CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- pharmacy management system project management systemPharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
antlr4-javaOSS-FuzzUncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternalNo scoreopenexrOSS-FuzzHeap-buffer-overflow in fasthuf_decodeNo scoremrubyOSS-FuzzUse-of-uninitialized-value in udivNo scorelibredwgOSS-FuzzHeap-buffer-overflow in decode_preR13_section_hdrNo score- frroutingAn issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and...8.1 High
- oracle mysql, oracle corporation mysql server, mariadb +2 more +4 moreVulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions...4.4 Medium
- go standard library math/big, golang go +1 morePanic when decoding Float and Rat types in math/big7.5 High
- graphql-go project graphql-gographql-go has infinite recursion in the type definition parser7.5 High
- friendsofflarum byobuUser preference to prevent private discussions not respected in fof/byobu3.5 Low
- sanic-org sanicImproper Limitation of a Pathname to a Restricted Directory in sanic8.3 High
- snowflake streamlitStreamlit directory traversal vulnerability6.5 Medium
- solanalabs pay, solana-labs solana-pay +1 moreWeakness in Transfer Validation Logic in @solana/pay5.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 more +4 moreUnbounded gas consumption in @openzeppelin/contracts5.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreCross chain utilities for Arbitrum L2 see EOA calls as cross chain calls5.3 Medium
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreGovernorVotesQuorumFraction updates to quorum may affect past defeated proposals in @openzeppelin/contracts7.5 High
- dspacePath traversal vulnerability in Simple Archive Format package import in DSpace7.2 High
- dspaceCross Site Scripting possible in DSpace JSPUI "Request a Copy" feature7.1 High
- dspaceCross Site Scripting possible in DSpace JSPUI spellcheck and autocomplete tools7.1 High
- dspacePath traversal vulnerabilities in DSpace JSPUI submission upload8.2 High
- dspaceURL Redirection to Untrusted Site in Dspace JSPUI7.1 High
- dspace"Internal System Error" page in DSpace JSPUI prints exceptions and stack traces without sanitization5.3 Medium
- dspaceMetadata of withdrawn Items is exposed to anonymous users in DSpace XMLUI5.3 Medium
- discourseEmail activation route can be abused by spammers in Discourse6.5 Medium
- discourseCache poisoning via maliciously-formed request in Discourse5.3 Medium
- next-auth nextauth.js, nextauthjs next-auth +1 moreLeakage of excessive information into log in next-auth3.3 Low
- makedeb mprwebEmail addresses are not hidden regardless of selected state in mprweb5.3 Medium
- pyrocmsPyroCMS v3.9 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities.6.1 Medium
- backdropcms backdrop cmsAn issue in the login and reset password functionality of Backdrop CMS v1.22.0 allows attackers...5.3 Medium
- boltcms boltThe foldername parameter in Bolt 5.1.7 was discovered to have incorrect input validation,...9.1 Critical
- elabftwImproper Authorization in eLabFTW4.3 Medium
- sourcegraphUnauthorized overwriting of saved searches in Sourcegraph4.3 Medium
- sourcegraphIndirect Object Access in Sourcegraph Code Monitoring6.4 Medium
- enalean tuleapFine grained permissions are not checked in Tuleap5.4 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 does not set the secure attribute on authorization tokens or session cookies....4.3 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper...5.9 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 is vulnerable to HTTP header injection, caused by improper validation of input...5.4 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 could allow a remote attacker to hijack the clicking action of the victim. By...5.4 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to...4.3 Medium
- ibm cics tx, cics tx advanced, cics tx standard +2 moreIBM CICS TX 11.1 could allow allow an attacker with physical access to the system to execute code...4.3 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by updating almost expired delegation information6.5 Medium
- nlnet labs unbound, fedoraproject fedora +1 moreNovel "ghost domain names" attack by introducing subdomain delegations6.5 Medium
- node-fetch node-fetch/node-fetch, node-fetch project node-fetch +1 moreInefficient Regular Expression Complexity in node-fetch/node-fetch5.9 Medium
- kromit titra, kromitgmbh kromitgmbh/titra +1 moreImproper Authorization in kromitgmbh/titra9.8 Critical
- vim, vim vim/vim +1 moreOut-of-bounds Read in vim/vim7.8 High
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.3 High
- beancount beancount/fava, fava project fava +1 moreCross-site Scripting (XSS) - Reflected in beancount/fava6.9 Medium
- vim, vim vim/vim +1 moreHeap-based Buffer Overflow in vim/vim7.8 High
- bosch bf-osFile path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an...8.8 High
- bosch bf-osBF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a...9.8 Critical
- Show moreLoading…