CVE-2022 records published after 2022
Page seven of seven: records 6,001 to 6,660 of the 6,660 published after 2022, newest first. The first page carries the figures for After 2022.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2022-34460 | Dell BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-34457 | Dell Command Configure (DCC) privilege escalation | 7.3CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-34456 | Dell EMC Metro node code injection | 8.8CNA v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2022-34442 | Dell EMC Secure Connect Gateway (SCG) Policy Manager hard-coded cryptographic key | 8.0CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2022-34436 | Integrated Dell Remote Access Controller 8 improper input validation | 2.7CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2022-34435 | Integrated Dell Remote Access Controller 9 improper input validation | 2.7CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2022-34401 | Dell CPG BIOS stack-based buffer overflow | 7.5CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-34399 | Dell CPG BIOS buffer access with incorrect length | 5.1CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-34393 | Dell BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-32490 | Dell BIOS improper input validation | 7.5CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2022-25901 | cookiejar regular expression denial of service via Cookie.parse function | 7.5v3.1 | 1.5% | 2023-01-18 | Fix |
| CVE-2022-4235 | RushBet cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-18 | |
| CVE-2022-3100 | Red Hat OpenStack Platform authentication bypass | 5.9v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2022-47929 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 1.0% | 2023-01-17 | Fix |
| CVE-2022-47853 | TOTOLINK A7100RU OS command injection | 9.8v3.1 | 1.9% | 2023-01-17 | |
| CVE-2022-47318 | ruby-git code injection in ruby git | 8.0v3.1 | 1.4% | 2023-01-17 | Fix |
| CVE-2022-46891 | Arm Bifrost GPU Kernel Driver use-after-free | 8.8v3.1 | 0.8% | 2023-01-17 | Fix |
| CVE-2022-46648 | ruby-git has potential remote code execution | 8.0v3.1 | 1.4% | 2023-01-17 | Fix |
| CVE-2022-46475 | D-Link DIR-645 out-of-bounds write | 9.8v3.1 | 9.5% | 2023-01-17 | |
| CVE-2022-45440 | Zyxel AX7501-B0 firmware link following | 4.4CNA v3.1 | 0.2% | 2023-01-17 | Fix |
| CVE-2022-45439 | Zyxel AX7501-B0 firmware cleartext storage of sensitive information | 6.5CNA v3.1 | 0.2% | 2023-01-17 | Fix |
| CVE-2022-43977 | GE Ms 3000 improper access control | 9.8v3.1 | 0.6% | 2023-01-17 | |
| CVE-2022-43976 | GE Ms 3000 missing authentication | 9.8v3.1 | 0.7% | 2023-01-17 | |
| CVE-2022-43975 | GE Ms 3000 path traversal | 7.5v3.1 | 0.9% | 2023-01-17 | |
| CVE-2022-43462 | IP Blacklist Cloud WordPress plugin SQL injection (SQLi) | 7.2NVD v3.1 | 0.7% | 2023-01-17 | |
| CVE-2022-42462 | IP Blacklist Cloud WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-01-17 | |
| CVE-2022-41953 | Git clone remote code execution vulnerability in git-for-windows | 8.6CNA v3.1 | 6.8% | 2023-01-17 | Fix |
| CVE-2022-41903 | Integer overflow in `git archive`, `git log --format` leading to RCE in git | 9.8CNA v3.1 | 44.3% | 2023-01-17 | Exploit codeFix |
| CVE-2022-41861 | FreeRADIUS abinary attribute parser denial of service | 6.5NVD v3.1 | 1.1% | 2023-01-17 | Fix |
| CVE-2022-41860 | freeradius null pointer dereference | 7.5NVD v3.1 | 1.2% | 2023-01-17 | Fix |
| CVE-2022-41859 | freeradius information disclosure | 7.5NVD v3.1 | 0.9% | 2023-01-17 | Fix |
| CVE-2022-41858 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2022-40704 | phoronix-test-suite cross-site scripting | 6.1NVD v3.1 | 0.6% | 2023-01-17 | Fix |
| CVE-2022-40319 | Lsoft Listserv insecure direct object reference | 7.5v3.1 | 7.2% | 2023-01-17 | Exploit codeFix |
| CVE-2022-39195 | Lsoft Listserv A cross-site scripting | 6.1v3.1 | 6.3% | 2023-01-17 | NucleiExploit codeFix |
| CVE-2022-37436 | Apache HTTP Server: Mod_proxy allows a backend to trigger HTTP response splitting | 5.3v3.1 | 55.9% | 2023-01-17 | Fix |
| CVE-2022-36760 | Apache HTTP Server: Mod_proxy_ajp possible request smuggling | 9.0v3.1 | 1.9% | 2023-01-17 | Fix |
| CVE-2022-30544 | OSM OpenStreetMap WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2022-23739 | GitHub Enterprise Server GraphQL API incorrect authorization | 9.8v3.1 | 1.2% | 2023-01-17 | Fix |
| CVE-2022-23538 | User credentials leaked to third-party service via HTTP redirect in scs-library-client | 5.2CNA v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2022-23521 | Gitattributes parsing integer overflow in git | 9.8CNA v3.1 | 56.3% | 2023-01-17 | Fix |
| CVE-2022-4891 | Sisimai string.rb to_plain redos | 7.5v3.1 | 1.3% | 2023-01-17 | Fix |
| CVE-2022-4621 | Panasonic Sanyo CCTV Network Camera cross-site request forgery | 8.8v3.1 | 0.3% | 2023-01-17 | |
| CVE-2022-4121 | libetpan null pointer dereference | 5.5NVD v3.1 | 0.5% | 2023-01-17 | Fix |
| CVE-2022-3650 | ceph A privilege escalation | 7.8v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2022-3091 | RONDS Equipment Predictive Maintenance Solution information disclosure | 7.5v3.1 | 0.6% | 2023-01-17 | Fix |
| CVE-2022-3087 | Fuji Electric Tellus Lite V-Simulator out-of-bounds write | 7.8v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2022-2907 | GitLab information disclosure | 5.7CNA v3.1 | 0.9% | 2023-01-17 | Fix |
| CVE-2022-2893 | RONDS Equipment Predictive Maintenance Solution path traversal | 6.5NVD v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2022-2251 | GitLab Runner improper neutralization | 4.8CNA v3.1 | 1.2% | 2023-01-17 | Fix |
| CVE-2022-47630 | Trusted Firmware-a out-of-bounds read | 7.4v3.1 | 0.6% | 2023-01-16 | Fix |
| CVE-2022-45438 | Apache Superset: Dashboard metadata information leak | 5.3v3.1 | 1.2% | 2023-01-16 | Fix |
| CVE-2022-43721 | Apache Superset: Open redirect | 5.4v3.1 | 1.0% | 2023-01-16 | Fix |
| CVE-2022-43720 | Apache Superset: Improper rendering of user input | 5.4v3.1 | 1.3% | 2023-01-16 | Fix |
| CVE-2022-43719 | Apache Superset: Cross-site request forgery (CSRF) on accept, request access API | 8.8v3.1 | 0.6% | 2023-01-16 | Fix |
| CVE-2022-43718 | Apache Superset: Cross-site scripting vulnerability on upload forms | 5.4v3.1 | 1.3% | 2023-01-16 | Fix |
| CVE-2022-43717 | Apache Superset: Cross-site scripting on dashboards | 5.4v3.1 | 1.3% | 2023-01-16 | Fix |
| CVE-2022-41703 | Apache Superset: SQL injection vulnerability in adhoc clauses | 5.4v3.1 | 1.2% | 2023-01-16 | Fix |
| CVE-2022-4890 | abhilash1985 PredictApp Cookie new_framework_defaults_7_0.rb deserialization | 9.8v3.1 | 0.8% | 2023-01-16 | |
| CVE-2022-4658 | RSSImport WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-16 | |
| CVE-2022-4655 | Welcart e-Commerce WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4653 | Greenshift animation and page builder blocks WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-01-16 | Fix |
| CVE-2022-4648 | Real Testimonials WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4578 | Video Conferencing with Zoom WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4571 | Seriously Simple Podcasting WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4549 | Tickera WordPress plugin plugin data deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2023-01-16 | Fix |
| CVE-2022-4547 | Conditional Payment Methods for WooCommerce WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-01-16 | |
| CVE-2022-4544 | MashShare WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4508 | ConvertKit WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4507 | Real Cookie Banner WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4487 | Easy Accordion WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4486 | Meteor Slides WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4484 | Super Socializer WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4483 | Insert Pages WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4482 | Carousel, Slider, Gallery by WP Carousel WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4481 | Mesmerize Companion WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-01-16 | Fix |
| CVE-2022-4480 | Click to Chat WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4478 | Font Awesome WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4477 | Smash Balloon Social Post Feed WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4476 | Download Manager WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-01-16 | Fix |
| CVE-2022-4469 | Simple Membership WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4465 | WP Video Lightbox WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4464 | Themify Portfolio Post WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4460 | Sidebar Widgets by CodeLights WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | |
| CVE-2022-4453 | 3D FlipBook WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4451 | Sassy Social Share WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4449 | Page Scroll To ID WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4447 | Fontsy WordPress plugin Multiple unauthenticated SQLi | 9.8NVD v3.1 | 4.8% | 2023-01-16 | Nuclei |
| CVE-2022-4442 | Cozmoslabs Custom Post Types and Custom Fields creator plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4431 | WOOCS WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4330 | WP Attachments WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4320 | WordPress Events Calendar plugin Multiple reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-01-16 | NucleiFix |
| CVE-2022-4309 | Subscribe2 WordPress plugin user deletion via CSRF | 3.1NVD v3.1 | 0.2% | 2023-01-16 | Fix |
| CVE-2022-4299 | Metricool WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4295 | Show All Comments WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-01-16 | NucleiFix |
| CVE-2022-4258 | HIMA: Unquoted path vulnerabilities in HIMA PC based software | 7.8CNA v3.1 | 0.2% | 2023-01-16 | |
| CVE-2022-4199 | Link Library WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4101 | Images Optimize and Upload CF7 WordPress plugin unauthenticated arbitrary file deletion | 9.1NVD v3.1 | 29.4% | 2023-01-16 | Fix |
| CVE-2022-4060 | User Post Gallery WordPress plugin unauthenticated RCE | 9.8NVD v3.1 | 42.7% | 2023-01-16 | Nuclei |
| CVE-2022-3904 | MonsterInsights WordPress plugin stored cross-site scripting via Google Analytics | 6.1NVD v3.1 | 1.3% | 2023-01-16 | Exploit codeFix |
| CVE-2022-2658 | WP Spell Check WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2022-4889 | visegripped Stracker api.php getHistory SQL injection | 9.8v3.1 | 0.6% | 2023-01-15 | |
| CVE-2022-45353 | Betheme WordPress theme broken access control | 8.1v3.1 | 0.5% | 2023-01-14 | Fix |
| CVE-2022-41956 | Autolab is vulnerable to file disclosure via remote handin feature | 6.5CNA v3.1 | 1.8% | 2023-01-14 | |
| CVE-2022-41955 | Autolab is vulnerable to remote code execution (RCE) via MOSS functionality | 8.8CNA v3.1 | 1.5% | 2023-01-14 | |
| CVE-2022-38467 | CRM Perks Forms WordPress plugin reflected cross-site scripting (XSS) | 6.1v3.1 | 0.8% | 2023-01-14 | NucleiFix |
| CVE-2022-23532 | neo4j-apoc-procedures is vulnerable to path traversal | 7.1CNA v3.1 | 0.7% | 2023-01-14 | Fix |
| CVE-2022-2815 | Insecure storage of sensitive information in publify/publify | 6.5v3.1 | 0.6% | 2023-01-14 | Fix |
| CVE-2022-1812 | Integer overflow or wraparound in publify/publify | 9.8v3.1 | 30.8% | 2023-01-14 | Fix |
| CVE-2022-48258 | Eternal Terminal information disclosure | 5.3v3.1 | 1.1% | 2023-01-13 | Fix |
| CVE-2022-48257 | Eternal Terminal incorrect permission assignment | 5.3v3.1 | 0.9% | 2023-01-13 | Fix |
| CVE-2022-48256 | Technitium DNS Server infinite loop | 7.5v3.1 | 0.7% | 2023-01-13 | |
| CVE-2022-48091 | Hotel Management System cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-13 | |
| CVE-2022-48090 | Hotel Management System SQL injection | 6.5v3.1 | 0.7% | 2023-01-13 | |
| CVE-2022-46956 | Dynamic Transaction Queuing System SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46955 | Dynamic Transaction Queuing System SQL injection | 9.8v3.1 | 0.6% | 2023-01-13 | |
| CVE-2022-46954 | Dynamic Transaction Queuing System SQL injection | 9.8v3.1 | 0.6% | 2023-01-13 | |
| CVE-2022-46953 | Dynamic Transaction Queuing System SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46952 | Dynamic Transaction Queuing System SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46951 | Dynamic Transaction Queuing System SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46950 | Dynamic Transaction Queuing System SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46949 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46947 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46946 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46502 | Online Student Enrollment System SQL injection | 9.8v3.1 | 13.7% | 2023-01-13 | |
| CVE-2022-46478 | datax-web deserialization of untrusted data | 9.8v3.1 | 1.1% | 2023-01-13 | |
| CVE-2022-46471 | Online Health Care System SQL injection | 9.8v3.1 | 0.8% | 2023-01-13 | |
| CVE-2022-46463 | Linux Foundation Harbor An improper access control | 7.5NVD v3.1 | 6.2% | 2023-01-13 | Exploit codeFix |
| CVE-2022-46438 | Douco DouPHP /admin/article_category.php component cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-13 | |
| CVE-2022-46093 | Hospital Management System SQL injection | 8.2v3.1 | 0.7% | 2023-01-13 | |
| CVE-2022-45299 | Webbrowser webbrowser-rs allows attackers to access arbitrary files via supplying a crafted URL | 9.8v3.1 | 1.3% | 2023-01-13 | Exploit codeFix |
| CVE-2022-42704 | ServiceNow Employee Service Center cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-13 | Fix |
| CVE-2022-42290 | NVIDIA DGX servers OS command injection | 7.2CNA v3.1 | 1.0% | 2023-01-13 | Fix |
| CVE-2022-42289 | NVIDIA DGX servers OS command injection | 7.2CNA v3.1 | 1.0% | 2023-01-13 | Fix |
| CVE-2022-42288 | NVIDIA DGX servers timing side channel | 5.3CNA v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2022-42287 | NVIDIA DGX servers path traversal | 6.0CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42286 | NVIDIA DGX servers code execution | 6.0CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42285 | NVIDIA DGX servers denial of service | 6.0CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42284 | NVIDIA DGX servers cleartext storage of sensitive information | 6.2CNA v3.1 | 0.1% | 2023-01-13 | Fix |
| CVE-2022-42283 | NVIDIA DGX servers buffer overflow | 6.4CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42282 | NVIDIA DGX servers path traversal | 6.5CNA v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2022-42281 | NVIDIA DGX servers out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42280 | NVIDIA DGX servers path traversal | 7.1CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2022-42279 | NVIDIA DGX servers OS command injection | 7.2CNA v3.1 | 1.1% | 2023-01-13 | Fix |
| CVE-2022-42278 | NVIDIA DGX servers code execution | 7.2CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2022-42277 | NVIDIA DGX servers authentication bypass | 7.5CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42276 | NVIDIA DGX servers authentication bypass | 7.5CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42275 | NVIDIA DGX servers authentication bypass | 7.7CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2022-42274 | NVIDIA DGX servers buffer overflow | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2022-42268 | NVIDIA Omniverse Audio2Face injection | 7.8CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2022-42136 | MailEnable path traversal | 8.8v3.1 | 0.9% | 2023-01-13 | Fix |
| CVE-2022-41778 | Delta Electronics InfraSuite Device Master deserialization of untrusted data | 8.8NVD v3.1 | 1.0% | 2023-01-13 | Fix |
| CVE-2022-41721 | Request smuggling due to improper request handling in golang.org/x/net/http2/H2C | 7.5v3.1 | 1.8% | 2023-01-13 | Fix |
| CVE-2022-21191 | global-modules-path command injection | 9.8v3.1 | 1.5% | 2023-01-13 | Fix |
| CVE-2022-4616 | Delta Industrial Automation 4G Router DX-3021 command injection | 9.1v3.1 | 4.8% | 2023-01-13 | Exploit codeFix |
| CVE-2022-3841 | redhat.com RHACM server-side request forgery | 7.8v3.1 | 0.2% | 2023-01-13 | |
| CVE-2022-3782 | Keycloak vulnerable to path traversal via double URL encoding | 9.1v3.1 | 5.8% | 2023-01-13 | Exploit codeFix |
| CVE-2022-3693 | Path traversal in FileOrbis File Management System | 7.5v3.1 | 0.7% | 2023-01-13 | Fix |
| CVE-2022-3161 | Siemens JT2Go memory corruption | 7.8v3.1 | 0.4% | 2023-01-13 | Fix |
| CVE-2022-3160 | Siemens JT2Go heap-based buffer overflow | 7.8v3.1 | 0.4% | 2023-01-13 | Fix |
| CVE-2022-3159 | Siemens JT2Go stack-based buffer overflow | 7.8v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2022-3143 | Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator | 7.4v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2022-47927 | mediawiki incorrect permission assignment | 5.5v3.1 | 0.3% | 2023-01-12 | Fix |
| CVE-2022-47102 | PHPGurukul Student Study Center Management System cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-12 | Exploit code |
| CVE-2022-46623 | Judging Management System SQL injection | 7.8v3.1 | 0.4% | 2023-01-12 | Exploit code |
| CVE-2022-46622 | Judging Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-12 | Exploit code |
| CVE-2022-46503 | Online Student Enrollment System component /admin/register.php cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-12 | |
| CVE-2022-46472 | Helmet Store Showroom Site SQL injection | 7.2v3.1 | 0.7% | 2023-01-12 | |
| CVE-2022-46372 | Alotcer AR7088H-A authenticated command execution | 8.8v3.1 | 0.9% | 2023-01-12 | |
| CVE-2022-46371 | Alotcer AR7088H-A information disclosure | 5.3v3.1 | 0.5% | 2023-01-12 | |
| CVE-2022-46370 | Rumpus FTP server Improper Token Verification | 7.5v3.1 | 0.2% | 2023-01-12 | |
| CVE-2022-46369 | Rumpus FTP server persistent cross-site scripting (PXSS) Unspecified vector | 5.4v3.1 | 0.4% | 2023-01-12 | |
| CVE-2022-46368 | Rumpus FTP server cross-site request forgery (CSRF) Create user | 8.8v3.1 | 0.3% | 2023-01-12 | |
| CVE-2022-46367 | Rumpus FTP server cross-site request forgery (CSRF) privilege escalation | 8.8v3.1 | 0.3% | 2023-01-12 | |
| CVE-2022-45729 | PHPGurukul Doctor Appointment Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-12 | Exploit code |
| CVE-2022-45728 | PHPGurukul Doctor Appointment Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-12 | Exploit code |
| CVE-2022-43591 | Qt QML QtScript Reflect API buffer overflow | 8.8v3.1 | 1.1% | 2023-01-12 | Fix |
| CVE-2022-42273 | NVIDIA DGX servers buffer overflow | 8.1CNA v3.1 | 0.8% | 2023-01-12 | Fix |
| CVE-2022-42272 | NVIDIA DGX servers buffer overflow | 8.1CNA v3.1 | 0.8% | 2023-01-12 | Fix |
| CVE-2022-40983 | Qt QML QtScript Reflect API integer overflow | 8.8v3.1 | 1.1% | 2023-01-12 | Fix |
| CVE-2022-39187 | Rumpus FTP server reflected cross-site scripting (RXSS) | 6.1v3.1 | 0.4% | 2023-01-12 | |
| CVE-2022-39186 | EXFO BV-10 Performance Endpoint Unit system configuration file incorrect permission assignment | 5.5v3.1 | 0.2% | 2023-01-12 | |
| CVE-2022-39185 | EXFO Bv-10 Performance Endpoint Unit Undocumented privileged user | 9.8v3.1 | 0.6% | 2023-01-12 | |
| CVE-2022-39184 | EXFO Bv-10 Performance Endpoint Unit authentication bypass | 9.8v3.1 | 0.8% | 2023-01-12 | |
| CVE-2022-39183 | Moodle Plugin SAML Auth open redirect | 6.1v3.1 | 0.4% | 2023-01-12 | |
| CVE-2022-39182 | H C Mingham-smith Ltd Tardis 2000 privilege escalation | 8.8v3.1 | 0.3% | 2023-01-12 | |
| CVE-2022-25027 | Rocket Software Trufusion Enterprise improper authentication | 7.5v3.1 | 1.1% | 2023-01-12 | Fix |
| CVE-2022-25026 | Rocket Software Trufusion Enterprise Rocket TRUfusion portal v7.9.2.1 server-side request forgery | 7.5v3.1 | 24.4% | 2023-01-12 | |
| CVE-2022-24913 | com.fasterxml.util:java-merge-sort java Merge-sort insecure temporary file | 5.5v3.1 | 0.2% | 2023-01-12 | Fix |
| CVE-2022-4842 | Linux kernel flaw null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-01-12 | Fix |
| CVE-2022-4743 | SDL2 memory leak | 7.5NVD v3.1 | 1.3% | 2023-01-12 | Fix |
| CVE-2022-4365 | GitLab incorrect permission assignment | 5.5CNA v3.1 | 0.7% | 2023-01-12 | Fix |
| CVE-2022-4345 | Wireshark infinite loop | 6.3CNA v3.1 | 0.7% | 2023-01-12 | Fix |
| CVE-2022-4344 | Wireshark Kafka protocol dissector resource exhaustion | 6.3CNA v3.1 | 0.6% | 2023-01-12 | Fix |
| CVE-2022-4342 | GitLab information disclosure | 5.5CNA v3.1 | 0.7% | 2023-01-12 | Fix |
| CVE-2022-4167 | GitLab incorrect authorization | 5.3CNA v3.1 | 0.5% | 2023-01-12 | Fix |
| CVE-2022-4131 | GitLab regular expression denial of service | 4.3CNA v3.1 | 0.8% | 2023-01-12 | Fix |
| CVE-2022-4037 | GitLab race condition | 6.4CNA v3.1 | 0.6% | 2023-01-12 | Fix |
| CVE-2022-3977 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-01-12 | Fix |
| CVE-2022-3870 | GitLab information disclosure | 5.3CNA v3.1 | 0.7% | 2023-01-12 | Fix |
| CVE-2022-3628 | Linux kernel A buffer overflow | 6.6NVD v3.1 | 0.6% | 2023-01-12 | Fix |
| CVE-2022-3613 | GitLab resource exhaustion | 5.8CNA v3.1 | 1.0% | 2023-01-12 | Fix |
| CVE-2022-3592 | samba symlink following | 6.5NVD v3.1 | 2.6% | 2023-01-12 | Fix |
| CVE-2022-3573 | GitLab cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-01-12 | Fix |
| CVE-2022-3515 | libksba integer overflow | 9.8NVD v3.1 | 1.6% | 2023-01-12 | Fix |
| CVE-2022-3514 | GitLab regular expression denial of service | 4.3CNA v3.1 | 0.8% | 2023-01-12 | Fix |
| CVE-2022-3437 | samba heap-based buffer overflow | 6.5NVD v3.1 | 3.7% | 2023-01-12 | Fix |
| CVE-2022-3341 | FFmpeg null pointer dereference | 5.3NVD v3.1 | 0.8% | 2023-01-12 | Fix |
| CVE-2022-3145 | Okta OIDC Middleware An open redirect | 4.7v3.1 | 0.4% | 2023-01-12 | Fix |
| CVE-2022-2155 | Hitachi Energy Lumada APM User Asset Group feature incorrect authorization | 5.7CNA v3.1 | 0.4% | 2023-01-12 | Fix |
| CVE-2022-48253 | Nazgul Nostromo path traversal | 9.8v3.1 | 3.4% | 2023-01-11 | Fix |
| CVE-2022-48252 | Pi.Alert OS command injection | 9.8v3.1 | 2.7% | 2023-01-11 | |
| CVE-2022-47866 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-47865 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-47864 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-47862 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-47861 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-47860 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-47859 | Lead Management System SQL injection | 9.8v3.1 | 0.9% | 2023-01-11 | |
| CVE-2022-46176 | Cargo did not verify SSH host keys | 5.3CNA v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2022-43393 | Zyxel GS1920-24v2 firmware improper check for exceptional conditions | 8.2CNA v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2022-43392 | Zyxel NR7101 firmware parameter of web server buffer overflow | 6.5CNA v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2022-43391 | Zyxel NR7101 firmware parameter of the CGI program buffer overflow | 6.5CNA v3.1 | 0.7% | 2023-01-11 | Fix |
| CVE-2022-43390 | Zyxel NR7101 firmware CGI program command injection | 5.4CNA v3.1 | 1.1% | 2023-01-11 | Fix |
| CVE-2022-43389 | Zyxel NR7101 firmware library of the web server buffer overflow | 8.6CNA v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2022-42967 | XSS in Caret markdown editor leads to remote code execution when viewing crafted Markdown files | 9.6NVD v3.1 | 0.8% | 2023-01-11 | |
| CVE-2022-42271 | NVIDIA DGX servers buffer overflow | 8.4CNA v3.1 | 0.3% | 2023-01-11 | Fix |
| CVE-2022-40615 | IBM Sterling Partner Engagement Manager SQL injection | 6.3CNA v3.1 | 0.7% | 2023-01-11 | Fix |
| CVE-2022-34441 | Dell Secure Connect Gateway (SCG) Policy Manager hard-coded cryptographic key | 8.0CNA v3.1 | 0.5% | 2023-01-11 | Fix |
| CVE-2022-34440 | Dell Secure Connect Gateway (SCG) Policy Manager hard-coded cryptographic key | 8.4CNA v3.1 | 0.5% | 2023-01-11 | Fix |
| CVE-2022-34335 | IBM Sterling Partner Engagement Manager denial of service | 6.5CNA v3.1 | 0.7% | 2023-01-11 | Fix |
| CVE-2022-23814 | AMD 3rd Gen EPYC improper input validation | 5.3v3.1 | 0.5% | 2023-01-11 | Fix |
| CVE-2022-23813 | AMD 2nd Gen EPYC memory corruption | 5.3v3.1 | 0.5% | 2023-01-11 | Fix |
| CVE-2022-4885 | sviehb jefferson path traversal | 5.9v3.1 | 0.7% | 2023-01-11 | Fix |
| CVE-2022-4874 | Netcomm NF20MESH Netcomm router models authentication bypass | 7.5v3.1 | 11.0% | 2023-01-11 | KCV |
| CVE-2022-4873 | Stack based overflow on Netcomm router models NF20MESH, NF20, and NL1902 | 9.8v3.1 | 7.2% | 2023-01-11 | KCV |
| CVE-2022-4696 | Linux kernel There exists a use-after-free | 7.8NVD v3.1 | 0.4% | 2023-01-11 | Fix |
| CVE-2022-4543 | Linux kernel information disclosure | 5.5NVD v3.1 | 1.0% | 2023-01-11 | Exploit codeFix |
| CVE-2022-4499 | TP-Link WR710N observable discrepancy | 7.5v3.1 | 0.7% | 2023-01-11 | |
| CVE-2022-4498 | TP-Link WR710N out-of-bounds write | 9.8v3.1 | 1.8% | 2023-01-11 | |
| CVE-2022-4457 | WARP client manifest misconfiguration leading to Task Hijacking | 5.5CNA v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2022-4428 | Support_uri validation missing in WARP client for Windows | 8.9CNA v3.1 | 0.7% | 2023-01-11 | |
| CVE-2022-4415 | systemd information disclosure | 5.5NVD v3.1 | 0.8% | 2023-01-11 | Fix |
| CVE-2022-0553 | zephyrproject-rtos Zephyr possible to retrieve uncrypted firmware image | 6.5CNA v3.1 | 0.3% | 2023-01-11 | |
| CVE-2022-48251 | Arm Cortex-a53 observable discrepancy | 7.5v3.1 | 0.8% | 2023-01-10 | |
| CVE-2022-47967 | Siemens Solid Edge memory corruption | 7.8CNA v3.1 | 0.3% | 2023-01-10 | Fix |
| CVE-2022-47935 | Siemens JT Open memory corruption | 7.8CNA v3.1 | 0.3% | 2023-01-10 | Fix |
| CVE-2022-47083 | Spitfire unserialize function PHP object injection | 8.8v3.1 | 18.2% | 2023-01-10 | |
| CVE-2022-46823 | Siemens Mendix SAML (Mendix 8 compatible) cross-site scripting | 9.3CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2022-46610 | 72crm WukongCRM unrestricted file upload | 8.8v3.1 | 18.1% | 2023-01-10 | |
| CVE-2022-46449 | Musicpd Music Player Daemon out-of-bounds write | 7.5v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2022-46163 | travel-support-program vulnerable to data exfiltration via Ransack query injection | 7.5CNA v3.1 | 1.0% | 2023-01-10 | |
| CVE-2022-45167 | Archibus Web Central information disclosure | 4.3v3.1 | 0.5% | 2023-01-10 | |
| CVE-2022-45166 | Archibus Web Central improper access control | 4.3v3.1 | 0.5% | 2023-01-10 | |
| CVE-2022-45165 | Archibus Web Central SQL injection | 8.8v3.1 | 0.6% | 2023-01-10 | |
| CVE-2022-45164 | Archibus Web Central improper access control | 4.3v3.1 | 0.4% | 2023-01-10 | |
| CVE-2022-45094 | Siemens SINEC INS command injection | 8.4CNA v3.1 | 1.4% | 2023-01-10 | Fix |
| CVE-2022-45093 | Siemens SINEC INS path traversal | 8.5CNA v3.1 | 1.2% | 2023-01-10 | Fix |
| CVE-2022-45092 | Siemens SINEC INS path traversal | 9.9CNA v3.1 | 31.4% | 2023-01-10 | Fix |
| CVE-2022-43514 | Siemens Automation License Manager V5 path traversal | 7.7CNA v3.1 | 1.5% | 2023-01-10 | Fix |
| CVE-2022-43513 | Siemens Automation License Manager V5 external control of a file path | 8.2CNA v3.1 | 1.0% | 2023-01-10 | Fix |
| CVE-2022-38773 | Siemens SIMATIC Drive Controller CPU 1504D TF arbitrary code execution | 4.6CNA v3.1 | 0.3% | 2023-01-10 | |
| CVE-2022-38492 | Easyvista Service Manager SQL injection | 8.8v3.1 | 0.7% | 2023-01-10 | |
| CVE-2022-38491 | Easyvista Service Manager missing brute-force protection | 7.5v3.1 | 0.5% | 2023-01-10 | |
| CVE-2022-38490 | Easyvista Service Manager SQL injection | 8.8NVD v3.1 | 0.7% | 2023-01-10 | |
| CVE-2022-38489 | Easyvista Service Manager cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-10 | |
| CVE-2022-38482 | Mega Hopex link following | 4.3v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2022-38481 | Mega Hopex cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2022-38393 | ASUS RT-AX82U cfg_server cm_processConnDiagPktList opcode denial of service | 7.5v3.1 | 18.8% | 2023-01-10 | |
| CVE-2022-38105 | ASUS RT-AX82U cm_processREQ_NC opcode information disclosure | 7.5v3.1 | 1.1% | 2023-01-10 | |
| CVE-2022-36443 | Zebra Enterprise Home Screen improper access control | 7.8v3.1 | 0.2% | 2023-01-10 | |
| CVE-2022-36442 | Zebra Enterprise Home Screen improper access control | 5.5v3.1 | 0.2% | 2023-01-10 | |
| CVE-2022-36441 | Zebra Enterprise Home Screen improper access control | 7.1v3.1 | 0.2% | 2023-01-10 | |
| CVE-2022-35401 | ASUS RT-AX82U get_IFTTTTtoken.cgi functionality authentication bypass | 8.1NVD v3.1 | 20.8% | 2023-01-10 | |
| CVE-2022-30332 | Talend Administration Center observable discrepancy | 5.3v3.1 | 0.8% | 2023-01-10 | |
| CVE-2022-4711 | Royal Elementor Addons WordPress plugin insufficient access control to Menu settings update | 4.3v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2022-4710 | Royal Elementor Addons WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2022-4709 | Royal Elementor Addons WordPress plugin insufficient access control to Template Kit import | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2022-4708 | Royal Elementor Addons WordPress plugin improper access control | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2022-4707 | Royal Elementor Addons WordPress plugin cross-site request forgery to Menu Template creation | 6.5v3.1 | 0.3% | 2023-01-10 | Fix |
| CVE-2022-4705 | Royal Elementor Addons WordPress plugin insufficient access control to Template activation | 4.3v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2022-4704 | Royal Elementor Addons WordPress plugin insufficient access control to Template import | 8.1v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2022-4703 | Royal Elementor Addons WordPress plugin insufficient access control to import deletion | 8.1v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2022-4702 | Royal Elementor Addons WordPress plugin insufficient access control to plugin deactivation | 6.5v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2022-4701 | Royal Elementor Addons WordPress plugin insufficient access control to plugin activation | 8.8v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2022-4700 | Royal Elementor Addons WordPress plugin insufficient access control to theme activation | 8.8v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2022-4636 | Black Box KVM ACR1020A-T path traversal | 7.5v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2022-4429 | Avira Security for Windows denial of service | 4.4v3.1 | 0.1% | 2023-01-10 | Fix |
| CVE-2022-4422 | SQLi in Bulutdesk Callcenter | 9.8v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2022-4382 | Linux kernel use-after-free | 6.4NVD v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2022-4379 | Linux kernel use-after-free | 7.5NVD v3.1 | 6.3% | 2023-01-10 | Fix |
| CVE-2022-4338 | openvswitch integer underflow | 9.8NVD v3.1 | 1.3% | 2023-01-10 | Fix |
| CVE-2022-4337 | openvswitch out-of-bounds read | 9.8NVD v3.1 | 1.3% | 2023-01-10 | Fix |
| CVE-2022-4294 | Norton, Avira, Avast and AVG Antivirus for Windows privilege escalation | 7.8v3.1 | 0.2% | 2023-01-10 | Fix |
| CVE-2022-3792 | SQL injection in GullsEye Terminal Operating System | 9.8v3.1 | 14.2% | 2023-01-10 | Fix |
| CVE-2022-47790 | Dynamic Transaction Queuing System SQL injection | 9.8v3.1 | 0.8% | 2023-01-09 | |
| CVE-2022-46769 | Apache Sling App CMS: XSS in CMS Site Group Detail | 5.4v3.1 | 1.4% | 2023-01-09 | Fix |
| CVE-2022-46603 | Inkdrop cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-09 | |
| CVE-2022-46258 | GitHub Enterprise Server incorrect authorization | 6.5v3.1 | 0.6% | 2023-01-09 | Fix |
| CVE-2022-45126 | OpenHarmony buffer overflow | 4.0CNA v3.1 | 0.2% | 2023-01-09 | |
| CVE-2022-43974 | MatrixSSL integer overflow | 9.8v3.1 | 1.7% | 2023-01-09 | Fix |
| CVE-2022-43973 | Arbitrary code execution in Linksys WRT54GL | 7.2NVD v3.1 | 1.9% | 2023-01-09 | Exploit code |
| CVE-2022-43972 | Null pointer dereference in Linksys WRT54GL | 7.5NVD v3.1 | 1.3% | 2023-01-09 | |
| CVE-2022-43971 | Arbitrary code execution in Linksys WUMC710 | 7.2NVD v3.1 | 1.7% | 2023-01-09 | |
| CVE-2022-43970 | Buffer overflow in Linksys WRT54GL | 7.2NVD v3.1 | 19.3% | 2023-01-09 | |
| CVE-2022-43662 | OpenAtom OpenHarmony kernel timer interface vulnerability | 4.0CNA v3.1 | 0.2% | 2023-01-09 | |
| CVE-2022-40520 | Qualcomm Snapdragon stack based buffer overflow in Core | 8.4CNA v3.1 | 0.7% | 2023-01-09 | Fix |
| CVE-2022-40519 | Qualcomm Snapdragon buffer over-read in Core | 6.8CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-40518 | Qualcomm Snapdragon buffer overread in Core | 6.8CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-40517 | Qualcomm Snapdragon stack based buffer overflow in Core | 8.4CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-40516 | Qualcomm Snapdragon stack-based buffer overflow in Core | 8.4CNA v3.1 | 0.9% | 2023-01-09 | Fix |
| CVE-2022-36930 | Local privilege escalation in Zoom Rooms for Windows Installers | 8.8CNA v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-36929 | Local privilege escalation in Zoom Rooms for Windows Clients | 7.8CNA v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-36928 | Path traversal in Zoom for Android Clients | 6.1CNA v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-36927 | Local privilege escalation in Zoom Rooms for macOS Clients | 8.8CNA v3.1 | 0.2% | 2023-01-09 | Fix |
| CVE-2022-36926 | Local privilege escalation in Zoom Rooms for macOS Clients | 8.8CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-36925 | Insecure key generation for Zoom Rooms for macOS Clients | 4.4CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-35281 | IBM Maximo Application Suite command injection | 5.5CNA v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-33300 | Qualcomm Snapdragon improper input validation in Automotive Android OS | 8.4CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-33299 | Qualcomm Snapdragon null pointer dereference in Bluetooth host | 7.5CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33290 | Qualcomm Snapdragon null pointer dereference in Bluetooth host | 7.5CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33286 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33285 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33284 | Qualcomm Snapdragon buffer over-read in WLAN | 8.2CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33283 | Qualcomm Snapdragon buffer over-read in WLAN | 8.2CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33276 | Qualcomm Snapdragon buffer copy without checking size of input in Modem | 8.4CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-33274 | Qualcomm Snapdragon improper validation of array index in Android Core | 8.4CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-33266 | Qualcomm Snapdragon integer overflow to buffer overflow in Audio | 5.9CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-33265 | Information exposure in Powerline Communication Firmware | 7.3CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33255 | Qualcomm Snapdragon buffer over-read in Bluetooth host | 8.2CNA v3.1 | 0.4% | 2023-01-09 | Fix |
| CVE-2022-33253 | Qualcomm Snapdragon buffer over-read in WLAN | 7.5CNA v3.1 | 0.2% | 2023-01-09 | Fix |
| CVE-2022-33252 | Qualcomm Snapdragon buffer over-read in WLAN | 8.2CNA v3.1 | 0.2% | 2023-01-09 | Fix |
| CVE-2022-33219 | Qualcomm Snapdragon integer overflow to buffer overflow in Automotive | 9.3CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-33218 | Qualcomm Snapdragon improper input validation in Automotive | 8.2CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25890 | wifey vulnerable to command injection due to improper input sanitization | 9.8v3.1 | 1.3% | 2023-01-09 | |
| CVE-2022-25746 | Qualcomm Snapdragon buffer copy without checking size of input in Kernel | 8.1CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25725 | Qualcomm Snapdragon use-after-free in MODEM | 6.2CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25722 | Qualcomm Snapdragon information exposure in DSP services | 6.0CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25721 | Qualcomm Snapdragon incorrect type conversion in Video driver | 6.7CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25717 | Qualcomm Snapdragon use-after-free Issue in Display | 6.7CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25716 | Qualcomm Snapdragon time-of-check time-of-use race condition in Multimedia Framework | 6.7CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-25715 | Qualcomm Snapdragon incorrect type casting in Display driver | 6.7CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-23509 | Weave Gitops Run vulnerable to insecure communication | 7.4CNA v3.1 | 0.2% | 2023-01-09 | Fix |
| CVE-2022-23508 | weaveworks weave-gitops GitOps Run allows for Kubernetes workload injection | 8.9CNA v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-22470 | IBM Security Verify Governance information disclosure | 4.1CNA v3.1 | 0.1% | 2023-01-09 | Fix |
| CVE-2022-22088 | Qualcomm Snapdragon integer overflow to buffer overflow in Bluetooth host | 9.8CNA v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-22079 | Qualcomm Snapdragon buffer over-read in BOOT | 4.6CNA v3.1 | 0.2% | 2023-01-09 | Fix |
| CVE-2022-4884 | Tribe29 Checkmk Path-Traversal in MKP storing | 4.9v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4882 | Kaltura mwEmbed Share plugin share.js cross-site scripting | 4.7v3.1 | 0.6% | 2023-01-09 | Fix |
| CVE-2022-4497 | Jetpack CRM WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4491 | WP Table Reloaded WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | |
| CVE-2022-4479 | Table of Contents Plus WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-01-09 | Fix |
| CVE-2022-4468 | WP Recipe Maker WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4426 | Mautic Integration For WooCommerce WordPress plugin arbitrary options update via CSRF | 4.3NVD v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-4394 | iPages Flipbook For WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4393 | ImageLinks Interactive Image Builder for WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4392 | iPanorama 360 WordPress Virtual Tour Builder plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4391 | Vision Interactive For WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4374 | Bg Bible References WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.6% | 2023-01-09 | |
| CVE-2022-4368 | WP CSV WordPress plugin reflected XSS via CSV import | 6.1NVD v3.1 | 0.3% | 2023-01-09 | |
| CVE-2022-4325 | Post Status Notifier Lite WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-01-09 | NucleiFix |
| CVE-2022-4310 | Slimstat Analytics WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.6% | 2023-01-09 | Fix |
| CVE-2022-4301 | Sunshine Photo Cart WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-01-09 | NucleiFix |
| CVE-2022-4196 | Multi Step Form WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-4103 | Royal Elementor Addons WordPress plugin Subscriber+ arbitrary post creation | 4.3NVD v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-4102 | Royal Elementor Addons WordPress plugin Subscriber+ arbitrary post deletion | 3.1NVD v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-4043 | WP Custom Admin Interface WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 17.7% | 2023-01-09 | Fix |
| CVE-2022-3923 | ActiveCampaign for WooCommerce WordPress plugin Subscriber+ error Log Cleanup | 4.3NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-3855 | 404 to Start WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-09 | |
| CVE-2022-3679 | Starter Templates by Kadence WP WordPress plugin Admin+ PHP object injection | 8.8NVD v3.1 | 0.9% | 2023-01-09 | Fix |
| CVE-2022-3417 | WPtouch WordPress plugin Admin+ PHP object injection | 8.8NVD v3.1 | 0.9% | 2023-01-09 | Fix |
| CVE-2022-3416 | WPtouch WordPress plugin Admin+ arbitrary file upload | 7.2NVD v3.1 | 17.3% | 2023-01-09 | Fix |
| CVE-2022-3343 | WPQA WordPress theme missing validation lead to functionality abuse | 3.5NVD v3.1 | 0.5% | 2023-01-09 | Fix |
| CVE-2022-2196 | Linux kernel speculative execution attacks in KVM VMX | 8.8NVD v3.1 | 0.3% | 2023-01-09 | Fix |
| CVE-2022-4881 | CapsAdmin PAC3 http.lua cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-08 | |
| CVE-2022-0668 | JFrog Artifactory improper handling of insufficient privileges | 5.3CNA v3.1 | 0.6% | 2023-01-08 | Fix |
| CVE-2022-4880 | stakira OpenUtau ZIP Archive VoicebankInstaller.cs VoicebankInstaller path traversal | 9.8v3.1 | 1.1% | 2023-01-07 | Fix |
| CVE-2022-2666 | SourceCodester Loan Management System login.php SQL injection | 9.8v3.1 | 0.9% | 2023-01-07 | |
| CVE-2022-1102 | SourceCodester Royale Event Management System companyprofile.php cross-site scripting | 6.1v3.1 | 0.7% | 2023-01-07 | |
| CVE-2022-1101 | SourceCodester Royale Event Management System userregister.php improper authentication | 9.8v3.1 | 1.0% | 2023-01-07 | |
| CVE-2022-47976 | Huawei HarmonyOS improper authentication | 7.5v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2022-47975 | Huawei HarmonyOS double free vulnerability of the DUBAI module | 7.5v3.1 | 0.6% | 2023-01-06 | Fix |
| CVE-2022-47974 | Huawei HarmonyOS DoS attack vulnerability in the Bluetooth AVRCP module | 6.5v3.1 | 0.2% | 2023-01-06 | Fix |
| CVE-2022-46762 | Huawei HarmonyOS logic bypass vulnerability in the memory management module | 7.5v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2022-46761 | Huawei HarmonyOS vulnerability of the dynamic hiding and restoring of app icons in the system | 7.5v3.1 | 0.3% | 2023-01-06 | Fix |
| CVE-2022-45935 | Apache James server: Temporary file information disclosure | 5.5v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2022-45913 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2022-45911 | Zimbra Collaboration cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-06 | Fix |
| CVE-2022-45787 | Apache James MIME4J: Temporary file information disclosure in MIME4J TempFileStorageProvider | 5.5v3.1 | 0.3% | 2023-01-06 | Fix |
| CVE-2022-44939 | Echatserver Easy Chat Server uncontrolled search path | 7.8v3.1 | 0.4% | 2023-01-06 | |
| CVE-2022-44870 | MacCMS reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-06 | Exploit code |
| CVE-2022-44149 | Nexxt Solutions AMP300 OS command injection | 8.8v3.1 | 64.4% | 2023-01-06 | Reported exploitedExploit codeFix |
| CVE-2022-42979 | Rydesharing Ryde improper certificate validation | 8.8v3.1 | 24.3% | 2023-01-06 | |
| CVE-2022-41613 | Bentley Systems MicroStation Connect out-of-bounds read | 7.8v3.1 | 0.2% | 2023-01-06 | Fix |
| CVE-2022-40201 | Bentley Systems MicroStation Connect stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-01-06 | Fix |
| CVE-2022-40049 | Theme Park Ticketing System sourcecodester SQL injection | 7.5v3.1 | 1.0% | 2023-01-06 | |
| CVE-2022-39073 | MF286R ZTE command injection | 9.8v3.1 | 3.3% | 2023-01-06 | Exploit codeFix |
| CVE-2022-39072 | ZTE MF286R Some SQL injection | 5.4v3.1 | 0.3% | 2023-01-06 | Fix |
| CVE-2022-25923 | exec-local-bin vulnerable to command injection | 9.8v3.1 | 2.6% | 2023-01-06 | Fix |
| CVE-2022-4879 | Forged Alliance Forever Vote improper authorization | 7.5v3.1 | 0.5% | 2023-01-06 | Fix |
| CVE-2022-4878 | Jatos ZIP ZipUtil.java ZipUtil path traversal | 5.3v3.1 | 0.7% | 2023-01-06 | Fix |
| CVE-2022-2484 | Nokia ASIK AirScale bootloader signature check vulnerability | 7.8v3.1 | 0.2% | 2023-01-06 | |
| CVE-2022-2483 | The bootloader in the Nokia ASIK AirScale system module (versions 474021A.101 and 474021A.102) loads public keys for firmware verification signature. If an attacker modifies the flash contents to corrupt the keys, secure boot could be permanently disabled on a given device. | 7.1v3.1 | 0.2% | 2023-01-06 | |
| CVE-2022-2482 | Nokia ASIK AirScale arbitrary code execution | 8.8v3.1 | 0.2% | 2023-01-06 | |
| CVE-2022-47663 | gpac buffer overflow | 7.8v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-47662 | gpac uncontrolled recursion | 5.5v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47661 | gpac out-of-bounds write | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47660 | gpac integer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47659 | gpac out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-47658 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47657 | gpac buffer overflow | 7.8v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-47656 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47655 | struktur libde265 out-of-bounds write | 7.8v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-47654 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47653 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47544 | Siren Investigate protection mechanism failure | 9.8v3.1 | 0.7% | 2023-01-05 | Fix |
| CVE-2022-47543 | Siren Investigate improper access control | 5.3v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-47523 | Zoho ManageEngine Access Manager Plus cross-site scripting | 9.8v3.1 | 70.6% | 2023-01-05 | Fix |
| CVE-2022-47095 | gpac buffer overflow | 7.8v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-47094 | gpac null pointer dereference | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47093 | gpac use-after-free | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47092 | gpac integer overflow | 7.1v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47091 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47089 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47088 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47087 | gpac buffer overflow | 7.8v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-47086 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-46490 | GPAC AFRT box parser memory leak | 5.5v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-46489 | GPAC ISO box parser memory leak | 5.5v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-46177 | Discourse password reset link can lead to in account takeover if user changes to a new email | 5.7CNA v3.1 | 0.7% | 2023-01-05 | Fix |
| CVE-2022-46168 | discourse group SMTP user emails are exposed in CC email header | 3.5CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-45995 | Tenda AX12 There is an unauthorized buffer overflow | 9.8v3.1 | 1.1% | 2023-01-05 | |
| CVE-2022-45857 | Fortinet FortiManager incorrect user management | 6.0CNA v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-44877 | CWP Control Web Panel OS command injection | 9.8NVD v3.1 | 100.0% | 2023-01-05 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2022-44535 | Aruba EdgeConnect Enterprise Orchestrator web management interface privilege escalation | 8.8CNA v3.1 | 0.9% | 2023-01-05 | Fix |
| CVE-2022-44534 | HPE Aruba EdgeConnect Enterprise Orchestration Software arbitrary command execution | 7.2CNA v3.1 | 1.1% | 2023-01-05 | Fix |
| CVE-2022-43932 | Synology Router Manager (SRM) improper neutralization | 7.5CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-43844 | IBM Robotic Process Automation for Cloud Pak session fixation | 8.8v3.1 | 0.7% | 2023-01-05 | Fix |
| CVE-2022-43573 | IBM Robotic Process Automation information disclosure | 3.1CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-43540 | HPE Aruba ClearPass Policy Manager information disclosure | 5.5CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-43539 | HPE Aruba ClearPass Policy Manager unauthorized access | 5.7CNA v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-43538 | HPE Aruba ClearPass Policy Manager OS command injection | 7.2CNA v3.1 | 1.4% | 2023-01-05 | Fix |
| CVE-2022-43537 | HPE Aruba ClearPass Policy Manager OS command injection | 7.2CNA v3.1 | 1.4% | 2023-01-05 | Fix |
| CVE-2022-43536 | HPE Aruba ClearPass Policy Manager OS command injection | 7.2CNA v3.1 | 1.4% | 2023-01-05 | Fix |
| CVE-2022-43535 | HPE Aruba ClearPass Policy Manager improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-43534 | HPE Aruba ClearPass Policy Manager improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-43533 | HPE Aruba ClearPass Policy Manager improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-43532 | HPE Aruba ClearPass Policy Manager cross-site scripting | 8.0CNA v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-43531 | HPE Aruba ClearPass Policy Manager SQL injection | 8.8CNA v3.1 | 0.8% | 2023-01-05 | Fix |
| CVE-2022-43530 | HPE Aruba ClearPass Policy Manager SQL injection | 8.8CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-43529 | HPE Aruba EdgeConnect Enterprise Orchestration Software session fixation | 4.6CNA v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-43528 | HPE Aruba EdgeConnect Enterprise Orchestration Software improper authentication | 4.8CNA v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-43527 | HPE Aruba EdgeConnect Enterprise Orchestration Software cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-43526 | HPE Aruba EdgeConnect Enterprise Orchestration Software cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-43525 | HPE Aruba EdgeConnect Enterprise Orchestration Software cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-43524 | HPE Aruba EdgeConnect Enterprise Orchestration Software cross-site scripting | 8.7CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-43523 | HPE Aruba EdgeConnect Enterprise Orchestration Software SQL injection | 8.8CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-43522 | HPE Aruba EdgeConnect Enterprise Orchestration Software SQL injection | 8.8CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-43521 | HPE Aruba EdgeConnect Enterprise Orchestration Software SQL injection | 8.8CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-43520 | HPE Aruba EdgeConnect Enterprise Orchestration Software SQL injection | 8.8CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-43519 | HPE Aruba EdgeConnect Enterprise Orchestration Software SQL injection | 8.8CNA v3.1 | 1.0% | 2023-01-05 | Fix |
| CVE-2022-41740 | IBM Robotic Process Automation information disclosure | 4.6CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-37934 | HPE OfficeConnect 1820 and 1850 Switch Series path traversal | 6.8CNA v3.1 | 1.8% | 2023-01-05 | Fix |
| CVE-2022-37933 | HPE Superdome Flex Server injection | 7.3CNA v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-34330 | IBM Sterling B2B Integrator cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-23549 | Discourse vulnerable to bypass of post max_length using HTML comments | 5.7CNA v3.1 | 0.6% | 2023-01-05 | Fix |
| CVE-2022-23548 | discourse regular expression denial of service | 6.5CNA v3.1 | 0.7% | 2023-01-05 | Fix |
| CVE-2022-23546 | Discourse vulnerable to private topic leak via email#send_digest | 5.5CNA v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-22371 | IBM Sterling B2B Integrator Standard Edition session fixation | 5.5CNA v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2022-4877 | snoyberg keter Proxy.hs cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2022-4869 | Evolution Events Artaxerxes POST parameter middleware.py information disclosure | 7.5v3.1 | 0.6% | 2023-01-05 | |
| CVE-2022-4435 | Lenovo ThinkPad X13s buffer over-read | 6.7CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-4434 | Lenovo ThinkPad X13s buffer over-read | 6.7CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-4433 | Lenovo ThinkPad X13s buffer over-read | 6.7CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-4432 | Lenovo ThinkPad X13s buffer over-read | 6.7CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-4378 | Linux kernel A stack-based buffer overflow | 7.8NVD v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-3929 | Hitachi Energy FOXMAN-UN and UNEM CORBA communication cleartext transmission | 8.3CNA v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-3928 | Hitachi Energy FOXMAN-UN hard-coded credential is found in the message queue | 7.1CNA v3.1 | 0.2% | 2023-01-05 | Fix |
| CVE-2022-3927 | Hitachi Energy FOXMAN-UN and UNEM Custom Parameter Set signing hard-coded credentials | 8.0CNA v3.1 | 0.6% | 2023-01-05 | Fix |
| CVE-2022-3715 | bash buffer overflow | 7.8NVD v3.1 | 0.4% | 2023-01-05 | Fix |
| CVE-2022-48217 | Tradr-project Tf Remapper special element injection | 8.1v3.1 | 0.7% | 2023-01-04 | |
| CVE-2022-48216 | Uniswap Universal Router incorrect authorization | 7.5v3.1 | 0.8% | 2023-01-04 | Fix |
| CVE-2022-46457 | NASM Netwide Assembler out-of-bounds read | 5.5v3.1 | 0.3% | 2023-01-04 | Fix |
| CVE-2022-46456 | NASM Netwide Assembler buffer overflow | 6.1NVD v3.1 | 0.4% | 2023-01-04 | Fix |
| CVE-2022-46180 | Arbitrary HTML injection in discourse-mermaid-theme-component | 5.0CNA v3.1 | 0.5% | 2023-01-04 | |
| CVE-2022-46081 | Garmin Connect information disclosure | 7.5v3.1 | 0.7% | 2023-01-04 | |
| CVE-2022-45875 | Apache DolphinScheduler: Remote command execution vulnerability in script alert plugin | 9.8v3.1 | 2.6% | 2023-01-04 | Fix |
| CVE-2022-45052 | Local file inclusion in Axiell Iguana CMS | 6.5NVD v3.1 | 0.7% | 2023-01-04 | Fix |
| CVE-2022-45051 | Reflected POST XSS in Axiell Iguana CMS | 6.1v3.1 | 0.4% | 2023-01-04 | Fix |
| CVE-2022-45049 | Reflected XSS in Axiell Iguana CMS | 6.1v3.1 | 0.4% | 2023-01-04 | Fix |
| CVE-2022-44446 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44445 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44444 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44443 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44442 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44441 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44440 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44439 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44438 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44437 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44436 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44435 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44434 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44432 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44431 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44430 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44429 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44428 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44427 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44426 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44425 | UNISOC chipsets wlan driver denial of service | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44424 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44423 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-44422 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-43920 | IBM Sterling B2B Integrator Standard Edition privilege escalation | 6.3CNA v3.1 | 0.5% | 2023-01-04 | Fix |
| CVE-2022-42435 | IBM Business Automation Workflow cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2023-01-04 | Fix |
| CVE-2022-39118 | UNISOC chipsets sprd_sysdump driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-39116 | UNISOC chipsets sprd_sysdump driver out-of-bounds write | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-39104 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-39088 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39087 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39086 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39085 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39084 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39083 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39082 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-39081 | UNISOC chipsets command injection | 6.7v3.1 | 0.2% | 2023-01-04 | Fix |
| CVE-2022-38684 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-38683 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-38682 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-38678 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-01-04 | Fix |
| CVE-2022-25926 | window-control vulnerable to command injection due to improper input sanitization | 7.8v3.1 | 1.1% | 2023-01-04 | Fix |
| CVE-2022-22352 | IBM Sterling B2B Integrator Standard Edition cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-01-04 | Fix |
| CVE-2022-22338 | IBM Sterling B2B Integrator Standard Edition SQL injection | 6.3CNA v3.1 | 0.7% | 2023-01-04 | Fix |
| CVE-2022-22337 | IBM Sterling B2B Integrator Standard Edition information disclosure | 4.3CNA v3.1 | 0.5% | 2023-01-04 | Fix |
| CVE-2022-4876 | Kaltura mwEmbed DefaultSettings.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-04 | Fix |
| CVE-2022-4875 | fossology cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-04 | |
| CVE-2022-47908 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-01-03 | Fix |
| CVE-2022-47618 | Merit LILIN Ent. Co., Ltd. AH55B04 and AH55B08 DVR hard-coded credentials | 9.8v3.1 | 1.0% | 2023-01-03 | |
| CVE-2022-47317 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server out-of-bounds write | 7.8v3.1 | 0.2% | 2023-01-03 | Fix |
| CVE-2022-46360 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-SFT and TELLUS out-of-bounds read | 7.8v3.1 | 0.2% | 2023-01-03 | Fix |
| CVE-2022-46309 | Galaxy Software Services Corporation. Vitals ESP arbitrary Path File Reading | 6.5CNA v3.1 | 1.2% | 2023-01-03 | |
| CVE-2022-46306 | ChangingTec ServiSign path traversal | 7.8v3.1 | 0.9% | 2023-01-03 | |
| CVE-2022-46305 | ChangingTec ServiSign path traversal | 6.5CNA v3.1 | 0.4% | 2023-01-03 | |
| CVE-2022-46304 | ChangingTec ServiSign command injection | 8.8CNA v3.1 | 1.5% | 2023-01-03 | |
| CVE-2022-45867 | MyBB Admin CP Languages module path traversal | 7.2v3.1 | 1.5% | 2023-01-03 | Fix |
| CVE-2022-45143 | Apache Tomcat improperly escapes input from JsonErrorReportValve | 7.5v3.1 | 2.5% | 2023-01-03 | Fix |
| CVE-2022-44036 | b2evolution CMS unrestricted file upload | 7.2v3.1 | 1.1% | 2023-01-03 | |
| CVE-2022-43931 | Synology VPN Plus Server Remote Desktop Functionality out-of-bounds write | 10.0CNA v3.1 | 16.8% | 2023-01-03 | Fix |
| CVE-2022-43448 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-SFT and TELLUS out-of-bounds write | 7.8v3.1 | 0.2% | 2023-01-03 | Fix |
| CVE-2022-43438 | HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest incorrect authorization | 8.8CNA v3.1 | 0.8% | 2023-01-03 | Fix |
| CVE-2022-43437 | HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest SQL injection | 8.8CNA v3.1 | 0.9% | 2023-01-03 | Fix |
| CVE-2022-43436 | HWA JIUH DIGITAL TECHNOLOGY LTD. EasyTest arbitrary file upload | 8.8CNA v3.1 | 0.9% | 2023-01-03 | Fix |
| CVE-2022-42710 | Niceforyou Linear Emerge E3 Access Control cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-03 | |
| CVE-2022-42471 | Fortinet FortiWeb HTTP headers CRLF injection | 5.3CNA v3.1 | 0.5% | 2023-01-03 | Fix |
| CVE-2022-41645 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server out-of-bounds read | 7.8v3.1 | 0.2% | 2023-01-03 | Fix |
| CVE-2022-41336 | Fortinet FortiPortal cross-site scripting | 6.6CNA v3.1 | 0.6% | 2023-01-03 | Fix |
| CVE-2022-40740 | Realtek GPON router command injection | 7.2CNA v3.1 | 1.5% | 2023-01-03 | |
| CVE-2022-39947 | Fortinet FortiADC OS command injection | 8.6CNA v3.1 | 2.9% | 2023-01-03 | Fix |
| CVE-2022-39042 | aEnrich a+HRD improper authentication | 9.8CNA v3.1 | 1.5% | 2023-01-03 | |
| CVE-2022-39041 | aEnrich a+HRD SQL injection | 9.8CNA v3.1 | 1.2% | 2023-01-03 | |
| CVE-2022-39040 | aEnrich a+HRD path traversal | 7.5CNA v3.1 | 1.7% | 2023-01-03 | |
| CVE-2022-39039 | aEnrich a+HRD server-side request forgery (SSRF) | 9.8CNA v3.1 | 1.0% | 2023-01-03 | |
| CVE-2022-38766 | Renault Zoe E-tech authentication bypass by replay | 8.1v3.1 | 0.7% | 2023-01-03 | Exploit code |
| CVE-2022-38723 | Gravitee API Management contains path traversal | 8.6v3.1 | 0.8% | 2023-01-03 | Fix |
| CVE-2022-38627 | Niceforyou Linear Emerge E3 Access Control SQL injection | 9.8v3.1 | 4.3% | 2023-01-03 | Nuclei |
| CVE-2022-36943 | ZipArchive SSZipArchive path traversal | 8.1NVD v3.1 | 0.9% | 2023-01-03 | |
| CVE-2022-35845 | Fortinet FortiTester OS command injection | 7.6CNA v3.1 | 1.1% | 2023-01-03 | Fix |
| CVE-2022-32665 | MediaTek EN7528, EN7580 improper input validation in Boa | 9.8v3.1 | 1.5% | 2023-01-03 | Fix |
| CVE-2022-32664 | MediaTek chipsets improper input validation in Config Manager | 8.8v3.1 | 1.2% | 2023-01-03 | Fix |
| CVE-2022-32659 | MediaTek chipsets improper input validation in Wi-Fi driver | 6.7v3.1 | 0.3% | 2023-01-03 | Fix |
| CVE-2022-32658 | MediaTek chipsets improper input validation in Wi-Fi driver | 6.7v3.1 | 0.3% | 2023-01-03 | Fix |
| CVE-2022-32657 | MediaTek chipsets improper input validation in Wi-Fi driver | 6.7v3.1 | 0.3% | 2023-01-03 | Fix |
| CVE-2022-32653 | MediaTek chipsets improper input validation in isp | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32652 | MediaTek chipsets improper input validation in isp | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32651 | MediaTek MT6879, MT6983 incorrect calculation of buffer size in mtk-aie | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32650 | MediaTek chipsets incorrect calculation of buffer size in isp | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32649 | MediaTek MT6895, MT6983 incorrect calculation of buffer size in jpeg | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32648 | MediaTek chipsets improper synchronization in disp | 6.4v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32647 | MediaTek chipsets improper input validation in ccu | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32646 | MediaTek chipsets improper input validation in gpu drm | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32645 | MediaTek chipsets improper synchronization in vow | 4.1v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32644 | MediaTek chipsets improper synchronization in vow | 6.4v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32641 | MediaTek chipsets improper input validation in meta wifi | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32640 | MediaTek chipsets improper input validation in meta wifi | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32639 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in watchdog | 4.4v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32638 | MediaTek chipsets time-of-check time-of-use (toctou) race condition in isp | 6.4v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32637 | MediaTek chipsets improper input validation in hevc decoder | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32636 | MediaTek chipsets improper input validation in keyinstall | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32635 | MediaTek chipsets improper input validation in gps | 7.8v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-32623 | MediaTek chipsets improper check or handling of exceptional conditions in mdp | 6.7v3.1 | 0.1% | 2023-01-03 | Fix |
| CVE-2022-23506 | Spinnaker's Rosco microservice vulnerable to improper log masking on AWS Packer builds | 4.3CNA v3.1 | 0.5% | 2023-01-03 | Fix |
| CVE-2022-4871 | ummmmm Nflpick-em.com LoadUsers.php _Load_Users SQL injection | 7.2v3.1 | 0.7% | 2023-01-03 | |
| CVE-2022-4663 | Members Import WordPress plugin Self cross-site scripting | 6.1v3.1 | 0.7% | 2023-01-03 | |
| CVE-2022-3614 | Octopus Deploy Octopus Server authentication bypass | 6.1v3.1 | 0.4% | 2023-01-03 | Fix |
| CVE-2022-3460 | Octopus Deploy Octopus Server improper removal of sensitive information | 7.5v3.1 | 0.6% | 2023-01-03 | Fix |
| CVE-2022-2967 | Prosys OPC UA Simulation Server insufficiently protected credentials | 7.5v3.1 | 0.4% | 2023-01-03 | Fix |
| CVE-2022-48197 | Yui Sandbox examples in the reflected cross-site scripting | 6.1v3.1 | 6.6% | 2023-01-02 | NucleiExploit code |
| CVE-2022-42475 | Fortinet FortiOS heap-based buffer overflow | 9.3CNA v3.1 | 99.5% | 2023-01-02 | KEVNucleiExploit codeFix |
| CVE-2022-4417 | WP Cerber WordPress plugin user enumeration bypass via rest API | 5.3NVD v3.1 | 0.7% | 2023-01-02 | Fix |
| CVE-2022-4381 | Popup Maker WordPress plugin Contributor+ stored XSS via Subscription form | 5.4NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4373 | Quote-O-Matic WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-01-02 | |
| CVE-2022-4372 | Web Invoice WordPress plugin authenticated SQLi | 7.2NVD v3.1 | 1.0% | 2023-01-02 | |
| CVE-2022-4371 | Web Invoice WordPress plugin authenticated SQLi | 7.2NVD v3.1 | 1.0% | 2023-01-02 | |
| CVE-2022-4370 | Multimedial Images WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2023-01-02 | |
| CVE-2022-4369 | WP-Lister Lite for Amazon WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4362 | Popup Maker WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.6% | 2023-01-02 | Fix |
| CVE-2022-4360 | WP RSS By Publishers WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2023-01-02 | |
| CVE-2022-4359 | WP RSS By Publishers WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2023-01-02 | |
| CVE-2022-4358 | WP RSS By Publishers WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2023-01-02 | |
| CVE-2022-4357 | LetsRecover WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.0% | 2023-01-02 | Fix |
| CVE-2022-4356 | LetsRecover WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-01-02 | Fix |
| CVE-2022-4355 | LetsRecover WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2023-01-02 | Fix |
| CVE-2022-4352 | Qe SEO Handyman WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.0% | 2023-01-02 | |
| CVE-2022-4351 | Qe SEO Handyman WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2023-01-02 | |
| CVE-2022-4340 | BookingPress WordPress plugin unauthenticated IDOR in appointment_id | 5.3NVD v3.1 | 0.7% | 2023-01-02 | Fix |
| CVE-2022-4329 | Product list Widget for Woocommerce WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-01-02 | |
| CVE-2022-4324 | Custom Field Template WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 17.7% | 2023-01-02 | Fix |
| CVE-2022-4302 | White Label CMS WordPress plugin Admin+ PHP object injection | 7.2NVD v3.1 | 17.7% | 2023-01-02 | Fix |
| CVE-2022-4298 | Wholesale Market WordPress plugin unauthenticated arbitrary file download | 9.8NVD v3.1 | 1.8% | 2023-01-02 | Fix |
| CVE-2022-4297 | WP AutoComplete Search WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 3.6% | 2023-01-02 | Exploit code |
| CVE-2022-4260 | WP-Ban WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.9% | 2023-01-02 | NucleiFix |
| CVE-2022-4256 | All-in-One Addons for Elementor - WidgetKit WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4237 | Welcart e-Commerce WordPress plugin Subscriber+ PHAR Deserialisation | 8.8NVD v3.1 | 1.1% | 2023-01-02 | Fix |
| CVE-2022-4236 | Welcart e-Commerce WordPress plugin Subscriber+ arbitrary file access | 6.5NVD v3.1 | 0.8% | 2023-01-02 | Fix |
| CVE-2022-4200 | Login with Cognito WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4198 | WP Social Sharing WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2023-01-02 | Fix |
| CVE-2022-4142 | WordPress Filter Gallery plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4140 | Welcart e-Commerce WordPress plugin unauthenticated arbitrary file access | 7.5NVD v3.1 | 2.9% | 2023-01-02 | NucleiExploit codeFix |
| CVE-2022-4119 | Image Optimizer, Resizer and CDN WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4114 | Superio - Job Board WordPress theme Subscriber+ stored cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-4109 | Wholesale Market for WooCommerce WordPress plugin Admin+ arbitrary Log download | 2.7NVD v3.1 | 0.7% | 2023-01-02 | Fix |
| CVE-2022-4099 | Joy Of Text Lite WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 1.0% | 2023-01-02 | Fix |
| CVE-2022-4059 | Cryptocurrency Widgets Pack WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 4.8% | 2023-01-02 | NucleiFix |
| CVE-2022-4057 | Autoptimize WordPress plugin sensitive data disclosure | 5.3NVD v3.1 | 1.5% | 2023-01-02 | NucleiFix |
| CVE-2022-4049 | WP User WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 4.8% | 2023-01-02 | Nuclei |
| CVE-2022-4025 | Google Chrome Paint inappropriate implementation | 4.3v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-3994 | Authenticator WordPress plugin Subscriber+ denial of service via Feed token disclosure | 4.3NVD v3.1 | 0.8% | 2023-01-02 | Fix |
| CVE-2022-3936 | Team Members WordPress plugin Editor+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-3911 | iubenda WordPress plugin Subscriber+ privileges escalation to admin | 8.8NVD v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-3863 | Google Chrome Browser History use-after-free | 6.1v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-3860 | Visual Email Designer for WooCommerce WordPress plugin Multiple Author+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-01-02 | Fix |
| CVE-2022-3842 | Google Chrome Passwords use-after-free | 7.5v3.1 | 18.3% | 2023-01-02 | Fix |
| CVE-2022-3241 | Build App Online WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.0% | 2023-01-02 | Fix |
| CVE-2022-2743 | Google Chrome Window Manager integer overflow | 8.8v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-2742 | Google Chrome Exosphere use-after-free | 8.8v3.1 | 0.4% | 2023-01-02 | Fix |
| CVE-2022-0801 | Google Chrome HTML parser inappropriate implementation | 6.1v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2022-0337 | Google Chrome File System API inappropriate implementation | 6.5v3.1 | 1.3% | 2023-01-02 | Exploit codeFix |
| CVE-2022-48198 | Open Robotics Robot Operating System resource exposure | 9.8v3.1 | 1.1% | 2023-01-01 | |
| CVE-2022-47952 | Linuxcontainers LXC observable discrepancy | 3.3v3.1 | 0.7% | 2023-01-01 | Exploit codeFix |
| CVE-2022-47634 | Isode M-link improper access control | 8.1v3.1 | 0.5% | 2023-01-01 | Fix |
| CVE-2022-45213 | Perfsonar external control of a file path | 5.3v3.1 | 0.6% | 2023-01-01 | Fix |
| CVE-2022-45027 | Perfsonar server-side request forgery | 5.3v3.1 | 0.6% | 2023-01-01 | Fix |
| CVE-2022-40711 | Primekey EJBCA cross-site scripting | 4.8v3.1 | 0.5% | 2023-01-01 | |
| CVE-2022-37787 | Wecube-platform cross-site scripting | 6.1v3.1 | 0.6% | 2023-01-01 | |
| CVE-2022-37786 | Wecube-platform CSV injection | 6.3v3.1 | 0.5% | 2023-01-01 | |
| CVE-2022-37785 | Wecube-platform cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2023-01-01 | |
| CVE-2022-34324 | Sage Xrt Business Exchange SQL injection | 8.8v3.1 | 11.8% | 2023-01-01 | |
| CVE-2022-34323 | Sage Xrt Business Exchange cross-site scripting | 5.4v3.1 | 0.4% | 2023-01-01 | |
| CVE-2022-34322 | Sage Enterprise Intelligence cross-site scripting | 9.0v3.1 | 0.8% | 2023-01-01 |