CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- rich-web event timeline, unknown event timeline – vertical timeline +1 moreEvent Timeline <= 1.1.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- hamid alinia login with phone numberLogin with phone number < 1.3.8 - Multiple Admin+ Stored XSS4.8 Medium
- artica pfms pandora fms, pandora fms fms +1 moreImproper Authorization in User Management to Vertical Privilege Escalation7.3 High
- artica pfms pandora fms, pandora fms fms +1 moreCross-Site Request en Bulk operation (User operation)3.7 Low
- artica pfms pandora fms, pandora fms fms +1 moreImproper Access Control in Configuration (Credential store)3.7 Low
- rust-websocket project rust-websocket, fedoraproject fedora +1 moreMemory allocation based on untrusted length in rust-websocket7.5 High
- realtek ecos msdk firmware, ecos rsdk firmware +1 moreIn Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a...9.8 Critical
oracleasmSUSESecurity update for oracleasmNo score- atlassian jira server, jira data center +1 moreThis issue exists to document that a security improvement in the way that Jira Server and Data...7.2 High
libaomOSS-FuzzHeap-buffer-overflow in av1_read_mode_infoNo scoreghostscriptOSS-FuzzUNKNOWN READ in pdfi_free_objectNo scorendpiOSS-FuzzHeap-buffer-overflow in dissect_softether_ip_portNo score- minioAuthenticated requests for server update admin API allows path traversal in minio7.4 High
- cvat computer vision annotation tool, cvat-ai cvat +1 moreServer-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)8.6 High
- vim, vim vim/vim, debian linux +2 moreOut-of-bounds Write to API in vim/vim6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, apq8096au firmware +110 more +112 moreImproper validation of backend id in PCM routing process can lead to memory corruption in...8.4 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A7.5 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-210916981References: N/A7.5 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A7.5 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-216363416References: N/A9.8 Critical
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A7.5 High
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-207975764References: N/A9.8 Critical
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-218701042References: N/A9.8 Critical
- google androidIn SAEMM_RetrievEPLMNList of SAEMM_ContextManagement.c, there is a possible out of bounds read...7.5 High
- google androidIn cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a missing bounds...9.8 Critical
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A9.8 Critical
- google androidIn AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write...7.8 High
- google androidIn (TBD) of (TBD), there is a possible out of bounds write due to kernel stack overflow. This...6.7 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-188935887References: N/A9.8 Critical
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-212625740References: N/A7.5 High
- google androidIn lwis_buffer_alloc of lwis_buffer.c, there is a possible arbitrary code execution due to a use...6.7 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-234657153References: N/A9.8 Critical
- google androidIn TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth...6.7 Medium
- google androidIn trusty_log_seq_start of trusty-log.c, there is a possible use after free due to improper...6.7 Medium
- google androidIn LteRrcNrProAsnDecode of LteRrcNr_Codec.c, there is a possible out of bounds read due to a...7.5 High
- google androidIn st21nfc_loc_set_polaritymode of fc/st21nfc.c, there is a possible use after free due to a race...6.4 Medium
- google androidIn exynos5_i2c_irq of (TBD), there is a possible out of bounds write due to a use after free....6.7 Medium
- google androidIn dm_bow_dtr and related functions of dm-bow.c, there is a possible use after free due to a race...6.4 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A7.5 High
- google android, debian linux +1 moreIn v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper...6.7 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel7.8 High
- google androidIn construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an...6.7 Medium
- google androidIn ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an...6.7 Medium
- google androidProduct: AndroidVersions: Android kernelAndroid ID: A-229632566References: N/A9.8 Critical
- google androidIn btif_dm_auth_cmpl_evt of btif_dm.cc, there is a possible vulnerability in Cross-Transport Key...9.8 Critical
- google androidIn setChecked of SecureNfcPreferenceController.java, there is a missing permission check. This...7.8 High
- google androidIn startSync of AbstractThreadedSyncAdapter.java, there is a possible way to access protected...3.3 Low
- google androidIn writeToParcel of SurfaceControl.cpp, there is a possible information disclosure due to...5.5 Medium
- google androidIn shouldAllowFgsWhileInUsePermissionLocked of ActiveServices.java, there is a possible way to...7.8 High
- google androidIn get of PacProxyService.java, there is a possible system service crash due to improper input...5.5 Medium
- Show moreLoading…