CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- libdwarf project libdwarflibdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application...6.5 Medium
- libdwarf project libdwarflibdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer...6.5 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber6.6 Medium
- online admission system project admission system, projectworlds online admission system +1 moreSourceCodester Online Admission System index.php cross site scripting3.5 Low
- razormist loan management systemSourceCodester Loan Management System index.php sql injection7.3 High
- company website cms project website cms, sourcecodester company website cms +1 moreSourceCodester Company Website CMS settings improper authentication6.3 Medium
- company website cms project website cms, sourcecodester company website cms +1 moreSourceCodester Company Website CMS add-portfolio.php unrestricted upload6.3 Medium
- company website cms project website cms, sourcecodester company website cms +1 moreSourceCodester Company Website CMS Add Service add-service.php unrestricted upload6.3 Medium
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System unrestricted upload4.7 Medium
- simple online book store system project online book store system, sourcecodester simple online book store system +1 moreSourceCodester Simple Online Book Store System edit.php cross site scripting3.5 Low
- sourcecodester simple online book store, simple online book store system project online book store system +1 moreSourceCodester Simple Online Book Store book.php sql injection6.3 Medium
- simple online book store system project online book store system, sourcecodester simple online book store system +1 moreSourceCodester Simple Online Book Store System Admin_ add.php unrestricted upload6.3 Medium
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System Add New Trainer add_trainers.php sql injection6.3 Medium
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System Background Management add_exercises.php unrestricted upload6.3 Medium
- company website cms project website cms, sourcecodester company website cms +1 moreSourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload6.3 Medium
- company website cms project website cms, sourcecodester company website cms +1 moreSourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload6.3 Medium
- gumstix overo sbcThe Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other...7.5 High
- samsung mtowerTEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive...7.5 High
libresslOSS-FuzzHeap-buffer-overflow in i2c_ASN1_INTEGERNo score- varnish cache project cache, fedoraproject fedora +1 moreIn Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to...7.5 High
- postgresql, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in postgresql. On this security issue an attack requires permission to...8.0 High
- google androidIn Core Utilities, there is a possible way to craft a malformed Uri object due to improper input...3.3 Low
- jupyter nbconvert, debian linux +1 morenbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths7.5 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive...5.3 Medium
- ibm robotic process automation, robotic process automation for cloud pak +1 moreIBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have...4.6 Medium
- ibm robotic process automation, robotic process automation as a service, robotic process automation for cloud pak +2 moreIBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain...4.4 Medium
- ibm spectrum scale data access services, spectrum scale das +1 moreIBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert...6.3 Medium
- hcl software workload schedulerIBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which...6.2 Medium
- oretnom23 clinic\'s patient management systemClinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.9.8 Critical
- dell wyse management suiteWMS 3.7 contains a Path Traversal Vulnerability in Device API. An attacker could potentially...6.5 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in...6.3 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages...4.3 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting...6.1 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability...6.4 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. A...5.4 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. A...7.1 High
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in...6.5 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with...4.3 Medium
- dell wyse management suiteDell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A...8.5 High
- oretnom23 clinic\'s patient management systemClinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=.9.8 Critical
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability7.4 High
- cisco adaptive security appliance (asa) software, adaptive security appliance software, firepower threat defense software +1 more +3 moreA vulnerability in the Clientless SSL VPN (WebVPN) component of Cisco Adaptive Security Appliance...4.3 Medium
- keysight sensor management serverThe com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to...9.8 Critical
- keysight sensor management serverA path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager...9.8 Critical
- autodesk 3ds maxA Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to...7.8 High
- f-secure atlant, cloud protection for salesforce, elements collaboration protection +6 more +8 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering8.6 High
- jetbrains teamcityIn JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in...3.2 Low
- kareadita kareadita/kavita, kavitareader kavita +1 moreServer-Side Request Forgery (SSRF) in kareadita/kavita7.1 High
drupal/jquery_ui_checkboxradioPackagistjQuery UI is a third-party library used by Drupal. The jQuery UI Checkboxradio module provides the jQuery UI Checkboxradio library (which was previously in Drupal 8 core, but has since been removed fr…No score- Show moreLoading…