CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
ndpiOSS-FuzzHeap-buffer-overflow in dissect_softether_host_fqdnNo score- actions toolkitDelimiter injection vulnerability in @actions/core exportVariable5.0 Medium
- linux kernel, redhat enterprise linux +1 moreAn integer coercion error was found in the openvswitch kernel module. Given a sufficiently large...7.8 High
- apache openofficeApache OpenOffice Weak Master Keys8.8 High
- apache openofficeApache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password8.8 High
quickjsOSS-FuzzHeap-buffer-overflow in find_jump_targetNo scorenet-snmpOSS-FuzzHeap-buffer-overflow in netsnmp_memdupNo score- nodejs undiciCRLF Injection in Nodejs ‘undici’ via Content-Type5.3 Medium
- codeigniter, codeigniter shield +1 moreSameSite may allow cross-site request forgery (CSRF) protection to be bypassed5.9 Medium
- bookwyrm-social bookwyrmURL Redirection to Untrusted Site ('Open Redirect') in bookwyrm7.1 High
- phpgurukul zoo management systemSourceCodester Zoo Management System apply_vacancy.php unrestricted upload6.3 Medium
- phpgurukul zoo management systemSourceCodester Zoo Management System animals.php sql injection6.3 Medium
- gas agency management system project agency management system, sourcecodester gas agency management system +1 moreSourceCodester Gas Agency Management System login.php sql injection7.3 High
- automated beer parlour billing system project beer parlour billing system, sourcecodester automated beer parlour billing system +1 moreSourceCodester Automated Beer Parlour Billing System Login sql injection6.3 Medium
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System clickjacking4.3 Medium
- google chromeOut of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005...9.8 Critical
- code-projects student information system, student information system project information system +1 moreSourceCodester Student Information System view_student.php sql injection6.3 Medium
- esri arcreaderarcreader use-after-free7.8 High
- esri arcreaderEsri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- esri arcreaderEsri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability3.3 Low
- yugabyte yugabytedb, yugabyte, inc. yugabyte db +1 moreThe software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory8.3 High
- amazon opensearch, embysupport security +1 moreOpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information7.5 High
- thingsboardA cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote...4.8 Medium
- thingsboardA cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote...4.8 Medium
- fork-cms fork cmsForkCMS stored XSS via `start_date` parameter4.8 Medium
- fork-cms fork cmsForkCMS XSS via `publish_on_date` parameter4.8 Medium
- fork-cms fork cmsForkCMS XSS via `publish_on_time` parameter4.8 Medium
- fork-cms fork cmsForkCMS XSS via `end_date` parameter4.8 Medium
- nextcloud talk, kiteworks security-advisories +1 moreMissing rate limit when trying to join a password protected Nextcloud Talk conversation3.5 Low
- debian linux, intel celeron 5305u firmware, celeron 6305 firmware +490 more +492 moreNon-transparent sharing of return predictor targets between contexts in some Intel(R) Processors...5.5 Medium
- neo4j awesome procedures on cypherNeo4j Graph apoc plugins Partial Path Traversal Vulnerability7.5 High
- google llc play services sdk, google play services software development kit +1 moreMutable pending intent in Google Play services SDK6.1 Medium
- jetbrains ktorJetBrain Ktor before 2.1.0 vulnerable to selection of wrong authentication provider5.3 Medium
- jetbrains ktorJetBrains Ktor before 2.1.0 was vulnerable to a Reflect File Download attack4.7 Medium
- gas agency management system project agency management system, sourcecodester gas agency management system +1 moreSourceCodester Gas Agency Management System oneWord.php unrestricted upload6.3 Medium
net-snmpOSS-FuzzHeap-double-free in ada_fuzz_header.hNo score- giteaGitea allowed assignment of private issues6.5 Medium
- nodejs undici`undici.request` vulnerable to SSRF using absolute URL on `pathname`5.3 Medium
- linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +1 moreLinux Kernel LoadPin bypass via dm-verity table reload6.9 Medium
- camilova activerecord-update-by-case, update by case project by case +1 moreupdate_by_case before 0.1.3 vulnerable to sql injection5.8 Medium
- linuxfoundation loopback-connector-postgresqlloopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter9.3 Critical
- zimbra collaborationIn Zimbra Collaboration Suite (ZCS) 8.8.15, the URL at /h/search?action accepts parameters called...6.1 Medium
- zimbra collaborationAn issue was discovered in the webmail component in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9...5.7 Medium
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 moreZimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP...9.8 Critical
- zimbra collaborationAn issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite ...7.5 High
django-sendfile2PyPIdjango-sendfile2 before 0.7.0 contains reflected file download vulnerabilityNo scoregithub.com/crypto-org-chain/cronosGoCronos vulnerable to DoS through unintended Contract Selfdestruct8.2 HighmofhPyPImofh Vulnerable to Improper Restriction of XML External Entity ReferenceNo score- hpe integrated lights-out 5 firmwareA local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 (iLO...6.7 Medium
- hpe integrated lights-out 5 firmwareA local disclosure of sensitive information and a local unauthorized data modification...7.3 High
- Show moreLoading…