CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- dlink dir-816 firmware D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi. 8.8 High
- dlink dir-816 firmware In D-link DIR-816 A2_v1.10CNB04.img,the network can be reset without authentication via /goform... 7.5 High
- dlink dir-816 firmware D-Link DIR-816 A2_v1.10CNB04.img is vulnerable to Command Injection via /goform/SystemCommand.... 8.8 High
- dlink dir-816 firmware D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost. 9.8 Critical
- prestashop productcomments PrestaShop module Product Comments vulnerable to cross-site scripting (XSS) 4.3 Medium
- element-hq synapse Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rules 6.4 Medium
- measuresoft scadapro server and client, scadapro server, scadapro client +2 more Measuresoft ScadaPro Server and Client Link Following 6.1 Medium
- measuresoft scadapro server and client, scadapro server, scadapro client +2 more Measuresoft ScadaPro Server and Client Link Following 7.8 High
- measuresoft scadapro server Measuresoft ScadaPro Server Use After Free 7.8 High
- measuresoft scadapro server Measuresoft ScadaPro Server Untrusted Pointer Dereference 7.8 High
- measuresoft scadapro server Measuresoft ScadaPro Server Stack-based Buffer Overflow 7.8 High
- measuresoft scadapro server Measuresoft ScadaPro Server Out-of-bounds Write 7.8 High
- doctor\'s appointment system project appointment system Doctor's Appointment System 1.0 is vulnerable to SQL Injection via booking.php has ?id=. 9.8 Critical
- doctor\'s appointment system project appointment system Doctor's Appointment System1.0 is vulnerable to Incorrect Access Control via edoc/patient... 9.8 Critical
- doctor\'s appointment system project appointment system Doctor's Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) via the admin panel.... 6.1 Medium
- dell edge gateway 5200, edge gateway 5200 firmware +1 more Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command... 8.1 High
- dell command \| integration suite for system center, cpg sw +1 more Dell Command Integration Suite for System Center, versions prior to 6.2.0, contains arbitrary... 7.3 High
- dell unisphere for powermax, evasa provider virtual appliance, powermax os +5 more +7 more Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An... 6.3 Medium
- garage management system project management system An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage... 7.2 High
- online ordering system project ordering system Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the... 7.5 High
- online ordering system project ordering system An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add... 7.2 High
- zephyrproject zephyr Out-of-bound write in tcp_flags 7.2 High
- zulip IP address leak via image proxy bypass in Zulip Server 4.3 Medium
- tenda ac9 firmware Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the mask parameter at ... 7.2 High
- tenda ac9 firmware Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the time parameter at ... 7.2 High
- tenda ac9 firmware Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the deviceList parameter at... 8.8 High
- tenda ac9 firmware Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at ... 8.8 High
- dlink dir-816 firmware In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via ... 9.8 Critical
- aerocms project aerocms AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter. 6.5 Medium
- garage management system project management system The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File... 8.8 High
- yogeshojha rengine Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine... 9.8 Critical
- piwigo Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list. 6.1 Medium
- fatek fvdesigner FATEK Automation FvDesigner Out-of-bounds Write 7.8 High
- automationdirect sio- mb04ads, sio-mb04ads, sio-mb04ads firmware +18 more +20 more AutomationDirect Stride Field I/O Cleartext Transmission of Sensitive Information 9.6 Critical
- moxa, moxa nport 5110 firmware +1 more MOXA NPort 5110 Out-of-bounds Write 8.2 High
- moxa, moxa nport 5110 firmware +1 more MOXA NPort 5110 Out-of-bounds Write 7.5 High
- hewlett packard enterprise (hpe) hpe oneview, hp oneview +1 more A local disclosure of sensitive information vulnerability was discovered in HPE OneView version(s... 5.5 Medium
- johnson controls istar ultra, johnsoncontrols istar ultra firmware +1 more iSTAR Ultra 10.0 Critical
- automationdirect directlogic d0-06 series cpus, d0-06aa firmware, d0-06ar firmware +7 more +9 more AutomationDirect DirectLOGIC with Ethernet Communication Uncontrolled Resource Consumption 7.5 High
- automationdirect directlogic d0-06 series cpus, d0-06aa firmware, d0-06ar firmware +7 more +9 more AutomationDirect DirectLOGIC with Serial Communication Cleartext Transmission 7.7 High
- micro focus arcsight logger Potential vulnerabilities have been identified in Micro Focus ArcSight Logger. The vulnerabilities could be remotely exploited resulting in Self Cross-Site Scripting (XSS). 6.1 Medium
- micro focus arcsight logger Potential vulnerability has been identified in Micro Focus ArcSight Logger. The vulnerability could be remotely exploited resulting in Information Disclosure. 6.5 Medium
- carel applica, pcoweb hvac bacnet gateway, pcoweb card firmware +2 more Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A... 7.5 High
- honeywell controledge plc firmware, controledge rtu firmware +1 more Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056,... 9.8 Critical
- delta electronics robot automation studio (dras), deltaww delta robot automation studio +1 more Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by... 5.5 Medium
- libjpeg-turbo A crafted input file could cause a null pointer dereference in jcopy_sample_rows() when processed... 5.5 Medium
- ls industrial systems (lsis) co. ltd ls electric xg5000, plc: xgb-xbch, plc: xgb-xbms +238 more +240 more Update 6.5 Medium
- automationdirect c-more ea9, c-more ea9-pgmsw firmware, c-more ea9-rhmi firmware +10 more +12 more AutomationDirect C-more EA9 HMI Uncontrolled Search Path Element 7.8 High
- automationdirect c-more ea9, c-more ea9-pgmsw firmware, c-more ea9-rhmi firmware +10 more +12 more AutomationDirect C-more EA9 HMI Cleartext Transmission 7.5 High
- delta electronics cncsoft Delta Electronics CNCSoft Stack-based Buffer Overflow 7.8 High
- Show olderLoading…