CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreBIG-IP and BIG-IQ AWS vulnerability CVE-2022-348445.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM vulnerability CVE-2022-346557.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP TLS 1.3 iRule vulnerability CVE-2022-346517.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP LTM and APM NTLM vulnerability CVE-2022-339683.7 Low
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP iRule vulnerability CVE-2022-339626.7 Medium
- f5 big-ip dns, big-ip domain name system +1 moreBIG-IP DNS TMUI Vulnerability CVE-2022-339475.4 Medium
- f5 big-ip apm, big-ip access policy manager, big-ip ssl orchestrator +2 moreBIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-332037.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM vulnerability CVE-2022-324557.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreBIG-IP APM Appliance mode vulnerability CVE-2022-314736.8 Medium
- f5 nginx ingress controllerNGINX Ingress Controller vulnerability CVE-2022-305356.5 Medium
- nextcloud mail, kiteworks security-advisories +1 morePassword disclosure in log file in Nextcloud Mail App3.1 Low
- nextcloud mail, kiteworks security-advisories +1 moreUnauthenticated SSRF in 3rd party module "cerdic/csstidy"8.3 High
- nextcloud server, kiteworks security-advisories +1 moreFederated share accepting/declining is not logged in audit log in Nextcloud Server2.1 Low
- nextcloud server, kiteworks security-advisories +1 moreMissing brute force protection on cloud federation sharing in Nextcloud Server6.5 Medium
- apache hadoopCommand injection in org.apache.hadoop.fs.FileUtil.unTarUsingTar9.8 Critical
- multi language hotel management software project language hotel management software, sourcecodester multi language hotel management software +1 moreSourceCodester Multi Language Hotel Management Software sql injection6.3 Medium
interledger-packetcrates.ioInterledger is UnmaintainedNo score- umlaeute umlaeute/v4l2loopback, v4l2loopback project v4l2loopback +1 moreUse of Externally-Controlled Format String in umlaeute/v4l2loopback7.3 High
- planka, plankanban plankanban/planka +1 morePath Traversal in plankanban/planka7.1 High
- itpison omicard edm, omicard edm project edm +1 moreITPison OMICARD EDM - Use of Hard-coded Credentials7.5 High
- itpison omicard edm, omicard edm project edm +1 moreITPison OMICARD EDM - Use of Hard-coded Credentials9.8 Critical
- itpison omicard edm, omicard edm project edm +1 moreITPison OMICARD EDM - SQL Injection9.8 Critical
- itpison omicard edm, omicard edm project edm +1 moreITPison OMICARD EDM - Path Traversal-17.5 High
- bookwyrm-social bookwyrm-social/bookwyrm, joinbookwyrm bookwyrm +1 moreAuthentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm9.8 Critical
- multi language hotel management software project language hotel management software, sourcecodester multi language hotel management software +1 moreSourceCodester Multi Language Hotel Management Software sql injection6.3 Medium
- jeecg boot, unspecified jeecg-boot +1 morejeecg-boot unrestricted upload7.3 High
- online admission system project admission system, projectworlds online admission system +1 moreSourceCodester Online Admission System index.php cross site scripting3.5 Low
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System edituser.php cross site scripting3.5 Low
- online admission system project admission system, projectworlds online admission system +1 moreSourceCodester Online Admission System GET Parameter sql injection5.5 Medium
- online admission system project admission system, projectworlds online admission system +1 moreSourceCodester Online Admission System POST Parameter sql injection6.3 Medium
- apache jspwikiUser Group Privilege Escalation8.8 High
- apache jspwikiApache JSPWiki Cross-site scripting vulnerability on WeblogPlugin6.1 Medium
- apache jspwikiApache JSPWiki CSRF in UserPreferences.jsp6.5 Medium
- apache jspwikiApache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp6.1 Medium
- apache jspwikiXSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.26.1 Medium
ndpiOSS-FuzzHeap-buffer-overflow in dissect_softether_ip_portNo score- triplecross project triplecrossTripleCross v0.1.0 was discovered to contain a stack overflow which occurs because there is no...7.5 High
- triplecross project triplecrossA segmentation fault in TripleCross v0.1.0 occurs when sending a control command from the client...7.5 High
- generalized electric vehicle reverse engineering tool project electric vehicle reverse engineering toolGVRET Stable Release as of Aug 15, 2015 was discovered to contain a buffer overflow via the...9.8 Critical
- tencent tscancodeA vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial...7.5 High
- hcl software launch, hcltechsw hcl launch +1 moreHCL Launch could allow an authenticated user to obtain sensitive information (CVE-2022-27551)5.3 Medium
- aescrypt aes crypt, paulej aescrypt +1 moreAES Crypt for Linux Password Security Vulnerability8.4 High
- ckeditor ckeditor5, ckeditor5-html-embed, ckeditor5-html-support +1 more +3 moreCross-site scripting caused by the editor instance destroying process in ckeditor55.8 Medium
oracleasmopenSUSESecurity update for oracleasmNo score- luadec project luadecLuadec v0.9.9 was discovered to contain a heap-buffer overflow via the function UnsetPending.7.8 High
drbdopenSUSESecurity update for drbdNo score- jetbrains riderIn JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to...4.1 Medium
- xhyveThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- bmc track-it!, track-it\! +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.3 High
- bmc track-it!, track-it\! +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...5.3 Medium
- Show moreLoading…