CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- centreonThis vulnerability allows remote attackers to disclose sensitive information on affected...6.5 Medium
- centreonThis vulnerability allows remote attackers to escalate privileges on affected installations of...7.2 High
- sante pacs server, santesoft sante pacs server +1 moreThis vulnerability allows remote attackers to bypass authentication on affected installations of...9.8 Critical
- devexpressThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...8.8 High
- sante dicom viewer proThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- dlink dir-820l firmwareD-Link DIR820LA1_FW106B02 was discovered to contain a buffer overflow via the nextPage parameter...7.5 High
- dlink dir-818l firmwareD-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE)...9.8 Critical
- dlink dir-818l firmwareD-LINK DIR-818LW A1:DIR818L_FW105b01 was discovered to contain a remote code execution (RCE)...9.8 Critical
- dlink dir-810l firmwareD-Link DIR810LA1_FW102B22 was discovered to contain a command injection vulnerability via the...9.8 Critical
- fortinet fortiosAn improper access control vulnerability [CWE-284] in FortiOS versions 6.2.0 through 6.2.11, 6.4...4.3 Medium
- fortinet fortiadcA unverified password change in Fortinet FortiADC version 6.2.0 through 6.2.3, 6.1.x, 6.0.x, 5.x...5.4 Medium
mokutilopenSUSESecurity update for mokutilNo scoremokutilSUSESecurity update for mokutilNo scoremokutilSUSESecurity update for mokutilNo scoremokutilSUSESecurity update for mokutilNo scoremokutilopenSUSESecurity update for mokutilNo scorepermissionsopenSUSE,rpmlint-miniopenSUSE +1 moreSecurity update for permissionsNo scoreseamonkeyopenSUSESecurity update for seamonkeyNo score- openstack novaOpenStack Nova Changing vnic_type breaks compute service restart3.3 Low
- synology usb copyImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...5.5 Medium
- synology sso serverImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...6.8 Medium
- synology note station, note station client +1 moreCleartext transmission of sensitive information vulnerability in authentication management in...6.8 Medium
- atlassian jira service management server, jira service management, jira service management data center +2 moreAffected versions of Atlassian Jira Service Management Server and Data Center allow remote...4.3 Medium
- synology storage analyzerImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...6.8 Medium
- synology calendarImproper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in...5.0 Medium
- synology diskstation manager (dsm), diskstation manager +1 moreImproper neutralization of special elements used in an OS command ('OS Command Injection')...7.2 High
- percona serverAn issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to...7.5 High
- pingcap tidbPingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.7.5 High
- monetdbThe assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.7.5 High
- yuba u5cmsYuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component...8.8 High
- jflyfox jfinal cmsJFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.8.8 High
- milkytracker project milkytrackerMilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load...7.8 High
- bigtreecms bigtree cmsBigTree CMS 4.4.16 was discovered to contain an arbitrary file upload vulnerability which allows...5.4 Medium
- djangoproject django, debian linux +1 moreDjango vulnerable to Reflected File Download attack8.8 High
- veeam backup and recoveryThis vulnerability allows remote attackers to bypass authentication on affected installations of...9.8 Critical
- sqlite, netapp ontap select deploy administration utility, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more`libsqlite3-sys` via C SQLite improperly validates array index7.5 High
- pgjdbc, postgresql jdbc driver, debian linux +1 more +3 moreSQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc7.1 High
- arm valhall gpu kernel driverAn issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non...5.5 Medium
- progress ipswitch ws ftp serverIn Progress WS_FTP Server prior to version 8.7.3, forms within the administrative interface did...4.3 Medium
- progress ipswitch ws ftp serverIn Progress WS_FTP Server prior to version 8.7.3, multiple reflected cross-site scripting (XSS)...6.1 Medium
- mealie project mealieA stored cross-site scripting (XSS) vulnerability in Mealie v0.5.5 allows attackers to execute...5.4 Medium
- quest kace systems management applianceA SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through...9.8 Critical
- quest kace systems management applianceIn Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible...9.8 Critical
- quest kace systems management applianceIn Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation...7.5 High
- bookwyrm-social bookwyrmMissing rate limit in Authentication in bookwyrm5.3 Medium
- imbrn v8nInefficient Regular Expression Complexity in v8n7.5 High
- landray office automationLanling OA Landray Office Automation (OA) internal patch number #133383/#137780 contains an...7.5 High
- intel connman, debian linux +1 moreIn ConnMan through 1.41, a man-in-the-middle attack against a WISPR HTTP query could be used to...8.1 High
- intel connman, debian linux +1 moreIn ConnMan through 1.41, remote attackers able to send HTTP requests to the gweb component are...9.8 Critical
- nextauth.js next-authVerification requests (magic link) sent to unwanted emails9.1 Critical
- Show moreLoading…