CVE-2022 records published in December 2022
This page lists the 2,200 CVE-2022 records published in December 2022, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists seven of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2022 list filters these records by severity or signal.
- Critical
- 30513.9% of these records
- Listed in CISA KEV
- 70.3% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 472.1% of these records
- Exploit code
- 552.5% of these records
- Actionable vendor fix
- 1,62673.9% of these records
Figures as of 2026-10-24 13:45 UTC. Records published in December 2022 have had from about 46 months to about 47 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-48195 | Mellium.im/Sasl authentication failure due to insufficient nonce randomness | 9.8v3.1 | 0.9% | 2022-12-31 | Fix |
| CVE-2022-4868 | Improper authorization in froxlor/froxlor | 4.3v3.1 | 0.6% | 2022-12-31 | Fix |
| CVE-2022-4867 | Cross-site request forgery (CSRF) in froxlor/froxlor | 4.3v3.1 | 0.3% | 2022-12-31 | Fix |
| CVE-2022-4866 | Cross-site scripting (XSS) Stored in usememos/memos | 9.0v3.1 | 1.0% | 2022-12-31 | Fix |
| CVE-2022-4865 | Cross-site scripting (XSS) Stored in usememos/memos | 9.0v3.1 | 1.0% | 2022-12-31 | Fix |
| CVE-2022-48196 | NETGEAR R6400v2 buffer overflow | 9.8v3.1 | 0.9% | 2022-12-30 | Fix |
| CVE-2022-48194 | TP-Link TL-WR902AC unrestricted file upload | 8.8v3.1 | 33.5% | 2022-12-30 | Exploit code |
| CVE-2022-47128 | Tenda A15 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-47127 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47126 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47125 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47124 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47123 | Tenda A15 out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-47122 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47121 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47120 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47119 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47118 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47117 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-47116 | Tenda A15 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-12-30 | |
| CVE-2022-47115 | Tenda A15 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46601 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-46600 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46599 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-46598 | TRENDnet TEW-755AP OS command injection | 9.8v3.1 | 2.3% | 2022-12-30 | |
| CVE-2022-46597 | TRENDnet TEW-755AP OS command injection | 9.8v3.1 | 2.3% | 2022-12-30 | |
| CVE-2022-46596 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46594 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46593 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46592 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46591 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46590 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-46589 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-46588 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46586 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-46585 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46584 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-30 | |
| CVE-2022-46583 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46582 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46581 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-46580 | TRENDnet TEW-755AP out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-30 | |
| CVE-2022-44621 | Apache Kylin: Command injection by Diagnosis controller | 9.8v3.1 | 3.0% | 2022-12-30 | Fix |
| CVE-2022-44137 | Sanitization Management System SQL injection | 7.2v3.1 | 0.8% | 2022-12-30 | |
| CVE-2022-43396 | Apache Kylin: Command injection by Useless configuration | 8.8v3.1 | 55.0% | 2022-12-30 | Fix |
| CVE-2022-42270 | NVIDIA Jetson AGX Xavier Series stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-42269 | NVIDIA Jetson AGX Xavier series information disclosure | 7.9CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-42267 | NVIDIA GPU Display Driver insufficient verification of data authenticity | 7.0CNA v3.1 | 0.1% | 2022-12-30 | Fix |
| CVE-2022-42266 | NVIDIA vGPU software (guest driver) information disclosure | 5.5CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-42265 | NVIDIA GPU Display Driver integer overflow | 5.3CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42264 | NVIDIA vGPU software (guest driver) out-of-range pointer offset | 7.1CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42263 | NVIDIA vGPU software (guest driver) integer overflow | 7.1CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42262 | NVIDIA vGPU software Virtual GPU Manager out-of-bounds write | 7.1CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-42261 | NVIDIA vGPU software Virtual GPU Manager buffer overflow | 7.8CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42260 | NVIDIA vGPU software (guest driver) improper preservation of permissions | 7.8CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-42259 | NVIDIA vGPU software (guest driver) integer overflow | 4.4CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42258 | NVIDIA vGPU software (guest driver) integer overflow | 5.3CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42257 | NVIDIA vGPU software (guest driver) integer overflow | 5.3CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42256 | NVIDIA vGPU software (guest driver) integer overflow | 5.3CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42255 | NVIDIA vGPU software (guest driver) out-of-bounds write | 5.3CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-42254 | NVIDIA vGPU software (guest driver) out-of-bounds read | 5.3CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34684 | NVIDIA vGPU software (guest driver) out-of-bounds read | 5.3CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34683 | NVIDIA vGPU software (guest driver) null pointer dereference | 5.5CNA v3.1 | 0.3% | 2022-12-30 | Exploit codeFix |
| CVE-2022-34682 | NVIDIA vGPU software (guest driver) null pointer dereference | 5.5CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34681 | NVIDIA vGPU software (guest driver) improper input validation | 5.5CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34680 | NVIDIA vGPU software (guest driver) numeric truncation | 5.5CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34679 | NVIDIA vGPU software (guest driver) null pointer dereference | 5.5CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34678 | NVIDIA vGPU software (guest driver) null pointer dereference | 6.5CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34677 | NVIDIA vGPU software (guest driver) out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34676 | NVIDIA vGPU software (guest driver) numeric truncation | 7.1CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34675 | NVIDIA Display Driver Virtual GPU Manager null pointer dereference | 5.5CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34674 | NVIDIA vGPU software (guest driver) undefined behavior | 6.8CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34673 | NVIDIA GPU Display Driver integer overflow | 4.4CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34672 | NVIDIA vGPU software (guest driver) privilege escalation | 7.8CNA v3.1 | 0.2% | 2022-12-30 | Fix |
| CVE-2022-34671 | NVIDIA GPU Display Driver out-of-bounds write | 8.5CNA v3.1 | 1.4% | 2022-12-30 | Fix |
| CVE-2022-34670 | NVIDIA vGPU software (guest driver) numeric truncation | 7.8CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-34669 | NVIDIA vGPU software (guest driver) external control of a file path | 8.8CNA v3.1 | 0.3% | 2022-12-30 | Fix |
| CVE-2022-4864 | Argument injection in froxlor/froxlor | 5.4v3.1 | 0.5% | 2022-12-30 | Fix |
| CVE-2022-4863 | Improper handling of insufficient permissions or privileges in usememos/memos | 6.5NVD v3.1 | 0.7% | 2022-12-30 | Fix |
| CVE-2022-4861 | M-Files Client incorrect implementation of authentication algorithm | 4.8CNA v3.1 | 0.5% | 2022-12-30 | Fix |
| CVE-2022-4860 | KBase Metrics methods_upload_user_stats.py upload_user_data SQL injection | 9.8v3.1 | 0.6% | 2022-12-30 | |
| CVE-2022-4859 | Joget User Profile Menu UserProfileMenu.java submitForm cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-30 | Fix |
| CVE-2022-4858 | M-Files Server insertion of sensitive information into log file | 4.4CNA v3.1 | 0.5% | 2022-12-30 | Fix |
| CVE-2022-4857 | Modbus Tools Modbus Poll mbp file mbpoll.exe buffer overflow | 7.8v3.1 | 0.7% | 2022-12-30 | |
| CVE-2022-4856 | Modbus Tools Modbus Slave mbs file mbslave.exe buffer overflow | 7.8v3.1 | 0.6% | 2022-12-30 | |
| CVE-2022-4855 | SourceCodester Lead Management System login.php SQL injection | 9.8v3.1 | 24.6% | 2022-12-30 | |
| CVE-2022-46181 | Gotify server XSS vulnerability in the application image file upload | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-46178 | metersphere path traversal In MeterSpere allows file upload to any path | 7.4CNA v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2022-38212 | Server side request forgery (SSRF) vulnerability in Portal for ArcGIS ( and only) | 7.5CNA v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2022-38211 | Server side request forgery (SSRF) vulnerability in Portal for ArcGIS (, and only) | 7.5CNA v3.1 | 0.9% | 2022-12-29 | Fix |
| CVE-2022-38210 | Esri ArcGIS Enterprise HTML injection in accountswitcher-callback.html (, and only) | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-38209 | Reflected XSS vulnerability in Portal for ArcGIS | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-38208 | Unvalidated redirect in Portal for ArcGIS | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-38207 | Reflected XSS vulnerability in Portal for ArcGIS ( and only) | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-38206 | Reflected XSS vulnerability in Portal for ArcGIS (, and only) | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-38205 | Portal for ArcGIS has a directory traversal vulnerability (, and only) | 8.6CNA v3.1 | 1.5% | 2022-12-29 | Fix |
| CVE-2022-38204 | Reflected XSS vulnerability in Portal for ArcGIS ( and only) | 6.1CNA v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-38203 | The allowedProxyHosts property is not fully honored in ArcGIS Enterprise ( and only) | 7.5CNA v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2022-36437 | Hazelcast-jet session fixation | 9.1v3.1 | 1.0% | 2022-12-29 | Fix |
| CVE-2022-30519 | Reprisesoftware Reprise License Manager cross-site scripting | 6.1v3.1 | 2.5% | 2022-12-29 | Exploit code |
| CVE-2022-4851 | Improper Handling of Values in usememos/memos | 5.3NVD v3.1 | 0.8% | 2022-12-29 | Fix |
| CVE-2022-4850 | Cross-site request forgery (CSRF) in usememos/memos | 6.5v3.1 | 0.3% | 2022-12-29 | Fix |
| CVE-2022-4849 | Cross-site request forgery (CSRF) in usememos/memos | 6.5NVD v3.1 | 0.3% | 2022-12-29 | Fix |
| CVE-2022-4848 | Improper verification of source of a communication channel in usememos/memos | 5.7NVD v3.1 | 0.5% | 2022-12-29 | Fix |
| CVE-2022-4847 | Incorrectly specified destination in a communication channel in usememos/memos | 6.5NVD v3.1 | 0.6% | 2022-12-29 | Fix |
| CVE-2022-4846 | Cross-site request forgery (CSRF) in usememos/memos | 6.5v3.1 | 0.3% | 2022-12-29 | Fix |
| CVE-2022-4845 | Cross-site request forgery (CSRF) in usememos/memos | 4.3v3.1 | 0.3% | 2022-12-29 | Fix |
| CVE-2022-4844 | Cross-site request forgery (CSRF) in usememos/memos | 8.8v3.1 | 0.3% | 2022-12-29 | Fix |
| CVE-2022-4843 | Null pointer dereference in radareorg/radare2 | 7.5v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2022-4841 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.6% | 2022-12-29 | Fix |
| CVE-2022-4840 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2022-4839 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.8% | 2022-12-29 | Fix |
| CVE-2022-4780 | Hard coded credentials in elvexys ISOS firmwares | 7.8v3.1 | 0.2% | 2022-12-29 | Fix |
| CVE-2022-4779 | Authentication bypass in elvexys StreamX | 9.8v3.1 | 1.2% | 2022-12-29 | Fix |
| CVE-2022-4778 | Path traversal in elvexys StreamX using StreamView HTML component with public web server feature | 6.5v3.1 | 0.7% | 2022-12-29 | Fix |
| CVE-2022-46740 | Huawei WS7100-20 Wi-Fi module of the HUAWEI denial of service | 6.5v3.1 | 0.3% | 2022-12-28 | Fix |
| CVE-2022-46179 | LiuOS vulnerable to authorization bypass through user-controlled key | 9.2CNA v3.1 | 0.3% | 2022-12-28 | |
| CVE-2022-46174 | Race condition during concurrent TLS mounts in efs-utils | 4.2CNA v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-46173 | Elrond go Processing: Fallback search of SCRs when not found in the main cache | 7.2CNA v3.1 | 0.7% | 2022-12-28 | Fix |
| CVE-2022-46172 | authentik allows existing authenticated users to create arbitrary accounts | 6.4CNA v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-45874 | Huawei Aslan-AL10 improper authorization | 5.5v3.1 | 0.1% | 2022-12-28 | Fix |
| CVE-2022-44564 | Huawei Aslan-AL10 path traversal | 7.8v3.1 | 0.2% | 2022-12-28 | Fix |
| CVE-2022-41967 | Improper restriction of XML external entity reference in Dragonfly | 7.0CNA v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-41966 | XStream denial of service via stack overflow | 8.2CNA v3.1 | 8.8% | 2022-12-28 | Exploit codeFix |
| CVE-2022-41579 | Huawei HOTA-Fara-B19 improper authentication | 6.5v3.1 | 0.3% | 2022-12-28 | Fix |
| CVE-2022-39012 | Huawei Aslan-AL10 improper input validation | 7.5v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-38202 | Bug-000152121 directory traversal vulnerability in ArcGIS Server | 7.5CNA v3.1 | 1.3% | 2022-12-28 | Fix |
| CVE-2022-23555 | authentik vulnerable to improper authentication via invitation URL token reuse | 9.4CNA v3.1 | 0.9% | 2022-12-28 | Fix |
| CVE-2022-23554 | Authentication bypass in Alpine | 5.4NVD v3.1 | 0.7% | 2022-12-28 | Fix |
| CVE-2022-23553 | URL access filters bypass in Alpine | 7.5NVD v3.1 | 0.8% | 2022-12-28 | Fix |
| CVE-2022-23544 | Server-side request forgery in Metersphere leads to cross-site scripting | 7.2CNA v3.1 | 1.6% | 2022-12-28 | NucleiFix |
| CVE-2022-4823 | InSTEDD Nuntium geopoll_controller.rb timing discrepancy | 5.9v3.1 | 0.6% | 2022-12-28 | |
| CVE-2022-4822 | FlatPress Setup main.lib.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-28 | |
| CVE-2022-4821 | FlatPress XML File Handler/MD file admin.uploader.php onupload cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-28 | |
| CVE-2022-4820 | FlatPress Admin Area admin.entry.list.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-28 | |
| CVE-2022-4819 | HotCRP cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-28 | |
| CVE-2022-4818 | Talend Open Studio for MDM SystemStorageWrapper.java XML external entity reference | 4.3v3.1 | 0.5% | 2022-12-28 | |
| CVE-2022-4817 | centic9 jgit-cookbook insecure temporary file | 7.8v3.1 | 0.5% | 2022-12-28 | |
| CVE-2022-4814 | Improper access control in usememos/memos | 4.3NVD v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-4813 | Insufficient granularity of access control in usememos/memos | 4.3NVD v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-4812 | Authorization bypass through user-controlled key in usememos/memos | 6.5NVD v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-4811 | Authorization bypass through user-controlled key in usememos/memos | 5.4NVD v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-4810 | Improper access control in usememos/memos | 4.3v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-4809 | Improper access control in usememos/memos | 8.8v3.1 | 0.9% | 2022-12-28 | Fix |
| CVE-2022-4808 | Improper privilege management in usememos/memos | 8.8v3.1 | 0.4% | 2022-12-28 | Fix |
| CVE-2022-4807 | Improper access control in usememos/memos | 4.3NVD v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-4806 | Authorization bypass through user-controlled key in usememos/memos | 5.3NVD v3.1 | 0.8% | 2022-12-28 | Fix |
| CVE-2022-4805 | Incorrect use of privileged apis in usememos/memos | 4.3NVD v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-4804 | Improper authorization in usememos/memos | 5.3NVD v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-4803 | Authorization bypass through user-controlled key in usememos/memos | 8.8v3.1 | 0.8% | 2022-12-28 | Fix |
| CVE-2022-4802 | Authorization bypass through user-controlled key in usememos/memos | 5.4NVD v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-4801 | Insufficient granularity of access control in usememos/memos | 5.3NVD v3.1 | 0.7% | 2022-12-28 | Fix |
| CVE-2022-4800 | Improper verification of source of a communication channel in usememos/memos | 6.5NVD v3.1 | 0.6% | 2022-12-28 | Fix |
| CVE-2022-4799 | Authorization bypass through user-controlled key in usememos/memos | 6.5NVD v3.1 | 0.8% | 2022-12-28 | Fix |
| CVE-2022-4798 | Authorization bypass through user-controlled key in usememos/memos | 5.3NVD v3.1 | 0.7% | 2022-12-28 | Fix |
| CVE-2022-4797 | Improper restriction of excessive authentication attempts in usememos/memos | 4.3NVD v3.1 | 0.7% | 2022-12-28 | Fix |
| CVE-2022-4796 | Incorrect use of privileged apis in usememos/memos | 8.1v3.1 | 0.8% | 2022-12-28 | Fix |
| CVE-2022-4773 | cloudsync LocalFilesystemConnector.java getItem path traversal | 3.3v3.1 | 0.4% | 2022-12-28 | |
| CVE-2022-3922 | Broken Link Checker WordPress plugin Admin+ cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-12-28 | Fix |
| CVE-2022-3347 | Incorrect validation of root DNSSEC public keys in github.com/peterzen/goresolver | 7.5v3.1 | 0.2% | 2022-12-28 | Fix |
| CVE-2022-3346 | Incorrect DNSSEC validation due to unchecked owner names in github.com/peterzen/goresolver | 6.5v3.1 | 0.2% | 2022-12-28 | Fix |
| CVE-2022-47968 | LinuxServer Heimdall Application Dashboard cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-27 | |
| CVE-2022-46764 | TrueConf Server web API SQL injection | 9.8v3.1 | 2.1% | 2022-12-27 | Fix |
| CVE-2022-46763 | TrueConf Server database stored function SQL injection | 8.8v3.1 | 1.0% | 2022-12-27 | Fix |
| CVE-2022-46442 | DedeCMS SQL injection | 9.8v3.1 | 0.6% | 2022-12-27 | |
| CVE-2022-45963 | H3C Secpath F100-c-g3 improper privilege management | 9.8v3.1 | 0.7% | 2022-12-27 | |
| CVE-2022-45778 | Hillstonenet Sc-6000-wv02 insecure permissions | 9.8v3.1 | 0.7% | 2022-12-27 | |
| CVE-2022-45434 | DSS Professional resource exhaustion | 5.9v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-45433 | DSS Professional missing authentication | 3.7v3.1 | 0.6% | 2022-12-27 | Fix |
| CVE-2022-45432 | DSS Professional missing authentication | 5.3v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-45431 | DSS Professional improper access control | 7.5v3.1 | 0.6% | 2022-12-27 | Fix |
| CVE-2022-45430 | DSS Professional improper access control | 3.7v3.1 | 0.4% | 2022-12-27 | Fix |
| CVE-2022-45429 | DSS Professional server-side request forgery | 7.5v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2022-45428 | DSS Professional information disclosure | 2.7v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-45427 | DSS Professional unrestricted file upload | 7.2v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-45426 | DSS Professional files accessible to external parties | 6.5v3.1 | 0.6% | 2022-12-27 | Fix |
| CVE-2022-45425 | DSS Professional hard-coded credentials | 7.5v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2022-45424 | DSS Professional missing authentication | 5.3v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-45423 | DSS Professional missing authentication | 7.5v3.1 | 0.6% | 2022-12-27 | Fix |
| CVE-2022-4772 | Widoco WidocoUtils.java unZipIt path traversal | 7.8v3.1 | 0.3% | 2022-12-27 | |
| CVE-2022-4768 | Dropbox merou SSH Public Key public_key.py add_public_key injection | 9.8v3.1 | 0.7% | 2022-12-27 | |
| CVE-2022-4767 | Denial of service in usememos/memos | 7.5v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-4766 | dolibarr_project_timesheet form cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-27 | Fix |
| CVE-2022-4755 | FlatPress Media Manager plugin panel.mediamanager.file.php main cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-27 | |
| CVE-2022-4748 | FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal | 9.8v3.1 | 0.9% | 2022-12-27 | |
| CVE-2022-4734 | Improper removal of sensitive information before storage or transfer in usememos/memos | 4.3NVD v3.1 | 0.8% | 2022-12-27 | Fix |
| CVE-2022-4733 | Cross-site scripting (XSS) Stored in openemr/openemr | 4.8v3.1 | 0.6% | 2022-12-27 | Fix |
| CVE-2022-4732 | Unrestricted upload of file with dangerous type in microweber/microweber | 7.2v3.1 | 38.2% | 2022-12-27 | Fix |
| CVE-2022-4730 | Graphite Web Absolute Time Range cross-site scripting | 5.4v3.1 | 0.8% | 2022-12-27 | Fix |
| CVE-2022-4729 | Graphite Web Template Name cross-site scripting | 5.4v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-4728 | Graphite Web Cookie cross-site scripting | 5.4v3.1 | 0.8% | 2022-12-27 | Fix |
| CVE-2022-4727 | OpenMRS Appointment Scheduling Module Notes AppointmentRequest.java getNotes cross-site scripting | 6.1v3.1 | 0.9% | 2022-12-27 | Fix |
| CVE-2022-4726 | SourceCodester Sanitization Management System Admin Login SQL injection | 9.8v3.1 | 0.4% | 2022-12-27 | |
| CVE-2022-4725 | AWS SDK XML Parser XpathUtils.java XpathUtils server-side request forgery | 9.8v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-4724 | Improper access control in ikus060/rdiffweb | 9.8v3.1 | 0.8% | 2022-12-27 | Fix |
| CVE-2022-4723 | Allocation of resources without limits or throttling in ikus060/rdiffweb | 6.5v3.1 | 0.6% | 2022-12-27 | Fix |
| CVE-2022-4722 | Authentication bypass by primary weakness in ikus060/rdiffweb | 7.2v3.1 | 1.1% | 2022-12-27 | Fix |
| CVE-2022-4721 | Failure to sanitize special elements into a different plane in ikus060/rdiffweb | 5.4v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2022-4720 | Open redirect in ikus060/rdiffweb | 6.1v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2022-4719 | Business Logic Errors in ikus060/rdiffweb | 9.8v3.1 | 1.0% | 2022-12-27 | Fix |
| CVE-2022-4695 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-4694 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2022-4691 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-3156 | Rockwell Automation Studio 5000 Logix Emulate vulnerable to a remote code execution | 7.8CNA v3.1 | 0.4% | 2022-12-27 | Fix |
| CVE-2022-3064 | Excessive resource consumption in gopkg.in/yaml.v2 | 7.5v3.1 | 1.7% | 2022-12-27 | Fix |
| CVE-2022-2584 | Panic when decoding invalid blocks in github.com/ipld/Go-codec-dagpb | 7.5v3.1 | 0.7% | 2022-12-27 | Fix |
| CVE-2022-2583 | Race condition in github.com/ntbosscher/gobase | 3.7v3.1 | 0.3% | 2022-12-27 | Fix |
| CVE-2022-2582 | Exposure of unencrypted plaintext hash in github.com/aws/aws-sdk-go | 4.3v3.1 | 0.5% | 2022-12-27 | Fix |
| CVE-2022-41767 | mediawiki information disclosure | 5.3v3.1 | 0.6% | 2022-12-26 | Fix |
| CVE-2022-41765 | mediawiki observable discrepancy | 5.3v3.1 | 0.6% | 2022-12-26 | Fix |
| CVE-2022-37313 | Open-xchange Appsuite server-side request forgery | 5.3v3.1 | 0.7% | 2022-12-26 | Fix |
| CVE-2022-37312 | Open-xchange Appsuite improper quantity validation | 5.3v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-37311 | Open-xchange Appsuite improper quantity validation | 5.3v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-37310 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-37309 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-37308 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-37307 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-36664 | Adiscon Password Manager For Iis cross-site scripting | 6.1v3.1 | 3.8% | 2022-12-26 | Exploit code |
| CVE-2022-31469 | Open-xchange Appsuite cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-30260 | Emerson DeltaV Distributed Control System insufficient verification of data authenticity | 7.8v3.1 | 0.1% | 2022-12-26 | |
| CVE-2022-29853 | Open-xchange Appsuite cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-26 | |
| CVE-2022-29852 | Open-xchange Appsuite cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-26 | |
| CVE-2022-26969 | Monospace directus insecure default value for CORS configuration | 9.8v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-26964 | Devolutions Remote Desktop Manager weak credentials | 7.5v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-24120 | GE Inet 900 cleartext storage of sensitive information | 4.6v3.1 | 0.2% | 2022-12-26 | Fix |
| CVE-2022-24119 | GE Inet 900 inclusion of untrusted functionality | 9.8v3.1 | 0.7% | 2022-12-26 | Fix |
| CVE-2022-24118 | GE TD220MAX resource exhaustion | 9.1v3.1 | 0.6% | 2022-12-26 | Fix |
| CVE-2022-24117 | GE TD220MAX download without integrity check | 9.8v3.1 | 0.4% | 2022-12-26 | Fix |
| CVE-2022-24116 | GE Inet 900 missing cryptographic step | 9.8v3.1 | 0.3% | 2022-12-26 | Fix |
| CVE-2022-4742 | json-pointer index.js set prototype pollution | 9.8v3.1 | 1.0% | 2022-12-26 | Fix |
| CVE-2022-4268 | Plugin Logic WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2022-12-26 | Fix |
| CVE-2022-4267 | Bulk Delete Users by Email WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-4266 | Bulk Delete Users by Email WordPress plugin user deletion via CSRF | 6.5NVD v3.1 | 0.3% | 2022-12-26 | Fix |
| CVE-2022-4243 | ImageInject WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | |
| CVE-2022-4242 | WP Google Review Slider WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-4239 | Workreap WordPress theme Subscriber+ arbitrary posts deletion via IDOR | 6.5NVD v3.1 | 0.6% | 2022-12-26 | Fix |
| CVE-2022-4227 | Booster for WooCommerce reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2022-12-26 | Fix |
| CVE-2022-4226 | Simple Basic Contact Form WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-4197 | 10Web Slider by 10Web stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-4166 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4165 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4164 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4163 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4162 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4161 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4160 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4159 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4158 | Contest Gallery WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4157 | Contest Gallery WordPress plugin Admin+ SQL injection | 4.9NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4156 | Contest Gallery WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4155 | Contest Gallery WordPress plugin Admin+ SQL injection | 4.9NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4154 | Contest Gallery Pro WordPress plugin Admin+ SQL injection | 4.9NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4153 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4152 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4151 | Contest Gallery WordPress plugin Admin+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4150 | Contest Gallery WordPress plugin Author+ SQL injection | 6.5NVD v3.1 | 0.9% | 2022-12-26 | Fix |
| CVE-2022-4120 | Stop Spammers Security WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 18.1% | 2022-12-26 | Fix |
| CVE-2022-4117 | IWS - Geo Form Fields WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 5.0% | 2022-12-26 | Nuclei |
| CVE-2022-4110 | Eventify WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | |
| CVE-2022-4047 | WP Swings Return Refund and Exchange For WooCommerce attachment upload handler arbitrary file upload | 9.8NVD v3.1 | 6.2% | 2022-12-26 | Exploit codeFix |
| CVE-2022-4042 | Paytium WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-3840 | Google Apps Login WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-3835 | Kwayy HTML Sitemap WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-26 | Fix |
| CVE-2022-45896 | Planet Estream unrestricted file upload | 9.8v3.1 | 1.1% | 2022-12-25 | |
| CVE-2022-45895 | Planet Estream information disclosure | 6.5v3.1 | 0.7% | 2022-12-25 | |
| CVE-2022-45894 | Planet Estream path traversal | 6.5v3.1 | 1.0% | 2022-12-25 | |
| CVE-2022-45893 | Planet Estream missing brute-force protection | 8.8v3.1 | 0.8% | 2022-12-25 | |
| CVE-2022-45892 | Planet Estream cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-25 | |
| CVE-2022-45891 | Planet Estream incorrect authorization | 9.1v3.1 | 0.7% | 2022-12-25 | |
| CVE-2022-45890 | Planet Estream cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-25 | |
| CVE-2022-45889 | Planet Estream SQL injection | 7.2v3.1 | 1.3% | 2022-12-25 | |
| CVE-2022-45197 | Slixmpp lacks SSL Certificate hostname validation in XMLStream | 7.5v3.1 | 0.5% | 2022-12-25 | Fix |
| CVE-2022-44640 | Heimdal ASN.1 codec double free | 9.8v3.1 | 1.8% | 2022-12-25 | Fix |
| CVE-2022-44381 | Snipe-IT allows attackers to check whether a user account exists | 5.3v3.1 | 0.6% | 2022-12-25 | |
| CVE-2022-44380 | Snipe-IT vulnerable to cross-site scripting for View Assigned Assets | 5.4v3.1 | 0.5% | 2022-12-25 | Fix |
| CVE-2022-44017 | Simmeth Lieferantenmanager session fixation | 7.5v3.1 | 0.7% | 2022-12-25 | |
| CVE-2022-44016 | Simmeth Lieferantenmanager path traversal | 7.5v3.1 | 0.9% | 2022-12-25 | |
| CVE-2022-44015 | Simmeth Lieferantenmanager SQL injection | 9.8v3.1 | 1.2% | 2022-12-25 | |
| CVE-2022-44014 | Simmeth Lieferantenmanager information disclosure | 6.5v3.1 | 0.7% | 2022-12-25 | |
| CVE-2022-44013 | Simmeth Lieferantenmanager missing authentication | 9.1v3.1 | 0.9% | 2022-12-25 | |
| CVE-2022-44012 | Simmeth Lieferantenmanager cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-25 | |
| CVE-2022-42953 | ZKTeco ZEM500 forced browsing | 7.5v3.1 | 4.8% | 2022-12-25 | Exploit code |
| CVE-2022-42898 | MIT Kerberos 5 integer overflow | 8.8NVD v3.1 | 6.5% | 2022-12-25 | Fix |
| CVE-2022-41318 | squid-cache squid libntlmauth buffer over-read | 8.6v3.1 | 2.8% | 2022-12-25 | Fix |
| CVE-2022-41317 | squid-cache squid information disclosure | 6.5v3.1 | 1.7% | 2022-12-25 | Fix |
| CVE-2022-40005 | Intelbras Wifiber 120ac Inmesh OS command injection | 8.8v3.1 | 34.8% | 2022-12-25 | |
| CVE-2022-37706 | Enlightenment improper privilege management | 7.8v3.1 | 5.5% | 2022-12-25 | Exploit codeFix |
| CVE-2022-4741 | docconv XMLToText memory allocation | 6.5v3.1 | 0.8% | 2022-12-25 | Fix |
| CVE-2022-4740 | kkFileView picturesPreview setWatermarkAttribute cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-25 | |
| CVE-2022-4739 | SourceCodester School Dormitory Management System Admin Login SQL injection | 9.8v3.1 | 0.5% | 2022-12-25 | |
| CVE-2022-4738 | SourceCodester Blood Bank Management System User Registration cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-25 | |
| CVE-2022-4737 | SourceCodester Blood Bank Management System login.php SQL injection | 9.8v3.1 | 0.6% | 2022-12-25 | |
| CVE-2022-4736 | Venganzas del Pasado cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-25 | |
| CVE-2022-4735 | asrashley dash-live DOM Node media.js ready cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-25 | |
| CVE-2022-4731 | Myapnea Title cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-25 | Fix |
| CVE-2022-47949 | Nintendo Super Mario Maker 2 buffer overflow | 9.8v3.1 | 22.3% | 2022-12-24 | |
| CVE-2022-47934 | Brave denial of service | 6.5v3.1 | 1.0% | 2022-12-24 | |
| CVE-2022-47933 | Brave improper exception handling | 6.5v3.1 | 0.8% | 2022-12-24 | |
| CVE-2022-47932 | Brave denial of service | 6.5v3.1 | 1.0% | 2022-12-24 | |
| CVE-2022-46175 | Prototype pollution in JSON5 via Parse method | 7.1CNA v3.1 | 9.2% | 2022-12-24 | Exploit codeFix |
| CVE-2022-45798 | Trend Micro Apex One Damage Cleanup Engine component link following | 7.8v3.1 | 0.3% | 2022-12-24 | Fix |
| CVE-2022-43860 | IBM Navigator for i SQL injection | 4.3CNA v3.1 | 0.5% | 2022-12-24 | Fix |
| CVE-2022-38658 | HCL BigFix Server Automation is affected by a security vulnerability around Notification service | 7.7CNA v3.1 | 0.3% | 2022-12-24 | Fix |
| CVE-2022-22449 | IBM Security Verify Governance, Identity Manager information disclosure | 5.3CNA v3.1 | 0.7% | 2022-12-24 | Fix |
| CVE-2022-47946 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.4% | 2022-12-23 | Fix |
| CVE-2022-47945 | ThinkPHP Framework vulnerable to remote code execution | 9.8v3.1 | 30.2% | 2022-12-23 | NucleiFix |
| CVE-2022-47943 | Linux kernel out-of-bounds read | 8.1v3.1 | 3.5% | 2022-12-23 | Fix |
| CVE-2022-47942 | Linux kernel out-of-bounds write | 8.8v3.1 | 3.6% | 2022-12-23 | Fix |
| CVE-2022-47941 | Linux kernel memory leak | 7.5v3.1 | 4.9% | 2022-12-23 | Fix |
| CVE-2022-47940 | Linux kernel out-of-bounds read | 8.1v3.1 | 1.4% | 2022-12-23 | Fix |
| CVE-2022-47939 | Linux kernel use-after-free | 9.8v3.1 | 49.3% | 2022-12-23 | Fix |
| CVE-2022-47938 | Linux kernel out-of-bounds read | 6.5v3.1 | 60.0% | 2022-12-23 | Fix |
| CVE-2022-47931 | Collision of hash values in github.com/bnb-chain/Tss-lib | 9.1v3.1 | 0.5% | 2022-12-23 | Fix |
| CVE-2022-47633 | kyverno verifyImages rule bypass possible with malicious proxy/registry | 8.1v3.1 | 1.0% | 2022-12-23 | Fix |
| CVE-2022-47524 | F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack. | 5.4v3.1 | 0.4% | 2022-12-23 | Fix |
| CVE-2022-46642 | D-Link DIR-846 command injection | 9.9v3.1 | 3.1% | 2022-12-23 | |
| CVE-2022-46641 | D-Link DIR-846 command injection | 9.9v3.1 | 3.1% | 2022-12-23 | |
| CVE-2022-46570 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46569 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.6% | 2022-12-23 | Emerging Threats |
| CVE-2022-46568 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46566 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46563 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46562 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46561 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46560 | D-Link Dir-882 A1 out-of-bounds write | 7.2v3.1 | 1.4% | 2022-12-23 | |
| CVE-2022-46492 | Nbnbk path traversal | 6.5v3.1 | 0.5% | 2022-12-23 | |
| CVE-2022-46171 | Tauri vulnerable to path traversal | 6.8CNA v3.1 | 1.0% | 2022-12-23 | Fix |
| CVE-2022-45721 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45720 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45719 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45718 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45717 | IP-COM M50 OS command injection | 9.8v3.1 | 4.3% | 2022-12-23 | |
| CVE-2022-45716 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45715 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45714 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45712 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45711 | IP-COM M50 OS command injection | 9.8v3.1 | 20.2% | 2022-12-23 | |
| CVE-2022-45710 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45709 | IP-COM M50 OS command injection | 9.8v3.1 | 4.3% | 2022-12-23 | |
| CVE-2022-45708 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45707 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-45706 | IP-COM M50 buffer overflow | 9.8v3.1 | 1.1% | 2022-12-23 | |
| CVE-2022-44567 | Rocket.chat command injection | 9.8v3.1 | 1.7% | 2022-12-23 | |
| CVE-2022-44565 | UISP Wireless improper access control | 5.3v3.1 | 0.4% | 2022-12-23 | Fix |
| CVE-2022-43849 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-43848 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-43551 | https://github.com/curl/curl cleartext transmission of sensitive information | 7.5NVD v3.1 | 16.6% | 2022-12-23 | Fix |
| CVE-2022-43381 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-43380 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-41290 | IBM AIX privilege escalation | 8.4CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-40899 | Pythoncharmers Python-future Python Charmers Future denial of service | 7.5v3.1 | 1.8% | 2022-12-23 | Fix |
| CVE-2022-40898 | Pypa/wheel vulnerable to regular expression denial of service (ReDoS) | 7.5v3.1 | 2.7% | 2022-12-23 | Fix |
| CVE-2022-40897 | Pypa/setuptools vulnerable to regular expression denial of service (ReDoS) | 5.9v3.1 | 2.6% | 2022-12-23 | Fix |
| CVE-2022-40233 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-40011 | Typora cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-23 | Fix |
| CVE-2022-39165 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-39164 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-23 | Fix |
| CVE-2022-38757 | Micro Focus ZENworks improper privilege management | 7.2CNA v3.1 | 0.9% | 2022-12-23 | |
| CVE-2022-33324 | Denial of service vulnerability in Ethernet port of MELSEC iQ-R, iQ-L Series and MELIPC Series | 7.5CNA v3.1 | 1.7% | 2022-12-23 | Fix |
| CVE-2022-28229 | userver denial of service | 7.5v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2022-28228 | YDB out-of-bounds read | 9.1v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2022-23854 | AVEVA InTouch Access Anywhere relative path traversal | 7.5v3.1 | 49.7% | 2022-12-23 | NucleiExploit code |
| CVE-2022-23547 | Heap buffer overflow in pjproject when decoding STUN message | 6.5CNA v3.1 | 1.0% | 2022-12-23 | Fix |
| CVE-2022-23539 | auth0 node-jsonwebtoken jsonwebtoken unrestricted key type could lead to legacy keys usage | 5.9CNA v3.1 | 0.5% | 2022-12-23 | Fix |
| CVE-2022-23513 | Pi-Hole/AdminLTE vulnerable due to improper access control in queryads endpoint | 5.3CNA v3.1 | 42.3% | 2022-12-23 | Exploit codeFix |
| CVE-2022-4698 | ProfilePress WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-12-23 | Fix |
| CVE-2022-4697 | ProfilePress WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2022-4692 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.6% | 2022-12-23 | Fix |
| CVE-2022-4690 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.6% | 2022-12-23 | Fix |
| CVE-2022-4689 | Improper access control in usememos/memos | 8.8v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2022-4688 | Improper authorization in usememos/memos | 8.8v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2022-4687 | Incorrect use of privileged apis in usememos/memos | 8.1v3.1 | 0.6% | 2022-12-23 | Fix |
| CVE-2022-4686 | Authorization bypass through user-controlled key in usememos/memos | 9.8v3.1 | 0.7% | 2022-12-23 | Fix |
| CVE-2022-4684 | Improper access control in usememos/memos | 8.8v3.1 | 0.6% | 2022-12-23 | Fix |
| CVE-2022-4683 | Sensitive Cookie in HTTPS Session without Secure attribute in usememos/memos | 6.5v3.1 | 0.4% | 2022-12-23 | Fix |
| CVE-2022-4665 | Unrestricted upload of file with dangerous type in ampache/ampache | 8.8v3.1 | 0.8% | 2022-12-23 | Fix |
| CVE-2022-47928 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-22 | |
| CVE-2022-47926 | Ayacms argument injection | 9.8v3.1 | 0.8% | 2022-12-22 | |
| CVE-2022-47896 | JetBrains IntelliJ IDEA server-side template injection | 5.0CNA v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-47895 | JetBrains IntelliJ IDEA cleartext transmission of sensitive information | 4.7CNA v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-46885 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-46883 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-46882 | Mozilla Firefox WebGL extensions use-after-free | 9.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-46881 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-46880 | Mozilla Firefox ESR use-after-free | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-46879 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-46878 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-46877 | Mozilla Firefox cross-site scripting | 4.3v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-46875 | Mozilla Firefox improper authentication | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-46874 | Mozilla Firefox code injection | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-46873 | Mozilla Firefox injection | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-46872 | Mozilla Firefox out-of-bounds read | 8.6v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-46871 | Mozilla Firefox libusrsctp library vulnerability | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-46493 | Nbnbk unrestricted file upload | 9.8v3.1 | 0.8% | 2022-12-22 | |
| CVE-2022-46491 | Nbnbk cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-22 | |
| CVE-2022-46170 | CodeIgniter is vulnerable to improper authentication via Session Handlers | 8.6CNA v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-46102 | Ayacms unrestricted file upload | 9.8v3.1 | 0.7% | 2022-12-22 | |
| CVE-2022-46101 | Ayacms code injection | 8.8v3.1 | 1.1% | 2022-12-22 | |
| CVE-2022-45966 | ClassCMS file management function module arbitrary file upload | 9.8v3.1 | 0.7% | 2022-12-22 | |
| CVE-2022-45421 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-45420 | Mozilla Firefox ESR clickjacking | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-45419 | Mozilla Firefox improper certificate validation | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-45418 | Mozilla Firefox ESR clickjacking | 6.1v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-45417 | Mozilla Firefox clickjacking | 4.3v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-45416 | Mozilla Firefox ESR observable discrepancy | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-45415 | Mozilla Firefox unrestricted file upload | 7.8v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-45414 | Mozilla Thunderbird information disclosure | 8.1v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-45413 | Mozilla Firefox open redirect | 6.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-45412 | Mozilla Firefox ESR link following | 8.8v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-45411 | Mozilla Firefox ESR cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-45410 | Mozilla Firefox ESR missing authorization | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-45409 | Mozilla Firefox ESR use-after-free | 8.8v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-45408 | Mozilla Firefox ESR cross-site scripting | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-45407 | Mozilla Firefox use-after-free | 7.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-45406 | Mozilla Firefox ESR use-after-free | 9.8v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-45405 | Mozilla Firefox ESR use-after-free | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-45404 | Mozilla Firefox ESR UI misrepresentation | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-45403 | Mozilla Firefox ESR observable discrepancy | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-45347 | Apache ShardingSphere-Proxy: MySQL authentication bypass | 9.8v3.1 | 1.4% | 2022-12-22 | Fix |
| CVE-2022-44510 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-43859 | IBM Navigator for i SQL injection | 6.3CNA v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-43858 | IBM Navigator for i information disclosure | 4.3CNA v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-43857 | IBM Navigator for i information disclosure | 4.3CNA v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-43603 | OpenImageIO ZfileOutput::close functionality denial of service | 5.9v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2022-43602 | OpenImageIO IFFOutput::close functionality code execution | 8.1v3.1 | 1.9% | 2022-12-22 | Fix |
| CVE-2022-43601 | OpenImageIO IFFOutput::close functionality code execution | 8.1v3.1 | 1.7% | 2022-12-22 | Fix |
| CVE-2022-43600 | OpenImageIO IFFOutput::close functionality code execution | 8.1v3.1 | 1.7% | 2022-12-22 | Fix |
| CVE-2022-43599 | OpenImageIO IFFOutput::close functionality code execution | 8.1v3.1 | 2.0% | 2022-12-22 | Fix |
| CVE-2022-43598 | OpenImageIO IFFOutput alignment padding functionality memory corruption | 8.1v3.1 | 1.8% | 2022-12-22 | Fix |
| CVE-2022-43597 | OpenImageIO IFFOutput alignment padding functionality memory corruption | 8.1v3.1 | 1.8% | 2022-12-22 | Fix |
| CVE-2022-43596 | OpenImageIO IFFOutput channel interleaving functionality information disclosure | 5.9v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-43595 | OpenImageIO image output closing functionality denial of service | 5.9v3.1 | 1.2% | 2022-12-22 | Fix |
| CVE-2022-43594 | OpenImageIO image output closing functionality denial of service | 5.9v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2022-43593 | OpenImageIO DPXOutput::close functionality denial of service | 5.9v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2022-43592 | OpenImageIO DPXOutput::close functionality information disclosure | 5.9v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-43271 | Inhabit Move Crm cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-22 | Exploit codeFix |
| CVE-2022-42932 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-42931 | Mozilla Firefox cleartext storage of sensitive information | 3.3v3.1 | 0.1% | 2022-12-22 | Fix |
| CVE-2022-42930 | Mozilla Firefox race condition | 7.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-42929 | Mozilla Firefox denial of service | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-42928 | Mozilla Firefox null pointer dereference | 8.8v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-42927 | Mozilla Firefox origin validation error | 8.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-41999 | OpenImageIO DDS native tile reading functionality denial of service | 7.5v3.1 | 1.4% | 2022-12-22 | Fix |
| CVE-2022-41988 | OpenImageIO OpenImageIO::decode_iptc_iim functionality information disclosure | 7.5v3.1 | 1.2% | 2022-12-22 | Fix |
| CVE-2022-41981 | OpenImageIO TGA file format parser stack-based buffer overflow | 8.1v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-41977 | OpenImageIO way out-of-bounds read | 3.3NVD v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-41838 | OpenImageIO DDS scanline parsing functionality code execution | 9.8v3.1 | 1.8% | 2022-12-22 | Fix |
| CVE-2022-41837 | OpenImageIO out-of-bounds write | 9.8v3.1 | 1.6% | 2022-12-22 | Fix |
| CVE-2022-41794 | OpenImageIO PSD thumbnail resource parsing code heap-based buffer overflow | 9.8v3.1 | 1.9% | 2022-12-22 | Fix |
| CVE-2022-41697 | Ghost response discrepancy | 5.3v3.1 | 20.2% | 2022-12-22 | NucleiFix |
| CVE-2022-41684 | OpenImageIO heap out-of-bounds read | 5.5NVD v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-41654 | Ghost vulnerable to unauthorized newsletter modification via improper access controls | 4.3NVD v3.1 | 18.9% | 2022-12-22 | Fix |
| CVE-2022-41649 | OpenImageIO out-of-bounds read | 9.1v3.1 | 1.5% | 2022-12-22 | Fix |
| CVE-2022-41639 | OpenImageIO heap-based buffer overflow | 9.8v3.1 | 1.8% | 2022-12-22 | Fix |
| CVE-2022-40962 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2022-40961 | Mozilla Firefox out-of-bounds write | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-40960 | Mozilla Firefox ESR use-after-free | 6.5v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-40959 | Mozilla Firefox ESR insecure storage of sensitive information | 6.5v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2022-40958 | Mozilla Firefox ESR session fixation | 6.5v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-40957 | Mozilla Firefox ESR crash | 6.5v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-40956 | Mozilla Firefox ESR cross-site scripting | 6.1v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-38478 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-38477 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-38476 | Mozilla Firefox ESR use-after-free | 7.5v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-38475 | Mozilla Firefox incorrect authorization | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-38474 | Mozilla Firefox resource exposure | 4.3v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-38473 | Mozilla Thunderbird improper preservation of permissions | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-38472 | Mozilla Thunderbird origin validation error | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-38143 | OpenImageIO way out-of-bounds write | 9.8v3.1 | 1.4% | 2022-12-22 | Fix |
| CVE-2022-36354 | OpenImageIO RLA format parser out-of-bounds read | 5.3v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-36320 | Mozilla Firefox out-of-bounds write | 9.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-36319 | Mozilla Firefox ESR clickjacking | 7.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-36318 | Mozilla Firefox ESR race condition | 5.3v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-36317 | Mozilla Firefox denial of service | 6.5v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-36316 | Mozilla Firefox open redirect | 6.1v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-36315 | Mozilla Firefox insufficient verification of data authenticity | 4.3v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-36314 | Mozilla Firefox ESR uncontrolled search path | 5.5v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-35646 | IBM Security Verify Governance, Identity Manager improper authentication | 5.9CNA v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-34485 | Mozilla Firefox out-of-bounds write | 9.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-34484 | Mozilla Firefox use-after-free | 8.8v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-34483 | Mozilla Firefox unrestricted file upload | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-34482 | Mozilla Firefox unrestricted file upload | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-34481 | Mozilla Firefox integer overflow | 8.8v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-34480 | Mozilla Firefox uninitialized pointer access | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-34479 | Mozilla Firefox UI misrepresentation | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-34478 | Mozilla Firefox open redirect | 6.5v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-34477 | Mozilla Firefox observable discrepancy | 7.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-34476 | Mozilla Firefox improper input validation | 9.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-34475 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-34474 | Mozilla Firefox open redirect | 6.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-34473 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-34472 | Mozilla Firefox improper exception handling | 4.3v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-34471 | Mozilla Firefox insufficient verification of data authenticity | 6.5v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-34470 | Mozilla Firefox use-after-free | 9.8v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-34469 | Mozilla Firefox improper certificate validation | 8.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-34468 | Mozilla Firefox inclusion of untrusted functionality | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-31748 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-31747 | Mozilla Thunderbird out-of-bounds read | 9.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-31746 | Mozilla Firefox information disclosure | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-31745 | Mozilla Firefox improper array index validation | 4.3v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-31744 | Mozilla Firefox ESR cross-site scripting | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-31743 | Mozilla Firefox cross-site scripting | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-31742 | Mozilla Thunderbird observable discrepancy | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-31741 | Mozilla Thunderbird uninitialized resource use | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-31740 | Mozilla Thunderbird crash | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-31739 | Mozilla Thunderbird external control of a file path | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-31738 | Mozilla Thunderbird authentication bypass by spoofing | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-31737 | Mozilla Thunderbird out-of-bounds write | 9.8v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-31736 | Mozilla Thunderbird permissive cross-domain policy | 9.8v3.1 | 1.1% | 2022-12-22 | Fix |
| CVE-2022-29918 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-29917 | Mozilla Thunderbird out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-29916 | Mozilla Thunderbird information disclosure | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-29915 | Mozilla Firefox origin validation error | 4.3v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-29914 | Mozilla Thunderbird clickjacking | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-29913 | Mozilla Thunderbird improper authorization | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-29912 | Mozilla Thunderbird open redirect | 6.1v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-29911 | Mozilla Thunderbird clickjacking | 6.1v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-29910 | Mozilla Firefox open redirect | 6.1v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-29909 | Mozilla Thunderbird incorrect default permissions | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-28289 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-28288 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-28287 | Mozilla Firefox crash | 6.5v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-28286 | Mozilla Thunderbird clickjacking | 5.4v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-28285 | Mozilla Thunderbird out-of-bounds read | 6.5v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-28284 | Mozilla Firefox improper output encoding | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-28283 | Mozilla Firefox files accessible to external parties | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-28282 | Mozilla Thunderbird use-after-free | 6.5v3.1 | 2.0% | 2022-12-22 | Fix |
| CVE-2022-28281 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 2.6% | 2022-12-22 | Exploit codeFix |
| CVE-2022-26486 | Mozilla Firefox use-after-free | 9.6v3.1 | 2.3% | 2022-12-22 | KEVFix |
| CVE-2022-26485 | Mozilla Firefox use-after-free | 8.8v3.1 | 14.3% | 2022-12-22 | KEVExploit codeFix |
| CVE-2022-26387 | Mozilla Firefox time-of-check time-of-use race condition | 7.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-26386 | Mozilla Firefox ESR insecure temporary file | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-26385 | Mozilla Firefox use-after-free | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-26384 | Mozilla Firefox protection mechanism failure | 9.6v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-26383 | Mozilla Firefox UI misrepresentation | 4.3v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-26382 | Mozilla Firefox observable discrepancy | 4.3v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-26381 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-25948 | liquidjs information exposure | 5.3v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-23556 | CodeIgniter is vulnerable to IP address spoofing when using proxy | 7.0CNA v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-23541 | Auth0 jsonwebtoken key retrieval function authentication bypass | 5.0CNA v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-23540 | Auth0 jsonwebtoken jwt.verify authentication bypass | 6.4CNA v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22764 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-22763 | Mozilla Firefox race condition | 8.8v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22762 | Mozilla Firefox UI misrepresentation | 4.3v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-22761 | Mozilla Firefox protection mechanism failure | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-22760 | Mozilla Firefox information disclosure through error messages | 6.5v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-22759 | Mozilla Firefox protection mechanism failure | 9.6v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-22758 | Mozilla Firefox cleartext transmission of sensitive information | 8.8v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-22757 | Mozilla Firefox insufficient verification of data authenticity | 6.5v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-22756 | Mozilla Firefox code injection | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-22755 | Mozilla Firefox operation on a released resource | 8.8v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22754 | Mozilla Firefox incorrect authorization | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22753 | Mozilla Firefox Maintenance time-of-check time-of-use race condition | 7.1v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22752 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-22751 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-22750 | Mozilla Firefox resource handle passing vulnerability | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22749 | Mozilla Firefox improper input validation | 4.3v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-22748 | Mozilla Firefox ESR cross-site scripting | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-22747 | Mozilla Firefox ESR improper certificate validation | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22746 | Mozilla Firefox ESR race condition | 5.9v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22745 | Mozilla Firefox ESR information disclosure | 6.5v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22744 | Mozilla Firefox ESR command injection | 8.8v3.1 | 1.3% | 2022-12-22 | Fix |
| CVE-2022-22743 | Mozilla Firefox fullscreen mode vulnerability | 4.3v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-22742 | Mozilla Firefox ESR out-of-bounds read | 6.5v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-22741 | Mozilla Firefox fullscreen mode vulnerability | 7.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-22740 | Mozilla Firefox ESR use-after-free | 8.8v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-22739 | Mozilla Firefox external protocol handler vulnerability | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-22738 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 1.0% | 2022-12-22 | Fix |
| CVE-2022-22737 | Mozilla Firefox ESR race condition | 7.5v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-22736 | Mozilla Firefox uncontrolled search path | 7.0v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-22461 | IBM Security Verify Governance, Identity Manager information disclosure | 5.9CNA v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-22458 | IBM Security Verify Governance, Identity Manager information disclosure | 6.3CNA v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-22457 | IBM Security Verify Governance, Identity Manager information disclosure | 5.3CNA v3.1 | 0.1% | 2022-12-22 | Fix |
| CVE-2022-22456 | IBM Security Verify Governance, Identity Manager cross-site scripting | 4.2CNA v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-22184 | Juniper Networks Junos OS Routing protocol daemon improper input validation | 7.5CNA v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-4662 | Linux kernel USB core subsystem improper access control | 5.5NVD v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-4647 | Cross-site scripting (XSS) Stored in microweber/microweber | 6.1v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-4646 | Cross-site request forgery (CSRF) in ikus060/rdiffweb | 6.5v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-4644 | Open redirect in ikus060/rdiffweb | 6.1v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-3805 | Jeg Elementor Kit WordPress plugin unauthenticated authorization bypass | 7.5v3.1 | 1.6% | 2022-12-22 | NucleiFix |
| CVE-2022-3794 | Jeg Elementor Kit WordPress plugin authorization bypass | 4.3v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-3266 | Mozilla Firefox ESR out-of-bounds read | 5.5v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-3155 | Mozilla Thunderbird incorrect default permissions | 7.8v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-3034 | Mozilla Thunderbird clickjacking | 4.3v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-3033 | Mozilla Thunderbird cross-site scripting | 8.1v3.1 | 0.8% | 2022-12-22 | Fix |
| CVE-2022-3032 | Mozilla Thunderbird externally controlled resource reference | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-2505 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-2226 | Mozilla Thunderbird authentication bypass by replay | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-2200 | Mozilla Firefox prototype pollution | 8.8v3.1 | 23.9% | 2022-12-22 | Fix |
| CVE-2022-1887 | Mozilla Firefox SQL injection | 9.8v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-1834 | Mozilla Thunderbird improper certificate validation | 6.5v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-1802 | Mozilla Firefox ESR prototype pollution | 8.8v3.1 | 26.7% | 2022-12-22 | Exploit codeFix |
| CVE-2022-1529 | Mozilla Firefox ESR prototype pollution | 8.8v3.1 | 17.1% | 2022-12-22 | Fix |
| CVE-2022-1520 | Mozilla Thunderbird origin validation error | 4.3v3.1 | 0.3% | 2022-12-22 | Fix |
| CVE-2022-1197 | Mozilla Thunderbird improper certificate validation | 5.4v3.1 | 0.4% | 2022-12-22 | Fix |
| CVE-2022-1196 | Mozilla Thunderbird use-after-free | 6.5v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-1097 | Mozilla Thunderbird use-after-free | 6.5v3.1 | 0.9% | 2022-12-22 | Fix |
| CVE-2022-0843 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.6% | 2022-12-22 | Fix |
| CVE-2022-0566 | Mozilla Thunderbird out-of-bounds write | 8.8v3.1 | 0.7% | 2022-12-22 | Fix |
| CVE-2022-0517 | Mozilla VPN unrestricted file upload | 7.8v3.1 | 0.2% | 2022-12-22 | Fix |
| CVE-2022-0511 | Mozilla Firefox out-of-bounds write | 8.8v3.1 | 0.5% | 2022-12-22 | Fix |
| CVE-2022-47635 | Wildix wms server-side request forgery | 9.8v3.1 | 0.6% | 2022-12-21 | Fix |
| CVE-2022-47581 | Isode M-Vault LDAP v1 bind handling denial of service | 7.5v3.1 | 0.6% | 2022-12-21 | Fix |
| CVE-2022-46662 | Corel Roxio Creator LJB unquoted search path | 6.7v3.1 | 0.4% | 2022-12-21 | Fix |
| CVE-2022-46334 | Proofpoint Enterprise Protection local privilege escalation | 7.8CNA v3.1 | 0.2% | 2022-12-21 | Fix |
| CVE-2022-46330 | Squirrel Installers generated by Squirrel.Windows uncontrolled search path | 7.8v3.1 | 0.4% | 2022-12-21 | Fix |
| CVE-2022-46282 | OMRON CX-Drive use-after-free | 7.8v3.1 | 0.2% | 2022-12-21 | |
| CVE-2022-46096 | Covid-19 Directory On Vaccination System Sourcecodester Online cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-46095 | Covid-19 Directory On Vaccination System cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-44756 | HCL BigFix Insights for vulnerability Remediation (IVR) is vulnerable to improper input validation | 6.4CNA v3.1 | 0.4% | 2022-12-21 | Fix |
| CVE-2022-44449 | Zenphoto stored cross-site scripting | 4.8v3.1 | 0.7% | 2022-12-21 | |
| CVE-2022-43543 | KDDI CORPORATION, NTT DOCOMO, INC., and SoftBank KDDI +Message App improper output encoding | 5.4v3.1 | 0.5% | 2022-12-21 | Fix |
| CVE-2022-42949 | SilverStripe Subsite weakens file permissions | 7.5v3.1 | 0.5% | 2022-12-21 | Fix |
| CVE-2022-42454 | HCL BigFix Insights for vulnerability Remediation is vulnerable to improper certificate validation | 6.4CNA v3.1 | 0.2% | 2022-12-21 | Fix |
| CVE-2022-40841 | Ndk-design Ndkadvancedcustomizationfields cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-40145 | Apache Karaf: JDBC JAAS LDAP injection | 9.8v3.1 | 2.4% | 2022-12-21 | Fix |
| CVE-2022-38655 | HCL BigFix WebUI improper access control | 6.4CNA v3.1 | 0.4% | 2022-12-21 | Fix |
| CVE-2022-38546 | Zyxel NBG7510 firmware improper access control | 5.3CNA v3.1 | 0.6% | 2022-12-21 | Fix |
| CVE-2022-38065 | OpenStack oslo.privsep functionality privilege escalation | 8.8v3.1 | 0.6% | 2022-12-21 | |
| CVE-2022-38060 | OpenStack Kolla sudo privilege escalation | 7.8NVD v3.1 | 0.2% | 2022-12-21 | Fix |
| CVE-2022-36222 | Nokia Fastmile hard-coded credentials | 8.4v3.1 | 0.3% | 2022-12-21 | |
| CVE-2022-36221 | Nokia Fastmile path traversal | 6.5v3.1 | 0.8% | 2022-12-21 | |
| CVE-2022-25929 | smoothie cross-site scripting (XSS) | 5.4v3.1 | 0.8% | 2022-12-21 | Fix |
| CVE-2022-25895 | lite-dev-server directory traversal | 7.5v3.1 | 1.3% | 2022-12-21 | |
| CVE-2022-25893 | vm2 arbitrary code execution | 9.8v3.1 | 1.4% | 2022-12-21 | Fix |
| CVE-2022-24431 | abacus-ext-cmdline command injection | 9.8v3.1 | 1.3% | 2022-12-21 | |
| CVE-2022-23551 | AAD Pod Identity obtaining token with backslash | 5.3CNA v3.1 | 0.7% | 2022-12-21 | Fix |
| CVE-2022-4643 | docconv pdf_ocr.go ConvertPDFImages os command injection | 9.8v3.1 | 1.7% | 2022-12-21 | Fix |
| CVE-2022-4642 | tatoeba2 Profile Name cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-4641 | pig-vector LogisticRegression.java LogisticRegression temp file | 5.5v3.1 | 0.2% | 2022-12-21 | |
| CVE-2022-4640 | Mingsoft MCMS Article save cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-21 | |
| CVE-2022-4639 | sslh Packet Dumping probe.c hexdump format string | 9.8v3.1 | 0.9% | 2022-12-21 | |
| CVE-2022-4638 | collective.contact.widget widgets.py title cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-21 | Fix |
| CVE-2022-4637 | ep3-bs cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | Fix |
| CVE-2022-4633 | Auto Upload Images settings setting-page.php cross-site request forgery | 8.8v3.1 | 0.3% | 2022-12-21 | Fix |
| CVE-2022-4632 | Auto Upload Images cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-21 | Fix |
| CVE-2022-4631 | WP-Ban ban-options.php cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-21 | |
| CVE-2022-4630 | Sensitive Cookie without HttpOnly Flag in lirantal/Daloradius | 5.3v3.1 | 0.6% | 2022-12-21 | |
| CVE-2022-4617 | Cross-site scripting (XSS) Reflected in microweber/microweber | 6.1v3.1 | 0.6% | 2022-12-21 | Fix |
| CVE-2022-4287 | Devolutions Remote Desktop Manager local application lock feature authentication bypass | 8.8v3.1 | 1.0% | 2022-12-21 | Fix |
| CVE-2022-3189 | Dataprobe iBoot-PDU FW server-side request forgery | 5.3v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-3188 | Dataprobe iBoot-PDU FW incorrect authorization | 5.3v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-3187 | Dataprobe iBoot-PDU FW improper authorization | 5.3v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-3186 | Dataprobe iBoot-PDU FW improper access control | 7.5v3.1 | 0.6% | 2022-12-21 | |
| CVE-2022-3185 | Dataprobe iBoot-PDU FW information disclosure | 5.3v3.1 | 0.5% | 2022-12-21 | |
| CVE-2022-3184 | Dataprobe iBoot-PDU FW path traversal | 9.8v3.1 | 11.6% | 2022-12-21 | Emerging Threats |
| CVE-2022-3183 | Dataprobe iBoot-PDU FW OS command injection | 9.8v3.1 | 1.6% | 2022-12-21 | |
| CVE-2022-47629 | GnuPG libksba integer overflow | 9.8v3.1 | 1.6% | 2022-12-20 | Fix |
| CVE-2022-47578 | Zoho Manageengine Device Control Plus authentication bypass | 7.8v3.1 | 1.0% | 2022-12-20 | Fix |
| CVE-2022-47577 | Zoho ManageEngine Device Control Plus USB restriction policy vulnerability | 7.8v3.1 | 1.1% | 2022-12-20 | Fix |
| CVE-2022-47551 | Apiman has potential permissions bypass | 6.5v3.1 | 0.6% | 2022-12-20 | Fix |
| CVE-2022-46914 | TP-Link Tl-wa801nd V1 denial of service | 8.8v3.1 | 1.0% | 2022-12-20 | |
| CVE-2022-46912 | TP-Link TL-WR841N denial of service | 8.8v3.1 | 1.0% | 2022-12-20 | |
| CVE-2022-46910 | TP-Link Tl-wa901nd V1 denial of service | 8.8v3.1 | 1.0% | 2022-12-20 | |
| CVE-2022-46771 | IBM UrbanCode Deploy (UCD) cross-site scripting | 4.6CNA v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46551 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46550 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46549 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46548 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46547 | Tenda F1203 buffer overflow | 7.5NVD v3.1 | 0.9% | 2022-12-20 | |
| CVE-2022-46546 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46545 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46544 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46543 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46542 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46541 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46540 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46539 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46538 | Tenda F1203 OS command injection | 9.8v3.1 | 2.4% | 2022-12-20 | |
| CVE-2022-46537 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46536 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46535 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46534 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46533 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46532 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46531 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46530 | Tenda F1203 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46435 | TP-Link Tl-wr941nd V2 denial of service | 8.8v3.1 | 1.0% | 2022-12-20 | |
| CVE-2022-46434 | TP-Link Tl-wa7510n V1 denial of service | 7.5v3.1 | 0.9% | 2022-12-20 | |
| CVE-2022-46432 | TP-Link Tl-wr743nd V1 man-in-the-middle | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-46430 | TP-Link Tl-wr740n V1 download without integrity check | 4.8v3.1 | 0.3% | 2022-12-20 | |
| CVE-2022-46428 | TP-Link Tl-wr1043nd V1 download without integrity check | 4.8v3.1 | 0.3% | 2022-12-20 | |
| CVE-2022-46424 | NETGEAR XWN5001 man-in-the-middle | 8.1v3.1 | 0.8% | 2022-12-20 | Fix |
| CVE-2022-46423 | NETGEAR WNR2000 download without integrity check | 8.1v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46422 | NETGEAR WNR2000 insufficient verification of data authenticity | 4.8v3.1 | 0.3% | 2022-12-20 | Fix |
| CVE-2022-46421 | Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params | 9.8v3.1 | 3.2% | 2022-12-20 | Fix |
| CVE-2022-46328 | Huawei HarmonyOS input verification vulnerabilities in some mobile phones | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46327 | Huawei HarmonyOS vulnerability of configuration issues in some mobile phones | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46326 | Huawei HarmonyOS out-of-bounds memory write in some mobile phones | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46325 | Huawei HarmonyOS out-of-bounds memory write in some mobile phones | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46324 | Huawei HarmonyOS out-of-bounds memory write in some mobile phones | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46323 | Huawei HarmonyOS out-of-bounds memory write in some mobile phones | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46322 | Huawei HarmonyOS out-of-bounds memory write in some mobile phones | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46321 | Huawei HarmonyOS permission verification vulnerability in the Wi-Fi module | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46320 | Huawei HarmonyOS out-of-bounds read vulnerability in the kernel module | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46319 | Huawei HarmonyOS vulnerability of no boundary determination during fingerprint calibration | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46318 | Huawei HarmonyOS vulnerability of functional logic errors in the HAware module | 5.3v3.1 | 0.3% | 2022-12-20 | Fix |
| CVE-2022-46317 | Huawei HarmonyOS out-of-bounds read vulnerability in the power consumption module | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46316 | Huawei HarmonyOS input verification vulnerability in the fingerprint module | 9.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-46315 | Huawei HarmonyOS vulnerability of defects introduced in the design process in the Profile SDK | 7.5v3.1 | 0.6% | 2022-12-20 | Fix |
| CVE-2022-46314 | Huawei HarmonyOS improper resource release | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46313 | Huawei HarmonyOS improper authentication | 5.3v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46312 | Huawei HarmonyOS unstrict permission verification vulnerability in the app management module | 7.5v3.1 | 0.3% | 2022-12-20 | Fix |
| CVE-2022-46311 | Huawei HarmonyOS use-after-free | 7.5v3.1 | 0.3% | 2022-12-20 | Fix |
| CVE-2022-46310 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-46139 | TP-Link TL-WR940N V4 insufficient verification of data authenticity | 6.5v3.1 | 0.3% | 2022-12-20 | |
| CVE-2022-46076 | D-Link Dir-869ax incorrect authorization | 7.5v3.1 | 1.1% | 2022-12-20 | |
| CVE-2022-46020 | WBCE_CMS unrestricted file upload | 9.8v3.1 | 39.0% | 2022-12-20 | Nuclei |
| CVE-2022-45942 | Baijiacms OS command injection | 8.8v3.1 | 22.0% | 2022-12-20 | |
| CVE-2022-45666 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-45665 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-20 | |
| CVE-2022-44643 | Grafana Enterprise Metrics label-based improper access control | 8.8v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-43875 | IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-20 | Fix |
| CVE-2022-43872 | IBM Financial Transaction Manager information disclosure | 5.3CNA v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-43382 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2022-12-20 | Fix |
| CVE-2022-42046 | Wfs Heaven Burns Red improper privilege management | 7.8v3.1 | 0.5% | 2022-12-20 | Exploit codeFix |
| CVE-2022-41599 | Huawei HarmonyOS return value vulnerability in system services | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-41596 | Huawei HarmonyOS vulnerability of serialization/deserialization mismatch in system tools | 7.5v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-41591 | Huawei HarmonyOS path traversal vulnerability in the backup module | 7.5v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-41590 | Huawei HarmonyOS improper authentication | 5.5v3.1 | 0.1% | 2022-12-20 | Fix |
| CVE-2022-40624 | pfSense Pfblockerng OS command injection | 9.8v3.1 | 18.3% | 2022-12-20 | NucleiExploit codeFix |
| CVE-2022-39304 | ghinstallation returns app JWT in error responses | 5.0CNA v3.1 | 0.4% | 2022-12-20 | Fix |
| CVE-2022-39166 | IBM Security Guardium information disclosure | 4.4CNA v3.1 | 0.6% | 2022-12-20 | Fix |
| CVE-2022-38873 | D-Link Dap-2310 insufficient verification of data authenticity | 7.5v3.1 | 0.5% | 2022-12-20 | |
| CVE-2022-38733 | OnCommand Insight authentication bypass | 8.6v3.1 | 0.5% | 2022-12-20 | Fix |
| CVE-2022-38391 | IBM Spectrum Control information disclosure | 5.1CNA v3.1 | 0.3% | 2022-12-20 | Fix |
| CVE-2022-25940 | lite-server denial of service (DoS) | 7.5v3.1 | 1.2% | 2022-12-20 | |
| CVE-2022-25931 | easy-static-server directory traversal | 7.5v3.1 | 1.3% | 2022-12-20 | |
| CVE-2022-25904 | safe-eval prototype pollution | 9.8v3.1 | 0.9% | 2022-12-20 | |
| CVE-2022-25171 | p4 command injection | 9.8v3.1 | 2.4% | 2022-12-20 | Fix |
| CVE-2022-23542 | OpenFGA authorization bypass | 7.7CNA v3.1 | 1.0% | 2022-12-20 | Fix |
| CVE-2022-23537 | PJSIP vulnerable to heap buffer overflow when decoding STUN message | 6.5CNA v3.1 | 1.1% | 2022-12-20 | Fix |
| CVE-2022-4619 | Sidebar Widgets by CodeLights WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2022-12-20 | |
| CVE-2022-4515 | Exuberant Ctags OS command injection | 7.8NVD v3.1 | 0.6% | 2022-12-20 | Fix |
| CVE-2022-47549 | TrustedFirmware OP-TEE improper signature verification | 6.4v3.1 | 0.4% | 2022-12-19 | |
| CVE-2022-47547 | Protocol Gossipsub improper preservation of permissions | 5.3v3.1 | 0.5% | 2022-12-19 | |
| CVE-2022-47512 | SolarWinds Hybrid Cloud Observability (HCO)/ SolarWinds Platform sensitive data disclosure | 5.5CNA v3.1 | 0.2% | 2022-12-19 | Fix |
| CVE-2022-47500 | Apache Helix: Open redirect | 6.1v3.1 | 1.1% | 2022-12-19 | Fix |
| CVE-2022-46403 | Microchip Pic Lightblue Explorer Demo improper exception handling | 8.6v3.1 | 0.8% | 2022-12-19 | Fix |
| CVE-2022-46402 | Microchip Pic Lightblue Explorer Demo improper integrity check validation | 6.5v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-46401 | Microchip Pic Lightblue Explorer Demo improper input validation | 5.4v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-46400 | Microchip Pic Lightblue Explorer Demo improper authentication | 5.4v3.1 | 0.6% | 2022-12-19 | Fix |
| CVE-2022-46399 | Microchip Pic Lightblue Explorer Demo resource exhaustion | 7.5v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-46288 | Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM open redirect | 6.1v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-46287 | Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-45041 | Rockoa Xinhu SQL injection | 7.5v3.1 | 0.8% | 2022-12-19 | |
| CVE-2022-44940 | Patchelf out-of-bounds read | 9.1v3.1 | 1.0% | 2022-12-19 | Fix |
| CVE-2022-44755 | HCL Notes KeyView Lotus Ami Pro filter stack-based buffer overflow | 9.8CNA v3.1 | 0.7% | 2022-12-19 | |
| CVE-2022-44754 | HCL Domino KeyView Lotus Ami Pro filter stack-based buffer overflow | 9.8CNA v3.1 | 0.7% | 2022-12-19 | |
| CVE-2022-44753 | HCL Notes KeyView WordPerfect filter stack-based buffer overflow | 9.8CNA v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-44752 | HCL Domino KeyView WordPerfect filter stack-based buffer overflow | 9.8CNA v3.1 | 0.7% | 2022-12-19 | |
| CVE-2022-44751 | HCL Notes KeyView Lotus Ami Pro filter stack-based buffer overflow | 9.8CNA v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-44750 | HCL Domino KeyView Lotus Ami Pro parser out-of-bounds write | 9.8CNA v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-44488 | Adobe Experience Manager AEM URL redirection to untrusted site security feature bypass | 3.5CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44474 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44471 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44470 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44467 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44466 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44465 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44463 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-44456 | Contec CONPROSYS HMI System (CHS) OS command injection | 9.8v3.1 | 69.9% | 2022-12-19 | Fix |
| CVE-2022-44109 | Pdftojson out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-19 | |
| CVE-2022-44108 | Pdftojson out-of-bounds write | 9.8v3.1 | 1.0% | 2022-12-19 | |
| CVE-2022-43887 | IBM Cognos Analytics information disclosure | 5.3CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-43883 | IBM Cognos Analytics log injection | 6.5CNA v3.1 | 0.6% | 2022-12-19 | Fix |
| CVE-2022-43486 | Buffalo WXR-5700AX7S hidden functionality | 6.8v3.1 | 0.4% | 2022-12-19 | |
| CVE-2022-43466 | Buffalo WXR-5700AX7S OS command injection | 6.8v3.1 | 0.8% | 2022-12-19 | |
| CVE-2022-43443 | Buffalo WXR-11000XE12 OS command injection | 8.8v3.1 | 0.8% | 2022-12-19 | |
| CVE-2022-43289 | Entropymine Deark out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-19 | |
| CVE-2022-42947 | Autodesk Maya out-of-bounds write | 7.8v3.1 | 0.3% | 2022-12-19 | Fix |
| CVE-2022-42946 | Autodesk Maya out-of-bounds read | 7.1v3.1 | 0.3% | 2022-12-19 | Fix |
| CVE-2022-42945 | DWG TrueView uncontrolled search path | 7.8v3.1 | 0.3% | 2022-12-19 | Fix |
| CVE-2022-42453 | HCL BigFix Platform is affected by insufficient warnings | 6.9CNA v3.1 | 0.3% | 2022-12-19 | |
| CVE-2022-42365 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42364 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42362 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42357 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42356 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42354 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42352 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42350 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42349 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42348 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42346 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-42345 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-41993 | Japan Construction Information Center DENSHI NYUSATSU CORE SYSTEM cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-41418 | BlogEngine.NET path traversal | 7.2v3.1 | 1.2% | 2022-12-19 | |
| CVE-2022-40743 | Apache Traffic Server: Security issues with the xdebug plugin | 6.1v3.1 | 1.1% | 2022-12-19 | Fix |
| CVE-2022-40607 | IBM Spectrum Scale directory traversal | 6.8CNA v3.1 | 0.9% | 2022-12-19 | Fix |
| CVE-2022-40435 | Employee Performance Evaluation System cross-site scripting | 4.8v3.1 | 0.4% | 2022-12-19 | |
| CVE-2022-40434 | Softr cross-site scripting | 9.8v3.1 | 1.1% | 2022-12-19 | |
| CVE-2022-39160 | IBM Cognos Analytics cross-site scripting | 6.1CNA v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2022-38708 | IBM Cognos Analytics server-side request forgery | 6.5CNA v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2022-38662 | HCL Digital Experience is susceptible to open redirects | 6.1CNA v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2022-38659 | HCL BigFix Platform is affected by insecure credential storage | 6.0CNA v3.1 | 0.1% | 2022-12-19 | Fix |
| CVE-2022-38653 | HCL Digital Experience is susceptible to cross-site scripting (XSS) | 2.0CNA v3.1 | 0.3% | 2022-12-19 | Fix |
| CVE-2022-37392 | Apache Traffic Server: Improperly reading the client requests | 5.3v3.1 | 1.1% | 2022-12-19 | Fix |
| CVE-2022-35695 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-35693 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-32749 | Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins | 7.5v3.1 | 1.3% | 2022-12-19 | Fix |
| CVE-2022-31683 | Concourse insecure direct object reference | 5.4v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2022-30679 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-28173 | Hikvision DS-3WF0AC-2NT improper access control | 9.1CNA v3.1 | 0.6% | 2022-12-19 | Fix |
| CVE-2022-23543 | mesosoi silverwaregames-io-issue-tracker HTML attributes when attaching a YouTube link to the post | 6.3CNA v3.1 | 0.3% | 2022-12-19 | Fix |
| CVE-2022-23536 | cortexproject cortex alertmanager can expose local files content via specially crafted config | 6.5CNA v3.1 | 0.8% | 2022-12-19 | Fix |
| CVE-2022-4615 | Cross-site scripting (XSS) Reflected in openemr/openemr | 6.1NVD v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-4614 | Cross-site scripting (XSS) Stored in alagrede/znote-app | 5.4v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2022-4613 | Click Studios Passwordstate Browser Extension Provisioning improper authorization | 6.5v3.1 | 0.7% | 2022-12-19 | |
| CVE-2022-4612 | Click Studios Passwordstate insufficiently protected credentials | 6.5v3.1 | 0.9% | 2022-12-19 | |
| CVE-2022-4611 | Click Studios Passwordstate hard-coded credentials | 5.3v3.1 | 1.2% | 2022-12-19 | Exploit code |
| CVE-2022-4610 | Click Studios Passwordstate cryptographic weakness | 5.5v3.1 | 0.2% | 2022-12-19 | |
| CVE-2022-4609 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-4427 | SQL injection via OTRS Search API | 6.5CNA v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-4125 | Popup Manager WordPress plugin unauthenticated stored XSS | 4.3NVD v3.1 | 0.3% | 2022-12-19 | |
| CVE-2022-4124 | Popup Manager WordPress plugin unauthenticated arbitrary Popup deletion | 4.3NVD v3.1 | 0.3% | 2022-12-19 | |
| CVE-2022-4112 | Quizlord WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-19 | |
| CVE-2022-4108 | Wholesale Market for WooCommerce WordPress plugin Admin+ arbitrary file download | 4.9NVD v3.1 | 0.8% | 2022-12-19 | Fix |
| CVE-2022-4107 | SMSA Shipping for WooCommerce WordPress plugin Subscriber+ arbitrary file download | 6.5NVD v3.1 | 0.4% | 2022-12-19 | Fix |
| CVE-2022-4106 | Wholesale Market for WooCommerce WordPress plugin unauthenticated arbitrary file download | 7.5NVD v3.1 | 0.9% | 2022-12-19 | Fix |
| CVE-2022-4063 | InPost Gallery WordPress plugin unauthenticated LFI to RCE | 9.8NVD v3.1 | 9.6% | 2022-12-19 | NucleiExploit codeFix |
| CVE-2022-4061 | JobBoardWP WordPress plugin unauthenticated arbitrary file upload | 7.5NVD v3.1 | 1.4% | 2022-12-19 | Exploit codeFix |
| CVE-2022-4058 | Photo Gallery WordPress plugin stored XSS via CSRF | 5.4NVD v3.1 | 0.2% | 2022-12-19 | Fix |
| CVE-2022-4050 | JoomSport WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 4.8% | 2022-12-19 | NucleiFix |
| CVE-2022-4024 | Pie Register WordPress plugin unauthenticated arbitrary user deletion | 6.5NVD v3.1 | 0.3% | 2022-12-19 | Fix |
| CVE-2022-3987 | Responsive Lightbox2 WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3986 | WP Stripe Checkout WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3985 | Videojs HTML5 Player WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3984 | Flowplayer Video Player WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3983 | Checkout for PayPal WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3961 | Directorist WordPress plugin Subscriber+ sensitive information disclosure | 6.5NVD v3.1 | 0.7% | 2022-12-19 | Fix |
| CVE-2022-3937 | Easy Video Player WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3877 | Click Studios Passwordstate URL field cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-19 | |
| CVE-2022-3876 | Click Studios Passwordstate browser extension API authorization bypass | 6.5v3.1 | 0.8% | 2022-12-19 | |
| CVE-2022-3875 | Click Studios Passwordstate API authentication bypass by assumed-immutable data | 7.5v3.1 | 1.0% | 2022-12-19 | |
| CVE-2022-3832 | External Media WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-19 | Fix |
| CVE-2022-3775 | grub2 out-of-bounds write | 7.1NVD v3.1 | 1.0% | 2022-12-19 | Fix |
| CVE-2022-3752 | Rockwell Automation GuardLogix and ControlLogix controllers vulnerable to denial of service Attack | 8.6CNA v3.1 | 1.3% | 2022-12-19 | |
| CVE-2022-47521 | Linux kernel out-of-bounds write | 7.8v3.1 | 0.3% | 2022-12-18 | Fix |
| CVE-2022-47520 | Linux kernel out-of-bounds read | 7.1NVD v3.1 | 0.3% | 2022-12-18 | Fix |
| CVE-2022-47519 | Linux kernel out-of-bounds write | 7.8v3.1 | 0.3% | 2022-12-18 | Fix |
| CVE-2022-47518 | Linux kernel out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2022-12-18 | Fix |
| CVE-2022-47517 | Drachtio-server off-by-one error | 7.5v3.1 | 1.5% | 2022-12-18 | |
| CVE-2022-47516 | Drachtio-server reachable assertion | 7.5v3.1 | 1.6% | 2022-12-18 | Fix |
| CVE-2022-47515 | Drachtio-server improper null termination | 7.5v3.1 | 1.2% | 2022-12-18 | |
| CVE-2022-47514 | Xml-rpc.net An XML external entity injection | 8.8v3.1 | 1.2% | 2022-12-18 | Fix |
| CVE-2022-4607 | 3D City Database OGC Web Feature Service XML external entity reference | 9.8v3.1 | 0.7% | 2022-12-18 | Fix |
| CVE-2022-4606 | PHP remote file inclusion in flatpressblog/FlatPress | 9.8v3.1 | 35.4% | 2022-12-18 | Fix |
| CVE-2022-4605 | Cross-site scripting (XSS) Stored in flatpressblog/FlatPress | 5.4v3.1 | 0.5% | 2022-12-18 | Fix |
| CVE-2022-4604 | Wp-english-wp-admin Plugin english-wp-admin.php register_endpoints cross-site request forgery | 8.8v3.1 | 0.3% | 2022-12-18 | Fix |
| CVE-2022-4603 | ppp pppdump pppdump.c dumpppp array index | 6.5v3.1 | 0.8% | 2022-12-18 | Fix |
| CVE-2022-4602 | Shoplazza LifeStyle Review Flow cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-4601 | Shoplazza LifeStyle Shipping/Member Discount/Icon cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-4600 | Shoplazza LifeStyle Product Carousel cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-4599 | Shoplazza LifeStyle Product cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-4598 | Shoplazza LifeStyle Announcement cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-4597 | Shoplazza LifeStyle Create Product v2_products cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-18 | |
| CVE-2022-4596 | Shoplazza Add Blog Post cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-18 | |
| CVE-2022-4595 | django-openipam exposed_hosts.html cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-4594 | drogatkin TJWS2 WarRoller.java deployWar path traversal | 9.8v3.1 | 0.6% | 2022-12-18 | |
| CVE-2022-4593 | retra-system cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-18 | |
| CVE-2022-4592 | luckyshot CRMx index.php commentdelete SQL injection | 9.8v3.1 | 0.5% | 2022-12-18 | |
| CVE-2022-23531 | DataDog guarddog arbitrary file write when scanning a specially-crafted local PyPI package | 5.8CNA v3.1 | 0.7% | 2022-12-17 | Fix |
| CVE-2022-23488 | BigBlueButton vulnerable to insertion of sensitive information into sent data | 6.5CNA v3.1 | 0.6% | 2022-12-17 | Fix |
| CVE-2022-4591 | mschaef toto email parameter cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-17 | Fix |
| CVE-2022-4590 | mschaef toto cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-17 | |
| CVE-2022-4589 | cyface Terms and Conditions Module views.py returnTo redirect | 6.1v3.1 | 0.5% | 2022-12-17 | Fix |
| CVE-2022-4588 | Boston Sleep slice Layout cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-17 | Fix |
| CVE-2022-4587 | Opencaching Deutschland oc-server3 Login page login.tpl cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-17 | |
| CVE-2022-4586 | Opencaching Deutschland oc-server3 Cachelist cachelists.tpl cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-17 | |
| CVE-2022-4585 | Opencaching Deutschland oc-server3 Cookie start.tpl cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-17 | |
| CVE-2022-4584 | Axiomatic Bento4 mp42aac heap-based overflow | 8.8v3.1 | 1.0% | 2022-12-17 | |
| CVE-2022-4583 | jLEMS JUtil.java unpackJar path traversal | 8.8v3.1 | 0.8% | 2022-12-17 | |
| CVE-2022-4582 | starter-public-edition-4 cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-17 | Fix |
| CVE-2022-4581 | 1j01 mind-map app.coffee cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-17 | |
| CVE-2022-4572 | UBI Reader UBIFS file output.py ubireader_extract_files path traversal | 7.1v3.1 | 0.5% | 2022-12-17 | Fix |
| CVE-2022-4567 | Improper access control in openemr/openemr | 8.1v3.1 | 0.6% | 2022-12-17 | Fix |
| CVE-2022-47377 | SICK SIM2000ST (LFT PPC) missing authentication | 9.8v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-47210 | NETGEAR Nighthawk WiFi6 Router OS command injection | 7.8NVD v3.1 | 0.4% | 2022-12-16 | |
| CVE-2022-47209 | NETGEAR Nighthawk WiFi6 Router improper authentication | 8.8NVD v3.1 | 0.5% | 2022-12-16 | |
| CVE-2022-47208 | NETGEAR Nighthawk WiFi6 Router OS command injection | 8.8NVD v3.1 | 1.2% | 2022-12-16 | Emerging Threats |
| CVE-2022-46870 | Apache Zeppelin: Stored XSS in note permissions | 5.4v3.1 | 1.1% | 2022-12-16 | Fix |
| CVE-2022-46670 | Rockwell Automation MicroLogix 1100 and 1400 vulnerable to cross-site scripting Attack | 7.1CNA v3.1 | 0.6% | 2022-12-16 | |
| CVE-2022-46137 | Aero CMS path traversal | 7.5v3.1 | 1.4% | 2022-12-16 | |
| CVE-2022-46135 | Aero CMS unrestricted file upload | 7.2v3.1 | 1.2% | 2022-12-16 | |
| CVE-2022-46109 | Tenda AC10 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-16 | |
| CVE-2022-45796 | Sharp Multifunction Printer command injection | 7.2NVD v3.1 | 3.3% | 2022-12-16 | Fix |
| CVE-2022-44502 | Adobe Illustrator Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-44500 | Adobe Illustrator out-of-bound read memory leak | 5.5CNA v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-44499 | Adobe Illustrator out-of-bound read memory leak | 5.5CNA v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-44498 | Adobe Illustrator out-of-bound read memory leak | 5.5CNA v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-44473 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-44469 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-44468 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-44462 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-42544 | Android AddAppNetworksFragment.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42543 | Android fdt_ro.c out-of-bounds read | 4.4v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-42542 | Android phNxpNciHal.cc out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42535 | Android MmsSmsProvider.java information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42534 | Android shared-mem-smcall.c privilege escalation | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42532 | Android Pixel firmware out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42531 | Android gs_ldfw_load.c privilege escalation | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42530 | Android Pixel firmware out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42529 | Android memory corruption | 9.8v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-42527 | Android cd_SsCodec.c crash | 7.5v3.1 | 0.8% | 2022-12-16 | Fix |
| CVE-2022-42526 | Android radio_hal_utils.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42525 | Android ril_service_1_6.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42524 | Android sms_PduCodec.c out-of-bounds read | 7.5v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-42523 | Android ril_service_1_6.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42522 | Android miscservice.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42521 | Android wlandata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42520 | Android serviceinterface.cpp use-after-free | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42519 | Android cdmasmsdata.cpp memory corruption | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42518 | Android smsdata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42517 | Android miscservice.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42516 | Android protocolsimbuilderlegacy.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42515 | Android miscservice.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42514 | Android protocolimsbuilder.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42513 | Android protocolembmsbuilder.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42512 | Android vsimdata.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42511 | Android embmsdata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42510 | Android requestdata.cpp out-of-bounds read | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42509 | Android callreqdata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42508 | Android protocolcallbuilder.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42507 | Android protocolsimbuilder.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42506 | Android simdata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42505 | Android protocolmiscbuilder.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42504 | Android callreqdata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42503 | Android protocolmiscbuilder.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-42502 | Android simdata.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-42501 | Android util.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-42367 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-42366 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-42360 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-42351 | Adobe Experience Manager AEM incorrect authorization security feature bypass | 4.3CNA v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-42343 | Adobe Campaign Classic server-side request forgery arbitrary file system read | 6.5CNA v3.1 | 1.4% | 2022-12-16 | Fix |
| CVE-2022-41992 | PowerISO memory corruption | 7.8v3.1 | 0.5% | 2022-12-16 | |
| CVE-2022-41972 | Contiki-NG contains null pointer dereference in BLE L2CAP module | 2.9CNA v3.1 | 0.2% | 2022-12-16 | |
| CVE-2022-41964 | BigBlueButton contains Response leaks in anonymous polls | 5.7CNA v3.1 | 0.6% | 2022-12-16 | Fix |
| CVE-2022-41963 | BigBlueButton contains improper preservation of permissions for whiteboard | 2.7CNA v3.1 | 0.4% | 2022-12-16 | Fix |
| CVE-2022-41962 | BigBlueButton contains incorrect authorization for setting emoji status | 2.7CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-41961 | BigBlueButton subject to Ineffective user bans | 4.3CNA v3.1 | 0.3% | 2022-12-16 | Fix |
| CVE-2022-41960 | BigBlueButton contains DoS via failed authToken validation | 4.3CNA v3.1 | 0.4% | 2022-12-16 | Fix |
| CVE-2022-38756 | Micro Focus GroupWise Web information disclosure | 4.3CNA v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-38106 | Cross-site scripting vulnerability in Serv-U Web client | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-37832 | Mutiny hard-coded credentials | 9.8v3.1 | 0.6% | 2022-12-16 | |
| CVE-2022-36223 | Emby cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-16 | |
| CVE-2022-35696 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-35694 | Adobe Experience Manager AEM reflected XSS arbitrary code execution | 5.4CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-31708 | VMware vRealize Operations (vROps) missing authorization | 4.9v3.1 | 0.8% | 2022-12-16 | Fix |
| CVE-2022-31707 | VMware vRealize Operations (vROps) improper privilege management | 7.2v3.1 | 1.0% | 2022-12-16 | Fix |
| CVE-2022-26582 | Paxtechnology Paydroid OS command injection | 7.8v3.1 | 0.9% | 2022-12-16 | |
| CVE-2022-26581 | Paxtechnology Paydroid missing authorization | 6.8v3.1 | 0.3% | 2022-12-16 | |
| CVE-2022-26580 | Paxtechnology Paydroid OS command injection | 6.8v3.1 | 1.7% | 2022-12-16 | |
| CVE-2022-26579 | Paxtechnology Paydroid insufficient verification of data authenticity | 6.0v3.1 | 0.2% | 2022-12-16 | |
| CVE-2022-25628 | Symantec Identity Governance and Administration XML external entity injection | 8.8NVD v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-25627 | Symantec Identity Governance and Administration remote command execution | 6.7NVD v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-25626 | Symantec Identity Governance and Administration forced browsing | 5.3NVD v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-23530 | GuardDog vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package | 5.8CNA v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-23490 | bigbluebutton improper access control to polling votes | 4.3CNA v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-20610 | Android cellular modem firmware out-of-bounds read | 8.8v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-20609 | Android Pixel cellular firmware out-of-bounds read | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20608 | Android Pixel cellular firmware out-of-bounds read | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20607 | Android the Pixel cellular firmware out-of-bounds write | 8.8v3.1 | 0.9% | 2022-12-16 | Exploit codeFix |
| CVE-2022-20606 | Android SAEMM_RadioMessageCodec.c out-of-bounds read | 4.9v3.1 | 0.8% | 2022-12-16 | Fix |
| CVE-2022-20605 | Android SAECOMM_Utility.c out-of-bounds read | 7.5v3.1 | 0.8% | 2022-12-16 | Fix |
| CVE-2022-20604 | Android SAECOMM_DbManagement.c out-of-bounds read | 5.5v3.1 | 0.3% | 2022-12-16 | Fix |
| CVE-2022-20603 | Android RohcDeCompContextOfRbId.cpp out-of-bounds write | 7.2v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-20602 | Android memory corruption | 7.5v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-20601 | Android memory corruption | 7.5v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-20600 | Android TBD out-of-bounds write | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20599 | Android Pixel firmware privilege escalation | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20598 | Android media.c elevation of privilege | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20597 | Android ppmpu.c elevation of privilege | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20596 | Android WirelessCharger.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20595 | Android WirelessCharger.cpp out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20594 | Android WirelessCharger.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20593 | Android BufferDescriptor.h out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20592 | Android drm_fw.c information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20591 | Android ppmpu.c information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20590 | Android drm_access_control.c information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20589 | Android drm_access_control.c improper input validation | 4.4v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20588 | Android sysmmu.c elevation of privilege | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20587 | Android drm_fw.c elevation of privilege | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20586 | Android drm_access_control.c elevation of privilege | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20585 | Android drm_access_control.c elevation of privilege | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20584 | Android shared_mem.c code execution | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20583 | Android drm_fw.c out-of-bounds write | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20582 | Android drm_fw.c out-of-bounds write | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20581 | Android the Pixel camera driver use-after-free | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20580 | Android ufdt_overlay.c out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20579 | Android ril_service_legacy.cpp memory corruption | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20578 | Android ril_service_legacy.cpp memory corruption | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20577 | Android wlandata.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20576 | Android rilapplication.cpp out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20575 | Android drm_fw.c out-of-bounds read | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20574 | Android drm_fw.c out-of-bounds read | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20572 | Android dm-verity-target.c privilege escalation | 6.7NVD v3.1 | 0.6% | 2022-12-16 | Fix |
| CVE-2022-20571 | Android dm-android-verity.c privilege escalation | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20570 | Android memory corruption | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20569 | Android thermal_sysfs.c out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |