CVE-2022 records published after 2022
Page four of seven: records 3,001 to 4,000 of the 6,660 published after 2022, newest first. The first page carries the figures for After 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-44757 | HCL BigFix Insights for vulnerability Remediation (IVR) is vulnerable to weak cryptography | 6.5CNA v3.1 | 0.3% | 2023-10-11 | Fix |
| CVE-2022-42451 | HCL BigFix Patch Management is vulnerable to insecurely stored credentials | 4.6CNA v3.1 | 0.2% | 2023-10-11 | Fix |
| CVE-2022-30527 | Siemens SINEC NMS incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2023-10-10 | Fix |
| CVE-2022-22298 | Fortinet FortiIsolator OS command injection | 6.7CNA v3.1 | 0.5% | 2023-10-10 | Fix |
| CVE-2022-48183 | Lenovo ThinkPad T14s X13 Gen3 BIOS unauthorized access | 6.1CNA v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2022-48182 | Lenovo ThinkPad T14s X13 Gen3 BIOS unauthorized access | 6.1CNA v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2022-36228 | Janusintl Noke Hd+ Smart Padlock missing authorization | 6.5NVD v3.1 | 0.3% | 2023-10-09 | |
| CVE-2022-35950 | OroCommerce cross-site scripting vulnerability in add note dialog of Shopping List line item | 6.9CNA v3.1 | 0.4% | 2023-10-09 | Fix |
| CVE-2022-3728 | Lenovo ThinkPad T14s Gen 3 BIOS unauthorized access | 6.1CNA v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2022-3431 | Lenovo BIOS incorrect default permissions | 6.7CNA v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2022-47175 | Royal Elementor Addons WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-06 | Fix |
| CVE-2022-34355 | IBM Jazz Foundation information disclosure | 4.0CNA v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2022-33160 | IBM Security Directory Suite information disclosure | 3.7CNA v3.1 | 0.3% | 2023-10-06 | Fix |
| CVE-2022-4145 | Openshift content spoofing | 4.3CNA v3.1 | 0.6% | 2023-10-05 | |
| CVE-2022-3248 | Openshift API admission checks does not enforce custom-host permissions | 7.5NVD v3.1 | 0.5% | 2023-10-05 | |
| CVE-2022-43906 | IBM Security Guardium information disclosure | 3.1CNA v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2022-36277 | SQL injection vulnerability in TCMAN GIM | 6.1v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2022-36276 | SQL injection vulnerability in TCMAN GIM | 9.8v3.1 | 0.8% | 2023-10-04 | Fix |
| CVE-2022-22447 | IBM Disconnected Log Collector information disclosure | 4.0CNA v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2022-4132 | JSS memory leak on TLS connections | 5.9NVD v3.1 | 0.7% | 2023-10-04 | Fix |
| CVE-2022-47893 | NetMan 204 remote code execution | 9.8v3.1 | 1.2% | 2023-10-03 | |
| CVE-2022-47892 | Information disclosure in NetMan 204 | 7.5v3.1 | 0.5% | 2023-10-03 | |
| CVE-2022-47891 | Admin password reset in NetMan 204 | 8.8v3.1 | 0.6% | 2023-10-03 | |
| CVE-2022-46841 | Oxygen Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2022-4956 | Caphyon Advanced Installer WinSxS DLL uncontrolled search path | 7.8v3.1 | 0.4% | 2023-09-30 | Fix |
| CVE-2022-35908 | Cambium Networks Enterprise Wi-fi path traversal | 8.8v3.1 | 0.7% | 2023-09-29 | Fix |
| CVE-2022-47187 | File upload XSS vulnerability in Generex CS141 | 6.1v3.1 | 0.4% | 2023-09-28 | Fix |
| CVE-2022-47186 | Unrestricted upload of file vulnerability in Generex CS141 | 9.1v3.1 | 0.6% | 2023-09-28 | Fix |
| CVE-2022-48606 | Huawei HarmonyOS null pointer dereference | 7.5v3.1 | 0.4% | 2023-09-27 | Fix |
| CVE-2022-48605 | Huawei HarmonyOS improper input validation | 9.8v3.1 | 0.4% | 2023-09-25 | Fix |
| CVE-2022-4318 | Cri-o: /etc/passwd tampering privesc | 7.8CNA v3.1 | 0.3% | 2023-09-25 | Fix |
| CVE-2022-4245 | Red Hat RHINT Camel-K-1.10.1 codehaus-plexus: Xml external entity (XXE) injection | 4.3NVD v3.1 | 0.7% | 2023-09-25 | Fix |
| CVE-2022-4244 | Red Hat RHINT Camel-K-1.10.1 Codehaus-plexus: Directory traversal | 7.5NVD v3.1 | 1.3% | 2023-09-25 | Fix |
| CVE-2022-4137 | Keycloak: Reflected XSS attack | 8.1CNA v3.1 | 1.2% | 2023-09-25 | Fix |
| CVE-2022-3962 | Kiali: Error message spoofing in kiali UI | 4.3CNA v3.1 | 0.7% | 2023-09-23 | Fix |
| CVE-2022-4039 | Red Hat Single Sign-On management interface incorrect default permissions | 8.0CNA v3.1 | 0.8% | 2023-09-22 | Fix |
| CVE-2022-3874 | foreman os command injection via ct_command and fcct_command | 8.0CNA v3.1 | 2.2% | 2023-09-22 | Fix |
| CVE-2022-47562 | Allocation of resources without limits or throttling in Ormazabal products | 7.5v3.1 | 0.8% | 2023-09-20 | |
| CVE-2022-47561 | Unprotected Storage of Credentials in Ormazabal products | 5.5NVD v3.1 | 0.2% | 2023-09-20 | |
| CVE-2022-47560 | Cleartext transmission of sensitive information in Ormazabal products | 6.5v3.1 | 0.3% | 2023-09-20 | |
| CVE-2022-45448 | Cross-site scripting in M4 PDF plugin for PrestaShop sites | 6.1v3.1 | 0.3% | 2023-09-20 | |
| CVE-2022-45447 | Path traversal in M4 PDF plugin for PrestaShop sites | 6.5v3.1 | 0.7% | 2023-09-20 | |
| CVE-2022-3916 | Keycloak: Session takeover with oidc offline refreshtokens | 6.8CNA v3.1 | 1.0% | 2023-09-20 | Fix |
| CVE-2022-3596 | Red Hat OpenStack Platform instack-undercloud: Rsync leaks information to undercloud | 7.5CNA v3.1 | 1.1% | 2023-09-20 | Fix |
| CVE-2022-1438 | Keycloak: Xss on impersonation under specific circumstances | 6.4CNA v3.1 | 0.7% | 2023-09-20 | Fix |
| CVE-2022-47559 | Cross-site request forgery in Ormazabal products | 8.8v3.1 | 0.2% | 2023-09-19 | |
| CVE-2022-47558 | Improper access control in Ormazabal products | 9.8v3.1 | 0.6% | 2023-09-19 | |
| CVE-2022-47557 | Ormazabal ekorCCP and ekorRCI weak password hash | 6.1v3.1 | 0.1% | 2023-09-19 | |
| CVE-2022-47556 | Uncontrolled resource consumption in Ormazabal products | 6.5v3.1 | 0.6% | 2023-09-19 | |
| CVE-2022-47555 | Improper neutralization of Special Elements in Ormazabal products | 8.8NVD v3.1 | 1.2% | 2023-09-19 | |
| CVE-2022-47554 | Exposure of sensitive information in Ormazabal products | 7.5v3.1 | 0.6% | 2023-09-19 | |
| CVE-2022-47553 | Improper authorization in Ormazabal products | 7.5v3.1 | 0.8% | 2023-09-19 | |
| CVE-2022-28357 | NATS nats-server allows directory traversal via unintended path to a management action | 9.8v3.1 | 1.0% | 2023-09-19 | Fix |
| CVE-2022-47848 | Bezeq Vtech Iad604-il improper authentication | 7.5v3.1 | 0.7% | 2023-09-15 | |
| CVE-2022-20917 | Cisco Jabber resource exposure | 4.3CNA v3.1 | 0.9% | 2023-09-15 | Fix |
| CVE-2022-3466 | Red Hat OpenShift Container Platform CRI-O container runtime vulnerability | 4.8CNA v3.1 | 0.2% | 2023-09-15 | Fix |
| CVE-2022-3261 | OpenStack plain-text passwords saved in /var/log/messages | 7.5NVD v3.1 | 0.3% | 2023-09-15 | |
| CVE-2022-47631 | Razer synapse time-of-check time-of-use race condition | 7.8v3.1 | 0.4% | 2023-09-14 | |
| CVE-2022-35849 | Fortinet FortiADC OS command injection | 7.4CNA v3.1 | 0.5% | 2023-09-13 | Fix |
| CVE-2022-48475 | Control de Ciber buffer overflow | 8.8v3.1 | 0.5% | 2023-09-12 | |
| CVE-2022-48474 | Control de Ciber denial of service | 7.5v3.1 | 1.0% | 2023-09-12 | Exploit code |
| CVE-2022-47637 | Apache Friends XAMPP improper preservation of permissions | 6.7v3.1 | 0.2% | 2023-09-12 | |
| CVE-2022-24093 | Adobe Commerce post-auth improper input validation leads to remote code execution | 9.1CNA v3.1 | 1.5% | 2023-09-12 | Fix |
| CVE-2022-4896 | Control de Ciber denial of service | 7.5v3.1 | 1.0% | 2023-09-12 | Exploit code |
| CVE-2022-34238 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-09-11 | Fix |
| CVE-2022-34227 | Adobe Acrobat Reader DC AcroForm value use-after-free remote code execution | 7.8CNA v3.1 | 2.8% | 2023-09-11 | Fix |
| CVE-2022-34224 | Adobe Acrobat Reader DC AcroForm setItems use-after-free remote code execution | 7.8CNA v3.1 | 2.9% | 2023-09-11 | Fix |
| CVE-2022-28836 | Adobe InCopy Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2022-28835 | Adobe InCopy Font Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.5% | 2023-09-11 | Fix |
| CVE-2022-28834 | Adobe InCopy Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2022-28833 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2022-28832 | Adobe InDesign Font Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2022-28831 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-11 | Fix |
| CVE-2022-23382 | Shenzhen Hichip Vision Technology Firmware denial of service | 8.1v3.1 | 0.5% | 2023-09-11 | |
| CVE-2022-1415 | Drools: Unsafe data deserialization in streamutils | 8.1CNA v3.1 | 1.0% | 2023-09-11 | Fix |
| CVE-2022-33164 | IBM Security Directory Server path traversal | 8.7CNA v3.1 | 1.5% | 2023-09-08 | Fix |
| CVE-2022-27599 | QNAP QVR Pro Client log files information disclosure | 6.7CNA v3.1 | 0.2% | 2023-09-08 | Fix |
| CVE-2022-22409 | IBM Aspera Faspex information disclosure | 5.3CNA v3.1 | 0.8% | 2023-09-08 | Fix |
| CVE-2022-22405 | IBM Aspera Faspex information disclosure | 5.9CNA v3.1 | 0.5% | 2023-09-08 | Fix |
| CVE-2022-22402 | IBM Aspera Faspex cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-09-08 | Fix |
| CVE-2022-22401 | IBM Aspera Faspex information disclosure | 5.9CNA v3.1 | 0.5% | 2023-09-08 | Fix |
| CVE-2022-30646 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30645 | Adobe Illustrator SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30644 | Adobe Illustrator Font Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.5% | 2023-09-07 | Fix |
| CVE-2022-30643 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30642 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30641 | Adobe Illustrator SVG File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-09-07 | Fix |
| CVE-2022-30640 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30639 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30638 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-30637 | Adobe Illustrator Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-09-07 | Fix |
| CVE-2022-32920 | Apple Xcode file parsing information disclosure | 5.5v3.1 | 0.2% | 2023-09-06 | Fix |
| CVE-2022-43903 | IBM Security Guardium denial of service | 4.3CNA v3.1 | 0.7% | 2023-09-05 | Fix |
| CVE-2022-41763 | Nokia Access Management System code injection | 8.8v3.1 | 1.2% | 2023-09-05 | |
| CVE-2022-40534 | Qualcomm Snapdragon improper validation of array index in Audio | 8.4CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2022-40524 | Qualcomm Snapdragon buffer over-read in Modem | 6.7CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2022-33275 | Qualcomm Snapdragon improper validation of array index in WLAN HAL | 8.4CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2022-33220 | Qualcomm Snapdragon buffer over-read in Automotive multimedia | 5.1CNA v3.1 | 0.1% | 2023-09-05 | Fix |
| CVE-2022-48453 | UNISOC SC7731E camera driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2022-48452 | UNISOC chipsets Ifaa service missing authorization | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2022-47353 | UNISOC chipsets vdsp device crash | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2022-47352 | UNISOC T610/T618 camera driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-09-04 | Fix |
| CVE-2022-46527 | Elsys Ers 1.5 buffer overflow | 7.5v3.1 | 0.7% | 2023-09-01 | |
| CVE-2022-44349 | Navblue N-ops & Crew cross-site scripting | 5.4v3.1 | 0.3% | 2023-09-01 | |
| CVE-2022-22305 | Fortinet FortiAnalyzer improper certificate host validation | 5.4CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2022-4343 | Exposure of sensitive information to an unauthorized actor in GitLab | 5.0CNA v3.1 | 0.5% | 2023-09-01 | Fix |
| CVE-2022-3407 | Motorola Mobility Motorola smartphones improper resource release | 4.9CNA v3.1 | 0.2% | 2023-09-01 | Fix |
| CVE-2022-46869 | Acronis Cyber Protect Home Office externally controlled resource reference | 7.3CNA v3.0 | 0.2% | 2023-08-31 | Fix |
| CVE-2022-46868 | Acronis Cyber Protect Home Office externally controlled resource reference | 6.7CNA v3.0 | 0.2% | 2023-08-31 | Fix |
| CVE-2022-45451 | Acronis Cyber Protect Home Office improper privilege management | 8.8CNA v3.0 | 0.5% | 2023-08-31 | Exploit codeFix |
| CVE-2022-1601 | User Access Manager WordPress plugin IP spoofing | 5.3NVD v3.1 | 0.6% | 2023-08-30 | Fix |
| CVE-2022-46783 | Stormshield SSL VPN Client inadequate encryption strength | 5.3v3.1 | 0.3% | 2023-08-28 | Fix |
| CVE-2022-43904 | IBM Security Guardium information disclosure | 7.5CNA v3.1 | 0.8% | 2023-08-28 | Fix |
| CVE-2022-43909 | IBM Security Guardium cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-08-27 | Fix |
| CVE-2022-43907 | IBM Security Guardium command execution | 7.2CNA v3.1 | 1.3% | 2023-08-27 | Fix |
| CVE-2022-4452 | Google Chrome crosvm improper input validation | 8.8v3.1 | 0.4% | 2023-08-25 | Fix |
| CVE-2022-46884 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.5% | 2023-08-24 | Fix |
| CVE-2022-3746 | Lenovo Notebook privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2022-3745 | Lenovo Notebook privilege escalation | 4.4CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2022-3744 | Lenovo Notebook hard-coded credentials | 6.7CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2022-3743 | Lenovo Notebook privilege escalation | 4.4CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2022-3742 | Lenovo Notebook buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-08-23 | Fix |
| CVE-2022-48571 | Memcached denial of service | 7.5v3.1 | 1.1% | 2023-08-22 | Fix |
| CVE-2022-48570 | Cryptopp Crypto++ out-of-bounds write | 7.5v3.1 | 1.0% | 2023-08-22 | Fix |
| CVE-2022-48566 | Python race condition | 5.9v3.1 | 1.3% | 2023-08-22 | Fix |
| CVE-2022-48565 | Python An XML external entity injection | 9.8v3.1 | 5.0% | 2023-08-22 | Exploit codeFix |
| CVE-2022-48564 | Python denial of service | 6.5v3.1 | 1.7% | 2023-08-22 | Fix |
| CVE-2022-48560 | Python A use-after-free | 7.5NVD v3.1 | 2.0% | 2023-08-22 | Fix |
| CVE-2022-48554 | File out-of-bounds read | 5.5v3.1 | 0.7% | 2023-08-22 | Fix |
| CVE-2022-48547 | cacti reflected cross-site scripting | 6.1v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-48545 | Xpdfreader Xpdf uncontrolled recursion | 5.5v3.1 | 0.3% | 2023-08-22 | Fix |
| CVE-2022-48541 | ImageMagick memory leak | 7.1v3.1 | 1.5% | 2023-08-22 | Fix |
| CVE-2022-48538 | cacti incorrect authorization | 5.3v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2022-48522 | perl out-of-bounds write | 9.8NVD v3.1 | 3.5% | 2023-08-22 | Fix |
| CVE-2022-48174 | BusyBox ash.c:6030 stack-based buffer overflow | 9.8v3.1 | 3.2% | 2023-08-22 | Fix |
| CVE-2022-48065 | GNU Binutils memory leak | 5.5v3.1 | 0.6% | 2023-08-22 | Fix |
| CVE-2022-48064 | GNU Binutils resource exhaustion | 5.5v3.1 | 0.6% | 2023-08-22 | Fix |
| CVE-2022-48063 | GNU Binutils resource exhaustion | 5.5v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2022-47696 | GNU Binutils denial of service | 7.8v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2022-47695 | GNU Binutils denial of service | 7.8v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2022-47673 | GNU Binutils out-of-bounds read | 7.8v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2022-47069 | 7-Zip P7ZIP out-of-bounds write | 7.8v3.1 | 0.3% | 2023-08-22 | Fix |
| CVE-2022-47022 | Open-mpi Hwloc null pointer dereference | 4.7v3.1 | 0.3% | 2023-08-22 | Fix |
| CVE-2022-47011 | GNU Binutils memory leak | 5.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2022-47010 | GNU Binutils memory leak | 5.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2022-47008 | GNU Binutils memory leak | 5.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2022-47007 | GNU Binutils memory leak | 5.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2022-45703 | GNU Binutils heap-based buffer overflow | 7.8v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2022-45611 | Fresenius Kabi Pharmahelp insufficiently protected credentials | 9.8v3.1 | 1.2% | 2023-08-22 | |
| CVE-2022-45582 | Horizon Web Dashboard open redirect | 6.1v3.1 | 0.8% | 2023-08-22 | Fix |
| CVE-2022-44840 | GNU Binutils heap-based buffer overflow | 7.8v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2022-44730 | Apache XML Graphics Batik: Information disclosure | 4.4v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-44729 | Apache XML Graphics Batik: Information disclosure | 7.1NVD v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-44215 | Southrivertech Titan FTP Server There is an open redirect | 6.1NVD v3.1 | 0.9% | 2023-08-22 | |
| CVE-2022-43358 | Sass-lang Libsass stack-based buffer overflow | 7.5v3.1 | 1.5% | 2023-08-22 | Fix |
| CVE-2022-43357 | Sass-lang Libsass stack-based buffer overflow | 7.5v3.1 | 1.5% | 2023-08-22 | Fix |
| CVE-2022-41444 | cacti cross-site scripting | 6.1v3.1 | 0.7% | 2023-08-22 | Fix |
| CVE-2022-40090 | libtiff infinite loop | 6.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-38349 | Freedesktop Poppler reachable assertion | 6.5v3.1 | 1.1% | 2023-08-22 | Fix |
| CVE-2022-37052 | Freedesktop Poppler reachable assertion | 6.5v3.1 | 1.1% | 2023-08-22 | Fix |
| CVE-2022-37051 | Freedesktop Poppler reachable assertion | 6.5v3.1 | 1.1% | 2023-08-22 | Fix |
| CVE-2022-37050 | Freedesktop Poppler denial of service | 6.5v3.1 | 1.1% | 2023-08-22 | Fix |
| CVE-2022-36648 | QEMU null pointer dereference | 10.0v3.1 | 1.7% | 2023-08-22 | Fix |
| CVE-2022-35206 | GNU Binutils null pointer dereference | 5.5v3.1 | 0.3% | 2023-08-22 | Fix |
| CVE-2022-35205 | GNU Binutils reachable assertion | 5.5v3.1 | 0.4% | 2023-08-22 | Fix |
| CVE-2022-34038 | etcd out-of-bounds write | 7.5v3.1 | 1.8% | 2023-08-22 | Fix |
| CVE-2022-29654 | NASM Netwide Assembler quote_for_pmake in asm/ buffer overflow | 5.5v3.1 | 0.5% | 2023-08-22 | Fix |
| CVE-2022-28073 | radare2 r_reg_set_value function use-after-free | 7.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-28072 | radare2 r_read_le32 function heap-based buffer overflow | 7.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-28071 | radare2 r_reg_get_name_idx function use-after-free | 7.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-28070 | radare2 __core_anal_fcn function null pointer dereference | 7.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-28069 | radare2 vax_opfunction heap-based buffer overflow | 7.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-28068 | radare2 r_sleb128 function heap-based buffer overflow | 7.5v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-26592 | Sass-lang Libsass stack-based buffer overflow | 8.8v3.1 | 0.9% | 2023-08-22 | Fix |
| CVE-2022-25024 | JSON2XML uncaught exception | 7.5v3.1 | 1.3% | 2023-08-22 | Fix |
| CVE-2022-46751 | Apache Ivy: XML external entity vulnerability in Apache Ivy | 8.2v3.1 | 2.0% | 2023-08-21 | Fix |
| CVE-2022-24989 | TerraMaster F2-210 arbitrary code execution | 9.8v3.1 | 31.9% | 2023-08-20 | MetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-4894 | HP and Samsung Printer software uncontrolled search path | 7.3v3.1 | 0.2% | 2023-08-16 | Fix |
| CVE-2022-4782 | ClickFunnels WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-08-16 | |
| CVE-2022-48503 | Apple Multiple Products improper array index validation | 8.8v3.1 | 3.2% | 2023-08-14 | KEVKCVFix |
| CVE-2022-46725 | Apple iOS and iPadOS handling of URLs spoofing | 4.3v3.1 | 0.6% | 2023-08-14 | Fix |
| CVE-2022-46724 | Apple iOS and iPadOS observable discrepancy | 2.4v3.1 | 0.2% | 2023-08-14 | Fix |
| CVE-2022-46722 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-08-14 | Fix |
| CVE-2022-46706 | Apple macOS type confusion | 7.8v3.1 | 0.2% | 2023-08-14 | Fix |
| CVE-2022-42828 | Apple macOS arbitrary code execution | 8.8v3.1 | 0.6% | 2023-08-14 | Fix |
| CVE-2022-32876 | Apple macOS logic flaw | 3.3v3.1 | 0.2% | 2023-08-14 | Fix |
| CVE-2022-26699 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-08-14 | Fix |
| CVE-2022-22655 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2023-08-14 | Fix |
| CVE-2022-22646 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to modify protected parts of the file system. | 5.5v3.1 | 0.2% | 2023-08-14 | Fix |
| CVE-2022-4953 | Elementor WordPress plugin Iframe injection | 6.1NVD v3.1 | 3.4% | 2023-08-14 | Exploit codeFix |
| CVE-2022-46329 | Intel(R) PROSet/Wireless WiFi Software protection mechanism failure | 8.2CNA v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2022-45112 | Intel(R) VROC software some improper access control | 7.3CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-44612 | Intel(R) Unison(TM) software some hard-coded credentials | 5.5CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-44611 | Intel(R) Processors BIOS firmware for some improper input validation | 6.9CNA v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2022-43505 | Intel(R) Processors BIOS firmware for some insufficient control flow management | 4.1CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-43456 | Intel(R) RST software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-41984 | Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition protection mechanism failure | 4.4CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-41804 | Intel(R) Xeon(R) Processors injection | 7.2CNA v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2022-40982 | Intel(R) Processors information disclosure | 6.5CNA v3.1 | 3.0% | 2023-08-11 | Fix |
| CVE-2022-40964 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software improper access control | 7.9CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-38973 | Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition improper access control | 3.3CNA v3.1 | 0.1% | 2023-08-11 | Fix |
| CVE-2022-38102 | Intel(R) Converged Security and Management Engine firmware for some improper input validation | 7.2CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-38083 | Intel(R) Processors BIOS firmware for some improper initialization | 6.1CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-38076 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software some improper input validation | 3.8CNA v3.1 | 0.3% | 2023-08-11 | Fix |
| CVE-2022-37343 | Intel(R) Processors BIOS firmware for some improper access control | 7.2CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-37336 | Intel(R) NUC BIOS firmware for some improper input validation | 7.9CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-36392 | Intel(R) AMT and Intel(R) Standard Manageability in Intel (R) CSME improper input validation | 8.6CNA v3.1 | 0.7% | 2023-08-11 | Fix |
| CVE-2022-36372 | Intel(R) NUC BIOS firmware privilege escalation | 7.5CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-36351 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software some improper input validation | 4.3CNA v3.1 | 0.6% | 2023-08-11 | Fix |
| CVE-2022-34657 | Intel(R) PCSD BIOS firmware for some improper input validation | 6.0CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-29887 | Intel(R) Manageability Commander software some cross-site scripting | 8.1CNA v3.1 | 0.7% | 2023-08-11 | Fix |
| CVE-2022-29871 | Intel(R) CSME software installer improper access control | 6.7CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-29470 | Intel DTT Software improper access control | 6.7CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-27879 | Intel(R) Processors information disclosure | 5.3CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-27635 | Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software improper access control | 8.2CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-25864 | Intel(R) oneMKL software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-08-11 | Fix |
| CVE-2022-47636 | OutSystems Service Studio uncontrolled search path | 7.8v3.1 | 1.3% | 2023-08-10 | Exploit code |
| CVE-2022-44629 | Catalyst Connect Zoho CRM Client Portal WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-08-10 | Fix |
| CVE-2022-27861 | Ninja Popups WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-08-10 | Fix |
| CVE-2022-48604 | ScienceLogic SL 1 “logging export” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48603 | ScienceLogic SL 1 “message viewer iframe” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48602 | ScienceLogic SL 1 “message viewer print” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48601 | ScienceLogic SL 1 “network print report” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48600 | ScienceLogic SL 1 “notes view” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48599 | ScienceLogic SL 1 “reporter events type” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48598 | ScienceLogic SL 1 SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48597 | ScienceLogic SL 1 “ticket event report” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48596 | ScienceLogic SL 1 “ticket queue watchers” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48595 | ScienceLogic SL 1 “ticket template watchers” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48594 | ScienceLogic SL 1 “ticket watchers email” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48593 | ScienceLogic SL 1 “topology data service” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48592 | ScienceLogic SL 1 SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48591 | ScienceLogic SL 1 SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48590 | ScienceLogic SL 1 SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48589 | ScienceLogic SL 1 “reporting job editor” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48588 | ScienceLogic SL 1 “schedule editor decoupled” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48587 | ScienceLogic SL 1 “schedule editor” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48586 | ScienceLogic SL 1 “json walker” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48585 | ScienceLogic SL 1 “admin brand portal” feature of the SQL injection | 8.8v3.1 | 0.7% | 2023-08-09 | |
| CVE-2022-48584 | ScienceLogic SL 1 command injection | 8.8v3.1 | 1.6% | 2023-08-09 | |
| CVE-2022-48583 | ScienceLogic SL 1 dashboard scheduler feature of the command injection | 8.8v3.1 | 1.6% | 2023-08-09 | |
| CVE-2022-48582 | ScienceLogic SL 1 ticket report generate feature of the command injection | 8.8v3.1 | 1.6% | 2023-08-09 | |
| CVE-2022-48581 | ScienceLogic SL 1 “dash export” feature of the command injection | 8.8v3.1 | 1.6% | 2023-08-09 | |
| CVE-2022-48580 | ScienceLogic SL 1 command injection | 8.8v3.1 | 1.5% | 2023-08-09 | |
| CVE-2022-47185 | Apache Traffic Server: Invalid Range header causes a crash | 7.5v3.1 | 2.0% | 2023-08-09 | Fix |
| CVE-2022-45821 | NOO Timetable WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-08-08 | |
| CVE-2022-40510 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 9.8CNA v3.1 | 0.4% | 2023-08-08 | Fix |
| CVE-2022-39062 | Siemens SICAM TOOLBOX II incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2023-08-08 | Fix |
| CVE-2022-48579 | RARLAB UnRAR link following | 7.5v3.1 | 0.8% | 2023-08-07 | Fix |
| CVE-2022-47351 | UNISOC chipsets camera driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-08-07 | Fix |
| CVE-2022-47350 | UNISOC chipsets camera driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-08-07 | Fix |
| CVE-2022-38795 | Gitea erroneous repo clones | 6.5v3.1 | 0.6% | 2023-08-07 | Fix |
| CVE-2022-46782 | Stormshield SSL VPN Client OpenVPN instance vulnerability | 7.8v3.1 | 0.2% | 2023-08-05 | Fix |
| CVE-2022-41401 | OpenRefine server-side request forgery | 6.5v3.1 | 1.4% | 2023-08-04 | Exploit codeFix |
| CVE-2022-4955 | Google Chrome DevTools inappropriate implementation | 6.5v3.1 | 0.3% | 2023-08-04 | Fix |
| CVE-2022-34453 | Dell XtremIO X2 improper access control | 7.6CNA v3.1 | 0.4% | 2023-08-03 | Fix |
| CVE-2022-26838 | Cybozu Remote Service Importing Mobile Device Data path traversal | 6.5v3.1 | 1.0% | 2023-08-03 | Fix |
| CVE-2022-4046 | CODESYS: Improper memory restrictions fro CODESYS Control | 8.8CNA v3.1 | 0.9% | 2023-08-03 | Fix |
| CVE-2022-46485 | NGSurvey resource exhaustion | 7.5v3.1 | 1.2% | 2023-08-02 | Exploit code |
| CVE-2022-46484 | NGSurvey information disclosure | 7.5v3.1 | 0.9% | 2023-08-02 | Exploit code |
| CVE-2022-40609 | IBM SDK, Java Technology Edition code execution | 8.1CNA v3.1 | 1.8% | 2023-08-02 | Fix |
| CVE-2022-2416 | Octopus Deploy Octopus Server server-side request forgery | 5.5CNA v3.1 | 0.3% | 2023-08-02 | Fix |
| CVE-2022-2346 | Octopus Deploy Octopus Server extension endpoints vulnerability | 5.5CNA v3.1 | 0.3% | 2023-08-02 | Fix |
| CVE-2022-39987 | RaspAP command injection | 8.8v3.1 | 37.3% | 2023-08-01 | Fix |
| CVE-2022-39986 | RaspAP command injection | 9.8v3.1 | 98.7% | 2023-08-01 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-43831 | IBM Spectrum Scale privilege escalation | 7.4CNA v3.1 | 0.2% | 2023-07-31 | Fix |
| CVE-2022-42183 | Precisely Spectrum Spatial Analyst server-side request forgery | 9.1v3.1 | 0.7% | 2023-07-31 | Fix |
| CVE-2022-42182 | Precisely Spectrum Spatial Analyst path traversal | 5.3v3.1 | 0.9% | 2023-07-31 | Fix |
| CVE-2022-4888 | Checkout Fields Manager WordPress plugin multiple plugins from Addify multiple CSRF | 6.5NVD v3.1 | 0.3% | 2023-07-31 | Fix |
| CVE-2022-4926 | Google Chrome Intents insufficient policy enforcement | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4925 | Google Chrome improper input validation | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4924 | Google Chrome WebRTC use-after-free | 9.6v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4923 | Google Chrome Omnibox inappropriate implementation | 3.1v3.1 | 0.3% | 2023-07-29 | Fix |
| CVE-2022-4922 | Google Chrome Blink inappropriate implementation | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4921 | Google Chrome Accessibility use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4920 | Google Chrome Blink heap-based buffer overflow | 9.6v3.1 | 0.8% | 2023-07-29 | Fix |
| CVE-2022-4919 | Google Chrome Base Internals use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4918 | Google Chrome UI use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4917 | Google Chrome Notifications incorrect security UI | 4.3v3.1 | 0.3% | 2023-07-29 | Fix |
| CVE-2022-4916 | Google Chrome Media use-after-free | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4915 | Google Chrome URL Formatting inappropriate implementation | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4914 | Google Chrome PrintPreview heap-based buffer overflow | 8.8v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4913 | Google Chrome extensions inappropriate implementation | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4912 | Google Chrome MathML type confusion | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4911 | Google Chrome DevTools improper input validation | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2022-4910 | Google Chrome Autofill inappropriate implementation | 5.4v3.1 | 0.5% | 2023-07-29 | Fix |
| CVE-2022-4909 | Google Chrome XML inappropriate implementation | 6.3v3.1 | 0.4% | 2023-07-29 | Fix |
| CVE-2022-4908 | Google Chrome iFrame Sandbox inappropriate implementation | 4.3v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2022-4907 | Google Chrome arbitrary code execution | 8.8v3.1 | 1.0% | 2023-07-29 | Fix |
| CVE-2022-4906 | Google Chrome Blink inappropriate implementation | 8.8v3.1 | 13.0% | 2023-07-29 | Fix |
| CVE-2022-31454 | Yiiframework Yii cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-28 | Fix |
| CVE-2022-43703 | Arm Compiler 5 (AC5) incomplete verification of installation file signature | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2022-43702 | Arm Compiler 5 (AC5) incomplete verification of installation file signature | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2022-43701 | Arm Compiler 5 (AC5) insecure directory permissions on installer files | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2022-31200 | Atmail cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-27 | |
| CVE-2022-43713 | Gxsoftware Xperiencentral improper output encoding | 7.5v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2022-43712 | Gxsoftware Xperiencentral missing authorization | 6.5v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2022-43711 | Gxsoftware Xperiencentral cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-26 | Fix |
| CVE-2022-43710 | Gxsoftware Xperiencentral cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-26 | Fix |
| CVE-2022-31456 | Truedesk A cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-26 | |
| CVE-2022-31455 | Truedesk cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-26 | |
| CVE-2022-4608 | Hitachi Energy RTU500 series out-of-bounds write | 7.5CNA v3.1 | 0.7% | 2023-07-26 | Fix |
| CVE-2022-2502 | Hitachi Energy RTU500 series improper input validation | 7.5CNA v3.1 | 0.6% | 2023-07-26 | Fix |
| CVE-2022-46902 | Vocera Report Server path traversal | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2022-46901 | Vocera Report Server resource exposure | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2022-46900 | Vocera Report Server path traversal | 6.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2022-46899 | Vocera Report Server unrestricted file upload | 7.5v3.1 | 0.5% | 2023-07-25 | |
| CVE-2022-46898 | Vocera Report Server path traversal | 9.8v3.1 | 0.8% | 2023-07-25 | |
| CVE-2022-31458 | Rtx Trap host header injection | 6.1v3.1 | 0.4% | 2023-07-25 | |
| CVE-2022-31457 | Rtx Trap path traversal | 7.5v3.1 | 0.9% | 2023-07-25 | |
| CVE-2022-30280 | Nokia Netact cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-24 | |
| CVE-2022-28867 | Nokia Netact cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-24 | |
| CVE-2022-28865 | Nokia Netact cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-24 | |
| CVE-2022-28864 | Nokia Netact CSV injection | 8.8v3.1 | 1.0% | 2023-07-24 | |
| CVE-2022-28863 | Nokia Netact unrestricted file upload | 8.8v3.1 | 1.3% | 2023-07-24 | |
| CVE-2022-46295 | Open Babel has out-of-bounds write in MSI translationVectors[] | 7.8NVD v3.1 | 0.9% | 2023-07-21 | Fix |
| CVE-2022-46294 | Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom) | 7.8NVD v3.1 | 0.9% | 2023-07-21 | Fix |
| CVE-2022-46293 | Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT) | 7.8NVD v3.1 | 0.9% | 2023-07-21 | Fix |
| CVE-2022-46292 | Open Babel has out-of-bounds write in MOPAC translationVectors[] (UNIT CELL TRANSLATION) | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-46291 | Open Babel has out-of-bounds write in Gaussian translationVectors[] | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-46290 | Open Babel has out-of-bounds write in ORCA nAtoms parser (second variant) | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-46289 | Open Babel has out-of-bounds write in ORCA nAtoms parser | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-46280 | Open Babel has uninitialized pointer dereference in PQS pFormat | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-44451 | Open Babel has uninitialized pointer dereference in MSI atom parser | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-43607 | Open Babel has out-of-bounds write in MOL2 attribute/value parser | 7.8v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-43467 | Open Babel has out-of-bounds write in PQS coord_file parser | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-42885 | Open Babel has uninitialized pointer dereference in GRO residue parser | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-41793 | Open Babel has out-of-bounds write in CSR PadString (title field) | 7.8NVD v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2022-37331 | Open Babel has out-of-bounds write in Gaussian coords_type orientation parser | 7.8v3.1 | 0.7% | 2023-07-21 | Fix |
| CVE-2022-28737 | Red Hat shim EFI image loader out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2023-07-20 | Fix |
| CVE-2022-28736 | GNU GRUB there's a use-after-free vulnerability in grub_cmd_chainloader function | 7.8NVD v3.1 | 0.3% | 2023-07-20 | Fix |
| CVE-2022-28735 | GNU GRUB2 shim_lock verifier vulnerability | 7.8NVD v3.1 | 0.3% | 2023-07-20 | Fix |
| CVE-2022-28734 | GNU GRUB out-of-bounds write when handling split HTTP headers | 7.0NVD v3.1 | 1.1% | 2023-07-20 | Fix |
| CVE-2022-28733 | GNU GRUB integer underflow in grub_net_recv_ip4_packets | 8.1NVD v3.1 | 1.3% | 2023-07-20 | Fix |
| CVE-2022-2127 | Samba: Out-of-bounds read in winbind auth_crap | 5.9NVD v3.1 | 1.7% | 2023-07-20 | Fix |
| CVE-2022-43910 | IBM Security Guardium privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-07-19 | Fix |
| CVE-2022-43908 | IBM Security Guardium denial of service | 4.3CNA v3.1 | 0.7% | 2023-07-19 | Fix |
| CVE-2022-40896 | Pygments vulnerable to ReDoS | 5.5v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2022-47421 | WordPress ARMember and ARMember plugins vulnerable to Auth. stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2022-47169 | Visibility Logic for Elementor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2022-47085 | Ostree libostree vulnerable to denial of service attack | 7.5v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2022-46857 | SiteAlert (Formerly WP Health) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2022-45828 | NOO Timetable WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | |
| CVE-2022-41409 | PCRE2 integer overflow | 7.5v3.1 | 1.1% | 2023-07-18 | Fix |
| CVE-2022-34155 | OAuth Single Sign On SSO (OAuth Client) WordPress plugin broken authentication | 8.8v3.1 | 1.0% | 2023-07-18 | Exploit codeFix |
| CVE-2022-33065 | libsndfile integer overflow | 7.8v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2022-33064 | libsndfile function wav_read_header in src/wav.c off-by-one error | 7.8v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2022-26563 | Tildeslash monit incorrect authorization | 8.8v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2022-4146 | EL injection vulnerability in Hitachi Replication Manager | 7.3CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2022-47172 | WooLentor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2022-38062 | Download WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2022-36424 | Easy Appointments WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2022-30858 | miniupnp project Ngiflib resource exhaustion | 6.5v3.1 | 0.6% | 2023-07-17 | |
| CVE-2022-4952 | OmniSharp csharp-language-server-protocol JSON serializer resource exhaustion | 7.5v3.1 | 0.9% | 2023-07-17 | Fix |
| CVE-2022-4023 | 3DPrint WordPress plugin CSRF to arbitrary file downlad | 5.3NVD v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2022-42045 | Zemana Anti-Malware code injection | 6.7v3.1 | 0.6% | 2023-07-13 | Exploit code |
| CVE-2022-24834 | Heap overflow issue with the Lua cjson library used by Redis | 7.0CNA v3.1 | 41.1% | 2023-07-13 | Exploit codeFix |
| CVE-2022-48451 | UNISOC chipsets bluetooth service out-of-bounds write | 4.1v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2022-48450 | UNISOC chipsets bluetooth service denial of service | 4.4v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2022-46651 | Apache Airflow information disclosure | 6.5v3.1 | 1.2% | 2023-07-12 | Fix |
| CVE-2022-45855 | Apache Ambari: Allows authenticated metrics consumers to perform RCE | 8.0CNA v3.1 | 1.2% | 2023-07-12 | Fix |
| CVE-2022-42009 | Apache Ambari expression language injection | 8.0CNA v3.1 | 1.2% | 2023-07-12 | Fix |
| CVE-2022-48521 | OpenDKIM Authentication-Results header handling improper authentication | 5.3v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2022-45823 | Video Contest WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | |
| CVE-2022-31810 | Siemens SiPass integrated stack-based buffer overflow | 7.5CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2022-29562 | Siemens RUGGEDCOM ROX MX5000 improper input validation | 3.7CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2022-29561 | Siemens RUGGEDCOM ROX MX5000 cross-site request forgery | 7.5CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2022-23447 | Fortinet FortiExtender path traversal | 7.3CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2022-22302 | Fortinet FortiAuthenticator cleartext storage of sensitive information | 5.3CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2022-4361 | Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC | 6.1NVD v3.1 | 0.6% | 2023-07-07 | Exploit codeFix |
| CVE-2022-48520 | Huawei EMUI unauthorized access vulnerability in the SystemUI module | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-48519 | Huawei EMUI unauthorized access vulnerability in the SystemUI module | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-48518 | Huawei HarmonyOS vulnerability of improper signature verification | 5.5v3.1 | 0.1% | 2023-07-06 | Fix |
| CVE-2022-48517 | Huawei HarmonyOS unauthorized service access vulnerability in the DSoftBus module | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-48516 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-48515 | Huawei HarmonyOS vulnerability of inappropriate permission control in Nearby | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-48514 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-48513 | Huawei HarmonyOS vulnerability of identity verification being bypassed in the Gallery module | 9.8v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2022-48512 | Huawei HarmonyOS use-after-free (UAF) vulnerability in the Vdecoderservice service | 9.8v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2022-48511 | Huawei HarmonyOS use-after-free | 9.8v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2022-48510 | Huawei HarmonyOS input verification vulnerability in the AMS module | 9.8v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2022-48509 | Huawei HarmonyOS null pointer dereference | 5.9v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2022-48508 | Huawei HarmonyOS inappropriate authorization vulnerability in the system apps | 7.5v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2022-48507 | Huawei HarmonyOS vulnerability of identity verification being bypassed in the storage module | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2022-46080 | Nexxt Solutions Nebula1200-ac incorrect authorization | 9.8v3.1 | 2.6% | 2023-07-06 | Exploit code |
| CVE-2022-42175 | Soluslabs SolusVM WHMCS module insecure direct object reference | 8.8v3.1 | 0.6% | 2023-07-05 | |
| CVE-2022-32666 | MediaTek chipsets user interface (UI) misrepresentation of critical information in Wi-Fi | 7.5v3.1 | 1.0% | 2023-07-04 | Fix |
| CVE-2022-4623 | ND Shortcodes WordPress plugin Contributor+ stored XSS via shortcodes | 5.4NVD v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2022-46408 | Ericsson NetworkManager CSV injection | 6.8v3.1 | 0.9% | 2023-06-29 | |
| CVE-2022-46407 | Ericsson NetworkManager open redirect | 4.8v3.1 | 0.3% | 2023-06-29 | |
| CVE-2022-44720 | Ucopia Wireless Appliance OS command injection | 9.8v3.1 | 2.6% | 2023-06-29 | |
| CVE-2022-44719 | Ucopia Wireless Appliance incorrect permission assignment | 7.5v3.1 | 0.7% | 2023-06-29 | |
| CVE-2022-29147 | Microsoft Edge (Chromium-based) spoofing | 3.1CNA v3.1 | 0.6% | 2023-06-29 | Fix |
| CVE-2022-29146 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.0% | 2023-06-29 | Fix |
| CVE-2022-29144 | Microsoft Edge (Chromium-based) elevation of privilege | 7.5CNA v3.1 | 1.0% | 2023-06-29 | Fix |
| CVE-2022-26899 | Microsoft Edge (Chromium-based) elevation of privilege | 6.3CNA v3.1 | 0.7% | 2023-06-29 | Fix |
| CVE-2022-23264 | Microsoft Edge (Chromium-based) spoofing | 4.7CNA v3.1 | 0.7% | 2023-06-29 | Fix |
| CVE-2022-48505 | Apple macOS insecure direct object reference | 5.5v3.1 | 0.3% | 2023-06-28 | Fix |
| CVE-2022-44276 | Tecrail Responsive FileManager unrestricted file upload | 9.8v3.1 | 2.3% | 2023-06-28 | Exploit code |
| CVE-2022-20443 | Android Layer.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-06-28 | Fix |
| CVE-2022-4143 | GitLab time-of-check time-of-use race condition | 6.4CNA v3.1 | 0.8% | 2023-06-28 | Fix |
| CVE-2022-34352 | IBM QRadar information disclosure | 6.5CNA v3.1 | 0.6% | 2023-06-27 | Fix |
| CVE-2022-4115 | Editorial Calendar WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-06-27 | Fix |
| CVE-2022-48336 | Widevine Trusted Application integer overflow | 9.8v3.1 | 1.1% | 2023-06-26 | |
| CVE-2022-48335 | Widevine Trusted Application integer overflow | 9.8v3.1 | 1.1% | 2023-06-26 | |
| CVE-2022-48334 | Widevine Trusted Application integer overflow | 9.8v3.1 | 0.9% | 2023-06-26 | |
| CVE-2022-48333 | Widevine Trusted Application integer overflow | 9.8v3.1 | 0.9% | 2023-06-26 | |
| CVE-2022-48332 | Widevine Trusted Application integer overflow | 9.8v3.1 | 0.9% | 2023-06-26 | |
| CVE-2022-48331 | Widevine Trusted Application integer overflow | 9.8v3.1 | 0.9% | 2023-06-26 | |
| CVE-2022-40010 | Tenda AC6 cross-site scripting | 5.4v3.1 | 0.5% | 2023-06-26 | |
| CVE-2022-47614 | MStore API WordPress plugin SQL injection | 7.5v3.1 | 0.6% | 2023-06-23 | Fix |
| CVE-2022-46718 | Apple macOS origin validation error | 5.5v3.1 | 0.4% | 2023-06-23 | Exploit codeFix |
| CVE-2022-46715 | Apple iOS and iPadOS logic flaw | 5.5v3.1 | 0.3% | 2023-06-23 | Fix |
| CVE-2022-42860 | Apple macOS origin validation error | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2022-42834 | Apple macOS files accessible to external parties | 3.3v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2022-42807 | Apple macOS weak password recovery | 4.3v3.1 | 0.4% | 2023-06-23 | Fix |
| CVE-2022-42792 | Apple iOS and iPadOS observable discrepancy | 5.5v3.1 | 0.2% | 2023-06-23 | Fix |
| CVE-2022-22630 | Apple macOS use-after-free | 9.8v3.1 | 1.4% | 2023-06-23 | Fix |
| CVE-2022-47593 | RapidLoad Power-Up for Autoptimize WordPress plugin SQL injection | 6.5NVD v3.1 | 0.6% | 2023-06-22 | Fix |
| CVE-2022-45287 | Temenos Cwx Registration.aspx improper access control | 8.8v3.1 | 1.0% | 2023-06-21 | |
| CVE-2022-25883 | semver vulnerable to regular expression denial of service | 7.5v3.1 | 2.8% | 2023-06-21 | Fix |
| CVE-2022-3372 | Cross-site request forgery (CSRF) in Riello UPS Netman-204 | 8.8v3.1 | 0.4% | 2023-06-21 | |
| CVE-2022-48506 | Dominionvoting Democracy Suite weak random number generator | 2.4v3.1 | 0.4% | 2023-06-19 | |
| CVE-2022-48501 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48500 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48499 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48498 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48497 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48496 | Huawei HarmonyOS vulnerability of lax app identity verification in the pre-authorization function | 7.5v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2022-48495 | Huawei HarmonyOS vulnerability of unauthorized access to foreground app information | 5.3v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2022-48494 | Huawei HarmonyOS vulnerability of lax app identity verification in the pre-authorization function | 7.5v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2022-48493 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48492 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48491 | Vulnerability of missing authentication on certain Huawei phones | 5.3v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2022-48490 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48489 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48488 | Huawei HarmonyOS vulnerability of bypassing the default desktop security controls | 5.3v3.1 | 0.3% | 2023-06-19 | Fix |
| CVE-2022-48487 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-48486 | Huawei EMUI configuration defects in the secure OS module | 7.5v3.1 | 0.4% | 2023-06-19 | Fix |
| CVE-2022-47586 | Ultimate Addons for Contact Form 7 WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-06-19 | Fix |
| CVE-2022-46850 | Easy Media Replace WordPress plugin arbitrary file deletion | 8.1v3.1 | 0.6% | 2023-06-19 | Fix |
| CVE-2022-48473 | Huawei BiSheng-WNM interpretation conflict | 7.5v3.1 | 0.4% | 2023-06-16 | |
| CVE-2022-48472 | Huawei BiSheng-WNM OS command injection | 9.8v3.1 | 1.1% | 2023-06-16 | Fix |
| CVE-2022-48471 | Huawei BiSheng-WNM interpretation conflict | 7.5v3.1 | 0.4% | 2023-06-16 | Fix |
| CVE-2022-48469 | Huawei B535-232a authentication bypass by spoofing | 6.5v3.1 | 0.3% | 2023-06-16 | Fix |
| CVE-2022-48330 | Huawei FLMG-10 out-of-bounds write | 8.0v3.1 | 0.2% | 2023-06-16 | Fix |
| CVE-2022-33168 | IBM Security Directory Suite VA denial of service | 7.5CNA v3.1 | 0.8% | 2023-06-15 | Fix |
| CVE-2022-33166 | IBM Security Directory Suite VA file upload | 7.2CNA v3.1 | 0.8% | 2023-06-15 | Fix |
| CVE-2022-33163 | IBM Security Directory Suite VA information disclosure | 5.3CNA v3.1 | 0.5% | 2023-06-15 | Fix |
| CVE-2022-33159 | IBM Security Directory Suite VA information disclosure | 5.3CNA v3.1 | 0.3% | 2023-06-15 | Fix |
| CVE-2022-32757 | IBM Security Directory Suite VA information disclosure | 7.5CNA v3.1 | 0.9% | 2023-06-15 | Fix |
| CVE-2022-32752 | IBM Security Directory Suite VA command execution | 7.2CNA v3.1 | 1.4% | 2023-06-15 | Fix |
| CVE-2022-22307 | IBM Security Guardium privilege escalation | 4.4CNA v3.1 | 0.2% | 2023-06-15 | Fix |
| CVE-2022-4149 | Netskope Client local privilege escalation using log file | 7.0CNA v3.1 | 0.2% | 2023-06-15 | Fix |
| CVE-2022-47184 | Apache Traffic Server: The TRACE method can be use to disclose network information | 7.5v3.1 | 1.5% | 2023-06-14 | Fix |
| CVE-2022-31646 | HP PC BIOS incorrect authorization | 7.8v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2022-31645 | HP PC BIOS race condition | 7.8v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2022-31644 | HP PC BIOS incorrect authorization | 7.8v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2022-31642 | HP PC BIOS time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-06-14 | Fix |
| CVE-2022-31641 | HP PC BIOS time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2022-31640 | HP PC BIOS time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2023-06-14 | Fix |
| CVE-2022-47376 | Alaris Infusion Central recoverable password storage | 7.3v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2022-43953 | Fortinet FortiProxy A format string | 6.3CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2022-43949 | Fortinet FortiSIEM weak cryptographic algorithm | 5.9CNA v3.1 | 0.4% | 2023-06-13 | Fix |
| CVE-2022-43684 | ServiceNow Now Platform ACL bypass in Reporting functionality | 9.9CNA v3.1 | 1.8% | 2023-06-13 | Fix |
| CVE-2022-42880 | Auto Upload Images WordPress plugin cross-site request forgery (CSRF) | 6.1v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2022-42478 | Fortinet FortiSIEM missing brute-force protection | 8.1CNA v3.1 | 0.5% | 2023-06-13 | Fix |
| CVE-2022-42474 | Fortinet FortiSwitchManager relative path traversal | 6.2CNA v3.1 | 0.6% | 2023-06-13 | Fix |
| CVE-2022-41327 | Fortinet FortiOS cleartext transmission of sensitive information | 7.6CNA v3.1 | 0.1% | 2023-06-13 | Fix |
| CVE-2022-39946 | Fortinet FortiNAC improper access control | 7.2CNA v3.1 | 0.7% | 2023-06-13 | Fix |
| CVE-2022-33877 | Fortinet FortiConverter incorrect default permissions | 6.8CNA v3.1 | 0.2% | 2023-06-13 | Fix |
| CVE-2022-31639 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-13 | |
| CVE-2022-31638 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-13 | |
| CVE-2022-31637 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-13 | |
| CVE-2022-31636 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-13 | |
| CVE-2022-31635 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-13 | |
| CVE-2022-28550 | jhead buffer overflow | 9.8v3.1 | 1.1% | 2023-06-13 | Fix |
| CVE-2022-47140 | ARMember WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-06-12 | Fix |
| CVE-2022-45827 | Video Contest WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-06-12 | |
| CVE-2022-43778 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.2% | 2023-06-12 | |
| CVE-2022-43777 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-12 | |
| CVE-2022-38156 | Kratosdefense Spectralnet Narrowband remote command injection | 7.2v3.1 | 1.3% | 2023-06-12 | |
| CVE-2022-36331 | Impersonation attack causing an authentication bypass on Western Digital devices | 10.0CNA v3.1 | 0.6% | 2023-06-12 | Fix |
| CVE-2022-27541 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-12 | |
| CVE-2022-27539 | HP PC BIOS time-of-check time-of-use race condition | 7.8v3.1 | 0.1% | 2023-06-12 | |
| CVE-2022-31693 | VMware Tools improper resource release | 5.5v3.1 | 0.2% | 2023-06-07 | Fix |
| CVE-2022-25834 | Percona Xtrabackup command injection | 7.8v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2022-4950 | Cool Plugins (various Versions) arbitrary Plugin Installation and Activation | 8.8v3.1 | 1.4% | 2023-06-07 | Fix |
| CVE-2022-4949 | AdSanity WordPress plugin authenticated arbitrary file upload | 8.8v3.1 | 2.2% | 2023-06-07 | Fix |
| CVE-2022-4948 | FlyingPress WordPress plugin missing authorization | 4.3v3.1 | 0.5% | 2023-06-07 | Fix |
| CVE-2022-48448 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48447 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48446 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48445 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48444 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48443 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48442 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48441 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48440 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48439 | UNISOC chipsets cp_dump driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48438 | UNISOC chipsets cp_dump driver out-of-bounds write | 4.4NVD v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48392 | UNISOC chipsets dialer service missing authorization | 7.8v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48391 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-48390 | UNISOC chipsets telephony service missing authorization | 7.8v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-46165 | Cross-site scripting (XSS) in Web GUI in syncthing | 4.6CNA v3.1 | 0.8% | 2023-06-06 | Fix |
| CVE-2022-40538 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2022-40536 | Improper authentication in Modem | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2022-40533 | Qualcomm Snapdragon untrusted pointer dereference in Core | 6.2CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-40529 | Qualcomm Snapdragon improper access control in Kernel | 7.1CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-40525 | Qualcomm Snapdragon information exposure in Linux Networking firmware | 7.1CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-40523 | Qualcomm Snapdragon information exposure in Kernel | 7.1CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-40522 | Qualcomm Snapdragon double free in Linux Networking | 8.4CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-40521 | Improper authorization in Modem | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2022-40507 | Qualcomm Snapdragon double free in Core | 8.4CNA v3.1 | 1.3% | 2023-06-06 | Fix |
| CVE-2022-33307 | Qualcomm Snapdragon double free in Automotive | 8.4CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33303 | Qualcomm Snapdragon uncontrolled resource consumption in Linux kernel | 5.5CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33267 | Qualcomm Snapdragon improper restriction of operations within the bounds of memory buffer in Linux | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33264 | Stack-based buffer overflow in Modem | 7.9CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33263 | Qualcomm Snapdragon use-after-free in Core | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33251 | Reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2022-33240 | Qualcomm Snapdragon incorrect type conversion or cast in Audio | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33230 | Qualcomm Snapdragon buffer copy without checking the size of input in FM host | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33227 | Qualcomm Snapdragon double free in Linux-Android | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33226 | Qualcomm Snapdragon buffer copy without checking the size of input in Core | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-33224 | Qualcomm Snapdragon buffer copy without checking the size of input in Core | 6.7CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-22076 | Qualcomm Snapdragon Core cryptographic weakness | 7.1CNA v3.1 | 0.1% | 2023-06-06 | Fix |
| CVE-2022-22060 | Reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-06-06 | Fix |
| CVE-2022-48188 | Lenovo ThinkStation BIOS SecureBootDXE BIOS driver of some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-06-05 | Fix |
| CVE-2022-48181 | Lenovo ThinkStation BIOS BIOS of some ThinkPad models stack-based buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-06-05 | Fix |
| CVE-2022-4946 | Frontend Post WordPress plugin Contributor+ arbitrary redirect | 5.4NVD v3.1 | 0.4% | 2023-06-05 | |
| CVE-2022-4569 | Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool local privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-06-05 | Fix |
| CVE-2022-47617 | Hitron Technologies Inc. Coda-5310 hard-coded cryptographic key | 7.2CNA v3.1 | 0.5% | 2023-06-02 | Fix |
| CVE-2022-47616 | Hitron Technologies Inc. Coda-5310 remote command execution | 7.2v3.1 | 1.3% | 2023-06-02 | Fix |
| CVE-2022-46308 | SGUDA U-Lock broken access control | 8.8CNA v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2022-46307 | SGUDA U-Lock broken access control | 8.8CNA v3.1 | 0.7% | 2023-06-02 | Fix |
| CVE-2022-45938 | Xfinity Comcast Defined Technologies Microeisbss cross-site scripting | 9.0v3.1 | 45.1% | 2023-06-02 | |
| CVE-2022-24695 | Bluetooth Core Specification observable discrepancy | 4.3v3.1 | 0.4% | 2023-06-02 | |
| CVE-2022-43760 | Rancher UI has multiple cross-site scripting (XSS) issues | 8.4CNA v3.1 | 0.7% | 2023-06-01 | Fix |
| CVE-2022-35742 | Microsoft Outlook denial of service | 7.5CNA v3.1 | 22.3% | 2023-06-01 | Fix |
| CVE-2022-4333 | Sprecher: Sprecon maintenance access with hard-coded credentials | 9.8CNA v3.1 | 0.9% | 2023-06-01 | Fix |
| CVE-2022-4332 | Sprecher Automation SPRECON-E-C firmware verification vulnerability | 6.8CNA v3.1 | 0.3% | 2023-06-01 | Fix |
| CVE-2022-48502 | Linux kernel out-of-bounds read | 7.1v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2022-47526 | Foxit Fox Datadiode path traversal | 9.8v3.1 | 1.3% | 2023-05-31 | |
| CVE-2022-47525 | Foxit Fox Datadiode divide by zero | 7.5v3.1 | 0.8% | 2023-05-31 | |
| CVE-2022-35759 | Microsoft Windows Local Security Authority (LSA) denial of service | 6.5CNA v3.1 | 1.7% | 2023-05-31 | Fix |
| CVE-2022-35758 | Microsoft Windows Kernel Memory information disclosure | 5.5CNA v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2022-35757 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.3CNA v3.1 | 0.8% | 2023-05-31 | Fix |
| CVE-2022-35756 | Microsoft Windows Kerberos elevation of privilege | 7.8CNA v3.1 | 11.3% | 2023-05-31 | Fix |
| CVE-2022-35755 | Microsoft Windows Print Spooler elevation of privilege | 7.3CNA v3.1 | 9.8% | 2023-05-31 | Fix |
| CVE-2022-35754 | Microsoft Windows Unified Write Filter elevation of privilege | 6.7CNA v3.1 | 0.4% | 2023-05-31 | Fix |
| CVE-2022-35753 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.2% | 2023-05-31 | Fix |
| CVE-2022-35752 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.2% | 2023-05-31 | Fix |
| CVE-2022-35751 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 5.5% | 2023-05-31 | Fix |
| CVE-2022-35750 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 6.5% | 2023-05-31 | Fix |
| CVE-2022-35749 | Microsoft Windows Digital Media Receiver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2022-35748 | Microsoft Windows HTTP.sys denial of service | 7.5CNA v3.1 | 47.2% | 2023-05-31 | Fix |
| CVE-2022-35747 | Microsoft Windows Point-to-Point Protocol (PPP) denial of service | 5.9CNA v3.1 | 1.7% | 2023-05-31 | Fix |
| CVE-2022-35746 | Microsoft Windows Digital Media Receiver elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-05-31 | Fix |
| CVE-2022-35745 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.2% | 2023-05-31 | Fix |
| CVE-2022-35744 | Microsoft Windows Point-to-Point Protocol (PPP) remote code execution | 9.8CNA v3.1 | 2.0% | 2023-05-31 | Fix |
| CVE-2022-35743 | Microsoft Windows Support Diagnostic Tool (MSDT) remote code execution | 7.8CNA v3.1 | 1.5% | 2023-05-31 | Fix |
| CVE-2022-47029 | Action Launcher improper quantity validation | 7.8v3.1 | 0.4% | 2023-05-30 | |
| CVE-2022-47028 | Action Launcher command injection | 5.5v3.1 | 0.3% | 2023-05-30 | |
| CVE-2022-46361 | Physical access to the WDM enables use of USB device to gain access to the WDM | 6.9CNA v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2022-45853 | Zyxel GS1900-8HP firmware privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-05-30 | Fix |
| CVE-2022-43485 | Honeywell OneWireless insecure random number used for generating keys for signing Jwt tokens | 6.2CNA v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2022-39075 | ZTE Blade A52 some unauthorized access | 7.1v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2022-39074 | ZTE Blade A52 some unauthorized access | 3.3v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2022-39071 | ZTE Blade A52 some unauthorized access | 7.1v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2022-36250 | Cross-site request forgery on Shop Beat services | 8.8v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2022-36249 | Shop Beat services vulnerable to Bypass 2FA via APIs | 5.4v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2022-36247 | Shop Beat services vulnerable to IDOR | 9.1v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2022-36246 | Shop Beat services vulnerable to insecure permissions | 9.8v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2022-36244 | Multiple stored cross-site scripting vulnerabilities on Shop Beat services | 5.4v3.1 | 0.3% | 2023-05-30 | Fix |
| CVE-2022-36243 | Directory traversal on Shop Beat services | 5.3v3.1 | 0.7% | 2023-05-30 | Fix |
| CVE-2022-4676 | OSM OpenStreetMap WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-05-30 | Fix |
| CVE-2022-4240 | Unauthenticated API allowing an attacker to obtain the information about network resources | 6.5CNA v3.1 | 0.5% | 2023-05-30 | Fix |
| CVE-2022-45372 | Product Gallery Slider for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-29 | Fix |
| CVE-2022-41766 | mediawiki incorrect permission assignment | 4.3v3.1 | 0.6% | 2023-05-29 | Fix |
| CVE-2022-33974 | Custom Twitter Feeds (Tweets Widget) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-29 | Fix |
| CVE-2022-24632 | AudioCodes Device Manager Express path traversal | 5.3v3.1 | 27.2% | 2023-05-29 | Exploit code |
| CVE-2022-24631 | AudioCodes Device Manager Express cross-site scripting | 5.4v3.1 | 41.4% | 2023-05-29 | |
| CVE-2022-24630 | AudioCodes Device Manager Express command injection | 7.2v3.1 | 23.9% | 2023-05-29 | Exploit code |
| CVE-2022-24629 | AudioCodes Device Manager Express path traversal | 9.8v3.1 | 37.2% | 2023-05-29 | Exploit code |
| CVE-2022-24628 | AudioCodes Device Manager Express SQL injection | 7.2v3.1 | 1.2% | 2023-05-29 | |
| CVE-2022-24627 | AudioCodes Device Manager Express SQL injection | 9.8v3.1 | 26.4% | 2023-05-29 | NucleiExploit code |
| CVE-2022-36345 | Download WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-28 | Fix |
| CVE-2022-48480 | Huawei EMUI integer overflow vulnerability in some phones | 7.5v3.1 | 0.4% | 2023-05-26 | Fix |
| CVE-2022-48479 | Huawei HarmonyOS out-of-bounds read | 9.8v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2022-48478 | Huawei HarmonyOS facial recognition TA vulnerability | 9.8v3.1 | 0.5% | 2023-05-26 | Fix |
| CVE-2022-46945 | Nagvis path traversal | 6.5NVD v3.1 | 4.1% | 2023-05-26 | Exploit codeFix |
| CVE-2022-39374 | Matrix.org Synapse state resolution denial of service | 6.5CNA v3.0 | 0.9% | 2023-05-26 | Fix |
| CVE-2022-39335 | Synapse does not apply enough checks to servers requesting auth events of events in a room | 5.0CNA v3.1 | 0.6% | 2023-05-26 | Fix |
| CVE-2022-47178 | Simple Share Buttons Adder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47177 | WP EasyPay WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47174 | Performance Lab WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47165 | CoSchedule WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2022-47164 | Event Manager for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47161 | Health Check and Troubleshooting WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47159 | Logaster Logo Generator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | |
| CVE-2022-47149 | Shortlinks by Pretty Links WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47144 | Mediamatic Media Library Folders WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-25 | |
| CVE-2022-47139 | WP Basic Elements WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47138 | LOGIN AND REGISTRATION ATTEMPTS LIMIT WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | |
| CVE-2022-47136 | Ninja Tables WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47135 | Chronoforms WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | |
| CVE-2022-46907 | Apache JSPWiki: XSS injection points in several plugins | 6.1v3.1 | 1.2% | 2023-05-25 | Exploit codeFix |
| CVE-2022-46866 | Import External Images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | |
| CVE-2022-46865 | Bulk Resize Media WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | |
| CVE-2022-46856 | Woocommerce Product Designer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | |
| CVE-2022-46820 | Joli Table Of Contents WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-46814 | Kodex Posts likes WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-46812 | Thank You Page Customizer for WooCommerce WordPress plugin VillaTheme cross-site request forgery | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-46810 | Thank You Page Customizer for WooCommerce for WordPress VillaTheme cross-site request forgery | 8.8v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2022-46800 | LiteSpeed Cache WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-45815 | GDPR Compliance and Cookie Consent WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-45371 | ShopEngine WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2022-45367 | Custom Order Numbers for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-45366 | Slimstat Analytics WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-25 | Fix |
| CVE-2022-43490 | Stream WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-41987 | BadgeOS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-25 | |
| CVE-2022-41635 | Advanced Shipment Tracking for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-38716 | Motors Car Dealer and Classified Ads WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-25 | Fix |
| CVE-2022-38356 | Pearl WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-25 | Fix |
| CVE-2022-47448 | xili-tidy-tags WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-24 | Fix |
| CVE-2022-47447 | WP-Advanced-Search WordPress plugin cross-site request forgery (CSRF) | 8.8NVD v3.1 | 0.3% | 2023-05-24 | Fix |
| CVE-2022-47446 | Store Locator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-24 | Fix |
| CVE-2022-47180 | Kopa Framework WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-24 | |
| CVE-2022-47152 | clickfunnels WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-24 | |
| CVE-2022-46816 | Booking Ultra Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-24 | Fix |
| CVE-2022-46794 | WooCommerce Weight Based Shipping WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-24 | Fix |
| CVE-2022-45364 | Drag and Drop Multiple File Upload Contact Form 7 WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-24 | Fix |
| CVE-2022-42225 | fit2cloud Lina cross-site scripting | 5.4v3.1 | 0.7% | 2023-05-24 | |
| CVE-2022-41221 | OpenText Archive Center Administration XML external entity injection | 7.1v3.1 | 0.3% | 2023-05-24 | |
| CVE-2022-30025 | Credenceanalytics Ideal - Wealth And Funds "/Framewrk/Home.jsp" file SQL injection | 6.5v3.1 | 0.8% | 2023-05-24 | |
| CVE-2022-4815 | Hitachi Vantara Pentaho Business Analytics Server deserialization of untrusted data | 8.8v3.1 | 0.6% | 2023-05-24 | Fix |
| CVE-2022-0357 | Improper Quoting Path issue in Bitdefender Total Security | 6.7CNA v3.1 | 0.2% | 2023-05-24 | Fix |
| CVE-2022-46853 | The Post Grid WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2022-46851 | Starter Templates WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2022-46813 | Advanced Database Cleaner WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-23 | Fix |
| CVE-2022-47611 | Hover Image WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | |
| CVE-2022-47609 | DNUI WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-05-22 | |
| CVE-2022-47320 | Dataprobe iBoot-PDU firmware device discovery protocol vulnerability | 8.1v3.1 | 0.5% | 2023-05-22 | |
| CVE-2022-47311 | Dataprobe iBoot-PDU firmware control protocol authentication vulnerability | 8.8v3.1 | 0.5% | 2023-05-22 | |
| CVE-2022-47183 | Extra Block Design, Style, CSS for ANY Gutenberg Blocks WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-47167 | Crayon Syntax Highlighter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | |
| CVE-2022-47142 | Mediamatic Media Library Folders WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-46738 | Dataprobe iBoot-PDU firmware SNMP service information disclosure | 9.8v3.1 | 0.6% | 2023-05-22 | |
| CVE-2022-46680 | Schneider Electric PowerLogic ION9000 cleartext transmission of sensitive information | 8.8CNA v3.1 | 0.4% | 2023-05-22 | Fix |
| CVE-2022-46658 | Dataprobe iBoot-PDU firmware buffer overflow | 9.8v3.1 | 1.2% | 2023-05-22 | |
| CVE-2022-45376 | Side Cart Woocommerce (Ajax) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-45079 | Loginizer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-45076 | Flexible Elementor Panel WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-44739 | Quick Restaurant Reservations WordPress plugin cross-site request forgery (CSRF) | 9.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-41608 | Asgaros Forum WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-22 | Fix |
| CVE-2022-4945 | The Dataprobe cloud usernames and passwords are stored in plain text in a specific file. Any user able to read this specific file from the device could compromise other devices connected to the user's cloud. | 6.5v3.1 | 0.2% | 2023-05-22 | |
| CVE-2022-0010 | QCS 800xA vulnerability identified in system log files | 7.8CNA v3.1 | 0.2% | 2023-05-22 | Fix |
| CVE-2022-47134 | Gallery Metabox WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-20 | |
| CVE-2022-47984 | IBM InfoSphere Information Server SQL injection | 6.3CNA v3.1 | 0.7% | 2023-05-19 | Fix |
| CVE-2022-30114 | Fastweb Fastgate Gpon FGA2130FWB network service heap-based buffer overflow | 7.5v3.1 | 2.4% | 2023-05-19 | Exploit code |
| CVE-2022-47157 | WP Custom Fields Search WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-18 | Fix |
| CVE-2022-45459 | Acronis Agent information disclosure | 3.8CNA v3.0 | 0.3% | 2023-05-18 | Fix |
| CVE-2022-45458 | Acronis Agent improper certificate validation | 4.2CNA v3.0 | 0.4% | 2023-05-18 | Fix |
| CVE-2022-45457 | Acronis Agent improper certificate validation | 4.2CNA v3.0 | 0.4% | 2023-05-18 | Fix |
| CVE-2022-45453 | Acronis Cyber Protect 15 weak cryptography | 5.3CNA v3.0 | 0.3% | 2023-05-18 | Fix |
| CVE-2022-45452 | Acronis Agent improper privilege management | 7.3CNA v3.0 | 0.2% | 2023-05-18 | Fix |
| CVE-2022-45450 | Acronis Agent improper authorization | 5.4CNA v3.0 | 0.4% | 2023-05-18 | Fix |
| CVE-2022-36328 | Path traversal vulnerability leading to an arbitrary file read in Western Digital devices | 5.8CNA v3.1 | 0.8% | 2023-05-18 | Fix |
| CVE-2022-36327 | Path traversal vulnerability leading to an arbitrary file write in Western Digital devices | 5.8CNA v3.1 | 1.5% | 2023-05-18 | Fix |
| CVE-2022-36326 | Resource exhaustion vulnerability in Western Digital devices | 4.4CNA v3.1 | 0.6% | 2023-05-18 | Fix |
| CVE-2022-35798 | Microsoft Azure Arc Jumpstart information disclosure | 3.3CNA v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2022-4870 | Octopus Deploy Octopus Server information disclosure through error messages | 5.3v3.1 | 0.5% | 2023-05-18 | Fix |
| CVE-2022-4418 | Acronis Cyber Protect Home Office improper signature verification | 7.8CNA v3.0 | 0.1% | 2023-05-18 | Fix |
| CVE-2022-45144 | Algoo Tracim cross-site scripting | 6.1v3.1 | 0.7% | 2023-05-17 | |
| CVE-2022-42336 | Xen SSBD thread counter vulnerability | 3.3v3.1 | 0.3% | 2023-05-17 | Fix |
| CVE-2022-47937 | Multiple parsing problems in the Apache Sling Commons JSON module | 9.8v3.1 | 2.2% | 2023-05-15 | Fix |
| CVE-2022-47393 | CODESYS: Multiple products prone to improperly restricted memory operations | 6.5CNA v3.1 | 1.0% | 2023-05-15 | Fix |
| CVE-2022-47392 | CODESYS: Multiple products prone to improper input validation | 6.5CNA v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2022-47391 | CODESYS: Multiple products prone to improper input validation | 7.5CNA v3.1 | 1.9% | 2023-05-15 | Fix |
| CVE-2022-47390 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47389 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47388 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47387 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47386 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.4% | 2023-05-15 | Fix |
| CVE-2022-47385 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.4% | 2023-05-15 | Fix |
| CVE-2022-47384 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47383 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47382 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47381 | CODESYS: Multiple products prone to stack based out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47380 | CODESYS: Multiple products prone to out-of-bounds write | 8.8CNA v3.1 | 1.3% | 2023-05-15 | Fix |
| CVE-2022-47379 | CODESYS: Multiple products prone to out-of-bounds write | 8.8CNA v3.1 | 2.0% | 2023-05-15 | Fix |
| CVE-2022-47378 | CODESYS: Multiple products prone to improper input validation | 6.5v3.1 | 0.9% | 2023-05-15 | Fix |
| CVE-2022-22508 | CODESYS V3: Improper input validation | 4.3CNA v3.1 | 0.7% | 2023-05-15 | Fix |
| CVE-2022-4774 | Bit Form WordPress plugin RCE via unauthenticated arbitrary file upload | 9.8NVD v3.1 | 1.8% | 2023-05-15 | Fix |
| CVE-2022-4048 | CODESYS V3 prone to Inadequate Encryption Stregth | 7.7v3.1 | 0.1% | 2023-05-15 | Fix |
| CVE-2022-48020 | Vinteo Video Core cross-site scripting | 6.1v3.1 | 0.6% | 2023-05-12 | |
| CVE-2022-47880 | Jedox /be/rpc.php information disclosure | 5.3v3.1 | 2.9% | 2023-05-12 | Exploit code |
| CVE-2022-47879 | Jedox /be/rpc.php remote code execution | 7.5v3.1 | 6.2% | 2023-05-12 | Exploit code |
| CVE-2022-47129 | PHPOK code injection | 9.8v3.1 | 1.2% | 2023-05-11 | |
| CVE-2022-47606 | WP-CORS WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-47600 | Mass Email To users WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-47590 | Maintenance Switch WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-47587 | WP Search Analytics WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-47441 | Charitable WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-47436 | Yatra WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-47423 | WP-dTree WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | |
| CVE-2022-47137 | Ninja Tables WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-46861 | Login Page Styler WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-46819 | Continuous announcement scroller WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | |
| CVE-2022-46817 | Flyzoo Chat WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | |
| CVE-2022-46656 | Intel(R) NUC Pro Software Suite insecure inherited permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-46645 | Intel(R) Smart Campus Android application resource exhaustion | 5.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-46378 | Weston Embedded uC-FTPs out-of-bounds read | 7.5v3.1 | 1.4% | 2023-05-10 | |
| CVE-2022-46377 | Weston Embedded uC-FTPs out-of-bounds read | 7.5v3.1 | 1.5% | 2023-05-10 | |
| CVE-2022-46279 | Intel(R) Retail Edge android application improper access control | 5.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-45846 | Image Map Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-05-10 | Fix |
| CVE-2022-45128 | Intel(R) EMA software improper authorization | 5.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-44619 | Intel(R) DCM software insecure storage of sensitive information | 8.2CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-44610 | Intel(R) DCM software improper authentication | 5.4CNA v3.1 | 0.6% | 2023-05-10 | Fix |
| CVE-2022-43507 | Intel(R) QAT Engine for OpenSSL privilege escalation | 7.5CNA v3.1 | 0.6% | 2023-05-10 | Fix |
| CVE-2022-43475 | Intel(R) DCM software insecure storage of sensitive information | 6.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-43474 | DSP Builder software installer for Intel(R) FPGAs Pro Edition uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-43465 | Intel(R) SCS software improper authorization | 5.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-42878 | Intel(R) Trace Analyzer and Collector software null pointer dereference | 2.8CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-42465 | Intel(R) OFU software kernel mode driver for the improper access control | 7.2CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41998 | Intel(R) DCM software uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41985 | Weston Embedded uC-FTPs Authentication functionality authentication bypass | 7.5v3.1 | 1.5% | 2023-05-10 | |
| CVE-2022-41982 | Intel(R) VTune(TM) Profiler software uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41979 | Intel(R) DCM software protection mechanism failure | 5.4CNA v3.1 | 0.6% | 2023-05-10 | Fix |
| CVE-2022-41808 | Intel QAT Driver denial of service | 3.3CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41801 | Intel(R) Connect M Android application resource exhaustion | 5.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41784 | Intel(R) OFU software kernel mode driver for the improper access control | 8.8CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41771 | Intel(R) QAT drivers some incorrect permission assignment | 6.5CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41769 | Intel(R) Connect M Android application improper access control | 4.8CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41699 | Intel(R) QAT drivers some incorrect permission assignment | 8.2CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41693 | Intel(R) Quartus(R) Prime Pro edition software uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41690 | Intel(R) Retail Edge Mobile iOS application improper access control | 7.1CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41687 | Intel(R) NUC P14E Laptop Element software HotKey services for some insecure inherited permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-41658 | Intel(R) VTune(TM) Profiler software insecure inherited permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-41646 | Intel(R) IPP Cryptography software insufficient control flow management | 4.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41628 | Intel(R) NUC P14E Laptop Element software HotKey services for some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41621 | Intel(R) QAT drivers some improper access control | 3.3CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-41610 | Intel(R) EMA Configuration Tool improper authorization | 5.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-40974 | Intel(R) IPP Cryptography software incomplete cleanup | 1.8CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-40972 | Intel(R) QAT drivers some improper access control | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-40971 | Intel(R) HDMI Firmware Update Tool for NUC incorrect default permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-40685 | Intel(R) DCM software insufficiently protected credentials | 6.5CNA v3.1 | 0.5% | 2023-05-10 | Fix |
| CVE-2022-40210 | Intel DCM software session data exposure | 6.8CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-40207 | Intel(R) SUR software improper access control | 8.2CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-38787 | Intel(R) FPGA products firmware for some improper input validation | 5.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-38103 | Intel(R) NUC Software Studio Service installer insecure inherited permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-38101 | Intel(R) NUC Chaco Canyon BIOS update software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-38087 | Intel(R) Processors BIOS firmware for some resource exposure | 4.1CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-37409 | Intel(R) IPP Cryptography software insufficient control flow management | 4.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-37327 | Intel(R) NUC BIOS firmware improper input validation | 6.1CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-36937 | Facebook HHVM weak cryptographic algorithm | 9.8v3.1 | 0.5% | 2023-05-10 | Fix |
| CVE-2022-36391 | Intel(R) NUC Pro Software Suite incorrect default permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-36339 | Intel(R) NUC 8 Compute Element firmware improper input validation | 7.5CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-36330 | Buffer overflow vulnerability in Western Digital My Cloud Home and ibi devices | 1.9CNA v3.1 | 0.6% | 2023-05-10 | Fix |
| CVE-2022-36329 | Denial of service over OTA mechanism in Western Digital My Cloud Home and ibi devices | 4.4CNA v3.1 | 0.3% | 2023-05-10 | Fix |
| CVE-2022-34855 | Intel(R) NUC Pro Software Suite path traversal | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-34848 | Intel(R) NUC Pro Software Suite uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-34147 | Intel(R) NUC 9 Extreme Laptop Kits BIOS firmware for some improper input validation | 7.5CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-33963 | software installer for Intel(R) Unite(R) Client software incorrect default permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-33961 | YellowPencil Visual CSS Style Editor WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-33894 | Intel(R) Processors BIOS firmware for some improper input validation | 7.5CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-32970 | Themify Portfolio Post WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-32766 | Intel(R) BIOS firmware improper input validation | 7.2CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-32582 | Intel(R) NUC Boards firmware for some improper access control | 5.3CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-32578 | Intel(R) NUC Pro Software Suite improper access control | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-32577 | Intel(R) NUC Kits BIOS firmware for some improper input validation | 3.4CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-32576 | Intel(R) Unite(R) Plugin SDK uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-31477 | Intel(R) NUC BIOS firmware improper initialization | 4.0CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-30338 | Intel(R) VROC software incorrect default permissions | 6.7CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-29919 | Intel(R) VROC software use-after-free | 7.8CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-29842 | Command injection vulnerability in Western Digital My Cloud devices | 9.8CNA v3.1 | 1.8% | 2023-05-10 | Fix |
| CVE-2022-29841 | OS command injection vulnerability in Western Digital My Cloud devices | 8.0CNA v3.1 | 1.4% | 2023-05-10 | Fix |
| CVE-2022-29840 | Server side request forgery vulnerability in Western Digital My Cloud Devices | 5.1CNA v3.1 | 0.1% | 2023-05-10 | Fix |
| CVE-2022-29508 | Intel(R) VROC software null pointer dereference | 6.3CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-28699 | Intel(R) NUC BIOS firmware improper input validation | 7.5CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-27856 | Export All URLs WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-10 | Fix |
| CVE-2022-27180 | Intel(R) MacCPUID software uncontrolled search path | 4.2CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-25976 | Intel(R) VROC software improper input validation | 5.5CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-21804 | Intel QAT Driver software for the out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-21239 | Intel QAT Driver software for the out-of-bounds read | 5.6CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-21162 | Intel(R) HDMI Firmware Update Tool for NUC uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-4008 | Octopus Deploy Octopus Tentacle denial of service | 5.5v3.1 | 0.2% | 2023-05-10 | Fix |
| CVE-2022-48389 | UNISOC chipsets modem control device out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48388 | UNISOC chipsets powerEx service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48387 | UNISOC chipsets out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48386 | UNISOC chipsets use-after-free | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48385 | UNISOC chipsets cp_dump driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48384 | UNISOC chipsets srtd service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48383 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48382 | UNISOC chipsets log service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48381 | UNISOC chipsets modem control device out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48380 | UNISOC chipsets modem control device out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48379 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48378 | UNISOC chipsets engineermode service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48377 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48376 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48375 | UNISOC chipsets contacts service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48374 | UNISOC chipsets tee service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48373 | UNISOC chipsets tee service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48372 | UNISOC chipsets bootcp service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48371 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48370 | UNISOC chipsets dialer service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48369 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48368 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48250 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48249 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48248 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48247 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48246 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48245 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48244 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48243 | UNISOC chipsets audio service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48242 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48241 | UNISOC chipsets telephony service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48240 | UNISOC chipsets camera driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48239 | UNISOC chipsets camera driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48238 | UNISOC chipsets Image filter out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48237 | UNISOC chipsets Image filter out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48236 | UNISOC chipsets MP3 encoder out-of-bounds read | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48235 | UNISOC chipsets MP3 encoder out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48234 | UNISOC chipsets FM service denial of service | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48233 | UNISOC chipsets FM service denial of service | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48232 | UNISOC chipsets FM service denial of service | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-48231 | UNISOC chipsets soter service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47499 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47498 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47497 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47496 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47495 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47494 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47493 | UNISOC chipsets soter service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47492 | UNISOC chipsets soter service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47491 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47490 | UNISOC chipsets soter service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47489 | UNISOC chipsets soter service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47488 | UNISOC chipsets spipe drive out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47487 | UNISOC chipsets thermal service out-of-bounds write | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47486 | UNISOC chipsets ext4fsfilter driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47485 | UNISOC chipsets modem control device out-of-bounds write | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47470 | UNISOC chipsets ext4fsfilter driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47469 | UNISOC chipsets ext4fsfilter driver out-of-bounds read | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47340 | UNISOC chipsets h265 codec firmware out-of-bounds write | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-47334 | UNISOC chipsets phasecheck server out-of-bounds read | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-46864 | Woocommerce Custom Checkout Fields Editor With Drag and Drop WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-05-09 | |
| CVE-2022-46858 | Product Specifications for Woocommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-09 | Fix |
| CVE-2022-46844 | PixFields WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-09 | |
| CVE-2022-46822 | WooCommerce JazzCash Gateway WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-09 | |
| CVE-2022-44433 | UNISOC chipsets phoneEx service missing authorization | 7.8v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-44420 | UNISOC chipsets insufficient verification of data authenticity | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-44419 | UNISOC chipsets denial of service | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-41640 | Wholesale Suite WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-09 | Fix |
| CVE-2022-39089 | UNISOC chipsets mlog service out-of-bounds read | 4.4v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-38685 | UNISOC chipsets bluetooth service missing authorization | 5.5v3.1 | 0.1% | 2023-05-09 | Fix |
| CVE-2022-23818 | AMD 3rd Gen AMD EPYC™ improper input validation | 7.5v3.1 | 0.5% | 2023-05-09 | Fix |
| CVE-2022-4537 | Hide My WP Ghost Security WordPress plugin IP Address spoofing to Protection Mechanism bypass | 6.5v3.1 | 0.3% | 2023-05-09 | Fix |
| CVE-2022-47439 | Open Graphite WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-08 | Fix |
| CVE-2022-47437 | WSB Brands WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-08 | Fix |
| CVE-2022-46799 | Easy Testimonial Slider and Form WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-08 | Fix |
| CVE-2022-46720 | Apple macOS integer overflow | 8.6v3.1 | 0.2% | 2023-05-08 | Fix |
| CVE-2022-45812 | Exxp WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-08 | |
| CVE-2022-45065 | SEO Plugin by Squirrly SEO WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-05-08 | Fix |
| CVE-2022-32885 | Apple macOS out-of-bounds write | 8.8v3.1 | 0.8% | 2023-05-08 | Fix |
| CVE-2022-4118 | Bitcoin / AltCoin Payment Gateway WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 0.9% | 2023-05-08 | Fix |
| CVE-2022-43877 | IBM UrbanCode Deploy (UCD) information disclosure | 5.1CNA v3.1 | 0.2% | 2023-05-06 | Fix |
| CVE-2022-22313 | IBM QRadar Data Synchronization App information disclosure | 4.4CNA v3.1 | 0.4% | 2023-05-06 | Fix |
| CVE-2022-45048 | Apache Ranger: Code execution vulnerability in policy expressions | 8.4CNA v3.1 | 1.1% | 2023-05-05 | Fix |
| CVE-2022-43919 | IBM MQ denial of service | 5.3CNA v3.1 | 0.7% | 2023-05-05 | Fix |
| CVE-2022-43866 | IBM Maximo Asset Management cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-05-05 | Fix |
| CVE-2022-38707 | IBM Cognos Command Center information disclosure | 4.0CNA v3.1 | 0.2% | 2023-05-05 | Fix |
| CVE-2022-47757 | imo deeplink handler path traversal | 9.8v3.1 | 1.0% | 2023-05-04 | |
| CVE-2022-47449 | Cart Lift Abandoned Cart Recovery for WooCommerce and EDD WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-05-04 | Fix |
| CVE-2022-47434 | PB SEO Friendly Images WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-04 | |
| CVE-2022-45818 | Hero Banner Ultimate WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-05-04 | Fix |
| CVE-2022-4259 | Authenticated SQL injection on Alerts in Guardian/CMC | 8.7CNA v4.0 | 0.6% | 2023-05-04 | Fix |
| CVE-2022-46852 | WP Table Builder WordPress Table plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-05-03 | Fix |
| CVE-2022-45860 | Fortinet FortiNAC weak authentication | 5.0CNA v3.1 | 0.5% | 2023-05-03 | Fix |
| CVE-2022-45859 | Fortinet FortiNAC insufficiently protected credentials | 3.9CNA v3.1 | 0.1% | 2023-05-03 | Fix |
| CVE-2022-45858 | Fortinet FortiNAC weak cryptographic algorithm | 3.8CNA v3.1 | 0.2% | 2023-05-03 | Fix |
| CVE-2022-43950 | Fortinet FortiNAC open redirect | 3.9CNA v3.1 | 0.4% | 2023-05-03 | Fix |
| CVE-2022-43681 | FRRouting BGP daemon out-of-bounds read | 6.5v3.1 | 2.1% | 2023-05-03 | Fix |
| CVE-2022-40318 | FRRouting out-of-bounds read | 6.5v3.1 | 2.0% | 2023-05-03 | Fix |
| CVE-2022-40302 | FRRouting out-of-bounds read | 6.5v3.1 | 2.0% | 2023-05-03 | Fix |
| CVE-2022-39161 | IBM WebSphere Application Server information disclosure | 4.8CNA v3.1 | 0.4% | 2023-05-03 | Fix |
| CVE-2022-30995 | Acronis Cyber Protect 15 improper authentication | 9.3CNA v3.0 | 3.3% | 2023-05-03 | MetasploitKCVFix |
| CVE-2022-4376 | An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Under certain conditions, an attacker may be able to map a private email of a GitLab user to their GitLab account on an insta | 3.1CNA v3.1 | 0.8% | 2023-05-03 | Fix |
| CVE-2022-3405 | Acronis Cyber Protect 15 improper privilege management | 9.3CNA v3.0 | 5.3% | 2023-05-03 | MetasploitExploit codeKCVFix |
| CVE-2022-48483 | 3CX Electron download directory path traversal | 7.5v3.1 | 1.7% | 2023-05-02 | Fix |
| CVE-2022-48482 | 3CX Electron download directory path traversal | 7.5v3.1 | 1.8% | 2023-05-02 | Fix |
| CVE-2022-47878 | Jedox unrestricted file upload | 8.8NVD v3.1 | 35.7% | 2023-05-02 | Exploit code |
| CVE-2022-47877 | Jedox A stored cross-site scripting | 5.4NVD v3.1 | 2.6% | 2023-05-02 | Exploit code |
| CVE-2022-47876 | Jedox arbitrary code execution | 8.8NVD v3.1 | 7.0% | 2023-05-02 | Exploit code |
| CVE-2022-47875 | Jedox /be/erpc.php path traversal | 8.8v3.1 | 10.2% | 2023-05-02 | Exploit code |
| CVE-2022-47874 | Jedox /tc/rpc improper access control | 6.5v3.1 | 21.1% | 2023-05-02 | Exploit code |
| CVE-2022-40508 | Reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-05-02 | Fix |
| CVE-2022-40505 | Buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-05-02 | Fix |
| CVE-2022-40504 | Reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-05-02 | Fix |
| CVE-2022-34144 | Reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-05-02 | Fix |
| CVE-2022-33305 | Null pointer dereference in Modem | 7.5CNA v3.1 | 0.4% | 2023-05-02 | Fix |
| CVE-2022-33304 | Null pointers dereference in Modem | 7.5CNA v3.1 | 0.4% | 2023-05-02 | Fix |
| CVE-2022-33292 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.1% | 2023-05-02 | Fix |
| CVE-2022-33281 | Qualcomm Snapdragon improper validation of array index in computer vision | 6.7CNA v3.1 | 0.1% | 2023-05-02 | Fix |
| CVE-2022-33273 | Qualcomm Snapdragon buffer over-read in Trusted Execution Environment | 7.3CNA v3.1 | 0.1% | 2023-05-02 | Fix |
| CVE-2022-30759 | Nokia One-nds incorrect default permissions | 8.8v3.1 | 1.1% | 2023-05-02 | |
| CVE-2022-25713 | Qualcomm Snapdragon memory corruption | 7.8CNA v3.1 | 0.1% | 2023-05-02 | Fix |
| CVE-2022-48186 | Lenovo Baiying improper certificate validation | 6.2CNA v3.1 | 0.3% | 2023-05-01 | Fix |
| CVE-2022-46365 | Apache StreamPark (incubating): Logic error causing any account reset | 9.1v3.1 | 1.5% | 2023-05-01 | Fix |
| CVE-2022-45802 | Apache StreamPark (incubating): Upload any file to any directory | 9.8v3.1 | 1.3% | 2023-05-01 | Fix |
| CVE-2022-45801 | Apache StreamPark (incubating): LDAP injection | 5.4v3.1 | 1.1% | 2023-05-01 | Fix |
| CVE-2022-35898 | OpenText Bizmanager improper authentication | 9.8v3.1 | 0.6% | 2023-05-01 | |
| CVE-2022-4568 | Lenovo System Update incorrect default permissions | 7.0CNA v3.1 | 0.2% | 2023-05-01 | Fix |
| CVE-2022-43871 | IBM Financial Transaction Manager for SWIFT Services cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-04-29 | Fix |
| CVE-2022-41736 | IBM Spectrum Scale Container Native Storage Access privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-04-29 | Fix |
| CVE-2022-48481 | JetBrains Toolbox App injection | 5.2CNA v3.1 | 0.2% | 2023-04-28 | Fix |
| CVE-2022-41400 | Sage 300 hard-coded credentials | 9.8v3.1 | 0.6% | 2023-04-28 | |
| CVE-2022-41399 | Sage 300 hard-coded credentials | 7.5v3.1 | 0.6% | 2023-04-28 | |
| CVE-2022-41398 | Sage 300 hard-coded credentials | 7.5v3.1 | 0.5% | 2023-04-28 | |
| CVE-2022-41397 | Sage 300 hard-coded credentials | 9.8v3.1 | 0.7% | 2023-04-28 | |
| CVE-2022-38583 | Sage 300 incorrect default permissions | 7.8v3.1 | 0.3% | 2023-04-28 | |
| CVE-2022-31643 | A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. | 5.5v3.1 | 0.2% | 2023-04-28 | Fix |
| CVE-2022-47758 | Nanoleaf Firmware improper certificate validation | 9.8v3.1 | 1.1% | 2023-04-27 | |
| CVE-2022-38730 | Docker Desktop time-of-check time-of-use race condition | 6.3v3.1 | 0.3% | 2023-04-27 | Fix |
| CVE-2022-37326 | Docker Desktop incorrect authorization | 7.8v3.1 | 0.3% | 2023-04-27 | Fix |
| CVE-2022-34292 | Docker Desktop link following | 7.1v3.1 | 0.3% | 2023-04-27 | Fix |
| CVE-2022-31647 | Docker Desktop link following | 7.1v3.1 | 0.3% | 2023-04-27 | Fix |
| CVE-2022-25091 | Infopop Ultimate Bulletin Board incorrect authorization | 5.3v3.1 | 0.6% | 2023-04-27 | Fix |
| CVE-2022-45876 | VISAM VBASE Automation Base XML external entity injection | 5.5v3.1 | 3.3% | 2023-04-26 | Fix |
| CVE-2022-45456 | Acronis Agent improper authentication | 3.3CNA v3.0 | 0.3% | 2023-04-26 | Fix |
| CVE-2022-44232 | Libming buffer overflow | 7.5v3.1 | 0.7% | 2023-04-26 | |
| CVE-2022-41739 | IBM Spectrum Scale privilege escalation | 7.9CNA v3.1 | 0.2% | 2023-04-26 | Fix |
| CVE-2022-39989 | Fighting Cock Information System hard-coded credentials | 9.8v3.1 | 0.8% | 2023-04-26 | |
| CVE-2022-36769 | IBM Cloud Pak for Data file upload | 7.2CNA v3.1 | 0.9% | 2023-04-26 | Fix |
| CVE-2022-27979 | ToolJet A cross-site scripting | 5.4v3.1 | 0.5% | 2023-04-26 | |
| CVE-2022-27978 | ToolJet improper exception handling | 7.5v3.1 | 1.0% | 2023-04-26 | |
| CVE-2022-25278 | Drupal Core form API improper access control | 6.5v3.1 | 0.6% | 2023-04-26 | Fix |
| CVE-2022-25277 | Drupal Core arbitrary PHP code execution | 7.2v3.1 | 1.4% | 2023-04-26 | Fix |
| CVE-2022-25276 | Lack of domain validation in Druple Core | 6.1v3.1 | 0.5% | 2023-04-26 | Fix |
| CVE-2022-25275 | Drupal Core information disclosure | 7.5v3.1 | 0.7% | 2023-04-26 | Fix |
| CVE-2022-25274 | Drupal Core incorrect authorization | 5.4v3.1 | 0.4% | 2023-04-26 | Fix |
| CVE-2022-25273 | Improper input validation in Drupal Core | 7.5v3.1 | 0.6% | 2023-04-26 | Fix |
| CVE-2022-47608 | Quick Contact Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-25 | Fix |
| CVE-2022-45837 | WPJAM Wechat Robot plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-04-25 | |
| CVE-2022-45291 | pwsdashboard Personal Weather Station Dashboard hard-coded credentials | 7.2v3.1 | 1.3% | 2023-04-25 | |
| CVE-2022-42335 | Xen null pointer dereference | 7.8v3.1 | 0.3% | 2023-04-25 | Fix |
| CVE-2022-40725 | PingID Desktop PIN attempt lockout bypass | 7.3CNA v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2022-40724 | Cross-site request forgery on PingFederate Local Identity Profiles endpoint | 6.4CNA v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2022-40723 | Configuration-based MFA Bypass in PingID RADIUS Pcv | 6.5CNA v3.1 | 0.5% | 2023-04-25 | Fix |
| CVE-2022-40722 | Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate | 7.7CNA v3.1 | 0.3% | 2023-04-25 | Fix |
| CVE-2022-40482 | Laravel framework observable discrepancy | 5.3v3.1 | 0.9% | 2023-04-25 | Fix |
| CVE-2022-31244 | Nokia One-network Directory Server incorrect default permissions | 7.8v3.1 | 0.3% | 2023-04-25 | |
| CVE-2022-23721 | PingID integration for Windows login duplicate username collision | 3.8CNA v3.1 | 0.2% | 2023-04-25 | Fix |
| CVE-2022-48477 | JetBrains Hub server-side request forgery | 4.1CNA v3.1 | 0.5% | 2023-04-24 | Fix |
| CVE-2022-48476 | JetBrains Ktor path traversal | 7.5CNA v3.1 | 0.8% | 2023-04-24 | Fix |
| CVE-2022-47598 | WP Super Popup WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-24 | |
| CVE-2022-47158 | alfred24 Click and Collect WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-24 | |
| CVE-2022-45084 | Loginizer WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-04-24 | Fix |
| CVE-2022-41612 | Similar Posts WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-24 | |
| CVE-2022-28354 | mybb Active Threads cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-24 | |
| CVE-2022-47435 | WP-OliveCart WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2022-45361 | 0mk Shortener WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | |
| CVE-2022-45080 | KrishaWeb Add Multiple Marker plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-04-23 | Fix |
| CVE-2022-45074 | Activity Reactions For Buddypress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-04-23 | |
| CVE-2022-44743 | Jobs for WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | Fix |
| CVE-2022-44631 | 1app Business Forms WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-23 | |
| CVE-2022-44594 | All in One Time Clock Lite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | Fix |
| CVE-2022-44582 | Apptivo Business Site CRM WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-23 | Fix |
| CVE-2022-4944 | kalcaddle KodExplorer cross-site request forgery | 8.8v3.1 | 2.7% | 2023-04-22 | Exploit codeFix |
| CVE-2022-48150 | Shopware vulnerable to cross-site scripting (XSS) | 6.1NVD v3.1 | 0.6% | 2023-04-21 | |
| CVE-2022-47930 | IO FinNet Tss-lib vulnerable to replay attacks involving proofs | 6.8v3.1 | 0.5% | 2023-04-21 | Fix |
| CVE-2022-47509 | SolarWinds Platform Incorrect Input Neutralization vulnerability | 6.1CNA v3.1 | 0.5% | 2023-04-21 | Fix |
| CVE-2022-47505 | SolarWinds Platform local privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-04-21 | Fix |
| CVE-2022-36963 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 8.2% | 2023-04-21 | Fix |
| CVE-2022-46302 | Tribe29 Checkmk remote code execution with Root Privileges via Broad Apache Permissions | 8.8v3.1 | 0.4% | 2023-04-20 | Fix |
| CVE-2022-36788 | Slic3r libslic3r TriangleMesh clone functionality heap-based buffer overflow | 7.8v3.1 | 0.6% | 2023-04-20 | |
| CVE-2022-29944 | Opennetworking ONOS incorrect comparison | 5.3v3.1 | 0.8% | 2023-04-20 | |
| CVE-2022-29609 | Opennetworking ONOS incorrect control flow | 5.3v3.1 | 0.6% | 2023-04-20 | |
| CVE-2022-29608 | ONOS intent framework vulnerability | 7.5v3.1 | 0.9% | 2023-04-20 | |
| CVE-2022-29607 | Opennetworking ONOS incorrect control flow | 7.5v3.1 | 0.7% | 2023-04-20 | |
| CVE-2022-29606 | Opennetworking ONOS improper input validation | 9.8v3.1 | 1.0% | 2023-04-20 | |
| CVE-2022-29605 | Opennetworking ONOS incorrect control flow | 7.5v3.1 | 0.7% | 2023-04-20 | |
| CVE-2022-29604 | Opennetworking ONOS case sensitivity bypass | 9.8v3.1 | 1.0% | 2023-04-20 | |
| CVE-2022-24109 | Opennetworking ONOS resource exhaustion | 6.5v3.1 | 0.9% | 2023-04-20 | |
| CVE-2022-24035 | Opennetworking ONOS resource exhaustion | 7.5v3.1 | 0.9% | 2023-04-20 | |
| CVE-2022-4942 | mportuga eslint-detailed-reporter template-generator.js renderIssue cross-site scripting | 6.1v3.1 | 0.5% | 2023-04-20 | |
| CVE-2022-38125 | Secomea SiteManager FTP agent forwards traffic on inactive ports to LinkManager | 2.9CNA v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2022-4308 | Secomea GateManager clear-text passwords in configuration files | 6.1CNA v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2022-2507 | Octopus Deploy Octopus Server cross-site scripting | 5.3v3.1 | 0.4% | 2023-04-19 | Fix |
| CVE-2022-2084 | Sensitive data exposure in cloud-init logs | 5.5CNA v3.1 | 0.2% | 2023-04-19 | Fix |
| CVE-2022-46640 | Nanoleaf Desktop command injection | 9.8v3.1 | 1.9% | 2023-04-18 | |
| CVE-2022-45839 | WHA Puzzle WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2022-45838 | ARForms Form Builder WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2022-45836 | Download Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.7% | 2023-04-18 | NucleiFix |
| CVE-2022-44735 | WP Clictracker WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-18 | |
| CVE-2022-44632 | Content Repeater Custom Posts Simplified WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-18 | |
| CVE-2022-43378 | Schneider Electric NetBotz 4 clickjacking | 6.5CNA v3.1 | 0.5% | 2023-04-18 | Fix |
| CVE-2022-43377 | Schneider Electric NetBotz 4 missing brute-force protection | 7.5CNA v3.1 | 0.6% | 2023-04-18 | Fix |