CVE-2022 records published after 2022
Page three of seven: records 2,001 to 3,000 of the 6,660 published after 2022, newest first. The first page carries the figures for After 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-47090 | GPAC MP4Box VVC parameter set parser buffer overflow | 7.8CISA ADP v3.1 | 0.3% | 2025-01-24 | |
| CVE-2022-23439 | Fortinet FortiTester externally controlled resource reference | 4.1CNA v3.1 | 0.4% | 2025-01-22 | Fix |
| CVE-2022-22491 | IBM App Connect Enterprise Certified Container denial of service | 5.5CNA v3.1 | 0.2% | 2025-01-09 | Fix |
| CVE-2022-45186 | An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database. | 8.1CISA ADP v3.1 | 0.6% | 2025-01-07 | Fix |
| CVE-2022-45185 | salesagility SuiteCRM deserialization of untrusted data | 8.8CISA ADP v3.1 | 1.1% | 2025-01-07 | Fix |
| CVE-2022-41573 | Ovidentia unrestricted file upload | 9.8CISA ADP v3.1 | 1.2% | 2025-01-07 | |
| CVE-2022-41572 | EyesOfNetwork incorrect default permissions | 9.8CISA ADP v3.1 | 0.6% | 2025-01-07 | |
| CVE-2022-22363 | IBM Cognos Controller information disclosure | 4.3CNA v3.1 | 0.8% | 2025-01-07 | Fix |
| CVE-2022-49035 | Linux kernel S5P HDMI CEC driver vulnerability | 5.5v3.1 | 0.2% | 2025-01-02 | Fix |
| CVE-2022-47601 | WP Table Manager WordPress plugin broken access control | 5.3CNA v3.1 | 0.4% | 2025-01-02 | Fix |
| CVE-2022-45830 | Analytify - Google Analytics Dashboard WordPress plugin privilege escalation | 9.8v3.1 | 0.4% | 2025-01-02 | Fix |
| CVE-2022-45811 | Post Teaser WordPress plugin Auth. broken access control | 5.4CNA v3.1 | 0.4% | 2025-01-02 | |
| CVE-2022-43476 | Subscribe to Category WordPress plugin broken access control | 4.3CNA v3.1 | 0.4% | 2025-01-02 | |
| CVE-2022-41995 | Photo Gallery Image Gallery by Ape WordPress plugin broken access control | 4.3CNA v3.1 | 0.3% | 2025-01-02 | |
| CVE-2022-48470 | Huawei HarmonyOS AILife Solution authentication bypass | 4.0CNA v3.1 | 0.1% | 2024-12-28 | Fix |
| CVE-2022-49034 | In the Linux kernel, the following vulnerability has been resolved: sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK When CONFIG_CPUMASK_OFFSTACK and CONFIG_DEBUG_PER_CPU_MAPS are selected, cpu_max_bits_warn() generates a runtime warning similar as below when showing /proc/cpuinfo. Fix this | 5.5v3.1 | 0.2% | 2024-12-27 | Fix |
| CVE-2022-21505 | Oracle Linux origin validation error | 6.7CNA v3.1 | 0.2% | 2024-12-24 | Fix |
| CVE-2022-34159 | Huawei CV81-WDM FW improper input validation | 7.5CNA v3.1 | 0.5% | 2024-12-20 | Fix |
| CVE-2022-32204 | Huawei CV81-WDM FW improper input validation | 7.5CNA v3.1 | 0.4% | 2024-12-20 | Fix |
| CVE-2022-32203 | Huawei CV81-WDM FW There is a command injection | 9.8CNA v3.1 | 1.2% | 2024-12-20 | Fix |
| CVE-2022-32144 | Huawei CV81-WDM FW improper input validation | 8.6CNA v3.1 | 0.2% | 2024-12-20 | |
| CVE-2022-44520 | Adobe Acrobat Reader use-after-free | 7.8CNA v3.1 | 0.4% | 2024-12-19 | Fix |
| CVE-2022-44519 | Adobe Acrobat Reader use-after-free | 5.5CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2022-44518 | Adobe Acrobat Reader use-after-free | 7.8CNA v3.1 | 0.4% | 2024-12-19 | Fix |
| CVE-2022-44517 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2022-44516 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2022-44515 | Adobe Acrobat Reader out-of-bounds read | 5.5CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2022-44514 | Adobe Acrobat Reader use-after-free | 7.8CNA v3.1 | 0.4% | 2024-12-19 | Fix |
| CVE-2022-44513 | Adobe Acrobat Reader out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2022-44512 | Adobe Acrobat Reader out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-12-19 | Fix |
| CVE-2022-33954 | IBM Robotic Process Automation information disclosure | 4.6CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2022-27600 | QNAP QTS, QuTS hero and QuTScloud resource exhaustion | 6.8CNA v3.1 | 0.6% | 2024-12-19 | Fix |
| CVE-2022-27595 | QNAP Systems QVPN Windows uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-12-19 | Fix |
| CVE-2022-40733 | Microsoft Windows null pointer dereference | 6.5v3.1 | 0.8% | 2024-12-18 | |
| CVE-2022-40732 | Microsoft Windows null pointer dereference | 7.5v3.1 | 0.8% | 2024-12-18 | |
| CVE-2022-47594 | Essential Blocks for Gutenberg WordPress plugin broken access control | 6.5v3.1 | 0.4% | 2024-12-13 | Fix |
| CVE-2022-47429 | Coming Soon Landing Page and Maintenance Mode WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-12-13 | |
| CVE-2022-47182 | APIExperts Square for WooCommerce WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-47176 | Depicter Slider WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-47168 | Printful Integration for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-46846 | Trending/Popular Post Slider and Widget WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-46840 | JS Help Desk WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-46838 | JS Help Desk WordPress plugin unauthenticated settings Change vulnerability | 9.1CNA v3.1 | 0.7% | 2024-12-13 | Fix |
| CVE-2022-46811 | VillaTheme ALD missing authorization | 4.3CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-46807 | Stock Sync for WooCommerce WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-46796 | CURCY WordPress plugin unauthenticated plugin settings change vulnerability | 6.5CNA v3.1 | 0.7% | 2024-12-13 | Fix |
| CVE-2022-46795 | Print Invoice and Delivery Notes for WooCommerce WordPress plugin CSRF plugin settings reset | 6.5v3.1 | 0.6% | 2024-12-13 | Fix |
| CVE-2022-45841 | Robo Gallery WordPress plugin Auth. broken access control | 5.4CNA v3.1 | 0.4% | 2024-12-13 | Fix |
| CVE-2022-45840 | Auto Affiliate Links WordPress plugin Unauth. broken access control | 6.5CNA v3.1 | 0.7% | 2024-12-13 | Fix |
| CVE-2022-45826 | Sunshine Photo Cart WordPress plugin Auth. broken access control | 5.4v3.1 | 0.4% | 2024-12-13 | Fix |
| CVE-2022-45819 | Popup Maker WordPress plugin broken access control | 3.5v3.1 | 0.4% | 2024-12-13 | Fix |
| CVE-2022-45806 | Formidable Forms WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-12-13 | Fix |
| CVE-2022-44578 | Owl Carousel WordPress plugin broken access control | 5.3CNA v3.1 | 0.5% | 2024-12-13 | |
| CVE-2022-43472 | eRoom WordPress plugin broken access control | 4.3CNA v3.1 | 0.6% | 2024-12-13 | Fix |
| CVE-2022-38947 | Jigar-sable Flipkart-clone-php SQL injection | 9.8CISA ADP v3.1 | 0.6% | 2024-12-09 | |
| CVE-2022-38946 | Divscorp Doctor-appointment arbitrary file upload | 9.8CISA ADP v3.1 | 0.8% | 2024-12-09 | |
| CVE-2022-29974 | AMI NTFS driver buffer overflow | 4.3CISA ADP v3.1 | 0.3% | 2024-12-09 | |
| CVE-2022-41137 | Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore | 8.3CISA ADP v3.1 | 1.6% | 2024-12-05 | Fix |
| CVE-2022-33862 | Improper access control mechanism in IPP | 6.7CNA v3.1 | 0.2% | 2024-11-25 | Fix |
| CVE-2022-33861 | Eaton Intelligent Power Protector insufficient verification of authenticity in IPP | 5.1CNA v3.1 | 0.1% | 2024-11-25 | Fix |
| CVE-2022-26324 | Possible XSS in iManager URL for access component | 7.6CNA v3.1 | 0.3% | 2024-11-22 | Fix |
| CVE-2022-43937 | Brocade SANnav information disclosure | 5.7CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2022-43936 | Brocade Fabric OS switch passwords when debugging is enabled | 6.8CNA v3.1 | 0.8% | 2024-11-21 | Fix |
| CVE-2022-43935 | Brocade SANnav switch passwords and authorization IDs are printed in the embedded MLS DB file | 5.3CNA v3.1 | 0.2% | 2024-11-21 | Fix |
| CVE-2022-43934 | Brocade SANnav Weak Key-exchange algorithms | 6.5CNA v3.1 | 0.5% | 2024-11-21 | Fix |
| CVE-2022-43933 | Brocade SANnav configuration secrets are logged in support-save | 4.4CNA v3.1 | 0.3% | 2024-11-21 | Fix |
| CVE-2022-47424 | ARMember WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-11-19 | Fix |
| CVE-2022-20948 | Cisco BroadWorks Hosted Thin Receptionist cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2022-20939 | Cisco Smart Software Manager On-prem privilege escalation | 4.3CNA v3.1 | 0.6% | 2024-11-15 | Fix |
| CVE-2022-20931 | Cisco Touch 10 Device Downgrade Attack vulnerability | 6.5CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2022-20871 | Cisco Secure Web Appliance privilege escalation | 6.3CNA v3.1 | 1.9% | 2024-11-15 | Fix |
| CVE-2022-20853 | Cisco Expressway Series and Cisco TelePresence VCS cross-site request forgery | 7.4CNA v3.1 | 0.6% | 2024-11-15 | Fix |
| CVE-2022-20849 | Cisco IOS XR Software Broadband Network Gateway PPPoE denial of service | 6.1CNA v3.1 | 0.3% | 2024-11-15 | Fix |
| CVE-2022-20846 | Cisco IOS XR Software Cisco Discovery protocol buffer overflow | 4.3CNA v3.1 | 1.0% | 2024-11-15 | Fix |
| CVE-2022-20845 | Cisco Network Convergence System 4000 Series TL1 denial of service | 6.0CNA v3.1 | 0.2% | 2024-11-15 | Fix |
| CVE-2022-20814 | Cisco Expressway Series and Cisco TelePresence VCS improper certificate validation | 7.4CNA v3.1 | 0.9% | 2024-11-15 | Fix |
| CVE-2022-20793 | Cisco Touch 10 Device Insufficient Identity Verification vulnerability | 6.8CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2022-20766 | Cisco ATA 190 Series Analog Telephone Adapter firmware Cisco Discovery protocol denial of service | 5.3CNA v3.1 | 0.9% | 2024-11-15 | Fix |
| CVE-2022-20685 | Multiple Cisco Products Snort Modbus denial of service | 7.5CNA v3.1 | 1.4% | 2024-11-15 | Fix |
| CVE-2022-20663 | Secure Network Analytics cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2022-20657 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2022-20656 | Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager path traversal | 6.5CNA v3.1 | 1.7% | 2024-11-15 | Fix |
| CVE-2022-20655 | Cisco IOS XR Software OS command injection | 8.8CNA v3.1 | 0.8% | 2024-11-15 | Fix |
| CVE-2022-20654 | Cisco Webex Meetings cross-site scripting | 6.1CNA v3.1 | 0.6% | 2024-11-15 | Fix |
| CVE-2022-20652 | Cisco Tetration command injection | 6.5CNA v3.1 | 1.3% | 2024-11-15 | Fix |
| CVE-2022-20649 | Cisco Redundancy Configuration Manager Debug remote code execution | 8.1CNA v3.1 | 12.0% | 2024-11-15 | Fix |
| CVE-2022-20648 | Cisco Redundancy Configuration Manager Debug information disclosure | 5.3CNA v3.1 | 1.0% | 2024-11-15 | Fix |
| CVE-2022-20634 | Cisco Enterprise Chat And Email open redirect | 4.7CNA v3.1 | 0.6% | 2024-11-15 | Fix |
| CVE-2022-20633 | Cisco Enterprise Chat And Email Username Enumeration vulnerability | 5.3CNA v3.1 | 0.8% | 2024-11-15 | Fix |
| CVE-2022-20632 | Cisco Enterprise Chat And Email cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2022-20631 | Cisco Enterprise Chat And Email cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-11-15 | Fix |
| CVE-2022-20626 | Cisco Prime Access Registrar Appliance cross-site scripting | 5.5CNA v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2022-1884 | Remote command execution in gogs/gogs | 9.8v3.1 | 1.8% | 2024-11-15 | Fix |
| CVE-2022-1226 | Cross-site scripting (XSS) in phpipam/phpipam | 4.8v3.1 | 0.4% | 2024-11-15 | Fix |
| CVE-2022-31671 | Linux Foundation Harbor P2P preheat execution logs improper authorization | 7.4CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2022-31670 | Harbor fails to validate the user permissions when updating tag retention policies | 7.7CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2022-31669 | Harbor fails to validate the user permissions when updating tag immutability policies | 6.4CNA v3.1 | 0.4% | 2024-11-14 | Fix |
| CVE-2022-31668 | Harbor user permission validation failure and disclosure of P2P preheat execution logs | 7.4CNA v3.1 | 0.3% | 2024-11-14 | Fix |
| CVE-2022-31667 | Harbor fails to validate the user permissions when updating a robot account | 6.4CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2022-31666 | Harbor fails to validate user permissions while Viewing, updating and deleting Webhook policies | 7.7CNA v3.1 | 0.5% | 2024-11-14 | Fix |
| CVE-2022-2232 | Red Hat Single Sign-On 7 keycloak: Ldap injection on username input | 7.5CNA v3.1 | 0.7% | 2024-11-14 | Fix |
| CVE-2022-45157 | Exposure of vSphere's CPI and CSI credentials in Rancher | 8.5CNA v4.0 | 0.4% | 2024-11-13 | Fix |
| CVE-2022-30361 | Ovaledge insecure storage of sensitive information | 5.3v3.1 | 0.4% | 2024-10-25 | |
| CVE-2022-30360 | Ovaledge cross-site scripting | 6.4v3.1 | 0.3% | 2024-10-25 | |
| CVE-2022-30359 | Ovaledge cross-site scripting | 4.3v3.1 | 0.3% | 2024-10-25 | |
| CVE-2022-30358 | Ovaledge incorrect authorization | 8.8v3.1 | 0.5% | 2024-10-25 | |
| CVE-2022-30357 | Ovaledge cross-site request forgery | 8.8NVD v3.1 | 0.3% | 2024-10-25 | |
| CVE-2022-30356 | Ovaledge incorrect authorization | 4.7NVD v3.1 | 0.4% | 2024-10-25 | |
| CVE-2022-30355 | Ovaledge incorrect default permissions | 9.8CISA ADP v3.1 | 0.5% | 2024-10-25 | |
| CVE-2022-30354 | Ovaledge incorrect permission assignment | 7.5CISA ADP v3.1 | 0.5% | 2024-10-25 | |
| CVE-2022-23862 | YSoft Safeq local privilege escalation | 7.8v3.1 | 0.5% | 2024-10-22 | Exploit code |
| CVE-2022-23861 | YSoft Safeq cross-site scripting | 5.4v3.1 | 0.5% | 2024-10-22 | Exploit code |
| CVE-2022-49033 | Linux kernel btrfs qgroup inheritance vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49032 | Linux kernel afe4404 out-of-bounds read | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49031 | Linux kernel afe4403 out-of-bounds read | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49030 | Linux kernel libbpf ring buffer mmap integer overflow | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49029 | Linux kernel hwmon use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49028 | Linux kernel ixgbevf driver initialization resource leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49027 | Linux kernel iavf driver initialization resource leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49026 | Linux kernel e100 use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49025 | Linux kernel mlx5e termination table handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49024 | Linux kernel m_can PCI CAN driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49023 | Linux kernel cfg80211 element parsing buffer overflow | 7.1CNA v3.1 | 0.4% | 2024-10-21 | Fix |
| CVE-2022-49022 | Linux kernel mac80211 airtime accounting vulnerability | 8.1CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49021 | Linux kernel PHY driver probe null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49020 | Linux kernel net/9p memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49019 | Linux kernel nixge Ethernet DMA buffer descriptors null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49018 | Linux kernel MPTCP socket close handling improper locking | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49017 | Linux kernel TIPC crypto message reception use-after-free | 8.8CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2022-49016 | Linux kernel mdiobus PHY device registration memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49015 | Linux kernel HSR driver use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49014 | Linux kernel TUN driver device detach use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49013 | Linux kernel SCTP stream outqueue migration memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49012 | Linux kernel afs server record handling vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49011 | Linux kernel coretemp hwmon PCI device handling memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49010 | Linux kernel coretemp hwmon sysfs cleanup null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49009 | Linux kernel asus-ec-sensors hwmon driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49008 | Linux kernel can327 CAN driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49007 | Linux kernel nilfs2 persistent object allocator null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49006 | Linux kernel dynamic tracing event buffers use-after-free | 7.8v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-49005 | Linux kernel ASoC volume control bounds check vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49004 | Linux kernel RISC-V EFI page table switching denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49003 | Linux kernel NVMe multipath namespace list use-after-free | 9.8CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2022-49002 | Linux kernel iommu/vt-d resource leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49001 | Linux kernel RISC-V vmap stack overflow handling race condition | 7.0CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-49000 | Linux kernel iommu/vt-d resource leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48999 | Linux kernel IPv4 multipath route deletion out-of-bounds read | 7.1CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48998 | Linux kernel powerpc/bpf/32 out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48997 | Linux kernel TPM suspend handling race condition | 4.7v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48996 | Linux kernel DAMON sysfs scheme interface vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48995 | Linux kernel Raydium touchscreen I2C driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48994 | Linux kernel ALSA sequencer variable event expansion vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48992 | Linux kernel ASoC dynamic PCM back-end reparenting null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48991 | Linux kernel khugepaged shmem and file collapse use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48990 | Linux kernel amdgpu GPU recovery use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48989 | Linux kernel fscache cookie state machine race condition | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48988 | Linux kernel memory cgroup event control use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48987 | Linux kernel V4L2 DV timings validation integer overflow | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48986 | Linux kernel get_user_pages_fast DAX handling vulnerability | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48985 | Linux kernel mana memory corruption | 9.8CNA v3.1 | 0.6% | 2024-10-21 | Fix |
| CVE-2022-48984 | Linux kernel SLCAN driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48983 | Linux kernel io_uring task exit callback null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48982 | Linux kernel Bluetooth HCI CSR controller registration denial of service | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48981 | Linux kernel DRM SHMEM helper use-after-free | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48980 | Linux kernel SJA1105 DSA switch driver out-of-bounds write | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48979 | Linux kernel DCN32 display mode library vulnerability | 7.8CNA v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48978 | Linux kernel HID report descriptor parser vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48977 | Linux kernel CAN receive filter null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48976 | Linux kernel netfilter flow table offload statistics vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48975 | Linux kernel GPIO character device registration memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48974 | Linux kernel netfilter connection tracking statistics vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48973 | Linux kernel AMD8111 GPIO driver resource leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48972 | Linux kernel mac802154 interface registration null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48971 | Linux kernel Bluetooth LED trigger init vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48970 | Linux kernel AF_UNIX diagnostics null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48969 | Linux kernel xen-netfront driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48968 | Linux kernel octeontx2-pf memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48967 | Linux kernel NFC target array handling vulnerability | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48966 | Linux kernel mvneta RSS configuration out-of-bounds read | 7.1v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48965 | Linux kernel Rockchip GPIO driver vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48964 | Linux kernel ravb use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48963 | Linux kernel IOSM WWAN driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48962 | Linux kernel HiSilicon FEMAC ethernet driver use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48961 | Linux kernel MDIO device driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48960 | Linux kernel HiSilicon hix5hd2 ethernet driver use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48959 | Linux kernel SJA1105 DSA switch driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48958 | Linux kernel GRETH ethernet driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48957 | Linux kernel DPAA2 switch ACL driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48956 | Linux kernel IPv6 fragmentation use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48955 | Linux kernel Thunderbolt networking driver memory leak | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48954 | Linux kernel s390/qeth use-after-free | 8.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48953 | Linux kernel RTC CMOS driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48952 | Linux kernel mt7621 PCI quirks table vulnerability | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48951 | Linux kernel ASoC volume control out-of-bounds write | 7.8v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48950 | Linux kernel perf events subsystem use-after-free | 7.8CNA v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48949 | Linux kernel igb driver VF mailbox vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48948 | Linux kernel USB gadget UVC driver buffer overflow | 7.8v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-48947 | Linux kernel L2CAP configuration response handling integer overflow | 5.5v3.1 | 0.2% | 2024-10-21 | Fix |
| CVE-2022-48946 | Linux kernel UDF file system extent handling vulnerability | 5.5v3.1 | 0.3% | 2024-10-21 | Fix |
| CVE-2022-4974 | Freemius SDK debug log and database option functions missing authorization | 6.3CNA v3.1 | 0.4% | 2024-10-16 | Fix |
| CVE-2022-4973 | WordPress Core stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2022-4972 | Download Monitor WordPress plugin missing authorization to unauthenticated data export | 7.5CNA v3.1 | 0.5% | 2024-10-16 | Fix |
| CVE-2022-4971 | Sassy Social Share WordPress plugin reflected cross-site scripting | 6.1CNA v3.1 | 17.3% | 2024-10-16 | NucleiFix |
| CVE-2022-4534 | wp-buy Limit Login Attempts (Spam Protection) plugin X-Forwarded-For header handling vulnerability | 5.3CNA v3.1 | 0.3% | 2024-10-08 | Fix |
| CVE-2022-49041 | Synology Drive Client backup task management functionality buffer overflow | 4.4CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2022-49040 | Synology Drive Client connection management functionality buffer overflow | 4.4CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2022-49039 | Synology Drive Client backup task management functionality out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2022-49038 | Synology Drive Client OpenSSL DLL component inclusion of untrusted functionality | 7.8CNA v3.1 | 0.2% | 2024-09-26 | Fix |
| CVE-2022-49037 | Synology Drive Client proxy settings component sensitive information in log files | 6.5CNA v3.1 | 0.5% | 2024-09-26 | Fix |
| CVE-2022-4541 | WordPress Visitors plugin unauthenticated stored cross-site scripting via HTTP Header | 6.1NVD v3.1 | 0.5% | 2024-09-26 | |
| CVE-2022-43845 | IBM Aspera Console information disclosure | 3.7CNA v3.1 | 0.4% | 2024-09-25 | Fix |
| CVE-2022-2439 | Easy Digital Downloads WordPress plugin deserialization of untrusted data | 7.2v3.1 | 0.7% | 2024-09-24 | Fix |
| CVE-2022-48945 | In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page fault for address: ffffc9000a3b1000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 1 | 7.8CNA v3.1 | 0.2% | 2024-09-23 | Fix |
| CVE-2022-4533 | devfelixmoira Limit Login Attempts Plus plugin X-Forwarded-For header handling vulnerability | 5.3CNA v3.1 | 0.2% | 2024-09-19 | |
| CVE-2022-39068 | Buffer overflow vulnerability in ZTE MF296R | 4.5CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2022-25777 | Mautic server-side request forgery in Asset section | 6.5CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2022-25776 | Mautic sensitive data exposure due to inadequate user permission settings | 8.3CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2022-25775 | Mautic SQL injection in dynamic Reports | 6.6CNA v3.1 | 0.6% | 2024-09-18 | Fix |
| CVE-2022-25774 | Mautic XSS in Notifications via saving Dashboards | 4.8CNA v3.1 | 0.4% | 2024-09-18 | Fix |
| CVE-2022-25770 | Mautic insufficient authentication in upgrade flow | 7.8CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2022-25769 | Mautic improper regex in htaccess file | 7.2CNA v3.1 | 0.5% | 2024-09-18 | Fix |
| CVE-2022-25768 | Mautic improper access control in UI upgrade process | 7.0CNA v3.1 | 0.3% | 2024-09-18 | Fix |
| CVE-2022-3459 | WooCommerce Multiple Free Gift insecure direct object reference | 5.3CNA v3.1 | 0.3% | 2024-09-14 | |
| CVE-2022-2446 | WP Editor WordPress plugin authenticated (Admin+) PHAR deserialization | 7.2CNA v3.1 | 0.6% | 2024-09-13 | Fix |
| CVE-2022-26322 | Possible insertion of sensitive information into log file vulnerability in Identity Manager | 4.9CNA v3.1 | 0.4% | 2024-09-12 | Fix |
| CVE-2022-45856 | Fortinet FortiClientiOS improper certificate validation | 4.6CNA v3.1 | 0.2% | 2024-09-10 | Fix |
| CVE-2022-27592 | QNAP QVR Smart Client unquoted search path | 6.7CNA v3.1 | 0.2% | 2024-09-06 | Fix |
| CVE-2022-4529 | Security WordPress plugin spoofing | 5.3CNA v3.1 | 0.2% | 2024-09-05 | |
| CVE-2022-3556 | Cab fare calculator WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-09-05 | Fix |
| CVE-2022-4539 | Web Application Firewall WordPress plugin IP Address spoofing to Protection Mechanism bypass | 5.3CNA v3.1 | 0.6% | 2024-08-31 | Fix |
| CVE-2022-4536 | IP Vault WordPress plugin spoofing | 5.3CNA v3.1 | 0.2% | 2024-08-31 | Fix |
| CVE-2022-4100 | WP Cerber Security WordPress plugin IP Protection bypass | 5.3CNA v3.1 | 0.3% | 2024-08-31 | Fix |
| CVE-2022-48944 | Linux kernel process fork scheduling race condition | 5.5v3.1 | 0.2% | 2024-08-30 | Fix |
| CVE-2022-2440 | Theme Editor WordPress plugin authenticated (Admin+) PHAR deserialization | 7.2CNA v3.1 | 0.7% | 2024-08-29 | Fix |
| CVE-2022-39997 | Teldat RS123 and RS123w routers weak password requirements | 8.0CISA ADP v3.1 | 0.3% | 2024-08-27 | |
| CVE-2022-39996 | Teldat RS123W cross-site scripting | 4.8v3.1 | 0.3% | 2024-08-27 | Exploit code |
| CVE-2022-43915 | IBM App Connect Enterprise Certified Container incorrect permission assignment | 6.8CNA v3.1 | 0.4% | 2024-08-24 | Fix |
| CVE-2022-48943 | Linux kernel KVM async page fault vulnerability | 7.1CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48942 | Linux kernel hwmon thermal zone registration null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48941 | Linux kernel ice Ethernet driver race condition | 8.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48940 | Linux kernel BPF map value copying memory corruption | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48939 | Linux kernel BPF batch map operations denial of service | 3.3v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48938 | Linux kernel CDC-NCM USB driver integer overflow | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48937 | Linux kernel io_uring buffer registration denial of service | 3.3v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48935 | Linux kernel nftables flowtable use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48934 | Linux kernel NFP flower tunnel driver memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48933 | Linux kernel nftables stateful objects memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48932 | Linux kernel mlx5 direct rule steering out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48931 | Linux kernel configfs subsystem registration race condition | 4.7v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48930 | Linux kernel SRP initiator driver deadlock | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48929 | Linux kernel BPF verifier out-of-bounds read | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48928 | Linux kernel MEN Z188 ADC driver memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48927 | Linux kernel TSC2046 ADC driver out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48926 | Linux kernel RNDIS USB gadget driver race condition | 7.8v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48925 | Linux kernel RDMA/cma use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48924 | Linux kernel INT3400 thermal driver memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48923 | Linux kernel Btrfs LZO decompression out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48922 | Linux kernel RISC-V irqsoff latency tracer null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48921 | Linux kernel CFS scheduler race condition | 4.7v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48920 | Linux kernel Btrfs transaction commit improper locking | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48919 | Linux kernel CIFS mount handling double free | 8.8CNA v3.1 | 0.5% | 2024-08-22 | Fix |
| CVE-2022-48918 | Linux kernel iwlwifi debugfs registration null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48916 | Linux kernel iommu/vt-d kernel panic | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48915 | Linux kernel thermal core trip point handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48914 | Linux kernel Xen netfront driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48913 | Linux kernel blktrace use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48912 | Linux kernel netfilter hook registration use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48911 | Linux kernel netfilter queue use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48910 | Linux kernel IPv6 multicast vulnerability | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48909 | Linux kernel SMC connection handling memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48908 | Linux kernel arcnet com20020 driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48907 | Linux kernel lcd2s auxiliary display driver memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48906 | Linux kernel MPTCP DATA_FIN timeout vulnerability | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48905 | Linux kernel ibmvnic driver memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48904 | Linux kernel AMD IOMMU page table memory leak | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48903 | Linux kernel Btrfs relocation denial of service | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48902 | Linux kernel Btrfs extent buffer handling denial of service | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48901 | Linux kernel Btrfs relocation vulnerability | 5.5v3.1 | 0.2% | 2024-08-22 | Fix |
| CVE-2022-48899 | Linux kernel virtio GPU driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48898 | Linux kernel drm/msm/dp race condition | 4.7v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48897 | Linux kernel arm64 page table check denial of service | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48896 | Linux kernel ixgbe driver memory leak | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48895 | Linux kernel arm-smmu driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48894 | Linux kernel arm-smmu-v3 driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48893 | Linux kernel i915 GT engine discovery vulnerability | 5.5v3.1 | 0.3% | 2024-08-21 | Fix |
| CVE-2022-48892 | Linux kernel CPU affinity scheduler use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48891 | Linux kernel da9211 regulator driver vulnerability | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48890 | Linux kernel storvsc SCSI driver memory leak | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48889 | Linux kernel sof-nau8825 ASoC driver vulnerability | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48888 | Linux kernel msm DPU display driver memory leak | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48887 | Linux kernel vmwgfx user resource lookup race condition | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48886 | Linux kernel ice Ethernet driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48885 | Linux kernel ice GNSS TTY driver memory leak | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48884 | Linux kernel mlx5 command interface statistics vulnerability | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48883 | Linux kernel mlx5e IPoIB PKEY interfaces vulnerability | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48882 | Linux kernel mlx5e MACsec offload driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48881 | Linux kernel AMD PMC driver vulnerability | 7.1v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48880 | In the Linux kernel, the following vulnerability has been resolved: platform/surface: aggregator: Add missing call to ssam_request_sync_free() Although rare, ssam_request_sync_init() can fail. In that case, the request should be freed via ssam_request_sync_free(). Currently it is leaked instead. F | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48879 | Linux kernel EFI runtime services init null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48878 | Linux kernel hci_qca Bluetooth driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48876 | Linux kernel mac80211 crash | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48875 | Linux kernel mac80211 AMPDU session handling null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48874 | Linux kernel fastrpc driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48873 | Linux kernel fastrpc driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48872 | Linux kernel fastrpc driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48871 | Linux kernel qcom-geni-serial driver out-of-bounds read | 8.8CNA v3.1 | 0.3% | 2024-08-21 | Fix |
| CVE-2022-48870 | Linux kernel speakup TTY driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-08-21 | Fix |
| CVE-2022-48869 | Linux kernel USB gadgetfs driver use-after-free | 4.7v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48868 | Linux kernel idxd workqueue driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-48867 | Linux kernel idxd use-after-free | 7.8v3.1 | 0.2% | 2024-08-21 | Fix |
| CVE-2022-26328 | User enumeration vulnerability has been discovered in OpenText™ Performance Center | 2.0CNA v4.0 | 0.4% | 2024-08-21 | |
| CVE-2022-26327 | Stored cross-site scripting (XSS) has been discovered in OpenText™ Performance Center | 5.1CNA v4.0 | 0.6% | 2024-08-21 | |
| CVE-2022-1206 | AdRotate Ad manager and AdSense Ads WordPress plugin double Extension arbitrary file upload | 7.2CNA v3.1 | 1.0% | 2024-08-20 | Fix |
| CVE-2022-4532 | LOGIN AND REGISTRATION ATTEMPTS LIMIT WordPress plugin spoofing | 6.5CNA v3.1 | 0.2% | 2024-08-17 | |
| CVE-2022-1751 | Skitter Slideshow WordPress plugin unauthenticated server-side request forgery | 7.2CNA v3.1 | 0.4% | 2024-08-17 | |
| CVE-2022-33162 | IBM directory server buffer overflow | 7.3CNA v3.1 | 0.4% | 2024-08-16 | Fix |
| CVE-2022-3399 | Cookie Notice and Compliance for GDPR / CCPA WordPress plugin stored cross-site scripting | 4.4CNA v3.1 | 0.4% | 2024-08-16 | Fix |
| CVE-2022-45862 | Fortinet FortiPAM insufficient session expiration | 3.5CNA v3.1 | 0.4% | 2024-08-13 | Fix |
| CVE-2022-38382 | IBM Cloud Pak for Security session fixation | 4.7CNA v3.1 | 0.3% | 2024-08-13 | Fix |
| CVE-2022-27486 | Fortinet FortiDDoS OS command injection | 5.9CNA v3.1 | 0.8% | 2024-08-13 | Fix |
| CVE-2022-23817 | AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics privilege escalation | 7.3CNA v4.0 | 0.2% | 2024-08-13 | |
| CVE-2022-23815 | AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics out-of-bounds write | 7.5CNA v3.1 | 0.2% | 2024-08-13 | Fix |
| CVE-2022-4003 | Motorola Q14 Mesh Router Firmware denial of service | 2.7CNA v3.1 | 0.4% | 2024-07-31 | Fix |
| CVE-2022-4002 | Motorola Q14 Mesh Router Firmware improper authentication | 7.2CNA v3.1 | 1.0% | 2024-07-31 | Fix |
| CVE-2022-4001 | Motorola Q14 Mesh Router Firmware improper authentication | 7.3CNA v3.1 | 0.3% | 2024-07-31 | Fix |
| CVE-2022-33167 | IBM Security Directory Integrator information disclosure | 3.7CNA v3.1 | 0.4% | 2024-07-30 | Fix |
| CVE-2022-32759 | IBM Security Directory Server information disclosure | 5.3CNA v3.1 | 0.4% | 2024-07-25 | Fix |
| CVE-2022-48866 | Linux kernel Thrustmaster HID driver out-of-bounds read | 7.1v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48865 | Linux kernel TIPC bearer monitoring null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48864 | Linux kernel vdpa mlx5 control virtqueue vulnerability | 8.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48863 | Linux kernel mISDN DSP pipeline build memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48862 | Linux kernel vhost IOTLB infinite loop | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48861 | Linux kernel vp_vdpa driver removal use-after-free | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48860 | Linux kernel xemaclite driver probe memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48859 | Linux kernel prestera switch driver memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48858 | Linux kernel mlx5 command interface flush race condition | 7.0CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48857 | Linux kernel port100 NFC driver use-after-free | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48856 | Linux kernel gianfar ethtool driver memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48855 | Linux kernel SCTP socket diagnostics information disclosure | 7.1v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48854 | Linux kernel arc_emac MDIO probe use-after-free | 7.8v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48853 | Linux kernel SWIOTLB DMA bounce buffer information disclosure | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48852 | Linux kernel vc4 HDMI codec device vulnerability | 3.3v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48851 | Linux kernel gdm724x LTE modem driver use-after-free | 9.8CNA v3.1 | 0.5% | 2024-07-16 | Fix |
| CVE-2022-48850 | Linux kernel net-sysfs kernel panic | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48849 | Linux kernel amdgpu virtual display framebuffer init vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48848 | Linux kernel osnoise tracer event handling vulnerability | 7.8v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48847 | Linux kernel watch_queue filter out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48846 | Linux kernel block layer request queue cleanup memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48845 | Linux kernel MIPS SMP CPU topology maps vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48844 | Linux kernel Bluetooth HCI core memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48842 | Linux kernel ice Ethernet driver link aggregation race condition | 4.7v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48841 | Linux kernel ice Ethernet driver Tx ring statistics null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48840 | Linux kernel iavf infinite loop | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48839 | Linux kernel AF_PACKET socket out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48838 | Linux kernel USB gadget UDC core use-after-free | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48837 | Linux kernel RNDIS USB gadget driver integer overflow | 7.8v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48836 | Linux kernel aiptek USB tablet driver vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48835 | Linux kernel mpt3sas driver reply queue processing vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48834 | Linux kernel usbtmc driver control transfers vulnerability | 7.8v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48833 | Linux kernel Btrfs log tree cleanup vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48832 | Linux kernel audit openat2 handling vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48831 | Linux kernel IMA asymmetric key verification memory leak | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48830 | Linux kernel CAN ISOTP protocol driver race condition | 8.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48829 | Linux kernel NFSv3 server SETATTR and CREATE handling vulnerability | 9.1CNA v3.1 | 0.7% | 2024-07-16 | Fix |
| CVE-2022-48828 | Linux kernel NFSD integer underflow | 9.1CNA v3.1 | 0.6% | 2024-07-16 | Fix |
| CVE-2022-48827 | Linux kernel NFSD out-of-bounds read | 7.5CNA v3.1 | 0.6% | 2024-07-16 | Fix |
| CVE-2022-48826 | Linux kernel vc4 DSI driver deadlock | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48825 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add stag_work to all the vports Call trace seen when creating NPIV ports, only 32 out of 64 show online. stag work was not initialized for vport, hence initialize the stag work. WARNING: CPU: 8 PID: 645 at kernel/work | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48824 | Linux kernel myrs crash | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48823 | In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF Hung task call trace was seen during LOGO processing. [ 974.309060] [0000:00:00.0]:[qedf_eh_device_reset:868]: 1:0:2:0: LUN RESET Issued... [ 974.309065] [0000:00: | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48822 | Linux kernel f_fs use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48821 | Linux kernel fastrpc driver use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48820 | Linux kernel STM32 USB PHY controller driver vulnerability | 7.1v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48819 | Linux kernel TCP zerocopy send path vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48818 | Linux kernel mv88e6xxx switch MDIO bus vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48817 | Linux kernel ar9331 switch MDIO bus vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48816 | Linux kernel SUNRPC sysfs interface null pointer dereference | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48815 | Linux kernel bcm_sf2 kernel panic | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48814 | Linux kernel Seville VSC9959 switch MDIO bus vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48813 | Linux kernel Felix VSC9959 mdiobus handling vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48812 | Linux kernel Lantiq GSWIP mdiobus handling vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48811 | Linux kernel ibmvnic driver vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48810 | Linux kernel improper locking | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48809 | Linux kernel skb dst metadata uncloning memory leak | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48808 | Linux kernel DSA netdevice unregister handling vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48807 | Linux kernel ice driver LAG netdev handler vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48806 | Linux kernel ee1004 EEPROM driver integer overflow | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48805 | Linux kernel ax88179_178a USB Ethernet driver out-of-bounds read | 7.8v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48804 | Linux kernel vt_ioctl VT_SETACTIVATE handler integer underflow | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48803 | Linux kernel TI J721e WIZ PHY driver out-of-bounds read | 7.3CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48802 | Linux kernel proc task_mmu smaps reporting vulnerability | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48801 | Linux kernel IIO buffer file descriptor handling use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48800 | Linux kernel vmscan page reclaim deadlock | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48799 | Linux kernel perf cgroup switching vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48798 | Linux kernel s390/cio kernel panic | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48797 | Linux kernel NUMA page migration vulnerability | 7.1CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48796 | Linux kernel IOMMU device probe use-after-free | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48795 | Linux kernel parisc null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48794 | Linux kernel at86rf230 memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48793 | Linux kernel KVM nested SVM null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48792 | Linux kernel pm8001 SAS driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48791 | Linux kernel pm8001 SAS driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48790 | Linux kernel NVMe driver use-after-free | 9.8CNA v3.1 | 0.8% | 2024-07-16 | Fix |
| CVE-2022-48789 | Linux kernel NVMe over TCP driver use-after-free | 9.8CNA v3.1 | 0.7% | 2024-07-16 | Fix |
| CVE-2022-48788 | Linux kernel NVMe over RDMA error recovery use-after-free | 9.8CNA v3.1 | 0.9% | 2024-07-16 | Fix |
| CVE-2022-48787 | Linux kernel iwlwifi use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48786 | Linux kernel vsock connected socket table vulnerability | 7.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48785 | Linux kernel mcast improper locking | 8.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48784 | Linux kernel cfg80211 netlink interface destruction race condition | 4.7v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48783 | Linux kernel lantiq GSWIP driver use-after-free | 7.8v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48782 | Linux kernel MCTP routing key handling use-after-free | 8.8CNA v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-48781 | Linux kernel af_alg socket memory accounting null pointer dereference | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48780 | Linux kernel SMC fallback socket callbacks infinite loop | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48779 | Linux kernel mscc ocelot VLAN handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48778 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_apply_timings() fails, the PM runtime usage counter must be dropped. | 7.8v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48777 | Linux kernel qcom kernel panic | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48776 | Linux kernel qcom memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48775 | Linux kernel vmbus memory leak | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48774 | Linux kernel ptdma driver initialization vulnerability | 5.5v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-48773 | Linux kernel xprtrdma null pointer dereference | 5.5v3.1 | 0.3% | 2024-07-16 | Fix |
| CVE-2022-45449 | Acronis Cyber Protect 15 information disclosure | 7.7CNA v3.0 | 0.4% | 2024-07-16 | Fix |
| CVE-2022-35640 | IBM Sterling Partner Engagement Manager information disclosure | 4.0CNA v3.1 | 0.2% | 2024-07-16 | Fix |
| CVE-2022-29946 | NATS.io NATS Server before 2.8.2 and Streaming Server before 0.24.6 could allow a remote attacker to bypass security restrictions, caused by the failure to enforce negative user permissions in one scenario. By using a queue subscription on the wildcard, an attacker could exploit this vulnerability t | 6.3CISA ADP v3.1 | 0.5% | 2024-07-11 | Fix |
| CVE-2022-45147 | Siemens SIMATIC PCS neo deserialization of untrusted data | 8.5CNA v4.0 | 0.2% | 2024-07-09 | Fix |
| CVE-2022-30636 | Limited directory traversal vulnerability on Windows in golang.org/x/crypto | 7.5CISA ADP v3.1 | 0.6% | 2024-07-02 | Fix |
| CVE-2022-25480 | Realtek Rtsper out-of-bounds write | 7.8v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2022-25479 | Realtek Rtsper memory leak | 5.5v3.1 | 0.6% | 2024-07-02 | Exploit codeKCVFix |
| CVE-2022-25478 | Vulnerability in Realtek RtsPer driver for PCIe Card Reader (RtsPer.sys) before 10.0.22000.21355 and Realtek RtsUer driver for USB Card Reader (RtsUer.sys) before 10.0.22000.31274 provides read and write access to the PCI configuration space of the device. | 7.8v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2022-25477 | Realtek Rtsper sensitive information in log files | 5.5NVD v3.1 | 0.2% | 2024-07-02 | Fix |
| CVE-2022-38383 | IBM Cloud Pak for Security information disclosure | 4.0CNA v3.1 | 0.2% | 2024-06-28 | Fix |
| CVE-2022-27540 | HP PC BIOS time-of-check time-of-use race condition | 7.8CISA ADP v3.1 | 0.1% | 2024-06-28 | Fix |
| CVE-2022-48772 | Linux kernel lgdt3306a demodulator driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-25 | Fix |
| CVE-2022-45803 | Gutenberg Forms WordPress plugin Auth. broken access control | 8.8v3.1 | 0.5% | 2024-06-21 | Fix |
| CVE-2022-44593 | Solid Security WordPress plugin IP spoofing Leading to denial of service | 5.3v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2022-44587 | WP 2FA WordPress plugin sensitive data exposure via Log file | 7.5v3.1 | 0.4% | 2024-06-21 | Fix |
| CVE-2022-43453 | WP Tools WordPress plugin Auth. broken access control | 8.8v3.1 | 0.5% | 2024-06-21 | Fix |
| CVE-2022-42974 | In Kostal PIKO 1.5-1 MP plus HMI OEM p 1.0.1, the web application for the Solar Panel is vulnerable to a Stored Cross-Site Scripting (XSS) attack on /file.bootloader.upload.html. The application fails to sanitize the parameter filename, in a POST request to /file.bootloader.upload.html for a system | 4.8CISA ADP v3.1 | 0.2% | 2024-06-21 | |
| CVE-2022-38055 | wpForo Forum WordPress plugin Auth. HTML injection | 5.4v3.1 | 0.3% | 2024-06-21 | Fix |
| CVE-2022-48771 | Linux kernel vmwgfx driver fence handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48770 | Linux kernel BPF task stack helper null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48769 | Linux kernel EFI runtime services denial of service | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48768 | Linux kernel tracing histogram parser memory leak | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48767 | Linux kernel Ceph client vulnerability | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48766 | Linux kernel AMD display driver watermark calculation denial of service | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48765 | Linux kernel KVM LAPIC emulation denial of service | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48764 | Linux kernel KVM x86 CPUID handling memory leak | 5.3CISA ADP v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48763 | Linux kernel KVM nested virtualization SMM handling memory leak | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48762 | Linux kernel extable null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48761 | Linux kernel xhci-plat suspend remote wakeup handling denial of service | 5.3CISA ADP v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48760 | Linux kernel USB core URB completion synchronization vulnerability | 7.1v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48759 | Linux kernel rpmsg character device race condition | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48758 | Linux kernel bnx2fc FCoE interface teardown vulnerability | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48757 | Linux kernel /proc/net/ptype interface information disclosure | 7.1v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48756 | Linux kernel MSM DSI PHY enable null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48755 | Linux kernel powerpc64/bpf crash | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48754 | Linux kernel PHY device library use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48753 | Linux kernel block independent access ranges registration memory leak | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48752 | In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending Running selftest with CONFIG_PPC_IRQ_SOFT_MASK_DEBUG enabled in kernel triggered below warning: [ 172.851380] ------------[ cut here ]------ | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48751 | Linux kernel SMC clcsock handling null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48750 | Linux kernel nct6775 hardware monitoring driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48749 | Linux kernel MSM DPU DSPP PCC setup null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48748 | Linux kernel bridge VLAN ingress filtering memory leak | 7.5CISA ADP v3.1 | 1.1% | 2024-06-20 | Fix |
| CVE-2022-48747 | Linux kernel block uninitialized memory use | 7.5CISA ADP v3.1 | 0.9% | 2024-06-20 | Fix |
| CVE-2022-48746 | Linux kernel mlx5e bonding netevent handler null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48745 | Linux kernel mlx5 firmware reset timer race condition | 4.7v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48744 | Linux kernel mlx5e XDP TX descriptor handling out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2022-48743 | Linux kernel amd-xgbe kernel panic | 8.1CNA v3.1 | 0.6% | 2024-06-20 | Fix |
| CVE-2022-48742 | Linux kernel rtnetlink link replay use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48741 | Linux kernel overlayfs copy-up null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48740 | Linux kernel SELinux conditional policy double free | 7.8v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48739 | Linux kernel ASoC HDMI codec driver out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48738 | Linux kernel ops out-of-bounds read | 7.1v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48735 | Linux kernel HD-audio LED class devices use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48734 | Linux kernel Btrfs quota management deadlock | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48733 | Linux kernel Btrfs snapshot creation use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48732 | Linux kernel Nouveau BIOS parser off-by-one error | 7.8v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48731 | Linux kernel kmemleak denial of service | 5.5CISA ADP v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48730 | Linux kernel DMA-BUF heaps vulnerability | 5.5v3.1 | 0.3% | 2024-06-20 | Fix |
| CVE-2022-48729 | Linux kernel hfi1 IPoIB driver vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48728 | Linux kernel hfi1 IPoIB driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48727 | Linux kernel KVM arm64 exception handling vulnerability | 7.3CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48726 | Linux kernel ucma multicast handling use-after-free | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48725 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix refcounting leak in siw_create_qp() The atomic_inc() needs to be paired with an atomic_dec() on the error path. | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48724 | Linux kernel iommu/vt-d memory leak | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48723 | Linux kernel UniPhier SPI driver vulnerability | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48722 | Linux kernel ca8210 memory leak | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48721 | Linux kernel SMC socket fallback denial of service | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48720 | Linux kernel MACsec offload vulnerability | 7.8CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48719 | Linux kernel neighbor table management deadlock | 5.5v3.1 | 0.1% | 2024-06-20 | Fix |
| CVE-2022-48718 | Linux kernel mxsfb display driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48717 | Linux kernel max9759 speaker amplifier driver out-of-bounds write | 7.1CNA v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48716 | Linux kernel wcd938x audio codec driver vulnerability | 7.8CNA v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2022-48715 | Linux kernel bnx2fc driver vulnerability | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48714 | Linux kernel bpf out-of-bounds access | 7.1v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48713 | Linux kernel Intel PT driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48712 | Linux kernel ext4 fast commit out-of-bounds write | 7.8v3.1 | 0.2% | 2024-06-20 | Fix |
| CVE-2022-48711 | Linux kernel TIPC domain record parsing out-of-bounds write | 9.8CNA v3.1 | 0.5% | 2024-06-20 | Fix |
| CVE-2022-45929 | Northern.tech Mender user role management privilege escalation | 8.8CISA ADP v3.1 | 0.4% | 2024-06-20 | |
| CVE-2022-41324 | Northern.tech Mender information disclosure | 6.5CISA ADP v3.1 | 0.3% | 2024-06-20 | |
| CVE-2022-45832 | Attorney WordPress theme Unauth. arbitrary content deletion vulnerability | 9.8v3.1 | 0.4% | 2024-06-19 | |
| CVE-2022-23829 | AMD Ryzen™ Threadripper™ PRO Processors 5900 WX-Series improper access control | 8.2CNA v3.1 | 0.2% | 2024-06-18 | |
| CVE-2022-48683 | Apple macOS sandbox escape | 7.8v3.1 | 0.2% | 2024-06-10 | Fix |
| CVE-2022-48578 | Apple macOS out-of-bounds read | 7.1v3.1 | 0.2% | 2024-06-10 | Fix |
| CVE-2022-45176 | Liveboxcloud Vdesk cross-site scripting | 5.4v3.1 | 0.3% | 2024-06-10 | |
| CVE-2022-45168 | Liveboxcloud Vdesk improper authentication | 6.5v3.1 | 0.5% | 2024-06-10 | |
| CVE-2022-37020 | HP PC BIOS may 2024 Security Updates for potential Stack Buffer Overflows | 6.8CISA ADP v3.1 | 0.2% | 2024-06-10 | Fix |
| CVE-2022-37019 | HP PC BIOS may 2024 Security Updates for potential Stack Buffer Overflows | 6.8CISA ADP v3.1 | 0.2% | 2024-06-10 | Fix |
| CVE-2022-32933 | Apple macOS information disclosure | 5.3v3.1 | 0.4% | 2024-06-10 | Fix |
| CVE-2022-32897 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.4% | 2024-06-10 | Fix |
| CVE-2022-4968 | Canonical Netplan system information disclosure | 6.5CNA v3.1 | 0.3% | 2024-06-07 | Fix |
| CVE-2022-28658 | Canonical Apport argument parsing vulnerability | 5.5v3.1 | 0.2% | 2024-06-04 | Fix |
| CVE-2022-28657 | Canonical Apport Python crash handler resource exhaustion | 7.8v3.1 | 0.2% | 2024-06-04 | Fix |
| CVE-2022-28656 | apport resource exhaustion | 5.5v3.1 | 0.2% | 2024-06-04 | Fix |
| CVE-2022-28655 | Canonical apport resource exhaustion | 7.1v3.1 | 0.2% | 2024-06-04 | Fix |
| CVE-2022-28654 | apport resource exhaustion | 5.5v3.1 | 0.3% | 2024-06-04 | Fix |
| CVE-2022-28652 | apport XML entity expansion | 5.5v3.1 | 0.2% | 2024-06-04 | Fix |
| CVE-2022-1242 | Canonical apport improper input validation | 7.8CISA ADP v3.1 | 0.2% | 2024-06-03 | Fix |
| CVE-2022-0555 | Canonical subiquity plaintext password storage | 8.4CISA ADP v3.1 | 0.3% | 2024-06-03 | Fix |
| CVE-2022-25038 | wanEditor video upload function cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-05-31 | |
| CVE-2022-25037 | WangEditor was discovered to contain a cross-site scripting vulnerability | 5.4CISA ADP v3.1 | 0.3% | 2024-05-31 | Fix |
| CVE-2022-43841 | IBM Aspera Console information disclosure | 4.0CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2022-43575 | IBM Aspera Console cross-site scripting | 5.4CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2022-43384 | IBM Aspera Console cross-site scripting | 4.6CNA v3.1 | 0.2% | 2024-05-30 | Fix |
| CVE-2022-48681 | Huawei EGRT-00 memory corruption | 7.2CNA v3.1 | 0.2% | 2024-05-28 | Fix |
| CVE-2022-45171 | Liveboxcloud Vdesk unrestricted file upload | 8.8v3.1 | 0.8% | 2024-05-28 | |
| CVE-2022-4969 | bwoodsend rockhopper Binary parser ragged_array.c count_rows buffer overflow | 4.8CNA v4.0 | 0.2% | 2024-05-27 | Fix |
| CVE-2022-48710 | Linux kernel radeon GPU driver null pointer dereference | 5.5v3.1 | 0.3% | 2024-05-21 | Fix |
| CVE-2022-48709 | Linux kernel ice switch driver memory leak | 5.5v3.1 | 0.2% | 2024-05-21 | Fix |
| CVE-2022-48708 | Linux kernel pinctrl-single driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-21 | Fix |
| CVE-2022-48707 | Linux kernel CXL region driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-21 | Fix |
| CVE-2022-48706 | Linux kernel ifcvf vDPA driver memory leak | 5.5v3.1 | 0.2% | 2024-05-21 | Fix |
| CVE-2022-45374 | Yet Another Related Posts Plugin (YARPP) WordPress plugin local file inclusion | 6.5NVD v3.1 | 0.8% | 2024-05-17 | Fix |
| CVE-2022-45368 | 1003 Mortgage Application WordPress plugin local file inclusion | 7.7CNA v3.1 | 0.9% | 2024-05-17 | Fix |
| CVE-2022-45070 | Conditional Checkout Fields for WooCommerce WordPress plugin broken authentication | 5.3CNA v3.1 | 0.5% | 2024-05-17 | Fix |
| CVE-2022-44581 | Defender Security WordPress plugin broken authentication | 9.8v3.1 | 0.7% | 2024-05-17 | Fix |
| CVE-2022-37410 | Intel(R) Thunderbolt driver software improper access control | 7.0CNA v3.1 | 0.2% | 2024-05-16 | |
| CVE-2022-37341 | Intel Ethernet Controller I225 Manageability firmware privilege escalation | 7.2CNA v3.1 | 0.2% | 2024-05-16 | Fix |
| CVE-2022-32510 | Nuki Bridge administrative HTTP API cleartext transmission of sensitive information | 7.1CISA ADP v3.1 | 0.3% | 2024-05-14 | |
| CVE-2022-32509 | Nuki Smart Lock and Bridge HTTP communications improper certificate validation | 8.8CISA ADP v3.1 | 0.3% | 2024-05-14 | |
| CVE-2022-32508 | Nuki Bridge HTTP service denial of service | 7.5CISA ADP v3.1 | 1.3% | 2024-05-14 | |
| CVE-2022-32507 | Nuki Smart Lock BLE commands improper access control | 8.8CISA ADP v3.1 | 0.5% | 2024-05-14 | |
| CVE-2022-32506 | Nuki Smart Lock and Bridge SWD debug interface vulnerability | 6.4CISA ADP v3.1 | 0.4% | 2024-05-14 | |
| CVE-2022-32505 | Nuki Smart Lock BLE service denial of service | 7.1CISA ADP v3.1 | 0.5% | 2024-05-14 | |
| CVE-2022-32504 | Nuki Smart Lock WebSocket JSON parser stack-based buffer overflow | 9.8CISA ADP v3.1 | 1.6% | 2024-05-14 | |
| CVE-2022-32503 | Nuki Keypad and Fob JTAG debug port missing authentication | 7.6CISA ADP v3.1 | 0.5% | 2024-05-14 | |
| CVE-2022-32502 | Nuki Bridge encrypted token parser stack-based buffer overflow | 6.3CISA ADP v3.1 | 1.3% | 2024-05-14 | |
| CVE-2022-28132 | T-Soft E-Commerce SQL injection | 7.2CISA ADP v3.1 | 0.6% | 2024-05-14 | Exploit code |
| CVE-2022-4967 | strongSwan authorization bypass | 6.5NVD v3.1 | 0.5% | 2024-05-14 | Fix |
| CVE-2022-40218 | TH Advance Product Search WordPress plugin unauthenticated plugin settings Change vulnerability | 9.8v3.1 | 0.5% | 2024-05-08 | Fix |
| CVE-2022-43656 | Bentley View FBX File Parsing out-of-bounds read information disclosure | 5.5v3.1 | 0.3% | 2024-05-07 | |
| CVE-2022-43655 | Bentley View FBX File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.0 | 0.3% | 2024-05-07 | |
| CVE-2022-43654 | NETGEAR CAX30S SSO command injection remote code execution | 8.8CNA v3.0 | 1.1% | 2024-05-07 | Fix |
| CVE-2022-43653 | Bentley View SKP File Parsing out-of-bounds write remote code execution | 7.8CNA v3.0 | 0.3% | 2024-05-07 | |
| CVE-2022-43652 | Bentley View SKP File Parsing use-after-free information disclosure | 5.5v3.1 | 0.3% | 2024-05-07 | |
| CVE-2022-43651 | Bentley View SKP File Parsing use-after-free remote code execution | 7.8CNA v3.0 | 0.3% | 2024-05-07 | |
| CVE-2022-0369 | Triangle MicroWorks SCADA Data Gateway Restore Workspace directory traversal remote code execution | 8.8v3.1 | 2.3% | 2024-05-07 | |
| CVE-2022-48705 | Linux kernel mt7921e Wi-Fi driver denial of service | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48704 | Linux kernel radeon GPU driver vulnerability | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48703 | Linux kernel INT340x thermal driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48702 | Linux kernel emu10k1 audio driver out-of-bounds access | 7.8CNA v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48701 | Linux kernel USB audio driver out-of-bounds read | 7.1v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48699 | Linux kernel scheduler debugfs memory leak | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48698 | Linux kernel AMD display driver memory leak | 5.3CISA ADP v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48697 | Linux kernel NVMe target use-after-free | 9.8CNA v3.1 | 0.6% | 2024-05-03 | Fix |
| CVE-2022-48696 | Linux kernel SPI regmap bus buffer overflow | 7.1CNA v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48695 | Linux kernel mpt3sas SCSI driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48694 | Linux kernel RDMA irdma driver denial of service | 7.5CNA v3.1 | 0.6% | 2024-05-03 | Fix |
| CVE-2022-48693 | Linux kernel pm-arm resource leak | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48692 | Linux kernel RDMA SRP initiator null pointer dereference | 7.5CNA v3.1 | 0.6% | 2024-05-03 | Fix |
| CVE-2022-48691 | Linux kernel netfilter nf_tables memory leak | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48690 | Linux kernel ice Ethernet driver memory leak | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48689 | Linux kernel TCP zerocopy race condition | 7.0v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48688 | Linux kernel i40e Ethernet driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48687 | Linux kernel IPv6 segment routing HMAC out-of-bounds read | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48686 | Linux kernel NVMe over TCP driver use-after-free | 9.8CNA v3.1 | 0.7% | 2024-05-03 | Fix |
| CVE-2022-48675 | Linux kernel IB/core improper locking | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48674 | Linux kernel EROFS pcluster use-after-free | 7.8CNA v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48673 | Linux kernel SMC link cleanup vulnerability | 9.8CNA v3.1 | 0.5% | 2024-05-03 | Fix |
| CVE-2022-48672 | Linux kernel flattened device tree unflattening off-by-one error | 7.8v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48671 | Linux kernel cgroup task migration improper locking | 5.5v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-48670 | Linux kernel PECI CPU driver use-after-free | 7.8v3.1 | 0.2% | 2024-05-03 | Fix |
| CVE-2022-22364 | IBM Cognos Controller improper input validation | 5.3CNA v3.1 | 0.5% | 2024-05-03 | Fix |
| CVE-2022-48669 | Linux kernel pseries PAPR attributes interface memory leak | 5.5CISA ADP v3.1 | 0.3% | 2024-05-01 | Fix |
| CVE-2022-38386 | IBM Cloud Pak for Security information disclosure | 5.9CNA v3.1 | 0.5% | 2024-05-01 | Fix |
| CVE-2022-48668 | Linux kernel SMB3 client collapse-range operation vulnerability | 3.3v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48667 | Linux kernel SMB3 client insert-range operation vulnerability | 3.3v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48666 | Linux kernel SCSI host removal use-after-free | 9.8CNA v3.1 | 0.8% | 2024-04-28 | Fix |
| CVE-2022-48665 | Linux kernel exFAT filesystem driver vulnerability | 7.1CNA v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48664 | Linux kernel Btrfs space reclaim worker vulnerability | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48663 | Linux kernel GPIO mockup driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48662 | Linux kernel i915 GEM context list vulnerability | 7.8v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48661 | Linux kernel GPIO mockup driver vulnerability | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48660 | In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully When running gpio test on nxp-ls1028 platform with below command gpiomon --num-events=3 --rising-edge gpiochip1 25 There will be a warning trace as below: Cal | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48659 | Linux kernel SLUB memory allocator vulnerability | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48658 | In the Linux kernel, the following vulnerability has been resolved: mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. Commit 5a836bf6b09f ("mm: slub: move flush_cpu_slab() invocations __free_slab() invocations out of IRQ context") moved all flush_cpu_slab() invocations to t | 7.5CNA v3.1 | 0.7% | 2024-04-28 | Fix |
| CVE-2022-48657 | Linux kernel AMU frequency invariance engine vulnerability | 7.8v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48656 | Linux kernel TI K3 UDMA driver memory leak | 5.5v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2022-48655 | Linux kernel SCMI reset domain driver out-of-bounds read | 7.8v3.1 | 0.7% | 2024-04-28 | Fix |
| CVE-2022-48654 | Linux kernel netfilter OS fingerprint matching information disclosure | 7.1CNA v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48653 | In the Linux kernel, the following vulnerability has been resolved: ice: Don't double unplug aux on peer initiated reset In the IDC callback that is accessed when the aux drivers request a reset, the function to unplug the aux devices is called. This function is also called in the ice_prepare_for_ | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48652 | Linux kernel ice Ethernet driver null pointer dereference | 8.8CNA v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2022-48651 | Linux kernel ipvlan driver out-of-bounds read | 7.7CISA ADP v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2022-48650 | Linux kernel qla2xxx SCSI driver memory leak | 4.7CISA ADP v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48649 | Linux kernel slab allocator double free | 7.8v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48648 | Linux kernel sfc null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48647 | Linux kernel sfc null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48646 | Linux kernel sfc/siena null pointer dereference | 6.2CISA ADP v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48645 | Linux kernel ENETC Ethernet driver denial of service | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48644 | Linux kernel taprio traffic scheduler null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48643 | Linux kernel netfilter nf_tables integer underflow | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48642 | Linux kernel netfilter nf_tables memory leak | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48641 | Linux kernel netfilter ebtables memory leak | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48640 | Linux kernel bonding driver null pointer dereference | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48639 | Linux kernel sched resource leak | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48638 | Linux kernel cgroup subsystem denial of service | 5.3CISA ADP v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48637 | Linux kernel bnxt Ethernet driver use-after-free | 7.8CNA v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48636 | Linux kernel s390 DASD driver null pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48635 | Linux kernel fsdax infinite loop | 6.2CISA ADP v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48634 | Linux kernel gma500 graphics driver improper locking | 5.3CISA ADP v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48633 | Linux kernel gma500 graphics driver reachable assertion | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48632 | Linux kernel mlxbf I2C driver out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2024-04-28 | Fix |
| CVE-2022-48631 | Linux kernel ext4 extent parsing vulnerability | 5.5v3.1 | 0.2% | 2024-04-28 | Fix |
| CVE-2022-48685 | Logpoint SIEM incorrect default permissions | 6.7NVD v3.1 | 0.2% | 2024-04-27 | Fix |
| CVE-2022-48684 | Logpoint SIEM OS command injection | 8.8v3.1 | 0.6% | 2024-04-27 | Fix |
| CVE-2022-48682 | FDUPES duplicate file deletion race condition | 6.0CNA v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2022-48611 | Apple iTunes logic flaw | 7.8v3.1 | 0.2% | 2024-04-26 | Fix |
| CVE-2022-40975 | Post Slider WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2024-04-26 | |
| CVE-2022-36029 | BigBlueButton Greenlight open redirect | 9.1CNA v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2022-36028 | BigBlueButton Greenlight open redirect | 9.1CNA v3.1 | 0.4% | 2024-04-25 | Fix |
| CVE-2022-45852 | WP-FormAssembly WordPress plugin Auth. arbitrary file read | 6.5CNA v3.1 | 0.7% | 2024-04-24 | Fix |
| CVE-2022-46897 | Insyde Kernel unchecked return value | 5.3CISA ADP v3.1 | 0.2% | 2024-04-22 | Fix |
| CVE-2022-35503 | Improper verification of a user input in Open Source MANO v7-v12 allows an authenticated attacker to execute arbitrary code within the LCM module container via a Virtual Network Function (VNF) descriptor. An attacker may be able execute code to change the normal execution of the OSM components, retr | 7.5CISA ADP v3.1 | 0.5% | 2024-04-22 | |
| CVE-2022-34562 | Phpfox A cross-site scripting | 6.1CISA ADP v3.1 | 0.3% | 2024-04-22 | |
| CVE-2022-34561 | Phpfox A cross-site scripting | 4.3CISA ADP v3.1 | 0.4% | 2024-04-22 | |
| CVE-2022-34560 | Phpfox A cross-site scripting | 7.1CISA ADP v3.1 | 0.3% | 2024-04-22 | |
| CVE-2022-40745 | IBM Aspera Faspex information disclosure | 5.5CNA v3.1 | 0.1% | 2024-04-19 | Fix |
| CVE-2022-47151 | JS Help Desk WordPress plugin Unauth. SQL injection | 8.6CNA v3.1 | 0.4% | 2024-04-17 | Fix |
| CVE-2022-41698 | If Menu Visibility control for Menus WordPress plugin broken access control | 6.5CNA v3.1 | 0.5% | 2024-04-17 | Fix |
| CVE-2022-24810 | Net-SNMP nsVacmAccessTable SET handling null pointer dereference | 6.5CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2022-24809 | Net-SNMP nsVacmAccessTable GET-NEXT handling null pointer dereference | 6.5CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2022-24808 | Net-SNMP nsLogTable handling null pointer dereference | 6.5CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2022-24807 | Net-SNMP vacmAccessTable handling buffer overflow | 6.5CNA v3.1 | 1.0% | 2024-04-16 | Fix |
| CVE-2022-24806 | net-snmp improper input validation | 6.5CNA v3.1 | 1.1% | 2024-04-16 | Fix |
| CVE-2022-24805 | Net-SNMP NET-SNMP-VACM-MIB index handling buffer overflow | 6.5CNA v3.1 | 1.3% | 2024-04-16 | Fix |
| CVE-2022-40211 | GiveWP WordPress plugin cross-site scripting (XSS) via render_dropdown | 4.8v3.1 | 0.4% | 2024-04-12 | Fix |
| CVE-2022-47604 | AJAX Thumbnail Rebuild WordPress plugin broken access control | 4.3CNA v3.1 | 0.5% | 2024-04-11 | Fix |
| CVE-2022-44633 | YITH WooCommerce Gift Cards Premium WordPress plugin missing authorization | 6.5CNA v3.1 | 0.5% | 2024-04-11 | Fix |
| CVE-2022-47894 | Apache Zeppelin SAP: Connecting to a malicious SAP server allowed it to perform XXE | 5.3CISA ADP v3.1 | 1.3% | 2024-04-09 | Fix |
| CVE-2022-4965 | CreativeMinds Invitation Code Content Restriction plugin reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2024-04-09 | Fix |
| CVE-2022-43216 | Abrhil Lista De Asistencia SQL injection | 9.1CISA ADP v3.1 | 0.5% | 2024-04-08 | |
| CVE-2022-4966 | sequentech admin-console Election Description cross-site scripting | 3.5CNA v3.1 | 0.5% | 2024-04-01 | Fix |
| CVE-2022-47153 | Jobeleon WordPress theme reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2024-03-29 | Fix |
| CVE-2022-45850 | Image Map Pro WordPress plugin Nickys cross-site request forgery | 6.1CNA v3.1 | 0.2% | 2024-03-28 | Fix |
| CVE-2022-45847 | Countdown Widget WordPress plugin cross-site request forgery leading to cross-site scripting | 6.1v3.1 | 0.2% | 2024-03-27 | Fix |
| CVE-2022-45851 | ShareThis Dashboard for Google Analytics WordPress plugin broken access control | 5.4CNA v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2022-45356 | Betheme premium WordPress theme broken access control | 8.8v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2022-45352 | Betheme premium WordPress theme broken access control | 4.3v3.1 | 0.4% | 2024-03-25 | Fix |
| CVE-2022-45351 | Betheme premium WordPress theme broken access control | 5.4v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2022-45349 | Betheme premium WordPress theme broken access control | 4.3v3.1 | 0.4% | 2024-03-25 | Fix |
| CVE-2022-44626 | Squirrly SEO (Peaks) WordPress plugin broken access control | 6.3v3.1 | 0.4% | 2024-03-25 | Fix |
| CVE-2022-38057 | TH Advance Product Search WordPress plugin unauthenticated plugin settings reset vulnerability | 9.8v3.1 | 0.6% | 2024-03-25 | Fix |
| CVE-2022-36407 | Information exposure vulnerability in Hitachi Disk Array Systems | 9.9CNA v3.1 | 0.5% | 2024-03-25 | Fix |
| CVE-2022-32756 | IBM Security Verify Directory information disclosure | 2.7CNA v3.1 | 0.5% | 2024-03-22 | Fix |
| CVE-2022-32754 | IBM Security Verify Directory cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-03-22 | Fix |
| CVE-2022-32753 | IBM Security Verify Directory information disclosure | 4.5CNA v3.1 | 0.2% | 2024-03-22 | Fix |
| CVE-2022-32751 | IBM Security Verify Directory information disclosure | 5.3CNA v3.1 | 0.5% | 2024-03-22 | Fix |
| CVE-2022-44595 | Melapress WP 2FA improper authentication | 5.3v3.1 | 0.5% | 2024-03-21 | Fix |
| CVE-2022-4963 | Folio Spring Module Core Schema Name HibernateSchemaService.java dropSchema SQL injection | 9.8v3.1 | 0.6% | 2024-03-21 | Fix |
| CVE-2022-47037 | Siklu Tg Lr T280 insufficiently protected credentials | 7.5v3.1 | 0.6% | 2024-03-18 | |
| CVE-2022-47036 | Siklu TG Terragraph devices debug login vulnerability | 9.8CISA ADP v3.1 | 0.5% | 2024-03-18 | |
| CVE-2022-34321 | Apache Pulsar: Improper authentication for Pulsar Proxy Statistics endpoint | 8.2CNA v3.1 | 1.8% | 2024-03-12 | Fix |
| CVE-2022-32257 | Siemens SINEMA Remote Connect Server unauthorized access | 9.8CNA v3.1 | 0.8% | 2024-03-12 | Fix |
| CVE-2022-46070 | GeoVision GV-ASManager code injection | 7.5CISA ADP v3.1 | 0.5% | 2024-03-11 | |
| CVE-2022-43855 | IBM SPSS Statistics denial of service | 6.2CNA v3.1 | 0.2% | 2024-03-08 | Fix |
| CVE-2022-46499 | PHPGurukul Hospital Management System SQL injection | 8.8CISA ADP v3.1 | 0.5% | 2024-03-07 | |
| CVE-2022-46498 | PHPGurukul Hospital Management System SQL injection | 2.7CISA ADP v3.1 | 0.4% | 2024-03-07 | |
| CVE-2022-46497 | PHPGurukul Hospital Management System SQL injection | 8.1CISA ADP v3.1 | 0.5% | 2024-03-07 | |
| CVE-2022-46091 | oretnom23 Online Flight Booking Management System feedback form cross-site scripting | 4.7CISA ADP v3.1 | 0.4% | 2024-03-07 | |
| CVE-2022-46089 | oretnom23 Online Flight Booking Management System add-airline form cross-site scripting | 6.1CISA ADP v3.1 | 0.4% | 2024-03-07 | |
| CVE-2022-48630 | Linux kernel crypto infinite loop | 5.5v3.1 | 0.2% | 2024-03-05 | Fix |
| CVE-2022-48629 | In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The generate function in struct rng_alg expects that the destination buffer is completely filled if the function returns 0. qcom_rng_read() can run into a situatio | 8.1CNA v3.1 | 0.5% | 2024-03-05 | Fix |
| CVE-2022-46088 | oretnom23 Online Flight Booking Management System cross-site scripting | 6.1v3.1 | 0.4% | 2024-03-05 | |
| CVE-2022-22399 | IBM Aspera Faspex HTTP header injection | 5.4CNA v3.1 | 0.4% | 2024-03-05 | Fix |
| CVE-2022-43890 | IBM Security Verify Privilege On-Premises information disclosure | 5.3CNA v3.1 | 0.4% | 2024-03-04 | Fix |
| CVE-2022-43880 | IBM QRadar WinCollect Agent resource exhaustion | 4.4CNA v3.1 | 0.2% | 2024-03-03 | Fix |
| CVE-2022-48628 | Linux kernel Ceph client vulnerability | 5.5v3.1 | 0.2% | 2024-03-02 | Fix |
| CVE-2022-48627 | Linux kernel vt out-of-bounds write | 5.5CISA ADP v3.1 | 0.3% | 2024-03-02 | Fix |
| CVE-2022-36677 | Lynchjames Obsidian Mind Map cross-site scripting | 6.1CISA ADP v3.1 | 0.5% | 2024-02-29 | |
| CVE-2022-34270 | Rws Worldserver improper access control | 9.8CISA ADP v3.1 | 0.9% | 2024-02-29 | |
| CVE-2022-34269 | Rws Worldserver server-side request forgery | 8.8CISA ADP v3.1 | 1.7% | 2024-02-29 | |
| CVE-2022-48626 | Linux kernel moxart MMC driver use-after-free | 7.8v3.1 | 0.3% | 2024-02-26 | Fix |
| CVE-2022-34357 | IBM Cognos Analytics Mobile Server denial of service | 6.5CNA v3.1 | 1.2% | 2024-02-26 | Fix |
| CVE-2022-43842 | IBM Aspera Console SQL injection | 8.6CNA v3.1 | 0.5% | 2024-02-23 | Fix |
| CVE-2022-25377 | Appwrite directory traversal | 7.5CISA ADP v3.1 | 0.8% | 2024-02-22 | Fix |
| CVE-2022-45179 | Liveboxcloud Vdesk cross-site scripting | 5.4v3.1 | 0.4% | 2024-02-21 | |
| CVE-2022-45177 | Liveboxcloud Vdesk observable discrepancy | 7.5v3.1 | 0.5% | 2024-02-21 | |
| CVE-2022-45169 | Liveboxcloud Vdesk open redirect | 5.4v3.1 | 0.3% | 2024-02-21 | |
| CVE-2022-48625 | Yealink Configuration Encryption Tool hard-coded cryptographic key | 7.5CISA ADP v3.1 | 0.4% | 2024-02-20 | Fix |
| CVE-2022-45320 | Privilege escalation in Liferay portal | 6.3v3.1 | 0.5% | 2024-02-20 | Fix |
| CVE-2022-48624 | Greenwoodsoftware Less OS command injection | 7.8v3.1 | 1.1% | 2024-02-19 | Fix |
| CVE-2022-48621 | Huawei HarmonyOS vulnerability of missing authentication for critical functions in the Wi-Fi module | 7.5v3.1 | 0.2% | 2024-02-18 | Fix |
| CVE-2022-42443 | IBM Trusteer for mobile file upload | 2.2CNA v3.1 | 0.5% | 2024-02-17 | Fix |
| CVE-2022-41738 | IBM Storage Scale Container Native Storage Access improper authentication | 7.5CNA v3.1 | 0.4% | 2024-02-17 | Fix |
| CVE-2022-41737 | IBM Storage Scale Container Native Storage Access improper authentication | 7.1CNA v3.1 | 0.1% | 2024-02-17 | Fix |
| CVE-2022-23093 | FreeBSD stack overflow in ping(8) | 6.5CISA ADP v3.1 | 2.4% | 2024-02-15 | Exploit codeFix |
| CVE-2022-23092 | FreeBSD missing bounds check in 9p message handling | 8.8CISA ADP v3.1 | 0.7% | 2024-02-15 | Fix |
| CVE-2022-23091 | FreeBSD memory disclosure by stale virtual memory mapping | 4.0CISA ADP v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2022-23090 | FreeBSD AIO credential reference count leak | 7.7CISA ADP v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2022-23089 | FreeBSD out of bound read in elf_note_prpsinfo | 4.7CISA ADP v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2022-23088 | FreeBSD 802.11 heap buffer overflow | 9.8CISA ADP v3.1 | 3.6% | 2024-02-15 | Fix |
| CVE-2022-23087 | FreeBSD bhyve e82545 device emulation out-of-bounds write | 8.8v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2022-23086 | FreeBSD mpr/mps/mpt driver ioctl heap out-of-bounds write | 7.8NVD v3.1 | 0.4% | 2024-02-15 | Fix |
| CVE-2022-23085 | FreeBSD potential jail escape vulnerabilities in netmap | 8.2NVD v3.1 | 0.5% | 2024-02-15 | Fix |
| CVE-2022-23084 | FreeBSD potential jail escape vulnerabilities in netmap | 7.5v3.1 | 0.2% | 2024-02-15 | Fix |
| CVE-2022-48220 | Certain HP Desktop PC products observable discrepancy | 6.4CISA ADP v3.1 | 0.3% | 2024-02-14 | Fix |
| CVE-2022-48219 | Certain HP Desktop PC products protection mechanism failure | 6.4CISA ADP v3.1 | 0.3% | 2024-02-14 | Fix |
| CVE-2022-48623 | RURBAN cPanel out-of-bounds read | 9.1v3.1 | 0.8% | 2024-02-13 | Fix |
| CVE-2022-38714 | IBM DataStage on Cloud Pak for Data information disclosure | 4.9CNA v3.1 | 0.6% | 2024-02-12 | Fix |
| CVE-2022-34311 | IBM CICS TX session fixation | 4.3CNA v3.1 | 0.4% | 2024-02-12 | Fix |
| CVE-2022-34310 | IBM CICS TX information disclosure | 5.9CNA v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2022-34309 | IBM CICS TX information disclosure | 5.9CNA v3.1 | 0.5% | 2024-02-12 | Fix |
| CVE-2022-22506 | IBM Robotic Process Automation information disclosure | 4.6CNA v3.1 | 0.3% | 2024-02-12 | Fix |
| CVE-2022-40744 | IBM Aspera Faspex cross-site scripting | 4.8CNA v3.1 | 0.3% | 2024-02-02 | Fix |
| CVE-2022-34381 | Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to the compromise of the impacted syste | 9.1CNA v3.1 | 1.0% | 2024-02-02 | Fix |
| CVE-2022-47072 | Sparx Systems Enterprise Architect SQL injection | 9.8v3.1 | 0.6% | 2024-01-31 | |
| CVE-2022-48622 | GNOME Gdk-Pixbuf out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-26 | Fix |
| CVE-2022-4964 | Canonical Ubuntu pipewire-pulse incorrect default permissions | 5.5CNA v3.1 | 0.3% | 2024-01-24 | Fix |
| CVE-2022-45792 | OMRON Sysmac Studio directory traversal in Project File Format allows overwrite (Zip Slip) | 7.8NVD v3.1 | 0.3% | 2024-01-22 | Fix |
| CVE-2022-45790 | Omron FINS memory protection susceptible to bruteforce | 9.1NVD v3.1 | 0.9% | 2024-01-22 | Fix |
| CVE-2022-47160 | Wp Social WordPress plugin sensitive data exposure | 6.5v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2022-45845 | Smart Slider 3 WordPress plugin PHP object injection | 8.8v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2022-45083 | ProfilePress WordPress plugin PHP object injection | 7.2v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2022-40700 | Montonio for WooCommerce WordPress plugin server-side request forgery | 9.8v3.1 | 1.0% | 2024-01-19 | Fix |
| CVE-2022-42884 | WIP Custom Login WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2022-41990 | 3D Tag Cloud WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-17 | |
| CVE-2022-41790 | WP Time Slots Booking Form WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-01-17 | Fix |
| CVE-2022-41786 | WP Job Portal WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2024-01-17 | Fix |
| CVE-2022-41695 | Traffic Manager WordPress plugin broken access control | 6.5v3.1 | 0.4% | 2024-01-17 | |
| CVE-2022-41619 | Image Zoom WordPress plugin broken access control | 6.5v3.1 | 0.4% | 2024-01-17 | |
| CVE-2022-40702 | Advanced Local Pickup for WooCommerce WordPress plugin broken access control | 4.3v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2022-40203 | Advanced Dynamic Pricing for WooCommerce WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2022-38141 | Sales Report Email for WooCommerce WordPress plugin broken access control | 6.5v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2022-36418 | HREFLANG Tags Lite WordPress plugin broken authentication | 9.8v3.1 | 0.7% | 2024-01-17 | |
| CVE-2022-31021 | Unlinkability broken in ursa when verifiers use malicious keys | 3.3CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2022-23180 | Contact Form and Lead Form Elementor Builder WordPress plugin Multiple Subscriber+ settings update | 4.3NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2022-23179 | Contact Form and Lead Form Elementor Builder WordPress plugin Multiple stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2022-3899 | 3DPrint WordPress plugin arbitrary file and directory deletion via CSRF | 8.1NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2022-3836 | Seed Social WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2022-3829 | Font Awesome 4 Menus WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2024-01-16 | |
| CVE-2022-3764 | Form Vibes WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2022-3739 | WP Best Quiz WordPress plugin Author+ stored XSS | 5.4NVD v3.1 | 0.7% | 2024-01-16 | |
| CVE-2022-3604 | Contact Form Entries WordPress plugin CSV injection | 7.8NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2022-3194 | Dokan WordPress plugin Vendor stored cross-site scripting | 5.4NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2022-2413 | Slide Anything WordPress plugin Author+ cross-site scripting in slide title | 5.4NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2022-1760 | Core Control WordPress plugin arbitrary settings update via CSRF | 4.3NVD v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2022-1618 | Coru LFMember WordPress plugin stored cross-site scripting via CSRF | 6.1NVD v3.1 | 0.3% | 2024-01-16 | |
| CVE-2022-1617 | WP-Invoice WordPress plugin stored cross-site scripting via CSRF | 6.1NVD v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2022-1609 | The School Management WordPress plugin unauthenticated RCE via REST API | 9.8NVD v3.1 | 64.1% | 2024-01-16 | NucleiExploit codeFix |
| CVE-2022-1563 | WPGraphQL WooCommerce WordPress plugin unauthenticated Coupon Codes disclosure | 5.3NVD v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2022-1538 | Themely Theme Demo Import unrestricted file upload | 7.2NVD v3.1 | 1.2% | 2024-01-16 | Fix |
| CVE-2022-0775 | WooCommerce WordPress plugin Subscriber+ arbitrary comment deletion | 4.3NVD v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2022-0402 | Super Forms language switcher AJAX action reflected cross-site scripting | 6.1NVD v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2022-48620 | troglobit Libeuv buffer overflow | 9.8v3.1 | 1.3% | 2024-01-12 | Fix |
| CVE-2022-48619 | Linux kernel improper exception handling | 5.5v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2022-4962 | Apollo Configuration Center users improper authorization | 4.3v3.1 | 0.5% | 2024-01-12 | |
| CVE-2022-4961 | Weitong Mall OrderDao.xml SQL injection | 9.8v3.1 | 0.5% | 2024-01-12 | |
| CVE-2022-4960 | cloudfavorites favorites-web Nickname cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-12 | |
| CVE-2022-40361 | Elite Cms Elite CRM v1.2.11 cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-11 | |
| CVE-2022-4959 | qkmc-rk redbbs Nickname cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-11 | |
| CVE-2022-4958 | qkmc-rk redbbs post cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | |
| CVE-2022-48577 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data. | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-48504 | Apple macOS caches information disclosure | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-47965 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-47915 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-46721 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-46710 | Apple macOS improper workflow enforcement | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-46025 | TOTOLINK N200RE V5 improper access control | 9.1v3.1 | 1.1% | 2024-01-10 | |
| CVE-2022-45794 | Omron CJ-series and CS-series unauthenticated filesystem access | 7.5NVD v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2022-45793 | Executable files writable by low-privileged users in Omron Sysmac Studio | 7.8NVD v3.1 | 0.3% | 2024-01-10 | |
| CVE-2022-42839 | Apple macOS information disclosure | 3.3v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-42816 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-32931 | Apple macOS improper privilege management | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2022-32919 | Apple macOS clickjacking | 4.7v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2022-48618 | Apple Multiple Products memory corruption | 7.0v3.1 | 0.5% | 2024-01-09 | KEVFix |
| CVE-2022-36765 | TianoCore edk2 integer overflow in CreateHob | 7.0CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2022-36764 | TianoCore edk2 heap buffer overflow in Tcg2MeasurePeImage | 7.0CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2022-36763 | TianoCore edk2 heap buffer overflow in Tcg2MeasureGptTable | 7.0CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2022-28975 | Infoblox NIOS A stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-09 | |
| CVE-2022-45354 | Download Monitor WordPress plugin sensitive data exposure | 7.5v3.1 | 38.1% | 2024-01-08 | NucleiExploit codeFix |
| CVE-2022-40696 | Advanced Custom Fields (ACF®) WordPress plugin WP Engine information disclosure | 7.5v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2022-36352 | ProfileGrid WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2022-34344 | Wholesale Suite WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2022-3328 | snapd race condition | 7.8CNA v3.1 | 0.4% | 2024-01-08 | KCVFix |
| CVE-2022-2602 | The Linux Kernel Organization linux use-after-free | 7.0NVD v3.1 | 1.4% | 2024-01-08 | Exploit codeFix |
| CVE-2022-2588 | The Linux Kernel Organization linux use-after-free | 7.8NVD v3.1 | 5.9% | 2024-01-08 | Exploit codeFix |
| CVE-2022-2586 | Linux Kernel use-after-free | 7.8NVD v3.1 | 10.2% | 2024-01-08 | KEVExploit codeFix |
| CVE-2022-2585 | The Linux Kernel Organization linux use-after-free | 7.8NVD v3.1 | 1.3% | 2024-01-08 | Fix |
| CVE-2022-46839 | JS Help Desk Best Help Desk and Support WordPress plugin arbitrary file upload | 9.8v3.1 | 0.8% | 2024-01-05 | Fix |
| CVE-2022-3864 | Hitachi Energy Relion 670/650/SAM600-IO Series improper signature verification | 4.5CNA v3.1 | 0.4% | 2024-01-04 | Fix |
| CVE-2022-2081 | Hitachi Energy RTU500 series CMU firmware out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2024-01-04 | Fix |
| CVE-2022-3010 | Predictable SSH credentials in Priva TopControl Suite | 7.5v3.1 | 0.6% | 2024-01-02 | Fix |
| CVE-2022-46487 | Scontain Scone improper initialization | 7.8v3.1 | 0.6% | 2023-12-30 | Fix |
| CVE-2022-46486 | Scontain Scone release of an invalid pointer | 5.5v3.1 | 0.3% | 2023-12-30 | Fix |
| CVE-2022-44589 | miniOrange's Google Authenticator WordPress plugin sensitive data exposure | 7.5v3.1 | 0.7% | 2023-12-29 | Fix |
| CVE-2022-36399 | Booked WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2022-43675 | Nokia Network Functions Manager For Transport cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-25 | |
| CVE-2022-41762 | Nokia Network Functions Manager For Transport cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-25 | |
| CVE-2022-41761 | Nokia Network Functions Manager For Transport path traversal | 6.5v3.1 | 0.8% | 2023-12-25 | |
| CVE-2022-41760 | Nokia Network Functions Manager For Transport path traversal | 6.5v3.1 | 0.8% | 2023-12-25 | |
| CVE-2022-39822 | Nokia Network Functions Manager For Transport SQL injection | 8.8v3.1 | 0.6% | 2023-12-25 | |
| CVE-2022-39820 | Nokia Network Functions Manager For Transport insufficiently protected credentials | 6.5v3.1 | 0.6% | 2023-12-25 | |
| CVE-2022-39818 | Nokia Network Functions Manager For Transport OS command injection | 8.8v3.1 | 2.2% | 2023-12-25 | |
| CVE-2022-34268 | Rws Worldserver deserialization of untrusted data | 9.8v3.1 | 1.5% | 2023-12-25 | |
| CVE-2022-34267 | Rws Worldserver improper authentication | 9.8v3.1 | 42.2% | 2023-12-25 | Nuclei |
| CVE-2022-47532 | FileRun SQL injection | 9.8v3.1 | 0.6% | 2023-12-22 | |
| CVE-2022-39337 | Permission bypass due to incorrect configuration in github.com/dromara/HertzBeat | 7.5CNA v3.1 | 1.1% | 2023-12-22 | Fix |
| CVE-2022-45377 | Drag and Drop Multiple File Upload for WooCommerce WordPress plugin unrestricted file upload | 9.8v3.1 | 0.6% | 2023-12-21 | Fix |
| CVE-2022-47599 | File Manager WordPress plugin PHP object injection | 7.2v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2022-47597 | Popup Maker WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2022-44684 | Microsoft Windows Local Session Manager (LSM) denial of service | 6.5CNA v3.1 | 1.5% | 2023-12-20 | |
| CVE-2022-45809 | Thumbs Rating WordPress plugin race condition | 3.7NVD v3.1 | 0.4% | 2023-12-19 | |
| CVE-2022-43450 | Stream WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2022-41677 | Bosch Camera Firmware information disclosure | 5.3CNA v3.1 | 0.6% | 2023-12-18 | Fix |
| CVE-2022-40312 | GiveWP WordPress plugin server side request forgery (SSRF) | 6.5v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2022-24351 | InsydeH2O time-of-check time-of-use race condition | 4.7v3.1 | 0.2% | 2023-12-16 | Fix |
| CVE-2022-45365 | Stock Ticker WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 48.9% | 2023-12-14 | NucleiFix |
| CVE-2022-43843 | IBM Spectrum Scale information disclosure | 5.9CNA v3.1 | 0.4% | 2023-12-14 | Fix |
| CVE-2022-27488 | Fortinet FortiVoice cross-site request forgery | 7.5CNA v3.1 | 0.5% | 2023-12-13 | Fix |
| CVE-2022-22942 | Photon OS use-after-free | 7.8CNA v3.1 | 2.6% | 2023-12-13 | Exploit codeFix |
| CVE-2022-48616 | Huawei AR6000 OS command injection | 6.4CNA v3.1 | 1.2% | 2023-12-12 | |
| CVE-2022-48615 | Huawei AR6000 An improper access control | 4.8CNA v3.1 | 0.3% | 2023-12-12 | |
| CVE-2022-47375 | Siemens SIMATIC PC-Station Plus buffer access with incorrect length | 7.5CNA v3.1 | 0.7% | 2023-12-12 | Fix |
| CVE-2022-47374 | Siemens SIMATIC PC-Station Plus uncontrolled recursion | 7.5CNA v3.1 | 0.7% | 2023-12-12 | Fix |
| CVE-2022-46141 | Siemens SIMATIC STEP 7 (TIA Portal) cleartext storage of sensitive information in memory | 4.2CNA v3.1 | 0.1% | 2023-12-12 | Fix |
| CVE-2022-44543 | TYPO3 extension femanager vulnerable to broken access control | 5.3v3.1 | 0.6% | 2023-12-12 | Fix |
| CVE-2022-42784 | A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3), LOGO! 24CE (6ED1052-1CC | 7.6CNA v3.1 | 0.2% | 2023-12-12 | |
| CVE-2022-48614 | SemanticMediaWiki cross-site scripting in Semantic MediaWiki | 6.1v3.1 | 0.4% | 2023-12-10 | Fix |
| CVE-2022-45362 | Paytm Payment Gateway WordPress plugin server side request forgery (SSRF) | 6.5NVD v3.1 | 41.8% | 2023-12-07 | NucleiFix |
| CVE-2022-47531 | Ericsson Evolved Packet Gateway system CLI vulnerability | 8.8v3.1 | 1.0% | 2023-12-05 | |
| CVE-2022-46480 | U-tec Ultraloq UL3 Bt authentication bypass by replay | 8.1v3.1 | 0.5% | 2023-12-05 | |
| CVE-2022-24403 | TETRA TA61 identity encryption weak cryptographic algorithm | 4.3NVD v3.1 | 0.1% | 2023-12-05 | |
| CVE-2022-48464 | UNISOC chipsets wifi service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2022-48463 | UNISOC chipsets wifi service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2022-48462 | UNISOC chipsets wifi service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-12-04 | Fix |
| CVE-2022-4957 | librespeed speedtest stats.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-12-03 | Fix |
| CVE-2022-45135 | Apache Cocoon: SQL injection in DatabaseCookieAuthenticatorAction | 9.8v3.1 | 1.1% | 2023-11-30 | Fix |
| CVE-2022-42541 | Google Android code injection | 9.8v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2022-42540 | Google Android elevation of privilege | 9.8v3.1 | 0.3% | 2023-11-29 | Fix |
| CVE-2022-42539 | Google Android information disclosure | 7.5v3.1 | 0.3% | 2023-11-29 | Fix |
| CVE-2022-42538 | Google Android elevation of privilege | 9.8v3.1 | 0.3% | 2023-11-29 | Fix |
| CVE-2022-42537 | Google Android remote code execution | 9.8v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2022-42536 | Google Android remote code execution | 9.8v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2022-41678 | Apache ActiveMQ: Insufficient API restrictions on Jolokia allow authenticated users to perform RCE | 8.8NVD v3.1 | 85.8% | 2023-11-28 | NucleiExploit codeFix |
| CVE-2022-41951 | OroPlatform vulnerable to path traversal during temporary file manipulations | 8.6CNA v3.1 | 0.9% | 2023-11-27 | Fix |
| CVE-2022-44011 | ClickHouse out-of-bounds write | 6.5v3.1 | 0.7% | 2023-11-23 | |
| CVE-2022-44010 | ClickHouse out-of-bounds write | 7.5v3.1 | 1.0% | 2023-11-23 | Fix |
| CVE-2022-36777 | IBM Cloud Pak for Security information disclosure | 4.3CNA v3.1 | 0.6% | 2023-11-22 | Fix |
| CVE-2022-35638 | IBM Sterling B2B Integrator cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2022-46337 | Apache Derby: LDAP injection vulnerability in authenticator | 9.8v3.1 | 1.4% | 2023-11-20 | Fix |
| CVE-2022-46647 | Intel Unison software sensitive information in log files | 2.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-46646 | Intel Unison software information disclosure | 2.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-46301 | Intel Unison software improper initialization | 1.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-46299 | Intel Unison software insufficient control flow management | 3.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-46298 | Intel Unison software incomplete cleanup | 1.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-45781 | Tenda AX1803 buffer overflow | 8.8v3.1 | 0.7% | 2023-11-14 | |
| CVE-2022-45469 | Intel Unison software improper input validation | 2.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-45109 | Intel Unison software improper initialization | 3.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-43666 | Intel Unison software information disclosure | 3.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-43477 | Intel Unison software incomplete cleanup | 3.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-42879 | Intel(R) Arc(TM) Control software some null pointer dereference | 6.1CNA v3.1 | 0.2% | 2023-11-14 | |
| CVE-2022-41700 | Intel(R) NUC Pro Software Suite installation software some insecure inherited permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-41689 | Intel In-Band Manageability software some improper access control | 7.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-41659 | Intel Unison software improper access control | 1.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-40681 | Fortinet FortiClientWindows incorrect authorization | 7.1CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-38786 | Intel Battery Life Diagnostic Tool software some improper access control | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-36396 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some improper access control | 8.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-36374 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some improper access control | 7.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-33945 | Intel(R) Server board and Intel(R) Server System BIOS firmware some improper input validation | 8.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-33898 | Intel(R) NUC Watchdog Timer installation software some insecure inherited permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-29510 | Intel(R) Server Board M10JNP2SB BIOS firmware privilege escalation | 7.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-29262 | Intel(R) Server Board BIOS firmware privilege escalation | 7.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-27229 | Intel(R) NUC Kits NUC7i3DN privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-24379 | Intel(R) Server System M70KLP Family BIOS firmware some improper input validation | 7.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2022-23830 | AMD EPYC processors SMM configuration vulnerability | 1.9CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2022-23821 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” System Management Mode improper access control | 9.8v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2022-23820 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” arbitrary code execution | 7.5CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2022-45835 | PhonePe Payment Solutions WordPress plugin server side request forgery (SSRF) | 7.5v3.1 | 37.7% | 2023-11-13 | NucleiFix |
| CVE-2022-48613 | Huawei HarmonyOS race condition vulnerability in the kernel module | 5.9v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2022-47442 | UsersWP WordPress plugin CSV injection | 8.8v3.1 | 0.7% | 2023-11-07 | Fix |
| CVE-2022-47181 | Email Templates WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2022-46821 | Emails and Newsletters with Jackmail WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | |
| CVE-2022-46809 | ReviewX WordPress plugin CSV injection | 9.8v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2022-46804 | Export Users Data Distinct WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | |
| CVE-2022-46803 | Noptin WordPress plugin CSV injection | 9.8v3.1 | 0.7% | 2023-11-07 | Fix |
| CVE-2022-46802 | Product Reviews Import Export for WooCommerce WordPress plugin CSV injection | 9.8v3.1 | 0.7% | 2023-11-07 | Fix |
| CVE-2022-46801 | Site Reviews WordPress plugin CSV injection | 9.8v3.1 | 0.7% | 2023-11-07 | Fix |
| CVE-2022-45810 | Icegram Express WordPress plugin CSV file vulnerability improper neutralization | 9.8v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2022-45370 | WordPress Comments Import and Export plugin CSV injection | 9.8v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2022-45360 | Commenter Emails WordPress plugin CSV injection | 9.8v3.1 | 0.6% | 2023-11-07 | |
| CVE-2022-45357 | 1003 Mortgage Application WordPress plugin CSV injection | 9.8v3.1 | 0.9% | 2023-11-07 | Fix |
| CVE-2022-45350 | Simple History WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2022-45348 | amr users WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | |
| CVE-2022-45078 | User Blocker WordPress plugin CSV injection | 7.2v3.1 | 0.7% | 2023-11-07 | Fix |
| CVE-2022-44738 | Posts and Users Stats WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2022-42882 | Simple CSV/XLS Exporter WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | |
| CVE-2022-41616 | Export Users Data CSV WordPress plugin CSV injection | 8.8v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2022-38702 | WP CSV Exporter WordPress plugin CSV injection | 8.8v3.1 | 0.6% | 2023-11-07 | |
| CVE-2022-48193 | Softing smartLink SW-HT inadequate encryption strength | 7.5v3.1 | 0.3% | 2023-11-06 | Fix |
| CVE-2022-48192 | Cross-site scripting vulnerability in Softing smartLink SW-HT | 6.1NVD v3.1 | 0.4% | 2023-11-06 | |
| CVE-2022-47432 | Shortcode IMDB WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | |
| CVE-2022-47430 | The School Management Education and Learning Management WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2022-47428 | Booking calendar, Appointment Booking System WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2022-47420 | Accessibility Suite by Online ADA WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2022-46860 | Short URL WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2022-46849 | Coming Soon WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2022-45373 | Slimstat Analytics WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2022-47588 | Simple Photo Gallery WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-03 | |
| CVE-2022-47445 | Be POPIA Compliant WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2022-47426 | Neshan Maps WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2023-11-03 | |
| CVE-2022-46859 | Spiffy Calendar WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2022-46818 | Email posts to subscribers WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-03 | |
| CVE-2022-46808 | ARMember WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-03 | Fix |
| CVE-2022-45805 | Paytm Payment Gateway WordPress plugin SQL injection | 9.8v3.1 | 2.3% | 2023-11-03 | NucleiFix |
| CVE-2022-44569 | Ivanti Automation improper authentication | 7.8v3.1 | 0.8% | 2023-11-03 | Exploit codeFix |
| CVE-2022-43555 | Ivanti Avalanche missing authentication | 7.8v3.1 | 0.5% | 2023-11-03 | Fix |
| CVE-2022-43554 | Ivanti Avalanche missing authentication | 7.8v3.1 | 0.5% | 2023-11-03 | Fix |
| CVE-2022-3172 | Kubernetes API server Aggregated API server can cause clients to be redirected (SSRF) | 5.1CNA v3.1 | 2.5% | 2023-11-03 | Fix |
| CVE-2022-4900 | php potential buffer overflow in php_cli_server_startup_workers | 5.5NVD v3.1 | 0.4% | 2023-11-02 | Fix |
| CVE-2022-48461 | UNISOC chipsets sensor driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48460 | UNISOC chipsets setting service undefined behavior | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48459 | UNISOC chipsets TeleService crash | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48458 | UNISOC chipsets TeleService crash | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48457 | UNISOC chipsets TeleService crash | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48456 | UNISOC chipsets camera driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48455 | UNISOC chipsets wifi service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-48454 | UNISOC chipsets wifi service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-11-01 | Fix |
| CVE-2022-3007 | Unauthorized access vulnerability in Syska SW100 Smartwatch | 8.1v3.1 | 0.3% | 2023-10-31 | |
| CVE-2022-48189 | Lenovo ThinkPad BIOS improper input validation | 6.7CNA v3.1 | 0.2% | 2023-10-30 | Fix |
| CVE-2022-39172 | Viva-project Openviva process overview stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-10-30 | |
| CVE-2022-20264 | Google Android Usage Stats service information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2022-4575 | Lenovo ThinkPad BIOS incorrect default permissions | 6.7CNA v3.1 | 0.2% | 2023-10-30 | Fix |
| CVE-2022-4574 | Lenovo ThinkPad BIOS improper input validation | 6.7CNA v3.1 | 0.2% | 2023-10-30 | Fix |
| CVE-2022-4573 | Lenovo ThinkPad X1 Fold Gen 1 improper input validation | 6.7CNA v3.1 | 0.2% | 2023-10-30 | Fix |
| CVE-2022-34887 | Lenovo Printer GM265DN improper authentication | 4.3CNA v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2022-34886 | Lenovo Printer GM265DN buffer overflow | 8.8CNA v3.1 | 0.9% | 2023-10-27 | Fix |
| CVE-2022-34834 | Vermeg Agile Reporter cross-site scripting | 4.8v3.1 | 0.4% | 2023-10-27 | |
| CVE-2022-34833 | Vermeg Agile Reporter cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-27 | |
| CVE-2022-34832 | Vermeg Agile Reporter XML external entity injection | 6.5v3.1 | 0.7% | 2023-10-27 | |
| CVE-2022-3702 | Lenovo Vantage HardwareScan Plugin time-of-check time-of-use race condition | 6.1CNA v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2022-3701 | Lenovo Vantage SystemUpdate Plugin time-of-check time-of-use race condition | 7.8CNA v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2022-3700 | Lenovo Vantage SystemUpdate Plugin time-of-check time-of-use race condition | 6.1CNA v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2022-3681 | Motorola MR2600 Router improper authentication | 6.5CNA v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2022-3611 | Lenovo App Store information disclosure | 7.6CNA v3.1 | 0.4% | 2023-10-27 | Fix |
| CVE-2022-3429 | Lenovo Printer GM265DN denial of service | 6.5CNA v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2022-38485 | Agevolt path traversal | 6.5v3.1 | 3.1% | 2023-10-25 | |
| CVE-2022-38484 | Agevolt arbitrary file upload | 8.8v3.1 | 1.6% | 2023-10-25 | |
| CVE-2022-4886 | Ingress-nginx `path` sanitization can be bypassed with `log_format` directive | 8.8CNA v3.1 | 1.6% | 2023-10-25 | Fix |
| CVE-2022-3699 | Lenovo HardwareScanPlugin out-of-bounds write | 7.8CNA v3.1 | 4.2% | 2023-10-25 | Exploit codeFix |
| CVE-2022-3698 | Lenovo HardwareScanPlugin denial of service | 4.4CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2022-0353 | Lenovo HardwareScanPlugin denial of service | 4.4CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2022-22466 | IBM Security Verify Governance information disclosure | 6.8CNA v3.1 | 0.6% | 2023-10-23 | Fix |
| CVE-2022-4954 | Waiting: One-click countdowns WordPress plugin authenticated (Administrator+) cross-site scripting | 4.8v3.1 | 0.3% | 2023-10-20 | |
| CVE-2022-4943 | miniOrange's Google Authenticator WordPress plugin authorization bypass | 5.3NVD v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2022-4712 | WP Cerber Security WordPress plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2022-4290 | Cyr to Lat WordPress plugin authenticated SQL injection | 8.8v3.1 | 0.8% | 2023-10-20 | Fix |
| CVE-2022-3622 | Blog2Social WordPress plugin missing authorization to authenticated (Subscriber+) settings update | 4.3NVD v3.1 | 0.6% | 2023-10-20 | Fix |
| CVE-2022-3342 | Jetpack CRM WordPress plugin cross-site request forgery and PHAR deserialization | 8.8v3.1 | 1.0% | 2023-10-20 | Fix |
| CVE-2022-2441 | ImageMagick Engine WordPress plugin cross-site request forgery to remote command execution | 8.8v3.1 | 1.1% | 2023-10-20 | Fix |
| CVE-2022-47583 | Mintty Terminal character injection | 9.8v3.1 | 1.1% | 2023-10-19 | Fix |
| CVE-2022-42150 | Tinylab Cloud Lab incorrect default permissions | 10.0v3.1 | 0.9% | 2023-10-19 | |
| CVE-2022-37830 | Webjet Cms cross-site scripting | 9.6v3.1 | 0.7% | 2023-10-19 | |
| CVE-2022-27813 | Unconfigured memory protection modules in Motorola MTM5000 | 8.2NVD v3.1 | 0.2% | 2023-10-19 | |
| CVE-2022-26943 | Weak PRNG entropy source used for authentication challenge generation in Motorola MTM5000 | 8.8NVD v3.1 | 0.4% | 2023-10-19 | |
| CVE-2022-26942 | Multiple missing pointer validation checks in trusted execution module in Motorola MTM5000 | 8.2NVD v3.1 | 0.2% | 2023-10-19 | |
| CVE-2022-26941 | Format string vulnerability in AT+CTGL command in Motorola MTM5000 | 8.8NVD v3.1 | 0.4% | 2023-10-19 | |
| CVE-2022-25334 | Stack overflow on SK_LOAD signature length field in Texas Instruments Omap L138 | 8.8NVD v3.1 | 0.2% | 2023-10-19 | |
| CVE-2022-25333 | Flawed SK_LOAD module authenticity check in Texas Instruments Omap L138 | 8.8NVD v3.1 | 0.1% | 2023-10-19 | |
| CVE-2022-25332 | SK_LOAD timing side channel during AES module decryption in Texas Instruments Omap L138 | 4.1NVD v3.1 | 0.1% | 2023-10-19 | |
| CVE-2022-24404 | TETRA air interface encryption missing integrity check | 7.5NVD v3.1 | 0.3% | 2023-10-19 | |
| CVE-2022-24402 | Intentionally weakened effective strength in Tetra TEA1 | 7.5NVD v3.1 | 0.6% | 2023-10-19 | |
| CVE-2022-24401 | Keystream recovery for arbitrary frames in Tetra | 8.1NVD v3.1 | 0.3% | 2023-10-19 | |
| CVE-2022-24400 | DCK pinning attack in Tetra | 5.9NVD v3.1 | 0.3% | 2023-10-19 | |
| CVE-2022-43893 | IBM Security Verify Privilege denial of service | 2.7CNA v3.1 | 0.4% | 2023-10-17 | Fix |
| CVE-2022-43892 | IBM Security Verify Privilege information disclosure | 3.7CNA v3.1 | 0.3% | 2023-10-17 | Fix |
| CVE-2022-43891 | IBM Security Verify Privilege information disclosure | 2.7CNA v3.1 | 0.5% | 2023-10-17 | Fix |
| CVE-2022-43889 | IBM Security Verify Privilege information disclosure | 5.3CNA v3.1 | 0.5% | 2023-10-17 | Fix |
| CVE-2022-22386 | IBM Security Verify Privilege information disclosure | 5.3CNA v3.1 | 0.5% | 2023-10-17 | Fix |
| CVE-2022-22385 | IBM Security Verify Privilege information disclosure | 5.9CNA v3.1 | 0.4% | 2023-10-17 | Fix |
| CVE-2022-22384 | IBM Security Verify Privilege improper input validation | 4.3CNA v3.1 | 0.4% | 2023-10-17 | Fix |
| CVE-2022-22380 | IBM Security Verify Privilege improper authentication | 5.0CNA v3.1 | 0.2% | 2023-10-17 | Fix |
| CVE-2022-22377 | IBM Security Verify Privilege information disclosure | 5.3CNA v3.1 | 0.5% | 2023-10-17 | Fix |
| CVE-2022-22375 | IBM Security Verify Privilege command execution | 7.2CNA v3.1 | 1.2% | 2023-10-17 | Fix |
| CVE-2022-3761 | OpenVPN Connect improper certificate validation | 5.9v3.1 | 0.8% | 2023-10-17 | Fix |
| CVE-2022-48612 | Classlink Oneclick Universal cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-16 | |
| CVE-2022-43868 | IBM Security Verify Access information disclosure | 5.3CNA v3.1 | 0.5% | 2023-10-14 | Fix |
| CVE-2022-43740 | IBM Security Verify Access denial of service | 7.5CNA v3.1 | 1.0% | 2023-10-14 | Fix |
| CVE-2022-33165 | IBM Security Directory Server information disclosure | 6.8CNA v3.1 | 1.2% | 2023-10-14 | Fix |
| CVE-2022-33161 | IBM Security Directory Server information disclosure | 5.3CNA v3.1 | 0.4% | 2023-10-14 | Fix |
| CVE-2022-32755 | IBM Security Directory Server external entity injection | 5.5CNA v3.1 | 0.7% | 2023-10-14 | Fix |
| CVE-2022-44758 | HCL BigFix Insights for vulnerability Remediation is vulnerable to improper credential handling | 6.5CNA v3.1 | 0.3% | 2023-10-11 | Fix |