CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- google android, samsung mobile devices +1 moreImproper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows...5.1 Medium
- samsung update, samsung mobile update setup +1 moreDLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to...4.5 Medium
- samsung game launcherExposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows...3.3 Low
- google android, samsung mobile devices +1 moreImproper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release...6.2 Medium
- google android, samsung mobile devices +1 moreAn improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows...6.2 Medium
- google android, samsung mobile devices +1 moreImproper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug...5.3 Medium
- samsung mobile charm by samsung, samsung charm firmware +1 moreUnprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to...6.2 Medium
- samsung mobile charm by samsung, samsung charm firmware +1 morePendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version...6.2 Medium
- samsung mobile charm by samsung, samsung charm firmware +1 morePendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3...6.2 Medium
- samsung charm, samsung mobile charm by samsung +1 moreSensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1...6.2 Medium
- samsung charm, samsung mobile charm by samsung +1 moreSensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3...6.2 Medium
- samsung emailIntent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70...6.2 Medium
- samsung galaxy wearableImplicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows...4.0 Medium
- google android, samsung mobile devices +1 moreA vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers...4.0 Medium
- google android, samsung mobile devices +1 moreA missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows...4.4 Medium
- google android, samsung mobile devices +1 moreAn absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local...2.3 Low
- samsung notesPath traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows...6.2 Medium
- google android, samsung mobile devices +1 moreExposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local...4.0 Medium
- google android, samsung mobile devices +1 moreImproper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug...5.9 Medium
- google android, samsung mobile devices +1 moreA vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows...4.8 Medium
- google android, samsung mobile devices +1 moreA vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows...4.8 Medium
- samsung internet browserImplicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34...3.3 Low
- gitlabAn improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before...4.3 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions...2.7 Low
- gitlabA cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15...4.4 Medium
- gitlabAn improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5,...5.9 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0...2.2 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions...4.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions...6.4 Medium
- gitlabA lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0...3.5 Low
- gitlabAn issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5,...6.4 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions...4.9 Medium
- gitlabInsufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1...6.2 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to...5.3 Medium
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15...6.5 Medium
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0...3.5 Low
- gitlabAn issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15...8.5 High
- gitlabAn issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5...5.3 Medium
- storeapps affiliate for woocommerce, affiliate for woocommerce (wordpress plugin) +1 moreWordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email change6.4 Medium
- starfish rich review, starfish reviews rich reviews by starfish (wordpress plugin) +1 moreWordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- mailerlite signup forms, (wordpress plugin) +1 moreWordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability6.3 Medium
- activedemand online agency marketing automation activedemandWordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerability6.5 Medium
- storeapps affiliate for woocommerce, affiliate for woocommerce (wordpress plugin) +1 moreWordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities5.0 Medium
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability. A...9.8 Critical
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication...9.8 Critical
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code...7.2 High
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege...7.8 High
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability. A...7.2 High
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross...6.1 Medium
- vmware identity manager, one access, access connector +1 more +3 moreVMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege...7.8 High
- Show moreLoading…