CVE-2022 records published in December 2022
Page three of three: records 2,001 to 2,200 of the 2,200 published in December 2022, newest first. The first page carries the figures for December 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-32622 | MediaTek chipsets improper input validation in gz | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32621 | MediaTek MT6895, MT6983 improper synchronization in isp | 6.4v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32620 | MediaTek chipsets improper access control in mpu | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32619 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in keyinstall | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32598 | MediaTek chipsets improper input validation in widevine | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32597 | MediaTek chipsets improper input validation in widevine | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32596 | MediaTek chipsets improper input validation in widevine | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32594 | MediaTek chipsets improper input validation in widevine | 6.7v3.1 | 0.1% | 2022-12-05 | Fix |
| CVE-2022-32224 | https://github.com/rails/rails Active Record RCE bug with Serialized Columns | 9.8v3.1 | 2.4% | 2022-12-05 | Exploit codeFix |
| CVE-2022-32221 | https://github.com/curl/curl information disclosure | 9.8NVD v3.1 | 5.1% | 2022-12-05 | Fix |
| CVE-2022-30123 | Possible shell escape sequence injection vulnerability in Rack | 10.0v3.1 | 1.8% | 2022-12-05 | Fix |
| CVE-2022-30122 | Denial of service vulnerability in Rack Multipart Parsing | 7.5v3.1 | 2.1% | 2022-12-05 | Fix |
| CVE-2022-27773 | Ivanti Endpoint Manger incorrect default permissions | 9.8v3.1 | 2.6% | 2022-12-05 | Fix |
| CVE-2022-23467 | Out-of-bounds read in OpenRazer driver | 4.4CNA v3.1 | 0.4% | 2022-12-05 | Fix |
| CVE-2022-23143 | OTCP incorrect permission assignment | 6.5v3.1 | 0.6% | 2022-12-05 | Fix |
| CVE-2022-4293 | Floating Point Comparison with Incorrect Operator in Vim/Vim | 5.5v3.1 | 0.5% | 2022-12-05 | Fix |
| CVE-2022-4292 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.7% | 2022-12-05 | Fix |
| CVE-2022-4282 | SpringBootCMS Template Management injection | 7.2v3.1 | 0.7% | 2022-12-05 | |
| CVE-2022-4281 | Facepay camera.php authorization | 8.8v3.1 | 0.4% | 2022-12-05 | |
| CVE-2022-4269 | Linux kernel (TC subsystem) deadlock | 5.5NVD v3.1 | 0.2% | 2022-12-05 | Fix |
| CVE-2022-3926 | WP OAuth Server WordPress plugin client Secret Regeneration via CSRF | 6.5NVD v3.1 | 0.3% | 2022-12-05 | Fix |
| CVE-2022-3909 | The Add Comments WordPress plugin through 1.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). | 4.8NVD v3.1 | 0.6% | 2022-12-05 | |
| CVE-2022-3907 | Clerk WordPress plugin authentication bypass and API keys disclosure | 7.5NVD v3.1 | 0.9% | 2022-12-05 | Fix |
| CVE-2022-3892 | WP OAuth Server WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-05 | Fix |
| CVE-2022-3858 | Chaty WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2022-12-05 | Fix |
| CVE-2022-3856 | Comic Book Management System WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2022-12-05 | Fix |
| CVE-2022-3846 | Workreap - Freelance Marketplace and Directory WordPress theme Private Message disclosure via IDOR | 7.5NVD v3.1 | 0.8% | 2022-12-05 | Fix |
| CVE-2022-3838 | WPUpper Share Buttons WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-05 | Fix |
| CVE-2022-3837 | Uji Countdown WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2022-12-05 | Fix |
| CVE-2022-3830 | WP Page Builder WordPress plugin Admin+ stored Cross-Site | 4.8NVD v3.1 | 0.5% | 2022-12-05 | |
| CVE-2022-3694 | Syncee - Global Dropshipping WordPress plugin authentication token disclosure | 7.5NVD v3.1 | 0.9% | 2022-12-05 | Fix |
| CVE-2022-3677 | Advanced Import WordPress plugin arbitrary plugin installation and activation via CSRF | 6.5NVD v3.1 | 0.4% | 2022-12-05 | Fix |
| CVE-2022-3426 | Advanced WP Columns WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2022-12-05 | |
| CVE-2022-3249 | WP CSV Exporter WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2022-12-05 | Fix |
| CVE-2022-2827 | AMI MegaRAC information disclosure | 7.5v3.1 | 1.7% | 2022-12-05 | Emerging ThreatsFix |
| CVE-2022-1540 | PostmagThemes Demo WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 1.1% | 2022-12-05 | Fix |
| CVE-2022-46414 | Veritas Access Appliance missing authentication | 9.8v3.1 | 1.3% | 2022-12-04 | Fix |
| CVE-2022-46413 | Veritas Access Appliance remote command execution | 8.8v3.1 | 1.4% | 2022-12-04 | Fix |
| CVE-2022-46412 | Veritas NetBackup Flex Scale Appliance restricted shell vulnerability | 8.8v3.1 | 0.7% | 2022-12-04 | Fix |
| CVE-2022-46411 | Veritas Access Appliance improper authentication | 8.8v3.1 | 0.6% | 2022-12-04 | Fix |
| CVE-2022-46410 | Veritas Netbackup Flex Scale Appliance improper privilege management | 8.8v3.1 | 0.6% | 2022-12-04 | Fix |
| CVE-2022-46405 | Joinmastodon mastodon uncontrolled recursion | 7.5v3.1 | 0.9% | 2022-12-04 | Fix |
| CVE-2022-46391 | Awstats cross-site scripting | 6.1v3.1 | 0.7% | 2022-12-04 | Fix |
| CVE-2022-40968 | 2kb Amazon Affiliates Store WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2022-12-04 | |
| CVE-2022-35730 | Oceanwp sticky header WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2022-12-04 | |
| CVE-2022-35508 | Proxmox Mail Gateway server-side request forgery | 9.8v3.1 | 1.2% | 2022-12-04 | |
| CVE-2022-35507 | Proxmox Virtual Environment CRLF injection | 7.1v3.1 | 1.4% | 2022-12-04 | Nuclei |
| CVE-2022-4280 | Dot Tech Smart Campus System findUser information disclosure | 7.5v3.1 | 0.7% | 2022-12-03 | |
| CVE-2022-4279 | SourceCodester Human Resource Management System employeeview.php cross-site scripting | 6.1v3.1 | 0.5% | 2022-12-03 | |
| CVE-2022-4278 | SourceCodester Human Resource Management System employeeadd.php SQL injection | 7.2v3.1 | 0.7% | 2022-12-03 | |
| CVE-2022-4277 | Shaoxing Background Management System Bd SQL injection | 9.8v3.1 | 0.6% | 2022-12-03 | |
| CVE-2022-4276 | House Rental System POST request tenant-engine.php unrestricted upload | 9.8v3.1 | 0.6% | 2022-12-03 | |
| CVE-2022-4275 | House Rental System POST request search-property.php SQL injection | 9.8v3.1 | 0.6% | 2022-12-03 | |
| CVE-2022-4274 | House Rental System view-property.php SQL injection | 9.8v3.1 | 0.6% | 2022-12-03 | |
| CVE-2022-4273 | SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload | 9.8v3.1 | 0.8% | 2022-12-03 | |
| CVE-2022-4272 | FeMiner wms unrestricted upload | 9.8v3.1 | 0.8% | 2022-12-03 | |
| CVE-2022-3491 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.5% | 2022-12-03 | Fix |
| CVE-2022-46366 | Apache Tapestry allows deserialization of untrusted data | 9.8v3.1 | 3.6% | 2022-12-02 | Fix |
| CVE-2022-46167 | Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace | 8.8CNA v3.1 | 0.9% | 2022-12-02 | Fix |
| CVE-2022-46159 | Any authenticated Discourse user can create an unlisted topic | 4.3CNA v3.1 | 0.7% | 2022-12-02 | Fix |
| CVE-2022-46145 | authentik vulnerable to unauthorized user creation and potential account takeover | 8.1CNA v3.1 | 1.3% | 2022-12-02 | Fix |
| CVE-2022-45674 | Tenda AC6 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-02 | |
| CVE-2022-45673 | Tenda AC6 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-02 | |
| CVE-2022-45672 | Tenda i22 buffer overflow | 7.5v3.1 | 9.1% | 2022-12-02 | |
| CVE-2022-45671 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45670 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45669 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45668 | Tenda i22 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-02 | |
| CVE-2022-45667 | Tenda i22 cross-site request forgery | 6.5v3.1 | 0.3% | 2022-12-02 | |
| CVE-2022-45664 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45663 | Tenda i22 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45661 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45660 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45659 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45658 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45657 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45656 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45655 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45654 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45653 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45652 | Tendacn AC6 buffer overflow | 7.5NVD v3.1 | 0.9% | 2022-12-02 | |
| CVE-2022-45651 | Tendacn AC6 buffer overflow | 7.5NVD v3.1 | 0.9% | 2022-12-02 | |
| CVE-2022-45650 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45649 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45648 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45647 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45646 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45645 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45644 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45643 | Tendacn AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45641 | Tenda AC6 buffer overflow | 7.5v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-45562 | Telosalliance Omnia Mpx Node insecure permissions | 8.8v3.1 | 1.0% | 2022-12-02 | |
| CVE-2022-45483 | thisAAY Lazy Mouse cleartext transmission of sensitive information | 5.9v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-45482 | thisAAY Lazy Mouse weak password requirements | 9.8v3.1 | 1.3% | 2022-12-02 | |
| CVE-2022-45480 | Telepad PC Keyboard WiFi and Bluetooth cleartext transmission of sensitive information | 5.9v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-45215 | Bookstore Management System Book Store Management System v1.0.0 cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44962 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44961 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44960 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44959 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44957 | WebTareas cross-site scripting | 5.4v3.1 | 1.0% | 2022-12-02 | Nuclei |
| CVE-2022-44956 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44955 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44954 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44953 | WebTareas cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-02 | |
| CVE-2022-44952 | Rukovoditel cross-site scripting | 5.4v3.1 | 0.9% | 2022-12-02 | Nuclei |
| CVE-2022-44951 | Rukovoditel cross-site scripting | 5.4v3.1 | 0.9% | 2022-12-02 | Nuclei |
| CVE-2022-44950 | Rukovoditel cross-site scripting | 5.4v3.1 | 0.9% | 2022-12-02 | Nuclei |
| CVE-2022-44949 | Rukovoditel cross-site scripting | 5.4v3.1 | 0.9% | 2022-12-02 | Nuclei |
| CVE-2022-44948 | Rukovoditel cross-site scripting | 5.4v3.1 | 0.9% | 2022-12-02 | Nuclei |
| CVE-2022-44947 | Rukovoditel cross-site scripting | 5.4v3.1 | 1.0% | 2022-12-02 | Nuclei |
| CVE-2022-44946 | Rukovoditel cross-site scripting | 5.4v3.1 | 1.0% | 2022-12-02 | Nuclei |
| CVE-2022-44945 | Rukovoditel SQL injection | 9.8v3.1 | 0.9% | 2022-12-02 | |
| CVE-2022-44944 | Rukovoditel cross-site scripting | 5.4v3.1 | 1.0% | 2022-12-02 | Nuclei |
| CVE-2022-44930 | D-Link DHP-W310AV OS command injection | 9.8v3.1 | 2.5% | 2022-12-02 | |
| CVE-2022-44929 | D-Link Dvg-g5402sp improper access control | 9.8v3.1 | 1.1% | 2022-12-02 | |
| CVE-2022-44928 | D-Link Dvg-g5402sp OS command injection | 9.8v3.1 | 2.7% | 2022-12-02 | |
| CVE-2022-44367 | Tenda i21 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-02 | |
| CVE-2022-44366 | Tenda i21 out-of-bounds write | 9.8v3.1 | 9.9% | 2022-12-02 | |
| CVE-2022-44365 | Tenda i21 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-02 | |
| CVE-2022-44363 | Tenda i21 out-of-bounds write | 9.8v3.1 | 0.8% | 2022-12-02 | |
| CVE-2022-44362 | Tenda i21 out-of-bounds write | 9.8v3.1 | 0.9% | 2022-12-02 | |
| CVE-2022-44348 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-12-02 | |
| CVE-2022-44347 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-12-02 | |
| CVE-2022-44345 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-12-02 | |
| CVE-2022-44291 | WebTareas SQL injection | 9.8v3.1 | 3.6% | 2022-12-02 | Nuclei |
| CVE-2022-44290 | WebTareas SQL injection | 9.8v3.1 | 3.6% | 2022-12-02 | Nuclei |
| CVE-2022-44277 | Sanitization Management System SQL injection | 7.2v3.1 | 0.7% | 2022-12-02 | |
| CVE-2022-43325 | Telosalliance Omnia Mpx Node command injection | 9.8v3.1 | 5.9% | 2022-12-02 | |
| CVE-2022-43272 | OFFIS DCMTK memory leak | 7.5v3.1 | 1.6% | 2022-12-02 | Fix |
| CVE-2022-23465 | SwiftTerm vulnerable to arbitrary command execution | 7.1CNA v3.1 | 0.5% | 2022-12-02 | Fix |
| CVE-2022-4271 | Cross-site scripting (XSS) Reflected in osTicket/osTicket | 5.4NVD v3.1 | 0.7% | 2022-12-02 | Fix |
| CVE-2022-4270 | Incorrect privilege assignment in M-Files Web Server | 2.0CNA v3.1 | 0.5% | 2022-12-02 | Fix |
| CVE-2022-4262 | Google Chromium V8 type confusion | 8.8NVD v3.1 | 23.5% | 2022-12-02 | KEVExploit codeFix |
| CVE-2022-4220 | Chained Quiz WordPress plugin cross-site request forgery to Question deletion | 4.3v3.1 | 0.4% | 2022-12-02 | Fix |
| CVE-2022-4219 | Chained Quiz WordPress plugin cross-site request forgery to Submitted Response deletion | 4.3v3.1 | 0.4% | 2022-12-02 | Fix |
| CVE-2022-4218 | Chained Quiz WordPress plugin cross-site request forgery to arbitrary Quiz deletion and Copying | 4.3v3.1 | 0.4% | 2022-12-02 | Fix |
| CVE-2022-4217 | Chained Quiz WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.6% | 2022-12-02 | Fix |
| CVE-2022-4216 | Chained Quiz WordPress plugin authenticated (Admin+) stored cross-site scripting via Facebook App ID | 4.8v3.1 | 0.6% | 2022-12-02 | Fix |
| CVE-2022-4215 | Chained Quiz WordPress plugin reflected cross-site scripting via date | 6.1v3.1 | 0.9% | 2022-12-02 | Fix |
| CVE-2022-4214 | Chained Quiz WordPress plugin reflected cross-site scripting via ip | 6.1v3.1 | 0.8% | 2022-12-02 | Fix |
| CVE-2022-4213 | Chained Quiz WordPress plugin reflected cross-site scripting via dn | 6.1v3.1 | 0.6% | 2022-12-02 | Fix |
| CVE-2022-4212 | Chained Quiz WordPress plugin reflected cross-site scripting via ipf | 6.1v3.1 | 0.8% | 2022-12-02 | Fix |
| CVE-2022-4211 | Chained Quiz WordPress plugin reflected cross-site scripting via emailf | 6.1v3.1 | 0.8% | 2022-12-02 | Fix |
| CVE-2022-4210 | Chained Quiz WordPress plugin reflected cross-site scripting via dnf | 6.1v3.1 | 0.8% | 2022-12-02 | Fix |
| CVE-2022-4209 | Chained Quiz WordPress plugin reflected cross-site scripting via pointsf | 6.1v3.1 | 0.8% | 2022-12-02 | Fix |
| CVE-2022-4208 | Chained Quiz WordPress plugin reflected cross-site scripting via datef | 6.1v3.1 | 0.8% | 2022-12-02 | Fix |
| CVE-2022-3591 | vim/vim GitHub repository use-after-free | 7.8v3.1 | 0.4% | 2022-12-02 | Fix |
| CVE-2022-3520 | Heap-based buffer overflow in Vim/Vim | 9.8v3.1 | 1.0% | 2022-12-02 | Fix |
| CVE-2022-3086 | Cradlepoint IBR600 command injection | 7.6v3.1 | 0.3% | 2022-12-02 | Fix |
| CVE-2022-2808 | IDOR in Prens Student Information System | 8.8v3.1 | 0.7% | 2022-12-02 | Fix |
| CVE-2022-2807 | SQL injection in Prens Student Information System | 9.8v3.1 | 0.6% | 2022-12-02 | Fix |
| CVE-2022-2642 | Horner Automation RCC972 information disclosure | 7.5v3.1 | 0.6% | 2022-12-02 | Fix |
| CVE-2022-2641 | Horner Automation Remote Compact Controller (RCC) 972 hard-coded cryptographic key | 9.8v3.1 | 0.5% | 2022-12-02 | Fix |
| CVE-2022-2640 | Horner Automation Remote Compact Controller (RCC) 972 inadequate encryption strength | 7.5v3.1 | 0.2% | 2022-12-02 | Fix |
| CVE-2022-45640 | Tenda AC6 out-of-bounds write | 7.5v3.1 | 1.0% | 2022-12-01 | |
| CVE-2022-45050 | Reflected XSS in Axiell Iguana CMS | 6.1v3.1 | 0.4% | 2022-12-01 | Fix |
| CVE-2022-45045 | Xiongmaitech Nbd6808t-pl OS command injection | 8.8v3.1 | 1.2% | 2022-12-01 | |
| CVE-2022-44262 | FF4J is vulnerable to remote code execution (RCE) | 9.8v3.1 | 1.5% | 2022-12-01 | Exploit codeFix |
| CVE-2022-44212 | GL.iNet Goodcloud improper access control | 5.9v3.1 | 0.6% | 2022-12-01 | |
| CVE-2022-44211 | GL.iNet Goodcloud improper access control | 7.4v3.1 | 0.6% | 2022-12-01 | Fix |
| CVE-2022-43901 | IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure | 5.7CNA v3.1 | 0.2% | 2022-12-01 | Fix |
| CVE-2022-43900 | IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass | 5.3CNA v3.1 | 0.2% | 2022-12-01 | Fix |
| CVE-2022-43333 | Telenia Software TVox code injection | 9.8v3.1 | 1.6% | 2022-12-01 | |
| CVE-2022-42718 | NI Labview Command Line Interface installation folder incorrect default permissions | 7.8v3.1 | 0.2% | 2022-12-01 | Fix |
| CVE-2022-41971 | Nextcloud Talk information disclosure | 4.8CNA v3.1 | 0.8% | 2022-12-01 | Fix |
| CVE-2022-41970 | Nextcloud Server's disabled download shares still allow download through preview images | 2.6CNA v3.1 | 0.6% | 2022-12-01 | Fix |
| CVE-2022-41969 | Nextcloud Server has no password length limit when creating a user as an administrator | 2.4CNA v3.1 | 0.9% | 2022-12-01 | Fix |
| CVE-2022-41968 | Nextcloud Server's calendar name length not validated before writing to database | 3.5CNA v3.1 | 0.9% | 2022-12-01 | Fix |
| CVE-2022-41297 | IBM Db2U cross-site request forgery | 4.3CNA v3.1 | 0.2% | 2022-12-01 | Fix |
| CVE-2022-40849 | ThinkCMF stored cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2022-12-01 | Fix |
| CVE-2022-40489 | ThinkCMF cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2022-12-01 | Fix |
| CVE-2022-40204 | Digital Alert Systems DASDEC all current versions cross-site scripting | 5.4v3.1 | 0.3% | 2022-12-01 | Fix |
| CVE-2022-37017 | Broadcom Symantec Endpoint Protection password protection vulnerability | 7.5NVD v3.1 | 1.2% | 2022-12-01 | Exploit codeFix |
| CVE-2022-37016 | Symantec Endpoint Protection privilege escalation | 9.8NVD v3.1 | 0.7% | 2022-12-01 | Fix |
| CVE-2022-36431 | Rocket Software Trufusion arbitrary file upload | 9.8v3.1 | 1.1% | 2022-12-01 | Fix |
| CVE-2022-35120 | Ixpdata Easyinstall cleartext storage of sensitive information | 8.8v3.1 | 0.2% | 2022-12-01 | |
| CVE-2022-30528 | Isic.lk asith-eranga ISIC tour booking SQL injection | 9.8v3.1 | 1.2% | 2022-12-01 | |
| CVE-2022-29837 | Western Digital My Cloud Home and SanDisk ibi package installer path traversal | 4.7CNA v3.1 | 0.2% | 2022-12-01 | Fix |
| CVE-2022-28607 | Isic.lk information disclosure | 7.5v3.1 | 0.8% | 2022-12-01 | |
| CVE-2022-23737 | Improper privilege management in GitHub Enterprise Server leading to page creation and deletion | 6.5v3.1 | 0.7% | 2022-12-01 | Fix |
| CVE-2022-4257 | C-DATA Web Management System GET parameter jumpto.php argument injection | 9.8v3.1 | 43.9% | 2022-12-01 | |
| CVE-2022-4253 | SourceCodester Canteen Management System customer.php cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-01 | |
| CVE-2022-4252 | SourceCodester Canteen Management System categories.php builtin_echo cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-01 | |
| CVE-2022-4251 | Movie Ticket Booking System editBooking.php cross-site scripting | 5.4v3.1 | 0.4% | 2022-12-01 | |
| CVE-2022-4250 | Movie Ticket Booking System booking.php cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-01 | |
| CVE-2022-4249 | Movie Ticket Booking System POST request cross-site scripting | 6.1v3.1 | 0.4% | 2022-12-01 | |
| CVE-2022-4248 | Movie Ticket Booking System editBooking.php SQL injection | 9.8v3.1 | 0.5% | 2022-12-01 | |
| CVE-2022-4247 | Movie Ticket Booking System booking.php SQL injection | 9.8v3.1 | 0.5% | 2022-12-01 | |
| CVE-2022-4246 | Kakao PotPlayer MID file denial of service | 7.5v3.1 | 0.7% | 2022-12-01 | |
| CVE-2022-4221 | OS command injection in ASUS M25 NAS | 9.8NVD v3.1 | 4.8% | 2022-12-01 | |
| CVE-2022-3713 | Sophos Firewall code injection | 8.8CNA v3.1 | 0.7% | 2022-12-01 | Fix |
| CVE-2022-3711 | Sophos Firewall SQL injection | 4.3CNA v3.1 | 0.8% | 2022-12-01 | Fix |
| CVE-2022-3710 | Sophos Firewall SQL injection | 2.7CNA v3.1 | 0.8% | 2022-12-01 | Fix |
| CVE-2022-3709 | Sophos Firewall cross-site scripting | 6.8CNA v3.1 | 0.9% | 2022-12-01 | Fix |
| CVE-2022-3696 | Sophos Firewall code injection | 7.2CNA v3.1 | 1.2% | 2022-12-01 | Fix |
| CVE-2022-3270 | Incomplete Documentation of remote functions in Festo products | 9.8CNA v3.1 | 1.1% | 2022-12-01 | |
| CVE-2022-3226 | Sophos Firewall OS command injection | 7.2CNA v3.1 | 1.8% | 2022-12-01 | Fix |
| CVE-2022-2969 | ICSA-22-307-03 Delta Industrial Automation DIALink path traversal | 7.5v3.1 | 2.3% | 2022-12-01 | Fix |
| CVE-2022-1471 | Remote code execution in SnakeYAML | 9.8NVD v3.1 | 99.6% | 2022-12-01 | MetasploitEmerging ThreatsExploit codeKCVFix |