wireless Adapter Driver installer privilege escalation6.7CNA v3.10.1%2022-11-11
CVE-2022-36370Intel(R) NUC Boards and Intel(R) NUC Kits BIOS firmware for some improper authentication7.5CNA v3.10.2%2022-11-11Fix
CVE-2022-36367Intel(R) Support Android application incorrect default permissions4.4CNA v3.10.2%2022-11-11Fix
CVE-2022-36349Intel(R) NUC Boards and Intel(R) NUC Kits BIOS firmware for some insecure default configuration5.2CNA v3.10.2%2022-11-11Fix
CVE-2022-35276Intel(R) NUC 8 Compute Elements BIOS firmware for some improper access control7.5CNA v3.10.2%2022-11-11Fix
CVE-2022-34331IBM Power FW SR-IOV network adapter configuration improper authentication5.5CNA v3.10.5%2022-11-11Fix
CVE-2022-34152Intel(R) NUC Boards, Intel(R) NUC Kits BIOS firmware for some improper input validation7.7CNA v3.10.2%2022-11-11Fix
CVE-2022-33973Intel(R) WAPI Security software improper access control3.3CNA v3.10.2%2022-11-11Fix
CVE-2022-33942Intel(R) DCM software protection mechanism failure8.8CNA v3.10.5%2022-11-11Fix
CVE-2022-33176Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs improper input validation8.2CNA v3.10.2%2022-11-11Fix
CVE-2022-32569Intel(R) NUC M15 Laptop Kits privilege escalation7.5CNA v3.10.2%2022-11-11Fix
CVE-2022-31772IBM MQ denial of service5.3CNA v3.10.8%2022-11-11Fix
CVE-2022-30691Intel(R) Support Android application resource exhaustion5.9CNA v3.10.2%2022-11-11Fix
CVE-2022-30548Intel(R) Glorp software uncontrolled search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-30542Intel S2600WF, R1000WF and R2000WF server firmware improper input validation8.2CNA v3.10.2%2022-11-11Fix
CVE-2022-30297Intel(R) EMA software cross-site scripting3.8CNA v3.10.2%2022-11-11Fix
CVE-2022-29893Intel(R) AMT firmware improper authentication8.1CNA v3.10.6%2022-11-11Fix
CVE-2022-29515Intel(R) SPS firmware memory leak6.0CNA v3.10.2%2022-11-11Fix
CVE-2022-29486Hyperscan Library maintained by Intel(R) privilege escalation4.3CNA v3.10.5%2022-11-11Fix
CVE-2022-29466Intel(R) SPS firmware improper input validation7.3CNA v3.10.2%2022-11-11Fix
CVE-2022-28667Intel(R) PROSet/Wireless WiFi Software out-of-bounds write6.5CNA v3.10.3%2022-11-11Fix
CVE-2022-28611Intel(R) XMM(TM) 7560 Modem software some improper input validation6.8CNA v3.10.2%2022-11-11Fix
CVE-2022-28126Intel(R) XMM(TM) 7560 Modem software some improper input validation6.0CNA v3.10.2%2022-11-11Fix
CVE-2022-27874Intel(R) XMM(TM) 7560 Modem software some improper authentication6.8CNA v3.10.2%2022-11-11Fix
CVE-2022-27639Intel(R) XMM(TM) 7560 Modem software some incomplete cleanup5.4CNA v3.10.3%2022-11-11Fix
CVE-2022-27638Intel(R) Advanced Link Analyzer Pro and Standard edition uncontrolled search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-27499Intel(R) SGX SDK software operation on a released resource2.5CNA v3.10.4%2022-11-11Fix
CVE-2022-27497Intel(R) AMT firmware null pointer dereference8.6CNA v3.10.7%2022-11-11Fix
CVE-2022-27233Intel(R) Quartus Prime Pro and Standard edition software XML injection6.5CNA v3.10.6%2022-11-11Fix
CVE-2022-27187Intel(R) Quartus Prime Standard edition software uncontrolled search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-26845Intel(R) AMT firmware improper authentication8.7CNA v3.10.6%2022-11-11Fix
CVE-2022-26513Intel(R) XMM(TM) 7560 Modem software some out-of-bounds write8.0CNA v3.10.3%2022-11-11Fix
CVE-2022-26508Intel(R) SDP Tool improper authentication4.3CNA v3.10.5%2022-11-11Fix
CVE-2022-26369Intel(R) XMM(TM) 7560 Modem software some out-of-bounds read6.2CNA v3.10.3%2022-11-11Fix
CVE-2022-26367Intel(R) XMM(TM) 7560 Modem software privilege escalation6.0CNA v3.10.2%2022-11-11Fix
CVE-2022-26341Intel(R) AMT SDK, Intel(R) EMA and Intel(R) MC software insufficiently protected credentials8.2CNA v3.10.5%2022-11-11Fix
CVE-2022-26124Intel(R) NUC Boards privilege escalation7.5CNA v3.10.2%2022-11-11Fix
CVE-2022-26086PresentMon software maintained by Intel(R) uncontrolled search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-26079Intel(R) XMM(TM) 7560 Modem software improper check for exceptional conditions6.0CNA v3.10.2%2022-11-11Fix
CVE-2022-26047Intel PROSet/Wireless WiFi, vPro CSME WiFi and Killer WiFi denial of service4.3CNA v3.10.4%2022-11-11Fix
CVE-2022-26045Intel(R) XMM(TM) 7560 Modem software privilege escalation3.3CNA v3.10.2%2022-11-11Fix
CVE-2022-26028Intel(R) VTune(TM) Profiler software uncontrolled search path6.7CNA v3.10.2%2022-11-11Fix
CVE-2022-26024Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN improper access control6.7CNA v3.10.1%2022-11-11Fix
CVE-2022-26006Intel(R) Processors BIOS firmware for some improper input validation8.2CNA v3.10.2%2022-11-11Fix
CVE-2022-25917Intel(R) Server Board M50CYP Family firmware for some improper error handling6.0CNA v3.10.2%2022-11-11Fix
CVE-2022-21794Intel(R) NUC Boards BIOS firmware for some improper authentication7.7CNA v3.10.2%2022-11-11Fix
CVE-2022-21198Intel(R) Processors BIOS firmware for some time-of-check time-of-use race condition7.9CNA v3.10.1%2022-11-11Fix
CVE-2022-3959Drogon Session Hash small space of random values5.3v3.11.0%2022-11-11Fix
CVE-2022-3957GPAC SVG parser svg_attributes.c svg_parse_preserveaspectratio memory leak6.5v3.11.0%2022-11-11Fix
CVE-2022-3956tsruban HHIMS Patient Portrait SQL injection9.8v3.10.7%2022-11-11
CVE-2022-3955tholum crm42 Login class.user.php SQL injection9.8v3.10.7%2022-11-11
CVE-2022-3952ManyDesigns Portofino WarFileLauncher.java createTempDir temp file7.1v3.10.6%2022-11-11Fix
CVE-2022-3950Sanluan PublicCMS Tab dwz.min.js initLink cross-site scripting6.1v3.10.4%2022-11-11
CVE-2022-3949SourceCodester Simple Cashiering System User Account cross-site scripting6.1NVD v3.10.5%2022-11-11
CVE-2022-3948eolinker goku_lite getList SQL injection9.8v3.10.7%2022-11-11
CVE-2022-3947eolinker goku_lite list SQL injection9.8v3.10.8%2022-11-11
CVE-2022-3945Improper restriction of excessive authentication attempts in Kareadita/Kavita5.3NVD v3.11.0%2022-11-11Fix
CVE-2022-3944jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload8.8v3.10.5%2022-11-11
CVE-2022-3943ForU CMS cms_chip.php cross-site scripting5.4v3.10.4%2022-11-11
CVE-2022-3942SourceCodester Sanitization Management System cross-site scripting6.1v3.10.7%2022-11-11Exploit code
CVE-2022-3941Activity Log Plugin HTTP header neutralization for logs5.3v3.10.7%2022-11-11
CVE-2022-3940lanyulei ferry task.go path traversal9.8v3.10.7%2022-11-11
CVE-2022-3939lanyulei ferry API file.go path traversal9.8v3.10.6%2022-11-11
CVE-2022-45130Plesk Obsidian cross-site request forgery6.5v3.10.3%2022-11-10
CVE-2022-45129Payara, when deployed to the root context, allows attackers to visit META-INF and web-INF7.5v3.11.4%2022-11-10Fix
CVE-2022-45063Invisible-island Xterm command injection9.8v3.15.2%2022-11-10Fix
CVE-2022-44727Lineagrafica EU Cookie Law Gdpr SQL injection9.1v3.12.5%2022-11-10NucleiFix
CVE-2022-44089Ecisp ESPCMS code injection9.8v3.11.6%2022-11-10
CVE-2022-44088Ecisp ESPCMS code injection9.8v3.119.9%2022-11-10
CVE-2022-44087Ecisp ESPCMS code injection9.8v3.11.6%2022-11-10
CVE-2022-43754SUMA/Uyuni reflected cross-site scripting in /rhn/audit/scap/Search.do2.6CNA v3.10.4%2022-11-10Fix
CVE-2022-43753SUMA/Uyuni arbitrary file disclosure vulnerability in ScapResultDownload4.3CNA v3.10.8%2022-11-10Fix
CVE-2022-43679ownCloud Server trusted_domains configuration improper access control5.3v3.10.3%2022-11-10
CVE-2022-43074Ayacms unrestricted file upload9.8v3.11.0%2022-11-10
CVE-2022-42787Wiesemann and Theis: Small number space for allocating session id in Com-Server family8.8v3.10.8%2022-11-10Fix
CVE-2022-42786Wiesemann and Theis: XSS vulnerability in web interface of the Com-Server family5.4v3.10.4%2022-11-10Fix
CVE-2022-42460SedLex Traffic Manager stored cross-site scripting5.4v3.10.4%2022-11-10
CVE-2022-41879parse-community parse-server Parse Server subject to prototype pollution via Cloud Code Webhooks7.2CNA v3.10.9%2022-11-10Fix
CVE-2022-41878parse-community parse-server Parse Server prototype pollution and injection7.2CNA v3.10.9%2022-11-10Fix
CVE-2022-41876ezplatform-graphql GraphQL queries can expose password hashes7.5CNA v3.11.4%2022-11-10Exploit codeFix
CVE-2022-41874Tauri Filesystem Scope can be Partially Bypassed2.6CNA v3.10.4%2022-11-10Fix
CVE-2022-41719Panic in github.com/shamaton/msgpack/v27.5v3.11.1%2022-11-10Fix
CVE-2022-41607ETIC Telecom Remote Access Server path traversal7.5v3.11.0%2022-11-10Fix
CVE-2022-40981ETIC Telecom Remote Access Server unrestricted upload of file with dangerous type10.0v3.10.5%2022-11-10
CVE-2022-40225Siemens SIPLUS TIM 1531 IRC incorrect numeric conversion6.9CNA v4.00.6%2022-11-10Fix
CVE-2022-39398InfotelGLPI vulnerable to cross-site scripting8.8CNA v3.10.5%2022-11-10Fix
CVE-2022-39396parse-community parse-server parse Server vulnerable to remote code execution9.8CNA v3.138.7%2022-11-10Fix
CVE-2022-39395go-vela server Vela Insecure Defaults9.6CNA v3.11.2%2022-11-10Fix
CVE-2022-39394bytecodealliance wasmtime wasmtime_trap_code C API function has out-of-bounds write3.8CNA v3.10.3%2022-11-10Fix
CVE-2022-39393Wasmtime vulnerable to data leakage between instances in the pooling allocator8.6CNA v3.10.7%2022-11-10Fix
CVE-2022-39392Wasmtime vulnerable to out-of-bounds read/write with zero-memory-pages configuration5.9CNA v3.10.6%2022-11-10Fix
CVE-2022-39388Istio may allow identity impersonation if user has localhost access7.6CNA v3.10.5%2022-11-10Fix
CVE-2022-39368Eclipse Californium DTLS handshake throttling denial of service8.2CNA v3.10.6%2022-11-10Fix
CVE-2022-39038FLOWRING Agentflow BPM broken access control8.8v3.10.9%2022-11-10Fix
CVE-2022-39037FLOWRING Agentflow BPM path traversal7.5CNA v3.11.3%2022-11-10Fix
CVE-2022-39036FLOWRING Agentflow BPM arbitrary file upload9.8CNA v3.11.2%2022-11-10Fix
CVE-2022-38122POWERCOM CO., LTD. UPSMON PRO cleartext transmission of sensitive information7.5CNA v3.10.5%2022-11-10Fix
CVE-2022-38121POWERCOM CO., LTD. UPSMON PRO insufficiently protected credentials6.5CNA v3.13.5%2022-11-10MetasploitKCVFix
CVE-2022-38120POWERCOM CO., LTD. UPSMON PRO path traversal6.5CNA v3.15.8%2022-11-10MetasploitKCVFix
CVE-2022-38119POWERCOM CO., LTD. UPSMON PRO broken authentication9.8CNA v3.11.1%2022-11-10Fix
CVE-2022-36022Some Deeplearning4J packages use unclaimed s3 bucket in tests and examples5.3CNA v3.10.4%2022-11-10Fix
CVE-2022-35740dotCMS cross-site scripting6.1v3.11.2%2022-11-10
CVE-2022-34666NVIDIA GPU Display Driver kernel mode layer null pointer dereference6.5CNA v3.10.2%2022-11-10Fix
CVE-2022-31255SUMA/Uyuni directory path traversal vulnerability in CobblerSnipperViewAction4.3CNA v3.10.7%2022-11-10Fix
CVE-2022-26088BMC Remedy IT Service Management Suite cross-site scripting5.4v3.11.0%2022-11-10
CVE-2022-3867Nomad Event Stream Subscriber using a Token with TTL Receives Updates Until Garbage Collected2.7CNA v3.10.5%2022-11-10Fix
CVE-2022-3866Nomad Workload Identity Token can List Non-sensitive Metadata for Paths under Nomad/5.0CNA v3.10.5%2022-11-10Fix
CVE-2022-3819GitLab An improper authorization3.5CNA v3.10.5%2022-11-10Fix
CVE-2022-3818GitLab resource exhaustion5.3CNA v3.10.7%2022-11-10Fix
CVE-2022-3793GitLab An improper authorization4.3CNA v3.10.6%2022-11-10Fix
CVE-2022-3726GitLab Swagger OpenAPI viewer vulnerability4.8CNA v3.10.8%2022-11-10Fix
CVE-2022-3706GitLab improper authorization3.1CNA v3.10.5%2022-11-10Fix
CVE-2022-3703ETIC Telecom Remote Access Server insufficient verification of data authenticity10.0v3.10.3%2022-11-10
CVE-2022-3413GitLab insecure direct object reference4.3CNA v3.10.5%2022-11-10Fix
CVE-2022-45062Xfce4-settings argument injection9.8v3.11.4%2022-11-09Fix
CVE-2022-45061Python algorithmic complexity7.5NVD v3.12.7%2022-11-09Fix
CVE-2022-45060varnish-software Varnish Cache improper input validation7.5v3.11.0%2022-11-09Fix
CVE-2022-45059Varnish Cache HTTP request smuggling7.5v3.11.4%2022-11-09Exploit codeFix
CVE-2022-44590Simple Video Embedder WordPress plugin Auth. stored cross-site scripting (XSS)5.4v3.10.5%2022-11-09
CVE-2022-44563Huawei HarmonyOS race condition vulnerability in SD upgrade mode5.9v3.10.3%2022-11-09Fix
CVE-2022-44562Huawei HarmonyOS mismatch between serialization and deserialization at the system framework layer9.8v3.10.6%2022-11-09Fix
CVE-2022-44561Huawei HarmonyOS permission verification vulnerability in the preset launcher module7.5v3.10.4%2022-11-09Fix
CVE-2022-44560Huawei HarmonyOS intent redirection vulnerability in the launcher module5.3v3.10.3%2022-11-09Fix
CVE-2022-44559Huawei HarmonyOS mismatch between serialization and deserialization in the AMS module9.8v3.10.6%2022-11-09Fix
CVE-2022-44558Huawei HarmonyOS mismatch between serialization and deserialization in the AMS module9.8v3.10.6%2022-11-09Fix
CVE-2022-44557Huawei HarmonyOS incorrect default permissions7.5v3.10.4%2022-11-09Fix
CVE-2022-44555Huawei HarmonyOS service hijacking vulnerability in the DDMP/ODMF module7.5v3.10.5%2022-11-09Fix
CVE-2022-44554Huawei HarmonyOS unstrict permission verification vulnerability in the power module7.5v3.10.5%2022-11-09Fix
CVE-2022-44553Huawei HarmonyOS improper input validation5.3v3.10.3%2022-11-09Fix
CVE-2022-44552Huawei HarmonyOS improper resource release7.5v3.10.5%2022-11-09Fix
CVE-2022-44551Huawei HarmonyOS thread security vulnerability in the iaware module9.8v3.10.4%2022-11-09Fix
CVE-2022-44550Huawei HarmonyOS UAF vulnerability when traversing layers in the graphics display module7.5v3.10.5%2022-11-09Fix
CVE-2022-44549Huawei HarmonyOS geofencing API access vulnerability in the LBS module7.5v3.10.4%2022-11-09Fix
CVE-2022-44548Huawei HarmonyOS vulnerability of unstrict permission verification during Bluetooth pairing4.3v3.10.2%2022-11-09Fix
CVE-2022-44547Huawei HarmonyOS UAF vulnerability in the Display service module7.5v3.10.5%2022-11-09Fix
CVE-2022-44546Huawei HarmonyOS incomplete cleanup7.5v3.10.5%2022-11-09Fix
CVE-2022-44244Lin-CMS lin CMS vulnerable to improper authentication6.6v3.11.0%2022-11-09
CVE-2022-43488Advanced Dynamic Pricing for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-11-09Fix
CVE-2022-43321Shopwind cross-site scripting6.1v3.10.4%2022-11-09
CVE-2022-43320FeehiCMS is vulnerable to cross-site scripting (XSS)6.1v3.10.4%2022-11-09
CVE-2022-43310Foxit Reader An uncontrolled search path7.8v3.11.6%2022-11-09
CVE-2022-43292Canteen Management System SQL injection7.2v3.10.7%2022-11-09
CVE-2022-43291Canteen Management System SQL injection7.2v3.10.7%2022-11-09
CVE-2022-43290Canteen Management System SQL injection7.2v3.10.7%2022-11-09
CVE-2022-43278Canteen Management System SQL injection7.2v3.10.7%2022-11-09
CVE-2022-43277Canteen Management System unrestricted file upload7.2v3.11.0%2022-11-09
CVE-2022-43121Subrion CMS is vulnerable to cross-site scripting (XSS)6.1v3.10.6%2022-11-09
CVE-2022-43120Subrion CMS is vulnerable to cross-site scripting (XSS)6.1v3.10.5%2022-11-09
CVE-2022-43119Csphere ClanSphere cross-site scripting6.1v3.10.5%2022-11-09
CVE-2022-43118Flatcore-cms cross-site scripting6.1v3.10.4%2022-11-09
CVE-2022-43058Online Diagnostic Lab Management System SQL injection9.8v3.10.7%2022-11-09
CVE-2022-43031DedeCMS cross-site request forgery8.8v3.10.5%2022-11-09
CVE-2022-42966Exponential ReDoS in Cleo leads to denial of service7.5NVD v3.11.0%2022-11-09Fix
CVE-2022-42965Exponential ReDoS in snowflake-connector-python leads to denial of service7.5NVD v3.10.9%2022-11-09Fix
CVE-2022-42964Exponential ReDoS in pymatgen leads to denial of service7.5NVD v3.10.9%2022-11-09Fix
CVE-2022-41978Zoho CRM Lead Magnet WordPress plugin Auth. arbitrary options update vulnerability6.5NVD v3.13.3%2022-11-09Fix
CVE-2022-41128Microsoft Windows Scripting Languages remote code execution8.8CNA v3.124.6%2022-11-09KEVFix
CVE-2022-41125Microsoft Windows CNG Key Isolation service privilege escalation7.8CNA v3.13.0%2022-11-09KEVFix
CVE-2022-41123Microsoft Exchange Server elevation of privilege7.8CNA v3.10.6%2022-11-09Fix
CVE-2022-41122Microsoft SharePoint server spoofing6.5CNA v3.11.6%2022-11-09Fix
CVE-2022-41120Microsoft Windows System Monitor (Sysmon) elevation of privilege7.8CNA v3.11.2%2022-11-09Fix
CVE-2022-41119Visual Studio remote code execution7.8CNA v3.10.8%2022-11-09Fix
CVE-2022-41118Microsoft Windows Scripting Languages remote code execution7.5CNA v3.11.2%2022-11-09Fix
CVE-2022-41116Microsoft Windows Point-to-Point Tunneling protocol denial of service5.9CNA v3.11.1%2022-11-09Fix
CVE-2022-41114Microsoft Windows Bind Filter driver elevation of privilege7.0CNA v3.10.5%2022-11-09Exploit codeFix
CVE-2022-41113Microsoft Windows Win32 Kernel subsystem elevation of privilege7.8CNA v3.18.8%2022-11-09Fix
CVE-2022-41109Microsoft Windows Win32k elevation of privilege7.8CNA v3.18.1%2022-11-09Fix
CVE-2022-41107Microsoft Office Graphics remote code execution7.8CNA v3.10.9%2022-11-09Fix
CVE-2022-41106Microsoft Excel remote code execution8.8CNA v3.12.4%2022-11-09Fix
CVE-2022-41105Microsoft Excel information disclosure5.5CNA v3.10.8%2022-11-09Fix
CVE-2022-41104Microsoft Excel security feature bypass5.5CNA v3.10.8%2022-11-09Fix
CVE-2022-41103Microsoft Word information disclosure5.5CNA v3.10.9%2022-11-09Fix
CVE-2022-41102Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.5%2022-11-09Fix
CVE-2022-41101Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.5%2022-11-09Fix
CVE-2022-41100Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege7.8CNA v3.10.3%2022-11-09Fix
CVE-2022-41099Microsoft Windows BitLocker security feature bypass4.6CNA v3.13.8%2022-11-09Fix
CVE-2022-41098Microsoft Windows GDI+ information disclosure5.5CNA v3.10.8%2022-11-09Fix
CVE-2022-41097Microsoft Windows network Policy Server (NPS) RADIUS protocol information disclosure6.5CNA v3.11.6%2022-11-09Fix
CVE-2022-41096Microsoft DWM Core library elevation of privilege7.8CNA v3.10.6%2022-11-09Fix
CVE-2022-41095Microsoft Windows Digital Media Receiver elevation of privilege7.8CNA v3.10.5%2022-11-09Fix
CVE-2022-41093Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege7.8CNA v3.10.3%2022-11-09Fix
CVE-2022-41092Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.7%2022-11-09Fix
CVE-2022-41091Microsoft Windows Mark of the Web (MOTW) security feature bypass5.4CNA v3.11.8%2022-11-09KEVKCVFix
CVE-2022-41090Microsoft Windows Point-to-Point Tunneling protocol denial of service5.9CNA v3.11.1%2022-11-09Fix
CVE-2022-41088Microsoft Windows Point-to-Point Tunneling protocol remote code execution8.1CNA v3.11.0%2022-11-09Fix
CVE-2022-41086Microsoft Windows Group Policy elevation of privilege6.4CNA v3.10.3%2022-11-09Fix
CVE-2022-41085Microsoft Azure CycleCloud elevation of privilege7.5CNA v3.10.7%2022-11-09Fix
CVE-2022-41080Microsoft Exchange Server privilege escalation8.8CNA v3.177.3%2022-11-09KEVExploit codeKCVFix
CVE-2022-41079Microsoft Exchange Server spoofing8.0CNA v3.10.8%2022-11-09Fix
CVE-2022-41078Microsoft Exchange Server spoofing8.0CNA v3.10.8%2022-11-09Fix
CVE-2022-41073Microsoft Windows Print Spooler privilege escalation7.8CNA v3.12.3%2022-11-09KEVFix
CVE-2022-41066Microsoft Dynamics Business Central information disclosure4.4CNA v3.11.2%2022-11-09Fix
CVE-2022-41064NET Framework information disclosure5.8CNA v3.10.8%2022-11-09Fix
CVE-2022-41063Microsoft Excel remote code execution7.8CNA v3.10.8%2022-11-09Fix
CVE-2022-41062Microsoft SharePoint server remote code execution8.8CNA v3.11.6%2022-11-09Fix
CVE-2022-41061Microsoft Word remote code execution7.8CNA v3.11.2%2022-11-09Fix
CVE-2022-41060Microsoft Word information disclosure5.5CNA v3.10.8%2022-11-09Fix
CVE-2022-41058Microsoft Windows Network Address Translation (NAT) denial of service7.5CNA v3.12.1%2022-11-09Fix
CVE-2022-41057Microsoft Windows HTTP.sys elevation of privilege7.8CNA v3.11.1%2022-11-09Fix
CVE-2022-41056Microsoft Windows network Policy Server (NPS) RADIUS protocol denial of service7.5CNA v3.12.1%2022-11-09Fix
CVE-2022-41055Microsoft Windows Human Interface Device information disclosure5.5CNA v3.10.6%2022-11-09Fix
CVE-2022-41054Microsoft Windows Resilient File System (ReFS) elevation of privilege7.8CNA v3.10.5%2022-11-09Fix
CVE-2022-41053Microsoft Windows Kerberos denial of service7.5CNA v3.12.1%2022-11-09Fix
CVE-2022-41052Microsoft Windows Graphics component remote code execution7.8CNA v3.10.8%2022-11-09Fix
CVE-2022-41051Microsoft Azure RTOS GUIX Studio remote code execution7.8CNA v3.10.8%2022-11-09Fix
CVE-2022-41050Microsoft Windows Extensible File Allocation Table elevation of privilege7.8CNA v3.10.5%2022-11-09Fix
CVE-2022-41049Microsoft Windows Mark of the Web (MOTW) security feature bypass5.4CNA v3.12.5%2022-11-09KEVFix
CVE-2022-41048Microsoft ODBC driver remote code execution8.8CNA v3.11.6%2022-11-09Fix
CVE-2022-41047Microsoft ODBC driver remote code execution8.8CNA v3.11.6%2022-11-09Fix
CVE-2022-41045Microsoft Windows Advanced Local Procedure Call (ALPC) elevation of privilege7.8CNA v3.10.3%2022-11-09Fix
CVE-2022-41044Microsoft Windows Point-to-Point Tunneling protocol remote code execution8.1CNA v3.11.1%2022-11-09Fix
CVE-2022-41039Microsoft Windows Point-to-Point Tunneling protocol remote code execution8.1CNA v3.11.1%2022-11-09Fix
CVE-2022-40797Roxy Fileman unrestricted file upload9.8v3.12.7%2022-11-09
CVE-2022-39893Samsung Mobile Galaxy Buds Pro Manager FmmBaseModel information disclosure3.3CNA v3.10.2%2022-11-09Fix
CVE-2022-39892Samsung Mobile Samsung Pass improper access control3.6CNA v3.10.4%2022-11-09Fix
CVE-2022-39891Samsung Mobile Editor Lite parse_pce function in libsavsaudio.so heap-based buffer overflow4.3CNA v3.10.4%2022-11-09Fix
CVE-2022-39890Samsung Mobile Samsung Billing improper authorization6.2CNA v3.10.4%2022-11-09Fix
CVE-2022-39889Samsung Mobile GalaxyWatch4Plugin improper access control4.0CNA v3.10.2%2022-11-09Fix
CVE-2022-39887Samsung Mobile Devices clearAllGlobalProxy in MiscPolicy improper access control4.3CNA v3.10.1%2022-11-09Fix
CVE-2022-39886Samsung Mobile Devices IpcRxServiceModeBigDataInfo in RIL improper access control5.9CNA v3.10.1%2022-11-09Fix
CVE-2022-39885Samsung Mobile Devices improper access control5.9CNA v3.10.1%2022-11-09Fix
CVE-2022-39884Samsung Mobile Devices IImsService improper access control4.3CNA v3.10.1%2022-11-09Fix
CVE-2022-39883Samsung Mobile Devices StorageManagerService improper authorization4.0CNA v3.10.1%2022-11-09Fix
CVE-2022-39882Samsung Mobile Devices heap-based buffer overflow8.0CNA v3.10.1%2022-11-09Fix
CVE-2022-39881Samsung Mobile Devices improper input validation5.3CNA v3.10.9%2022-11-09Fix
CVE-2022-39880Samsung Mobile Devices DualOutFocusViewer improper input validation7.1CNA v3.10.1%2022-11-09Fix
CVE-2022-39879Samsung Mobile Devices improper authorization5.9CNA v3.10.1%2022-11-09Fix
CVE-2022-39307Grafana subject to exposure of sensitive information resulting in User enumeration6.7CNA v3.10.7%2022-11-09Fix
CVE-2022-39306Grafana contains improper input validation6.4CNA v3.10.8%2022-11-09Fix
CVE-2022-38023Microsoft Windows netlogon RPC elevation of privilege8.1CNA v3.12.4%2022-11-09Fix
CVE-2022-38015Microsoft Windows Hyper-V denial of service6.5CNA v3.10.7%2022-11-09Fix
CVE-2022-38014Microsoft Windows Subsystem for Linux (WSL2) Kernel elevation of privilege7.0CNA v3.10.3%2022-11-09Fix
CVE-2022-37992Microsoft Windows Group Policy elevation of privilege7.8CNA v3.10.5%2022-11-09Fix
CVE-2022-37967Microsoft Windows Kerberos elevation of privilege7.2CNA v3.14.1%2022-11-09Fix
CVE-2022-37966Microsoft Windows Kerberos RC4-HMAC elevation of privilege8.1CNA v3.12.5%2022-11-09Fix
CVE-2022-32588Accusoft ImageGear PICT parsing pctwread_14841 functionality out-of-bounds write7.8NVD v3.10.6%2022-11-09
CVE-2022-31689VMware Workspace ONE Assist session fixation9.8v3.10.8%2022-11-09Fix
CVE-2022-31688VMware Workspace ONE Assist cross-site scripting6.1v3.10.4%2022-11-09Fix
CVE-2022-31687VMware Workspace ONE Assist missing authorization9.8v3.10.8%2022-11-09Fix
CVE-2022-31686VMware Workspace ONE Assist improper authentication9.8v3.11.0%2022-11-09Fix
CVE-2022-31685VMware Workspace ONE Assist improper authentication9.8v3.11.0%2022-11-09Fix
CVE-2022-31253openSUSE Openldap2 untrusted search path7.1CNA v3.10.3%2022-11-09Fix
CVE-2022-30543InHand Networks InRouter302 active debug code8.8v3.10.9%2022-11-09Fix
CVE-2022-29888InHand Networks InRouter302 active debug code8.1v3.11.5%2022-11-09Fix
CVE-2022-29836Western Digital My Cloud Home and SanDisk ibi HTTP API path traversal1.9CNA v3.10.3%2022-11-09Fix
CVE-2022-29481InHand Networks InRouter302 active debug code6.5v3.10.8%2022-11-09Fix
CVE-2022-28689InHand Networks InRouter302 active debug code8.8v3.10.9%2022-11-09Fix
CVE-2022-27674AMD μProf IOCTL handler improper input validation7.5v3.10.7%2022-11-09Fix
CVE-2022-27673AMD Link Android information disclosure7.5v3.10.6%2022-11-09Fix
CVE-2022-26023InHand Networks InRouter302 active debug code6.5v3.10.8%2022-11-09Fix
CVE-2022-25932InHand Networks InRouter302 privilege escalation9.8v3.10.6%2022-11-09Fix
CVE-2022-23831AMD μProf IOCTL handler denial of service7.5v3.10.7%2022-11-09Fix
CVE-2022-23824AMD Processors information disclosure5.5v3.10.6%2022-11-09Fix
CVE-2022-3890Google Chrome Crashpad heap-based buffer overflow9.6v3.10.8%2022-11-09Fix
CVE-2022-3889Google Chrome V8 type confusion8.8v3.10.7%2022-11-09Fix
CVE-2022-3888Google Chrome WebCodecs use-after-free8.8v3.10.7%2022-11-09Fix
CVE-2022-3887Google Chrome Web Workers use-after-free8.8v3.10.8%2022-11-09Fix
CVE-2022-3886Google Chrome Speech Recognition use-after-free8.8v3.10.7%2022-11-09Fix
CVE-2022-3885Google Chrome V8 use-after-free8.8v3.10.8%2022-11-09Fix
CVE-2022-3486GitLab An open redirect4.7CNA v3.10.8%2022-11-09Fix
CVE-2022-3483GitLab Datadog integration vulnerability5.5CNA v3.10.7%2022-11-09Fix
CVE-2022-3450Google Chrome Peer Connection use-after-free8.8v3.10.7%2022-11-09Fix
CVE-2022-3449Google Chrome Safe Browsing use-after-free8.8v3.10.4%2022-11-09Fix
CVE-2022-3448Google Chrome Permissions API use-after-free8.8v3.10.7%2022-11-09Fix
CVE-2022-3447Google Chrome Custom Tabs inappropriate implementation4.3v3.10.6%2022-11-09Fix
CVE-2022-3446Google Chrome WebSQL heap-based buffer overflow8.8v3.10.8%2022-11-09Fix
CVE-2022-3445Google Chrome Skia use-after-free8.8v3.10.7%2022-11-09Fix
CVE-2022-3285GitLab healthcheck endpoint allow list vulnerability5.3CNA v3.10.8%2022-11-09Fix
CVE-2022-3280GitLab An open redirect3.5CNA v3.10.6%2022-11-09Fix
CVE-2022-3265GitLab cross-site scripting7.3CNA v3.186.3%2022-11-09Fix
CVE-2022-2761GitLab An information disclosure4.3CNA v3.10.7%2022-11-09Fix
CVE-2022-0031Cortex XSOAR: Local privilege escalation (PE) vulnerability in Cortex XSOAR Engine6.7CNA v3.10.1%2022-11-09Fix
CVE-2022-44741Testimonial Slider WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2022-11-08Fix
CVE-2022-44556EMUI missing parameter type validation in the DRM module7.5v3.10.5%2022-11-08Fix
CVE-2022-44457Siemens Mendix SAML (Mendix 7 compatible) authentication bypass by replay9.8v3.10.7%2022-11-08Fix
CVE-2022-44321Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44320Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44319Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44318Picoc out-of-bounds write5.5v3.10.3%2022-11-08Exploit code
CVE-2022-44317Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44316Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44315Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44314Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44313Picoc out-of-bounds write5.5v3.10.3%2022-11-08
CVE-2022-44312Picoc out-of-bounds write5.5v3.10.3%2022-11-08Exploit code
CVE-2022-44311HTML2XHTML out-of-bounds read8.1v3.11.1%2022-11-08Exploit code
CVE-2022-43958Siemens QMS Automotive plaintext password storage7.6CNA v3.10.3%2022-11-08Fix
CVE-2022-43546Siemens POWER METER SICAM Q100 improper input validation9.9CNA v3.11.6%2022-11-08Fix
CVE-2022-43545Siemens POWER METER SICAM Q100 improper input validation9.9CNA v3.11.5%2022-11-08Fix
CVE-2022-43491Advanced Dynamic Pricing for WooCommerce WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-11-08Fix
CVE-2022-43481Advanced Coupons for WooCommerce Coupons WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-11-08Fix
CVE-2022-43439Siemens POWER METER SICAM Q100 improper input validation9.9CNA v3.11.6%2022-11-08Fix
CVE-2022-43398Siemens POWER METER SICAM Q100 session fixation7.5CNA v3.10.5%2022-11-08Fix
CVE-2022-43397Siemens Parasolid out-of-bounds write7.8CNA v3.10.2%2022-11-08Fix
CVE-2022-43343N-prolog buffer overflow7.5v3.11.1%2022-11-08Exploit code
CVE-2022-43144Canteen Management System cross-site scripting5.4v3.11.0%2022-11-08Exploit code
CVE-2022-42494All in One SEO Pro WordPress plugin server side request forgery (SSRF)6.5v3.10.6%2022-11-08Fix
CVE-2022-41980Mantenimiento web WordPress plugin Auth. cross-site scripting (XSS)4.8v3.10.5%2022-11-08Fix
CVE-2022-41757Arm Valhall GPU Kernel Driver write-what-where condition8.8v3.10.7%2022-11-08Fix
CVE-2022-41664Siemens JT2Go stack-based buffer overflow7.8CNA v3.10.3%2022-11-08Fix
CVE-2022-41663Siemens JT2Go use-after-free7.8CNA v3.10.4%2022-11-08Fix
CVE-2022-41662Siemens JT2Go out-of-bounds read7.8CNA v3.10.4%2022-11-08Fix
CVE-2022-41661Siemens JT2Go out-of-bounds read7.8CNA v3.10.4%2022-11-08Fix
CVE-2022-41660Siemens JT2Go out-of-bounds write7.8CNA v3.10.4%2022-11-08Fix
CVE-2022-41434EyesOfNetwork Web Interface cross-site scripting6.1v3.10.4%2022-11-08
CVE-2022-41433EyesOfNetwork Web Interface cross-site scripting4.8v3.10.4%2022-11-08
CVE-2022-41432EyesOfNetwork Web Interface cross-site scripting4.8v3.10.4%2022-11-08
CVE-2022-41260SAP Financial Consolidation cross-site scripting6.1CNA v3.10.4%2022-11-08Fix
CVE-2022-41259SAP SQL Anywhere SQL injection6.5CNA v3.00.8%2022-11-08Fix
CVE-2022-41258SAP Financial Consolidation cross-site scripting6.5CNA v3.10.4%2022-11-08Fix
CVE-2022-41215SAP NetWeaver (ABAP Server) and ABAP Platform open redirect4.7CNA v3.10.5%2022-11-08Fix
CVE-2022-41214SAP NetWeaver Application Server ABAP and ABAP Platform improper input validation8.7CNA v3.10.8%2022-11-08Fix
CVE-2022-41212SAP NetWeaver Application Server ABAP and ABAP Platform path traversal4.9CNA v3.00.8%2022-11-08Fix
CVE-2022-41211SAP 3D Visual Enterprise Author out-of-bounds write7.0CNA v3.10.3%2022-11-08Fix
CVE-2022-41208SAP Financial Consolidation cross-site scripting5.4CNA v3.10.4%2022-11-08Fix
CVE-2022-41207SAP Biller Direct open redirect6.1CNA v3.00.4%2022-11-08Fix
CVE-2022-41205SAP GUI code injection5.5CNA v3.10.2%2022-11-08Fix
CVE-2022-41203SAP BusinessObjects Business Intelligence Platform deserialization of untrusted data9.9CNA v3.01.0%2022-11-08Fix
CVE-2022-41136Shortcodes Ultimate WordPress plugin CSRF vulnerability leading to stored XSS8.8v3.10.3%2022-11-08Fix
CVE-2022-40632wpForo Forum WordPress plugin cross-site request forgery (CSRF)5.4v3.10.3%2022-11-08Fix
CVE-2022-40223SearchWP premium WordPress plugin broken authentication4.3v3.10.5%2022-11-08Fix
CVE-2022-40206wpForo Forum WordPress plugin insecure direct object references (IDOR)4.3v3.10.5%2022-11-08Fix
CVE-2022-40205wpForo Forum WordPress plugin insecure direct object references (IDOR)4.3v3.10.5%2022-11-08Fix
CVE-2022-40128Advanced Order Export For WooCommerce WordPress plugin cross-site request forgery (CSRF)6.5v3.10.3%2022-11-08Fix
CVE-2022-39386fastify-websocket vulnerable to uncaught exception via crash on malformed packet7.5CNA v3.10.8%2022-11-08Fix
CVE-2022-39377sysstat incorrect buffer size calculation on 32-bit systems results in RCE via buffer overflow7.0CNA v3.11.2%2022-11-08Fix
CVE-2022-39352OpenFGA authorization bypass4.8CNA v3.10.4%2022-11-08Fix
CVE-2022-39343Microsoft Azure RTOS FileX Fault Tolerant feature buffer overflow5.6CNA v3.10.9%2022-11-08Fix
CVE-2022-39328Grafana vulnerable to race condition allowing privilege escalation9.8CNA v3.11.0%2022-11-08Fix
CVE-2022-39157Siemens Parasolid out-of-bounds read7.8CNA v3.10.2%2022-11-08Fix
CVE-2022-39136Siemens JT2Go heap-based buffer overflow7.8CNA v3.10.3%2022-11-08Fix
CVE-2022-39069ZAIP-AIE ZTE SQL injection5.3v3.10.5%2022-11-08Fix
CVE-2022-38137Analytify WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2022-11-08Fix
CVE-2022-37015Symantec Endpoint Detection And Response improper privilege management9.8NVD v3.10.7%2022-11-08Fix
CVE-2022-36077Electron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect7.2CNA v3.10.6%2022-11-08Fix
CVE-2022-34825NEC CLUSTERPRO X uncontrolled search path9.8v3.11.2%2022-11-08Fix
CVE-2022-34824NEC CLUSTERPRO X incorrect default permissions9.8v3.11.1%2022-11-08Fix
CVE-2022-34823NEC CLUSTERPRO X buffer overflow9.8v3.11.3%2022-11-08Fix
CVE-2022-34822NEC CLUSTERPRO X path traversal9.8v3.11.4%2022-11-08Fix
CVE-2022-33322Mitsubishi Electric Air Conditioning MSZ-FD40/56/63/71/8022S cross-site scripting6.1v3.10.9%2022-11-08Fix
CVE-2022-33321Cleartext Transmission of Sensitive Information vulnerability due to the use of Basic Authentication for HTTP connections in Mitsubishi Electric consumer electronics products (PHOTOVOLTAIC COLOR MONITOR ECO-GUIDE, HEMS adapter, Wi-Fi Interface, Air Conditioning, Induction hob, Mitsubishi Electric HE9.8v3.10.9%2022-11-08Fix
CVE-2022-32776Advanced Ads Ad Manager and AdSense WordPress plugin Auth. stored cross-site scripting (XSS)4.8v3.10.5%2022-11-08Fix
CVE-2022-32618MediaTek chipsets incorrect calculation of buffer size in typec6.8v3.10.2%2022-11-08Fix
CVE-2022-32617MediaTek chipsets incorrect calculation of buffer size in typec6.8v3.10.2%2022-11-08Fix
CVE-2022-32616MediaTek chipsets improper input validation in isp6.7v3.10.1%2022-11-08Fix
CVE-2022-32615MediaTek chipsets improper input validation in ccd6.7v3.10.1%2022-11-08Fix
CVE-2022-32614MediaTek chipsets double free in audio6.7v3.10.1%2022-11-08Fix
CVE-2022-32613MediaTek chipsets concurrent execution using shared resource with improper synchronization in vcu6.4v3.10.1%2022-11-08Fix
CVE-2022-32612MediaTek chipsets concurrent execution using shared resource with improper synchronization in vcu6.4v3.10.1%2022-11-08Fix
CVE-2022-32611MediaTek chipsets improper input validation in isp6.7v3.10.1%2022-11-08Fix
CVE-2022-32610MediaTek chipsets improper synchronization in vcu6.4v3.10.1%2022-11-08Fix
CVE-2022-32609MediaTek chipsets improper synchronization in vcu6.4v3.10.1%2022-11-08Fix
CVE-2022-32608MediaTek MT6893, MT6895 time-of-check time-of-use (toctou) race condition in jpeg6.4v3.10.1%2022-11-08Fix
CVE-2022-32607MediaTek chipsets improper input validation in aee6.7v3.10.1%2022-11-08Fix
CVE-2022-32605MediaTek chipsets improper input validation in isp6.7v3.10.1%2022-11-08Fix
CVE-2022-32603MediaTek chipsets improper input validation in gpu drm6.7v3.10.1%2022-11-08Fix
CVE-2022-32602MediaTek chipsets improper input validation in keyinstall5.5v3.10.1%2022-11-08Fix
CVE-2022-32601MediaTek chipsets deserialization of untrusted data in telephony7.8v3.10.1%2022-11-08Fix
CVE-2022-32587WP Page Widget WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-11-08Fix
CVE-2022-31199Netwrix Auditor Insecure object deserialization9.8v3.136.0%2022-11-08KEVFix
CVE-2022-30694Siemens SIMATIC Drive Controller CPU 1504D TF cross-site request forgery6.5CNA v3.10.3%2022-11-08Fix
CVE-2022-305455 Anker Connect WordPress plugin reflected cross-site scripting (XSS)4.8v3.10.5%2022-11-08Fix
CVE-2022-30515ZKTeco BioTime missing authentication5.3v3.10.7%2022-11-08Fix
CVE-2022-27914Joomla! CMS core RXSS through reflection of user input in com_media6.1v3.10.5%2022-11-08Fix
CVE-2022-27858Activity Log WordPress plugin CSV injection9.8v3.10.8%2022-11-08Fix
CVE-2022-27855Analytics Cat WordPress plugin plugin settings change via cross-site request forgery (CSRF)4.3v3.10.3%2022-11-08Fix
CVE-2022-27516Citrix Gateway, Citrix ADC user login brute force protection functionality bypass5.3CNA v3.10.6%2022-11-08Fix
CVE-2022-27513Citrix Gateway, Citrix ADC remote desktop takeover via phishing8.3CNA v3.10.3%2022-11-08Fix
CVE-2022-27510Unauthorized access to Gateway user capabilities9.8CNA v3.11.1%2022-11-08Fix
CVE-2022-26446MediaTek chipsets reachable assertion in Modem 4G RRC7.5v3.11.1%2022-11-08Fix
CVE-2022-21778MediaTek chipsets improper input validation in vpu6.7v3.10.1%2022-11-08Fix
CVE-2022-20465Android KeyguardHostViewController.java privilege escalation4.6v3.10.8%2022-11-08Fix
CVE-2022-20462Android phNxpNciHal.cc out-of-bounds write7.8v3.10.1%2022-11-08Fix
CVE-2022-20457Android StorageManagerService.java privilege escalation5.5v3.10.1%2022-11-08Fix
CVE-2022-20454Android fdt.c out-of-bounds write6.7v3.10.1%2022-11-08Fix
CVE-2022-20453Android MmsProvider.java denial of service5.5v3.10.2%2022-11-08Fix
CVE-2022-20452Android BaseBundle.java arbitrary code execution7.8v3.10.4%2022-11-08Exploit codeFix
CVE-2022-20451Android CallsManager.java insecure permissions7.8v3.10.1%2022-11-08Fix
CVE-2022-20450Android PermissionManagerServiceImpl.java privilege escalation7.8v3.10.1%2022-11-08Fix
CVE-2022-20448Android NotificationManagerService.java privilege escalation5.5v3.10.1%2022-11-08Fix
CVE-2022-20447Android pan_api.cc out-of-bounds read6.5v3.10.3%2022-11-08Fix
CVE-2022-20446Android AlwaysOnHotwordDetector.java privilege escalation3.3v3.10.1%2022-11-08Fix
CVE-2022-20445Android sdp_discovery.cc out-of-bounds read7.5v3.10.5%2022-11-08Fix
CVE-2022-20441Android Task.java privilege escalation7.8v3.10.1%2022-11-08Fix
CVE-2022-20426Android many files denial of service5.5v3.10.1%2022-11-08Fix
CVE-2022-20414Android AlarmManagerService.java denial of service5.5v3.10.1%2022-11-08Fix
CVE-2022-3821systemd An off-by-one error5.5NVD v3.10.4%2022-11-08Fix
CVE-2022-44797btcd mishandles witness size checking9.8v3.11.2%2022-11-07Fix
CVE-2022-44796Objectfirst Ootbi weak random number generator9.8v3.10.7%2022-11-07Fix
CVE-2022-44795Objectfirst Ootbi insufficient randomness6.5v3.10.5%2022-11-07Fix
CVE-2022-44794Objectfirst Ootbi code injection8.8v3.11.0%2022-11-07Fix
CVE-2022-44793net-snmp null pointer dereference6.5v3.153.5%2022-11-07Fix
CVE-2022-44792net-snmp null pointer dereference6.5v3.152.1%2022-11-07Fix
CVE-2022-44747Acronis Cyber Protect Home Office externally controlled resource reference2.2CNA v3.00.2%2022-11-07Fix
CVE-2022-44746Acronis Cyber Protect Home Office information disclosure2.2CNA v3.00.1%2022-11-07Fix
CVE-2022-44745Acronis Cyber Protect Home Office sensitive information in log files4.0CNA v3.00.2%2022-11-07Fix
CVE-2022-44744Acronis Cyber Protect Home Office uncontrolled search path2.2CNA v3.00.2%2022-11-07Fix
CVE-2022-44733Acronis Cyber Protect Home Office improper privilege management7.3CNA v3.00.2%2022-11-07Fix
CVE-2022-44732Acronis Cyber Protect Home Office improper privilege management7.3CNA v3.00.2%2022-11-07Fix
CVE-2022-44054Democritus D8s-xml unrestricted file upload9.8v3.11.0%2022-11-07Fix
CVE-2022-44053Democritus D8s-networking unrestricted file upload9.8v3.11.0%2022-11-07
CVE-2022-44052Democritus D8s-dates unrestricted file upload9.8v3.11.0%2022-11-07Fix
CVE-2022-44051Democritus D8s-stats unrestricted file upload9.8v3.11.1%2022-11-07Fix
CVE-2022-44050Democritus D8s-networking unrestricted file upload9.8v3.11.0%2022-11-07
CVE-2022-44049Democritus D8s-python unrestricted file upload9.8v3.11.1%2022-11-07Fix
CVE-2022-44048Democritus D8s-urls unrestricted file upload9.8v3.11.1%2022-11-07
CVE-2022-43359Gifdec out-of-bounds read7.8v3.10.4%2022-11-07
CVE-2022-43352Sanitization Management System SQL injection7.2v3.10.8%2022-11-07
CVE-2022-43351Sanitization Management System arbitrary file deletion6.5v3.10.8%2022-11-07
CVE-2022-43350Sanitization Management System SQL injection7.2v3.10.8%2022-11-07
CVE-2022-43319Simple E-Learning System component vcs/downloadFiles.php?download= information disclosure7.5v3.10.7%2022-11-07
CVE-2022-43318oretnom23 Human Resource Management System SQL injection8.8v3.10.8%2022-11-07
CVE-2022-43317oretnom23 Human Resource Management System /hrm/index.php?msg cross-site scripting6.1v3.10.5%2022-11-07
CVE-2022-43306Democritus D8s-timer unrestricted file upload8.8v3.11.0%2022-11-07Fix
CVE-2022-43305Democritus D8s-python unrestricted file upload9.8v3.11.1%2022-11-07Fix
CVE-2022-43304Democritus D8s-timer unrestricted file upload9.8v3.11.1%2022-11-07Fix
CVE-2022-43303Democritus D8s-strings unrestricted file upload9.8v3.11.1%2022-11-07Fix
CVE-2022-43052Online Diagnostic Lab Management System SQL injection7.2v3.10.7%2022-11-07
CVE-2022-43051Online Diagnostic Lab Management System SQL injection7.2v3.10.7%2022-11-07
CVE-2022-43050Online Tours And Travels Management System unrestricted file upload7.2v3.11.0%2022-11-07
CVE-2022-43049Canteen Management System SQL injection7.2v3.10.7%2022-11-07
CVE-2022-43046oretnom23 Food Ordering Management System cross-site scripting4.8v3.10.5%2022-11-07
CVE-2022-42990oretnom23 Food Ordering Management System SQL injection7.2v3.10.8%2022-11-07
CVE-2022-42956Passwork cleartext storage of sensitive information7.5v3.10.4%2022-11-07Fix
CVE-2022-42955Passwork cleartext storage of sensitive information7.5v3.10.4%2022-11-07Fix
CVE-2022-42920Apache Commons BCEL allows producing arbitrary bytecode via out-of-bounds writing9.8v3.12.8%2022-11-07Fix
CVE-2022-42919Python deserialization of untrusted data7.8v3.10.7%2022-11-07Fix
CVE-2022-42905wolfSSL out-of-bounds read9.1v3.12.0%2022-11-07Fix
CVE-2022-38164F-Secure SAFE authentication bypass by spoofing6.5v3.10.5%2022-11-07
CVE-2022-38163F-Secure SAFE UI misrepresentation3.5v3.10.6%2022-11-07Fix
CVE-2022-37866Apache Ivy allows path traversal in the presence of a malicious repository7.5v3.11.6%2022-11-07Fix
CVE-2022-37865Apache Ivy allows creating/overwriting any file on the system9.1v3.11.8%2022-11-07Fix
CVE-2022-37710Pattersondental Eaglesoft hard-coded credentials7.8v3.10.1%2022-11-07
CVE-2022-3878Maxon ERP browse_data SQL injection9.8v3.10.7%2022-11-07
CVE-2022-3873Cross-site scripting (XSS) DOM in jgraph/drawio6.1v3.10.6%2022-11-07Fix
CVE-2022-3872QEMU off-by-one error8.6NVD v3.10.9%2022-11-07Fix
CVE-2022-3558Import and export users and customers WordPress plugin Subscriber+ CSV injection8.0NVD v3.11.1%2022-11-07Fix
CVE-2022-3537Role Based Pricing for WooCommerce WordPress plugin Subscriber+ arbitrary file upload8.8NVD v3.10.5%2022-11-07Fix
CVE-2022-3536Role Based Pricing for WooCommerce WordPress plugin Subscriber+ PHAR deserialization8.8NVD v3.10.6%2022-11-07Fix
CVE-2022-3494Really Simple Plugins Complianz translation import SQL injection8.8NVD v3.11.3%2022-11-07Fix
CVE-2022-3489Weberge WP Hide missing authorization5.3NVD v3.10.4%2022-11-07
CVE-2022-3481WooCommerce Dropshipping WordPress plugin unauthenticated SQLi9.8NVD v3.13.9%2022-11-07NucleiFix
CVE-2022-3463Fluent Forms Contact Form CSV export CSV injection9.8NVD v3.11.3%2022-11-07Fix
CVE-2022-3462Highlight Focus WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.6%2022-11-07
CVE-2022-3451Product Stock Manager WordPress plugin Subscriber+ Unauthorised AJAX Calls4.3NVD v3.10.3%2022-11-07Fix
CVE-2022-3418WP All Import WordPress plugin Admin+ arbitrary file upload to RCE7.2NVD v3.11.2%2022-11-07Fix
CVE-2022-2711WP All Import WordPress plugin Admin+ directory traversal via file upload7.2NVD v3.13.5%2022-11-07Fix
CVE-2022-2387Easy Digital Downloads WordPress plugin arbitrary post deletion via CSRF4.3NVD v3.10.3%2022-11-07Fix
CVE-2022-2188DXL Broker privilege escalation6.5CNA v3.10.2%2022-11-07Fix
CVE-2022-44544Mahara execution with unnecessary privileges9.8v3.10.8%2022-11-06Fix
CVE-2022-42707Mahara improper access control7.5v3.10.6%2022-11-06Fix
CVE-2022-40284Tuxera NTFS-3G buffer overflow7.8v3.10.4%2022-11-06Fix
CVE-2022-3869Code injection in froxlor/froxlor6.1v3.11.3%2022-11-05NucleiFix
CVE-2022-3868SourceCodester Sanitization Management System SQL injection9.8v3.10.5%2022-11-05
CVE-2022-44724Stiltsoft Handy Macros For Confluence cross-site scripting5.4NVD v3.10.7%2022-11-04Fix
CVE-2022-43945Linux kernel incorrect buffer size calculation7.5NVD v3.122.4%2022-11-04Fix
CVE-2022-43572Indexing blockage via malformed data sent through S2S or HEC protocols in Splunk Enterprise6.5NVD v3.10.8%2022-11-04Fix
CVE-2022-43570XML external entity injection through a custom view in Splunk Enterprise6.5NVD v3.10.7%2022-11-04Fix
CVE-2022-43569Persistent cross-site scripting via a Data Model object name in Splunk Enterprise5.4NVD v3.10.7%2022-11-04Fix
CVE-2022-43568Reflected cross-site scripting via the radio template in Splunk Enterprise6.1NVD v3.142.8%2022-11-04Fix
CVE-2022-43567Remote code execution via the Splunk Secure Gateway application Mobile Alerts feature8.8v3.11.2%2022-11-04Fix
CVE-2022-43566Risky command safeguards bypass via Search ID query in Analytics Workspace in Splunk Enterprise8.0v3.10.8%2022-11-04Fix
CVE-2022-43565Risky command safeguards bypass via ‘tstats command JSON in Splunk Enterprise8.8v3.10.6%2022-11-04Fix
CVE-2022-43564Denial of service in Splunk Enterprise through search macros6.5v3.10.8%2022-11-04Fix
CVE-2022-43563Risky command safeguards bypass via rex search command field names in Splunk Enterprise8.8v3.10.6%2022-11-04Fix
CVE-2022-43562Host header injection in Splunk Enterprise5.4v3.10.4%2022-11-04Fix
CVE-2022-41671Schneider Electric EcoStruxure Operator Terminal Expert SQL injection7.0CNA v3.10.3%2022-11-04Fix
CVE-2022-41670Schneider Electric EcoStruxure Operator Terminal Expert path traversal7.0CNA v3.10.2%2022-11-04Fix
CVE-2022-41669Schneider Electric EcoStruxure Operator Terminal Expert improper signature verification7.0CNA v3.10.1%2022-11-04Fix
CVE-2022-41668Schneider Electric EcoStruxure Operator Terminal Expert incorrect type conversion7.0CNA v3.10.2%2022-11-04Fix
CVE-2022-41667Schneider Electric EcoStruxure Operator Terminal Expert path traversal7.0CNA v3.10.2%2022-11-04Fix
CVE-2022-41666Schneider Electric EcoStruxure Operator Terminal Expert improper signature verification7.0CNA v3.10.1%2022-11-04Fix
CVE-2022-40263BD Totalys MultiProcessor hard-coded credentials6.6CNA v3.10.2%2022-11-04Fix
CVE-2022-39387XWiki OIDC Authenticator vulnerable to OpenID login bypass due to improper authentication9.1CNA v3.11.0%2022-11-04Fix
CVE-2022-39384OpenZeppelin Contracts initializer reentrancy may lead to double initialization5.6CNA v3.10.5%2022-11-04Fix
CVE-2022-39344Azure RTOS USBX vulnerable to buffer overflow9.8CNA v3.12.1%2022-11-04Fix
CVE-2022-38660HCL XPages applications are susceptible to cross-site request forgery (CSRF)8.3CNA v3.10.3%2022-11-04Fix
CVE-2022-38654HCL Domino is susceptible to an information disclosure5.5CNA v3.10.2%2022-11-04Fix
CVE-2022-38582Watchdog Anti-Virus out-of-bounds write6.5v3.10.7%2022-11-04
CVE-2022-33684Apache Pulsar OAuth client improper certificate validation8.1v3.10.7%2022-11-04Fix
CVE-2022-31691Spring by VMware code injection9.8NVD v3.12.7%2022-11-04Fix
CVE-2022-27894The Foundry Blobster Service was found to have a cross-site scripting (XSS)4.8CNA v3.10.4%2022-11-04Fix
CVE-2022-27893Palantir Foundry Magritte osisoft-pi-web-connector plugin information disclosure4.2CNA v3.10.2%2022-11-04Fix
CVE-2022-20969Cisco Umbrella Dashboard cross-site scripting4.8CNA v3.10.5%2022-11-04Fix
CVE-2022-20963Cisco Identity Services Engine Software cross-site scripting5.4CNA v3.10.5%2022-11-04Fix
CVE-2022-20962Cisco Identity Services Engine Software improper input validation3.8CNA v3.11.0%2022-11-04Fix
CVE-2022-20961Cisco Identity Services Engine Software cross-site request forgery8.8CNA v3.10.4%2022-11-04Fix
CVE-2022-20960Cisco Secure Email denial of service7.5CNA v3.10.8%2022-11-04Fix
CVE-2022-20958Cisco BroadWorks absolute path traversal8.3CNA v3.11.0%2022-11-04Fix
CVE-2022-20956Cisco Identity Services Engine Software incorrect use of privileged APIs7.1CNA v3.11.4%2022-11-04Fix
CVE-2022-20951Cisco BroadWorks server-side request forgery7.7CNA v3.12.0%2022-11-04Fix
CVE-2022-20942Cisco Secure Web Appliance personal information exposure6.5CNA v3.11.0%2022-11-04Fix
CVE-2022-20937Cisco Identity Services Engine RADIUS request monitoring vulnerability5.3CNA v3.10.9%2022-11-04Fix
CVE-2022-20868Cisco Secure Web Appliance hard-coded cryptographic key4.7CNA v3.10.7%2022-11-04Fix
CVE-2022-20867Cisco Secure Email SQL injection5.4CNA v3.10.8%2022-11-04Fix
CVE-2022-20772Cisco Secure Email HTTP response splitting4.7CNA v3.10.6%2022-11-04Fix
CVE-2022-3721Code injection in froxlor/froxlor4.6NVD v3.10.8%2022-11-04Fix
CVE-2022-3340Trellix IPS Manager vulnerable to XXE5.9CNA v3.10.6%2022-11-04Fix
CVE-2022-3023TiDB vulnerable to use of externally-controlled format string9.8v3.10.6%2022-11-04Fix
CVE-2022-44646JetBrains TeamCity user settings audit log vulnerability2.2CNA v3.10.4%2022-11-03Fix
CVE-2022-44638pixman integer overflow8.8v3.11.5%2022-11-03Fix
CVE-2022-446284ECPS Web Forms WordPress plugin Auth. stored cross-site scripting (XSS)4.8v3.10.4%2022-11-03Fix
CVE-2022-44627Simple SEO WordPress plugin cross-site request forgery (CSRF)5.4v3.10.3%2022-11-03Fix
CVE-2022-44624JetBrains TeamCity sensitive information in log files6.5CNA v3.10.6%2022-11-03Fix
CVE-2022-44623JetBrains TeamCity sensitive information in an accessible file6.5CNA v3.10.6%2022-11-03Fix
CVE-2022-44622JetBrains TeamCity improper access control2.7CNA v3.10.5%2022-11-03Fix
CVE-2022-43574IBM Robotic Process Automation incorrect default permissions7.5v3.10.5%2022-11-03Fix
CVE-2022-43571Remote code execution through dashboard PDF generation component in Splunk Enterprise8.8v3.113.8%2022-11-03MetasploitExploit codeFix
CVE-2022-43561Persistent cross-site scripting in Save Table dialog in Splunk Enterprise4.8v3.10.6%2022-11-03Fix
CVE-2022-43495OpenHarmony distributed hardware device manager null pointer dereference6.5CNA v3.10.7%2022-11-03Fix
CVE-2022-43451OpenHarmony multiple path traversal in appspawn and nwebspawn services8.4CNA v3.10.2%2022-11-03Fix
CVE-2022-43449OpenHarmony arbitrary file read via download_server6.2CNA v3.10.2%2022-11-03Fix
CVE-2022-43372emlog cross-site scripting4.8v3.10.4%2022-11-03
CVE-2022-43109D-Link DIR-823G command injection9.8v3.13.8%2022-11-03
CVE-2022-43108Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43107Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43106Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43105Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43104Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43103Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43102Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43101Tenda AC23 out-of-bounds write9.8v3.10.9%2022-11-03
CVE-2022-43063Online Diagnostic Lab Management System SQL injection7.2v3.10.7%2022-11-03
CVE-2022-43062Online Diagnostic Lab Management System SQL injection7.2v3.10.7%2022-11-03
CVE-2022-43061Online Tours and Travels Management System travellers.php unrestricted file upload7.2v3.11.0%2022-11-03
CVE-2022-42753SalonERP cross-site scripting6.1v3.10.4%2022-11-03
CVE-2022-42751CandidATS cross-site request forgery8.8v3.10.4%2022-11-03
CVE-2022-42750CandidATS cross-site scripting8.8v3.11.0%2022-11-03
CVE-2022-42749CandidATS cross-site scripting6.1v3.11.1%2022-11-03Nuclei
CVE-2022-42748CandidATS cross-site scripting6.1v3.11.1%2022-11-03Nuclei
CVE-2022-42747CandidATS cross-site scripting6.1v3.11.1%2022-11-03Nuclei
CVE-2022-42746CandidATS cross-site scripting6.1v3.11.1%2022-11-03Nuclei
CVE-2022-42745CandidATS XML external entity injection7.5v3.10.8%2022-11-03
CVE-2022-42744CandidATS SQL injection9.8v3.11.2%2022-11-03
CVE-2022-42743deep-parse-json prototype pollution5.3v3.10.6%2022-11-03
CVE-2022-42442IBM Robotic Process Automation for Cloud Pak information disclosure3.3v3.10.2%2022-11-03Fix
CVE-2022-41714fastest-json-copy prototype pollution5.3v3.10.6%2022-11-03
CVE-2022-41713deep-object-diff prototype pollution5.3v3.10.6%2022-11-03Fix
CVE-2022-41710Markdownify has files or directories accessible to external parties5.5v3.10.4%2022-11-03
CVE-2022-41435openwrt luci cross-site scripting5.4v3.10.5%2022-11-03
CVE-2022-40747IBM InfoSphere Information Server XML external entity injection9.1v3.11.0%2022-11-03Fix
CVE-2022-40276Zettlr improper input validation5.5v3.10.4%2022-11-03
CVE-2022-40235IBM InfoSphere Information Server improper input validation6.5v3.10.6%2022-11-03Fix
CVE-2022-40230IBM MQ Appliance insufficient session expiration6.5v3.10.4%2022-11-03Fix
CVE-2022-40131Page View Count WordPress plugin cross-site request forgery (CSRF)4.3v3.10.3%2022-11-03Fix
CVE-2022-39382NODE_ENV in Keystone defaults to development with esbuild9.8CNA v3.11.6%2022-11-03Fix
CVE-2022-39376Improper input validation on emails links in GLPI2.6CNA v3.10.5%2022-11-03Fix
CVE-2022-39375Cross-site scripting (XSS) through public RSS feed in GLPI4.5CNA v3.10.5%2022-11-03Fix
CVE-2022-39373Stored cross-site scripting (XSS) in entity name in GLPI4.9CNA v3.10.5%2022-11-03Fix
CVE-2022-39372Stored cross-site scripting (XSS) in user information in GLPI3.5CNA v3.10.4%2022-11-03Fix
CVE-2022-39371Stored cross-site scripting (XSS) through asset inventory in GLPI7.5CNA v3.10.5%2022-11-03Fix
CVE-2022-39370Improper access to debug panel in GLPI4.3CNA v3.10.5%2022-11-03Fix
CVE-2022-39323SQL injection on REST API in GLPI7.4CNA v3.136.8%2022-11-03Fix
CVE-2022-39277Cross-site scripting (XSS) in external links in GLPI4.5CNA v3.10.6%2022-11-03Fix
CVE-2022-39276glpi blind server-side request forgery (SSRF) in RSS feeds and planning3.5CNA v3.10.6%2022-11-03Fix
CVE-2022-39262Stored cross-site scripting (XSS) on login page in GLPI5.2CNA v3.10.7%2022-11-03Fix
CVE-2022-39234User session persists even after permanently deleting account in GLPI4.7CNA v3.10.4%2022-11-03Fix
CVE-2022-38712IBM WebSphere Application Server authentication bypass by spoofing5.9v3.10.5%2022-11-03Fix
CVE-2022-38710IBM Robotic Process Automation information disclosure5.3v3.10.3%2022-11-03Fix
CVE-2022-38168Avaya Scopia Pathfinder 10 Pts User Authentication missing authorization9.1v3.11.1%2022-11-03
CVE-2022-36428Rock Convert WordPress plugin Auth. cross-site scripting (XSS)4.8v3.10.4%2022-11-03Fix
CVE-2022-36404Simple SEO WordPress plugin broken access control5.4v3.10.2%2022-11-03Fix
CVE-2022-35717IBM InfoSphere Information Server OS command injection7.8v3.10.6%2022-11-03Fix
CVE-2022-35642IBM InfoSphere Information Server OS command injection5.4v3.10.4%2022-11-03Fix
CVE-2022-35279IBM Business Automation Workflow cleartext storage of sensitive information4.3v3.10.3%2022-11-03Fix
CVE-2022-34339IBM Cognos Analytics cleartext storage of sensitive information6.5v3.10.4%2022-11-03Fix
CVE-2022-32287Apache UIMA has a path traversal vulnerability when extracting (PEAR) archives7.5v3.11.6%2022-11-03Exploit codeFix
CVE-2022-30615IBM InfoSphere Information Server cross-site scripting5.4v3.10.4%2022-11-03Fix
CVE-2022-30608IBM InfoSphere Information Server cross-site request forgery8.8v3.10.3%2022-11-03Fix
CVE-2022-25952Content Egg WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2022-11-03Fix
CVE-2022-22442IBM InfoSphere Information Server privilege escalation6.5v3.10.5%2022-11-03Fix
CVE-2022-22425IBM InfoSphere Information Server CSV injection9.8v3.11.1%2022-11-03Fix
CVE-2022-3852VR Calendar WordPress plugin cross-site request forgery6.5NVD v3.10.5%2022-11-03Fix
CVE-2022-3776Restaurant Menu Food Ordering System Table Reservation WordPress plugin cross-site request forgery8.8v3.10.5%2022-11-03Fix
CVE-2022-3675Fedora CoreOS improper input validation5.5NVD v3.10.2%2022-11-03Fix
CVE-2022-3258HYPR Workforce Access incorrect permission assignment3.7CNA v3.10.3%2022-11-03Fix
CVE-2022-2696Restaurant Menu WordPress plugin authorization bypass6.5v3.10.6%2022-11-03Fix
CVE-2022-44586AM-HiLi WordPress plugin Auth. stored cross-site scripting (XSS)4.8v3.10.4%2022-11-02
CVE-2022-44576AgentEasy Properties WordPress plugin Auth. stored cross-site scripting (XSS)4.8v3.10.4%2022-11-02
CVE-2022-43995sudo out-of-bounds read7.1v3.10.3%2022-11-02Fix
CVE-2022-43985Apache Airflow has an open redirect6.1v3.11.5%2022-11-02Fix
CVE-2022-43982Apache Airflow allows reflected XSS via Origin Query argument in URL6.1v3.11.5%2022-11-02Fix
CVE-2022-43670XSS in Sling CMS Reference App Taxonomy Path5.4v3.11.4%2022-11-02Fix
CVE-2022-43255GPAC ODF IOD parser memory leak5.5v3.10.3%2022-11-02Fix
CVE-2022-43254GPAC list utility memory leak5.5v3.10.3%2022-11-02Fix
CVE-2022-43253struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43252struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43250struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43249struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43248struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43245struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43244struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43243struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43242struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43241struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43240struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43239struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43238struktur libde265 crash6.5v3.10.9%2022-11-02Fix
CVE-2022-43237struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43236struktur libde265 out-of-bounds write6.5v3.10.9%2022-11-02Fix
CVE-2022-43235struktur libde265 out-of-bounds write6.5v3.10.8%2022-11-02Fix
CVE-2022-43227Online Diagnostic Lab Management System SQL injection7.2v3.10.7%2022-11-02
CVE-2022-43226Online Diagnostic Lab Management System SQL injection8.8v3.10.8%2022-11-02
CVE-2022-43068Online Diagnostic Lab Management System SQL injection7.2v3.10.7%2022-11-02
CVE-2022-43066Online Diagnostic Lab Management System SQL injection7.2v3.10.8%2022-11-02
CVE-2022-42473Fortinet FortiSOAR missing authentication5.3CNA v3.10.2%2022-11-02Fix
CVE-2022-41716Unsanitized NUL in environment variables on Windows in syscall and os/exec7.5v3.10.8%2022-11-02Fix
CVE-2022-41551Garage Management System SQL injection7.2v3.10.8%2022-11-02
CVE-2022-40840Ndk-design Ndkadvancedcustomizationfields cross-site scripting6.1v3.10.5%2022-11-02
CVE-2022-39950Fortinet FortiAnalyzer, FortiManager cross-site scripting8.0CNA v3.10.7%2022-11-02Fix
CVE-2022-39949Fortinet FortiEDR improper resource control4.4CNA v3.10.2%2022-11-02Fix
CVE-2022-39945Fortinet FortiMail insecure direct object reference5.4CNA v3.10.4%2022-11-02Fix
CVE-2022-39381julianhille MuhammaraJS unchecked return value to null pointer dereference in PDFDocumentHandler.cpp7.5CNA v3.10.8%2022-11-02Fix
CVE-2022-39379Fluentd vulnerable to remote code execution due to insecure deserialization3.1CNA v3.145.0%2022-11-02Fix
CVE-2022-39378discourse displaying user badges can leak topic titles to users that have no access to the topic5.3CNA v3.10.5%2022-11-02Fix
CVE-2022-39356Discourse user account takeover via email and invite link8.9CNA v3.10.6%2022-11-02Fix
CVE-2022-39353xmldom allows multiple root nodes in a DOM9.4CNA v3.11.3%2022-11-02Fix
CVE-2022-39241discourse possible server-side request forgery (SSRF) in webhooks7.6CNA v3.10.6%2022-11-02Fix
CVE-2022-38381Fortinet FortiADC SQL injection5.3CNA v3.10.7%2022-11-02Fix
CVE-2022-38380Fortinet FortiOS improper access control4.3CNA v3.123.0%2022-11-02Fix
CVE-2022-38374Fortinet FortiADC cross-site scripting8.8CNA v3.11.9%2022-11-02Exploit codeFix
CVE-2022-38373Fortinet FortiDeceptor cross-site scripting8.0CNA v3.10.5%2022-11-02Fix
CVE-2022-38372Fortinet FortiTester hidden functionality6.7CNA v3.10.2%2022-11-02Fix
CVE-2022-35851Fortinet FortiADC cross-site scripting8.0CNA v3.10.5%2022-11-02Fix
CVE-2022-35842Fortinet FortiOS information disclosure3.7CNA v3.10.7%2022-11-02Fix
CVE-2022-33878Fortinet FortiClientMac information disclosure2.2CNA v3.10.1%2022-11-02Fix
CVE-2022-33870Fortinet FortiTester OS command injection7.8CNA v3.10.4%2022-11-02Fix
CVE-2022-30307Fortinet FortiOS man-in-the-middle3.9CNA v3.10.5%2022-11-02Fix
CVE-2022-26122Fortinet AV Engine insufficient verification of data authenticity4.7CNA v3.10.5%2022-11-02Fix
CVE-2022-26119Fortinet FortiSIEM A improper authentication7.8CNA v3.10.2%2022-11-02Fix
CVE-2022-24936Gecko Bootloader GBL parser vulnerability8.3CNA v3.10.8%2022-11-02Fix
CVE-2022-3845phpipam Import Preview import-load-data.php cross-site scripting6.1v3.10.5%2022-11-02Fix
CVE-2022-3844Webmin index.cgi cross-site scripting6.1v3.10.6%2022-11-02Fix
CVE-2022-3827Centreon Contact Groups form formContactGroup.php SQL injection9.8v3.10.8%2022-11-02Fix
CVE-2022-3826Huaxia ERP Retail Management list information disclosure6.5v3.10.6%2022-11-02
CVE-2022-3825Huaxia ERP user management SQL injection6.5v3.10.6%2022-11-02
CVE-2022-3810Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service6.5v3.10.9%2022-11-02
CVE-2022-3809Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service6.5v3.10.8%2022-11-02
CVE-2022-3575Frauscher FDS102 diagnostic system configuration upload function vulnerability9.8CNA v3.10.8%2022-11-02Fix
CVE-2022-3181Trihedral VTScada An improper input validation7.5v3.10.7%2022-11-02Fix
CVE-2022-2904GitLab cross-site scripting7.3CNA v3.10.7%2022-11-02Fix
CVE-2022-44542Lesspipe deserialization of untrusted data9.8v3.11.2%2022-11-01Fix
CVE-2022-43990SICK SIM1012 missing authentication7.3v3.10.9%2022-11-01Fix
CVE-2022-43989SICK SIM2x00 (ARM) missing authentication7.3v3.10.9%2022-11-01Fix
CVE-2022-43362SLIMS Senayan Library Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43361SLIMS Senayan Library Management System cross-site scripting4.8v3.10.4%2022-11-01
CVE-2022-43355Sanitization Management System SQL injection7.2v3.10.9%2022-11-01
CVE-2022-43354Sanitization Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43353Sanitization Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43331Canteen Management System SQL injection7.2v3.10.6%2022-11-01
CVE-2022-43330Canteen Management System SQL injection7.2v3.10.6%2022-11-01
CVE-2022-43329Canteen Management System SQL injection7.2v3.10.6%2022-11-01
CVE-2022-43328Canteen Management System SQL injection7.2v3.10.6%2022-11-01
CVE-2022-43223Open5GS NGAP handler memory leak7.5v3.10.9%2022-11-01
CVE-2022-43222Open5GS SMF PFCP path handler memory leak7.5v3.10.9%2022-11-01
CVE-2022-43221Open5GS UPF PFCP path handler memory leak7.5v3.10.9%2022-11-01
CVE-2022-43127Online Diagnostic Lab Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43126Online Diagnostic Lab Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43125Online Diagnostic Lab Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43124Online Diagnostic Lab Management System SQL injection7.2v3.10.8%2022-11-01
CVE-2022-43086CodeAstro Restaurant POS System SQL injection4.9v3.10.8%2022-11-01
CVE-2022-43085CodeAstro Restaurant POS System add_product.php arbitrary file upload7.2v3.11.1%2022-11-01
CVE-2022-43084Vehicle Booking System admin-add-vehicle.php cross-site scripting4.8v3.10.5%2022-11-01
CVE-2022-43083Vehicle Booking System admin-add-vehicle.php arbitrary file upload7.2v3.11.1%2022-11-01
CVE-2022-43082Fast Food Ordering System /fastfood/purchase.php cross-site scripting6.1v3.10.5%2022-11-01
CVE-2022-43081Fast Food Ordering System SQL injection7.5v3.10.8%2022-11-01
CVE-2022-43079Train Scheduler App /admin/add-fee.php cross-site scripting6.1v3.10.5%2022-11-01
CVE-2022-43078Web-Based Student Clearance System /admin/add-fee.php cross-site scripting4.8v3.10.5%2022-11-01
CVE-2022-43076Web-Based Student Clearance System /admin/edit-admin.php cross-site scripting4.8v3.10.5%2022-11-01
CVE-2022-42832Apple macOS race condition6.4v3.10.2%2022-11-01Fix
CVE-2022-42831Apple macOS race condition6.4v3.10.2%2022-11-01Fix
CVE-2022-42830Apple macOS out-of-bounds write6.7v3.10.3%2022-11-01Fix
CVE-2022-42829Apple macOS use-after-free6.7v3.10.3%2022-11-01Fix
CVE-2022-42827Apple iOS and iPadOS out-of-bounds write7.8v3.11.0%2022-11-01KEVFix
CVE-2022-42825Apple macOS incorrect privilege assignment5.5v3.10.3%2022-11-01Fix
CVE-2022-42824Apple macOS logic flaw5.5v3.10.3%2022-11-01Fix
CVE-2022-42823Apple macOS type confusion8.8v3.11.5%2022-11-01Fix
CVE-2022-42820Apple macOS out-of-bounds write7.8v3.10.3%2022-11-01Fix
CVE-2022-42819Apple macOS information disclosure5.5v3.10.3%2022-11-01Fix
CVE-2022-42818Apple macOS information disclosure5.9v3.10.7%2022-11-01Fix
CVE-2022-42817Apple watchOS logic flaw6.5v3.10.7%2022-11-01Fix
CVE-2022-42815Apple macOS information disclosure5.5v3.10.3%2022-11-01Fix
CVE-2022-42814Apple macOS logic flaw5.5v3.10.3%2022-11-01Fix
CVE-2022-42813Apple macOS handling of WKWebView improper certificate validation9.8v3.11.0%2022-11-01Fix
CVE-2022-42811Apple macOS improper access control5.5v3.10.3%2022-11-01Fix
CVE-2022-42810Apple macOS information disclosure5.5v3.10.3%2022-11-01Fix
CVE-2022-42809Apple macOS arbitrary code execution7.8v3.10.4%2022-11-01Fix
CVE-2022-42808Apple macOS out-of-bounds write9.8v3.12.2%2022-11-01Fix
CVE-2022-42806Apple macOS race condition7.0v3.10.2%2022-11-01Fix
CVE-2022-42803Apple macOS race condition7.0v3.10.2%2022-11-01Fix
CVE-2022-42801Apple macOS logic flaw7.8v3.10.5%2022-11-01Fix
CVE-2022-42800Apple macOS arbitrary code execution7.8v3.10.4%2022-11-01Fix
CVE-2022-42799Apple macOS clickjacking6.1v3.11.3%2022-11-01Fix
CVE-2022-42798Apple macOS memory corruption5.5v3.10.3%2022-11-01Fix
CVE-2022-42796Apple macOS improper privilege management7.8v3.10.3%2022-11-01Fix
CVE-2022-42795Apple macOS out-of-bounds write8.8v3.11.4%2022-11-01Fix
CVE-2022-42793Apple macOS improper signature verification5.5v3.10.2%2022-11-01Fix
CVE-2022-42791Apple macOS race condition7.0v3.10.2%2022-11-01Fix
CVE-2022-42790Apple macOS logic flaw5.5v3.10.3%2022-11-01Fix
CVE-2022-42789Apple macOS improper signature verification5.5v3.10.3%2022-11-01Fix
CVE-2022-42788Apple macOS incorrect authorization5.5v3.10.3%2022-11-01Fix
CVE-2022-42327Xen improper access control7.1v3.10.2%2022-11-01Fix
CVE-2022-42326Xen Xenstore memory leak5.5v3.10.3%2022-11-01Fix
CVE-2022-42325Xen Xenstore memory leak5.5v3.10.3%2022-11-01Fix
CVE-2022-42324Xen incorrect numeric conversion5.5v3.10.3%2022-11-01Fix
CVE-2022-42323Xen Xenstore memory leak5.5v3.10.3%2022-11-01Fix
CVE-2022-42322Xen Xenstore memory leak5.5v3.10.3%2022-11-01Fix
CVE-2022-42321Xen uncontrolled recursion6.5v3.10.3%2022-11-01Fix
CVE-2022-42320Xen incomplete cleanup7.0v3.10.3%2022-11-01Fix
CVE-2022-42319Xen Xenstore memory leak6.5v3.10.3%2022-11-01Fix
CVE-2022-42318Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42317Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42316Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42315Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42314Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42313Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42312Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42311Xen resource exhaustion6.5v3.10.3%2022-11-01Fix
CVE-2022-42310Xen incomplete cleanup5.5v3.10.3%2022-11-01Fix
CVE-2022-42309Xen release of an invalid pointer8.8v3.10.3%2022-11-01Fix
CVE-2022-42252Apache Tomcat request smuggling via malformed content-length7.5v3.11.5%2022-11-01Fix
CVE-2022-41553Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer information disclosure6.5CNA v3.10.2%2022-11-01Fix
CVE-2022-41552Hitachi Infrastructure Analytics Advisor server-side request forgery9.8CNA v3.10.7%2022-11-01Fix
CVE-2022-40839Ndk-design Ndkadvancedcustomizationfields height and width parameter SQL injection7.5v3.10.9%2022-11-01
CVE-2022-39369Service Hostname Discovery Exploitation in phpCAS8.0CNA v3.12.0%2022-11-01Fix
CVE-2022-34662Apache DolphinScheduler allows path traversal6.5v3.11.5%2022-11-01Exploit codeFix
CVE-2022-32947Apple macOS out-of-bounds write7.8v3.10.6%2022-11-01Exploit codeFix
CVE-2022-32946Apple iOS and iPadOS improper access control5.5v3.10.2%2022-11-01Fix
CVE-2022-32944Apple macOS out-of-bounds write7.8v3.10.3%2022-11-01Fix
CVE-2022-32941Apple macOS buffer overflow9.8v3.11.5%2022-11-01Fix
CVE-2022-32940Apple macOS arbitrary code execution7.8v3.10.3%2022-11-01Fix
CVE-2022-32939Apple iOS and iPadOS arbitrary code execution7.8v3.10.3%2022-11-01Fix
CVE-2022-32938Apple macOS path traversal5.3v3.10.8%2022-11-01Fix
CVE-2022-32936Apple macOS out-of-bounds read5.5v3.10.2%2022-11-01Fix
CVE-2022-32935Apple macOS improper authentication4.6v3.10.4%2022-11-01Fix
CVE-2022-32934Apple macOS code execution8.8v3.11.7%2022-11-01Fix
CVE-2022-32932Apple watchOS out-of-bounds write7.8v3.10.6%2022-11-01Exploit codeFix
CVE-2022-32929Apple iOS and iPadOS incorrect permission assignment5.5v3.10.3%2022-11-01Fix
CVE-2022-32928Apple macOS improper authentication5.3v3.10.7%2022-11-01Fix
CVE-2022-32927Apple iOS and iPadOS denial of service7.5v3.10.9%2022-11-01Fix
CVE-2022-32926Apple macOS arbitrary code execution6.7v3.10.3%2022-11-01Fix
CVE-2022-32925Apple iOS out-of-bounds write7.1v3.10.3%2022-11-01Fix
CVE-2022-32924Apple macOS code injection7.8v3.10.6%2022-11-01Fix
CVE-2022-32923Apple macOS cross-site scripting6.5v3.11.0%2022-11-01Fix
CVE-2022-32922Apple macOS use-after-free8.8v3.10.8%2022-11-01Fix
CVE-2022-32918Apple macOS improper access control5.5v3.10.2%2022-11-01Fix
CVE-2022-32915Apple macOS type confusion7.8v3.10.3%2022-11-01Fix
CVE-2022-32914Apple macOS use-after-free7.8v3.10.3%2022-11-01Fix
CVE-2022-32913Apple macOS information disclosure3.3v3.10.3%2022-11-01Fix
CVE-2022-32910Apple macOS logic flaw7.5v3.11.0%2022-11-01Fix
CVE-2022-32909Apple iOS sensitive information in cache5.5v3.10.2%2022-11-01Fix
CVE-2022-32907Apple iOS improper privilege management7.8v3.10.5%2022-11-01Fix
CVE-2022-32905Apple macOS link following7.8v3.10.3%2022-11-01Fix
CVE-2022-32904Apple macOS improper access control5.5v3.10.2%2022-11-01Fix
CVE-2022-32903Apple iOS use-after-free7.8v3.10.3%2022-11-01Fix
CVE-2022-32899Apple macOS arbitrary code execution7.8v3.10.4%2022-11-01Fix
CVE-2022-32898Apple macOS arbitrary code execution7.8v3.10.9%2022-11-01Exploit codeFix
CVE-2022-32895Apple macOS race condition4.7v3.10.8%2022-11-01Fix
CVE-2022-32892Apple Safari, iOS, iPadOS and macOS sandbox vulnerability8.6v3.10.6%2022-11-01Fix
CVE-2022-32890Apple macOS logic flaw8.6v3.10.6%2022-11-01Fix
CVE-2022-32889Apple iOS arbitrary code execution7.8v3.10.3%2022-11-01Fix
CVE-2022-32888Apple macOS out-of-bounds write8.8v3.11.3%2022-11-01Fix
CVE-2022-32887Apple iOS arbitrary code execution7.8v3.10.3%2022-11-01Fix
CVE-2022-32881Apple macOS logic flaw5.5v3.10.3%2022-11-01Fix
CVE-2022-32879Apple macOS logic flaw2.4v3.10.4%2022-11-01Fix
CVE-2022-32877Apple macOS information disclosure5.5v3.10.3%2022-11-01Fix
CVE-2022-32875Apple macOS logic flaw5.0v3.10.3%2022-11-01Fix
CVE-2022-32870Apple macOS logic flaw2.4v3.10.4%2022-11-01Fix
CVE-2022-32867Apple macOS insecure storage of sensitive information2.4v3.10.4%2022-11-01Fix
CVE-2022-32866Apple macOS out-of-bounds write7.8v3.10.3%2022-11-01Fix
CVE-2022-32865Apple macOS out-of-bounds write7.8v3.10.3%2022-11-01Fix
CVE-2022-32862Apple macOS information disclosure5.5v3.10.7%2022-11-01Exploit codeFix
CVE-2022-32859Apple iOS external control of critical state data5.3v3.10.6%2022-11-01Fix
CVE-2022-32858Apple macOS information disclosure5.5v3.10.3%2022-11-01Fix
CVE-2022-32835Apple iOS information disclosure3.3v3.10.3%2022-11-01Fix
CVE-2022-32827Apple macOS out-of-bounds write5.5v3.10.5%2022-11-01Fix
CVE-2022-32794Apple macOS improper privilege management7.8v3.10.2%2022-11-01Fix
CVE-2022-31777Apache Spark XSS vulnerability in log viewer UI Javascript5.4v3.11.6%2022-11-01Fix
CVE-2022-27586SICK SIM1004 missing authentication9.8v3.11.3%2022-11-01Fix
CVE-2022-27585SICK SIM1000 FX missing authentication9.8v3.11.3%2022-11-01Fix
CVE-2022-27584SICK SIM2000ST (PPC) missing authentication9.8v3.11.3%2022-11-01
CVE-2022-27582SICK SIM4000 (PPC) missing authentication9.8v3.11.3%2022-11-01
CVE-2022-26762Apple macOS out-of-bounds write7.8v3.10.4%2022-11-01Fix
CVE-2022-26730Apple macOS processing of ICC profiles memory corruption8.8v3.11.0%2022-11-01Fix
CVE-2022-26719Apple macOS out-of-bounds write8.8v3.11.0%2022-11-01Fix
CVE-2022-26717Apple macOS use-after-free8.8v3.11.6%2022-11-01Exploit codeFix
CVE-2022-26716Apple macOS out-of-bounds write8.8v3.10.9%2022-11-01Fix
CVE-2022-26710Apple macOS use-after-free8.8v3.10.9%2022-11-01Fix
CVE-2022-26709Apple macOS use-after-free8.8v3.10.9%2022-11-01Fix
CVE-2022-25892muhammara denial of service (DoS)7.5v3.11.1%2022-11-01Fix
CVE-2022-25885muhammara denial of service (DoS)7.5v3.11.2%2022-11-01Fix
CVE-2022-23738GitHub Enterprise Server cache key validation information disclosure5.7v3.10.7%2022-11-01Fix
CVE-2022-22677Apple macOS logic flaw4.3v3.10.7%2022-11-01Fix
CVE-2022-22658Apple iOS improper input validation6.5v3.10.9%2022-11-01Fix
CVE-2022-3817Axiomatic Bento4 mp4mux memory leak6.5v3.10.8%2022-11-01
CVE-2022-3816Axiomatic Bento4 mp4decrypt memory leak6.5v3.10.8%2022-11-01
CVE-2022-3815Axiomatic Bento4 mp4decrypt memory leak6.5v3.10.8%2022-11-01
CVE-2022-3814Axiomatic Bento4 mp4decrypt memory leak6.5v3.10.8%2022-11-01
CVE-2022-3813Axiomatic Bento4 mp4edit memory leak6.5v3.10.8%2022-11-01
CVE-2022-3812Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak6.5v3.10.8%2022-11-01
CVE-2022-3807Axiomatic Bento4 Incomplete Fix resource consumption6.5v3.11.1%2022-11-01
CVE-2022-3804eolinker apinto-dashboard login cross-site scripting6.1v3.10.6%2022-11-01
CVE-2022-3803eolinker apinto-dashboard cross-site scripting6.1v3.10.6%2022-11-01
CVE-2022-3802IBAX go-ibax rowsInfo SQL injection8.8v3.10.5%2022-11-01Fix
CVE-2022-3801IBAX go-ibax rowsInfo SQL injection8.8v3.130.1%2022-11-01Fix
CVE-2022-3800IBAX go-ibax rowsInfo SQL injection8.8v3.12.5%2022-11-01NucleiFix
CVE-2022-3799IBAX go-ibax tablesInfo SQL injection8.8v3.10.6%2022-11-01Fix
CVE-2022-3798IBAX go-ibax tablesInfo SQL injection8.8v3.10.5%2022-11-01Fix
CVE-2022-3797eolinker apinto-dashboard login page open redirect6.1v3.10.5%2022-11-01
CVE-2022-3789Tim Campus Confession Wall share.php SQL injection9.8v3.10.7%2022-11-01
CVE-2022-3786OpenSSL X.509 Email Address Variable Length buffer overflow7.5v3.192.5%2022-11-01SnortExploit codeFix
CVE-2022-3781Devolutions Remote Desktop Manager missing encryption6.5v3.10.5%2022-11-01Fix
CVE-2022-3780Devolutions Remote Desktop Manager improper access control7.5v3.10.6%2022-11-01Fix
CVE-2022-3723Google Chromium V8 type confusion8.8v3.17.9%2022-11-01KEVKCVFix
CVE-2022-3661Google Chrome extensions improper input validation4.3v3.10.5%2022-11-01Fix
CVE-2022-3660Google Chrome Full screen mode inappropriate implementation4.3v3.10.6%2022-11-01Fix
CVE-2022-3659Google Chrome Accessibility use-after-free8.8v3.10.6%2022-11-01Fix
CVE-2022-3658Google Chrome Feedback service on Chrome OS use-after-free8.8v3.10.5%2022-11-01Fix
CVE-2022-3657Google Chrome extensions use-after-free8.8v3.10.4%2022-11-01Fix
CVE-2022-3656Google Chrome File System improper input validation8.8v3.12.1%2022-11-01Exploit codeFix
CVE-2022-3655Google Chrome Media Galleries heap-based buffer overflow8.8v3.10.5%2022-11-01Fix
CVE-2022-3654Google Chrome Layout use-after-free8.8v3.123.8%2022-11-01Fix
CVE-2022-3653Google Chrome Vulkan heap-based buffer overflow8.8v3.10.7%2022-11-01Exploit codeFix
CVE-2022-3652Google Chrome V8 type confusion8.8v3.10.8%2022-11-01Fix
CVE-2022-3602OpenSSL X.509 Email Address 4-byte buffer overflow7.5NVD v3.190.8%2022-11-01Emerging ThreatsSnortExploit codeFix
CVE-2022-3444Google Chrome File System API improper input validation4.3v3.10.7%2022-11-01Fix
CVE-2022-3443Google Chrome File System API improper input validation4.3v3.10.8%2022-11-01Fix
CVE-2022-3373Google Chrome V8 out-of-bounds write8.8v3.10.9%2022-11-01Fix
CVE-2022-3370Google Chrome Custom Elements use-after-free8.8v3.10.9%2022-11-01Fix
CVE-2022-3369Improper handling of registry symbolic links in Bitdefender Engines8.6CNA v3.10.2%2022-11-01Fix
CVE-2022-3318Google Chrome ChromeOS Notifications use-after-free4.3v3.10.5%2022-11-01Fix
CVE-2022-3317Google Chrome Intents security feature bypass4.3v3.10.6%2022-11-01Exploit codeFix
CVE-2022-3316Google Chrome Safe Browsing security feature bypass4.3v3.10.6%2022-11-01Fix
CVE-2022-3315Google Chrome Blink type confusion8.8v3.10.6%2022-11-01Fix
CVE-2022-3314Google Chrome logging use-after-free6.5v3.10.5%2022-11-01Fix
CVE-2022-3313Google Chrome full screen incorrect security UI6.5v3.10.7%2022-11-01Fix
CVE-2022-3312Google Chrome missing authentication4.6v3.10.2%2022-11-01Fix
CVE-2022-3311Google Chrome import use-after-free6.5v3.10.6%2022-11-01Fix
CVE-2022-3310Google Chrome custom tabs insufficient policy enforcement6.5v3.10.5%2022-11-01Fix
CVE-2022-3309Google Chrome assistant use-after-free6.5v3.10.6%2022-11-01Fix
CVE-2022-3308Google Chrome developer tools insufficient policy enforcement7.4v3.10.7%2022-11-01Fix
CVE-2022-3307Google Chrome media use-after-free8.8v3.10.7%2022-11-01Fix
CVE-2022-3306Google Chrome survey use-after-free8.8v3.10.7%2022-11-01Fix
CVE-2022-3305Google Chrome survey use-after-free8.8v3.10.6%2022-11-01Fix
CVE-2022-3304Google Chrome CSS use-after-free8.8v3.10.7%2022-11-01Fix
CVE-2022-3191Information exposure vulnerability in Hitachi Ops Center Analyzer6.6CNA v3.10.2%2022-11-01Fix
CVE-2022-2572Octopus Deploy Octopus Server improper authentication9.8v3.10.9%2022-11-01Fix