CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- vmware identity manager, one access, identity manager connector +2 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code...7.2 High
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege...7.8 High
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path...7.5 High
- evmos ethermint, crypto cronos, evmos +1 more +3 moreEthermint DoS through Unintended Contract Selfdestruct8.2 High
- best fee management system project fee management system, sourcecodester best fee management system +1 moreSourceCodester Best Fee Management System admin_class.php login sql injection7.3 High
- rigatur online booking and hotel management systemRigatur Online Booking and Hotel Management System POST Request login.php sql injection6.3 Medium
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System createUser.php sql injection6.3 Medium
- garage management system project management system, sourcecodester garage management system +1 moreSourceCodester Garage Management System removeUser.php sql injection6.3 Medium
fwupdopenSUSESecurity update for fwupdNo score- fedoraproject fedora, feep libtar, openatom openeuler +2 moreThe th_read() function doesn’t free a variable t->th_buf.gnu_longname after allocating memory,...7.5 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreThe th_read() function doesn’t free a variable t->th_buf.gnu_longlink after allocating memory,...7.5 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreAn attacker who submits a crafted tar file with size in header struct being 0 may be able to...8.1 High
- fedoraproject fedora, feep libtar, openatom openeuler +2 moreAn attacker who submits a crafted tar file with size in header struct being 0 may be able to...9.1 Critical
- razormist loan management systemSourceCodester Loan Management System delete_lplan.php sql injection6.3 Medium
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple E-Learning System classroom.php sql injection6.3 Medium
- private cloud management platform project cloud management platform, unspecified private cloud management platform +1 morePrivate Cloud Management Platform POST Request global_config_query improper authentication7.3 High
- hestiacp hestiacp/hestiacp, control panel +1 moreCode Injection in hestiacp/hestiacp8.5 High
- hestiacp hestiacp/hestiacp, control panel +1 moreIncorrect Privilege Assignment in hestiacp/hestiacp9.1 Critical
- dotcmsA Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06. This...6.1 Medium
- acrontum filesystem-templateArbitrary Command Injection9.8 Critical
- ittiam libmpeg2Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in...6.5 Medium
- uniwill sparkio.sysThe Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL...7.8 High
mrubyOSS-FuzzHeap-buffer-overflow in udivNo score- zlib, apple ipados, iphone os +29 more +31 morezlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c...9.8 Critical
- grommunio gromoxWeak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x...7.8 High
- inglorion muhttpd, arris bgw210 firmware, bgw320 firmware +4 more +6 moredo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files...7.5 High
- sigstore policy-controller, policy controller +1 moreAbility to bypass attestation verification in sigstore PolicyController7.1 High
- contiki-ngUnverified DIO prefix info lengths in RPL-Classic in Contiki-NG8.1 High
- contiki-ngOut-of-bounds read in IPv6 neighbor solicitation in Contiki-NG5.9 Medium
- contiki-ngBuffer overflow in contiki-ng8.1 High
tzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo scoretzdataTuxCare,tzdata-javaTuxCare +1 moreUpdate of tzdataNo score- samsung mtowerThe TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a...7.8 High
- raneto project ranetoRaneto Denial of Service via crafted payload injected into `Search` parameter7.5 High
- raneto project ranetoRaneto v0.17.0 employs weak password complexity requirements9.8 Critical
- raneto project ranetoRaneto vulnerable to Cross-site Scripting4.8 Medium
- totolink a3600r firmwareTotolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc...9.8 Critical
- sigstore cosignFalse positive signature verification in cosign7.1 High
- crowcpp crowCrow before v1.0+4 was discovered to contain a buffer overflow via the function qs_parse at...9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP monitor configuration vulnerability CVE-2022-357357.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreiControl REST vulnerability CVE-2022-357288.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP HTTP MRF vulnerability CVE-2022-352727.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreBIG-IP APM access policy vulnerability CVE-2022-352457.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreAuthenticated iControl REST in Appliance mode vulnerability CVE-2022-352438.7 High
- f5 nginx instance managerNGINX Instance Manager vulnerability CVE-2022-352416.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreBIG-IP Message Routing MQTT vulnerability CVE-2022-352407.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreHTTP2 profile vulnerability CVE-2022-352367.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTraffic intelligence feeds vulnerability CVE-2022-348654.8 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreTMM vulnerability CVE-2022-348627.5 High
- f5 big-ip, big-iq centralized management, big-ip access policy manager +10 more +12 moreBIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-348514.3 Medium
- Show moreLoading…