CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- code-projects employee management system, employee management system project management system +1 moreSourceCodester Employee Management System eloginwel.php sql injection6.3 Medium
- typescript deep merge project deep mergePrototype Pollution7.5 High
- microsoft azure site recovery, azure site recovery vmware to azure +1 moreAzure Site Recovery Elevation of Privilege Vulnerability4.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Defender Credential Guard Information Disclosure Vulnerability4.7 Medium
- megatech msnswitch firmwareAn authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh...9.8 Critical
- embedthis goaheadwebsda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation...9.8 Critical
- wolfsslwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a...7.5 High
- airspan airspot 5410 firmwareIn Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote...9.1 Critical
- airspan airspot 5410 firmwareIn Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page...7.2 High
- airspan airspot 5410 firmwareIn Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability. As...6.1 Medium
- airspan airspot 5410 firmwareIn Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command...9.8 Critical
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreInsufficient Session Expiration in cockpit-hq/cockpit8.6 High
- wrteam eshop - ecommerce \/ store websiteA Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam...6.1 Medium
- zammadZammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force...9.8 Critical
- zammadIn Zammad 5.2.0, customers who have secondary organizations assigned were able to see all...6.5 Medium
- zammadIn Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature...7.5 High
- zammadZammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform...7.5 High
- digital product labs wpdatingWPDating < 7.4.0 - Multiple Unauthenticated SQLi9.8 Critical
- thinkific uploader, unknown thinkific uploader +1 moreThinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown wp ds blog map, wp ds blog map project ds blog map +1 moreWP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- google maps anywhere project maps anywhere, unknown google maps anywhere +1 moreGoogle Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site Scripting4.8 Medium
- designwall dw promobarDW Promobar <= 1.0.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- better tag cloud project tag cloud, unknown better tag cloud +1 moreBetter Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- auto more tag project more tag, unknown auto more tag +1 moreAuto More Tag <= 4.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- mtouch quiz project quiz, unknown mtouch quiz +1 moremTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site Scripting4.8 Medium
- rough chart project chart, unknown rough chart +1 moreRough Chart <= 1.0.0 - Admin+ Stored Cross-Site Scripting4.8 Medium
- najeebmedia wordpress comments fieldsWP Comments Fields < 4.1 - Admin+ Stored Cross-Site Scripting4.8 Medium
- weformspro weforms, boldgrid weforms – easy drag & drop contact form builder for wordpress +1 moreweForms < 1.6.14 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown inspiro proInspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- automattic crowdsignal dashboard, automattic, inc. crowdsignal dashboard – polls, surveys & more +1 moreCrowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site Scripting6.1 Medium
- yaycommerce yaysmtp, unknown yaysmtp – simple wp smtp mail +1 moreYaySMTP < 2.2.2 - Admin+ Stored Cross-Site Scripting4.8 Medium
- yaycommerce yaysmtp, unknown yaysmtp – simple wp smtp mail +1 moreYaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site Scripting5.4 Medium
- unknown wsm downloader, wsm downloader project downloader +1 moreWSM Downloader <= 1.4.0 - Domain Name Restriction Bypass7.5 High
- unknown wsm downloader, wsm downloader project downloader +1 moreWSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File Download7.5 High
- mediajedi user private files, unknown frontend file manager & sharing – user private files +1 moreUser Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload8.8 High
- easy username updater project username updater, unknown easy username updater +1 moreEasy Username Updater < 1.0.5 - Arbitrary Username Update via CSRF6.5 Medium
- unknown website file changes monitorWebsite File Changes Monitor < 1.8.3 - Admin+ SQLi9.8 Critical
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File Upload4.9 Medium
- 2code discyDiscy < 5.0 - Subscriber+ Broken Access Control to change settings6.5 Medium
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System login.php sql injection5.5 Medium
- code-projects online class and exam scheduling systemSourceCodester Online Class and Exam Scheduling System faculty_sched.php sql injection6.3 Medium
- code-projects online class and exam scheduling systemSourceCodester Online Class and Exam Scheduling System class_sched.php sql injection6.3 Medium
- campcodes simple student information system, simple student information system project student information system +1 moreSourceCodester Simple Student Information System manage_department.php sql injection6.3 Medium
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple E-Learning System downloadFiles.php information disclosure4.3 Medium
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System Exercises Module sql injection6.3 Medium
- sourcecodester company website cms, company website\/cms project website\/cms +1 moreSourceCodester Company Website CMS Cookie site-settings.php access control7.3 High
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple E-Learning System claire_blake cross site scripting3.5 Low
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System GET Parameter sql injection4.7 Medium
- simple e-learning system project e-learning system, sourcecodester simple e-learning system +1 moreSourceCodester Simple E-Learning System claire_blake sql injection6.3 Medium
ghostscriptOSS-FuzzHeap-use-after-free in FT_Stream_ReadULongNo score- Show moreLoading…