CVE-2022 records published after 2022
Page six of seven: records 5,001 to 6,000 of the 6,660 published after 2022, newest first. The first page carries the figures for After 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-21163 | Crypto API Toolkit for Intel(R) SGX improper access control | 8.4CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2022-3843 | WAGO: Exposure of configuration interface in unmanaged switches | 9.1v3.1 | 0.9% | 2023-02-16 | Fix |
| CVE-2022-0637 | Open redirect in PollBot | 6.1v3.1 | 0.4% | 2023-02-16 | Fix |
| CVE-2022-47508 | SolarWinds Server and Application Monitor Kerberos polling improper authentication | 7.5CNA v3.1 | 0.8% | 2023-02-15 | Fix |
| CVE-2022-47507 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 7.2% | 2023-02-15 | Fix |
| CVE-2022-47506 | SolarWinds Platform directory traversal | 7.8CNA v3.1 | 0.6% | 2023-02-15 | Fix |
| CVE-2022-47504 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 25.1% | 2023-02-15 | Fix |
| CVE-2022-47503 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 24.4% | 2023-02-15 | Fix |
| CVE-2022-47373 | Artica PFMS Pandora FMS reflected cross-site scripting in Search Functionality of module library | 6.1v3.1 | 0.3% | 2023-02-15 | Exploit codeFix |
| CVE-2022-47372 | Artica PFMS Pandora FMS stored cross-site scripting vulnerability in create event section | 5.4NVD v3.1 | 0.2% | 2023-02-15 | Fix |
| CVE-2022-46892 | Amperecomputing Ampere Altra Max improper access control | 9.8v3.1 | 0.6% | 2023-02-15 | Fix |
| CVE-2022-45587 | Xpdfreader Xpdf function gmalloc in goo/gmem.cc stack-based buffer overflow | 5.5v3.1 | 0.3% | 2023-02-15 | Fix |
| CVE-2022-45586 | Xpdfreader Xpdf function Dict::find stack-based buffer overflow | 5.5v3.1 | 0.3% | 2023-02-15 | Fix |
| CVE-2022-45546 | Screencheck Badgemaker Authentication component information disclosure | 7.5v3.1 | 0.5% | 2023-02-15 | |
| CVE-2022-45543 | DiscuzX cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-15 | |
| CVE-2022-45437 | Artica PFMS Pandora FMS stored cross-site scripting vulnerability in the reporting dashboard module | 4.8v3.1 | 0.4% | 2023-02-15 | Fix |
| CVE-2022-45436 | Artica PFMS Pandora FMS stored cross-site scripting vulnerability in network maps editor feature | 4.8v3.1 | 0.6% | 2023-02-15 | Exploit codeFix |
| CVE-2022-45154 | SUSE Linux Enterprise Server 12 suppportutils cleartext storage of sensitive information | 4.4CNA v3.1 | 0.2% | 2023-02-15 | Fix |
| CVE-2022-45153 | SUSE Linux Enterprise Module for SAP Applications 15-SP1 incorrect default permissions | 7.0CNA v3.1 | 0.2% | 2023-02-15 | Fix |
| CVE-2022-42735 | Apache ShenYu Admin ultra vires | 8.8v3.1 | 1.2% | 2023-02-15 | Fix |
| CVE-2022-42455 | ASUS Armoury Crate improper privilege management | 7.8v3.1 | 0.2% | 2023-02-15 | |
| CVE-2022-40016 | Media Server ireader media-server use-after-free | 7.5v3.1 | 0.8% | 2023-02-15 | |
| CVE-2022-38935 | Niterforum improper access control | 8.8v3.1 | 0.7% | 2023-02-15 | |
| CVE-2022-38868 | Ehoney SQL injection | 7.2v3.1 | 0.9% | 2023-02-15 | |
| CVE-2022-38867 | rttys api.go SQL injection | 8.8v3.1 | 0.9% | 2023-02-15 | |
| CVE-2022-38111 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 84.8% | 2023-02-15 | Fix |
| CVE-2022-32955 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32954 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32953 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32478 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32477 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32476 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32475 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32474 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32473 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32471 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32470 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-32469 | InsydeH2O time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2022-29557 | Relx Firco Compliance Link cross-site request forgery | 8.8v3.1 | 0.3% | 2023-02-15 | |
| CVE-2022-25978 | Cross-site scripting in usememos/memos | 6.1v3.1 | 0.5% | 2023-02-15 | Fix |
| CVE-2022-47977 | Siemens JT Open memory corruption | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2022-47936 | Siemens JT Open stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2022-46862 | Quiz And Survey Master WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2022-43469 | Corona Virus (COVID-19) Banner and Live Data WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2022-41564 | TIBCO Operational Intelligence Hawk Redtail credential exposure | 6.8CNA v3.1 | 0.5% | 2023-02-14 | |
| CVE-2022-35868 | Siemens TIA Multiuser Server V14 untrusted search path | 6.7CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2022-31808 | Siemens SiPass integrated AC5102 (ACC-G2) privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2022-22564 | Dell Unity weak cryptographic algorithm | 5.9CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2022-4286 | Reflected cross-site scripting vulnerabilities in Automation Runtime | 6.1CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2022-48323 | Sunlogin Sunflower path traversal | 9.8v3.1 | 56.8% | 2023-02-13 | NucleiEmerging Threats |
| CVE-2022-48322 | NETGEAR R6900P out-of-bounds write | 9.8v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-48110 | CKEditor cross-site scripting | 6.1v3.1 | 2.1% | 2023-02-13 | Exploit codeFix |
| CVE-2022-48077 | Genymotion Desktop uncontrolled search path | 7.8v3.1 | 0.3% | 2023-02-13 | |
| CVE-2022-47034 | PlaySMS authentication bypass | 9.8v3.1 | 0.8% | 2023-02-13 | |
| CVE-2022-45962 | OS4ED Opensis SQL injection | 6.5v3.1 | 0.9% | 2023-02-13 | |
| CVE-2022-45725 | Comfast Cf-wr610n improper input validation | 8.8v3.1 | 6.9% | 2023-02-13 | |
| CVE-2022-45724 | Comfast Cf-wr610n improper authentication | 5.4v3.1 | 0.5% | 2023-02-13 | |
| CVE-2022-45455 | Acronis Cyber Protect Home Office incomplete cleanup | 6.6CNA v3.0 | 0.1% | 2023-02-13 | Fix |
| CVE-2022-45454 | Acronis Agent information disclosure | 2.2CNA v3.0 | 0.3% | 2023-02-13 | Fix |
| CVE-2022-45285 | Vsourz Advanced CF7 DB cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-13 | |
| CVE-2022-43460 | FUJIFILM Business Innovation Driver Distributor insufficiently protected credentials | 7.5v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-41134 | Optinly WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2022-40022 | Microchip Syncserver S650 command injection | 9.8v3.1 | 92.5% | 2023-02-13 | NucleiMetasploitExploit code |
| CVE-2022-34397 | Dell Unisphere for PowerMax incorrect authorization | 6.9CNA v3.1 | 0.2% | 2023-02-13 | Fix |
| CVE-2022-25937 | Path traversal vulnerability in Glance | 6.5v3.1 | 1.1% | 2023-02-13 | Fix |
| CVE-2022-4905 | UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross-site scripting | 6.1v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-4830 | Paid Memberships Pro WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 65.0% | 2023-02-13 | Fix |
| CVE-2022-4783 | Youtube Channel Gallery WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-13 | |
| CVE-2022-4759 | GigPress WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-4745 | WP Customer Area WordPress plugin unauthorised actions via CSRF | 7.1NVD v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2022-4682 | Lightbox Gallery WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-4678 | TemplatesNext ToolKit WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-4656 | WP Visitor Statistics (Real Time Traffic) WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-4628 | Easy PayPal Buy Now Button WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-4580 | Twenty20 Image Before-After WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-4562 | Meks Flexible Shortcodes WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-4551 | Rich Table of Contents WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2022-4546 | Mapwiz WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2023-02-13 | |
| CVE-2022-4512 | Better Font Awesome WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.8% | 2023-02-13 | Fix |
| CVE-2022-4488 | Widgets on Pages WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-4473 | Widget Shortcode WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | |
| CVE-2022-4471 | YARPP - Yet Another Related Posts WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-4458 | Amr Shortcode Any Widget WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | |
| CVE-2022-4448 | GiveWP WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-13 | Fix |
| CVE-2022-4445 | FL3R FeelBox WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.1% | 2023-02-13 | |
| CVE-2022-4138 | GitLab cross-site request forgery | 6.4CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2022-3891 | WP FullCalendar WordPress plugin unauthenticated arbitrary post access | 5.3NVD v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2022-3759 | GitLab denial of service | 4.3CNA v3.1 | 1.2% | 2023-02-13 | Fix |
| CVE-2022-3411 | GitLab improper quantity validation | 6.5CNA v3.1 | 1.2% | 2023-02-13 | Fix |
| CVE-2022-3089 | EnOcean SmartServer hard-coded credentials | 9.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2022-47452 | UNISOC chipsets gnss driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47451 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.2% | 2023-02-12 | Fix |
| CVE-2022-47450 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47371 | UNISOC chipsets use-after-free | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47370 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47369 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47368 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47367 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47366 | UNISOC chipsets wlan driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47365 | UNISOC chipsets wlan driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47364 | UNISOC chipsets wlan driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47363 | UNISOC chipsets wlan driver out-of-bounds read | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47361 | UNISOC chipsets missing authorization | 7.8v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47360 | UNISOC chipsets null pointer dereference | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47359 | UNISOC chipsets null pointer dereference | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47358 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47357 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47356 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47355 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47354 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47348 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47347 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47346 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47345 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47344 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47343 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47342 | UNISOC chipsets improper array index validation | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47341 | UNISOC chipsets missing authorization | 6.7v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47339 | UNISOC chipsets missing authorization | 6.7v3.1 | 0.3% | 2023-02-12 | KCVFix |
| CVE-2022-47333 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47332 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47331 | UNISOC chipsets race condition | 4.7v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47330 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47329 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47328 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47327 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47326 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47325 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47324 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47323 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-47322 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-45091 | Cross-site scripting in Smartpower Web | 5.4v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-45090 | SQL injection in Smartpower Web | 8.8v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2022-45089 | SQL injection in Smartpower Web | 8.8v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2022-45088 | Local file inclusion in Smartpower Web | 9.8v3.1 | 0.7% | 2023-02-12 | Fix |
| CVE-2022-45087 | Cross-site scripting in Smartpower Web | 6.1v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-45086 | Cross-site scripting in Smartpower Web | 5.4v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-45085 | Server-side request forgery in Smartpower Web | 6.5v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2022-44448 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-44447 | UNISOC chipsets wlan driver null pointer dereference | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-44421 | UNISOC chipsets wlan driver missing authorization | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-43869 | IBM Spectrum Scale denial of service | 6.5CNA v3.1 | 1.0% | 2023-02-12 | Fix |
| CVE-2022-43779 | HP PC products using AMI UEFI Firmware time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-42783 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-42444 | IBM App Connect Enterprise denial of service | 4.9CNA v3.1 | 1.1% | 2023-02-12 | Fix |
| CVE-2022-42436 | IBM MQ information disclosure | 4.0CNA v3.1 | 0.2% | 2023-02-12 | Fix |
| CVE-2022-42292 | NVIDIA GeForce Experience link following | 5.0CNA v3.1 | 0.2% | 2023-02-12 | Fix |
| CVE-2022-41731 | IBM Watson Knowledge Catalog on Cloud Pak SQL injection | 8.6CNA v3.1 | 0.9% | 2023-02-12 | Fix |
| CVE-2022-40514 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN firmware | 9.8CNA v3.1 | 0.5% | 2023-02-12 | Fix |
| CVE-2022-40513 | Qualcomm Snapdragon uncontrolled resource consumption in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-40512 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-40502 | Qualcomm Snapdragon improper input validation in WLAN host | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-38686 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-38681 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-38680 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-38675 | UNISOC chipsets gpu driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-38674 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-38657 | An open redirect to malicious sites affects HCL Leap | 8.2CNA v3.1 | 0.3% | 2023-02-12 | Fix |
| CVE-2022-38396 | HP Factory Preinstalled Windows 10 20H2 Images privilege escalation | 7.8v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-34146 | Qualcomm Snapdragon improper input validation in WLAN host | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-34145 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-33306 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-33280 | Qualcomm Snapdragon access of uninitialized pointer in Bluetooth host | 7.3CNA v3.1 | 0.3% | 2023-02-12 | Fix |
| CVE-2022-33279 | Qualcomm Snapdragon stack based buffer overflow in WLAN | 9.8CNA v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2022-33277 | Qualcomm Snapdragon buffer copy without checking size of input in modem | 8.4CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33271 | Qualcomm Snapdragon buffer over-read in WLAN | 8.2CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-33248 | Qualcomm Snapdragon integer overflow to buffer overflow in User Identity module | 7.8CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33246 | Qualcomm Snapdragon use of out-of-range pointer offset in Audio | 6.7CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33243 | Improper access control in Qualcomm IPC | 8.4CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33233 | Qualcomm Snapdragon configuration weakness in modem | 7.8CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33232 | Qualcomm Snapdragon buffer copy without checking size of input in Hypervisor | 9.3CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33229 | Qualcomm Snapdragon buffer over-read in Modem | 8.2CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-33225 | Qualcomm Snapdragon use-after-free in Trusted Application Environment | 6.7CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33221 | Qualcomm Snapdragon buffer over-read in Trusted Execution Environment | 6.8CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-33216 | Qualcomm Snapdragon improper input validation in Automotive | 6.0CNA v3.1 | 0.1% | 2023-02-12 | Fix |
| CVE-2022-25738 | Qualcomm Snapdragon buffer over-read in MODEM | 8.2CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-25735 | Qualcomm Snapdragon null pointer dereference in MODEM | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-25734 | Qualcomm Snapdragon loop with unreachable exit condition in MODEM | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-25733 | Qualcomm Snapdragon null pointer dereference in MODEM | 7.5CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-25732 | Qualcomm Snapdragon buffer over-read in MODEM | 8.2CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-25729 | Qualcomm Snapdragon improper input validation in MODEM | 9.8CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-25728 | Qualcomm Snapdragon buffer over-read in MODEM | 8.2CNA v3.1 | 0.4% | 2023-02-12 | Fix |
| CVE-2022-4557 | SQL injection in Smartpower Web | 9.8v3.1 | 0.7% | 2023-02-12 | Fix |
| CVE-2022-46755 | Dell Wyse Management Suite improper access control | 4.9CNA v3.1 | 0.6% | 2023-02-11 | Fix |
| CVE-2022-46754 | Dell Wyse Management Suite improper access control | 8.7CNA v3.1 | 0.5% | 2023-02-11 | Fix |
| CVE-2022-46678 | Dell Wyse Management Suite improper access control | 4.9CNA v3.1 | 0.6% | 2023-02-11 | Fix |
| CVE-2022-46677 | Dell Wyse Management Suite improper access control | 6.8CNA v3.1 | 0.6% | 2023-02-11 | Fix |
| CVE-2022-46676 | Dell Wyse Management Suite improper access control | 4.9CNA v3.1 | 0.6% | 2023-02-11 | Fix |
| CVE-2022-46675 | Dell Wyse Management Suite information disclosure through error messages | 5.3CNA v3.1 | 0.5% | 2023-02-11 | Fix |
| CVE-2022-45104 | Dell Unisphere for PowerMax vApp command injection | 8.8CNA v3.1 | 1.4% | 2023-02-11 | Fix |
| CVE-2022-34451 | Dell PowerPath Management Appliance cross-site scripting | 4.8CNA v3.1 | 0.3% | 2023-02-11 | Fix |
| CVE-2022-34450 | Dell PowerPath Management Appliance permissive allowlist | 6.7CNA v3.1 | 0.4% | 2023-02-11 | Fix |
| CVE-2022-34449 | Dell PowerPath Management Appliance hard-coded credentials | 6.0CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34448 | Dell PowerPath Management Appliance cross-site request forgery | 8.8CNA v3.1 | 0.3% | 2023-02-11 | Fix |
| CVE-2022-34447 | Dell PowerPath Management Appliance OS command injection | 7.2CNA v3.1 | 1.7% | 2023-02-11 | Fix |
| CVE-2022-34446 | Dell PowerPath Management Appliance improper authorization | 8.8CNA v3.1 | 0.8% | 2023-02-11 | Fix |
| CVE-2022-34445 | Dell PowerScale OneFS weak password encoding | 6.0CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34444 | Dell PowerScale OneFS weak cryptographic algorithm | 5.9CNA v3.1 | 0.4% | 2023-02-11 | Fix |
| CVE-2022-34404 | Dell System Update improper certificate validation | 6.5CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34392 | Dell SupportAssist insufficient session expiration | 5.5CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34389 | Dell SupportAssist missing brute-force protection | 3.7CNA v3.1 | 0.4% | 2023-02-11 | Fix |
| CVE-2022-34388 | Dell SupportAssist information disclosure | 7.1CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34387 | Dell SupportAssist insecure temporary file | 6.4CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34386 | Dell SupportAssist Client Consumer hard-coded cryptographic key | 5.5CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-34385 | Dell SupportAssist Client Consumer inadequate encryption strength | 5.5CNA v3.1 | 0.1% | 2023-02-11 | Fix |
| CVE-2022-34384 | Dell SupportAssist Client Consumer execution with unnecessary privileges | 7.8CNA v3.1 | 0.2% | 2023-02-11 | Fix |
| CVE-2022-46650 | ALEOS information disclosure | 4.9v3.1 | 12.3% | 2023-02-10 | Fix |
| CVE-2022-46649 | ALEOS OS command injection | 8.8v3.1 | 2.3% | 2023-02-10 | Exploit codeFix |
| CVE-2022-45766 | Keystorage Global Facilities Management Software hard-coded credentials | 9.1v3.1 | 0.8% | 2023-02-10 | |
| CVE-2022-45699 | Apsystems Ecu-r administration interface command injection | 9.8v3.1 | 76.6% | 2023-02-10 | NucleiEmerging Threats |
| CVE-2022-44261 | Averydennison Monarch Printer M9855 cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-10 | |
| CVE-2022-43501 | ZUKEN Elmic Kasago IPv6/v4 Dual insufficient randomness | 9.1v3.1 | 0.6% | 2023-02-10 | Fix |
| CVE-2022-34454 | Dell PowerScale OneFS heap-based buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2022-34452 | Dell PowerPath Management Appliance sensitive query strings | 2.7CNA v3.1 | 0.4% | 2023-02-10 | Fix |
| CVE-2022-34377 | Dell PowerEdge Platform arbitrary code execution | 1.9CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2022-34376 | Dell PowerEdge Platform improper input validation | 3.9CNA v3.1 | 0.1% | 2023-02-10 | Fix |
| CVE-2022-34366 | Dell SupportAssist Client Consumer permissive cross-domain policy | 6.5CNA v3.1 | 0.5% | 2023-02-10 | Fix |
| CVE-2022-34364 | Dell BSAFE SSL-J debug logging information disclosure | 4.4CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2022-33934 | Dell PowerScale OneFS cross-site scripting | 7.7CNA v3.1 | 0.4% | 2023-02-10 | Fix |
| CVE-2022-24410 | Dell CPG BIOS information disclosure | 6.8CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2022-4903 | CodenameOne implicit intent for sensitive communication | 8.1v3.1 | 0.6% | 2023-02-10 | Fix |
| CVE-2022-3568 | ImageMagick Engine WordPress plugin cross-site request forgery to PHAR deserialization | 8.8v3.1 | 0.6% | 2023-02-10 | Fix |
| CVE-2022-48302 | Huawei HarmonyOS improper API authentification in the AMS module | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48301 | Huawei HarmonyOS API permission verification vulnerability in the app package management module | 7.5v3.1 | 0.3% | 2023-02-09 | Fix |
| CVE-2022-48300 | Huawei HarmonyOS improper API authentification in the WMS module | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48299 | Huawei HarmonyOS improper API authentification in the WMS module | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48298 | Huawei HarmonyOS improper quantity validation | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48297 | Huawei HarmonyOS improper quantity validation | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48296 | Huawei EMUI improper permission management vulnerability in the SystemUI module | 5.3v3.1 | 0.3% | 2023-02-09 | Fix |
| CVE-2022-48295 | Huawei HarmonyOS improper authentification of the IHwAntiMalPlugin API | 7.5v3.1 | 0.3% | 2023-02-09 | Fix |
| CVE-2022-48294 | Huawei HarmonyOS improper authentification of the IHwAttestationService API | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48293 | Huawei HarmonyOS OOM vulnerability in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2022-48292 | Huawei HarmonyOS OOM vulnerability in the Bluetooth module | 6.5v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2022-48290 | Huawei HarmonyOS protection mechanism failure | 9.1v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48289 | Huawei HarmonyOS missing authentication | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48288 | Huawei HarmonyOS missing authentication | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48287 | Huawei HarmonyOS logic bypass vulnerability in the HwContacts module | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-48286 | Huawei HarmonyOS unauthorized access vulnerability in the multi-screen collaboration module | 7.5v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-44572 | Denial of service via multipart parsing in Rack | 7.5v3.1 | 1.6% | 2023-02-09 | Fix |
| CVE-2022-44571 | Denial of service vulnerability in Rack Content-Disposition parsing | 7.5v3.1 | 1.5% | 2023-02-09 | Fix |
| CVE-2022-44570 | Denial of service via header parsing in Rack | 7.5v3.1 | 1.6% | 2023-02-09 | Fix |
| CVE-2022-44566 | Denial of service vulnerability in ActiveRecord's PostgreSQL adapter | 7.5v3.1 | 1.3% | 2023-02-09 | Fix |
| CVE-2022-43552 | https://github.com/curl/curl A use-after-free | 5.9NVD v3.1 | 2.7% | 2023-02-09 | Fix |
| CVE-2022-43550 | https://github.com/jitsi A command injection | 9.8v3.1 | 1.8% | 2023-02-09 | |
| CVE-2022-43440 | Tribe29 Checkmk privilege escalation via manipulated unixcat executable | 7.8v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2022-30564 | IPC-HX5XXX unauthorized access | 5.3v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-21940 | Sensitive Cookie in HTTPS Session without Secure attribute in System Configuration Tool (SCT) | 7.5CNA v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2022-21939 | Sensitive cookie without HttpOnly flag in System Configuration Tool (SCT) | 7.5CNA v3.1 | 0.5% | 2023-02-09 | Fix |
| CVE-2022-47648 | Bosch B420 improper access control | 7.6CNA v3.1 | 0.4% | 2023-02-08 | Fix |
| CVE-2022-45982 | Deserialization of untrusted data in ThinkPHP | 9.8v3.1 | 1.2% | 2023-02-08 | Fix |
| CVE-2022-45755 | EyouCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-08 | |
| CVE-2022-45527 | Institutional Management Website Future-Depth file upload | 9.8v3.1 | 0.9% | 2023-02-08 | |
| CVE-2022-45526 | Institutional Management Website Future-Depth SQL injection | 9.8v3.1 | 1.0% | 2023-02-08 | |
| CVE-2022-45192 | Microchip RN4870 denial of service | 6.5v3.1 | 0.2% | 2023-02-08 | |
| CVE-2022-45191 | Microchip RN4870 improper integrity check validation | 6.5v3.1 | 0.2% | 2023-02-08 | |
| CVE-2022-45190 | Microchip RN4870 missing authentication | 5.3v3.1 | 0.3% | 2023-02-08 | |
| CVE-2022-43765 | B&R Industrial Automation B&R APROL DoS in APROLs Tbase server | 7.5CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2022-43764 | B&R Industrial Automation B&R APROL buffer overflow when changing configuration on Tbase Server | 9.8CNA v3.1 | 0.8% | 2023-02-08 | Fix |
| CVE-2022-43763 | B&R APROL Tbase server denial of service | 7.5CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2022-43762 | Memory leak when receiving messages in APROL Tbase server | 7.5CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2022-43761 | Lack of authentication when managing APROL database | 9.4CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2022-42438 | IBM Cloud Pak for Multicloud Management Monitoring privilege escalation | 7.5CNA v3.1 | 0.5% | 2023-02-08 | Fix |
| CVE-2022-41620 | SeoSamba for WordPress Webmasters plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2022-40480 | Nordicsemi Nrf5340-dk denial of service | 6.5v3.1 | 0.3% | 2023-02-08 | |
| CVE-2022-38778 | Elastic Kibana crash | 6.5v3.1 | 0.9% | 2023-02-08 | Fix |
| CVE-2022-38777 | Elastic Endpoint Security improper privilege management | 7.8v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2022-35720 | IBM Sterling External Authentication Server information disclosure | 2.3CNA v3.1 | 0.1% | 2023-02-08 | Fix |
| CVE-2022-34362 | IBM Sterling Secure Proxy host header injection | 4.6CNA v3.1 | 0.4% | 2023-02-08 | Fix |
| CVE-2022-34350 | IBM API Connect improper input validation | 5.3CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2022-4450 | OpenSSL double free after calling PEM_read_bio_ex | 7.5NVD v3.1 | 28.6% | 2023-02-08 | Fix |
| CVE-2022-4304 | OpenSSL Timing Oracle in RSA Decryption | 5.9NVD v3.1 | 23.5% | 2023-02-08 | Fix |
| CVE-2022-2094 | Yellow Yard Searchbar WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-02-08 | Fix |
| CVE-2022-47419 | Mayan EDMS tagging system cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-02-07 | Fix |
| CVE-2022-47418 | LogicalDOC Document Version Comment stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-47417 | LogicalDOC Document File Name stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-47416 | LogicalDOC Chat stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-47415 | LogicalDOC Messaging stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-47414 | OpenKM cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-47413 | OpenKM cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-47412 | ONLYOFFICE Workspace Search stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-07 | |
| CVE-2022-46663 | GNU Less -R option vulnerability | 7.5v3.1 | 1.4% | 2023-02-07 | Fix |
| CVE-2022-46285 | libXpm infinite loop | 7.5NVD v3.1 | 1.3% | 2023-02-07 | Fix |
| CVE-2022-45854 | Zyxel NWA110AX firmware improper check for exceptional conditions | 4.3CNA v3.1 | 0.3% | 2023-02-07 | Fix |
| CVE-2022-45768 | Edimax BR-6428NS command injection | 8.8v3.1 | 28.7% | 2023-02-07 | |
| CVE-2022-45544 | Schlix cms incorrect authorization | 8.8v3.1 | 1.3% | 2023-02-07 | |
| CVE-2022-45441 | Zyxel NBG-418N v2 firmware cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-07 | Fix |
| CVE-2022-43759 | Rancher: Privilege escalation via promoted roles | 7.2CNA v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2022-43758 | Rancher: Command injection in Git package | 7.6CNA v3.1 | 1.0% | 2023-02-07 | Fix |
| CVE-2022-43757 | Rancher: Exposure of sensitive fields | 9.9CNA v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2022-43756 | Rancher/Wrangler: Denial of service when processing Git credentials | 5.9CNA v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2022-43755 | Rancher: Non-random authentication token | 7.1CNA v3.1 | 1.7% | 2023-02-07 | Fix |
| CVE-2022-42291 | NVIDIA GeForce Experience tampering | 8.2CNA v3.1 | 0.2% | 2023-02-07 | Fix |
| CVE-2022-41313 | Moxa SDS-3008 Series Industrial Ethernet Switch stored cross-site scripting | 5.4v3.1 | 1.1% | 2023-02-07 | Fix |
| CVE-2022-41312 | Moxa SDS-3008 Series Industrial Ethernet Switch stored cross-site scripting | 5.4v3.1 | 1.1% | 2023-02-07 | Fix |
| CVE-2022-41311 | Moxa SDS-3008 Series Industrial Ethernet Switch stored cross-site scripting | 5.4v3.1 | 1.0% | 2023-02-07 | Fix |
| CVE-2022-40693 | Moxa SDS-3008 Series Industrial Ethernet Switch cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2022-40691 | Moxa SDS-3008 Series Industrial Ethernet Switch web application functionality information disclosure | 5.3v3.1 | 1.5% | 2023-02-07 | Fix |
| CVE-2022-40224 | Moxa SDS-3008 Series Industrial Ethernet Switch web server functionality denial of service | 7.5v3.1 | 64.7% | 2023-02-07 | Fix |
| CVE-2022-38547 | Zyxel ZyWALL/USG series firmware CLI command command injection | 7.2CNA v3.1 | 2.8% | 2023-02-07 | Fix |
| CVE-2022-31611 | NVIDIA GeForce Experience uncontrolled search path | 6.8CNA v3.1 | 0.2% | 2023-02-07 | Fix |
| CVE-2022-31254 | SUSE Linux Enterprise Server for SAP 15 rmt-server-regsharing service incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2023-02-07 | Fix |
| CVE-2022-31249 | OS command injection in Rancher and Fleet | 7.5CNA v3.1 | 3.8% | 2023-02-07 | Fix |
| CVE-2022-24990 | TerraMaster OS remote command execution | 7.5NVD v3.1 | 83.2% | 2023-02-07 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2022-21953 | SUSE Rancher of SUSE missing authorization | 7.4CNA v3.1 | 0.5% | 2023-02-07 | Fix |
| CVE-2022-21948 | openSUSE paste image upload function cross-site scripting | 4.3CNA v3.1 | 0.5% | 2023-02-07 | |
| CVE-2022-4883 | libXpm untrusted search path | 8.8NVD v3.1 | 1.2% | 2023-02-07 | Fix |
| CVE-2022-48311 | HP Deskjet 2540 A9U23B cross-site scripting | 9.0v3.1 | 1.0% | 2023-02-06 | Exploit code |
| CVE-2022-48166 | WAVLINK Wl-wn530hg4 improper access control | 7.5v3.1 | 2.8% | 2023-02-06 | Nuclei |
| CVE-2022-48164 | WAVLINK Wl-wn533a8 component /cgi-bin/ExportLogs.sh improper access control | 7.5v3.1 | 3.1% | 2023-02-06 | Nuclei |
| CVE-2022-48085 | Softr cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-06 | |
| CVE-2022-48078 | Pycdc out-of-bounds write | 9.8v3.1 | 0.9% | 2023-02-06 | |
| CVE-2022-48019 | Wfs Another Eden improper privilege management | 7.8v3.1 | 0.3% | 2023-02-06 | Fix |
| CVE-2022-47071 | Nvs-365-v01 command execution | 9.8v3.1 | 43.1% | 2023-02-06 | |
| CVE-2022-46496 | BTicino Door Entry For Hometouch improper certificate validation | 5.9v3.1 | 0.9% | 2023-02-06 | |
| CVE-2022-45722 | Gzwhir Ezeip cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-06 | |
| CVE-2022-45589 | Talend Esb Runtime SQL injection | 7.2v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-44617 | libXpm infinite loop | 7.5NVD v3.1 | 1.2% | 2023-02-06 | Fix |
| CVE-2022-44343 | CRMEB files accessible to external parties | 7.5v3.1 | 0.6% | 2023-02-06 | |
| CVE-2022-44268 | ImageMagick information disclosure | 6.5NVD v3.1 | 89.9% | 2023-02-06 | Emerging ThreatsExploit codeFix |
| CVE-2022-44267 | ImageMagick improper resource release | 6.5v3.1 | 76.6% | 2023-02-06 | Emerging ThreatsExploit codeFix |
| CVE-2022-42951 | Couchbase Server improper authentication | 8.1v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2022-42950 | Couchbase Server denial of service | 4.9v3.1 | 1.0% | 2023-02-06 | Fix |
| CVE-2022-42439 | IBM App Connect Enterprise information disclosure | 6.8CNA v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2022-41342 | Intel(R) C++ Compiler Classic privilege escalation | 6.0CNA v3.1 | 0.2% | 2023-02-06 | Fix |
| CVE-2022-40196 | Intel oneAPI DPC++/C++ Compiler privilege escalation | 7.8CNA v3.1 | 0.2% | 2023-02-06 | Fix |
| CVE-2022-38136 | Intel(R) oneAPI DPC++/C++ Compiler uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-02-06 | Fix |
| CVE-2022-32663 | MediaTek chipsets null pointer dereference in Wi-Fi driver | 7.5v3.1 | 1.6% | 2023-02-06 | Fix |
| CVE-2022-32656 | MediaTek chipsets improper input validation in Wi-Fi driver | 6.7v3.1 | 0.3% | 2023-02-06 | Fix |
| CVE-2022-32655 | MediaTek chipsets improper input validation in Wi-Fi driver | 6.7v3.1 | 0.3% | 2023-02-06 | Fix |
| CVE-2022-32654 | MediaTek chipsets improper input validation in Wi-Fi driver | 6.7v3.1 | 0.3% | 2023-02-06 | Fix |
| CVE-2022-32643 | MediaTek chipsets improper synchronization in ccd | 6.4v3.1 | 0.2% | 2023-02-06 | Fix |
| CVE-2022-32642 | MediaTek chipsets improper synchronization in ccd | 6.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2022-32595 | MediaTek chipsets improper input validation in widevine | 4.4v3.1 | 0.1% | 2023-02-06 | Fix |
| CVE-2022-29416 | Afterpay Gateway for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-02-06 | Fix |
| CVE-2022-28923 | Open redirect in Caddy | 6.1v3.1 | 1.4% | 2023-02-06 | NucleiFix |
| CVE-2022-27628 | WordPress WZone Lite Version Plugin Lite is vulnerable to cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-02-06 | |
| CVE-2022-25855 | create-choo-app3 is vulnerable to command injection via the devInstall function | 7.8v3.1 | 1.0% | 2023-02-06 | |
| CVE-2022-25853 | semver-tags is vulnerable to command injection via the getGitTagsRemote function | 7.8v3.1 | 1.1% | 2023-02-06 | |
| CVE-2022-4902 | eXo Chat Application Mention ExoChatMessageComposer.vue cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4838 | Clean Login WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4836 | Breadcrumb WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4833 | YourChannel: Everything you want in a YouTube WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4826 | Simple Tooltips WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4825 | WP-ShowHide WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4824 | WP Blog and Widget WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4762 | Materialis Companion WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4756 | YouTube Channel WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4747 | Post Category Image With Grid and Slider WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2022-4717 | Strong Testimonials WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4681 | Hide My WP WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 3.8% | 2023-02-06 | Exploit codeFix |
| CVE-2022-4677 | Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4674 | Ibtana WordPress Website Builder plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4670 | PDF.js Viewer WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4664 | Logo Slider WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4657 | Restaurant Menu WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2022-4626 | PPWP WordPress Password Protect Page plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4577 | Easy Testimonials WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-06 | Fix |
| CVE-2022-4489 | HUSKY WordPress plugin PHP object injection | 7.2NVD v3.1 | 1.3% | 2023-02-06 | Fix |
| CVE-2022-4459 | WP Show Posts WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-06 | Fix |
| CVE-2022-4384 | Stream WordPress plugin Subscriber+ Alert creation | 6.5NVD v3.1 | 0.9% | 2023-02-06 | Fix |
| CVE-2022-4321 | PDF Generator for WordPress plugin reflected XSS | 6.1NVD v3.1 | 1.2% | 2023-02-06 | NucleiFix |
| CVE-2022-3229 | Unified Intents Unified Remote improper authorization | 9.8NVD v3.1 | 66.4% | 2023-02-06 | MetasploitExploit code |
| CVE-2022-2933 | 0mk Shortener WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8NVD v3.1 | 0.5% | 2023-02-06 | |
| CVE-2022-45786 | Apache Age: Python and Golang drivers allow data manipulation and exposure due to SQL injection | 8.1v3.1 | 1.0% | 2023-02-04 | Fix |
| CVE-2022-48165 | WAVLINK WL-WN530H4 component /cgi-bin/ExportLogs.sh improper access control | 7.5v3.1 | 3.3% | 2023-02-03 | Nuclei |
| CVE-2022-48074 | NoMachine arbitrary command execution | 5.3v3.1 | 0.2% | 2023-02-03 | Fix |
| CVE-2022-48023 | Zammad ticket tags API vulnerability | 4.3v3.1 | 0.4% | 2023-02-03 | Fix |
| CVE-2022-48022 | Zammad mentions API incorrect authorization | 4.3v3.1 | 0.5% | 2023-02-03 | Fix |
| CVE-2022-48021 | zammad arbitrary code execution | 9.8v3.1 | 0.9% | 2023-02-03 | Fix |
| CVE-2022-47762 | Path traversal in gin-vue-admin | 7.5v3.1 | 0.9% | 2023-02-03 | Fix |
| CVE-2022-47132 | Creativeitem Academy LMS cross-site request forgery | 8.8v3.1 | 0.9% | 2023-02-03 | Exploit code |
| CVE-2022-47131 | Creativeitem Academy LMS cross-site request forgery | 4.8v3.1 | 0.4% | 2023-02-03 | Exploit code |
| CVE-2022-47130 | Creativeitem Academy LMS cross-site request forgery | 4.3v3.1 | 0.6% | 2023-02-03 | Exploit code |
| CVE-2022-47070 | Nvs-365-v01 information disclosure | 7.5v3.1 | 0.9% | 2023-02-03 | |
| CVE-2022-45588 | Talend Remote Engine Gen 2 XML external entity injection | 7.8v3.1 | 0.2% | 2023-02-03 | Fix |
| CVE-2022-45496 | Json.h function json_parse_string in sheredom buffer overflow | 7.8v3.1 | 0.6% | 2023-02-03 | |
| CVE-2022-45493 | Json.h function json_parse_key in sheredom buffer overflow | 7.8v3.1 | 0.2% | 2023-02-03 | |
| CVE-2022-45492 | Json.h function json_parse_number in sheredom buffer overflow | 7.8v3.1 | 0.2% | 2023-02-03 | |
| CVE-2022-45491 | Json.h function json_parse_value in sheredom buffer overflow | 7.8v3.1 | 0.3% | 2023-02-03 | |
| CVE-2022-42909 | Wepa Print Away cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-03 | Fix |
| CVE-2022-42908 | Wepa Print Away cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-03 | Fix |
| CVE-2022-38389 | IBM Tivoli Workload Scheduler XML external entity injection | 7.1CNA v3.1 | 1.3% | 2023-02-03 | Fix |
| CVE-2022-34138 | Biltema Baby Camera web server of Biltema IP and insecure direct object reference | 7.5v3.1 | 0.6% | 2023-02-03 | Fix |
| CVE-2022-31733 | Cloud Foundry Diego and CF Deployment improper certificate validation | 9.1v3.1 | 0.4% | 2023-02-03 | Fix |
| CVE-2022-24895 | Symfony vulnerable to session fixation of CSRF tokens | 6.3CNA v3.1 | 0.8% | 2023-02-03 | Fix |
| CVE-2022-24894 | Symfony storing cookie headers in HttpCache | 5.9CNA v3.1 | 4.0% | 2023-02-03 | Fix |
| CVE-2022-23498 | When query caching is enabled in Grafana users can query another users session | 7.1CNA v3.1 | 1.1% | 2023-02-03 | Fix |
| CVE-2022-22486 | IBM Tivoli Workload Scheduler XML external entity injection | 10.0CNA v3.1 | 1.4% | 2023-02-03 | Fix |
| CVE-2022-4634 | Delta Industrial Automation ScreenEditor stack-based buffer overflow | 7.8v3.1 | 5.3% | 2023-02-03 | Fix |
| CVE-2022-48140 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-02 | |
| CVE-2022-48130 | Tenda W20E out-of-bounds write | 9.8v3.1 | 0.9% | 2023-02-02 | |
| CVE-2022-48114 | RuoYi createTable tool SQL injection | 9.8v3.1 | 0.9% | 2023-02-02 | |
| CVE-2022-48113 | TOTOLINK N200re-v5 Firmware hard-coded credentials | 9.8v3.1 | 0.9% | 2023-02-02 | |
| CVE-2022-48082 | Easyone Crm SQL injection | 9.8v3.1 | 0.6% | 2023-02-02 | |
| CVE-2022-48079 | Mengnai Aapanel Host System unrestricted file upload | 9.8v3.1 | 1.4% | 2023-02-02 | |
| CVE-2022-46965 | 202ecommerce Administrative Mandate SQL injection | 8.8v3.1 | 0.8% | 2023-02-02 | |
| CVE-2022-46842 | JS Help Desk WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2022-46815 | Conditional Shipping for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2022-46604 | Tecrail Responsive FileManager unrestricted file upload | 8.8v3.1 | 8.6% | 2023-02-02 | Exploit code |
| CVE-2022-46552 | D-Link Dir-846 Firmware OS command injection | 8.8v3.1 | 10.5% | 2023-02-02 | Exploit code |
| CVE-2022-45807 | WP Mail Log WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2022-45067 | Exclusive Addons Elementor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2022-44585 | Homepage Pop-up WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | |
| CVE-2022-43665 | ESTsoft Alyac malware scan functionality denial of service | 5.5v3.1 | 0.3% | 2023-02-02 | |
| CVE-2022-40692 | Sunshine Photo Cart WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2022-40269 | Mitsubishi Electric GOT2000 Series GT27 model authentication bypass by spoofing | 6.8CNA v3.1 | 0.7% | 2023-02-02 | Fix |
| CVE-2022-40268 | Mitsubishi Electric GOT2000 Series GT27 model Mitsubishi Electric Corporation clickjacking | 6.1CNA v3.1 | 0.5% | 2023-02-02 | Fix |
| CVE-2022-36401 | TeraWallet For WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-02 | Fix |
| CVE-2022-33323 | Authentication bypass vulnerability in Robot Controller of MELFA SD/SQ series and F-series | 7.5CNA v3.1 | 1.1% | 2023-02-02 | Fix |
| CVE-2022-3560 | pesign path traversal | 5.5NVD v3.1 | 0.2% | 2023-02-02 | Fix |
| CVE-2022-2546 | All-in-One WP Migration WordPress plugin unauthenticated reflected XSS | 4.7NVD v3.1 | 1.2% | 2023-02-02 | NucleiFix |
| CVE-2022-48161 | EasyImages files accessible to external parties | 7.5v3.1 | 0.8% | 2023-02-01 | |
| CVE-2022-48094 | lmxcms files accessible to external parties | 4.9v3.1 | 0.7% | 2023-02-01 | |
| CVE-2022-48093 | Seacms code injection | 7.2v3.1 | 1.4% | 2023-02-01 | |
| CVE-2022-47983 | IBM InfoSphere Information Server cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2022-47872 | MacCMS server-side request forgery | 8.8v3.1 | 0.9% | 2023-02-01 | Exploit code |
| CVE-2022-47770 | Serinf Fast Checkin SQL injection | 9.8v3.1 | 0.9% | 2023-02-01 | |
| CVE-2022-47769 | Serinf Fast Checkin Serenissima Informatica arbitrary file write | 9.8v3.1 | 1.1% | 2023-02-01 | |
| CVE-2022-47768 | Serinf Fast Checkin path traversal | 7.5v3.1 | 1.1% | 2023-02-01 | |
| CVE-2022-47717 | LAST Yard permissive cross-domain policy | 7.5v3.1 | 0.7% | 2023-02-01 | |
| CVE-2022-47715 | LAST Yard missing encryption | 5.3v3.1 | 0.4% | 2023-02-01 | |
| CVE-2022-47714 | LAST Yard cleartext transmission of sensitive information | 9.8v3.1 | 0.6% | 2023-02-01 | |
| CVE-2022-47003 | Mura Cms improper authentication | 9.8v3.1 | 3.6% | 2023-02-01 | Nuclei |
| CVE-2022-47002 | MasaCMS incorrect authorization | 9.8v3.1 | 6.3% | 2023-02-01 | NucleiFix |
| CVE-2022-46934 | Keking kkFileView cross-site scripting | 6.1v3.1 | 1.1% | 2023-02-01 | Nuclei |
| CVE-2022-46756 | Dell VxRail HCI resource exposure | 8.2CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-46679 | Dell PowerScale OneFS denial of service | 6.5CNA v3.1 | 0.8% | 2023-02-01 | Fix |
| CVE-2022-45783 | dotCMS path traversal | 6.5v3.1 | 8.5% | 2023-02-01 | Fix |
| CVE-2022-45782 | dotCMS weak random number generator | 8.8v3.1 | 0.6% | 2023-02-01 | Exploit codeFix |
| CVE-2022-45102 | Dell Data Protection Central HTTP header injection | 5.4CNA v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2022-45101 | Dell PowerScale OneFS improper handling of insufficient privileges | 7.3CNA v3.1 | 0.8% | 2023-02-01 | Fix |
| CVE-2022-45100 | Dell PowerScale OneFS improper certificate validation | 8.1CNA v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2022-45099 | Dell PowerScale OneFS weak password encoding | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-45098 | Dell PowerScale OneFS sensitive information in log files | 6.1CNA v3.1 | 0.1% | 2023-02-01 | Fix |
| CVE-2022-45097 | Dell PowerScale OneFS incorrect group assignment | 6.3CNA v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2022-45096 | Dell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue. An unauthenticated remote user could unintentionally lead an administrator to enable this vulnerability, leading to disclosure of information. | 5.4CNA v3.1 | 0.5% | 2023-02-01 | Fix |
| CVE-2022-45095 | Dell PowerScale OneFS command injection | 6.7CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2022-43922 | IBM App Connect Enterprise Certified Container information disclosure | 5.3CNA v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2022-42973 | Schneider Electric APC Easy UPS Online Monitoring Software hard-coded credentials | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-42972 | Schneider Electric APC Easy UPS Online Monitoring Software incorrect permission assignment | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-42971 | Schneider Electric APC Easy UPS Online Monitoring Software unrestricted file upload | 9.8CNA v3.1 | 1.1% | 2023-02-01 | Fix |
| CVE-2022-42970 | Schneider Electric APC Easy UPS Online Monitoring Software missing authentication | 9.8CNA v3.1 | 0.7% | 2023-02-01 | Fix |
| CVE-2022-37034 | dotCMS uncontrolled recursion | 5.3v3.1 | 0.9% | 2023-02-01 | Fix |
| CVE-2022-37033 | dotCMS server-side request forgery | 6.5v3.1 | 0.8% | 2023-02-01 | Fix |
| CVE-2022-34459 | Dell Command Update (DCU) improper signature verification | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-34458 | Dell Command Update (DCU) system information disclosure | 6.6CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-34443 | Dell Rugged Control Center (RCC) improper input validation | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-34403 | Dell CPG BIOS stack-based buffer overflow | 7.5CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-34400 | Dell CPG BIOS heap-based buffer overflow | 7.1CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-34398 | Dell CPG BIOS time-of-check time-of-use race condition | 7.5CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-34396 | Dell OpenManage Server Administrator (OMSA) uncontrolled search path | 7.0CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-32482 | Dell CPG BIOS improper input validation | 5.6CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-31902 | notepad-plus-plus Notepad++ out-of-bounds write | 5.5v3.1 | 0.5% | 2023-02-01 | Exploit code |
| CVE-2022-31364 | Infineon Cypress Bluetooth Mesh Software Development Kit out-of-bounds write | 8.8v3.1 | 0.8% | 2023-02-01 | |
| CVE-2022-31363 | Infineon Cypress Bluetooth Mesh Software Development Kit out-of-bounds write | 8.8v3.1 | 0.8% | 2023-02-01 | |
| CVE-2022-30904 | Bestechnic BES2300 out-of-bounds write | 8.8v3.1 | 0.7% | 2023-02-01 | |
| CVE-2022-27538 | HP PC BIOS time-of-check time-of-use race condition | 7.0v3.1 | 0.1% | 2023-02-01 | Fix |
| CVE-2022-27537 | HP PC BIOS code injection | 7.8v3.1 | 0.3% | 2023-02-01 | Fix |
| CVE-2022-25916 | mt7688-wiscan is vulnerable to command injection due to improper input sanitization | 7.8v3.1 | 1.1% | 2023-02-01 | Fix |
| CVE-2022-25906 | is-http2 vulnerable to improper input validation | 7.8v3.1 | 1.1% | 2023-02-01 | |
| CVE-2022-24324 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.2% | 2023-02-01 | Fix |
| CVE-2022-23455 | HP Support Assistant improper privilege management | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-23454 | HP Support Assistant incorrect default permissions | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-23453 | HP Support Assistant incorrect default permissions | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-4254 | SSSD libsss_certmap LDAP injection | 8.8v3.1 | 1.0% | 2023-02-01 | Fix |
| CVE-2022-4206 | GitLab DAST API scanner information disclosure | 5.0CNA v3.1 | 0.6% | 2023-02-01 | Fix |
| CVE-2022-4062 | Schneider Electric EcoStruxure Power Commission improper authorization | 7.8CNA v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-3990 | HPSFViewer improper privilege management | 7.8v3.1 | 0.2% | 2023-02-01 | Fix |
| CVE-2022-3913 | Rapid7 Nexpose certificate validation issue | 5.3CNA v3.1 | 0.3% | 2023-02-01 | Fix |
| CVE-2022-3083 | Landis+Gyr E850 session cookie handling vulnerability | 5.4v3.1 | 0.4% | 2023-02-01 | Fix |
| CVE-2022-2329 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) integer overflow | 9.8CNA v3.1 | 2.1% | 2023-02-01 | Fix |
| CVE-2022-48176 | NETGEAR R6900P out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-31 | Fix |
| CVE-2022-47873 | Netcad Keos XML external entity injection | 9.8v3.1 | 0.8% | 2023-01-31 | |
| CVE-2022-47854 | I-librarian unrestricted file upload | 9.8v3.1 | 0.9% | 2023-01-31 | |
| CVE-2022-47780 | Bangresto SQL injection | 9.8v3.1 | 0.9% | 2023-01-31 | |
| CVE-2022-47701 | Comfast Project Cf-wr623n cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-31 | |
| CVE-2022-47700 | Comfast Project Cf-wr623n forced browsing | 7.5v3.1 | 0.5% | 2023-01-31 | |
| CVE-2022-47699 | Comfast Project Cf-wr623n improper access control | 9.8v3.1 | 0.6% | 2023-01-31 | |
| CVE-2022-47698 | Comfast Project Cf-wr623n cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-31 | |
| CVE-2022-47697 | Comfast Project Cf-wr623n weak password recovery | 9.8v3.1 | 0.6% | 2023-01-31 | |
| CVE-2022-47035 | D-Link DIR-825 buffer overflow | 9.8v3.1 | 1.2% | 2023-01-31 | Fix |
| CVE-2022-46835 | SailPoint IdentityIQ JavaServer file path traversal | 8.8CNA v3.1 | 0.9% | 2023-01-31 | Fix |
| CVE-2022-45897 | Xerox Workcentre 3550 cleartext storage of sensitive information | 6.5v3.1 | 0.4% | 2023-01-31 | |
| CVE-2022-45789 | Schneider Electric EcoStruxure Control Expert authentication bypass by replay | 8.1CNA v3.1 | 1.5% | 2023-01-31 | Fix |
| CVE-2022-45598 | Joplin Desktop App vulnerable to cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-31 | Fix |
| CVE-2022-45494 | Json.h function json_parse_object in sheredom buffer overflow | 7.8v3.1 | 0.4% | 2023-01-31 | |
| CVE-2022-45435 | SailPoint IdentityIQ Access Control Bypass | 6.8CNA v3.1 | 0.4% | 2023-01-31 | Fix |
| CVE-2022-45297 | EQ UserPwd parameter SQL injection | 9.8v3.1 | 2.8% | 2023-01-31 | Exploit code |
| CVE-2022-45172 | Liveboxcloud Vdesk incorrect authorization | 9.8v3.1 | 1.1% | 2023-01-31 | |
| CVE-2022-44897 | Apollo Theme AP Page Builder ApolloTheme AP PageBuilder component cross-site scripting | 6.1v3.1 | 0.8% | 2023-01-31 | |
| CVE-2022-44645 | Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability | 8.8v3.1 | 1.9% | 2023-01-31 | Fix |
| CVE-2022-44644 | Apache Linkis (incubating): The DatasourceManager module has a Local File Read vulnerability | 6.5v3.1 | 1.2% | 2023-01-31 | Fix |
| CVE-2022-40258 | AMI MegaRAC SPx12 weak password hashes for Redfish and API | 5.3v3.1 | 0.4% | 2023-01-31 | Fix |
| CVE-2022-39061 | ChangingTec MegaServiSignAdapter out-of-bounds read | 6.5CNA v3.1 | 0.7% | 2023-01-31 | Fix |
| CVE-2022-39060 | ChangingTec MegaServiSignAdapter improper input validation | 9.8CNA v3.1 | 0.9% | 2023-01-31 | Fix |
| CVE-2022-39059 | ChangingTec MegaServiSignAdapter path traversal | 7.5v3.1 | 1.0% | 2023-01-31 | Fix |
| CVE-2022-32984 | Btcpay Server information disclosure | 7.5v3.1 | 1.0% | 2023-01-31 | Fix |
| CVE-2022-30421 | Toshiba Storage Security Software improper authentication | 7.8v3.1 | 0.3% | 2023-01-31 | |
| CVE-2022-28331 | Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function | 9.8v3.1 | 1.6% | 2023-01-31 | Fix |
| CVE-2022-25979 | jSuites subect to cross-site scripting | 6.1v3.1 | 0.6% | 2023-01-31 | Fix |
| CVE-2022-25881 | http-cache-semantics vulnerable to regular expression denial of service | 7.5v3.1 | 1.6% | 2023-01-31 | Fix |
| CVE-2022-25147 | Apache Portable Runtime Utility: Out-of-bounds writes in the apr_base64 family of functions | 6.5v3.1 | 1.4% | 2023-01-31 | Fix |
| CVE-2022-24963 | Apache Portable Runtime (APR): Out-of-bound writes in the apr_encode family of functions | 9.8v3.1 | 1.5% | 2023-01-31 | Fix |
| CVE-2022-21129 | nemo-appium vulnerable to OS command injection | 9.8v3.1 | 2.8% | 2023-01-31 | Fix |
| CVE-2022-4898 | Octopus Deploy Octopus Server cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-31 | Fix |
| CVE-2022-4441 | Privilege escalation vulnerability in Hitachi Storage Plug-in for VMware vCenter | 7.6CNA v3.1 | 0.6% | 2023-01-31 | Fix |
| CVE-2022-4041 | Privilege escalation vulnerability in Hitachi Storage Plug-in for VMware vCenter | 5.9CNA v3.1 | 0.6% | 2023-01-31 | Fix |
| CVE-2022-48303 | GNU tar out-of-bounds read | 5.5NVD v3.1 | 1.5% | 2023-01-30 | Fix |
| CVE-2022-48175 | Rukovoditel code injection | 9.8v3.1 | 1.7% | 2023-01-30 | |
| CVE-2022-48006 | Taogogo taoCMS An arbitrary file upload | 9.8v3.1 | 0.9% | 2023-01-30 | |
| CVE-2022-46359 | HP Security Manager improper privilege management | 8.8v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-46358 | HP Security Manager improper privilege management | 8.8v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-46357 | HP Security Manager improper privilege management | 8.8v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-46356 | HP Security Manager improper privilege management | 8.8v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-46087 | Cloudschool cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-30 | Exploit code |
| CVE-2022-45788 | Schneider Electric EcoStruxure Control Expert improper check for exceptional conditions | 7.5CNA v3.1 | 1.2% | 2023-01-30 | Fix |
| CVE-2022-42484 | FreshTomato httpd logs/view.cgi functionality OS command injection | 9.8v3.1 | 6.0% | 2023-01-30 | |
| CVE-2022-40137 | Lenovo BIOS WMI SMI handler in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-40136 | Lenovo BIOS information disclosure | 4.4CNA v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-40135 | Lenovo BIOS information disclosure | 4.4CNA v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-40134 | Lenovo BIOS information disclosure | 4.4CNA v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-38451 | FreshTomato httpd update.cgi functionality path traversal | 7.5v3.1 | 2.1% | 2023-01-30 | |
| CVE-2022-34888 | Lenovo XClarity Controller incomplete denylist | 2.7CNA v3.1 | 0.4% | 2023-01-30 | Fix |
| CVE-2022-34885 | Motorola MR2600 Router arbitrary code execution | 7.2CNA v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-34884 | Lenovo XClarity Controller Remote Presence subsystem buffer overflow | 7.2CNA v3.1 | 0.6% | 2023-01-30 | Fix |
| CVE-2022-32748 | Schneider Electric EcoStruxure™ Cybersecurity Admin Expert (CAE) improper certificate validation | 7.9CNA v3.1 | 0.1% | 2023-01-30 | Fix |
| CVE-2022-32747 | Schneider Electric EcoStruxure™ Cybersecurity Admin Expert (CAE) authentication bypass by spoofing | 8.0CNA v3.1 | 0.3% | 2023-01-30 | Fix |
| CVE-2022-32529 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-32528 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) missing authentication | 8.6CNA v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-32527 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-32526 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-32525 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-32524 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-32523 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-32522 | Schneider Electric IGSS Data Server (IGSSdataServer.exe) buffer overflow | 9.8CNA v3.1 | 1.1% | 2023-01-30 | Fix |
| CVE-2022-32521 | Schneider Electric Data Center Expert deserialization of untrusted data | 7.1CNA v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-32520 | Schneider Electric Data Center Expert insufficiently protected credentials | 8.0CNA v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-32519 | Schneider Electric Data Center Expert recoverable password storage | 8.0CNA v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-32518 | Schneider Electric Data Center Expert insufficiently protected credentials | 8.0CNA v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-32517 | Schneider Electric Conext™ ComBox clickjacking | 6.5CNA v3.1 | 0.4% | 2023-01-30 | Fix |
| CVE-2022-32516 | Schneider Electric Conext™ ComBox cross-site request forgery | 7.5CNA v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2022-32515 | Schneider Electric Conext™ ComBox missing brute-force protection | 8.6CNA v3.1 | 0.6% | 2023-01-30 | Fix |
| CVE-2022-32514 | Schneider Electric C-Bus Network Automation Controller, LSS5500NAC improper authentication | 9.8CNA v3.1 | 0.8% | 2023-01-30 | Fix |
| CVE-2022-32513 | Schneider Electric C-Bus Network Automation Controller, LSS5500NAC weak password requirements | 9.8CNA v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2022-32512 | Schneider Electric CanBRASS memory corruption | 5.3CNA v3.1 | 0.3% | 2023-01-30 | Fix |
| CVE-2022-27596 | QNAP QTS and QuTS hero SQL injection | 9.8CNA v3.1 | 2.7% | 2023-01-30 | Fix |
| CVE-2022-26872 | AMI MegaRAC SPx12 password reset interception via API | 8.8v3.1 | 0.8% | 2023-01-30 | Fix |
| CVE-2022-25967 | Eta vulnerable to code injection via templates rendered with user-defined data | 8.8v3.1 | 2.0% | 2023-01-30 | Fix |
| CVE-2022-25936 | Servst vulnerable to path traversal | 7.5v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2022-23334 | Ip-label Newtest improper signature verification | 9.8v3.1 | 0.4% | 2023-01-30 | |
| CVE-2022-22732 | Schneider Electric EcoStruxure Power Commission resource exposure | 3.9CNA v3.1 | 0.3% | 2023-01-30 | Fix |
| CVE-2022-22731 | Schneider Electric EcoStruxure Power Commission path traversal | 6.5CNA v3.1 | 0.8% | 2023-01-30 | Fix |
| CVE-2022-4872 | WooCommerce Chained Products WordPress plugin unauthenticated arbitrary options update to no | 4.3NVD v3.1 | 0.3% | 2023-01-30 | Fix |
| CVE-2022-4837 | CPO Companion WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4835 | Social Sharing Toolkit WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | |
| CVE-2022-4834 | CPT Bootstrap Carousel WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4831 | The Custom User Profile Fields for User Registration WordPress plugin before 1.8.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which cou | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4828 | Bold Timeline Lite WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 1.0% | 2023-01-30 | Fix |
| CVE-2022-4794 | AAWP WordPress plugin Unsafe URL Handling | 7.5NVD v3.1 | 0.8% | 2023-01-30 | Fix |
| CVE-2022-4793 | Blog Designer Post and Widget WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-01-30 | Fix |
| CVE-2022-4792 | News and Blog Designer Pack WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-01-30 | Fix |
| CVE-2022-4787 | Themify Shortcodes WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4781 | Accordion Shortcodes WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | |
| CVE-2022-4776 | CC Child Pages WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4765 | Portfolio for Elementor, Image Gallery and Post Grid PowerFolio WordPress plugin stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4763 | Icon Widget WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4749 | Posts List Designer by Category WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4699 | MediaElement.js HTML5 Video and Audio Player WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | |
| CVE-2022-4680 | Revive Old Posts Social Media Auto Post and Scheduling WordPress plugin PHP object injection | 7.2NVD v3.1 | 1.0% | 2023-01-30 | Fix |
| CVE-2022-4671 | PixCodes WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4667 | RSS Aggregator by Feedzy WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4654 | Pricing Tables WordPress Plugin Easy Pricing Tables Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4651 | Justified Gallery WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4649 | WP Extended Search WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4553 | FL3R FeelBox WordPress plugin Moods reset via CSRF | 4.3NVD v3.1 | 0.3% | 2023-01-30 | |
| CVE-2022-4552 | FL3R FeelBox WordPress plugin settings update via CSRF to stored XSS | 6.1NVD v3.1 | 0.3% | 2023-01-30 | |
| CVE-2022-4496 | miniOrange WordPress SAML SSO multiple versions open redirect in SSO login | 6.1NVD v3.1 | 0.6% | 2023-01-30 | Fix |
| CVE-2022-4472 | Simple Sitemap WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4470 | Widgets for Google Reviews WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2022-4395 | Membership For WooCommerce WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 17.6% | 2023-01-30 | Exploit codeFix |
| CVE-2022-4306 | Panda Pods Repeater Field WordPress plugin reflected XSS | 5.4NVD v3.1 | 0.8% | 2023-01-30 | NucleiFix |
| CVE-2022-2988 | Schneider Electric SoMachine HVAC out-of-bounds write | 4.3CNA v3.1 | 0.4% | 2023-01-30 | Fix |
| CVE-2022-0223 | Schneider Electric EcoStruxure Power Commission path traversal | 6.5CNA v3.1 | 0.8% | 2023-01-30 | Fix |
| CVE-2022-48285 | JSZip contains path traversal via loadAsync | 7.3v3.1 | 1.4% | 2023-01-29 | Fix |
| CVE-2022-48118 | Jorani cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-27 | |
| CVE-2022-48116 | Ayacms code injection | 7.2v3.1 | 1.4% | 2023-01-27 | |
| CVE-2022-48108 | D-Link DIR-878 OS command injection | 9.8v3.1 | 3.1% | 2023-01-27 | |
| CVE-2022-48107 | D-Link DIR-878 OS command injection | 9.8v3.1 | 3.1% | 2023-01-27 | |
| CVE-2022-48073 | Phicomm K2 cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2023-01-27 | |
| CVE-2022-48072 | Phicomm K2 OS command injection | 7.8v3.1 | 0.9% | 2023-01-27 | |
| CVE-2022-48071 | Phicomm K2 cleartext storage of sensitive information | 7.5v3.1 | 0.4% | 2023-01-27 | |
| CVE-2022-48070 | Phicomm K2 OS command injection | 7.8v3.1 | 0.9% | 2023-01-27 | |
| CVE-2022-48069 | TOTOLINK A830R OS command injection | 7.5v3.1 | 1.4% | 2023-01-27 | |
| CVE-2022-48067 | TOTOLINK A830R An information disclosure | 5.5v3.1 | 0.2% | 2023-01-27 | |
| CVE-2022-48066 | TOTOLINK A830R improper authentication | 9.8v3.1 | 2.4% | 2023-01-27 | |
| CVE-2022-48013 | OpenCATS cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-27 | |
| CVE-2022-48012 | OpenCATS cross-site scripting | 6.1v3.1 | 1.4% | 2023-01-27 | Nuclei |
| CVE-2022-48011 | OpenCATS SQL injection | 9.8v3.1 | 1.1% | 2023-01-27 | |
| CVE-2022-48010 | LimeSurvey cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-27 | Fix |
| CVE-2022-48008 | LimeSurvey plugin manager arbitrary file upload | 9.8v3.1 | 1.3% | 2023-01-27 | Fix |
| CVE-2022-48007 | Piwigo identification.php stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-27 | |
| CVE-2022-47632 | Razer synapse uncontrolled search path | 6.8v3.1 | 0.6% | 2023-01-27 | |
| CVE-2022-46968 | Revenue Collection System /index.php?page=help stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-27 | |
| CVE-2022-44718 | Netscout Ngeniusone open redirect | 3.5v3.1 | 0.3% | 2023-01-27 | Fix |
| CVE-2022-44717 | Netscout Ngeniusone open redirect | 3.1v3.1 | 0.3% | 2023-01-27 | Fix |
| CVE-2022-44715 | Netscout Ngeniusone incorrect permission assignment | 8.8v3.1 | 0.7% | 2023-01-27 | Fix |
| CVE-2022-44298 | Sscms Siteserver Cms SQL injection | 9.8v3.1 | 0.7% | 2023-01-27 | |
| CVE-2022-44029 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-44028 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-44027 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-44026 | Netscout Ngeniusone cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-44025 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-44024 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-43980 | Artica PFMS Pandora FMS cross-site scripting vulnerability in the network maps edit functionality | 5.4NVD v3.1 | 0.3% | 2023-01-27 | Fix |
| CVE-2022-43979 | Artica PFMS Pandora FMS path traversal leading to local file inclusion | 9.8v3.1 | 0.8% | 2023-01-27 | Fix |
| CVE-2022-43978 | Artica PFMS Pandora FMS limited authentication bypass due to hard-coded secret | 3.7NVD v3.1 | 0.3% | 2023-01-27 | Fix |
| CVE-2022-39813 | Italtel Netmatch-s Ci cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-27 | |
| CVE-2022-39812 | Italtel Netmatch-s Ci path traversal | 7.5v3.1 | 1.0% | 2023-01-27 | |
| CVE-2022-39811 | Italtel Netmatch-s Ci missing authorization | 9.1v3.1 | 0.8% | 2023-01-27 | |
| CVE-2022-39380 | wire-webapp contains improper handling of exceptional conditions leading to a DoS | 5.3CNA v3.1 | 0.6% | 2023-01-27 | Fix |
| CVE-2022-39324 | Grafana vulnerable to spoofing originalUrl of snapshots | 6.7CNA v3.1 | 0.8% | 2023-01-27 | Fix |
| CVE-2022-23552 | Grafana stored XSS in FileUploader component | 7.3CNA v3.1 | 0.8% | 2023-01-27 | Fix |
| CVE-2022-4335 | GitLab server-side request forgery | 4.3CNA v3.1 | 0.8% | 2023-01-27 | Fix |
| CVE-2022-4285 | binutils null pointer dereference | 5.5NVD v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2022-4255 | GitLab webhook payload information disclosure | 4.3CNA v3.1 | 0.5% | 2023-01-27 | Fix |
| CVE-2022-4205 | GitLab type confusion | 6.3CNA v3.1 | 0.6% | 2023-01-27 | Fix |
| CVE-2022-4201 | GitLab blind server-side request forgery | 3.5CNA v3.1 | 0.5% | 2023-01-27 | Fix |
| CVE-2022-4139 | kernel improper preservation of permissions | 7.8NVD v3.1 | 0.3% | 2023-01-27 | Fix |
| CVE-2022-2712 | Path traversal in Eclipse GlassFish | 6.5CNA v3.1 | 0.9% | 2023-01-27 | Fix |
| CVE-2022-48199 | Softperfect Networx incorrect default permissions | 8.8v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2022-47951 | OpenStack Cinder, Glance, and Nova vulnerable to path traversal | 5.7v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-47767 | Solar-log 1000 hidden functionality | 9.8v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2022-47615 | LearnPress WordPress plugin local file inclusion | 9.8v3.1 | 5.1% | 2023-01-26 | NucleiExploit codeFix |
| CVE-2022-47100 | Sengled Es21-n1eaw improper input validation | 7.5v3.1 | 1.0% | 2023-01-26 | |
| CVE-2022-47073 | Small CRM Create Ticket page cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-26 | |
| CVE-2022-47052 | NETGEAR AC1200 R6220 CRLF injection | 6.1v3.1 | 0.6% | 2023-01-26 | Exploit code |
| CVE-2022-47042 | Mingsoft MCMS arbitrary file write in net.Mingsoft:ms-mcms | 8.8v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-47040 | ASKEY Rtf3505vw-n1 incorrect default permissions | 7.8v3.1 | 0.3% | 2023-01-26 | |
| CVE-2022-46999 | TuziCMS SQL injection | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2022-46998 | Taogogo taoCMS server-side request forgery | 9.8v3.1 | 1.1% | 2023-01-26 | |
| CVE-2022-46967 | Revenue Collection System An improper access control | 9.8v3.1 | 1.1% | 2023-01-26 | |
| CVE-2022-46966 | Revenue Collection System SQL injection | 9.8v3.1 | 1.2% | 2023-01-26 | |
| CVE-2022-46957 | Online Graduate Tracer System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-26 | |
| CVE-2022-46624 | Online Graduate Tracer System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-26 | |
| CVE-2022-46128 | PHPGurukul Doctor Appointment Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-26 | |
| CVE-2022-45920 | Softing Uatoolkit Embedded memory leak | 7.5v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2022-45820 | LearnPress WordPress plugin SQL injection | 8.8NVD v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-45808 | LearnPress WordPress plugin SQL injection | 9.8v3.1 | 4.3% | 2023-01-26 | NucleiExploit codeFix |
| CVE-2022-45770 | Adguard adgnetworkwfpdrv.sys improper input validation | 7.8v3.1 | 0.6% | 2023-01-26 | Exploit codeFix |
| CVE-2022-45730 | PHPGurukul Doctor Appointment Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-26 | |
| CVE-2022-44297 | Sscms Siteserver Cms SQL injection | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2022-44264 | Dentsplysirona Sidexis unquoted search path | 7.8v3.1 | 0.3% | 2023-01-26 | |
| CVE-2022-44263 | Dentsplysirona Sidexis incorrect permission assignment | 7.8v3.1 | 0.3% | 2023-01-26 | |
| CVE-2022-44018 | Softing Uatoolkit Embedded null pointer dereference | 7.5v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2022-43997 | Aternity improper privilege management | 7.8v3.1 | 0.4% | 2023-01-26 | |
| CVE-2022-43917 | IBM WebSphere Application Server information disclosure | 5.9CNA v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2022-43864 | IBM Business Automation Workflow information disclosure | 7.5CNA v3.1 | 2.0% | 2023-01-26 | Fix |
| CVE-2022-42493 | Siretta QUARTZ-GOLD m2m binary OS command injection | 9.8v3.1 | 3.5% | 2023-01-26 | |
| CVE-2022-42492 | Siretta QUARTZ-GOLD m2m binary OS command injection | 9.8v3.1 | 3.2% | 2023-01-26 | |
| CVE-2022-42491 | Siretta QUARTZ-GOLD m2m binary OS command injection | 9.8v3.1 | 3.2% | 2023-01-26 | |
| CVE-2022-42490 | Siretta QUARTZ-GOLD m2m binary OS command injection | 9.8v3.1 | 3.5% | 2023-01-26 | |
| CVE-2022-42423 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42421 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42420 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42419 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42418 | PDF-XChange Editor untrusted pointer dereference | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42417 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42416 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42415 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42414 | PDF-XChange Editor use-after-free | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42413 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42412 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42411 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42410 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42409 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42408 | PDF-XChange Editor use-after-free | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42407 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42406 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42405 | PDF-XChange Editor heap-based buffer overflow | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42404 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42403 | PDF-XChange Editor heap-based buffer overflow | 7.8v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2022-42402 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42401 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42400 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42399 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42398 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42397 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42396 | PDF-XChange Editor untrusted pointer dereference | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42395 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42394 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42393 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42392 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42391 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42390 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42389 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42388 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42387 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42386 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42385 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42384 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42383 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42382 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42381 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42380 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42379 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42378 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42377 | PDF-XChange Editor memory corruption | 7.8v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42376 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-42375 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42374 | PDF-XChange Editor use-after-free | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42373 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42372 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42371 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42370 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42369 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-42330 | Xen Xenstore denial of service | 7.5v3.1 | 1.4% | 2023-01-26 | Fix |
| CVE-2022-41991 | Siretta QUARTZ-GOLD m2m DELETE_FILE cmd functionality heap-based buffer overflow | 9.8v3.1 | 1.5% | 2023-01-26 | |
| CVE-2022-41941 | glpi contains XSS Stored inside Standard Interface Help Link href attribute | 6.2CNA v3.1 | 0.6% | 2023-01-26 | |
| CVE-2022-41154 | Siretta QUARTZ-GOLD m2m DELETE_FILE cmd functionality path traversal | 6.5NVD v3.1 | 1.9% | 2023-01-26 | |
| CVE-2022-41153 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41152 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41151 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41150 | PDF-XChange Editor out-of-bounds read | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41149 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41148 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41147 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41146 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41145 | PDF-XChange Editor out-of-bounds read | 5.5v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41144 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41143 | PDF-XChange Editor out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41142 | Centreon SQL injection | 8.8v3.1 | 85.0% | 2023-01-26 | Fix |
| CVE-2022-41141 | Windscribe uncontrolled search path | 7.8v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2022-41140 | D-Link Multiple Routers stack-based buffer overflow | 8.8v3.1 | 1.1% | 2023-01-26 | Fix |
| CVE-2022-41030 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 2.7% | 2023-01-26 | |
| CVE-2022-41029 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 2.2% | 2023-01-26 | |
| CVE-2022-41028 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 2.4% | 2023-01-26 | |
| CVE-2022-41027 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 2.2% | 2023-01-26 | |
| CVE-2022-41026 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41025 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41024 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41023 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41022 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41021 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41020 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 7.2v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41019 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41018 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.8% | 2023-01-26 | |
| CVE-2022-41017 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.8% | 2023-01-26 | |
| CVE-2022-41016 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41015 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41014 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41013 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41012 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41011 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41010 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41009 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41008 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41007 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41006 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41005 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41004 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41003 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41002 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41001 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-41000 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.7% | 2023-01-26 | |
| CVE-2022-40999 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40998 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40997 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40996 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40995 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40994 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40993 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40992 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40991 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40990 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40989 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40988 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40987 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40986 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-01-26 | |
| CVE-2022-40985 | Siretta QUARTZ-GOLD DetranCLI command parsing functionality stack-based buffer overflow | 9.8v3.1 | 1.6% | 2023-01-26 | |
| CVE-2022-40969 | Siretta QUARTZ-GOLD httpd delfile.cgi functionality OS command injection | 8.8v3.1 | 5.8% | 2023-01-26 | |
| CVE-2022-40720 | D-Link DIR-2150 OS command injection | 8.8v3.1 | 1.8% | 2023-01-26 | Fix |
| CVE-2022-40719 | D-Link DIR-2150 OS command injection | 8.8v3.1 | 1.6% | 2023-01-26 | Fix |
| CVE-2022-40718 | D-Link DIR-2150 stack-based buffer overflow | 8.8v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2022-40717 | D-Link DIR-2150 stack-based buffer overflow | 8.8v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2022-40701 | Siretta QUARTZ-GOLD httpd delfile.cgi functionality path traversal | 8.1v3.1 | 2.6% | 2023-01-26 | |
| CVE-2022-40222 | Siretta QUARTZ-GOLD m2m DELETE_FILE cmd functionality OS command injection | 9.8v3.1 | 4.3% | 2023-01-26 | |
| CVE-2022-40220 | Siretta QUARTZ-GOLD httpd txt/restore.cgi functionality OS command injection | 8.8v3.1 | 4.1% | 2023-01-26 | |
| CVE-2022-40037 | Javaweb Blog unrestricted file upload | 9.8v3.1 | 1.6% | 2023-01-26 | |
| CVE-2022-40036 | Blog-ssm improper access control | 6.5v3.1 | 0.7% | 2023-01-26 | |
| CVE-2022-40035 | Blog-ssm Rawchen file upload | 8.8v3.1 | 2.2% | 2023-01-26 | |
| CVE-2022-39045 | Siretta QUARTZ-GOLD path traversal | 8.8v3.1 | 3.7% | 2023-01-26 | |
| CVE-2022-38775 | Elastic Endpoint Security improper privilege management | 7.8v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-38774 | Elastic Endpoint Security and Elastic Endgame Security improper privilege management | 7.8v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2022-38758 | XSS vulnerabilities in iManager | 7.2CNA v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2022-38715 | Siretta QUARTZ-GOLD active debug code | 8.8v3.1 | 3.7% | 2023-01-26 | |
| CVE-2022-38459 | Siretta QUARTZ-GOLD httpd downfile.cgi functionality stack-based buffer overflow | 8.8v3.1 | 3.9% | 2023-01-26 | |
| CVE-2022-38088 | Siretta QUARTZ-GOLD httpd downfile.cgi functionality path traversal | 6.5v3.1 | 2.3% | 2023-01-26 | |
| CVE-2022-38066 | Siretta QUARTZ-GOLD httpd SNMP functionality OS command injection | 8.8v3.1 | 7.1% | 2023-01-26 | |
| CVE-2022-36279 | Siretta QUARTZ-GOLD httpd delfile.cgi functionality stack-based buffer overflow | 8.8v3.1 | 3.2% | 2023-01-26 | |
| CVE-2022-34405 | Dell CPG Drivers improper authorization | 7.3CNA v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-31711 | vRealize Log Insight (vRLI) information disclosure | 5.3v3.1 | 24.0% | 2023-01-26 | NucleiMetasploitExploit codeKCVFix |
| CVE-2022-31710 | vRealize Log Insight (vRLI) deserialization of untrusted data | 7.5v3.1 | 1.5% | 2023-01-26 | Fix |
| CVE-2022-31706 | vRealize Log Insight (vRLI) path traversal | 9.8v3.1 | 87.1% | 2023-01-26 | NucleiMetasploitExploit codeKCVFix |
| CVE-2022-31704 | vRealize Log Insight (vRLI) missing authorization | 9.8v3.1 | 81.0% | 2023-01-26 | NucleiMetasploitExploit codeKCVFix |
| CVE-2022-29844 | Western Digital My Cloud OS 5 arbitrary file read and write vulnerability via ftp | 6.7CNA v3.1 | 36.4% | 2023-01-26 | Fix |
| CVE-2022-29843 | Western Digital My Cloud OS 5 devices command injection | 6.2CNA v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2022-27508 | Citirx Citrix Application Delivery Controller and Citrix Gateway unauthenticated denial of service | 7.5v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-27507 | Citirx Citrix Application Delivery Controller and Citrix Gateway authenticated denial of service | 6.5v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-26329 | Micro Focus NetIQ Identity Manager file existence disclosue vulnerability in IDM plugin | 1.8CNA v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2022-25962 | Command injection in vagrant.js | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2022-25927 | ReDoS vulnerability in ua-parser-js version | 7.5v3.1 | 1.7% | 2023-01-26 | Exploit codeFix |
| CVE-2022-25908 | Command injection in create-choo-electron | 9.8v3.1 | 1.5% | 2023-01-26 | |
| CVE-2022-25894 | Remote code execution in com.bstek.Uflo:uflo-core | 9.8v3.1 | 2.6% | 2023-01-26 | |
| CVE-2022-25882 | Directory traversal in onnx | 7.5v3.1 | 1.6% | 2023-01-26 | Fix |
| CVE-2022-25860 | Remote code execution in simple-git | 9.8v3.1 | 2.7% | 2023-01-26 | Fix |
| CVE-2022-25847 | Cross-site scripting (XSS) in serve-lite | 6.1v3.1 | 0.6% | 2023-01-26 | |
| CVE-2022-25350 | Command injection in puppet-facter | 7.8v3.1 | 1.2% | 2023-01-26 | |
| CVE-2022-22462 | IBM Security Verify Governance, Identity Manager virtual appliance component information disclosure | 3.7CNA v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2022-21810 | Command injection in smartctl | 7.8v3.1 | 1.2% | 2023-01-26 | |
| CVE-2022-21192 | Directory traversal vulnerability in serve-lite | 7.5v3.1 | 1.3% | 2023-01-26 | |
| CVE-2022-20494 | Android AutomaticZenRule.java denial of service | 5.5v3.1 | 0.4% | 2023-01-26 | Exploit codeFix |
| CVE-2022-20493 | Android Condition.java privilege escalation | 7.8NVD v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2022-20492 | Android AutomaticZenRule.java privilege escalation | 7.8v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-20490 | Android AutomaticZenRule.java privilege escalation | 7.8v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-20489 | Android AutomaticZenRule.java privilege escalation | 7.8v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-20461 | Android out-of-bounds read | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2022-20458 | Android sensitive information in log files | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2022-20456 | Android AutomaticZenRule.java privilege escalation | 7.8v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2022-20235 | Android out-of-bounds write | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2022-20215 | Android MasterClearConfirmFragment.java denial of service | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2022-20214 | Android clickjacking | 4.7v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2022-20213 | Android AndroidManifest.xml denial of service | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2022-4510 | Path traversal in binwalk | 7.8NVD v3.1 | 22.0% | 2023-01-26 | Exploit codeFix |
| CVE-2022-4092 | GitLab cross-site scripting | 5.7CNA v3.1 | 1.4% | 2023-01-26 | Fix |
| CVE-2022-4054 | GitLab information disclosure | 5.5CNA v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2022-3924 | ISC BIND 9 stale answer client timeout handling denial of service | 7.5CNA v3.1 | 16.1% | 2023-01-26 | Fix |
| CVE-2022-3902 | GitLab sensitive information in log files | 5.5CNA v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2022-3820 | GitLab authentication bypass by spoofing | 6.5CNA v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2022-3740 | GitLab improper authorization | 6.5CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2022-3736 | ISC BIND 9 stale-cache resolver denial of service | 7.5CNA v3.1 | 48.7% | 2023-01-26 | Fix |
| CVE-2022-3572 | GitLab cross-site scripting | 9.3CNA v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-3488 | ISC BIND 9 reachable assertion | 7.5CNA v3.1 | 19.2% | 2023-01-26 | Fix |
| CVE-2022-3482 | GitLab An improper access control | 5.3CNA v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-3478 | GitLab unrestricted file upload | 4.3CNA v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2022-3432 | Lenovo BIOS incorrect default permissions | 6.7CNA v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-3094 | ISC BIND 9 an UPDATE message flood may cause named to exhaust all available memory | 7.5CNA v3.1 | 13.2% | 2023-01-26 | Fix |
| CVE-2022-1892 | Lenovo BIOS SystemBootManagerDxe driver in some buffer overflow | 6.7CNA v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-1891 | Lenovo BIOS SystemLoadDefaultDxe driver in some buffer overflow | 6.7CNA v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-1890 | Lenovo BIOS ReadyBootDxe driver in some buffer overflow | 6.7CNA v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2022-3806 | zephyrproject-rtos Zephyr Bluetooth HCI Error Handling double free | 9.8v3.1 | 1.0% | 2023-01-25 | |
| CVE-2022-45639 | sleuthkit The Sleuth Kit OS command injection | 7.8v3.1 | 4.7% | 2023-01-24 | Exploit code |
| CVE-2022-4554 | Reflected XSS B2B Dealer Ordering System | 5.4v3.1 | 0.3% | 2023-01-24 | |
| CVE-2022-48281 | libtiff out-of-bounds write | 5.5v3.1 | 0.4% | 2023-01-23 | Fix |
| CVE-2022-47065 | TRENDnet Tew-820ap stack-based buffer overflow | 8.8v3.1 | 1.1% | 2023-01-23 | |
| CVE-2022-46959 | Path traversal in github.com/go-sonic/sonic | 4.3v3.1 | 0.8% | 2023-01-23 | Fix |
| CVE-2022-46639 | Correos path traversal | 7.5v3.1 | 1.0% | 2023-01-23 | |
| CVE-2022-41505 | TP-Link Tapo C200 V1 missing authentication | 6.4v3.1 | 0.4% | 2023-01-23 | |
| CVE-2022-40034 | Javaweb Blog Rawchen blog-ssm v1.0 cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-23 | |
| CVE-2022-38725 | One Identity Syslog-ng Store Box RFC3164 parser integer overflow | 7.5v3.1 | 2.4% | 2023-01-23 | Exploit codeFix |
| CVE-2022-37719 | Edgenexus Application Delivery Controller management portal of JetNexus/ cross-site request forgery | 8.8v3.1 | 0.4% | 2023-01-23 | |
| CVE-2022-37718 | Edgenexus Application Delivery Controller OS command injection | 8.8v3.1 | 3.5% | 2023-01-23 | Fix |
| CVE-2022-23005 | Host Boot ROM Code vulnerability in Systems Implementing UFS Boot feature | 8.7CNA v3.1 | 0.8% | 2023-01-23 | Fix |
| CVE-2022-4832 | Store Locator WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4816 | Lenovo Safecenter denial of service | 6.2CNA v3.1 | 0.2% | 2023-01-23 | Fix |
| CVE-2022-4790 | WP Google My Business Auto Publish WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4789 | WPZOOM Portfolio WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4775 | GeoDirectory WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4760 | OneClick Chat to Order WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4758 | 10WebMapBuilder WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4753 | Print-O-Matic WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4751 | Word Balloon WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4746 | FluentAuth WordPress plugin bypass blocks by IP spoofing | 7.5NVD v3.1 | 0.7% | 2023-01-23 | Fix |
| CVE-2022-4718 | Landing Page Builder WordPress plugin Contributor+ cross-site scripting via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4716 | WP Popups WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4715 | Structured Content WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4706 | Genesis Columns Advanced WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4693 | User Verification WordPress plugin authentication bypass | 9.8NVD v3.1 | 1.6% | 2023-01-23 | Fix |
| CVE-2022-4675 | Mongoose Page WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4673 | Rate my Post WP Rating System WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4672 | WordPress Simple Shopping Cart plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4668 | Easy Appointments WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4650 | HashBar WordPress Notification Bar plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4629 | Product Slider for WooCommerce WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4627 | ShiftNav Responsive Mobile Menu WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4625 | Login Logout Menu WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4624 | GS Logo Slider WordPress plugin Contributor+ stored XSS in shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4576 | Easy Bootstrap Shortcode WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | |
| CVE-2022-4570 | Top 10 WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4548 | Imageseo Optimize images ALT Text and names for SEO using AI plugin cross-site request forgery | 6.5NVD v3.1 | 0.3% | 2023-01-23 | Fix |
| CVE-2022-4545 | Sitemap WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4542 | Compact WP Audio Player WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4509 | Content Control WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4485 | Page-list WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4475 | Collapse-O-Matic WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4474 | Easy Social Feed Social Photos Gallery Post Feed Like Box WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4467 | Search and Filter WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4443 | BruteBank - WP Security and Firewall WordPress plugin settings update via CSRF | 6.5NVD v3.1 | 0.3% | 2023-01-23 | Fix |
| CVE-2022-4383 | CBX Petition for WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.0% | 2023-01-23 | Fix |
| CVE-2022-4346 | All In One WP Security and Firewall WordPress plugin Configuration leak | 5.3NVD v3.1 | 0.7% | 2023-01-23 | Fix |
| CVE-2022-4323 | Google Analyticator WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 1.0% | 2023-01-23 | Fix |
| CVE-2022-4307 | Pardakht Delkhah WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-01-23 | Fix |
| CVE-2022-4305 | Login as User or Customer WordPress plugin unauthenticated privilege escalation to admin | 9.8NVD v3.1 | 38.6% | 2023-01-23 | NucleiFix |
| CVE-2022-4303 | WP Limit Login Attempts WordPress plugin IP spoofing | 7.5NVD v3.1 | 0.7% | 2023-01-23 | |
| CVE-2022-4230 | WP Statistics WordPress plugin authenticated SQLi | 8.8NVD v3.1 | 35.7% | 2023-01-23 | Fix |
| CVE-2022-4017 | Booster for WooCommerce multiple CSRF | 8.8NVD v3.1 | 0.3% | 2023-01-23 | Fix |
| CVE-2022-3811 | EU Cookie Law WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-23 | |
| CVE-2022-3430 | Lenovo BIOS incorrect default permissions | 6.7CNA v3.1 | 0.3% | 2023-01-23 | Fix |
| CVE-2022-3425 | Google Analyticator WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 1.0% | 2023-01-23 | Fix |
| CVE-2022-0316 | WeStand WordPress theme multiple themes unauthenticated arbitrary file upload | 9.8NVD v3.1 | 2.1% | 2023-01-23 | Exploit codeFix |
| CVE-2022-48279 | OWASP ModSecurity interpretation conflict | 7.5v3.1 | 1.2% | 2023-01-20 | Fix |
| CVE-2022-48191 | Trend Micro Maxium Security (Consumer) time-of-check time-of-use race condition | 7.0v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2022-48152 | RemoteClinic SQL injection | 9.8v3.1 | 0.8% | 2023-01-20 | |
| CVE-2022-48126 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2023-01-20 | |
| CVE-2022-48125 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2023-01-20 | |
| CVE-2022-48124 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2023-01-20 | |
| CVE-2022-48123 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2023-01-20 | |
| CVE-2022-48122 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2023-01-20 | |
| CVE-2022-48121 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 2.0% | 2023-01-20 | |
| CVE-2022-48120 | Hospital Management System kishan0725 SQL injection | 9.8v3.1 | 0.9% | 2023-01-20 | |
| CVE-2022-47747 | Kraken has arbitrary file read vulnerability via component testfs | 7.5v3.1 | 0.8% | 2023-01-20 | |
| CVE-2022-47732 | Yeastar N412 weak password hash | 7.5v3.1 | 0.5% | 2023-01-20 | Fix |
| CVE-2022-47024 | Vim null pointer dereference | 7.8v3.1 | 0.3% | 2023-01-20 | Fix |
| CVE-2022-47021 | Xiph Opusfile functions op_get_data and op_open1 null pointer dereference | 7.8v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2022-47015 | MariaDB null pointer dereference | 6.5v3.1 | 1.5% | 2023-01-20 | Fix |
| CVE-2022-47012 | SolarWinds Dynamips function gen_eth_recv in GNS3 uninitialized variable use | 7.5v3.1 | 0.9% | 2023-01-20 | |
| CVE-2022-45748 | assimp use-after-free | 8.8v3.1 | 0.7% | 2023-01-20 | Fix |
| CVE-2022-45558 | Left Hundredrabbits cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45557 | Left Hundredrabbits cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45542 | EyouCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45541 | EyouCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45540 | EyouCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45539 | EyouCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45538 | EyouCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-45537 | EyouCMS cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2022-43959 | Bitrix24 AD/LDAP server settings in insufficiently protected credentials | 4.9v3.1 | 1.0% | 2023-01-20 | Exploit codeFix |
| CVE-2022-43704 | Sinilink Xy-wft1 authentication bypass by replay | 5.9v3.1 | 1.9% | 2023-01-20 | Exploit code |
| CVE-2022-41733 | IBM InfoSphere Information Server denial of service | 5.3CNA v3.1 | 0.7% | 2023-01-20 | Fix |
| CVE-2022-41441 | Reqlogic Multiple cross-site scripting | 6.1v3.1 | 5.2% | 2023-01-20 | NucleiExploit code |
| CVE-2022-40267 | Authentication bypass vulnerability in Web Server function on MELSEC Series | 5.9CNA v3.1 | 1.2% | 2023-01-20 | Fix |
| CVE-2022-39193 | mediawiki information disclosure | 5.3v3.1 | 0.6% | 2023-01-20 | Fix |
| CVE-2022-38112 | SolarWinds Database Performance Analyzer (DPA) sensitive information disclosure | 7.5CNA v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2022-38110 | SolarWinds Database Performance Analyzer (DPA) reflected cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2022-35977 | Integer overflow in certain command arguments can drive Redis to OOM panic | 5.5CNA v3.1 | 13.5% | 2023-01-20 | Fix |
| CVE-2022-25631 | Symantec Endpoint Protection improper privilege management | 7.8NVD v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2022-20967 | Cisco Identity Services Engine Software cross-site scripting | 4.8CNA v3.1 | 0.5% | 2023-01-20 | Fix |
| CVE-2022-20966 | Cisco Identity Services Engine Software cross-site scripting | 5.4CNA v3.1 | 27.6% | 2023-01-20 | Fix |
| CVE-2022-20965 | Cisco Identity Services Engine Software incorrect use of privileged APIs | 4.3CNA v3.1 | 0.6% | 2023-01-20 | Fix |
| CVE-2022-20964 | Cisco Identity Services Engine Software OS command injection | 6.3CNA v3.1 | 30.6% | 2023-01-20 | Fix |
| CVE-2022-3918 | Swift Foundation injection | 8.8v3.1 | 0.8% | 2023-01-20 | |
| CVE-2022-1109 | Lenovo Leyun An incorrect default permissions | 5.5CNA v3.1 | 0.3% | 2023-01-20 | Fix |
| CVE-2022-47766 | PopojiCMS unrestricted file upload | 8.8v3.1 | 0.8% | 2023-01-19 | |
| CVE-2022-47745 | EasyCorp ZenTao SQL injection | 8.8v3.1 | 15.4% | 2023-01-19 | |
| CVE-2022-47740 | Seltmann-webdesign Content Management System SQL injection | 9.8v3.1 | 0.8% | 2023-01-19 | |
| CVE-2022-47197 | Ghost Post Creation functionality insecure default configuration | 5.4NVD v3.1 | 1.0% | 2023-01-19 | Fix |
| CVE-2022-47196 | Ghost Post Creation functionality insecure default configuration | 5.4NVD v3.1 | 0.7% | 2023-01-19 | Fix |
| CVE-2022-47195 | Ghost Post Creation functionality insecure default configuration | 5.4NVD v3.1 | 0.7% | 2023-01-19 | Fix |
| CVE-2022-47194 | Ghost Post Creation functionality insecure default configuration | 5.4NVD v3.1 | 0.8% | 2023-01-19 | Fix |
| CVE-2022-47105 | JeecgBoot Jeecg-boot is vulnerable to SQL injection | 9.8v3.1 | 1.1% | 2023-01-19 | |
| CVE-2022-46890 | Nexusphp improper access control | 4.3v3.1 | 0.6% | 2023-01-19 | Fix |
| CVE-2022-46889 | Nexusphp A stored cross-site scripting | 5.4v3.1 | 60.1% | 2023-01-19 | Fix |
| CVE-2022-46888 | Nexusphp reflective cross-site scripting | 6.1v3.1 | 1.5% | 2023-01-19 | NucleiFix |
| CVE-2022-46887 | Nexusphp Multiple SQL injection | 9.8v3.1 | 19.4% | 2023-01-19 | Fix |
| CVE-2022-46476 | D-Link Dir-859 A1 OS command injection | 9.8v3.1 | 41.1% | 2023-01-19 | |
| CVE-2022-40697 | 3com Asesor de Cookies para normativa española WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-01-19 | |
| CVE-2022-39167 | IBM Spectrum Virtualize information disclosure | 5.9CNA v3.1 | 0.6% | 2023-01-19 | Fix |
| CVE-2022-31901 | notepad-plus-plus Notepad++ function Notepad_plus::addHotSpot buffer overflow | 6.5v3.1 | 1.3% | 2023-01-19 | Exploit code |
| CVE-2022-4892 | MyCMS Visitors module view.php build_view cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-19 | |
| CVE-2022-3738 | WAGO: Missing authentication for config export functionality in multiple products | 5.9v3.1 | 0.6% | 2023-01-19 | Fix |
| CVE-2022-3085 | Fuji Electric Tellus Lite V-Simulator stack-based buffer overflow | 7.8v3.1 | 0.2% | 2023-01-19 | Fix |
| CVE-2022-47990 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-47966 | Zoho ManageEngine Multiple Products remote code execution | 9.8NVD v3.1 | 99.8% | 2023-01-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-47950 | OpenStack Swift XML external entities (XXE) injection | 6.5v3.1 | 1.0% | 2023-01-18 | Fix |
| CVE-2022-47917 | Sewio RTLS Studio improper input validation | 6.5v3.1 | 0.7% | 2023-01-18 | Fix |
| CVE-2022-47911 | Sewio RTLS Studio backup service OS command injection | 7.2NVD v3.1 | 1.2% | 2023-01-18 | Fix |
| CVE-2022-47881 | Foxit PDF Editor out-of-bounds read | 6.5v3.1 | 0.7% | 2023-01-18 | |
| CVE-2022-47395 | Sewio RTLS Studio monitor services cross-site request forgery | 8.1v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2022-46733 | Sewio RTLS Studio backup services cross-site scripting | 9.6v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2022-46732 | GE Digital Proficy Historian local service missing authentication | 9.8v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2022-46660 | GE Digital Proficy Historian unrestricted file upload | 6.5NVD v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2022-46505 | MatrixSSL improper initialization | 7.5v3.1 | 0.9% | 2023-01-18 | Exploit codeFix |
| CVE-2022-46331 | GE Digital Proficy Historian improper access control | 8.1v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2022-45928 | Opentext Extended Ecm code injection | 8.8v3.1 | 1.7% | 2023-01-18 | |
| CVE-2022-45927 | Opentext Extended Ecm insecure direct object reference | 8.8v3.1 | 1.9% | 2023-01-18 | |
| CVE-2022-45926 | Opentext Extended Ecm server-side request forgery | 8.8v3.1 | 17.0% | 2023-01-18 | |
| CVE-2022-45925 | Opentext Extended Ecm information disclosure | 7.5v3.1 | 16.9% | 2023-01-18 | |
| CVE-2022-45924 | Opentext Extended Ecm incorrect default permissions | 8.1v3.1 | 1.4% | 2023-01-18 | |
| CVE-2022-45923 | Opentext Extended Ecm deserialization of untrusted data | 8.8v3.1 | 1.9% | 2023-01-18 | |
| CVE-2022-45922 | Opentext Extended Ecm improper authentication | 8.8v3.1 | 1.6% | 2023-01-18 | |
| CVE-2022-45613 | Bookstore Management System cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-18 | |
| CVE-2022-45444 | Sewio RTLS Studio database hard-coded credentials | 9.8v3.1 | 0.9% | 2023-01-18 | |
| CVE-2022-45127 | Sewio RTLS Studio backup service cross-site request forgery | 8.1v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2022-45103 | Dell Unisphere for PowerMax vApp arbitrary file read | 6.5CNA v3.1 | 0.7% | 2023-01-18 | Fix |
| CVE-2022-43494 | GE Digital Proficy Historian improper access control | 6.5NVD v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2022-43483 | Sewio RTLS Studio monitor service OS command injection | 7.2NVD v3.1 | 1.2% | 2023-01-18 | Fix |
| CVE-2022-43455 | Sewio RTLS Studio improper input validation | 6.5v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2022-41989 | Sewio RTLS Studio RTLS report handling out-of-bounds write | 9.8v3.1 | 0.8% | 2023-01-18 | |
| CVE-2022-41417 | BlogEngine.NET missing authorization | 9.8v3.1 | 0.8% | 2023-01-18 | |
| CVE-2022-39429 | Oracle Database denial of service | 4.3CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2022-38469 | GE Digital Proficy Historian weak password encoding | 7.5v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2022-34462 | Dell EMC Secure Connect Gateway (SCG) Policy Manager hard-coded cryptographic key | 8.4CNA v3.1 | 0.2% | 2023-01-18 | Fix |