CVE-2022 records published after 2022
Page five of seven: records 4,001 to 5,000 of the 6,660 published after 2022, newest first. The first page carries the figures for After 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-43376 | Schneider Electric NetBotz 4 cross-site scripting | 7.6CNA v3.1 | 0.4% | 2023-04-18 | Fix |
| CVE-2022-34755 | Schneider Electric Easergy Builder Installer uncontrolled search path | 6.3CNA v3.1 | 0.2% | 2023-04-18 | Fix |
| CVE-2022-46389 | ServiceNow Now Platform cross-site scripting (XSS) vulnerability found on logout functionality | 6.1CNA v3.1 | 0.6% | 2023-04-17 | Fix |
| CVE-2022-44726 | Timesheets-for-jira Timesheet Tracking cross-site scripting | 5.4v3.1 | 0.4% | 2023-04-17 | |
| CVE-2022-48314 | Huawei HarmonyOS vulnerability of bypassing user confirmation during pairing in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-04-16 | Fix |
| CVE-2022-48313 | Huawei HarmonyOS vulnerability of bypassing user confirmation during pairing in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-04-16 | Fix |
| CVE-2022-48312 | Huawei HarmonyOS unauthorized read and write vulnerability in the HwPCAssistant module | 9.1v3.1 | 0.4% | 2023-04-16 | Fix |
| CVE-2022-45849 | Activello WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-04-16 | Fix |
| CVE-2022-44734 | Car Rental by BestWebSoft WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-16 | |
| CVE-2022-43480 | Homepage Pop-up WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-16 | |
| CVE-2022-43458 | Advanced Floating Content WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-16 | Fix |
| CVE-2022-40946 | D-Link Dir-819 Firmware denial of service | 7.5v3.1 | 8.0% | 2023-04-16 | Exploit code |
| CVE-2022-38841 | Linksys E8450 OS command injection | 8.8v3.1 | 10.7% | 2023-04-16 | Exploit code |
| CVE-2022-38840 | Guralp Man-eam-0003 XML external entity injection | 7.5v3.1 | 9.8% | 2023-04-16 | NucleiExploit code |
| CVE-2022-37705 | Zmanda Amanda privilege escalation | 6.7NVD v3.1 | 1.3% | 2023-04-16 | Fix |
| CVE-2022-37704 | Zmanda Amanda command injection | 6.7v3.1 | 0.5% | 2023-04-16 | Exploit codeFix |
| CVE-2022-37306 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-16 | Fix |
| CVE-2022-37255 | TP-Link Tapo C310 hard-coded credentials | 7.5v3.1 | 5.0% | 2023-04-16 | Exploit code |
| CVE-2022-37186 | lemonldap-ng Lemonldap insufficient session expiration | 5.9v3.1 | 0.7% | 2023-04-16 | Fix |
| CVE-2022-34128 | glpi-project Positions unrestricted file upload | 9.8v3.1 | 7.7% | 2023-04-16 | Exploit code |
| CVE-2022-34127 | glpi-project Manageentities path traversal | 7.5v3.1 | 6.7% | 2023-04-16 | Exploit code |
| CVE-2022-34126 | glpi-project Activity path traversal | 7.5v3.1 | 1.2% | 2023-04-16 | |
| CVE-2022-34125 | glpi-project CMDB observable discrepancy | 6.5v3.1 | 4.6% | 2023-04-16 | Exploit code |
| CVE-2022-30076 | Entab ERP missing brute-force protection | 5.3v3.1 | 3.6% | 2023-04-16 | Exploit code |
| CVE-2022-28353 | External Redirect Warning cross-site scripting | 6.1v3.1 | 0.6% | 2023-04-16 | Fix |
| CVE-2022-48178 | X2ENGINE X2CRM cross-site scripting | 5.4v3.1 | 1.8% | 2023-04-15 | Exploit code |
| CVE-2022-48177 | X2ENGINE X2CRM cross-site scripting | 5.4v3.1 | 1.8% | 2023-04-15 | Exploit code |
| CVE-2022-47522 | Ieee 802.11 authentication bypass by spoofing | 7.5v3.1 | 0.9% | 2023-04-15 | Exploit codeFix |
| CVE-2022-45030 | rConfig A SQL injection | 8.8v3.1 | 2.7% | 2023-04-15 | Exploit code |
| CVE-2022-43699 | Open-Xchange OX App Suite server-side request forgery | 4.3v3.1 | 0.5% | 2023-04-15 | Fix |
| CVE-2022-43698 | Open-Xchange OX App Suite server-side request forgery | 4.3v3.1 | 0.5% | 2023-04-15 | Fix |
| CVE-2022-43697 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-15 | Fix |
| CVE-2022-43696 | Open-Xchange OX App Suite cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-15 | Fix |
| CVE-2022-2525 | Improper restriction of excessive authentication attempts in janeczku/Calibre-Web | 9.8v3.1 | 0.8% | 2023-04-15 | Fix |
| CVE-2022-47501 | Apache OFBiz: Arbitrary file reading | 7.5v3.1 | 10.2% | 2023-04-14 | NucleiFix |
| CVE-2022-47027 | Timmystudios Fast Typing Keyboard path traversal | 9.8v3.1 | 1.5% | 2023-04-14 | |
| CVE-2022-46886 | ServiceNow open redirect | 5.5CNA v3.1 | 0.3% | 2023-04-14 | Fix |
| CVE-2022-45180 | Liveboxcloud Vdesk missing authorization | 6.5v3.1 | 0.7% | 2023-04-14 | |
| CVE-2022-45178 | Liveboxcloud Vdesk missing authorization | 8.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2022-45175 | Liveboxcloud Vdesk insecure direct object reference | 6.5v3.1 | 0.7% | 2023-04-14 | |
| CVE-2022-45174 | Liveboxcloud Vdesk improper authentication | 9.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2022-45173 | Liveboxcloud Vdesk improper authentication | 9.8v3.1 | 1.0% | 2023-04-14 | |
| CVE-2022-45170 | Liveboxcloud Vdesk weak cryptographic algorithm | 6.5v3.1 | 0.4% | 2023-04-14 | |
| CVE-2022-3748 | ForgeRock Access Management improper authorization that can lead to account impersonation | 9.8v3.1 | 0.9% | 2023-04-14 | Fix |
| CVE-2022-48468 | Protobuf-c integer overflow | 5.5v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-45358 | Activello WordPress theme cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-45064 | Apache Sling Engine: Include-based XSS | 8.0CNA v3.1 | 1.1% | 2023-04-13 | Fix |
| CVE-2022-44625 | Cyklodev WP Notify WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-40532 | Qualcomm Snapdragon integer overflow or wraparound in WLAN | 8.4CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-40503 | Qualcomm Snapdragon buffer over-read in Bluetooth host | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33302 | Qualcomm Snapdragon improper validation of array index in User Identity module | 6.8CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33301 | Qualcomm Snapdragon incorrect type conversion or cast in Audio | 6.7CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33298 | Qualcomm Snapdragon use-after-free in Modem | 6.7CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33297 | Qualcomm Snapdragon buffer overread in Linux Sensors | 6.8CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33296 | Integer overflow to buffer overflow in Modem | 5.9CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33295 | Qualcomm Snapdragon buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33294 | Qualcomm Snapdragon null pointer dereference in Modem | 7.5CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33291 | Buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33289 | Improper validation of array index in Modem | 6.8CNA v3.1 | 0.2% | 2023-04-13 | Fix |
| CVE-2022-33288 | Qualcomm Snapdragon buffer copy without checking the size of input in Core | 9.3CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33287 | Buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33282 | Qualcomm Snapdragon integer overflow to buffer overflow in Automotive Multimedia | 8.4CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33270 | Qualcomm Snapdragon time-of-check time-of-use race condition in Modem | 7.5CNA v3.1 | 0.3% | 2023-04-13 | Fix |
| CVE-2022-33269 | Qualcomm Snapdragon integer overflow or wraparound in Core | 9.3CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33259 | Qualcomm Snapdragon buffer copy without checking the size of input in Modem | 9.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33258 | Qualcomm Snapdragon buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33231 | Qualcomm Snapdragon double free in Core | 9.3CNA v3.1 | 0.1% | 2023-04-13 | Fix |
| CVE-2022-33228 | Qualcomm Snapdragon buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33223 | Qualcomm Snapdragon null pointer dereference in Modem | 7.5CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33222 | Qualcomm Snapdragon buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-33211 | Qualcomm Snapdragon improper input validation in MODEM | 9.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25747 | Qualcomm Snapdragon buffer over-read in MODEM | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25745 | Qualcomm Snapdragon always incorrect control flow Implementation in MODEM | 9.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25740 | Qualcomm Snapdragon buffer copy without checking size of input in MODEM | 9.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25739 | Qualcomm Snapdragon Null Point Dereference in MODEM | 7.5CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25737 | Qualcomm Snapdragon use of uninitialized variable in MODEM | 7.5CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25731 | Qualcomm Snapdragon incorrect calculation of buffer size in MODEM | 7.5CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25730 | Qualcomm Snapdragon buffer over-read in MODEM | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25726 | Qualcomm Snapdragon buffer over-read in MODEM | 8.2CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-25678 | Qualcomm Snapdragon buffer copy without checking size of input in MODEM | 9.8CNA v3.1 | 0.4% | 2023-04-13 | Fix |
| CVE-2022-48437 | OpenBSD LibreSSL improper certificate validation | 5.3v3.1 | 0.4% | 2023-04-12 | Fix |
| CVE-2022-47605 | Custom 404 Pro WordPress plugin SQL injection (SQLi) | 7.2v3.1 | 0.7% | 2023-04-12 | Fix |
| CVE-2022-47053 | dnnsoftware DotNetNuke arbitrary file upload | 5.4v3.1 | 0.4% | 2023-04-12 | |
| CVE-2022-24350 | InsydeH2O buffer overflow | 5.5v3.1 | 0.2% | 2023-04-12 | Fix |
| CVE-2022-47468 | UNISOC chipsets null pointer dereference | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47467 | UNISOC chipsets null pointer dereference | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47466 | UNISOC chipsets null pointer dereference | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47465 | UNISOC chipsets null pointer dereference | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47464 | UNISOC chipsets buffer overflow | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47463 | UNISOC chipsets buffer overflow | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47362 | UNISOC chipsets buffer overflow | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47338 | UNISOC chipsets missing authorization | 7.1v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47337 | UNISOC chipsets out-of-bounds write | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47336 | UNISOC chipsets buffer overflow | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-47335 | UNISOC chipsets buffer overflow | 5.5v3.1 | 0.1% | 2023-04-11 | Fix |
| CVE-2022-46396 | Arm Avalon GPU Kernel Driver memory corruption | 3.3NVD v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2022-43955 | Fortinet FortiWeb cross-site scripting | 8.0CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2022-43952 | Fortinet FortiADC cross-site scripting | 3.3CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2022-43951 | Fortinet FortiNAC information disclosure | 4.8CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2022-43948 | Fortinet FortiWeb OS command injection | 6.5CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2022-43947 | Fortinet FortiOS missing brute-force protection | 4.7CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2022-43946 | Fortinet FortiClientWindows incorrect permission assignment | 7.3CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2022-43770 | Hitachi Vantara Pentaho Business Analytics Server incorrect authorization | 8.1v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2022-43768 | Siemens SIMATIC CP 1242-7 V2 resource exhaustion | 7.5CNA v3.1 | 1.0% | 2023-04-11 | Fix |
| CVE-2022-43767 | Siemens SIMATIC CP 1242-7 V2 deadlock | 7.5CNA v3.1 | 0.7% | 2023-04-11 | Fix |
| CVE-2022-43716 | Siemens SIMATIC CP 1242-7 V2 use-after-free | 7.5CNA v3.1 | 1.0% | 2023-04-11 | Fix |
| CVE-2022-43293 | Wacom Driver link following | 5.9v3.1 | 0.8% | 2023-04-11 | Exploit code |
| CVE-2022-42477 | Fortinet FortiAnalyzer improper input validation | 6.5CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2022-42470 | Fortinet FortiClientWindows relative path traversal | 7.1CNA v3.1 | 0.3% | 2023-04-11 | Fix |
| CVE-2022-42469 | Fortinet FortiOS permissive allowlist | 4.1CNA v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2022-41331 | Fortinet FortiPresence missing authentication | 9.3CNA v3.1 | 1.3% | 2023-04-11 | Fix |
| CVE-2022-41330 | Fortinet FortiProxy cross-site scripting | 8.3CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2022-40682 | Fortinet FortiClientWindows incorrect authorization | 7.1CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2022-40679 | Fortinet FortiDDoS OS command injection | 7.1CNA v3.1 | 0.2% | 2023-04-11 | Fix |
| CVE-2022-38604 | Wacom Driver link following | 7.3v3.1 | 0.6% | 2023-04-11 | Exploit code |
| CVE-2022-35850 | Fortinet FortiAuthenticator cross-site scripting | 4.2CNA v3.1 | 0.5% | 2023-04-11 | Fix |
| CVE-2022-27487 | Fortinet FortiSandbox improper privilege management | 8.3CNA v3.1 | 1.0% | 2023-04-11 | Fix |
| CVE-2022-27485 | Fortinet FortiSandbox SQL injection | 6.2CNA v3.1 | 0.6% | 2023-04-11 | Fix |
| CVE-2022-3695 | Hitachi Vantara Pentaho Business Analytics Server CDE plugin cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-11 | Fix |
| CVE-2022-46717 | Apple iOS and iPadOS logic flaw | 2.4v3.1 | 0.3% | 2023-04-10 | Fix |
| CVE-2022-46716 | Apple macOS logic flaw | 7.5v3.1 | 0.5% | 2023-04-10 | Fix |
| CVE-2022-46709 | Apple macOS out-of-bounds write | 9.8v3.1 | 0.8% | 2023-04-10 | Fix |
| CVE-2022-46703 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-04-10 | Fix |
| CVE-2022-42858 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2023-04-10 | Fix |
| CVE-2022-41976 | Scada-LTS An privilege escalation | 8.8NVD v3.1 | 1.6% | 2023-04-10 | Fix |
| CVE-2022-39048 | Cross-site scripting (XSS) vulnerability in ServiceNow UI page assessment_redirect | 6.1CNA v3.1 | 1.1% | 2023-04-10 | NucleiFix |
| CVE-2022-37462 | Upstream Works On Finesse stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-04-10 | Fix |
| CVE-2022-32871 | Apple iOS logic flaw | 2.4v3.1 | 0.3% | 2023-04-10 | Fix |
| CVE-2022-4827 | WP Tiles WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-04-10 | |
| CVE-2022-43928 | IBM Db2 Mirror for i information disclosure | 4.9CNA v3.1 | 0.6% | 2023-04-07 | Fix |
| CVE-2022-43914 | IBM TRIRIGA Application Platform cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-04-07 | Fix |
| CVE-2022-43309 | Supermicro H11dsi-nt incorrect permission assignment | 5.5v3.1 | 0.2% | 2023-04-07 | Fix |
| CVE-2022-34333 | IBM Sterling Order Management information disclosure | 5.9CNA v3.1 | 0.6% | 2023-04-07 | Fix |
| CVE-2022-33959 | IBM Sterling Order Management privilege escalation | 5.4CNA v3.1 | 0.5% | 2023-04-07 | Fix |
| CVE-2022-46793 | Product Feed PRO for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2022-46781 | Arm Avalon GPU Kernel Driver memory corruption | 3.3v3.1 | 0.2% | 2023-04-06 | Fix |
| CVE-2022-32599 | MediaTek chipsets out-of-bounds write in rpmb | 6.7v3.1 | 0.1% | 2023-04-06 | Fix |
| CVE-2022-45115 | Ichitaro Attribute Arena functionality buffer overflow | 7.8v3.1 | 0.5% | 2023-04-05 | |
| CVE-2022-43664 | Ichitaro use-after-free | 7.8v3.1 | 0.5% | 2023-04-05 | |
| CVE-2022-31890 | Enhancesoft Audit Log SQL injection | 9.8v3.1 | 1.5% | 2023-04-05 | Exploit code |
| CVE-2022-31889 | Enhancesoft Audit Log cross-site scripting | 6.1v3.1 | 0.7% | 2023-04-05 | Exploit code |
| CVE-2022-31888 | Enhancesoft osTicket in function login in class.auth.php session fixation | 8.8v3.1 | 1.2% | 2023-04-05 | Fix |
| CVE-2022-4941 | WCFM Membership WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-04-05 | Fix |
| CVE-2022-4940 | WCFM Membership WordPress plugin missing authorization | 6.5NVD v3.1 | 1.1% | 2023-04-05 | NucleiFix |
| CVE-2022-4939 | WCFM Membership WordPress plugin unauthenticated privilege escalation | 9.8v3.1 | 2.1% | 2023-04-05 | Exploit codeFix |
| CVE-2022-4938 | WCFM Frontend Manager WordPress plugin cross-site request forgery | 8.8v3.1 | 0.2% | 2023-04-05 | Fix |
| CVE-2022-4937 | WCFM Frontend Manager WordPress plugin unauthorized access | 8.8v3.1 | 0.6% | 2023-04-05 | Fix |
| CVE-2022-4936 | WCFM Marketplace WordPress plugin cross-site request forgery | 8.8v3.1 | 0.2% | 2023-04-05 | Fix |
| CVE-2022-4935 | WCFM Marketplace WordPress plugin missing authorization | 8.8v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2022-3513 | GitLab cross-site scripting | 6.1CNA v3.1 | 0.7% | 2023-04-05 | Fix |
| CVE-2022-3375 | GitLab private fork visibility vulnerability | 3.1CNA v3.1 | 0.8% | 2023-04-05 | Fix |
| CVE-2022-48435 | JetBrains PhpStorm sensitive information in log files | 3.3CNA v3.1 | 0.2% | 2023-04-04 | Fix |
| CVE-2022-48228 | Gbgplc Acuant Asureid Sentinel sensitive information in log files | 5.5v3.1 | 0.2% | 2023-04-04 | |
| CVE-2022-48227 | Gbgplc Acuant Asureid Sentinel improper privilege management | 7.8v3.1 | 0.2% | 2023-04-04 | |
| CVE-2022-48226 | Gbgplc Acuant Acufill SDK improper privilege management | 7.8v3.1 | 0.2% | 2023-04-04 | |
| CVE-2022-48225 | Gbgplc Acuant Acufill SDK uncontrolled search path | 7.3v3.1 | 0.2% | 2023-04-04 | |
| CVE-2022-48224 | Gbgplc Acuant Acufill SDK uncontrolled search path | 7.3v3.1 | 0.2% | 2023-04-04 | |
| CVE-2022-48223 | Gbgplc Acuant Acufill SDK uncontrolled search path | 6.7v3.1 | 0.1% | 2023-04-04 | |
| CVE-2022-48222 | Gbgplc Acuant Acufill SDK uncontrolled search path | 7.8v3.1 | 0.1% | 2023-04-04 | |
| CVE-2022-48221 | Gbgplc Acuant Acufill SDK race condition | 7.5v3.1 | 0.5% | 2023-04-04 | |
| CVE-2022-47870 | Red-gate SQL Monitor web cross-site scripting | 6.1v3.1 | 2.2% | 2023-04-04 | Exploit code |
| CVE-2022-41633 | Community by PeepSo WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-04-04 | Fix |
| CVE-2022-4934 | Sophos Web Appliance exception wizard command injection | 7.2CNA v3.1 | 1.8% | 2023-04-04 | Fix |
| CVE-2022-43941 | Hitachi Vantara Pentaho Business Analytics Server XML external entity injection | 6.5NVD v3.1 | 0.5% | 2023-04-03 | Fix |
| CVE-2022-43940 | Hitachi Vantara Pentaho Business Analytics Server incorrect authorization | 8.8v3.1 | 0.6% | 2023-04-03 | Fix |
| CVE-2022-43939 | Hitachi Vantara Pentaho BA Server authorization bypass | 9.8v3.1 | 92.3% | 2023-04-03 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-43938 | Hitachi Vantara Pentaho Business Analytics Server Pentaho Reports script manager code injection | 8.8v3.1 | 26.6% | 2023-04-03 | Fix |
| CVE-2022-43773 | Hitachi Vantara Pentaho Business Analytics Server incorrect permission assignment | 8.8v3.1 | 22.2% | 2023-04-03 | Fix |
| CVE-2022-43772 | Hitachi Vantara Pentaho Business Analytics Server insertion of sensitive information into log file | 6.5v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2022-43771 | Hitachi Vantara Pentaho Business Analytics Server path traversal | 6.5v3.1 | 23.9% | 2023-04-03 | Fix |
| CVE-2022-43769 | Hitachi Vantara Pentaho BA Server special element injection | 7.2v3.1 | 97.7% | 2023-04-03 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-38923 | Iss-oberlausitz Bluepage Cms SQL injection | 9.8v3.1 | 1.0% | 2023-04-03 | Fix |
| CVE-2022-38922 | Iss-oberlausitz Bluepage Cms SQL injection | 9.8v3.1 | 1.0% | 2023-04-03 | Fix |
| CVE-2022-38072 | ADMesh improper array index validation | 8.8v3.1 | 1.1% | 2023-04-03 | Fix |
| CVE-2022-36440 | FRRouting A reachable assertion | 7.5v3.1 | 1.6% | 2023-04-03 | Fix |
| CVE-2022-27665 | Progress WS_FTP Server Progress Ipswitch reflected cross-site scripting | 6.1v3.1 | 33.1% | 2023-04-03 | Emerging ThreatsExploit codeFix |
| CVE-2022-4771 | Hitachi Vantara Pentaho Business Analytics Server cross-site scripting | 6.1v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2022-4770 | Hitachi Vantara Pentaho Business Analytics Server report error message vulnerability | 4.3v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2022-4769 | Hitachi Vantara Pentaho Business Analytics Server file upload error message vulnerability | 4.3v3.1 | 0.4% | 2023-04-03 | Fix |
| CVE-2022-3960 | Hitachi Vantara Pentaho Business Analytics Server static code injection | 6.3v3.1 | 0.5% | 2023-04-03 | Fix |
| CVE-2022-42452 | HCL Launch cross-site scripting | 4.6CNA v3.1 | 0.3% | 2023-04-02 | Fix |
| CVE-2022-42447 | Cross-origin resource sharing vulnerability affects HCL Compass | 9.6CNA v3.1 | 0.4% | 2023-04-02 | Fix |
| CVE-2022-47192 | Admin password reset via file upload vulnerability in Generex CS141 | 8.8v3.1 | 1.3% | 2023-03-31 | Fix |
| CVE-2022-47191 | Privilege escalation via file upload vulnerability at Generex CS141 | 8.8v3.1 | 1.1% | 2023-03-31 | Fix |
| CVE-2022-47190 | RCE via file upload vulnerability in Generex CS141 | 9.8v3.1 | 1.6% | 2023-03-31 | Fix |
| CVE-2022-47189 | DoS via file upload vulnerability at Generex CS141 | 9.1v3.1 | 0.9% | 2023-03-31 | Fix |
| CVE-2022-47188 | Improper input validation in Generex CS141 | 7.5v3.1 | 0.9% | 2023-03-31 | Fix |
| CVE-2022-46021 | X-man SQL injection | 7.5v3.1 | 0.6% | 2023-03-31 | |
| CVE-2022-4899 | zstd vulnerable to buffer overrun | 7.5NVD v3.1 | 1.6% | 2023-03-31 | Fix |
| CVE-2022-3192 | ABB AC500 V2 improper check for unusual or exceptional conditions | 5.3CNA v3.1 | 0.6% | 2023-03-31 | Fix |
| CVE-2022-47542 | Red-gate SQL Monitor privilege escalation | 8.8v3.1 | 0.6% | 2023-03-30 | Fix |
| CVE-2022-43473 | Zoho ManageEngine OpManager Add UCS Device functionality XML external entity injection | 5.4v3.1 | 19.8% | 2023-03-30 | Fix |
| CVE-2022-30351 | Pdfzorro improper output encoding | 7.5v3.1 | 0.6% | 2023-03-30 | |
| CVE-2022-30350 | Avanquest Pdfescape information disclosure | 7.5v3.1 | 0.7% | 2023-03-30 | |
| CVE-2022-23522 | Arbitrary file write when Extracting Tarballs retrieved from a remote location using in mindsdb | 8.5CNA v3.1 | 0.9% | 2023-03-30 | Fix |
| CVE-2022-4744 | Linux kernel A double free | 7.8NVD v3.1 | 0.5% | 2023-03-30 | Fix |
| CVE-2022-48434 | FFmpeg use-after-free | 8.1v3.1 | 1.5% | 2023-03-29 | Fix |
| CVE-2022-48433 | JetBrains IntelliJ IDEA insufficiently protected credentials | 6.1CNA v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-48432 | JetBrains IntelliJ IDEA insecure default initialization | 5.2CNA v3.1 | 0.2% | 2023-03-29 | Fix |
| CVE-2022-48431 | JetBrains IntelliJ IDEA insufficient verification of data authenticity | 4.5CNA v3.1 | 0.1% | 2023-03-29 | Fix |
| CVE-2022-48430 | JetBrains IntelliJ IDEA information disclosure | 5.5CNA v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2022-47613 | AI ChatBot WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47610 | Simple Image Popup WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47607 | Usersnap WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47603 | Responsive Image Gallery, Gallery Album WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47602 | WP Table Manager WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47596 | Media Library Categories WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47444 | ProfilePress WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47438 | Booking calendar, Appointment Booking System WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-47433 | Multi Rating WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-45355 | WP Pipes WordPress plugin SQL injection (SQLi) | 7.2v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-44370 | NASM Netwide Assembler out-of-bounds write | 7.8v3.1 | 0.4% | 2023-03-29 | Fix |
| CVE-2022-44369 | NASM Netwide Assembler null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-29 | |
| CVE-2022-44368 | NASM Netwide Assembler null pointer dereference | 5.5v3.1 | 0.3% | 2023-03-29 | |
| CVE-2022-43650 | RARLAB WinRAR out-of-bounds read | 7.1v3.1 | 23.0% | 2023-03-29 | Fix |
| CVE-2022-43649 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43648 | D-Link DIR-3040 heap-based buffer overflow | 8.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-43647 | D-Link DIR-825 OS command injection | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43646 | D-Link DIR-825 OS command injection | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43645 | D-Link DIR-825 OS command injection | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43644 | D-Link DIR-825 OS command injection | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43643 | D-Link DIR-825 OS command injection | 8.8v3.1 | 1.9% | 2023-03-29 | Fix |
| CVE-2022-43642 | D-Link DIR-825 OS command injection | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43641 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43640 | Foxit PDF Reader out-of-bounds read | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-43639 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43638 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43637 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43636 | TP-Link TL-WR940N insufficient randomness | 8.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2022-43635 | TP-Link TL-WR940N flawed authentication | 6.5v3.1 | 0.6% | 2023-03-29 | |
| CVE-2022-43634 | Netatalk heap-based buffer overflow | 9.8v3.1 | 18.9% | 2023-03-29 | Fix |
| CVE-2022-43633 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43632 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43631 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43630 | D-Link DIR-1935 stack-based buffer overflow | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43629 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43628 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-43627 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43626 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43625 | D-Link DIR-1935 stack-based buffer overflow | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43624 | D-Link DIR-1935 OS command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43623 | D-Link DIR-1935 command injection | 6.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43622 | D-Link DIR-1935 stack-based buffer overflow | 8.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-43621 | D-Link DIR-1935 authentication bypass | 8.8v3.1 | 2.2% | 2023-03-29 | Fix |
| CVE-2022-43620 | D-Link DIR-1935 improper authentication | 8.8v3.1 | 1.1% | 2023-03-29 | Fix |
| CVE-2022-43619 | D-Link DIR-1935 format string | 6.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-43618 | CorelDRAW Graphics Suite out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2022-43617 | CorelDRAW Graphics Suite out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2022-43616 | CorelDRAW Graphics Suite out-of-bounds read | 7.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2022-43615 | CorelDRAW Graphics Suite out-of-bounds read | 5.5v3.1 | 0.8% | 2023-03-29 | |
| CVE-2022-43614 | CorelDRAW Graphics Suite out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2022-43613 | CorelDRAW Graphics Suite stack-based buffer overflow | 7.8v3.1 | 0.9% | 2023-03-29 | |
| CVE-2022-43612 | CorelDRAW Graphics Suite out-of-bounds read | 5.5v3.1 | 0.8% | 2023-03-29 | |
| CVE-2022-43611 | CorelDRAW Graphics Suite out-of-bounds read | 5.5v3.1 | 0.8% | 2023-03-29 | |
| CVE-2022-43610 | CorelDRAW Graphics Suite out-of-bounds read | 5.5v3.1 | 0.8% | 2023-03-29 | |
| CVE-2022-43609 | IronCAD uninitialized pointer access | 7.8v3.1 | 0.5% | 2023-03-29 | |
| CVE-2022-43608 | Canon imageCLASS MF644Cdw integer overflow | 8.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-42433 | TP-Link TL-WR841N OS command injection | 8.0v3.1 | 0.6% | 2023-03-29 | |
| CVE-2022-42432 | Linux Kernel uninitialized variable use | 4.4NVD v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-42431 | Tesla Model 3 buffer overflow | 7.8v3.1 | 0.3% | 2023-03-29 | |
| CVE-2022-42430 | Tesla Model 3 use-after-free | 7.8v3.1 | 0.4% | 2023-03-29 | |
| CVE-2022-42429 | Centreon SQL injection | 8.8v3.1 | 76.1% | 2023-03-29 | Fix |
| CVE-2022-42428 | Centreon SQL injection | 8.8v3.1 | 2.9% | 2023-03-29 | Fix |
| CVE-2022-42427 | Centreon SQL injection | 8.8v3.1 | 76.1% | 2023-03-29 | Fix |
| CVE-2022-42426 | Centreon SQL injection | 8.8v3.1 | 2.9% | 2023-03-29 | Fix |
| CVE-2022-42425 | Centreon SQL injection | 8.8v3.1 | 76.1% | 2023-03-29 | Fix |
| CVE-2022-42424 | Centreon SQL injection | 8.8v3.1 | 76.1% | 2023-03-29 | Fix |
| CVE-2022-38077 | Popup Anything WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2022-37391 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37390 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37389 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37388 | Foxit PDF Reader out-of-bounds read | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37387 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37386 | Foxit PDF Reader out-of-bounds read | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-37385 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37384 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37383 | Foxit PDF Reader out-of-bounds read | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-37382 | Foxit PDF Reader use-after-free | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-37381 | Foxit PDF Reader use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37380 | Foxit PDF Reader out-of-bounds read | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-37379 | Foxit PDF Reader use-after-free | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-37378 | Foxit PDF Editor use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37377 | Foxit PDF Editor type confusion | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-37376 | Foxit PDF Editor out-of-bounds read | 3.3v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37375 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37374 | PDF-XChange Editor use-after-free | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37373 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37372 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37371 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37370 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37369 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37368 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37367 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37366 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37365 | PDF-XChange Editor exposed dangerous method | 7.8v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37364 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37363 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37362 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37361 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37360 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37359 | PDF-XChange Editor use-after-free | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37358 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37357 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37356 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37355 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37354 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37353 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37352 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-37351 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-37350 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37349 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.8% | 2023-03-29 | Fix |
| CVE-2022-37013 | Unified Automation OPC UA C++ Demo Server infinite loop | 7.5v3.1 | 1.2% | 2023-03-29 | Fix |
| CVE-2022-37012 | Unified Automation OPC UA C++ Demo Server improper reference count update | 7.5v3.1 | 1.8% | 2023-03-29 | Fix |
| CVE-2022-36983 | Ivanti Avalanche missing authentication | 9.8v3.1 | 4.7% | 2023-03-29 | Fix |
| CVE-2022-36982 | Ivanti Avalanche path traversal | 7.5v3.1 | 73.8% | 2023-03-29 | Fix |
| CVE-2022-36981 | Ivanti Avalanche path traversal | 9.8v3.1 | 83.4% | 2023-03-29 | Fix |
| CVE-2022-36980 | Ivanti Avalanche time-of-check time-of-use race condition | 8.1NVD v3.1 | 82.4% | 2023-03-29 | Fix |
| CVE-2022-36979 | Ivanti Avalanche SQL injection | 9.8v3.1 | 6.5% | 2023-03-29 | Fix |
| CVE-2022-36978 | Ivanti Avalanche deserialization of untrusted data | 9.8v3.1 | 7.3% | 2023-03-29 | Fix |
| CVE-2022-36977 | Ivanti Avalanche deserialization of untrusted data | 9.8v3.1 | 6.7% | 2023-03-29 | Fix |
| CVE-2022-36976 | Ivanti Avalanche SQL injection | 9.8v3.1 | 6.5% | 2023-03-29 | Fix |
| CVE-2022-36975 | Ivanti Avalanche SQL injection | 9.8v3.1 | 6.5% | 2023-03-29 | Fix |
| CVE-2022-36974 | Ivanti Avalanche deserialization of untrusted data | 9.8v3.1 | 84.5% | 2023-03-29 | Fix |
| CVE-2022-36973 | Ivanti Avalanche SQL injection | 8.8NVD v3.1 | 6.0% | 2023-03-29 | Fix |
| CVE-2022-36972 | Ivanti Avalanche SQL injection | 9.8v3.1 | 6.5% | 2023-03-29 | Fix |
| CVE-2022-36971 | Ivanti Avalanche deserialization of untrusted data | 8.8NVD v3.1 | 15.0% | 2023-03-29 | Fix |
| CVE-2022-36970 | AVEVA Edge missing warning for unsafe actions | 7.8v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-36969 | AVEVA Edge XML external entity injection | 7.1v3.1 | 13.7% | 2023-03-29 | Fix |
| CVE-2022-28688 | AVEVA Edge uncontrolled search path | 7.8v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-28687 | AVEVA Edge uncontrolled search path | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28686 | AVEVA Edge uncontrolled search path | 7.8v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28685 | AVEVA Edge deserialization of untrusted data | 7.8v3.1 | 17.2% | 2023-03-29 | Fix |
| CVE-2022-28647 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28646 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28645 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28644 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28643 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28642 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28641 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28320 | Bentley View uninitialized variable use | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28319 | Bentley MicroStation CONNECT uninitialized variable use | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28318 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-28317 | Bentley MicroStation CONNECT uninitialized variable use | 7.8v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28316 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28315 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28314 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28313 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28312 | Bentley MicroStation CONNECT out-of-bounds read | 5.5v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28311 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28310 | Bentley MicroStation CONNECT use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28309 | Bentley View out-of-bounds read | 5.5v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28308 | Bentley View out-of-bounds read | 5.5v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28307 | Bentley View out-of-bounds read | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28306 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28305 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28304 | Bentley MicroStation CONNECT stack-based buffer overflow | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-28303 | Bentley View use-after-free | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28302 | Bentley MicroStation CONNECT out-of-bounds read | 7.8v3.1 | 0.6% | 2023-03-29 | Fix |
| CVE-2022-28301 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-28300 | Bentley MicroStation out-of-bounds write | 7.8v3.1 | 1.0% | 2023-03-29 | Fix |
| CVE-2022-27648 | KOYO Screen Creator stack-based buffer overflow | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-27647 | NETGEAR R6700v3 OS command injection | 8.0v3.1 | 1.5% | 2023-03-29 | Fix |
| CVE-2022-27646 | NETGEAR R6700v3 stack-based buffer overflow | 8.8v3.1 | 1.4% | 2023-03-29 | Exploit codeFix |
| CVE-2022-27645 | NETGEAR R6700v3 missing authentication | 8.8v3.1 | 1.3% | 2023-03-29 | Fix |
| CVE-2022-27644 | NETGEAR R6700v3 improper certificate validation | 8.8v3.1 | 0.3% | 2023-03-29 | Fix |
| CVE-2022-27643 | NETGEAR R6700v3 buffer overflow | 8.8v3.1 | 25.1% | 2023-03-29 | Emerging ThreatsFix |
| CVE-2022-27642 | NETGEAR R6700v3 incorrect authorization | 8.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-27641 | NETGEAR R6700v3 integer overflow | 8.8v3.1 | 1.2% | 2023-03-29 | Fix |
| CVE-2022-27598 | QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) | 2.7CNA v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-27597 | QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) | 2.7CNA v3.1 | 0.7% | 2023-03-29 | Fix |
| CVE-2022-3787 | device-mapper-multipath improper authorization | 7.8NVD v3.1 | 0.2% | 2023-03-29 | Fix |
| CVE-2022-3210 | D-Link DIR-2150 OS command injection | 8.8v3.1 | 2.0% | 2023-03-29 | Fix |
| CVE-2022-3093 | Tesla Model 3 time-of-check time-of-use race condition | 6.4NVD v3.1 | 0.4% | 2023-03-29 | |
| CVE-2022-2848 | Kepware KEPServerEX heap-based buffer overflow | 9.1v3.1 | 3.4% | 2023-03-29 | Fix |
| CVE-2022-2825 | Kepware KEPServerEX stack-based buffer overflow | 9.8v3.1 | 3.4% | 2023-03-29 | Fix |
| CVE-2022-2561 | OPC Labs QuickOPC deserialization of untrusted data | 7.8v3.1 | 0.9% | 2023-03-29 | Fix |
| CVE-2022-2560 | EnterpriseDT CompleteFTP path traversal | 9.1v3.1 | 77.7% | 2023-03-29 | |
| CVE-2022-1274 | HTML injection in Keycloak Admin REST API | 5.4v3.1 | 0.7% | 2023-03-29 | Exploit codeFix |
| CVE-2022-47529 | RSA NetWitness Platform Endpoint Windows agent vulnerability | 6.7v3.1 | 1.6% | 2023-03-28 | Exploit code |
| CVE-2022-47170 | Unlimited Elements For Elementor WordPress plugin cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2022-46863 | Quick Event Manager WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2022-46855 | Responsive Pricing Table WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-03-28 | Fix |
| CVE-2022-46848 | Visualizer WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-03-28 | Fix |
| CVE-2022-46397 | LF Projects Vector Packet Processor predictable initialization vector | 7.5v3.1 | 0.6% | 2023-03-28 | Fix |
| CVE-2022-46387 | Maximus5 Conemu improper output encoding | 9.8v3.1 | 0.9% | 2023-03-28 | |
| CVE-2022-45831 | Image Hover Effects - Caption Hover with Carousel WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2022-45825 | WPComplete WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-03-28 | Fix |
| CVE-2022-45460 | Xiongmaitech Nbd6808t-pl out-of-bounds write | 9.8v3.1 | 5.7% | 2023-03-28 | Exploit code |
| CVE-2022-36060 | Prototype pollution in matrix-react-sdk | 8.2CNA v3.1 | 0.9% | 2023-03-28 | Fix |
| CVE-2022-36059 | Prototype pollution in matrix-js-sdk | 8.2CNA v3.1 | 0.9% | 2023-03-28 | Fix |
| CVE-2022-24973 | TP-Link TL-WR940N stack-based buffer overflow | 8.0v3.1 | 0.7% | 2023-03-28 | |
| CVE-2022-24972 | TP-Link TL-WR940N information disclosure | 6.5v3.1 | 0.6% | 2023-03-28 | |
| CVE-2022-24908 | Foxit PDF Reader out-of-bounds read | 7.8v3.1 | 1.0% | 2023-03-28 | Fix |
| CVE-2022-24907 | Foxit PDF Reader out-of-bounds read | 7.8v3.1 | 1.0% | 2023-03-28 | Fix |
| CVE-2022-24674 | Canon imageCLASS MF644Cdw stack-based buffer overflow | 8.8v3.1 | 1.1% | 2023-03-28 | |
| CVE-2022-24673 | Canon imageCLASS MF644Cdw stack-based buffer overflow | 9.8v3.1 | 2.6% | 2023-03-28 | Fix |
| CVE-2022-24672 | Canon imageCLASS MF644Cdw heap-based buffer overflow | 8.8v3.1 | 1.2% | 2023-03-28 | Fix |
| CVE-2022-24353 | TP-Link AC1750 out-of-bounds read | 8.8v3.1 | 0.7% | 2023-03-28 | |
| CVE-2022-24352 | TP-Link AC1750 out-of-bounds read | 8.8v3.1 | 0.7% | 2023-03-28 | |
| CVE-2022-23125 | Netatalk stack-based buffer overflow | 9.8v3.1 | 4.4% | 2023-03-28 | Fix |
| CVE-2022-23124 | Netatalk out-of-bounds read | 9.8v3.1 | 2.8% | 2023-03-28 | Fix |
| CVE-2022-23123 | Netatalk out-of-bounds read | 9.8v3.1 | 3.8% | 2023-03-28 | Fix |
| CVE-2022-23122 | Netatalk stack-based buffer overflow | 9.8v3.1 | 4.4% | 2023-03-28 | Fix |
| CVE-2022-23121 | Netatalk improper exception handling | 9.8v3.1 | 8.6% | 2023-03-28 | Fix |
| CVE-2022-3686 | SDM600 API permission check | 4.8CNA v3.1 | 1.4% | 2023-03-28 | Fix |
| CVE-2022-3685 | SDM600 software privilege level | 7.5CNA v3.1 | 0.3% | 2023-03-28 | Fix |
| CVE-2022-3684 | Hitachi Energy SDM600 web services denial of service | 7.5CNA v3.1 | 0.6% | 2023-03-28 | Fix |
| CVE-2022-3683 | SDM600 API web services authorization validation | 7.7CNA v3.1 | 0.5% | 2023-03-28 | Fix |
| CVE-2022-3682 | SDM600 file permission validation | 9.9CNA v3.1 | 0.8% | 2023-03-28 | Fix |
| CVE-2022-1230 | Samsung Galaxy S21 open redirect | 3.9v3.1 | 0.4% | 2023-03-28 | Fix |
| CVE-2022-1229 | Bentley MicroStation CONNECT out-of-bounds write | 7.8v3.1 | 0.9% | 2023-03-28 | Fix |
| CVE-2022-0650 | TP-Link TL-WR940N stack-based buffer overflow | 8.0v3.1 | 0.7% | 2023-03-28 | |
| CVE-2022-0194 | Netatalk stack-based buffer overflow | 9.8v3.1 | 4.4% | 2023-03-28 | Fix |
| CVE-2022-48429 | JetBrains Hub cross-site scripting | 4.6CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2022-48428 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 68.0% | 2023-03-27 | Fix |
| CVE-2022-48427 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-03-27 | Fix |
| CVE-2022-48426 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-03-27 | Fix |
| CVE-2022-48361 | Huawei HarmonyOS AOD theme file path traversal | 5.3v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-48360 | Huawei HarmonyOS file permission control detects in the facial recognition module | 7.5v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-48359 | Huawei HarmonyOS arbitrary disk modification vulnerability exists in the recovery mode | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48358 | Huawei HarmonyOS abnormal redirection vulnerability in BatteryHealthActivity | 7.4v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2022-48357 | Huawei HarmonyOS Double Fetch vulnerability in some products | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48356 | Huawei HarmonyOS improper input validation | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48355 | Huawei HarmonyOS heap out-of-bounds write vulnerability in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2022-48354 | Huawei HarmonyOS heap out-of-bounds write vulnerability in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2022-48353 | Huawei HarmonyOS improper privilege management | 9.8v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48352 | Huawei HarmonyOS data initialization issues on certain phones | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48351 | Huawei HarmonyOS configuration defects in the secure OS module | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48350 | Unauthorized file access vulnerability in the Huawei Messaging app | 7.5v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-48349 | Huawei HarmonyOS spoofing vulnerability in control components | 9.1v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48348 | Huawei HarmonyOS unauthorized read vulnerability in the MediaProvider module | 9.1v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-48347 | Huawei HarmonyOS unstrict permission verification vulnerability in the MediaProvider module | 7.5v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-48346 | Huawei HarmonyOS logic bypass vulnerability in the HwContacts module | 7.5v3.1 | 0.5% | 2023-03-27 | Fix |
| CVE-2022-48291 | Huawei HarmonyOS pairing authentication bypass vulnerability in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2022-47925 | Insufficient input validation in the endpoint of the csaf-validator-service | 7.5v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2022-47924 | Arbitrary code execution using the validate function of csaf-validator-lib | 6.5v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2022-47146 | Real Estate 7 WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-46843 | Woocommerce Vietnam Checkout WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-46416 | Parrot Bebop resource exhaustion | 5.9NVD v3.1 | 0.9% | 2023-03-27 | |
| CVE-2022-46415 | DJI Spark Wi-Fi DHCP address pool vulnerability | 5.9NVD v3.1 | 0.9% | 2023-03-27 | |
| CVE-2022-41354 | Linux Foundation argo-cd Argo CD v2.4.12 and below improper access control | 4.3v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2022-39043 | Juiker app information leakage | 2.4CNA v3.1 | 0.3% | 2023-03-27 | Fix |
| CVE-2022-32199 | Scriptcase path traversal | 6.5v3.1 | 1.7% | 2023-03-27 | Exploit code |
| CVE-2022-30705 | WordPress Ping Optimizer plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-03-27 | Fix |
| CVE-2022-4126 | ABB RCCMD use of default password | 9.6CNA v3.1 | 0.6% | 2023-03-27 | Fix |
| CVE-2022-3116 | Heimdal Software Kerberos null pointer dereference | 7.5NVD v3.1 | 0.9% | 2023-03-27 | Fix |
| CVE-2022-2237 | Keycloak-connect contains open redirect vulnerability in the Node.js adapter | 6.1v3.1 | 0.4% | 2023-03-27 | Fix |
| CVE-2022-47502 | Apache OpenOffice: Macro URL arbitrary script execution | 7.8v3.1 | 1.0% | 2023-03-24 | Fix |
| CVE-2022-45597 | Componentspace saml improper certificate validation | 9.8v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2022-42948 | Fortra Cobalt Strike User interface remote code execution | 9.8v3.1 | 2.7% | 2023-03-24 | KEVFix |
| CVE-2022-42528 | Android shared_mem.c logic flaw | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2022-42500 | Android sced.cpp command execution | 6.7v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2022-42499 | Android sms_MmConManagement.c out-of-bounds write | 9.8v3.1 | 0.7% | 2023-03-24 | Fix |
| CVE-2022-42498 | Android Pixel cellular firmware out-of-bounds write | 9.8v3.1 | 0.7% | 2023-03-24 | Fix |
| CVE-2022-40208 | Moodle may allow students to bypass sequential navigation during a quiz attempt | 4.3NVD v3.1 | 0.6% | 2023-03-24 | Fix |
| CVE-2022-38745 | Apache OpenOffice: Empty entry in Java class path | 7.8v3.1 | 0.9% | 2023-03-24 | Fix |
| CVE-2022-28495 | TOTOLINK CP900 OS command injection | 9.8v3.1 | 2.4% | 2023-03-24 | |
| CVE-2022-20542 | Android types.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2022-20532 | Android MPEG4Extractor.cpp out-of-bounds read | 9.8v3.1 | 0.5% | 2023-03-24 | Fix |
| CVE-2022-20499 | Android denial of service | 5.5v3.1 | 0.2% | 2023-03-24 | Fix |
| CVE-2022-20467 | Android BluetoothOppUtility.java information disclosure | 5.5v3.1 | 0.1% | 2023-03-24 | Fix |
| CVE-2022-47589 | CTT Expresso para WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2022-47431 | Open RDW kenteken voertuiginformatie WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2022-47173 | nasirahmed Advanced Form Integration plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2022-47145 | Blockonomics WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-03-23 | Fix |
| CVE-2022-45843 | Smart Slider 3 WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2022-44742 | Community Events WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-23 | Fix |
| CVE-2022-36413 | Zoho ManageEngine ADSelfService Plus missing brute-force protection | 9.1v3.1 | 3.1% | 2023-03-23 | Fix |
| CVE-2022-30037 | XunRuiCMS inclusion of untrusted functionality | 7.2v3.1 | 0.9% | 2023-03-23 | |
| CVE-2022-28497 | TOTOLINK CP900 command injection | 9.8v3.1 | 1.4% | 2023-03-23 | |
| CVE-2022-28496 | TOTOLINK CP900 command injection | 9.8v3.1 | 1.4% | 2023-03-23 | |
| CVE-2022-28494 | TOTOLINK CP900 OS command injection | 9.8v3.1 | 2.6% | 2023-03-23 | |
| CVE-2022-28493 | TOTOLINK CP900 Telnet service vulnerability | 9.8v3.1 | 0.7% | 2023-03-23 | |
| CVE-2022-28492 | TOTOLINK CP900 login authentication bypass | 9.8v3.1 | 1.3% | 2023-03-23 | |
| CVE-2022-28491 | TOTOLINK CP900 OS command injection | 9.8v3.1 | 4.7% | 2023-03-23 | |
| CVE-2022-22512 | Varta: Multiple devices prone to hard-coded credentials | 9.8v3.1 | 0.7% | 2023-03-23 | Fix |
| CVE-2022-4224 | CODESYS: Exposure of resource to wrong sphere in CODESYS V3 | 8.8v3.1 | 0.9% | 2023-03-23 | Fix |
| CVE-2022-3146 | tripleo-ansible may disclose important configuration details from an OpenStack deployment | 5.5v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2022-3101 | tripleo-ansible may disclose important configuration details from an OpenStack deployment | 5.5v3.1 | 0.2% | 2023-03-23 | Fix |
| CVE-2022-45634 | Megaeis Dbd+ information disclosure | 4.3v3.1 | 0.7% | 2023-03-22 | |
| CVE-2022-45004 | Gophish vulnerable to cross-site scripting via crafted landing page | 6.1v3.1 | 0.6% | 2023-03-22 | Exploit codeFix |
| CVE-2022-45003 | Gophish vulnerable to denial of service via crafted payload involving autofocus | 7.5v3.1 | 1.0% | 2023-03-22 | Exploit codeFix |
| CVE-2022-43863 | IBM QRadar SIEM privilege escalation | 6.7CNA v3.1 | 0.7% | 2023-03-22 | Fix |
| CVE-2022-37940 | HPE FlexFabric 5700 Switch Series open redirect | 5.3CNA v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2022-4095 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-03-22 | Fix |
| CVE-2022-46300 | VISAM VBASE Automation Base XML external entity injection | 5.5v3.1 | 4.1% | 2023-03-21 | Fix |
| CVE-2022-46286 | VISAM VBASE Automation Base information disclosure | 5.5v3.1 | 1.8% | 2023-03-21 | Fix |
| CVE-2022-45637 | Megafeis Bofei Dbd+ weak password recovery | 9.8v3.1 | 0.8% | 2023-03-21 | |
| CVE-2022-45636 | Megafeis Bofei Dbd+ missing authorization | 8.1v3.1 | 0.7% | 2023-03-21 | |
| CVE-2022-45635 | Megafeis Bofei Dbd+ weak password requirements | 7.5v3.1 | 0.8% | 2023-03-21 | |
| CVE-2022-45468 | VISAM VBASE Automation Base XML external entity injection | 5.5v3.1 | 1.8% | 2023-03-21 | Fix |
| CVE-2022-45121 | VISAM VBASE Automation Base XML external entity injection | 5.5v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2022-43512 | VISAM VBASE Automation Base XML external entity injection | 5.5v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2022-42485 | Gallery with thumbnail slider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-21 | Fix |
| CVE-2022-42334 | Xen resource exhaustion | 6.5v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2022-42333 | Xen resource exhaustion | 8.6v3.1 | 1.2% | 2023-03-21 | Fix |
| CVE-2022-42332 | Xen shadow paging log-dirty mode use-after-free | 7.8v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2022-42331 | Xen 32-bit SYSCALL entry path vulnerability | 5.5v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2022-41831 | Glossary WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-21 | |
| CVE-2022-41785 | Photo Gallery Image Gallery by Ape WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-21 | |
| CVE-2022-41696 | VISAM VBASE Automation Base XML external entity injection | 5.5v3.1 | 0.3% | 2023-03-21 | Fix |
| CVE-2022-38458 | NETGEAR Orbi Router RBR750 cleartext transmission of sensitive information | 5.9v3.1 | 0.6% | 2023-03-21 | |
| CVE-2022-38452 | NETGEAR Orbi Router RBR750 hidden telnet service functionality command execution | 8.8v3.1 | 2.1% | 2023-03-21 | |
| CVE-2022-37337 | NETGEAR Orbi Router RBR750 access control functionality command execution | 8.8NVD v3.1 | 2.8% | 2023-03-21 | |
| CVE-2022-36429 | NETGEAR Orbi Satellite RBS750 ubus backend communications functionality command execution | 7.2v3.1 | 2.0% | 2023-03-21 | |
| CVE-2022-47592 | MagicForm WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-20 | |
| CVE-2022-47591 | Map Multi Marker WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-03-20 | |
| CVE-2022-45124 | WellinTech KingHistorian User authentication functionality information disclosure | 7.5v3.1 | 13.4% | 2023-03-20 | Fix |
| CVE-2022-43663 | WellinTech KingHistorian buffer overflow | 9.8v3.1 | 14.0% | 2023-03-20 | Fix |
| CVE-2022-4933 | ATM Consulting dolibarr_module_quicksupplierprice interface.php upatePrice SQL injection | 9.8v3.1 | 0.6% | 2023-03-20 | |
| CVE-2022-4148 | WP OAuth Server WordPress plugin Subscriber+ arbitrary client deletion | 4.3NVD v3.1 | 0.3% | 2023-03-20 | Fix |
| CVE-2022-3894 | WP OAuth Server WordPress plugin arbitrary post deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2023-03-20 | Fix |
| CVE-2022-48425 | Linux kernel release of an invalid pointer | 7.8v3.1 | 0.3% | 2023-03-19 | Fix |
| CVE-2022-48424 | Linux kernel NTFS3 driver vulnerability | 7.8v3.1 | 0.3% | 2023-03-19 | Fix |
| CVE-2022-48423 | Linux kernel out-of-bounds write | 7.8NVD v3.1 | 0.3% | 2023-03-19 | Fix |
| CVE-2022-48422 | ONLYOFFICE Document Server uncontrolled search path | 7.8v3.1 | 0.3% | 2023-03-19 | |
| CVE-2022-46867 | Universal Star Rating WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-17 | |
| CVE-2022-46854 | Launchpad Coming Soon and Maintenance Mode WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-17 | |
| CVE-2022-45817 | GC Testimonials WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-03-17 | |
| CVE-2022-45814 | WP Calendar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-17 | |
| CVE-2022-43461 | Slideshow SE WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-17 | Fix |
| CVE-2022-43606 | EIPStackGroup OpENer uninitialized pointer access | 7.5v3.1 | 8.0% | 2023-03-16 | |
| CVE-2022-43605 | EIPStackGroup OpENer out-of-bounds write | 9.8v3.1 | 14.4% | 2023-03-16 | |
| CVE-2022-43604 | EIPStackGroup OpENer out-of-bounds write | 9.8v3.1 | 14.4% | 2023-03-16 | |
| CVE-2022-43441 | Ghost Foundation node-sqlite3 sqlite vulnerable to code execution due to object coercion | 9.8v3.1 | 2.4% | 2023-03-16 | Fix |
| CVE-2022-41554 | Slideshow SE WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2022-40699 | Yet Another Stars Rating WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2022-38971 | themekraft Post Form stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2022-38063 | Social Login WP WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-16 | |
| CVE-2022-34423 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34422 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34421 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34420 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34419 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34418 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34417 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34416 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34415 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34414 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34413 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34412 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34411 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34410 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34409 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34408 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34407 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-34406 | Dell PowerEdge Platform arbitrary code execution | 7.5CNA v3.1 | 0.2% | 2023-03-16 | Fix |
| CVE-2022-26080 | Easily guessable session ID's in NE843 Pulsar Plus Controller | 6.3CNA v3.1 | 0.4% | 2023-03-16 | Fix |
| CVE-2022-4009 | Octopus Deploy Octopus Server command injection | 8.8v3.1 | 0.7% | 2023-03-16 | Fix |
| CVE-2022-47427 | My Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-15 | Fix |
| CVE-2022-46774 | IBM Maximo Application Suite Manage application incorrect default permissions | 5.4CNA v3.1 | 0.3% | 2023-03-15 | Fix |
| CVE-2022-46773 | IBM Robotic Process Automation credential pools improper authentication | 4.3CNA v3.1 | 0.5% | 2023-03-15 | Fix |
| CVE-2022-45155 | SUSE openSUSE Factory obs-service-go_modules: Arbitrary directory delete | 5.5CNA v3.1 | 0.2% | 2023-03-15 | Fix |
| CVE-2022-44580 | Plugin for Google Reviews WordPress plugin SQL injection | 8.8NVD v3.1 | 0.6% | 2023-03-15 | Fix |
| CVE-2022-43874 | IBM App Connect Enterprise Certified Container web UI cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2022-38456 | Ajax Search Lite WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-03-15 | Fix |
| CVE-2022-37402 | AFS Analytics WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2022-34148 | JetBackup WordPress plugin cross-site scripting | 4.8v3.1 | 0.4% | 2023-03-15 | Fix |
| CVE-2022-4313 | Tenable.io, Tenable.sc and Nessus uncontrolled search path | 8.8NVD v3.1 | 1.2% | 2023-03-15 | |
| CVE-2022-47595 | WP Google Maps WordPress plugin path traversal | 6.5v3.1 | 0.8% | 2023-03-14 | Fix |
| CVE-2022-47443 | Multi Rating WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-47422 | WordPress Stripe Donation and Payment plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-47171 | IP Vault WP Firewall WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2022-47163 | WP CSV to Database WordPress plugin cross-site request forgery (CSRF) | 7.5v3.1 | 0.2% | 2023-03-14 | |
| CVE-2022-47162 | DH Anti AdBlocker WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-47155 | Slider by Supsystic WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-47154 | CSS JS Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-47147 | ipBlockList WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | |
| CVE-2022-47143 | Multiple Page Generator Plugin MPG WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-47141 | WP Dynamic Keywords Injector WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-14 | Fix |
| CVE-2022-39216 | Combodo iTop's weak password reset token leads to account takeover | 7.4CNA v3.1 | 0.9% | 2023-03-14 | Fix |
| CVE-2022-39214 | Authenticated users of Combodo iTop can take over any account | 9.6CNA v3.1 | 25.6% | 2023-03-14 | Fix |
| CVE-2022-23791 | XSS in Firmanet Software and Technology Customer Relation Manager | 6.1v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2022-23790 | XSS in Firmanet Software and Technology Customer Relation Manager | 6.1v3.1 | 0.4% | 2023-03-14 | Fix |
| CVE-2022-47440 | My Tickets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-13 | Fix |
| CVE-2022-47166 | Void Contact Form 7 Widget For Elementor Page Builder WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-03-13 | Fix |
| CVE-2022-38074 | WP Statistics WordPress plugin SQL injection | 8.8NVD v3.1 | 0.7% | 2023-03-13 | Fix |
| CVE-2022-31474 | iThemes BackupBuddy path traversal | 7.5v3.1 | 63.8% | 2023-03-13 | NucleiFix |
| CVE-2022-4661 | Woo Products Widgets For Elementor WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2022-4652 | Video Background WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2022-4466 | WordPress Infinite Scroll - Ajax Load More plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2022-2259 | Octopus Deploy Octopus Server improper access control | 4.3v3.1 | 0.4% | 2023-03-13 | Fix |
| CVE-2022-2258 | Octopus Deploy Octopus Server Tagsets vulnerability | 4.3v3.1 | 0.5% | 2023-03-13 | Fix |
| CVE-2022-48367 | ibexa Kernel object state limitation has no effect | 9.8v3.1 | 0.7% | 2023-03-12 | Fix |
| CVE-2022-48366 | Timing attack in eZ Platform Ibexa | 3.7v3.1 | 0.5% | 2023-03-12 | Fix |
| CVE-2022-48365 | Company admin role gives excessive privileges in eZ Platform Ibexa | 7.2v3.1 | 0.9% | 2023-03-12 | Fix |
| CVE-2022-48111 | Siri-informatica WI400 check_login function of SIPE s.r.l cross-site scripting | 6.1v3.1 | 0.6% | 2023-03-10 | |
| CVE-2022-47484 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47483 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47482 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47481 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47480 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47479 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47478 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47477 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47476 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47475 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47474 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47473 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47472 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47471 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47462 | UNISOC chipsets missing authorization | 6.7v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47461 | UNISOC chipsets missing authorization | 6.7v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47460 | UNISOC chipsets use-after-free | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47459 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47458 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47457 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47456 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47455 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47454 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-47453 | UNISOC chipsets wcn service denial of service | 5.5v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-44574 | Ivanti Avalanche improper authentication | 7.5v3.1 | 62.4% | 2023-03-10 | Fix |
| CVE-2022-43902 | IBM MQ denial of service | 6.5CNA v3.1 | 0.8% | 2023-03-10 | Fix |
| CVE-2022-40540 | Qualcomm Snapdragon buffer copy without checking the size of input in Linux Kernel | 8.4CNA v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2022-40539 | Qualcomm Snapdragon improper validation of array index in Automotive Android OS | 8.4CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-40537 | Qualcomm Snapdragon improper validation of array index in Bluetooth host | 7.3CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-40535 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-40531 | Qualcomm Snapdragon incorrect type conversion in WLAN | 8.4CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-40530 | Qualcomm Snapdragon integer overflow to buffer overflow in WLAN | 8.4CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-40527 | Qualcomm Snapdragon reachable assertion in WLAN Embedded SW | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-40515 | Qualcomm Snapdragon double free in Video | 7.3CNA v3.1 | 0.3% | 2023-03-10 | Fix |
| CVE-2022-37939 | HPE Superdome Flex servers information disclosure | 2.3CNA v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2022-33309 | Qualcomm Snapdragon buiffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-33278 | Qualcomm Snapdragon buffer copy without checking the size of input in HLOS | 7.8CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-33272 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-33260 | Qualcomm Snapdragon stack based buffer overflow in Core | 5.9CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-33257 | Qualcomm Snapdragon time-of-check time-of-use race condition in Core | 9.3CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-33256 | Qualcomm Snapdragon improper validation of array index in Multi-mode call processor | 9.8CNA v3.1 | 0.5% | 2023-03-10 | Fix |
| CVE-2022-33254 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-33250 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-33245 | Qualcomm Snapdragon use-after-free in WLAN | 6.7CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-33244 | Qualcomm Snapdragon reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-33242 | Improper authentication in Qualcomm IPC | 7.8CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-33213 | Qualcomm Snapdragon memory corruption in MODEM | 7.5CNA v3.1 | 0.4% | 2023-03-10 | Fix |
| CVE-2022-25709 | Qualcomm Snapdragon use of out-of-range pointer offset in Data Modem | 8.4CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-25705 | Qualcomm Snapdragon integer overflow to buffer overflow in Modem | 7.8CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-25694 | Qualcomm Snapdragon use of out-of-range pointer offset in MODEM | 8.4CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-25655 | Qualcomm Snapdragon buffer copy without checking the size of input in WLAN HAL | 8.4CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-22075 | Qualcomm Snapdragon information exposure in Graphics | 6.2CNA v3.1 | 0.1% | 2023-03-10 | Fix |
| CVE-2022-20929 | Cisco Enterprise NFV Infrastructure Software improper signature verification | 7.8CNA v3.1 | 0.2% | 2023-03-10 | Fix |
| CVE-2022-29056 | Fortinet FortiMail missing brute-force protection | 3.5CNA v3.1 | 1.8% | 2023-03-09 | Exploit codeFix |
| CVE-2022-4462 | GitLab Discord webhook API response vulnerability | 5.0CNA v3.1 | 0.7% | 2023-03-09 | Fix |
| CVE-2022-4331 | GitLab improper access control | 5.7CNA v3.1 | 0.7% | 2023-03-09 | Fix |
| CVE-2022-4317 | GitLab DAST open redirect | 5.0CNA v3.1 | 0.5% | 2023-03-09 | Fix |
| CVE-2022-4289 | GitLab Prometheus integration vulnerability | 6.4CNA v3.1 | 0.7% | 2023-03-09 | Fix |
| CVE-2022-3767 | GitLab DAST improper input validation | 7.7CNA v3.1 | 0.8% | 2023-03-09 | Fix |
| CVE-2022-3758 | GitLab incorrect default permissions | 5.4CNA v3.1 | 0.6% | 2023-03-09 | Fix |
| CVE-2022-3381 | GitLab open redirect | 4.3CNA v3.1 | 0.6% | 2023-03-09 | Fix |
| CVE-2022-46752 | Dell CPG BIOS improper authorization | 4.6CNA v3.1 | 0.3% | 2023-03-08 | Fix |
| CVE-2022-46394 | Arm Avalon GPU Kernel Driver use-after-free | 8.8v3.1 | 0.7% | 2023-03-08 | Fix |
| CVE-2022-4315 | GitLab incorrect authorization | 5.0CNA v3.1 | 0.8% | 2023-03-08 | Fix |
| CVE-2022-4007 | GitLab cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-03-08 | Fix |
| CVE-2022-46257 | GitHub Enterprise Server Actions runner groups API information disclosure | 4.3v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2022-45861 | Fortinet FortiOS uninitialized pointer access | 6.4CNA v3.1 | 0.8% | 2023-03-07 | Fix |
| CVE-2022-42476 | Fortinet FortiOS relative path traversal | 7.8CNA v3.1 | 0.2% | 2023-03-07 | Fix |
| CVE-2022-41333 | Fortinet FortiRecorder resource exhaustion | 6.8CNA v3.1 | 7.2% | 2023-03-07 | Exploit codeFix |
| CVE-2022-41329 | Fortinet FortiProxy information disclosure | 5.2CNA v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2022-41328 | Fortinet FortiOS path traversal | 6.5CNA v3.1 | 10.7% | 2023-03-07 | KEVFix |
| CVE-2022-40676 | Fortinet FortiNAC cross-site scripting | 7.1CNA v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2022-39953 | Fortinet FortiNAC improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-03-07 | Fix |
| CVE-2022-39951 | Fortinet FortiWeb OS command injection | 7.2CNA v3.1 | 1.7% | 2023-03-07 | Fix |
| CVE-2022-27490 | Fortinet FortiManager information disclosure | 5.1CNA v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2022-22297 | Fortinet FortiRecorder incomplete filtering | 5.2CNA v3.1 | 0.2% | 2023-03-07 | Fix |
| CVE-2022-4932 | Total Upkeep WordPress plugin missing authorization authenticated information disclosure | 4.3v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2022-4931 | BackupWordPress WordPress plugin information disclosure | 4.3v3.1 | 0.5% | 2023-03-07 | Fix |
| CVE-2022-3760 | Mia Technology MİA-MED SQL command improper neutralization | 9.8v3.1 | 0.6% | 2023-03-07 | Fix |
| CVE-2022-48364 | Joinmastodon mastodon improper authentication | 4.3v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2022-46395 | Arm Avalon GPU Kernel Driver use-after-free | 8.8v3.1 | 2.7% | 2023-03-06 | Exploit codeFix |
| CVE-2022-45142 | samba improper integrity check validation | 7.5NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2022-45141 | Samba Active Directory Kerberos ticket encryption vulnerability | 9.8NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2022-44875 | Kioware cross-site scripting | 5.4v3.1 | 0.6% | 2023-03-06 | Exploit codeFix |
| CVE-2022-42248 | QlikView cross-site scripting | 5.4v3.1 | 0.4% | 2023-03-06 | Exploit code |
| CVE-2022-4930 | nuxsmin sysPass URL cross-site scripting | 5.4v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2022-4929 | icplayer tts-utils.js cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2022-4928 | icplayer presenter.js AddonText_Selection_create cross-site scripting | 6.1v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2022-4904 | c-ares stack-based buffer overflow | 8.6NVD v3.1 | 1.2% | 2023-03-06 | Fix |
| CVE-2022-4862 | XSS vulnerability in M-Files Web | 5.0CNA v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2022-4328 | WooCommerce Checkout Field Manager WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 4.4% | 2023-03-06 | NucleiFix |
| CVE-2022-4265 | Replyable WordPress plugin Subscriber+ PHP object injection | 8.8NVD v3.1 | 0.5% | 2023-03-06 | Fix |
| CVE-2022-4134 | OpenStack Glance inclusion of functionality from untrusted control sphere | 2.8NVD v3.1 | 0.3% | 2023-03-06 | Fix |
| CVE-2022-3854 | Red Hat Ceph Storage RGW denial of service | 6.5v3.1 | 0.6% | 2023-03-06 | Fix |
| CVE-2022-3707 | Linux kernel A double free | 5.5NVD v3.1 | 0.2% | 2023-03-06 | Fix |
| CVE-2022-3424 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.2% | 2023-03-06 | Fix |
| CVE-2022-3284 | M-Files New Web insecure way of passing a download key | 6.5CNA v3.1 | 0.7% | 2023-03-06 | Fix |
| CVE-2022-3277 | openstack-neutron uncontrolled resource consumption flaw | 6.5NVD v3.1 | 1.1% | 2023-03-06 | Fix |
| CVE-2022-2178 | XSS in Saysis' Starcities | 6.1v3.1 | 0.4% | 2023-03-06 | Fix |
| CVE-2022-4927 | ualbertalib NEOSDiscovery _refworks.html.erb reverse tabnabbing | 6.1v3.1 | 0.5% | 2023-03-05 | Fix |
| CVE-2022-47665 | struktur libde265 out-of-bounds write | 7.8v3.1 | 0.3% | 2023-03-03 | Fix |
| CVE-2022-47664 | struktur libde265 buffer overflow | 7.8v3.1 | 0.3% | 2023-03-03 | Fix |
| CVE-2022-46973 | anji-plus AJ-Report server-side request forgery | 9.8v3.1 | 0.8% | 2023-03-03 | |
| CVE-2022-45988 | Starsoftcomm Coocare improper privilege management | 7.8v3.1 | 0.4% | 2023-03-03 | Exploit code |
| CVE-2022-45553 | Zbt WE1626 code injection | 9.8v3.1 | 1.1% | 2023-03-03 | |
| CVE-2022-45552 | Zbt WE1626 Shenzhen Zhiboton Electronics ZBT insecure permissions | 7.5v3.1 | 0.7% | 2023-03-03 | |
| CVE-2022-45551 | Zbt WE1626 missing authentication | 9.8v3.1 | 23.5% | 2023-03-03 | |
| CVE-2022-41862 | PostgreSQL information disclosure | 3.7NVD v3.1 | 0.6% | 2023-03-03 | Fix |
| CVE-2022-4645 | libtiff out-of-bounds read | 6.8CNA v3.1 | 0.4% | 2023-03-03 | Fix |
| CVE-2022-2837 | coreDNS vulnerable to improper restriction of communication channel to intended endpoints | 6.1NVD v3.1 | 0.4% | 2023-03-03 | |
| CVE-2022-2835 | coreDNS vulnerable to improper restriction of communication channel to intended endpoints | 4.4NVD v3.1 | 0.2% | 2023-03-03 | |
| CVE-2022-46501 | Accruent Maintenance Connection SQL injection | 9.8v3.1 | 0.6% | 2023-03-02 | |
| CVE-2022-40633 | Rittal CMC III improper access control | 4.6v3.1 | 0.3% | 2023-03-02 | Fix |
| CVE-2022-38734 | Denial of Service vulnerability in StorageGRID denial of service | 7.5v3.1 | 0.6% | 2023-03-02 | Fix |
| CVE-2022-35645 | IBM Maximo Asset Management cross-site scripting | 6.4CNA v3.1 | 0.5% | 2023-03-02 | Fix |
| CVE-2022-48310 | Sophos Connect Client cleartext storage of sensitive information | 5.5CNA v3.1 | 0.1% | 2023-03-01 | Fix |
| CVE-2022-48309 | Sophos Connect Client cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2022-47148 | WooCommerce PDF Invoices and Packing Slips WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-46806 | Cart All In One For WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-46805 | Conditional Payments for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-46798 | WooLentor WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-46797 | Conversios Google Analytics and Product Feed Manager plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-45804 | Robo Gallery WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-45608 | ThingsBoard improper privilege management | 8.8v3.1 | 0.9% | 2023-03-01 | |
| CVE-2022-45068 | Mercado Pago payments for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2022-40198 | TeraWallet For WooCommerce WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-39228 | Observable response discrepancy in vantage6 | 5.3CNA v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2022-38468 | NextGEN Gallery WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-38220 | Quest KACE Systems Management Appliance cross-site scripting | 6.1v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2022-37938 | HPE Serviceguard Unauthenticated server-side request forgery | 9.8v3.1 | 0.6% | 2023-03-01 | Fix |
| CVE-2022-37937 | HPE Serviceguard Pre-auth memory corruption | 9.8v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2022-37936 | HPE Serviceguard Serviceguard Manager deserialization of untrusted data | 9.8v3.1 | 0.8% | 2023-03-01 | Fix |
| CVE-2022-37935 | HPE OneView for VMware vCenter information disclosure | 5.5v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-36021 | Redis string pattern matching can be abused to achieve denial of service | 5.5CNA v3.1 | 59.8% | 2023-03-01 | Fix |
| CVE-2022-27677 | AMD Ryzen™ Master improper privilege management | 7.8v3.1 | 0.2% | 2023-03-01 | Fix |
| CVE-2022-27672 | AMD 1st Gen AMD EPYC™ Processors information disclosure | 4.7v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2022-20952 | Cisco Secure Web Appliance improper input validation | 5.3CNA v3.1 | 0.7% | 2023-03-01 | Fix |
| CVE-2022-4901 | Sophos Connect Client stored cross-site scripting | 3.3CNA v3.1 | 0.3% | 2023-03-01 | Fix |
| CVE-2022-3294 | Kubernetes node address isn't always verified when proxying | 6.6CNA v3.1 | 1.6% | 2023-03-01 | Exploit codeFix |
| CVE-2022-3162 | Kubernetes Unauthorized read of Custom Resources | 6.5CNA v3.1 | 1.2% | 2023-03-01 | Fix |
| CVE-2022-47612 | Participants Database WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2022-47179 | OWM Weather WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2022-47076 | Smartofficepayroll Smart Office DisplayParallelLogData.aspx information disclosure | 7.5v3.1 | 6.2% | 2023-02-28 | Exploit code |
| CVE-2022-47075 | An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx. | 7.5v3.1 | 59.4% | 2023-02-28 | NucleiExploit code |
| CVE-2022-43459 | Forms by CaptainForm WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-28 | |
| CVE-2022-41727 | Denial of service via crafted TIFF Image in golang.org/x/Image/TIFF | 5.5v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2022-41725 | Excessive resource consumption in mime/multipart | 7.5v3.1 | 1.2% | 2023-02-28 | Fix |
| CVE-2022-41724 | Panic on large handshake records in crypto/tls | 7.5v3.1 | 1.1% | 2023-02-28 | Fix |
| CVE-2022-41723 | Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net | 7.5v3.1 | 4.6% | 2023-02-28 | Fix |
| CVE-2022-41722 | path traversal on Windows in path/filepath | 7.5v3.1 | 1.7% | 2023-02-28 | Fix |
| CVE-2022-23240 | Active IQ Unified Manager for VMware vSphere improper access control | 6.5v3.1 | 0.4% | 2023-02-28 | Fix |
| CVE-2022-23239 | Active IQ Unified Manager for VMware vSphere cross-site scripting | 4.8v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2022-20551 | Android AudioFlinger.cpp privilege escalation | 6.7v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2022-20481 | Android multiple files information disclosure | 5.5v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2022-20455 | Android ZenModeHelper.java denial of service | 5.5v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2022-4895 | Hitachi Infrastructure Analytics Advisor improper certificate validation | 8.6CNA v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2022-3884 | Hitachi Ops Center Analyzer incorrect default permissions | 7.3CNA v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2022-48305 | Huawei Simba-AL00 There is an identity authentication bypass | 5.5v3.1 | 0.1% | 2023-02-27 | Fix |
| CVE-2022-48284 | HarmonyOS AILife Solution improper privilege management | 9.8v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-48283 | HarmonyOS AILife Solution improper privilege management | 9.8v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-48261 | BiSheng-WNM interpretation conflict | 7.5v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-48260 | BiSheng-WNM There is a buffer overflow | 7.5v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-48259 | BiSheng-WNM There is a system command injection | 9.8v3.1 | 0.9% | 2023-02-27 | Fix |
| CVE-2022-48255 | BiSheng-WNM There is a system command injection | 9.8v3.1 | 1.1% | 2023-02-27 | Fix |
| CVE-2022-48254 | Leia-B29 improper authentication | 4.6v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-48230 | BiSheng-WNM interpretation conflict | 7.5v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-46723 | Apple macOS out-of-bounds write | 9.8v3.1 | 0.9% | 2023-02-27 | Fix |
| CVE-2022-46713 | Apple macOS race condition | 4.7v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-46712 | Apple macOS use-after-free | 7.8v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2022-46705 | Apple macOS handling of URLs spoofing | 4.3v3.1 | 1.0% | 2023-02-27 | Fix |
| CVE-2022-46704 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-45697 | Razer Central arbitrary file deletion | 7.8v3.1 | 0.3% | 2023-02-27 | |
| CVE-2022-45140 | WAGO: Missing authentication for critical function | 9.8CNA v3.1 | 1.1% | 2023-02-27 | Fix |
| CVE-2022-45139 | WAGO: Origin validation error through CORS misconfiguration | 5.3CNA v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2022-45138 | WAGO: Missing authentication for critical function | 9.8CNA v3.1 | 0.7% | 2023-02-27 | Fix |
| CVE-2022-45137 | WAGO: Reflective cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-27 | Fix |
| CVE-2022-42838 | Apple macOS operation on a released resource | 3.3v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-42833 | Apple macOS out-of-bounds read | 7.8v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2022-42826 | Apple macOS use-after-free | 8.8v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2022-42797 | Apple Xcode injection | 7.8v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2022-40237 | IBM MQ for HPE NonStop denial of service | 6.5CNA v3.1 | 0.7% | 2023-02-27 | Fix |
| CVE-2022-34910 | Aremis 4 Nomads cleartext storage of sensitive information | 5.5v3.1 | 0.1% | 2023-02-27 | |
| CVE-2022-34909 | Aremis 4 Nomads SQL injection | 9.1v3.1 | 0.5% | 2023-02-27 | |
| CVE-2022-34908 | Aremis 4 Nomads improper authentication | 7.5v3.1 | 0.6% | 2023-02-27 | |
| CVE-2022-32949 | Apple tvOS improper privilege management | 7.8v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32906 | Apple Music cleartext transmission of sensitive information | 5.3v3.1 | 0.4% | 2023-02-27 | Fix |
| CVE-2022-32902 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32900 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32896 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32891 | Apple iOS clickjacking | 6.1v3.1 | 0.7% | 2023-02-27 | Fix |
| CVE-2022-32855 | Apple iOS and iPadOS logic flaw | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32846 | Apple Music logic flaw | 7.5v3.1 | 0.6% | 2023-02-27 | Fix |
| CVE-2022-32844 | Apple tvOS race condition | 6.3v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32836 | Apple Music information disclosure | 7.5v3.1 | 0.6% | 2023-02-27 | Fix |
| CVE-2022-32830 | Apple tvOS out-of-bounds read | 7.5v3.1 | 0.6% | 2023-02-27 | Fix |
| CVE-2022-32824 | Apple tvOS information disclosure | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-32784 | Apple Safari information disclosure | 6.5v3.1 | 0.6% | 2023-02-27 | Fix |
| CVE-2022-31405 | Mv Idigital Clinic Enterprise cleartext storage of sensitive information | 6.5v3.1 | 0.6% | 2023-02-27 | |
| CVE-2022-26760 | Apple iOS and iPadOS out-of-bounds write | 9.8v3.1 | 0.7% | 2023-02-27 | Fix |
| CVE-2022-22668 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2022-22582 | Apple macOS link following | 5.5v3.1 | 17.7% | 2023-02-27 | Exploit codeFix |
| CVE-2022-4829 | Show-Hide / Collapse-Expand WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-4795 | Galleries by Angie Makes WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-27 | |
| CVE-2022-4788 | Embed PDF WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-27 | |
| CVE-2022-4757 | List Pages Shortcode WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-4679 | Wufoo Shortcode WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2022-4550 | User Activity WordPress plugin IP spoofing | 7.5NVD v3.1 | 0.7% | 2023-02-27 | |
| CVE-2022-48363 | Linux Foundation Automotive Grade Linux reachable assertion | 7.5v3.1 | 1.2% | 2023-02-26 | Fix |
| CVE-2022-48362 | Zoho Manageengine Desktop Central path traversal | 8.8v3.1 | 8.7% | 2023-02-25 | Fix |
| CVE-2022-2024 | OS command injection in gogs/gogs | 9.8v3.1 | 97.8% | 2023-02-25 | Fix |
| CVE-2022-48345 | @braintree/sanitize-url cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-24 | Fix |
| CVE-2022-46440 | swftools out-of-bounds read | 5.5v3.1 | 0.3% | 2023-02-24 | |
| CVE-2022-44310 | Ecdh vulnerable to exposure of resource to wrong sphere | 7.5v3.1 | 0.7% | 2023-02-24 | Fix |
| CVE-2022-43923 | IBM Maximo Application Suite sensitive information in log files | 6.2CNA v3.1 | 0.2% | 2023-02-24 | Fix |
| CVE-2022-23535 | LiteDB contains deserialization of untrusted data | 7.3CNA v3.1 | 0.7% | 2023-02-24 | Fix |
| CVE-2022-4203 | OpenSSL X.509 Name Constraints Read buffer overflow | 4.9v3.1 | 1.4% | 2023-02-24 | Fix |
| CVE-2022-1607 | Cross-site scripting vulnerability in NE843 Pulsar Plus Controller | 4.6CNA v3.1 | 0.2% | 2023-02-24 | Fix |
| CVE-2022-48344 | JetBrains TeamCity cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2022-48343 | JetBrains TeamCity cross-site scripting | 5.4CNA v3.1 | 59.5% | 2023-02-23 | Fix |
| CVE-2022-48342 | JetBrains TeamCity insecure default initialization | 5.2CNA v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2022-48341 | ThingsBoard improper privilege management | 8.8v3.1 | 1.0% | 2023-02-23 | Fix |
| CVE-2022-46786 | Squaredup Dashboard Server cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2022-46785 | Squaredup Dashboard Server cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2022-46784 | Squaredup Dashboard Server open redirect | 6.1v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2022-36231 | Newspaperclub PDF Info code injection in pdf_info | 9.8v3.1 | 3.0% | 2023-02-23 | Exploit code |
| CVE-2022-4492 | Undertow client not checking server identity presented by server certificate in HTTPS connections | 7.5v3.1 | 0.6% | 2023-02-23 | Fix |
| CVE-2022-3219 | gnupg out-of-bounds write | 3.3NVD v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2022-2504 | SDD Computer Software SDD-Baro SQL command improper neutralization | 9.8v3.1 | 0.6% | 2023-02-23 | Fix |
| CVE-2022-48149 | Online Student Admission System SQL injection | 9.8v3.1 | 0.6% | 2023-02-22 | |
| CVE-2022-45600 | Aztech WMB250AC command injection | 8.8v3.1 | 2.3% | 2023-02-22 | Exploit code |
| CVE-2022-45599 | Aztech WMB250AC insufficiently protected credentials | 9.8v3.1 | 1.0% | 2023-02-22 | Exploit code |
| CVE-2022-43873 | IBM Spectrum Virtualize privilege escalation | 6.3CNA v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2022-43870 | IBM Spectrum Virtualize information disclosure | 6.5CNA v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2022-43578 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-02-22 | Fix |
| CVE-2022-41567 | TIBCO BusinessConnect stored XSS | 7.3CNA v3.1 | 0.4% | 2023-02-22 | |
| CVE-2022-41566 | TIBCO EBX Add-ons cross-site scripting (XSS) | 8.7CNA v3.1 | 0.4% | 2023-02-22 | |
| CVE-2022-41565 | TIBCO EBX cross-site scripting (XSS) | 8.7CNA v3.1 | 0.4% | 2023-02-22 | |
| CVE-2022-41217 | Cloudflow unauthenticated file upload | 9.8v3.1 | 0.7% | 2023-02-22 | Fix |
| CVE-2022-41216 | Cloudflow local file inclusion | 6.5NVD v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2022-39983 | Instantdeveloper RD3 Pro Gamma Instant Developer file upload | 9.8v3.1 | 1.4% | 2023-02-22 | |
| CVE-2022-38779 | Elastic Kibana open redirect | 6.1v3.1 | 0.5% | 2023-02-22 | Fix |
| CVE-2022-29273 | Netgate pfSense cross-site scripting | 6.1v3.1 | 59.6% | 2023-02-22 | Fix |
| CVE-2022-2883 | Octopus Deploy Octopus Server unrestricted file upload | 7.5v3.1 | 1.0% | 2023-02-22 | Fix |
| CVE-2022-48340 | glusterfs use-after-free | 7.5v3.1 | 0.9% | 2023-02-21 | Fix |
| CVE-2022-48282 | Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution | 6.6CNA v3.1 | 1.4% | 2023-02-21 | Fix |
| CVE-2022-46637 | Prolink2u PRS1841 hard-coded credentials | 9.8v3.1 | 1.5% | 2023-02-21 | Fix |
| CVE-2022-45677 | Tuition Management System tanujpatra228 Tution Management System SQL injection | 9.8v3.1 | 0.9% | 2023-02-21 | |
| CVE-2022-45564 | Znfit Home Improvement Erp Management System SQL injection | 9.8v3.1 | 0.8% | 2023-02-21 | |
| CVE-2022-31394 | hyper resource exhaustion | 7.5v3.1 | 1.1% | 2023-02-21 | Fix |
| CVE-2022-4897 | BackupBuddy WordPress plugin Multiple reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2023-02-21 | NucleiFix |
| CVE-2022-4791 | Product Slider and Carousel with Category for WooCommerce WordPress plugin stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2022-4786 | Video.js - HTML5 Video Player for WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4785 | Download Video Sidebar Widgets WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4784 | Hueman Addons WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4777 | Bootstrap Shortcodes WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4764 | Simple File Downloader WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-21 | |
| CVE-2022-4761 | Post Views Count WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-21 | |
| CVE-2022-4754 | Easy Social Box WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2022-4752 | Opening Hours WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4750 | WP Responsive Testimonials Slider And Widget WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4714 | WP Dark Mode WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2022-4669 | Page Builder: Live Composer WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-02-21 | Fix |
| CVE-2022-4666 | Markup WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4622 | Login Logout Menu WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | |
| CVE-2022-4386 | Intuitive Custom Post Order WordPress plugin arbitrary Menu order update via CSRF | 4.3NVD v3.1 | 0.3% | 2023-02-21 | Fix |
| CVE-2022-4385 | Intuitive Custom Post Order WordPress plugin Subscriber+ arbitrary Menu order update | 4.3NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2022-3353 | IEC 61850 MMS-Server vulnerability in multiple Hitachi Energy Products | 5.9CNA v3.1 | 1.1% | 2023-02-21 | Fix |
| CVE-2022-48339 | GNU Emacs command injection | 7.8v3.1 | 1.1% | 2023-02-20 | Fix |
| CVE-2022-48338 | GNU Emacs command injection | 7.3v3.1 | 1.6% | 2023-02-20 | Fix |
| CVE-2022-48337 | GNU Emacs OS command injection | 9.8v3.1 | 1.6% | 2023-02-20 | Fix |
| CVE-2022-48329 | MISP improper exception handling | 9.8v3.1 | 0.9% | 2023-02-20 | |
| CVE-2022-48328 | MISP improper exception handling | 9.8v3.1 | 1.3% | 2023-02-20 | |
| CVE-2022-48321 | Tribe29 Checkmk SSRF in agent-receiver API | 3.3NVD v3.1 | 0.3% | 2023-02-20 | Fix |
| CVE-2022-48320 | Tribe29 Checkmk CSRF in add-visual endpoint | 4.3v3.1 | 0.2% | 2023-02-20 | Fix |
| CVE-2022-48319 | Host secret disclosed in Checkmk logs | 5.5v3.1 | 0.2% | 2023-02-20 | Fix |
| CVE-2022-48318 | Tribe29 Checkmk insecure access control mechanisms for RestAPI documentation | 5.3v3.1 | 0.5% | 2023-02-20 | Fix |
| CVE-2022-48317 | Tribe29 Checkmk Insecure Termination of RestAPI Session Tokens | 9.8v3.1 | 0.5% | 2023-02-20 | Fix |
| CVE-2022-47909 | Tribe29 Checkmk LQL injection in Livestatus HTTP headers | 7.8v3.1 | 0.4% | 2023-02-20 | Fix |
| CVE-2022-46836 | Tribe29 Checkmk PHP code injection in watolib | 8.8NVD v3.1 | 1.1% | 2023-02-20 | Fix |
| CVE-2022-46303 | Tribe29 Checkmk command injection in SMS notifications | 7.5v3.1 | 1.1% | 2023-02-20 | Fix |
| CVE-2022-44216 | Sir Gnuboard missing authentication | 7.5v3.1 | 0.7% | 2023-02-20 | Fix |
| CVE-2022-3901 | Visio Globe Visioweb visioweb.js prototype pollution can results in XSS | 6.1NVD v3.1 | 0.4% | 2023-02-20 | |
| CVE-2022-40348 | Intern Record System cross-site scripting | 5.4v3.1 | 0.8% | 2023-02-18 | Exploit code |
| CVE-2022-48115 | Cross-site scripting in Jspreadsheet | 6.1v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2022-47986 | IBM Aspera Faspex code execution | 9.8CNA v3.1 | 100.0% | 2023-02-17 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2022-45701 | CommScope Arris TG2482A Firmware command injection | 8.8v3.1 | 42.3% | 2023-02-17 | Exploit code |
| CVE-2022-43930 | IBM Db2 for Linux, UNIX and Windows information disclosure | 6.2CNA v3.1 | 0.5% | 2023-02-17 | Fix |
| CVE-2022-43929 | IBM Db2 for Linux, UNIX and Windows denial of service | 4.9CNA v3.1 | 0.7% | 2023-02-17 | Fix |
| CVE-2022-43927 | IBM Db2 for Linux, UNIX and Windows information disclosure | 5.9CNA v3.1 | 0.6% | 2023-02-17 | Fix |
| CVE-2022-43579 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2022-41734 | IBM Maximo Asset Management information disclosure | 5.3CNA v3.1 | 0.5% | 2023-02-17 | Fix |
| CVE-2022-40347 | Intern Record System SQL injection | 9.8v3.1 | 5.3% | 2023-02-17 | Exploit code |
| CVE-2022-40232 | IBM Sterling B2B Integrator Standard Edition improper access control | 6.3CNA v3.1 | 0.5% | 2023-02-17 | Fix |
| CVE-2022-40231 | IBM Sterling B2B Integrator Standard Edition improper access control | 4.3CNA v3.1 | 0.6% | 2023-02-17 | Fix |
| CVE-2022-40032 | Simple Task Managing System SQL injection | 9.8v3.1 | 20.7% | 2023-02-17 | NucleiExploit code |
| CVE-2022-40021 | QVidium Amino A140 command injection | 9.8v3.1 | 1.4% | 2023-02-17 | |
| CVE-2022-36775 | IBM Security Verify Access host header injection | 6.5CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2022-34351 | IBM QRadar SIEM information disclosure | 5.9CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2022-32972 | Infoblox Bloxone Endpoint uncontrolled search path | 7.8v3.1 | 0.2% | 2023-02-17 | Fix |
| CVE-2022-20803 | Cisco ClamAV double free vulnerability in the OLE2 file parser | 8.6CNA v3.1 | 1.1% | 2023-02-17 | Fix |
| CVE-2022-48327 | Map-os Multiple cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-16 | |
| CVE-2022-48326 | Map-os Multiple cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-16 | |
| CVE-2022-48325 | Map-os Multiple cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-16 | |
| CVE-2022-48324 | Map-os Multiple cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-16 | |
| CVE-2022-48308 | Palantir sls-logging improper certificate host validation | 6.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-48307 | Palantir Foundry Magritte improper certificate host validation | 6.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-48306 | Gotham Chat IRC help does not validate hostnames in TLS certificates | 5.7CNA v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2022-47703 | Tianjie Cpe906-3 missing authentication | 7.5v3.1 | 0.8% | 2023-02-16 | |
| CVE-2022-44299 | Sscms Siteserver Cms path traversal | 4.9v3.1 | 0.8% | 2023-02-16 | |
| CVE-2022-43969 | Ricoh Im 2500 insufficiently protected credentials | 9.1v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-43954 | Fortinet FortiPortal sensitive information in log files | 4.1CNA v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2022-42472 | Fortinet FortiProxy http headers CRLF injection | 4.0CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-41614 | Intel(R) ON Event Series Android application insufficiently protected credentials | 5.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-41335 | Fortinet FortiSwitchManager relative path traversal | 8.6CNA v3.1 | 0.9% | 2023-02-16 | Fix |
| CVE-2022-41334 | Fortinet FortiOS cross-site scripting | 8.6CNA v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2022-41314 | Intel(R) Network Adapter installer software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-40683 | Fortinet FortiWeb double free | 7.1CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-40678 | Fortinet FortiNAC insufficiently protected credentials | 7.4CNA v3.1 | 0.1% | 2023-02-16 | Fix |
| CVE-2022-40677 | Fortinet FortiNAC command improper neutralization | 7.2CNA v3.1 | 0.8% | 2023-02-16 | Fix |
| CVE-2022-40675 | Fortinet FortiNAC cryptographic weakness | 6.0CNA v3.1 | 0.4% | 2023-02-16 | Fix |
| CVE-2022-40080 | Acer Aspire E5-475g stack-based buffer overflow | 7.8v3.1 | 0.4% | 2023-02-16 | |
| CVE-2022-39954 | Fortinet FortiNAC XML external entity injection | 6.9CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-39952 | Fortinet FortiNAC external control of a file path | 9.8CNA v3.1 | 99.8% | 2023-02-16 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-39948 | Fortinet FortiProxy improper certificate validation | 4.4CNA v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2022-38731 | Qaelum Dose path traversal | 4.3v3.1 | 0.7% | 2023-02-16 | |
| CVE-2022-38378 | Fortinet FortiOS improper privilege management | 4.0CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-38376 | Fortinet FortiNAC cross-site scripting | 5.8CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-38375 | Fortinet FortiNAC improper authorization | 8.6CNA v3.1 | 1.1% | 2023-02-16 | Fix |
| CVE-2022-38090 | Intel(R) Processors with Intel(R) Software Guard Extensions (SGX) some improper isolation | 6.0CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-38056 | Intel(R) EMA software improper neutralization | 3.8CNA v3.1 | 0.1% | 2023-02-16 | Fix |
| CVE-2022-37340 | Intel(R) QAT drivers some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-37329 | Intel(R) Quartus(R) Prime Pro and Standard Edition software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36797 | Intel(R) Ethernet 500 Series Controller drivers for VMware protection mechanism failure | 3.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36794 | Intel(R) SPS firmware improper check for exceptional conditions | 6.0CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36416 | Intel(R) Ethernet 500 Series Controller drivers for VMware protection mechanism failure | 4.4CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36398 | Intel(R) Battery Life Diagnostic Tool software uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36397 | Intel(R) QAT drivers software installer for some incorrect default permissions | 7.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36382 | Intel Ethernet Network Controllers and Adapters firmware out-of-bounds write | 6.0CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36369 | QATzip software maintained by Intel(R) some improper access control | 7.8CNA v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2022-36348 | Intel(R) SPS firmware some active debug code | 8.8CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36289 | Intel(R) Media SDK software protection mechanism failure | 2.8CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36287 | FCS Server software maintained by Intel improper error handling | 4.0CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-36278 | Intel(R) Battery Life Diagnostic Tool software insufficient control flow management | 8.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-35883 | Intel(R) Media SDK software null pointer dereference | 2.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-35729 | OpenBMC firmware out-of-bounds read | 7.5CNA v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2022-34864 | Intel(R) Trace Analyzer and Collector software out-of-bounds read | 4.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34854 | Intel(R) SUR software improper access control | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34849 | Intel(R) Iris(R) Xe MAX drivers improper error handling | 4.4CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34843 | Intel(R) Trace Analyzer and Collector software integer overflow | 4.8CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34841 | Intel(R) Media SDK software privilege escalation | 5.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34346 | Intel(R) Media SDK software out-of-bounds read | 4.8CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34157 | Intel FPGA SDK for OpenCL privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-34153 | Intel(R) Battery Life Diagnostic Tool software improper initialization | 8.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-33972 | 3rd Generation Intel(R) Xeon(R) Scalable Processors incorrect calculation | 6.1CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-33964 | Intel(R) SUR software improper input validation | 7.4CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-33946 | Intel(R) SUR software improper authentication | 5.6CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-33902 | Intel(R) Quartus Prime Pro and Standard edition software insufficient control flow management | 7.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-33892 | Intel(R) Quartus Prime Pro and Standard edition software path traversal | 7.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-33871 | Fortinet FortiWeb stack-based buffer overflow | 6.3CNA v3.1 | 0.9% | 2023-02-16 | Fix |
| CVE-2022-33869 | Fortinet FortiWAN OS command injection | 8.0CNA v3.1 | 1.3% | 2023-02-16 | Fix |
| CVE-2022-33196 | Intel Xeon Processors memory controller privilege escalation | 7.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-33190 | Intel(R) SUR software improper input validation | 7.1CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-32971 | Intel(R) SUR software improper authentication | 3.1CNA v3.1 | 0.4% | 2023-02-16 | Fix |
| CVE-2022-32764 | Intel(R) DSA software race condition | 7.5CNA v3.1 | 0.1% | 2023-02-16 | Fix |
| CVE-2022-32575 | Intel(R) Trace Analyzer and Collector software out-of-bounds write | 4.8CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-32570 | Intel(R) Quartus Prime Pro and Standard edition software improper authentication | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-32231 | Intel(R) Processors BIOS firmware for some improper initialization | 7.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-31476 | Intel(R) SUR software improper access control | 5.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-30704 | Intel(R) Processors Intel(R) TXT SINIT ACM for some improper initialization | 7.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-30692 | Intel(R) SUR software improper check for exceptional conditions | 5.9CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-30539 | Intel(R) Processors BIOS firmware for some use-after-free | 7.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-30531 | Intel(R) Iris(R) Xe MAX drivers out-of-bounds read | 4.4CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-30530 | Intel(R) DSA software protection mechanism failure | 7.8CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-30339 | Intel(R) Integrated Sensor Solution firmware for the out-of-bounds read | 6.0CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-30306 | Fortinet FortiWeb stack-based buffer overflow | 6.3CNA v3.1 | 1.0% | 2023-02-16 | Fix |
| CVE-2022-30304 | Fortinet FortiAnalyzer cross-site scripting | 4.2CNA v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2022-30303 | Fortinet FortiWeb OS command injection | 8.6CNA v3.1 | 2.5% | 2023-02-16 | Fix |
| CVE-2022-30300 | Fortinet FortiWeb relative path traversal | 6.2CNA v3.1 | 0.8% | 2023-02-16 | Fix |
| CVE-2022-30299 | Fortinet FortiWeb relative path traversal | 5.0CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-29523 | Open CAS software maintained by Intel(R) improper check for exceptional conditions | 3.3CNA v3.1 | 0.2% | 2023-02-16 | |
| CVE-2022-29514 | Intel(R) SUR software improper access control | 7.7CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-29494 | OpenBMC firmware improper input validation | 6.5CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-29493 | Integrated BMC webserver for the improper error handling | 4.5CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-29054 | Fortinet FortiOS predictable initialization vector | 3.1CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-27897 | Palantir Gotham included an endpoint that would log arbitrary sized zip files | 5.3CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-27892 | Palantir Gotham included an endpoint that would log arbitrary sized payloads | 5.3CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-27891 | Palantir Gotham active session listing information disclosure | 5.3CNA v3.1 | 0.4% | 2023-02-16 | Fix |
| CVE-2022-27890 | Palantir AtlasDB improper certificate host validation | 6.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-27808 | Intel(R) Ethernet Controller Administrative Tools drivers some insufficient control flow management | 6.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-27489 | Fortinet FortiExtender OS command injection | 7.0CNA v3.1 | 1.5% | 2023-02-16 | Fix |
| CVE-2022-27482 | Fortinet FortiADC OS command injection | 7.4CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2022-27234 | CVAT software maintained by Intel(R) server-side request forgery | 4.3CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-27170 | Intel(R) Media SDK software protection mechanism failure | 5.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26888 | Intel(R) Quartus Prime Pro and Standard edition software cross-site scripting | 2.8CNA v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2022-26843 | Intel(R) oneAPI DPC++/C++ Compiler privilege escalation | 8.3CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-26841 | Intel(R) SGX SDK software insufficient control flow management | 2.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26840 | Intel(R) Quartus Prime Pro and Standard edition software improper neutralization | 7.3CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26837 | Intel(R) Processors BIOS firmware for some improper input validation | 7.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26512 | Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26509 | Intel(R) SGX SDK software improper exception handling | 2.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26425 | Intel oneAPI Collective Communications Library privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26421 | Intel(R) oneAPI DPC++/C++ Compiler Runtime uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26345 | Intel(R) oneAPI Toolkit OpenMP uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26343 | Intel(R) Processors BIOS firmware for some improper access control | 8.2CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26115 | Fortinet FortiSandbox weak password hash | 5.4CNA v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2022-26076 | Intel(R) oneAPI Deep Neural Network (oneDNN) uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26062 | Intel(R) Trace Analyzer and Collector for Intel(R) oneAPI HPC Toolkit uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26052 | Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-26032 | Intel Distribution for Python uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-25992 | Intel(R) oneAPI Toolkits oneapi-cli insecure inherited permissions | 7.5CNA v3.1 | 0.1% | 2023-02-16 | Fix |
| CVE-2022-25987 | Intel(R) C++ Compiler Classic improper Unicode handling | 8.3CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2022-25905 | Intel oneAPI Data Analytics Library uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-21216 | Intel(R) Atom and Intel Xeon Scalable Processors insufficient access control granularity | 7.5CNA v3.1 | 0.5% | 2023-02-16 | Fix |