CVE Records
Page 10 of 19. 1892 curated CVE records with CVSS, EPSS, and CISA KEV status.
Records
1892 total| CVE | Title | Vendor | CVSS | EPSS | KEV | Published |
|---|---|---|---|---|---|---|
| CVE-2022-36537 | ZK Framework AuUploader Unspecified Vulnerability | - | 7.5 | 95.4% | KEV | 2022-08-26 |
| CVE-2022-36804 | Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | Atlassian | 8.8 | 99.2% | KEV | 2022-08-25 |
| CVE-2022-32894 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Apple | 7.8 | 3.3% | KEV | 2022-08-24 |
| CVE-2022-32893 | Apple iOS and macOS Out-of-Bounds Write Vulnerability | Apple | 8.8 | 9.9% | KEV | 2022-08-24 |
| CVE-2022-37042 | Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | - | 9.8 | 91.9% | KEV | 2022-08-11 |
| CVE-2022-0028 | PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering | Palo Alto Networks | 8.6 | 2.4% | KEV | 2022-08-10 |
| CVE-2022-34713 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Microsoft | 7.8 | 67.8% | KEV | 2022-08-09 |
| CVE-2022-2294 | WebRTC Heap Buffer Overflow Vulnerability | 8.8 | 70.5% | KEV | 2022-07-28 | |
| CVE-2022-1364 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 13.7% | KEV | 2022-07-26 | |
| CVE-2022-1096 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 24.2% | KEV | 2022-07-22 | |
| CVE-2022-26138 | Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability | Atlassian | 9.8 | 98.2% | KEV | 2022-07-20 |
| CVE-2022-35405 | Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | - | 9.8 | 99.9% | KEV | 2022-07-19 |
| CVE-2022-33891 | Apache Spark shell command injection vulnerability via Spark UI | Apache Software Foundation | 8.8 | 93.1% | KEV | 2022-07-18 |
| CVE-2022-26352 | dotCMS Unrestricted Upload of File Vulnerability | - | 9.8 | 91.6% | KEV | 2022-07-17 |
| CVE-2022-22047 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | Microsoft | 7.8 | 18.8% | KEV | 2022-07-12 |
| CVE-2022-22071 | Qualcomm Multiple Chipsets Use-After-Free Vulnerability | Qualcomm, Inc. | 8.4 | 0.5% | KEV | 2022-06-14 |
| CVE-2022-26134 | Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability | Atlassian | 9.8 | 100.0% | KEV | 2022-06-03 |
| CVE-2022-30190 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability | Microsoft | 7.8 | 99.2% | KEV | 2022-06-01 |
| CVE-2022-22675 | Apple macOS Out-of-Bounds Write Vulnerability | Apple | 7.8 | 12.5% | KEV | 2022-05-26 |
| CVE-2022-22674 | Apple macOS Out-of-Bounds Read Vulnerability | Apple | 5.5 | 1.1% | KEV | 2022-05-26 |
| CVE-2022-20821 | Cisco IOS XR Software Health Check Open Port Vulnerability | Cisco | 6.5 | 11.5% | KEV | 2022-05-26 |
| CVE-2022-29303 | SolarView Compact Command Injection Vulnerability | - | 9.8 | 98.0% | KEV | 2022-05-12 |
| CVE-2022-30525 | Zyxel Multiple Firewalls OS Command Injection Vulnerability | Zyxel | 9.8 | 99.9% | KEV | 2022-05-12 |
| CVE-2022-26925 | Windows LSA Spoofing Vulnerability | Microsoft | 8.1 | 10.5% | KEV | 2022-05-10 |
| CVE-2022-26923 | Active Directory Domain Services Elevation of Privilege Vulnerability | Microsoft | 8.8 | 83.5% | KEV | 2022-05-10 |
| CVE-2022-30333 | RARLAB UnRAR Directory Traversal Vulnerability | - | 9.8 | 99.1% | KEV | 2022-05-09 |
| CVE-2022-1388 | F5 BIG-IP Missing Authentication Vulnerability | F5 | 9.8 | 100.0% | KEV | 2022-05-05 |
| CVE-2022-29499 | Mitel MiVoice Connect Data Validation Vulnerability | - | 9.8 | 55.2% | KEV | 2022-04-26 |
| CVE-2022-24706 | Remote Code Execution Vulnerability in Packaging | Apache Software Foundation | 9.8 | 92.5% | KEV | 2022-04-26 |
| CVE-2022-27926 | Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability | - | 6.1 | 17.6% | KEV | 2022-04-20 |
| CVE-2022-27925 | Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | - | 7.2 | 98.7% | KEV | 2022-04-20 |
| CVE-2022-27924 | Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability | - | 9.8 | 85.4% | KEV | 2022-04-20 |
| CVE-2022-21445 | Oracle ADF Faces Deserialization of Untrusted Data Vulnerability | Oracle Corporation | 9.8 | 62.5% | KEV | 2022-04-19 |
| CVE-2022-28810 | Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability | - | 6.8 | 71.0% | KEV | 2022-04-18 |
| CVE-2022-29464 | WSO2 Multiple Products Unrestrictive Upload of File Vulnerability | - | 9.8 | 100.0% | KEV | 2022-04-18 |
| CVE-2022-26904 | Windows User Profile Service Elevation of Privilege Vulnerability | Microsoft | 7.0 | 16.9% | KEV | 2022-04-15 |
| CVE-2022-24521 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Microsoft | 7.8 | 7.1% | KEV | 2022-04-15 |
| CVE-2022-24816 | Improper Control of Generation of Code in jai-ext | geosolutions-it | 10.0 | 99.9% | KEV | 2022-04-13 |
| CVE-2022-22960 | VMware Multiple Products Privilege Escalation Vulnerability | - | 7.8 | 35.5% | KEV | 2022-04-13 |
| CVE-2022-22954 | VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | - | 9.8 | 100.0% | KEV | 2022-04-11 |
| CVE-2022-0609 | Google Chromium Animation Use-After-Free Vulnerability | 8.8 | 22.9% | KEV | 2022-04-04 | |
| CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability | - | 9.8 | 99.6% | KEV | 2022-04-01 |
| CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | - | 9.8 | 99.9% | KEV | 2022-04-01 |
| CVE-2022-26871 | Trend Micro Apex Central Arbitrary File Upload Vulnerability | Trend Micro | 9.8 | 19.5% | KEV | 2022-03-29 |
| CVE-2022-22948 | VMware vCenter Server Incorrect Default File Permissions Vulnerability | - | 6.5 | 13.3% | KEV | 2022-03-29 |
| CVE-2022-26258 | D-Link DIR-820L Remote Code Execution Vulnerability | - | 9.8 | 92.0% | KEV | 2022-03-27 |
| CVE-2022-0995 | Linux Kernel Out-of-Bounds Write Vulnerability | - | 7.8 | 8.8% | KEV | 2022-03-25 |
| CVE-2022-1040 | Sophos Firewall Authentication Bypass Vulnerability | Sophos | 9.8 | 99.8% | KEV | 2022-03-25 |
| CVE-2022-22620 | Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability | Apple | 8.8 | 16.3% | KEV | 2022-03-18 |
| CVE-2022-22587 | Apple Memory Corruption Vulnerability | Apple | 9.8 | 11.6% | KEV | 2022-03-18 |
| CVE-2022-26500 | Veeam Backup & Replication Remote Code Execution Vulnerability | - | 8.8 | 5.8% | KEV | 2022-03-17 |
| CVE-2022-26501 | Veeam Backup & Replication Remote Code Execution Vulnerability | - | 9.8 | 4.1% | KEV | 2022-03-17 |
| CVE-2021-39793 | Google Pixel Out-of-Bounds Write Vulnerability | - | 7.8 | 0.7% | KEV | 2022-03-16 |
| CVE-2022-26143 | MiCollab, MiVoice Business Express Access Control Vulnerability | - | 9.8 | 87.3% | KEV | 2022-03-09 |
| CVE-2022-0847 | Linux Kernel Privilege Escalation Vulnerability | - | 7.8 | 92.8% | KEV | 2022-03-07 |
| CVE-2022-26318 | WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | - | 9.8 | 78.2% | KEV | 2022-03-04 |
| CVE-2022-22706 | Arm Mali GPU Kernel Driver Unspecified Vulnerability | - | 7.8 | 1.1% | KEV | 2022-03-03 |
| CVE-2022-22947 | VMware Spring Cloud Gateway Code Injection Vulnerability | - | 10.0 | 98.3% | KEV | 2022-03-03 |
| CVE-2022-0492 | Linux Kernel Improper Authentication Vulnerability | - | 7.8 | 5.5% | KEV | 2022-03-03 |
| CVE-2022-23176 | WatchGuard Firebox and XTM Privilege Escalation Vulnerability | - | 8.8 | 10.8% | KEV | 2022-02-24 |
| CVE-2022-0543 | Debian-specific Redis Server Lua Sandbox Escape Vulnerability | Debian | 10.0 | 99.4% | KEV | 2022-02-18 |
| CVE-2021-45382 | D-Link Multiple Routers Remote Code Execution Vulnerability | - | 9.8 | 97.8% | KEV | 2022-02-17 |
| CVE-2022-24086 | Adobe Commerce checkout improper input validation leads to remote code execution | Adobe | 9.8 | 99.2% | KEV | 2022-02-16 |
| CVE-2021-3560 | Red Hat Polkit Incorrect Authorization Vulnerability | - | 7.8 | 23.7% | KEV | 2022-02-16 |
| CVE-2021-4102 | Google Chromium V8 Use-After-Free Vulnerability | 8.8 | 7.8% | KEV | 2022-02-11 | |
| CVE-2022-0185 | Linux Kernel Heap-Based Buffer Overflow Vulnerability | - | 8.4 | 25.2% | KEV | 2022-02-11 |
| CVE-2022-24112 | apisix/batch-requests plugin allows overwriting the X-REAL-IP header | Apache Software Foundation | 9.8 | 96.1% | KEV | 2022-02-11 |
| CVE-2022-20699 | Cisco Small Business RV Series Routers Vulnerabilities | Cisco | 10.0 | 72.5% | KEV | 2022-02-10 |
| CVE-2022-20700 | Cisco Small Business RV Series Routers Vulnerabilities | Cisco | 10.0 | 5.7% | KEV | 2022-02-10 |
| CVE-2022-20701 | Cisco Small Business RV Series Routers Vulnerabilities | Cisco | 10.0 | 9.7% | KEV | 2022-02-10 |
| CVE-2022-20703 | Cisco Small Business RV Series Routers Vulnerabilities | Cisco | 10.0 | 9.2% | KEV | 2022-02-10 |
| CVE-2022-20708 | Cisco Small Business RV Series Routers Vulnerabilities | Cisco | 10.0 | 14.9% | KEV | 2022-02-10 |
| CVE-2022-22536 | SAP Multiple Products HTTP Request Smuggling Vulnerability | SAP SE | 9.8 | 97.9% | KEV | 2022-02-09 |
| CVE-2022-22718 | Windows Print Spooler Elevation of Privilege Vulnerability | Microsoft | 7.8 | 18.5% | KEV | 2022-02-09 |
| CVE-2022-21999 | Windows Print Spooler Elevation of Privilege Vulnerability | Microsoft | 7.8 | 41.0% | KEV | 2022-02-09 |
| CVE-2022-21971 | Windows Runtime Remote Code Execution Vulnerability | Microsoft | 7.8 | 53.9% | KEV | 2022-02-09 |
| CVE-2022-24682 | Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | - | 6.1 | 30.9% | KEV | 2022-02-09 |
| CVE-2021-40407 | Reolink RLC-410W IP Camera OS Command Injection Vulnerability | - | 9.1 | 47.6% | KEV | 2022-01-28 |
| CVE-2021-4034 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability | - | 7.8 | 94.3% | KEV | 2022-01-28 |
| CVE-2021-22600 | Double Free in net/packet/af_packet.c leading to priviledge escalation | Linux Kernel | 6.6 | 6.6% | KEV | 2022-01-26 |
| CVE-2021-35587 | Oracle Fusion Middleware Unspecified Vulnerability | Oracle Corporation | 9.8 | 96.3% | KEV | 2022-01-19 |
| CVE-2022-23227 | NUUO NVRmini2 Devices Missing Authentication Vulnerability | - | 9.8 | 48.5% | KEV | 2022-01-14 |
| CVE-2022-23134 | Possible view of the setup pages by unauthenticated users if config file already exists | Zabbix | 3.7 | 95.3% | KEV | 2022-01-13 |
| CVE-2022-23131 | Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML | Zabbix | 9.1 | 95.7% | KEV | 2022-01-13 |
| CVE-2022-21919 | Windows User Profile Service Elevation of Privilege Vulnerability | Microsoft | 7.0 | 2.4% | KEV | 2022-01-11 |
| CVE-2022-21882 | Win32k Elevation of Privilege Vulnerability | Microsoft | 7.0 | 59.2% | KEV | 2022-01-11 |
| CVE-2021-35247 | Improper Input Validation Vulnerability in Serv-U | SolarWinds | 4.3 | 3.5% | KEV | 2022-01-07 |
| CVE-2022-22265 | Samsung Mobile Devices Use-After-Free Vulnerability | Samsung Mobile | 5.0 | 0.4% | KEV | 2022-01-07 |
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File Download | Fortinet | 3.3 | 0.9% | KEV | 2022-01-04 |
| CVE-2021-44207 | Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability | - | 8.1 | 17.6% | KEV | 2021-12-21 |
| CVE-2021-22054 | Omnissa Workspace ONE Server-Side Request Forgery | - | 7.5 | 99.7% | KEV | 2021-12-17 |
| CVE-2021-1048 | Android Kernel Use-After-Free Vulnerability | - | 7.8 | 1.0% | KEV | 2021-12-15 |
| CVE-2021-0920 | Android Kernel Race Condition Vulnerability | - | 6.4 | 0.8% | KEV | 2021-12-15 |
| CVE-2021-43890 | Windows AppX Installer Spoofing Vulnerability | Microsoft | 7.1 | 10.3% | KEV | 2021-12-15 |
| CVE-2021-43226 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Microsoft | 7.8 | 3.1% | KEV | 2021-12-15 |
| CVE-2021-45046 | Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack | Apache Software Foundation | 9.0 | 100.0% | KEV | 2021-12-14 |
| CVE-2021-39935 | GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability | GitLab | 6.8 | 35.6% | KEV | 2021-12-13 |
| CVE-2021-44515 | Zoho Desktop Central Authentication Bypass Vulnerability | - | 9.8 | 99.9% | KEV | 2021-12-12 |
| CVE-2021-44228 | Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints | Apache Software Foundation | 10.0 | 100.0% | KEV | 2021-12-10 |
| CVE-2021-27860 | Arbitrary file upload vulnerability in FatPipe software | FatPipe | 9.8 | 39.8% | KEV | 2021-12-08 |