CVE-2022 records published in December 2022
Page two of three: records 1,001 to 2,000 of the 2,200 published in December 2022, newest first. The first page carries the figures for December 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-20568 | Android (TBD) privilege escalation | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20567 | Android l2tp_ppp.c use-after-free | 6.4NVD v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20566 | Android l2cap_core use-after-free | 7.8NVD v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20564 | Android ufdt_convert.c out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20563 | Android ufdt_convert out-of-bounds read | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20562 | Android ap_input_processor.c information disclosure | 3.3v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20561 | Android aud_hal_tunnel.c memory corruption | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20560 | Android memory corruption | 7.5v3.1 | 0.3% | 2022-12-16 | Fix |
| CVE-2022-20559 | Android PermissionManager.java information disclosure | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20558 | Android DeviceCapabilityListener.java privilege escalation | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20557 | Android MessageQueueBase.h out-of-bounds read | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20556 | Android NetworkProviderSettings.java privilege escalation | 3.3v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20555 | Android ufdt_convert.c out-of-bounds read | 4.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20554 | Android InputDevice.cpp out-of-bounds read | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20553 | Android LogAccessDialogActivity.java privilege escalation | 6.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20552 | Android btif_a2dp_sink.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20550 | Android externally controlled resource reference | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20549 | Android KeyMintUtils.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20548 | Android EqualizerEffect.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20547 | Android AdapterService.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20546 | Android Effect.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20545 | Android MediaControlPanel.java crash | 7.5v3.1 | 0.6% | 2022-12-16 | Fix |
| CVE-2022-20544 | Android ManageApplications.java privilege escalation | 4.4v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20543 | Android multiple locations crash | 2.3v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20541 | Android phNxpNciHal.cc out-of-bounds read | 4.2v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20540 | Android use-after-free | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20539 | Android Effect.cpp out-of-bounds write | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20538 | Android RoleService.java information disclosure | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20537 | Android WifiScanModeActivity.java privilege escalation | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20536 | Android RcsService.java privilege escalation | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20535 | Android WifiManager.java information disclosure | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20533 | Android WifiSlice.java privilege escalation | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20531 | Google Android Telecom information disclosure | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20530 | Android strings.xml insecure permissions | 5.3v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-20529 | Android WifiDialogActivity.java privilege escalation | 2.4v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20528 | Android out-of-bounds read | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20527 | Android halcore.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20526 | Android CanvasContext.cpp out-of-bounds write | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20525 | Android PhoneInterfaceManager.java privilege escalation | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20524 | Android Vibrator.cpp arbitrary code execution | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20523 | Android incfs.cpp out-of-bounds read | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20522 | Android missing authorization | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20521 | Android sdp_utils.cc crash | 5.0v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20520 | Android various files privilege escalation | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20519 | Android AddAppNetworksActivity.java privilege escalation | 3.3v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20518 | Android MmsSmsProvider.java information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20517 | Android MmsSmsProvider.java information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20516 | Android rw_t3t.cc out-of-bounds read | 7.5v3.1 | 0.8% | 2022-12-16 | Fix |
| CVE-2022-20515 | Android AccountTypePreferenceLoader.java information disclosure | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20514 | Android use-after-free | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20513 | Android CryptoPlugin.cpp out-of-bounds read | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20512 | Android Task.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20511 | Android missing authorization | 5.5v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20510 | Android DevicePolicyManagerService.java information disclosure | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20509 | Android MessageQueueBase.h out-of-bounds write | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20508 | Android ConfigureWifiSettings.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20507 | Android UwbEventManager.java arbitrary code execution | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20506 | Android missing authorization | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20505 | Android CallLogProvider.java insecure permissions | 6.7v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-20504 | Android missing authorization | 6.7v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20503 | Android WifiDppConfiguratorActivity.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-20199 | Android NfcService.java information disclosure | 5.5v3.1 | 0.1% | 2022-12-16 | Fix |
| CVE-2022-4566 | y_project RuoYi GenController SQL injection | 9.8v3.1 | 0.8% | 2022-12-16 | |
| CVE-2022-4565 | Dromara HuTool cn.HuTool.core.util.ZipUtil.java resource consumption | 7.5v3.1 | 0.9% | 2022-12-16 | Fix |
| CVE-2022-4564 | University of Central Florida Materia API controller api.php before cross-site request forgery | 8.8v3.1 | 0.4% | 2022-12-16 | Fix |
| CVE-2022-4563 | Freedom of the Press SecureDrop gpg-agent.conf symlink | 7.8v3.1 | 0.3% | 2022-12-16 | |
| CVE-2022-4561 | SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-16 | |
| CVE-2022-4560 | Joget wflow-core UniversalTheme.java getInternalJsCssLib cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-4559 | INEX IPX-Manager list.foil.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-16 | Fix |
| CVE-2022-4558 | Alinto SOGo Folder/Mail NSString+Utilities.m cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-16 | Fix |
| CVE-2022-4556 | Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross-site scripting | 6.1NVD v3.1 | 0.6% | 2022-12-16 | Fix |
| CVE-2022-4555 | WP Shamsi WordPress plugin missing authorization to arbitrary plugin deactivation | 5.3v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-4326 | Trellix xAgent permission bypass | 5.5CNA v3.1 | 0.2% | 2022-12-16 | Fix |
| CVE-2022-4130 | Red Hat Satellite HTTP Referer header handling vulnerability | 4.5v3.1 | 0.7% | 2022-12-16 | Fix |
| CVE-2022-3166 | Rockwell Automation MicroLogix 1100 and 1400 web server denial of service | 7.5CNA v3.1 | 0.7% | 2022-12-16 | |
| CVE-2022-3157 | Rockwell Automation GuardLogix and ControlLogix controllers vulnerable to denial of service Attack | 8.6CNA v3.1 | 1.5% | 2022-12-16 | Fix |
| CVE-2022-3109 | FFmpeg null pointer dereference | 7.5NVD v3.1 | 1.5% | 2022-12-16 | Fix |
| CVE-2022-2966 | Delta Electronics DOPSoft out-of-bounds read | 7.5v3.1 | 0.4% | 2022-12-16 | Fix |
| CVE-2022-46768 | File name information disclosure vulnerability in Zabbix Web Service Report Generation | 5.9CNA v3.1 | 47.8% | 2022-12-15 | Fix |
| CVE-2022-46702 | Apple iOS and iPadOS information disclosure | 5.5v3.1 | 0.2% | 2022-12-15 | Fix |
| CVE-2022-46701 | Apple tvOS arbitrary code execution | 7.8v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-46700 | Apple tvOS out-of-bounds write | 8.8v3.1 | 1.2% | 2022-12-15 | Fix |
| CVE-2022-46699 | Apple tvOS out-of-bounds write | 8.8v3.1 | 1.2% | 2022-12-15 | Fix |
| CVE-2022-46698 | Apple iCloud logic flaw | 6.5v3.1 | 0.9% | 2022-12-15 | Fix |
| CVE-2022-46697 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-46696 | Apple tvOS out-of-bounds write | 8.8v3.1 | 1.2% | 2022-12-15 | Fix |
| CVE-2022-46695 | Apple tvOS handling of URLs spoofing | 6.5v3.1 | 1.3% | 2022-12-15 | Fix |
| CVE-2022-46694 | Apple tvOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-46693 | Apple iCloud out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-46692 | Apple iCloud insufficient verification of data authenticity | 5.5v3.1 | 0.2% | 2022-12-15 | Fix |
| CVE-2022-46691 | Apple tvOS out-of-bounds write | 8.8v3.1 | 1.5% | 2022-12-15 | Fix |
| CVE-2022-46690 | Apple tvOS out-of-bounds write | 7.8v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2022-46689 | Apple macOS race condition | 7.0v3.1 | 47.9% | 2022-12-15 | Exploit codeFix |
| CVE-2022-46634 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.1% | 2022-12-15 | |
| CVE-2022-46631 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.1% | 2022-12-15 | |
| CVE-2022-46393 | Arm mbed TLS out-of-bounds read | 9.8v3.1 | 1.2% | 2022-12-15 | Fix |
| CVE-2022-46392 | Arm mbed TLS observable discrepancy | 5.3v3.1 | 0.8% | 2022-12-15 | Fix |
| CVE-2022-45969 | Alist vulnerable to path traversal | 9.8v3.1 | 1.2% | 2022-12-15 | Fix |
| CVE-2022-45338 | Exactsoftware Exact Synergy profile picture upload function arbitrary file upload | 7.8v3.1 | 0.2% | 2022-12-15 | |
| CVE-2022-45033 | oretnom23 Expense Tracker cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-44588 | Cryptocurrency Widgets Pack WordPress plugin SQL injection | 9.8v3.1 | 2.2% | 2022-12-15 | NucleiFix |
| CVE-2022-44236 | Zed-3 VOIP Simplicity Asg weak password requirements | 9.8v3.1 | 0.8% | 2022-12-15 | |
| CVE-2022-44235 | Zed-3 VOIP Simplicity Asg cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-15 | |
| CVE-2022-42867 | Apple tvOS use-after-free | 8.8v3.1 | 34.6% | 2022-12-15 | Fix |
| CVE-2022-42866 | Apple tvOS information disclosure | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42865 | Apple tvOS improper access control | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42864 | Apple macOS race condition | 7.0NVD v3.1 | 0.9% | 2022-12-15 | Fix |
| CVE-2022-42863 | Apple tvOS out-of-bounds write | 8.8v3.1 | 1.1% | 2022-12-15 | Fix |
| CVE-2022-42862 | Apple macOS improper access control | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42861 | Apple macOS sandbox escape | 8.8v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42859 | Apple macOS improper access control | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42856 | Apple iOS type confusion | 8.8v3.1 | 8.5% | 2022-12-15 | KEVKCVFix |
| CVE-2022-42855 | Apple tvOS improper privilege management | 7.1v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2022-42854 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42853 | Apple macOS improper access control | 5.5v3.1 | 0.2% | 2022-12-15 | Fix |
| CVE-2022-42852 | Apple tvOS information disclosure | 6.5v3.1 | 0.9% | 2022-12-15 | Fix |
| CVE-2022-42851 | Apple tvOS out-of-bounds read | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42850 | Apple iOS and iPadOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-42849 | Apple tvOS improper privilege management | 7.8v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42848 | Apple tvOS logic flaw | 7.8v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42847 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-42846 | Apple iOS and iPadOS denial of service | 5.5v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-42845 | Apple macOS out-of-bounds write | 7.2v3.1 | 1.6% | 2022-12-15 | Fix |
| CVE-2022-42844 | Apple iOS and iPadOS sandbox escape | 8.6v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-42843 | Apple tvOS information disclosure | 5.5NVD v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-42842 | Apple macOS out-of-bounds write | 9.8v3.1 | 2.2% | 2022-12-15 | Fix |
| CVE-2022-42841 | Apple macOS type confusion | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-42840 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-42837 | Apple macOS arbitrary code execution | 9.8v3.1 | 2.1% | 2022-12-15 | Fix |
| CVE-2022-42821 | Apple macOS logic flaw | 5.5v3.1 | 3.9% | 2022-12-15 | Fix |
| CVE-2022-42805 | Apple macOS integer overflow | 7.8v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-40373 | FeehiCMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-40004 | ThingsBoard cross-site scripting | 9.6v3.1 | 0.9% | 2022-12-15 | |
| CVE-2022-40002 | FeehiCMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-40001 | FeehiCMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-40000 | FeehiCMS cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-32948 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.2% | 2022-12-15 | Fix |
| CVE-2022-32945 | Apple macOS improper access control | 4.3v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-32943 | Apple macOS out-of-bounds read | 5.3v3.1 | 0.7% | 2022-12-15 | Fix |
| CVE-2022-32942 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.4% | 2022-12-15 | Fix |
| CVE-2022-32916 | Apple iOS out-of-bounds read | 5.5v3.1 | 0.2% | 2022-12-15 | Fix |
| CVE-2022-32860 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-32833 | Apple iOS insecure storage of sensitive information | 5.3v3.1 | 0.6% | 2022-12-15 | Fix |
| CVE-2022-32763 | lansweeper incomplete denylist | 6.1NVD v3.1 | 1.1% | 2022-12-15 | |
| CVE-2022-32573 | lansweeper AssetActions.aspx addDoc functionality path traversal | 8.8NVD v3.1 | 3.7% | 2022-12-15 | |
| CVE-2022-32531 | Apache BookKeeper: Java Client Uses Connection to host that Failed Hostname Verification | 5.9v3.1 | 1.0% | 2022-12-15 | Fix |
| CVE-2022-29517 | lansweeper path traversal | 8.8NVD v3.1 | 57.6% | 2022-12-15 | |
| CVE-2022-29511 | lansweeper path traversal | 6.5NVD v3.1 | 2.5% | 2022-12-15 | |
| CVE-2022-28703 | lansweeper stored cross-site scripting | 5.4NVD v3.1 | 1.1% | 2022-12-15 | |
| CVE-2022-27498 | lansweeper path traversal | 6.5NVD v3.1 | 38.3% | 2022-12-15 | |
| CVE-2022-23526 | Helm contains denial of service through schema file | 5.3CNA v3.1 | 0.9% | 2022-12-15 | Fix |
| CVE-2022-23525 | Helm vulnerable to denial of service via null pointer dereference | 5.3CNA v3.1 | 0.9% | 2022-12-15 | Fix |
| CVE-2022-23524 | Helm vulnerable to denial of service through string value parsing | 5.3CNA v3.1 | 0.8% | 2022-12-15 | Fix |
| CVE-2022-23507 | informalsystems tendermint-rs light client verification not taking into account chain ID | 5.4CNA v3.1 | 0.3% | 2022-12-15 | Fix |
| CVE-2022-23474 | editor.js contains code injection | 6.1NVD v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2022-22063 | Qualcomm Snapdragon memory corruption in Core | 8.4CNA v3.1 | 0.3% | 2022-12-15 | Exploit codeFix |
| CVE-2022-4527 | collective.task table.py AssignedGroupColumn cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2022-4526 | django-photologue Default template photo_detail.html cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2022-4525 | National Sleep Research Resource Sleepdata.org cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-15 | Fix |
| CVE-2022-4524 | Roots Soil Plugin CleanUpModule.php language_attributes cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-15 | Fix |
| CVE-2022-4523 | vexim2 cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-4522 | CalendarXP cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-15 | |
| CVE-2022-4521 | WSO2 carbon-registry request parameter cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-15 | Fix |
| CVE-2022-4520 | WSO2 carbon-registry Advanced Search advancedSearchForm-ajaxprocessor.jsp cross-site scripting | 6.1v3.1 | 0.7% | 2022-12-15 | Fix |
| CVE-2022-4519 | WP User WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-12-15 | |
| CVE-2022-4514 | Opencaching Deutschland oc-server3 varset.inc.php cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-15 | |
| CVE-2022-4513 | European Environment Agency eionet.contreg cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-15 | |
| CVE-2022-4511 | RainyGao DocSys path traversal | 7.5v3.1 | 0.8% | 2022-12-15 | |
| CVE-2022-4506 | Unrestricted upload of file with dangerous type in openemr/openemr | 8.8v3.1 | 1.0% | 2022-12-15 | Fix |
| CVE-2022-4505 | Authorization bypass through user-controlled key in openemr/openemr | 4.3NVD v3.1 | 0.7% | 2022-12-15 | Fix |
| CVE-2022-4504 | Improper input validation in openemr/openemr | 7.5v3.1 | 0.9% | 2022-12-15 | Fix |
| CVE-2022-4503 | Cross-site scripting (XSS) Generic in openemr/openemr | 6.1v3.1 | 0.6% | 2022-12-15 | Fix |
| CVE-2022-4502 | Cross-site scripting (XSS) Reflected in openemr/openemr | 6.1NVD v3.1 | 0.7% | 2022-12-15 | Fix |
| CVE-2022-3427 | Corner Ad WordPress plugin cross-site request forgery | 6.5NVD v3.1 | 0.7% | 2022-12-15 | Fix |
| CVE-2022-2536 | Transposh WordPress Translation plugin authorization bypass | 7.5NVD v3.1 | 1.4% | 2022-12-15 | |
| CVE-2022-47411 | Newsletter subscriber management (fp_newsletter) TYPO3 extension leaks subscriber data | 7.5NVD v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-47410 | Newsletter subscriber management (fp_newsletter) TYPO3 extension leaks subscriber data | 7.5NVD v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-47409 | Fp Newsletter improper authorization | 7.5NVD v3.1 | 0.6% | 2022-12-14 | Fix |
| CVE-2022-47408 | Multiple vulnerabilities in extension Newsletter subscriber management (fp_newsletter) | 9.1v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-47407 | TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension Master-quiz (fp_masterquiz) | 6.5v3.1 | 0.4% | 2022-12-14 | Fix |
| CVE-2022-47406 | Change Password For Frontend Users TYPO3 vulnerable to insufficient session expiration | 9.8v3.1 | 0.4% | 2022-12-14 | Fix |
| CVE-2022-46997 | Passhunt hidden functionality | 9.8v3.1 | 1.1% | 2022-12-14 | |
| CVE-2022-46996 | Vsphere Selfuse hidden functionality | 9.8v3.1 | 1.3% | 2022-12-14 | |
| CVE-2022-46609 | Python3-restfulapi hidden functionality | 9.8v3.1 | 1.4% | 2022-12-14 | |
| CVE-2022-46443 | Bangresto SQL injection | 8.8v3.1 | 37.7% | 2022-12-14 | Nuclei |
| CVE-2022-46344 | xorg-x11-server out-of-bounds read | 8.8NVD v3.1 | 2.8% | 2022-12-14 | Fix |
| CVE-2022-46343 | xorg-x11-server use-after-free | 8.8NVD v3.1 | 2.5% | 2022-12-14 | Fix |
| CVE-2022-46342 | xorg-x11-server use-after-free | 8.8NVD v3.1 | 1.4% | 2022-12-14 | Fix |
| CVE-2022-46341 | xorg-x11-server out-of-bounds write | 8.8NVD v3.1 | 2.6% | 2022-12-14 | Fix |
| CVE-2022-46340 | xorg-x11-server out-of-bounds write | 8.8NVD v3.1 | 2.6% | 2022-12-14 | Fix |
| CVE-2022-46256 | Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub pages | 8.8v3.1 | 1.9% | 2022-12-14 | Fix |
| CVE-2022-46255 | GitHub Enterprise Server Pages path traversal | 9.8v3.1 | 1.4% | 2022-12-14 | Fix |
| CVE-2022-46127 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.8% | 2022-12-14 | |
| CVE-2022-46126 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.8% | 2022-12-14 | |
| CVE-2022-46125 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.8% | 2022-12-14 | |
| CVE-2022-46124 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46123 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46122 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46121 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46120 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46119 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46118 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46117 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2022-12-14 | |
| CVE-2022-46074 | Helmet Store Showroom cross-site request forgery | 8.8v3.1 | 0.5% | 2022-12-14 | |
| CVE-2022-46073 | Helmet Store Showroom cross-site scripting | 6.1v3.1 | 1.2% | 2022-12-14 | Nuclei |
| CVE-2022-46072 | Helmet Store Showroom SQL injection | 9.8v3.1 | 1.1% | 2022-12-14 | |
| CVE-2022-46071 | Helmet Store Showroom Site SQL injection | 9.8v3.1 | 4.3% | 2022-12-14 | Nuclei |
| CVE-2022-44910 | Quarkslab Binbloom heap-based buffer overflow | 7.8v3.1 | 0.4% | 2022-12-14 | |
| CVE-2022-44898 | ASUS AURA SYNC out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-14 | Fix |
| CVE-2022-44832 | D-Link DIR-3040 command injection | 9.8v3.1 | 3.9% | 2022-12-14 | |
| CVE-2022-42141 | deltaww DX-2100-L1-CN cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-14 | |
| CVE-2022-42140 | deltaww DX-2100-L1-CN OS command injection | 7.2v3.1 | 2.4% | 2022-12-14 | |
| CVE-2022-42139 | deltaww DVW-W02W2-E2 OS command injection | 8.8v3.1 | 18.2% | 2022-12-14 | |
| CVE-2022-40264 | ICONICS and Mitsubishi Electric GENESIS64 path traversal | 6.3CNA v3.1 | 0.3% | 2022-12-14 | Fix |
| CVE-2022-38488 | Logrocket-oauth2-example SQL injection | 9.8v3.1 | 14.1% | 2022-12-14 | Fix |
| CVE-2022-37155 | SPIP remote code execution | 8.8v3.1 | 40.0% | 2022-12-14 | Fix |
| CVE-2022-34271 | Apache Atlas: Zip path traversal in import functionality | 8.8v3.1 | 1.4% | 2022-12-14 | Fix |
| CVE-2022-31705 | VMware ESXi out-of-bounds write | 8.2v3.1 | 1.6% | 2022-12-14 | Exploit codeFix |
| CVE-2022-31703 | vRealize Log Insight (vRLI) path traversal | 7.5v3.1 | 1.8% | 2022-12-14 | Fix |
| CVE-2022-31702 | VMware vRealize Network Insight (vRNI) command injection | 9.8v3.1 | 1.6% | 2022-12-14 | Fix |
| CVE-2022-31701 | VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM) missing authentication | 5.3v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-31700 | VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM) remote code execution | 7.2v3.1 | 1.1% | 2022-12-14 | Fix |
| CVE-2022-31358 | Proxmox Virtual Environment reflected cross-site scripting | 9.0v3.1 | 1.3% | 2022-12-14 | |
| CVE-2022-24377 | cycle-import-check command injection | 9.8v3.1 | 2.3% | 2022-12-14 | Fix |
| CVE-2022-23741 | Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access | 7.2v3.1 | 1.1% | 2022-12-14 | Fix |
| CVE-2022-23527 | zmartzone mod_auth_openidc open redirect in oidc_validate_redirect_url | 4.7CNA v3.1 | 0.9% | 2022-12-14 | Fix |
| CVE-2022-23520 | rails-html-sanitizer contains an incomplete fix for an XSS | 6.1CNA v3.1 | 1.1% | 2022-12-14 | Fix |
| CVE-2022-23519 | Possible XSS vulnerability with certain configurations of rails-html-sanitizer | 7.2CNA v3.1 | 1.0% | 2022-12-14 | Fix |
| CVE-2022-23518 | Improper neutralization of data URIs allows XSS in rails-html-sanitizer | 6.1CNA v3.0 | 0.9% | 2022-12-14 | Fix |
| CVE-2022-23517 | Inefficient regular expression complexity in rails-html-sanitizer | 7.5CNA v3.1 | 1.5% | 2022-12-14 | Fix |
| CVE-2022-23516 | Uncontrolled recursion in Loofah | 7.5CNA v3.1 | 1.1% | 2022-12-14 | Fix |
| CVE-2022-23515 | Improper neutralization of data URIs may allow XSS in Loofah | 6.1CNA v3.1 | 0.8% | 2022-12-14 | Fix |
| CVE-2022-23514 | Inefficient regular expression complexity in Loofah | 7.5CNA v3.1 | 1.8% | 2022-12-14 | Fix |
| CVE-2022-23512 | Metersphere is vulnerable to path injection | 7.7CNA v3.1 | 0.8% | 2022-12-14 | Fix |
| CVE-2022-23504 | TYPO3 contains sensitive information disclosure | 5.7CNA v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-23503 | TYPO3 vulnerable to arbitrary code execution via Form Framework | 7.5CNA v3.1 | 0.8% | 2022-12-14 | Fix |
| CVE-2022-23502 | TYPO3 contains insufficient session expiration after Password Reset | 5.4CNA v3.1 | 0.4% | 2022-12-14 | Fix |
| CVE-2022-23501 | TYPO3 vulnerable to improper authentication in Frontend Login | 5.9CNA v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-23500 | TYPO3 subject to uncontrolled recursion resulting in denial of service | 5.9CNA v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-4501 | Mega Addons For WPBakery Page Builder WordPress plugin authenticated (Subscriber+) settings update | 6.5NVD v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-4495 | collective.dms.basecontent column.py renderCell cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-4494 | bspkrs MCPMappingViewer ZIP File RemoteZipHandler.java extractZip path traversal | 9.8v3.1 | 0.5% | 2022-12-14 | |
| CVE-2022-4493 | scifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversal | 9.8v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-4440 | Google Chrome Profiles use-after-free | 8.8v3.1 | 0.6% | 2022-12-14 | Fix |
| CVE-2022-4439 | Google Chrome Aura use-after-free | 8.8v3.1 | 0.6% | 2022-12-14 | Fix |
| CVE-2022-4438 | Google Chrome Blink Frames use-after-free | 8.8v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-4437 | Google Chrome Mojo IPC use-after-free | 8.8v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-4436 | Google Chrome Blink Media use-after-free | 8.8v3.1 | 0.6% | 2022-12-14 | Fix |
| CVE-2022-4410 | Permalink Manager Lite WordPress plugin authenticated stored cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-14 | Fix |
| CVE-2022-4283 | xorg-x11-server use-after-free | 7.8NVD v3.1 | 1.0% | 2022-12-14 | Fix |
| CVE-2022-3917 | Motorola Moto e20 improper access control | 4.6CNA v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3590 | WP for WordPress unauthenticated blind SSRF via DNS Rebinding | 5.9NVD v3.1 | 3.4% | 2022-12-14 | NucleiExploit codeFix |
| CVE-2022-3115 | kernel null pointer dereference | 5.5NVD v3.1 | 0.3% | 2022-12-14 | Fix |
| CVE-2022-3114 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3113 | kernel null pointer dereference | 5.5NVD v3.1 | 0.7% | 2022-12-14 | Fix |
| CVE-2022-3112 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3111 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3110 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3108 | kernel unchecked return value | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3107 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3106 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3105 | kernel null pointer dereference | 5.5NVD v3.1 | 0.2% | 2022-12-14 | Fix |
| CVE-2022-3104 | kernel null pointer dereference | 5.5NVD v3.1 | 0.3% | 2022-12-14 | Fix |
| CVE-2022-3073 | Quaonos Schema ST4 example templates prone to XSS | 6.1CNA v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-2601 | grub2 grub_font_construct_glyph buffer overflow | 8.6NVD v3.1 | 0.5% | 2022-12-14 | Fix |
| CVE-2022-47213 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-47212 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-47211 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-46834 | SICK RFU65x Firmware weak cryptographic algorithm | 6.5v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46833 | SICK RFU63x Firmware weak cryptographic algorithm | 6.5v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46832 | SICK RFU62x Firmware weak cryptographic algorithm | 6.5v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46664 | Siemens Mendix Workflow Commons improper access control | 8.1CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-46404 | Atos Unify Openscape 4000 Assistant command injection | 9.8v3.1 | 1.8% | 2022-12-13 | Fix |
| CVE-2022-46381 | Niceforyou Linear Emerge E3 Access Control cross-site scripting | 6.1v3.1 | 1.7% | 2022-12-13 | NucleiExploit code |
| CVE-2022-46364 | Apache CXF server-side request forgery | 9.8v3.1 | 2.4% | 2022-12-13 | Exploit codeFix |
| CVE-2022-46363 | Apache CXF directory listing / code exfiltration | 7.5v3.1 | 1.2% | 2022-12-13 | Fix |
| CVE-2022-46355 | Siemens SCALANCE X204RNA (HSR) information disclosure | 7.5v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-46354 | Siemens SCALANCE X204RNA (HSR) improper access control | 5.3v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-46353 | Siemens SCALANCE X204RNA (HSR) insufficient randomness | 9.8v3.1 | 1.0% | 2022-12-13 | Fix |
| CVE-2022-46352 | Siemens SCALANCE X204RNA (HSR) denial of service | 7.5v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-46351 | Siemens SCALANCE X204RNA (HSR) denial of service | 5.5v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-46350 | Siemens SCALANCE X204RNA (HSR) cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-46349 | Siemens Parasolid out-of-bounds read | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-46348 | Siemens Parasolid out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46347 | Siemens Parasolid out-of-bounds write | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-46346 | Siemens Parasolid out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46345 | Siemens Parasolid out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46265 | Siemens Polarion ALM host header injection | 5.4CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-46160 | Tuleap dashboards vulnerable to incorrect authorization | 4.3CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-46144 | Siemens SCALANCE SC622-2C improper resource control | 7.1CNA v4.0 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-46143 | Siemens RUGGEDCOM RM1224 LTE(4G) EU improper quantity validation | 5.1CNA v4.0 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-46142 | Siemens RUGGEDCOM RM1224 LTE(4G) EU recoverable password storage | 5.2CNA v4.0 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-46140 | Siemens RUGGEDCOM RM1224 LTE(4G) EU weak cryptographic algorithm | 7.1CNA v4.0 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-46062 | Gym Management System cross-site request forgery | 4.5v3.1 | 0.3% | 2022-12-13 | |
| CVE-2022-46061 | Aero CMS clickjacking | 6.1v3.1 | 0.5% | 2022-12-13 | |
| CVE-2022-46059 | Aero CMS cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-13 | |
| CVE-2022-46058 | Aero CMS cross-site scripting | 4.8v3.1 | 0.5% | 2022-12-13 | |
| CVE-2022-46051 | Aero CMS SQL injection | 7.2v3.1 | 0.9% | 2022-12-13 | |
| CVE-2022-46047 | Aero CMS SQL injection | 4.9v3.1 | 0.8% | 2022-12-13 | |
| CVE-2022-45937 | Siemens APOGEE PXC Compact (BACnet) improper access control | 8.8CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-45936 | Siemens Mendix Email Connector improper access control | 8.1v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-45871 | F-Secure Atlant denial of service (DoS) | 7.5v3.1 | 0.4% | 2022-12-13 | |
| CVE-2022-45693 | Jettison out-of-bounds write | 7.5v3.1 | 1.4% | 2022-12-13 | Fix |
| CVE-2022-45690 | HuTool hutool-json stack overflow | 7.5v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-45689 | HuTool hutool-json vulnerable to memory exhaustion | 7.5v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-45688 | HuTool json stack overflow | 7.5NVD v3.1 | 1.3% | 2022-12-13 | Exploit codeFix |
| CVE-2022-45685 | Jettison out-of-bounds write | 7.5v3.1 | 1.4% | 2022-12-13 | Fix |
| CVE-2022-45484 | Siemens JT2Go out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-45044 | Siemens SIPROTEC 5 6MD84 (CP300) resource exhaustion | 5.3CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-45028 | Arris NVG443B cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-13 | |
| CVE-2022-45005 | IP-COM EW9 OS command injection | 9.8v3.1 | 5.4% | 2022-12-13 | |
| CVE-2022-44874 | wasm3 out-of-bounds write | 5.5v3.1 | 0.3% | 2022-12-13 | |
| CVE-2022-44731 | Siemens SIMATIC WinCC OA argument injection | 5.4CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44713 | Microsoft Outlook for Mac spoofing | 7.5CNA v3.1 | 1.5% | 2022-12-13 | Fix |
| CVE-2022-44710 | Microsoft Windows DirectX Graphics Kernel elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-44708 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.9% | 2022-12-13 | Fix |
| CVE-2022-44707 | Microsoft Windows Kernel denial of service | 6.5CNA v3.1 | 2.6% | 2022-12-13 | Fix |
| CVE-2022-44704 | Microsoft Windows System Monitor (Sysmon) elevation of privilege | 7.8CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-44702 | Microsoft Windows Terminal remote code execution | 7.8CNA v3.1 | 1.4% | 2022-12-13 | Fix |
| CVE-2022-44699 | Microsoft Azure Network Watcher Agent security feature bypass | 5.5CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44698 | Microsoft Defender SmartScreen security feature bypass | 5.4CNA v3.1 | 76.3% | 2022-12-13 | KEVKCVFix |
| CVE-2022-44697 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44696 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-44695 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-44694 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-44693 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 2.0% | 2022-12-13 | Fix |
| CVE-2022-44692 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-44691 | Microsoft Office OneNote remote code execution | 7.8CNA v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-44690 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 82.1% | 2022-12-13 | Fix |
| CVE-2022-44689 | Microsoft Windows Subsystem for Linux (WSL2) Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44688 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 1.2% | 2022-12-13 | Fix |
| CVE-2022-44687 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-44683 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 8.2% | 2022-12-13 | Fix |
| CVE-2022-44682 | Microsoft Windows Hyper-V denial of service | 6.8CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-44681 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44680 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44679 | Microsoft Windows Graphics component information disclosure | 6.5CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44678 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44677 | Microsoft Windows Projected File System elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44676 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.1% | 2022-12-13 | Fix |
| CVE-2022-44675 | Microsoft Windows Bluetooth driver elevation of privilege | 7.8CNA v3.1 | 5.0% | 2022-12-13 | Fix |
| CVE-2022-44674 | Microsoft Windows Bluetooth driver information disclosure | 5.5CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-44673 | Microsoft Windows Client Server Run-time Subsystem (CSRSS) elevation of privilege | 7.0CNA v3.1 | 5.2% | 2022-12-13 | Fix |
| CVE-2022-44671 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-44670 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.2% | 2022-12-13 | Fix |
| CVE-2022-44669 | Microsoft Windows Error Reporting elevation of privilege | 7.0CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-44668 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-44667 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-44666 | Microsoft Windows Contacts remote code execution | 7.8CNA v3.1 | 41.4% | 2022-12-13 | Emerging ThreatsExploit codeFix |
| CVE-2022-44636 | Samsung T-ksu2eakuc authentication bypass by spoofing | 4.6v3.1 | 0.2% | 2022-12-13 | |
| CVE-2022-44575 | Siemens PLM Help Server cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-13 | |
| CVE-2022-44303 | Resque-scheduler Resque Scheduler reflected XSS in Delayed Jobs view | 6.1v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-43996 | csaf_provider csaf-poc/csaf_distribution cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-43724 | Siemens SICAM PAS/PQS cleartext transmission of sensitive information | 9.8v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-43723 | Siemens SICAM PAS/PQS improper type validation | 7.5v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-43722 | Siemens SICAM PAS/PQS uncontrolled search path | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-43517 | Siemens Simcenter STAR-CCM+ incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-41915 | Netty vulnerable to HTTP response splitting from assigning header value iterator | 6.5CNA v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-41653 | Daikin SVMPC1 hard-coded password | 9.8v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-41563 | TIBCO JasperReports Server stored XSS | 9.0CNA v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-41562 | TIBCO JasperReports Server XSS issue on Roles | 8.4CNA v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-41561 | TIBCO JasperReports Server RCE | 9.1CNA v3.1 | 1.5% | 2022-12-13 | Fix |
| CVE-2022-41288 | Siemens JT2Go resource exhaustion | 3.3CNA v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-41287 | Siemens JT2Go divide by zero | 3.3CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41286 | Siemens JT2Go out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41285 | Siemens JT2Go use-after-free | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41284 | Siemens JT2Go out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41283 | Siemens JT2Go out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41282 | Siemens JT2Go out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41281 | Siemens JT2Go out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41280 | Siemens JT2Go null pointer dereference | 3.3CNA v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-41279 | Siemens JT2Go null pointer dereference | 3.3CNA v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-41278 | Siemens JT2Go null pointer dereference | 3.3CNA v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-41275 | SAP Solution Manager (Enterprise Search) open redirect | 6.1CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-41274 | SAP Disclosure Management incorrect authorization | 6.5CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-41273 | SAP Sourcing and SAP Contract Lifecycle Management open redirect | 4.3CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-41272 | SAP NetWeaver Process Integration SQL injection | 9.9CNA v3.1 | 1.1% | 2022-12-13 | Fix |
| CVE-2022-41271 | SAP NetWeaver Process Integration SQL injection | 9.4CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-41268 | SAP Business Planning and Consolidation improper privilege management | 8.5CNA v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-41267 | SAP BusinessObjects Business Intelligence Platform unrestricted file upload | 9.9CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-41266 | SAP Commerce Webservices cross-site scripting | 8.0CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-41264 | SAP BASIS code injection | 8.8CNA v3.1 | 0.9% | 2022-12-13 | Fix |
| CVE-2022-41127 | Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central remote code execution | 8.5CNA v3.1 | 1.6% | 2022-12-13 | Fix |
| CVE-2022-41121 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 1.1% | 2022-12-13 | Fix |
| CVE-2022-41115 | Microsoft Edge (Chromium-based) update elevation of privilege | 6.6CNA v3.1 | 2.0% | 2022-12-13 | Fix |
| CVE-2022-41094 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-41089 | NET Framework remote code execution | 7.8CNA v3.1 | 1.2% | 2022-12-13 | Fix |
| CVE-2022-41077 | Microsoft Windows Fax Compose form elevation of privilege | 7.8CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-41076 | Microsoft PowerShell remote code execution | 8.5CNA v3.1 | 60.5% | 2022-12-13 | Fix |
| CVE-2022-41074 | Microsoft Windows Graphics component information disclosure | 5.5CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-38628 | Niceforyou Linear Emerge E3 Access Control session fixation | 6.1v3.1 | 0.9% | 2022-12-13 | |
| CVE-2022-38355 | Daikin SVMPC1 information disclosure | 5.5NVD v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-38124 | Secomea SiteManager unwanted debug tool | 5.7CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-33268 | Qualcomm Snapdragon buffer over-read in Bluetooth host | 8.2CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-33238 | Qualcomm Snapdragon loop with unreachable exit condition in WLAN | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-33235 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 8.2CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-31699 | VMware ESXi, VMware Cloud Foundation out-of-bounds write | 3.3v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-31698 | VMware vCenter Server, VMware Cloud Foundation denial of service | 5.3v3.1 | 47.8% | 2022-12-13 | Fix |
| CVE-2022-31697 | VMware vCenter Server, VMware Cloud Foundation cleartext storage of sensitive information | 5.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-31696 | VMware ESXi, VMware Cloud Foundation out-of-bounds write | 8.8v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-29580 | Path traversal in Android Google Search App | 8.9CNA v3.1 | 0.4% | 2022-12-13 | |
| CVE-2022-27581 | SICK RFU61x Firmware weak cryptographic algorithm | 6.5v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway authentication bypass | 9.8CNA v3.1 | 6.7% | 2022-12-13 | KEVExploit codeFix |
| CVE-2022-26806 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-26805 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-26804 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-25712 | Qualcomm Snapdragon out-of-bounds access due to ION buffer size mismatch | 6.7CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25711 | Qualcomm Snapdragon improper validation of array index in Camera | 6.7CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25702 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-25698 | Qualcomm Snapdragon improper input validation in SPI Buses | 8.4CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25697 | Qualcomm Snapdragon improper input validation in i2c Buses | 8.4CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25695 | Qualcomm Snapdragon improper validation of array index in MODEM | 8.4CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25692 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-25691 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-25689 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-25685 | Qualcomm Snapdragon improper authentication in Modem | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-25682 | Qualcomm Snapdragon use of out-of-range pointer offset in MODEM | 8.4CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25681 | Qualcomm Snapdragon improper access control in KERNEL | 8.4CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25677 | Qualcomm Snapdragon use-after-free in DIAG | 6.7CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25675 | Qualcomm Snapdragon reachable assertion in Data Modem | 5.5CNA v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-25673 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-25672 | Qualcomm Snapdragon reachable assertion in MODEM | 7.5CNA v3.1 | 0.4% | 2022-12-13 | Fix |
| CVE-2022-24480 | Outlook for Android elevation of privilege | 6.3CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-23523 | rust-vmm linux-loader vulnerable to out-of-bounds read | 4.0CNA v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-23505 | Passport-wsfed-saml2 vulnerable to authentication bypass for WSFed authentication | 5.3CNA v3.1 | 0.8% | 2022-12-13 | Fix |
| CVE-2022-23499 | TYPO3 html-sanitizer cross-site scripting Protection bypass in HTML Sanitizer | 6.1CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-23473 | Tuleap MediaWiki standalone readers can also edit pages | 4.3CNA v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-20611 | Android DeletePackageHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20502 | Android entrypoint_utils-inl.h use-after-free | 5.5v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20501 | Android EnableAccountPreferenceActivity.java privilege escalation | 7.3v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20500 | Android ShortcutPackage.java crash | 5.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20498 | Android fdt_ro.c out-of-bounds read | 4.4v3.1 | 1.1% | 2022-12-13 | Fix |
| CVE-2022-20497 | Android information disclosure | 4.6v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20496 | Android use-after-free | 5.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20495 | Android AccessibilityManager.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20491 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20488 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20487 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20486 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20485 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20484 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20483 | Android integer underflow | 7.5v3.1 | 0.6% | 2022-12-13 | Fix |
| CVE-2022-20482 | Android NotificationManager.java denial of service | 5.5v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20480 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20479 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20478 | Android NotificationChannel.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20477 | Android privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20476 | Android PackageManager.java denial of service | 5.5v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20475 | Android ResetTargetTaskHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20474 | Android Parcel.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Exploit codeFix |
| CVE-2022-20473 | Android LocaleListCache.cpp out-of-bounds read | 9.8v3.1 | 8.9% | 2022-12-13 | Exploit codeFix |
| CVE-2022-20472 | Android LocaleListCache.cpp out-of-bounds read | 9.8v3.1 | 6.6% | 2022-12-13 | Fix |
| CVE-2022-20471 | Android NxpMfcReader.cc out-of-bounds read | 5.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20470 | Android AppWidgetServiceImpl.java privilege escalation | 7.8v3.1 | 0.2% | 2022-12-13 | Exploit codeFix |
| CVE-2022-20469 | Android avct_lcb_act.cc out-of-bounds write | 8.8v3.1 | 0.2% | 2022-12-13 | Fix |
| CVE-2022-20468 | Android bnep_api.cc out-of-bounds read | 6.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20466 | Android information disclosure | 5.5v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20449 | Android UserManagerService.java denial of service | 4.4v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20442 | Android ReviewPermissionsActivity.java privilege escalation | 7.3v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-20411 | Android avdt_msg.cc out-of-bounds write | 8.8v3.1 | 1.9% | 2022-12-13 | Fix |
| CVE-2022-20240 | Android AppOpsManager.java information disclosure | 2.3v3.1 | 0.1% | 2022-12-13 | Fix |
| CVE-2022-4456 | falling-fruit cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-13 | |
| CVE-2022-4455 | sproctor Php-calendar index.php cross-site scripting | 6.1v3.1 | 0.6% | 2022-12-13 | |
| CVE-2022-4454 | m0ver bible-online Search search.java query SQL injection | 9.8v3.1 | 0.5% | 2022-12-13 | |
| CVE-2022-4446 | PHP remote file inclusion in tsolucio/Corebos | 9.8v3.1 | 1.3% | 2022-12-13 | Fix |
| CVE-2022-4444 | ipti br.Tag cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-13 | |
| CVE-2022-4223 | pgadmin4 vulnerable to code injection | 8.8NVD v3.1 | 80.1% | 2022-12-13 | NucleiFix |
| CVE-2022-4207 | Image Hover Effects Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-13 | Fix |
| CVE-2022-4171 | demon image annotation WordPress plugin improper input Restriction validation | 7.5v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-4098 | Wiesemann and Theis: Multiple products prone to missing authentication through spoofing | 8.0v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-3996 | OpenSSL X.509 Policy Constraints Double Locking | 7.5v3.1 | 1.2% | 2022-12-13 | Fix |
| CVE-2022-2951 | Altair HyperView Player improper array index validation | 7.8v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-2950 | Altair HyperView Player uninitialized resource use | 7.8v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-2949 | Altair HyperView Player uninitialized resource use | 7.8v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-2947 | Altair HyperView Player memory corruption | 7.8v3.1 | 0.3% | 2022-12-13 | Fix |
| CVE-2022-2757 | Kingspan TMS300 CS improper authentication | 9.1v3.1 | 0.7% | 2022-12-13 | Fix |
| CVE-2022-2660 | Delta Electronics Industrial Automation DIALink hard-coded cryptographic key | 7.5NVD v3.1 | 0.6% | 2022-12-13 | |
| CVE-2022-46908 | SQLite safe mode protection vulnerability | 7.3NVD v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-46906 | Websoft Hcm cross-site scripting | 5.4v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-46905 | Websoft Hcm cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-46904 | Websoft Hcm cross-site scripting | 5.4v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-46903 | Websoft Hcm cross-site scripting | 5.4v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-46688 | Jenkins Sonar Gerrit Plugin vulnerable to cross-site request forgery | 6.5v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-46687 | Cross-site scripting in Jenkins Spring Config Plugin | 5.4v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-46686 | Jenkins Custom Build Properties Plugin vulnerable to cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-46685 | Jenkins Gitea Plugin vulnerable to cleartext transmission of sensitive information | 4.3v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-46684 | Stored XSS vulnerability in Jenkins Checkmarx Plugin | 5.4v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-46683 | Jenkins Google Login Plugin open redirect | 6.1v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-46682 | Jenkins Plot Plugin XML external entity Reference | 9.8v3.1 | 0.9% | 2022-12-12 | Fix |
| CVE-2022-45997 | Tenda W15E buffer overflow | 7.2v3.1 | 0.9% | 2022-12-12 | |
| CVE-2022-45996 | Tenda W15E OS command injection | 7.2v3.1 | 2.3% | 2022-12-12 | |
| CVE-2022-45980 | Tenda AX12 cross-site request forgery | 8.8v3.1 | 7.5% | 2022-12-12 | |
| CVE-2022-45979 | Tenda AX12 out-of-bounds write | 7.5v3.1 | 0.8% | 2022-12-12 | |
| CVE-2022-45977 | Tenda AX12 OS command injection | 8.8v3.1 | 2.1% | 2022-12-12 | |
| CVE-2022-45970 | Alist cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-12 | |
| CVE-2022-45968 | AList vulnerable to improper preservation of permissions | 8.8v3.1 | 1.0% | 2022-12-12 | Fix |
| CVE-2022-45957 | ZTE Zxhn-h108ns out-of-bounds write | 7.5v3.1 | 11.5% | 2022-12-12 | |
| CVE-2022-45956 | boa incorrect authorization | 5.3v3.1 | 0.8% | 2022-12-12 | |
| CVE-2022-45797 | Trend Micro Apex One Damage Cleanup Engine component arbitrary file deletion | 7.1v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-45760 | Sens incorrect authorization | 8.8v3.1 | 0.6% | 2022-12-12 | |
| CVE-2022-45759 | Sens unrestricted file upload | 8.8v3.1 | 0.6% | 2022-12-12 | |
| CVE-2022-45758 | Sens cross-site scripting | 5.4v3.1 | 0.3% | 2022-12-12 | |
| CVE-2022-45756 | Sens cross-site scripting | 6.1v3.1 | 0.3% | 2022-12-12 | |
| CVE-2022-45275 | Dynamic Transaction Queuing System arbitrary file upload | 7.2v3.1 | 15.3% | 2022-12-12 | |
| CVE-2022-45269 | Gmaolinx Linx Sphere component SCS.Web.Server.SPI/1.0 path traversal | 7.5v3.1 | 3.1% | 2022-12-12 | Nuclei |
| CVE-2022-45228 | Dragino LG01 LORA cross-site request forgery | 3.5v3.1 | 0.2% | 2022-12-12 | |
| CVE-2022-45227 | Dragino LG01 LORA files accessible to external parties | 7.5v3.1 | 0.7% | 2022-12-12 | |
| CVE-2022-45043 | Tenda AX12 OS command injection | 8.8v3.1 | 2.2% | 2022-12-12 | |
| CVE-2022-44654 | Trend Micro Apex One heap-based buffer overflow | 7.5v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-44653 | Trend Micro Apex One security agent path traversal | 7.8v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-44652 | Trend Micro Apex One An improper exception handling | 7.8v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-44651 | Trend Micro Apex One time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-44650 | Trend Micro Apex One Unauthorized Change Prevention service memory corruption | 7.8v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-44649 | Trend Micro Apex One Unauthorized Change Prevention service out-of-bounds access | 7.8v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-44648 | Trend Micro Apex One An out-of-bounds read | 5.5v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-44647 | Trend Micro Apex One An out-of-bounds read | 5.5v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-44637 | Redmine cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-44533 | HPE Aruba EdgeConnect Enterprise Software code injection | 7.2CNA v3.1 | 1.4% | 2022-12-12 | Fix |
| CVE-2022-44532 | HPE Aruba EdgeConnect Enterprise Software path traversal | 4.9CNA v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-44031 | Redmine cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-43780 | Certain HP ENVY denial of service | 7.5v3.1 | 0.9% | 2022-12-12 | Fix |
| CVE-2022-43542 | HPE Aruba EdgeConnect Enterprise Software code injection | 7.2CNA v3.1 | 1.2% | 2022-12-12 | Fix |
| CVE-2022-43541 | HPE Aruba EdgeConnect Enterprise Software code injection | 7.2CNA v3.1 | 1.6% | 2022-12-12 | Fix |
| CVE-2022-43518 | HPE Aruba EdgeConnect Enterprise Software path traversal | 4.9CNA v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-42716 | Arm Valhall GPU Kernel Driver use-after-free | 8.8v3.1 | 1.3% | 2022-12-12 | Fix |
| CVE-2022-42446 | HCL Sametime and 12.0FP1 anonymous users have directory lookup access | 6.5CNA v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-42445 | HCL Launch is vulnerable to insufficiently Protected LDAP Search Credentials | 4.9CNA v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-41881 | netty HAProxyMessageDecoder stack exhaustion DoS | 5.3CNA v3.1 | 1.5% | 2022-12-12 | Fix |
| CVE-2022-41296 | IBM Db2U cross-site respect forgery | 6.5CNA v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-41263 | SAP Business Objects Business Intelligence Platform (Web intelligence) cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-41262 | SAP NetWeaver AS for Java (Http Provider Service) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-41261 | SAP Solution Manager (Diagnostic Agent) improper access control | 6.0CNA v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-38661 | HCL Workload Automation Jlog component vulnerability | 6.2CNA v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-38656 | HCL Commerce, when using Elasticsearch, could be affected by a denial of service | 8.6CNA v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-38395 | HP Support Assistant uncontrolled search path | 7.8v3.1 | 2.8% | 2022-12-12 | Fix |
| CVE-2022-37932 | HPE Hewlett Packard Enterprise OfficeConnect 1820 authentication bypass | 8.8CNA v3.1 | 2.8% | 2022-12-12 | NucleiExploit codeFix |
| CVE-2022-37930 | HPE Nimble Storage Hybrid Flash Arrays information disclosure | 6.7CNA v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-37929 | HPE Nimble Storage Hybrid Flash Arrays improper privilege management | 6.7CNA v3.1 | 0.1% | 2022-12-12 | Fix |
| CVE-2022-37928 | HPE Nimble Storage Hybrid Flash Arrays insufficient verification of data authenticity | 8.0CNA v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-37927 | HPE OneView Global Dashboard (OVGD) Hewlett Packard Enterprise HPE open redirect | 6.1CNA v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-37926 | HPE Aruba EdgeConnect Enterprise Software cross-site scripting | 5.5CNA v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-37925 | HPE Aruba EdgeConnect Enterprise Software cross-site scripting | 6.1CNA v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-37924 | HPE Aruba EdgeConnect Enterprise Software OS command injection | 7.2CNA v3.1 | 1.6% | 2022-12-12 | Fix |
| CVE-2022-37923 | HPE Aruba EdgeConnect Enterprise Software arbitrary command execution | 7.2CNA v3.1 | 1.5% | 2022-12-12 | Fix |
| CVE-2022-37922 | HPE Aruba EdgeConnect Enterprise Software arbitrary command execution | 7.2CNA v3.1 | 1.5% | 2022-12-12 | Fix |
| CVE-2022-37921 | HPE Aruba EdgeConnect Enterprise Software arbitrary command execution | 7.2CNA v3.1 | 1.5% | 2022-12-12 | Fix |
| CVE-2022-37920 | HPE Aruba EdgeConnect Enterprise Software arbitrary command execution | 7.2CNA v3.1 | 1.5% | 2022-12-12 | Fix |
| CVE-2022-37919 | HPE Aruba EdgeConnect Enterprise Software denial of service | 7.5CNA v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-37912 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.6% | 2022-12-12 | Fix |
| CVE-2022-37911 | HPE Aruba Mobility Conductor XML external entity injection | 3.8CNA v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-37910 | HPE Aruba Mobility Conductor buffer overflow | 4.4CNA v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-37909 | HPE Aruba Mobility Conductor information disclosure | 5.3CNA v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-37908 | HPE Aruba Mobility Conductor download without integrity check | 5.8CNA v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-37907 | HPE Aruba Mobility Conductor denial of service | 5.8CNA v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-37906 | HPE Aruba Mobility Conductor authenticated path traversal | 6.5CNA v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-37905 | HPE Aruba Mobility Conductor CSV injection | 6.6CNA v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-37904 | HPE Aruba Mobility Conductor write-what-where condition | 6.6CNA v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-37903 | HPE Aruba Mobility Conductor out-of-bounds write | 7.2CNA v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-37902 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.8% | 2022-12-12 | Fix |
| CVE-2022-37901 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.8% | 2022-12-12 | Fix |
| CVE-2022-37900 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.8% | 2022-12-12 | Fix |
| CVE-2022-37899 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.8% | 2022-12-12 | Fix |
| CVE-2022-37898 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.5% | 2022-12-12 | Fix |
| CVE-2022-37897 | HPE Aruba Mobility Conductor OS command injection | 9.8CNA v3.1 | 1.8% | 2022-12-12 | Fix |
| CVE-2022-37018 | HP PC BIOS incorrect default permissions | 8.4v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-34318 | IBM CICS TX clickjacking | 5.4CNA v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-32537 | Medtronic MiniMed 600 Series Pump System Communication issue | 4.8CNA v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-31596 | SAP Business Objects Platform (Monitoring DB) resource exposure | 6.0v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-25837 | Bluetooth Core Specification authentication bypass by replay | 7.5v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-25836 | Bluetooth Core Specification authentication bypass by replay | 7.5v3.1 | 0.4% | 2022-12-12 | |
| CVE-2022-23511 | Amazon CloudWatch Agent for Windows has privilege escalation Vector | 7.1CNA v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-22488 | IBM OpenBMC denial of service | 4.9CNA v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-20968 | Cisco Session Initiation Protocol (SIP) Software out-of-bounds write | 8.1CNA v3.1 | 6.1% | 2022-12-12 | Fix |
| CVE-2022-20691 | Cisco Analog Telephone Adaptor (ATA) Software denial of service | 5.3CNA v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-20690 | Cisco Analog Telephone Adaptor (ATA) Software improper length parameter handling | 5.3CNA v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-20689 | Cisco Analog Telephone Adaptor (ATA) Software improper length parameter handling | 5.3CNA v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-20688 | Cisco Analog Telephone Adaptor (ATA) Software out-of-bounds read | 5.3CNA v3.1 | 1.0% | 2022-12-12 | Fix |
| CVE-2022-20687 | Cisco Analog Telephone Adaptor (ATA) Software buffer overflow | 5.3CNA v3.1 | 1.0% | 2022-12-12 | Fix |
| CVE-2022-20686 | Cisco Analog Telephone Adaptor (ATA) Software improper length parameter handling | 5.3CNA v3.1 | 1.0% | 2022-12-12 | Fix |
| CVE-2022-4421 | rAthena FluxCP Service Desk Image URL view.php cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-12 | |
| CVE-2022-4416 | RainyGao DocSys getReposAllUsers.do getReposAllUsers SQL injection | 8.8v3.1 | 0.5% | 2022-12-12 | |
| CVE-2022-4414 | Cross-site scripting (XSS) DOM in nuxt/Framework | 6.1v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-4413 | Cross-site scripting (XSS) Reflected in nuxt/Framework | 6.1v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-4314 | Improper privilege management in ikus060/rdiffweb | 9.8v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-4312 | ARC Informatique PcVue cleartext storage of sensitive information | 5.5v3.1 | 0.1% | 2022-12-12 | Fix |
| CVE-2022-4311 | ARC Informatique PcVue An sensitive information in log files | 6.5v3.1 | 0.3% | 2022-12-12 | |
| CVE-2022-4097 | All In One WP Security and Firewall WordPress plugin IP spoofing | 5.3NVD v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-4016 | Booster for WooCommerce Custom Role Creation/Deletion via CSRF | 6.5NVD v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-4010 | Image Hover Effects WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-4005 | Donation Button WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2022-12-12 | |
| CVE-2022-4004 | Donation Button WordPress plugin Subscriber+ broken access control leading to SMS Spam | 4.3NVD v3.1 | 0.5% | 2022-12-12 | |
| CVE-2022-4000 | WooCommerce Shipping - DPD baltic WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-3999 | WooCommerce Shipping - DPD baltic WordPress plugin Subscriber+ arbitrary options deletion | 8.1NVD v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-3989 | Motors - Car Dealer, Classifieds and Listing WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 1.1% | 2022-12-12 | Fix |
| CVE-2022-3982 | Booking Calendar WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 4.5% | 2022-12-12 | NucleiFix |
| CVE-2022-3981 | Icegram Express WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-3946 | Welcart e-Commerce WordPress plugin Subscriber+ arbitrary Shipping Method Creation/Update/Deletion | 6.5NVD v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-3935 | Welcart e-Commerce WordPress plugin Multiple Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-3934 | FlatPM reflected cross-site scripting | 5.4NVD v3.1 | 0.9% | 2022-12-12 | NucleiFix |
| CVE-2022-3933 | Essential Real Estate WordPress plugin reflected cross-site-scripting | 5.4NVD v3.1 | 0.9% | 2022-12-12 | NucleiFix |
| CVE-2022-3930 | Directorist WordPress plugin Subscriber+ arbitrary user password update via IDOR | 6.5NVD v3.1 | 0.6% | 2022-12-12 | Fix |
| CVE-2022-3925 | Buddybadges WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2022-12-12 | |
| CVE-2022-3921 | Listingo WordPress theme unauthenticated arbitrary file upload | 9.8NVD v3.1 | 21.2% | 2022-12-12 | Fix |
| CVE-2022-3919 | Jetpack CRM WordPress plugin Admin+ cross-site scripting | 4.8NVD v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-3915 | Dokan WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.1% | 2022-12-12 | Fix |
| CVE-2022-3912 | User Registration WordPress plugin Subscriber+ arbitrary file upload | 7.5NVD v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-3908 | Helloprint WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2022-12-12 | NucleiFix |
| CVE-2022-3906 | Easy Form Builder WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-3900 | Cooked Pro WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 19.0% | 2022-12-12 | Fix |
| CVE-2022-3883 | StopBadBots WordPress plugin Subscriber+ arbitrary plugin installation | 6.5NVD v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-3882 | WP Memory WordPress plugin Subscriber+ arbitrary plugin installation | 6.5NVD v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-3881 | WPTools WordPress plugin Subscriber+ arbitrary plugin installation | 5.7NVD v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-3880 | AntiHacker WordPress plugin Subscriber+ arbitrary plugin installation | 6.5NVD v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-3879 | Car Dealer WordPress plugin Subscriber+ arbitrary plugin installation | 6.5NVD v3.1 | 0.3% | 2022-12-12 | Fix |
| CVE-2022-3862 | Livemesh Addons for Elementor WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-12 | Fix |
| CVE-2022-3853 | Supra CSV WordPress plugin stored cross-site scripting via CSRF | 5.4NVD v3.1 | 0.2% | 2022-12-12 | |
| CVE-2022-3641 | Devolutions Remote Desktop Manager Azure SQL Data Source elevation of privilege | 8.8v3.1 | 0.6% | 2022-12-12 | |
| CVE-2022-3609 | GetYourGuide Ticketing WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-3605 | WP CSV Exporter WordPress plugin CSV injection | 7.8NVD v3.1 | 0.4% | 2022-12-12 | Fix |
| CVE-2022-3510 | Google ProtocolBuffers parsing issue in protobuf message-type extension | 7.5CNA v3.1 | 0.7% | 2022-12-12 | Fix |
| CVE-2022-3509 | Google ProtocolBuffers parsing issue in protobuf textformat | 7.5CNA v3.1 | 0.9% | 2022-12-12 | Fix |
| CVE-2022-3485 | Weak password recovery in ifm moneo appliance | 9.8v3.1 | 0.9% | 2022-12-12 | |
| CVE-2022-3359 | Shortcodes and extra features for Phlox WordPress plugin PHP Objection injection | 8.8NVD v3.1 | 0.8% | 2022-12-12 | Fix |
| CVE-2022-2794 | Certain HP PageWide Pro printers denial of service | 7.5v3.1 | 0.9% | 2022-12-12 | Fix |
| CVE-2022-1038 | HP Jumpstart incorrect default permissions | 7.8v3.1 | 0.2% | 2022-12-12 | Fix |
| CVE-2022-4409 | Sensitive Cookie in HTTPS Session without Secure attribute in thorsten/phpMyFAQ | 7.5v3.1 | 0.4% | 2022-12-11 | Fix |
| CVE-2022-4408 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.5% | 2022-12-11 | Fix |
| CVE-2022-4407 | Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ | 6.1NVD v3.1 | 4.6% | 2022-12-11 | Exploit codeFix |
| CVE-2022-4403 | SourceCodester Canteen Management System ajax_represent.php SQL injection | 8.8v3.1 | 0.6% | 2022-12-11 | |
| CVE-2022-4402 | RainyGao DocSys ZIP File Decompression path traversal | 7.2v3.1 | 0.7% | 2022-12-11 | |
| CVE-2022-4401 | pallidlight online-course-selection-system cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-11 | |
| CVE-2022-4400 | zbl1996 FS-Blog Title cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-11 | |
| CVE-2022-45145 | egg-compile.scm in CHICKEN 5.x before 5.3.1 allows arbitrary OS command execution during package installation via escape characters in a .egg file. | 9.8v3.1 | 1.3% | 2022-12-10 | Fix |
| CVE-2022-23485 | Invite code reuse via cookie manipulation in Sentry | 6.4CNA v3.1 | 0.4% | 2022-12-10 | Fix |
| CVE-2022-4399 | TicklishHoneyBee nodau db.c SQL injection | 9.8v3.1 | 0.7% | 2022-12-10 | Fix |
| CVE-2022-4398 | Integer overflow or wraparound in radareorg/radare2 | 7.8v3.1 | 0.3% | 2022-12-10 | Fix |
| CVE-2022-4397 | morontt zend-blog-number-2 Comment Comment.php cross-site request forgery | 6.5v3.1 | 0.2% | 2022-12-10 | |
| CVE-2022-4396 | RDFlib pyrdfa3 __init__.py _get_option cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-10 | Fix |
| CVE-2022-46166 | Spring Boot Admin notifier configuration code injection | 8.1CNA v3.1 | 1.5% | 2022-12-09 | Exploit codeFix |
| CVE-2022-46157 | Remote PHP code execution in Akeneo PIM | 8.8CNA v3.1 | 1.4% | 2022-12-09 | Fix |
| CVE-2022-45292 | Funkwhale operation on a released resource | 5.3v3.1 | 0.5% | 2022-12-09 | |
| CVE-2022-45290 | Kbase Doc path traversal | 9.1v3.1 | 0.9% | 2022-12-09 | |
| CVE-2022-44838 | Automotive Shop Management System SQL injection | 7.2v3.1 | 0.7% | 2022-12-09 | |
| CVE-2022-44790 | Interspire Email Marketer SQL injection | 7.5v3.1 | 0.6% | 2022-12-09 | Fix |
| CVE-2022-44213 | ZKTeco Automatic DATA Master Server cross-site scripting | 4.8v3.1 | 0.4% | 2022-12-09 | |
| CVE-2022-41299 | IBM Cloud Transformation Advisor cross-site scripting | 4.4CNA v3.1 | 0.4% | 2022-12-09 | Fix |
| CVE-2022-38765 | Canon Vitrea View insecure direct object reference | 6.5v3.1 | 0.5% | 2022-12-09 | Fix |
| CVE-2022-34297 | Yii2 Gii cross-site scripting | 5.4v3.1 | 0.6% | 2022-12-09 | |
| CVE-2022-33187 | Brocade SANnav logs usernames and encoded passwords in debug-enabled logs | 5.5CNA v3.1 | 0.5% | 2022-12-09 | Fix |
| CVE-2022-29839 | Western Digital My Cloud Remote Backups Application Discloses Stored Credentials | 4.1CNA v3.1 | 0.1% | 2022-12-09 | Fix |
| CVE-2022-29838 | Authentication issue with the encrypted volumes and auto mount feature in My Cloud devices | 4.3CNA v3.1 | 0.3% | 2022-12-09 | Fix |
| CVE-2022-25630 | Symantec Messaging Gateway cross-site scripting | 5.4NVD v3.1 | 1.5% | 2022-12-09 | Exploit codeFix |
| CVE-2022-25629 | Symantec Messaging Gateway cross-site scripting | 5.4NVD v3.1 | 0.4% | 2022-12-09 | Fix |
| CVE-2022-23510 | SQL injection in cube-js | 9.6CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23497 | Insecure file access in FreshRSS | 6.5CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23493 | Out of bound read in xrdp | 9.1CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23484 | Integer overflow in xrdp | 8.2CNA v3.1 | 0.8% | 2022-12-09 | Fix |
| CVE-2022-23483 | neutrinolabs xrdp out-of-bound read in libxrdp | 7.5CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23482 | Out-of-bound read in xrdp | 0.0CNA v3.1 | 0.8% | 2022-12-09 | Fix |
| CVE-2022-23481 | Out-of-bound read in xrdp | 0.0CNA v3.1 | 0.8% | 2022-12-09 | Fix |
| CVE-2022-23480 | Buffer overflow in xrdp | 9.1CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23479 | Buffer overflow occurs in xrdp | 9.1CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23478 | Out of bound write in xrdp | 9.1CNA v3.1 | 0.8% | 2022-12-09 | Fix |
| CVE-2022-23477 | Buffer overflow in xrdp | 9.1CNA v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-23468 | Buffer overflow in xrdp | 6.5CNA v3.1 | 0.8% | 2022-12-09 | Fix |
| CVE-2022-4390 | A network misconfiguration is present in versions prior to 1.0.9.90 of the NETGEAR RAX30 AX2400 series of routers. IPv6 is enabled for the WAN interface by default on these devices. While there are firewall restrictions in place that define access restrictions for IPv4 traffic, these restrictions do | 10.0NVD v3.1 | 0.9% | 2022-12-09 | Fix |
| CVE-2022-4377 | S-cms Contact Information page cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-09 | |
| CVE-2022-4375 | Mingsoft MCMS list SQL injection | 9.8v3.1 | 2.9% | 2022-12-09 | NucleiFix |
| CVE-2022-4336 | Baota cross-site scripting | 5.4NVD v3.1 | 0.3% | 2022-12-09 | |
| CVE-2022-4264 | Incorrect privilege assignment in M-Files Web Server | 6.5CNA v3.1 | 0.5% | 2022-12-09 | Fix |
| CVE-2022-4170 | rxvt-unicode remote code execution | 9.8NVD v3.1 | 2.1% | 2022-12-09 | Fix |
| CVE-2022-3724 | Wireshark USB HID protocol dissector crash | 6.3CNA v3.1 | 2.5% | 2022-12-09 | Fix |
| CVE-2022-3259 | Openshift improper initialization | 7.4v3.1 | 0.5% | 2022-12-09 | Fix |
| CVE-2022-2993 | zephyrproject-rtos Zephyr bt: Host: Wrong key validation check | 8.6CNA v3.1 | 0.6% | 2022-12-09 | |
| CVE-2022-2752 | Secomea GateManager login process improper authentication | 5.5CNA v3.1 | 0.2% | 2022-12-09 | Fix |
| CVE-2022-46831 | JetBrains TeamCity AWS credential provider chain vulnerability | 6.6CNA v3.1 | 0.5% | 2022-12-08 | Fix |
| CVE-2022-46830 | JetBrains TeamCity server-side request forgery | 4.1CNA v3.1 | 0.5% | 2022-12-08 | Fix |
| CVE-2022-46829 | JetBrains Gateway improper authentication | 7.1CNA v3.1 | 0.4% | 2022-12-08 | Fix |
| CVE-2022-46828 | JetBrains IntelliJ IDEA injection | 5.2CNA v3.1 | 0.3% | 2022-12-08 | Fix |
| CVE-2022-46827 | JetBrains IntelliJ IDEA XML external entity injection | 3.9CNA v3.1 | 0.2% | 2022-12-08 | Fix |
| CVE-2022-46826 | JetBrains IntelliJ IDEA path traversal | 6.2CNA v3.1 | 0.2% | 2022-12-08 | Fix |
| CVE-2022-46825 | JetBrains IntelliJ IDEA information disclosure | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-46824 | JetBrains IntelliJ IDEA buffer overflow | 5.6CNA v3.1 | 0.2% | 2022-12-08 | Fix |
| CVE-2022-46792 | Hasura graphql-engine incorrect authorization | 8.8v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-46158 | Potential information exposure in the upload directory in PrestaShop | 5.3CNA v3.1 | 0.5% | 2022-12-08 | Fix |
| CVE-2022-46153 | Routes exposed with an empty TLSOption in traefik | 8.1CNA v3.1 | 0.5% | 2022-12-08 | Fix |
| CVE-2022-45877 | OpenHarmony cross-device authentication vulnerability | 8.3CNA v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-45525 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45524 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45523 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45522 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45521 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45520 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45519 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45518 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45517 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45516 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45515 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45514 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45513 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45512 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45511 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | Exploit code |
| CVE-2022-45510 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45509 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45508 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45507 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.8% | 2022-12-08 | |
| CVE-2022-45506 | Tenda W30E OS command injection | 9.8v3.1 | 2.5% | 2022-12-08 | |
| CVE-2022-45505 | Tenda W30E out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45504 | Tenda W6-S missing authentication | 7.5v3.1 | 18.3% | 2022-12-08 | |
| CVE-2022-45503 | Tenda W6-S out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45501 | Tenda W6-S out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45499 | Tenda W6-S out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-45498 | Tenda W6-S missing authentication | 7.5v3.1 | 0.8% | 2022-12-08 | |
| CVE-2022-45497 | Tenda W6-S OS command injection | 9.8v3.1 | 2.5% | 2022-12-08 | |
| CVE-2022-45118 | OpenHarmony telephony subsystem information disclosure | 6.2CNA v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-44938 | Seeddms insufficient randomness | 9.8v3.1 | 1.0% | 2022-12-08 | |
| CVE-2022-44932 | Tenda A18 An improper access control | 7.5v3.1 | 0.7% | 2022-12-08 | |
| CVE-2022-44931 | Tenda A18 out-of-bounds write | 7.5v3.1 | 0.9% | 2022-12-08 | |
| CVE-2022-44455 | OpenAtom OpenHarmony appspawn and nwebspawn services buffer overflow | 6.8CNA v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-41949 | Semi-blind server-side request forgery in dhis2-core | 5.0CNA v3.1 | 0.4% | 2022-12-08 | Fix |
| CVE-2022-41948 | Privilege Chaining with the user admin role in dhis2-core | 6.7CNA v3.1 | 0.6% | 2022-12-08 | Fix |
| CVE-2022-41947 | Cross-site scripting with user-uploaded files in dhis2-core | 5.4CNA v3.1 | 0.4% | 2022-12-08 | Fix |
| CVE-2022-41802 | OpenHarmony buffer overflow | 4.0CNA v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-41717 | Excessive memory growth in net/http and golang.org/x/net/http2 | 5.3v3.1 | 5.6% | 2022-12-08 | Exploit codeFix |
| CVE-2022-40939 | Secustation cleartext transmission of sensitive information | 4.9v3.1 | 0.4% | 2022-12-08 | |
| CVE-2022-39915 | Samsung Mobile Samsung Calendar improper access control | 3.3CNA v3.1 | 0.3% | 2022-12-08 | Fix |
| CVE-2022-39914 | Samsung Mobile Devices information disclosure | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39913 | Samsung Mobile Devices Persona Manager information disclosure | 6.8CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39912 | Samsung Mobile Devices improper handling of insufficient permissions | 6.2CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39911 | Samsung Mobile Samsung Pass improper exception handling | 4.8CNA v3.1 | 0.3% | 2022-12-08 | Fix |
| CVE-2022-39910 | Samsung Mobile Samsung Pass improper access control | 3.9CNA v3.1 | 0.3% | 2022-12-08 | Fix |
| CVE-2022-39909 | Samsung Mobile Samsung Gear IconX PC Manager insufficient verification of data authenticity | 7.1CNA v3.1 | 0.2% | 2022-12-08 | Fix |
| CVE-2022-39908 | Samsung Mobile Devices time-of-check time-of-use race condition | 6.9CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39907 | Samsung Mobile Devices integer overflow | 6.9CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39906 | Samsung Mobile Devices SecTelephonyProvider improper access control | 2.3CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39905 | Samsung Mobile Devices improper authorization | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39904 | Samsung Mobile Devices Samsung settings information disclosure | 3.3CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39903 | Samsung Mobile Devices RCS call improper access control | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39902 | Samsung Exynos improper authorization | 6.5CNA v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-39901 | Samsung Exynos improper authentication | 6.5CNA v3.1 | 0.2% | 2022-12-08 | Fix |
| CVE-2022-39900 | Samsung Mobile Devices Nice Catch improper access control | 4.6CNA v3.1 | 0.2% | 2022-12-08 | Fix |
| CVE-2022-39899 | Samsung Mobile Devices Samsung WindowManagerService improper authentication | 5.7CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39898 | Samsung Mobile Devices IIccPhoneBook improper access control | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39897 | Samsung Mobile Devices kernel information disclosure | 4.4CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39896 | Samsung Mobile Devices Contacts improper access control | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39895 | Samsung Mobile Devices ContactListUtils in Phone improper access control | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-39894 | Samsung Mobile Devices ContactListStartActivityHelper in Phone improper access control | 4.0CNA v3.1 | 0.1% | 2022-12-08 | Fix |
| CVE-2022-38754 | Micro Focus Operations Bridge Manager and OpsBridge Containerized cross-site scripting (XSS) | 8.0CNA v3.1 | 0.6% | 2022-12-08 | Fix |
| CVE-2022-38599 | Goteleport Teleport information disclosure | 6.5v3.1 | 0.8% | 2022-12-08 | |
| CVE-2022-37918 | Broken access control for some Web-based Management URLs in AirWave Management Platform | 8.1v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-37917 | Broken access control for some Web-based Management URLs in AirWave Management Platform | 8.1v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-37916 | Broken access control for some Web-based Management URLs in AirWave Management Platform | 8.1v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-33186 | Brocade Fabric OS OS command injection | 9.8NVD v3.1 | 1.7% | 2022-12-08 | Fix |
| CVE-2022-23496 | A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa | 7.5CNA v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-23495 | ProtoNode may be modified such that common method calls may panic in ipfs/go-merkledag | 7.5CNA v3.1 | 1.3% | 2022-12-08 | Fix |
| CVE-2022-23494 | Cross-site scripting vulnerability in TinyMCE alerts | 5.4CNA v3.1 | 1.0% | 2022-12-08 | Fix |
| CVE-2022-23492 | go-libp2p denial of service vulnerability from lack of resource management | 7.5CNA v3.1 | 1.0% | 2022-12-08 | Fix |
| CVE-2022-23476 | Unchecked return value from xmlTextReaderExpand in Nokogiri | 7.5CNA v3.1 | 1.8% | 2022-12-08 | Fix |
| CVE-2022-23469 | traefik authorization header displayed in the debug logs | 3.5CNA v3.1 | 1.0% | 2022-12-08 | Fix |
| CVE-2022-4366 | Missing authorization in lirantal/Daloradius | 7.5v3.1 | 0.7% | 2022-12-08 | |
| CVE-2022-4364 | Teledyne Flir AX8 Web service palette.php command injection | 9.8v3.1 | 4.3% | 2022-12-08 | |
| CVE-2022-4354 | LinZhaoguan pb-cms Message Board comment cross-site scripting | 9.6v3.1 | 0.5% | 2022-12-08 | |
| CVE-2022-4353 | LinZhaoguan pb-cms IpUtil.getIpAddr cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-08 | |
| CVE-2022-4350 | Mingsoft MCMS search.do cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-08 | |
| CVE-2022-4349 | CTF-hacker pwn delete.html cross-site request forgery | 6.8v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-4348 | y_project RuoYi-Cloud JSON cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-08 | |
| CVE-2022-4347 | xiandafu beetl-bbs WebUtils.java cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-08 | |
| CVE-2022-4291 | Avast Antivirus Script Shield module vulnerability | 10.0v3.1 | 0.4% | 2022-12-08 | Fix |
| CVE-2022-4261 | Rapid7 Nexpose and InsightVM update mechanism vulnerability | 4.4CNA v3.1 | 0.3% | 2022-12-08 | |
| CVE-2022-4123 | Buildah (as part of Podman) vulnerable to path traversal | 3.3v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-4122 | Buildah (as part of Podman) vulnerable to link following | 5.3v3.1 | 0.8% | 2022-12-08 | Fix |
| CVE-2022-3262 | Red Hat OpenShift pod DNS resolution vulnerability | 8.1v3.1 | 0.7% | 2022-12-08 | |
| CVE-2022-3260 | Openshift clickjacking | 4.8v3.1 | 0.4% | 2022-12-08 | |
| CVE-2022-3092 | GE CIMPLICITY out-of-bounds write | 7.8v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-3084 | GE CIMPLICITY access of uninitialized pointer | 7.8v3.1 | 0.2% | 2022-12-08 | |
| CVE-2022-46770 | Linux Foundation Mirage Firewall infinite loop | 7.5v3.1 | 21.5% | 2022-12-07 | Exploit codeFix |
| CVE-2022-46742 | PaddlePaddle vulnerable to code injection | 10.0CNA v3.1 | 1.1% | 2022-12-07 | Fix |
| CVE-2022-46741 | PaddlePaddle out-of-bounds read | 7.1CNA v3.1 | 0.7% | 2022-12-07 | Fix |
| CVE-2022-45918 | ILIAS externally controlled resource reference | 6.5v3.1 | 1.2% | 2022-12-07 | |
| CVE-2022-45917 | ILIAS open redirect | 6.1v3.1 | 2.0% | 2022-12-07 | Nuclei |
| CVE-2022-45916 | ILIAS cross-site scripting | 5.4v3.1 | 0.9% | 2022-12-07 | |
| CVE-2022-45915 | ILIAS OS command injection | 8.8v3.1 | 4.7% | 2022-12-07 | |
| CVE-2022-45910 | Apache ManifoldCF: LDAP injection vulnerability ActiveDirectory Authorities | 5.3v3.1 | 1.5% | 2022-12-07 | Fix |
| CVE-2022-45550 | Ayacms code injection | 9.8v3.1 | 1.5% | 2022-12-07 | |
| CVE-2022-45217 | Bookstore Management System Book Store Management System v1.0.0 cross-site scripting | 5.4v3.1 | 0.5% | 2022-12-07 | Exploit code |
| CVE-2022-45122 | Six Apart Movable Type cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-07 | Fix |
| CVE-2022-45113 | Six Apart Movable Type improper syntax validation | 6.5v3.1 | 0.6% | 2022-12-07 | Fix |
| CVE-2022-45026 | Markdown Preview Enhanced OS command injection | 9.8v3.1 | 1.0% | 2022-12-07 | |
| CVE-2022-45025 | Markdown Preview Enhanced OS command injection | 9.8v3.1 | 34.5% | 2022-12-07 | Exploit code |
| CVE-2022-45010 | Simple Phone Book/directory Web App SQL injection | 9.8v3.1 | 0.8% | 2022-12-07 | |
| CVE-2022-45009 | Online Leave Management System unrestricted file upload | 7.2v3.1 | 1.0% | 2022-12-07 | |
| CVE-2022-45008 | Online Leave Management System cross-site scripting | 4.8v3.1 | 0.4% | 2022-12-07 | |
| CVE-2022-44942 | Casdoor arbitrary file deletion vulnerability via uploadFile function | 8.1v3.1 | 0.9% | 2022-12-07 | Fix |
| CVE-2022-44849 | Metinfo Administrator List cross-site request forgery | 8.8v3.1 | 0.4% | 2022-12-07 | |
| CVE-2022-44620 | UNIMO Technology UDR-JA1604/UDR-JA1608/UDR-JA1616 improper authentication | 8.8v3.1 | 0.9% | 2022-12-07 | Fix |
| CVE-2022-44608 | Cybozu Remote Service resource exhaustion | 7.5v3.1 | 0.9% | 2022-12-07 | Fix |
| CVE-2022-44606 | UNIMO Technology UDR-JA1604/UDR-JA1608/UDR-JA1616 OS command injection | 8.8v3.1 | 1.5% | 2022-12-07 | Fix |
| CVE-2022-44393 | Sanitization Management System SQL injection | 7.2v3.1 | 0.8% | 2022-12-07 | |
| CVE-2022-44373 | TRENDnet Tew-820ap TrendNet Wireless AC Easy-Upgrader stack-based buffer overflow | 8.8v3.1 | 1.4% | 2022-12-07 | |
| CVE-2022-44371 | Hope-Boot deserialization of untrusted data | 9.8v3.1 | 1.3% | 2022-12-07 | |
| CVE-2022-44361 | zzcms cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-07 | |
| CVE-2022-44351 | SkyCaiji deserialization of untrusted data | 9.8v3.1 | 0.9% | 2022-12-07 | |
| CVE-2022-44153 | Rapid SCADA cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-07 | |
| CVE-2022-43668 | Typora cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-07 | Fix |
| CVE-2022-43667 | OMRON CX-Programmer stack-based buffer overflow | 7.8v3.1 | 0.3% | 2022-12-07 | |
| CVE-2022-43660 | Six Apart Movable Type code injection | 7.2v3.1 | 1.0% | 2022-12-07 | Fix |
| CVE-2022-43581 | IBM Content Navigator code execution | 7.5CNA v3.1 | 0.7% | 2022-12-07 | Fix |
| CVE-2022-43509 | OMRON CX-Programmer out-of-bounds write | 7.8v3.1 | 0.2% | 2022-12-07 | Fix |
| CVE-2022-43508 | OMRON CX-Programmer use-after-free | 7.8v3.1 | 0.2% | 2022-12-07 | |
| CVE-2022-43468 | Hector Cabrera WordPress Popular Posts improper initialization | 7.5v3.1 | 0.8% | 2022-12-07 | Fix |
| CVE-2022-43464 | UNIMO Technology UDR-JA1604/UDR-JA1608/UDR-JA1616 hidden functionality | 8.8v3.1 | 1.0% | 2022-12-07 | Fix |
| CVE-2022-42486 | baserCMS vulnerable to stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-12-07 | Fix |
| CVE-2022-42458 | Shift Tech bingo!CMS authentication bypass | 9.8v3.1 | 1.1% | 2022-12-07 | Fix |
| CVE-2022-42329 | Linux kernel Guests can trigger deadlock | 5.5NVD v3.1 | 0.2% | 2022-12-07 | Fix |
| CVE-2022-42328 | Linux kernel Guests can trigger deadlock | 5.5NVD v3.1 | 0.2% | 2022-12-07 | Fix |
| CVE-2022-41994 | baserCMS vulnerable to stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-12-07 | Fix |
| CVE-2022-41800 | F5 BIG-IP appliance mode iControl REST vulnerability | 8.7CNA v3.1 | 76.9% | 2022-12-07 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2022-41783 | TP-Link RE300 V1 denial of service | 5.5v3.1 | 0.2% | 2022-12-07 | Fix |
| CVE-2022-41735 | IBM Business Process Manager cross-site scripting | 5.4CNA v3.1 | 0.4% | 2022-12-07 | Fix |
| CVE-2022-41720 | Restricted file access on Windows in os and net/http | 7.5v3.1 | 1.2% | 2022-12-07 | Fix |
| CVE-2022-41622 | F5 BIG-IP iControl SOAP cross-site request forgery | 8.8CNA v3.1 | 92.4% | 2022-12-07 | Emerging ThreatsExploit codeFix |
| CVE-2022-40966 | Buffalo network devices multiple authentication bypass | 8.8v3.1 | 0.3% | 2022-12-07 | Fix |
| CVE-2022-39044 | Buffalo network devices multiple hidden functionality | 6.8v3.1 | 0.3% | 2022-12-07 | Fix |
| CVE-2022-37406 | Ricoh Aficio SP 4210N cross-site scripting | 4.8v3.1 | 0.6% | 2022-12-07 | Fix |
| CVE-2022-34840 | Buffalo network devices multiple hard-coded credentials | 6.5v3.1 | 0.2% | 2022-12-07 | Fix |
| CVE-2022-23491 | certifi python-certifi removal of TrustCor root certificate | 6.8CNA v3.1 | 0.5% | 2022-12-07 | Fix |
| CVE-2022-23487 | LIBP2P denial of service vulnerability from lack of resource management | 7.5CNA v3.1 | 0.7% | 2022-12-07 | Fix |
| CVE-2022-23486 | libp2p rust-libp2p libp2p-rust denial of service vulnerability from lack of resource management | 7.5CNA v3.1 | 0.7% | 2022-12-07 | Fix |
| CVE-2022-23471 | containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak | 5.7CNA v3.1 | 1.1% | 2022-12-07 | Fix |
| CVE-2022-4341 | csliuwy coder-chain_gdut cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-07 | |
| CVE-2022-4322 | maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection | 7.2v3.1 | 0.8% | 2022-12-07 | |
| CVE-2022-3643 | Linux kernel crash | 6.5v3.1 | 0.5% | 2022-12-07 | Fix |
| CVE-2022-2952 | GE CIMPLICITY access of uninitialized pointer | 7.8v3.1 | 0.2% | 2022-12-07 | |
| CVE-2022-2948 | GE CIMPLICITY heap-based buffer overflow | 7.8v3.1 | 0.2% | 2022-12-07 | |
| CVE-2022-2002 | GE CIMPLICITY untrusted pointer dereference | 7.8v3.1 | 0.3% | 2022-12-07 | |
| CVE-2022-46383 | Rackn Digital Rebar privilege escalation | 9.8v3.1 | 0.7% | 2022-12-06 | Fix |
| CVE-2022-46382 | Rackn Digital Rebar incorrect default permissions | 8.8v3.1 | 0.6% | 2022-12-06 | |
| CVE-2022-46333 | Proofpoint Enterprise Protection perl eval arbitrary command execution | 7.2CNA v3.1 | 1.5% | 2022-12-06 | Fix |
| CVE-2022-46332 | Proofpoint Enterprise Protection (PPS/PoD) XSS in Attachment Names | 9.6CNA v3.1 | 0.6% | 2022-12-06 | Fix |
| CVE-2022-46161 | Code injection in Pdfmake | 9.8NVD v3.1 | 1.7% | 2022-12-06 | |
| CVE-2022-46154 | Kalcaddle KodExplorer path traversal | 8.6CNA v3.1 | 0.9% | 2022-12-06 | Fix |
| CVE-2022-46151 | pinterest querybook reflected XSS | 6.3CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-45848 | Contest Gallery WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-45833 | Easy WP SMTP WordPress plugin directory traversal | 6.5v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-45829 | Easy WP SMTP WordPress plugin arbitrary file deletion | 8.1v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-45816 | GD bbPress Attachments WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-45548 | Ayacms unrestricted file upload | 8.8v3.1 | 0.8% | 2022-12-06 | |
| CVE-2022-45359 | YITH WooCommerce Gift Cards Premium WordPress plugin arbitrary file upload | 9.8v3.1 | 13.5% | 2022-12-06 | Fix |
| CVE-2022-45326 | Kwoksys Information Server Kwoksys Kwok XML external entity injection | 4.9v3.1 | 1.1% | 2022-12-06 | Fix |
| CVE-2022-45283 | gpac out-of-bounds write | 7.8v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-44900 | py7zr directory traversal | 9.1v3.1 | 2.3% | 2022-12-06 | Exploit codeFix |
| CVE-2022-44289 | ThinkPHP has a code logic error | 8.8v3.1 | 2.9% | 2022-12-06 | Fix |
| CVE-2022-44030 | Redmine improper exception handling | 7.5v3.1 | 0.6% | 2022-12-06 | Fix |
| CVE-2022-44009 | Stackstorm Key-Value RBAC improper access control | 7.5v3.1 | 0.6% | 2022-12-06 | Fix |
| CVE-2022-43867 | IBM Spectrum Scale command execution | 7.8CNA v3.1 | 0.3% | 2022-12-06 | Fix |
| CVE-2022-43369 | PHPGurukul Auto Taxi Stand Management System cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-06 | Exploit code |
| CVE-2022-43363 | Telegram cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-06 | |
| CVE-2022-42888 | ARMember WordPress plugin privilege escalation | 8.8NVD v3.1 | 0.7% | 2022-12-06 | Fix |
| CVE-2022-42782 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42781 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42780 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42779 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42778 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42777 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42776 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42775 | UNISOC chipsets camera driver memory corruption | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42774 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42773 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42772 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42771 | UNISOC chipsets race condition | 4.7v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42770 | UNISOC chipsets race condition | 4.7v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42769 | UNISOC chipsets wlan driver denial of service | 3.3v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42768 | UNISOC chipsets wlan driver denial of service | 4.3v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-42767 | UNISOC chipsets wlan driver denial of service | 3.3NVD v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42766 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42765 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42764 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42763 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42762 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42761 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42760 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42759 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42758 | UNISOC chipsets wlan driver denial of service | 3.3v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42757 | UNISOC chipsets wlan driver denial of service | 3.3v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42756 | UNISOC chipsets sensor driver buffer overflow | 5.5NVD v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42755 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42754 | UNISOC chipsets use-after-free | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-42699 | Easy WP SMTP WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 1.4% | 2022-12-06 | Fix |
| CVE-2022-41910 | Heap out-of-bounds read in `QuantizeAndDequantizeV2` in TensorFlow | 4.8CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-41902 | Out-of-bounds write in grappler in TensorFlow | 7.1CNA v3.1 | 0.5% | 2022-12-06 | Fix |
| CVE-2022-41560 | TIBCO Nimbus denial of service | 6.5CNA v3.1 | 0.6% | 2022-12-06 | |
| CVE-2022-41559 | TIBCO Nimbus open redirect | 9.3CNA v3.1 | 0.7% | 2022-12-06 | |
| CVE-2022-41325 | VideoLAN VLC media player VNC module integer overflow | 7.8v3.1 | 0.7% | 2022-12-06 | Fix |
| CVE-2022-40918 | Force1rc Discovery Wifi U818A Hd+ Fpv firmware lewei_cam binary version buffer overflow | 9.8v3.1 | 1.8% | 2022-12-06 | |
| CVE-2022-40680 | Fortinet FortiOS cross-site scripting | 3.8CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-40603 | Zyxel ZyWALL/USG series firmware CGI program cross-site scripting | 4.7CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-40209 | WP Smart Import WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-39134 | UNISOC chipsets race condition | 4.7v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39133 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39132 | UNISOC chipsets camera driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39131 | UNISOC chipsets camera driver memory corruption | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39130 | UNISOC chipsets face detect driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39129 | UNISOC chipsets face detect driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39106 | UNISOC chipsets sensor driver out-of-bounds write | 5.5v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39102 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39101 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39100 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39099 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39098 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39097 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39096 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39095 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39094 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39093 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2022-12-06 | Fix |
| CVE-2022-39092 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-12-06 | Fix |
| CVE-2022-39091 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-12-06 | Fix |
| CVE-2022-39090 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.2% | 2022-12-06 | Fix |
| CVE-2022-38379 | Fortinet FortiSOAR cross-site scripting | 3.4CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-38337 | Mobatek MobaXterm hard-coded credentials | 9.1v3.1 | 0.7% | 2022-12-06 | Fix |
| CVE-2022-38336 | Mobatek MobaXterm An improper access control | 8.1v3.1 | 0.8% | 2022-12-06 | |
| CVE-2022-38123 | Secomea GateManager insufficient validation of plugin files | 8.7CNA v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-35843 | Fortinet FortiOS authentication bypass | 7.7CNA v3.1 | 0.9% | 2022-12-06 | Fix |
| CVE-2022-34881 | Information exposure vulnerability in JP1/Automatic Operation | 3.3CNA v3.1 | 0.2% | 2022-12-06 | Fix |
| CVE-2022-34361 | IBM Sterling Secure Proxy information disclosure | 5.9CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-33876 | Fortinet FortiADC improper input validation | 5.1CNA v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-33875 | Fortinet FortiADC SQL injection | 5.1CNA v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-30305 | Fortinet FortiSandbox and FortiDeceptor authentication logging vulnerability | 3.6CNA v3.1 | 0.6% | 2022-12-06 | Fix |
| CVE-2022-25912 | simple-git remote code execution (RCE) | 9.8v3.1 | 2.8% | 2022-12-06 | Fix |
| CVE-2022-24439 | GitPython remote code execution (RCE) | 9.8v3.1 | 5.4% | 2022-12-06 | Exploit codeFix |
| CVE-2022-23475 | lirantal daloradius dalorRadius full account take over | 8.8CNA v3.1 | 0.5% | 2022-12-06 | |
| CVE-2022-23472 | Passeo uses insecure random number generator | 5.9CNA v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-23470 | Arbitrary file access in the Galaxy data analysis platform | 8.6CNA v3.1 | 0.8% | 2022-12-06 | Fix |
| CVE-2022-23466 | DOM-based cross-site scripting (XSS) in teler dashboard | 5.4CNA v3.1 | 0.4% | 2022-12-06 | Fix |
| CVE-2022-4300 | FastCMS template edit injection | 8.8v3.1 | 0.8% | 2022-12-06 | |
| CVE-2022-4296 | TP-Link TL-WR740N ARP resource consumption | 5.5v3.1 | 0.3% | 2022-12-06 | |
| CVE-2022-4173 | Avast and AVG Antivirus for Windows vulnerable to privilege escalation | 8.8v3.1 | 0.7% | 2022-12-06 | |
| CVE-2022-4147 | Quarkus CORS filter allows simple GET and POST requests with an invalid Origin to proceed | 7.5v3.1 | 0.6% | 2022-12-06 | Fix |
| CVE-2022-46169 | Cacti command injection | 9.8CNA v3.1 | 99.8% | 2022-12-05 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-46164 | NodeBB account takeover via prototype | 9.4CNA v3.1 | 47.4% | 2022-12-05 | Exploit codeFix |
| CVE-2022-45990 | E-Commerce Website cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-05 | |
| CVE-2022-45912 | Zimbra Collaboration unrestricted file upload | 7.2v3.1 | 1.1% | 2022-12-05 | Fix |
| CVE-2022-45824 | Advanced Booking Calendar WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2022-12-05 | |
| CVE-2022-45822 | Advanced Booking Calendar WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2022-12-05 | |
| CVE-2022-45771 | pwndoc unrestricted file upload | 8.8v3.1 | 1.8% | 2022-12-05 | Exploit code |
| CVE-2022-45769 | Clicshopping V3 A cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-05 | |
| CVE-2022-45481 | thisAAY Lazy Mouse missing authentication | 9.8v3.1 | 1.6% | 2022-12-05 | Fix |
| CVE-2022-45479 | BEAppsMobile PC Keyboard WiFi and Bluetooth missing authentication | 9.8v3.1 | 1.6% | 2022-12-05 | Fix |
| CVE-2022-45478 | Telepad cleartext transmission of sensitive information | 5.9v3.1 | 0.3% | 2022-12-05 | Fix |
| CVE-2022-45477 | Telepad missing authentication | 9.8NVD v3.1 | 2.5% | 2022-12-05 | Fix |
| CVE-2022-45315 | MicroTik RouterOS out-of-bounds read | 9.8v3.1 | 1.3% | 2022-12-05 | Fix |
| CVE-2022-45313 | MikroTik RouterOS out-of-bounds read | 8.8v3.1 | 1.4% | 2022-12-05 | |
| CVE-2022-45020 | Rukovoditel cross-site scripting | 8.8v3.1 | 0.6% | 2022-12-05 | |
| CVE-2022-45019 | SLIMS Senayan Library Management System SQL injection | 7.5v3.1 | 0.8% | 2022-12-05 | |
| CVE-2022-44039 | Franklinfueling Colibri Firmware incorrect authorization | 9.8v3.1 | 1.0% | 2022-12-05 | |
| CVE-2022-43706 | Stackstorm Web UI cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-05 | Fix |
| CVE-2022-43557 | BD BodyGuard™ Pumps RS-232 interface vulnerability | 5.3CNA v3.1 | 0.2% | 2022-12-05 | Fix |
| CVE-2022-43556 | Concrete CMS vulnerable to cross-site scripting in the text input field | 6.1v3.1 | 0.6% | 2022-12-05 | Fix |
| CVE-2022-43553 | EdgeMAX EdgeRouter EdgeRouters remote code execution | 8.8v3.1 | 1.0% | 2022-12-05 | Fix |
| CVE-2022-43549 | Veeam Backup for Google Cloud improper authentication | 9.8v3.1 | 0.7% | 2022-12-05 | Fix |
| CVE-2022-43548 | Node.js Node A OS command injection | 8.1v3.1 | 14.0% | 2022-12-05 | Fix |
| CVE-2022-43516 | Zabbix agent installer adds allow all TCP any any firewall rule | 6.5CNA v3.1 | 0.9% | 2022-12-05 | |
| CVE-2022-43515 | X-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode | 5.3CNA v3.1 | 1.2% | 2022-12-05 | Fix |
| CVE-2022-43504 | WordPress Post by Email feature improper authentication | 5.3v3.1 | 1.4% | 2022-12-05 | Fix |
| CVE-2022-43500 | WordPress cross-site scripting | 6.1v3.1 | 0.7% | 2022-12-05 | Fix |
| CVE-2022-43499 | SHIRASAGI stored cross-site scripting | 5.4v3.1 | 0.8% | 2022-12-05 | Fix |
| CVE-2022-43497 | WordPress cross-site scripting | 6.1v3.1 | 1.0% | 2022-12-05 | Fix |
| CVE-2022-43487 | Salon booking system cross-site scripting | 6.1v3.1 | 0.8% | 2022-12-05 | Fix |
| CVE-2022-43484 | TERASOLUNA Server Framework vulnerable to ClassLoader manipulation | 7.8v3.1 | 0.4% | 2022-12-05 | Fix |
| CVE-2022-43479 | SHIRASAGI open redirect | 6.1v3.1 | 0.9% | 2022-12-05 | Fix |
| CVE-2022-43470 | FUJI SOFT +F FS040U cross-site request forgery | 7.3v3.1 | 0.2% | 2022-12-05 | Fix |
| CVE-2022-43442 | FUJI SOFT +F FS040U software plaintext password storage | 4.6v3.1 | 0.3% | 2022-12-05 | Fix |
| CVE-2022-43097 | User Registration & User Management System cross-site scripting | 5.4NVD v3.1 | 0.6% | 2022-12-05 | |
| CVE-2022-42706 | Sangoma asterisk path traversal | 4.9v3.1 | 1.1% | 2022-12-05 | Fix |
| CVE-2022-42705 | Sangoma asterisk res_pjsip_pubsub.c use-after-free | 6.5v3.1 | 1.2% | 2022-12-05 | Fix |
| CVE-2022-42496 | Nadesiko3 vulnerable to OS command injection | 9.8v3.1 | 2.1% | 2022-12-05 | Fix |
| CVE-2022-41830 | Kyocera Document Solutions MFPs and printers stored cross-site scripting | 4.8v3.1 | 0.8% | 2022-12-05 | Fix |
| CVE-2022-41807 | Kyocera Document Solutions MFPs and printers missing authorization | 6.5v3.1 | 0.5% | 2022-12-05 | Fix |
| CVE-2022-41798 | Kyocera Document Solutions MFPs and printers authentication bypass by spoofing | 6.5v3.1 | 0.6% | 2022-12-05 | Fix |
| CVE-2022-41777 | Nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit | 7.5v3.1 | 1.5% | 2022-12-05 | Fix |
| CVE-2022-41642 | Nadesiko3 OS command injection | 9.8v3.1 | 2.1% | 2022-12-05 | Fix |
| CVE-2022-40259 | MegaRAC default credentials | 9.8v3.1 | 0.6% | 2022-12-05 | Emerging ThreatsFix |
| CVE-2022-40242 | MegaRAC default credentials | 9.8v3.1 | 0.7% | 2022-12-05 | Fix |
| CVE-2022-37783 | Craft CMS discloses password hashes | 7.5v3.1 | 1.0% | 2022-12-05 | Fix |
| CVE-2022-37325 | Sangoma asterisk out-of-bounds write | 7.5v3.1 | 1.2% | 2022-12-05 | Fix |
| CVE-2022-35260 | https://github.com/curl/curl out-of-bounds read | 6.5NVD v3.1 | 2.7% | 2022-12-05 | Fix |
| CVE-2022-35259 | Ivanti Endpoint Manager XML injection | 7.8v3.1 | 0.7% | 2022-12-05 | Fix |
| CVE-2022-35258 | Ivanti Connect Secure (ICS) denial of service | 7.5v3.1 | 2.5% | 2022-12-05 | |
| CVE-2022-35256 | Node.js Node HTTP request smuggling | 6.5v3.1 | 2.6% | 2022-12-05 | Fix |
| CVE-2022-35255 | Node.js Node weak random number generator | 9.1v3.1 | 1.9% | 2022-12-05 | Fix |
| CVE-2022-35254 | Ivanti Connect Secure (ICS) use-after-free | 7.5v3.1 | 2.5% | 2022-12-05 | |
| CVE-2022-32634 | MediaTek chipsets improper input validation in ccci | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32633 | MediaTek chipsets incorrect use of privileged apis in Wi-Fi | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32632 | MediaTek chipsets improper input validation in Wi-Fi | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32631 | MediaTek chipsets improper input validation in Wi-Fi | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32630 | MediaTek chipsets stack-based buffer overflow in throttling | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32629 | MediaTek chipsets improper input validation in isp | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32628 | MediaTek chipsets improper input validation in isp | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32626 | MediaTek chipsets improper input validation in display | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32625 | MediaTek chipsets improper input validation in display | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32624 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in throttling | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |