CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- dlink go-rt-ac750 firmwareD-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to...7.5 High
- dlink go-rt-ac750 firmwareD-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Buffer...9.8 Critical
- dlink go-rt-ac750 firmwareD-Link GO-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to Static...7.5 High
- dlink go-rt-ac750 firmwareD-Link Go-RT-AC750 GORTAC750_revA_v101b03 & GO-RT-AC750_revB_FWv200b02 is vulnerable to command...9.8 Critical
- nordicsemi nrf5 sdk for meshIn Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a...8.2 High
- nordicsemi nrf5 sdk for meshIn Nordic nRF5 SDK for Mesh 5.0, a heap overflow vulnerability can be triggered by sending a...8.2 High
- open-emr openemr, openemr openemr/openemr +1 moreAuthorization Bypass Through User-Controlled Key in openemr/openemr8.8 High
- dproxy-nexgen project dproxy-nexgendproxy-nexgen (aka dproxy nexgen) forwards and caches DNS queries with the CD (aka checking...5.3 Medium
- dproxy-nexgen project dproxy-nexgenMisinterpretation of special domain name characters in dproxy-nexgen (aka dproxy nexgen) leads to...7.5 High
- dproxy-nexgen project dproxy-nexgendproxy-nexgen (aka dproxy nexgen) uses a static UDP source port (selected randomly only at boot...5.3 Medium
- dproxy-nexgen project dproxy-nexgendproxy-nexgen (aka dproxy nexgen) re-uses the DNS transaction id (TXID) value from client queries...7.5 High
iana-time-zonecrates.ioiana-time-zone vulnerable to use after free in MacOS / iOS implementationNo score- totd project totdtotd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows...9.8 Critical
- domain name relay daemon project name relay daemonDNRD (aka Domain Name Relay Daemon) 2.20.3 forwards and caches DNS queries with the CD (aka...7.5 High
- domain name relay daemon project name relay daemonMisinterpretation of special domain name characters in DNRD (aka Domain Name Relay Daemon) 2.20.3...5.3 Medium
- taogogo taocmsAn issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code...9.8 Critical
- namelessmc nameless, namelessmc/nameless +1 moreSession Fixation in namelessmc/nameless7.0 High
- namelessmc nameless, namelessmc/nameless +1 moreMissing Critical Step in Authentication in namelessmc/nameless9.8 Critical
- octoprint, octoprint octoprint/octoprint +1 moreAuthentication Bypass by Primary Weakness in octoprint/octoprint3.7 Low
- agentejo cockpit, cockpit-hq cockpit-hq/cockpit +1 moreImproper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit9.8 Critical
- searchwp live ajax search, unknown searchwp live ajax search +1 moreSearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure5.3 Medium
- supsystic digital publications by supsysticDigital Publications by Supsystic < 1.7.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- e unlocked - student result project unlocked - student result, unknown e unlocked – student result +1 moreE Unlocked - Student Result <= 1.0.4 - Arbitrary File Upload via CSRF8.8 High
- easy student results project student results, unknown easy student results +1 moreEasy Student Results <= 2.2.8 - Sensitive Information Disclosure via REST API7.5 High
- easy student results project student results, unknown easy student results +1 moreEasy Student Results <= 2.2.8 - Reflected Cross-Site Scripting6.1 Medium
- unknown wp-dbmanagerWP-DBManager < 2.80.8 - Admin+ Remote Command Execution7.2 High
- innate-images-llc vr calendar, vr calendar project calendar +1 moreVR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call9.8 Critical
- greyd greyd.suite, unknown greyd suite +1 moreGREYD.SUITE < 1.2.7 - Unauthenticated File Upload to RCE9.8 Critical
- arjunthakur duplicate page and post, duplicate page and post project page and post +1 moreDuplicate Page and Post Plugin < 2.8 - Admin+ Stored Cross-Site Scripting4.8 Medium
- unknown contact form db – elementor, webacetechs contact form db - elementor +1 moreElementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting6.1 Medium
- simple and nice shopping cart script project and nice shopping cart script, sourcecodester simple and nice shopping cart script +1 moreSourceCodester Simple and Nice Shopping Cart Script login.php cross site scripting3.5 Low
- xpdfreader xpdfThere is a use-after-free issue in JBIG2Stream::close() located in JBIG2Stream.cc in Xpdf 4.04....7.8 High
- the isle evrima project isle evrimaA buffer overflow in the FTcpListener thread in The Isle Evrima (the dedicated server on Windows...9.8 Critical
pillowPyPISegv on unknown address in jpeg_read_scanlinesNo scorelibredwgOSS-FuzzHeap-buffer-overflow in dynapi_set_helperNo score- tats w3m, fedoraproject fedora +1 moreThere is an out-of-bounds write in checkType located in etc.c in w3m 0.5.3. It can be triggered...7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vim7.8 High
- vim, vim vim/vim, fedoraproject fedora +2 moreOut-of-bounds Read in vim/vim7.8 High
- debian schroot, linux +1 morestricter rules on chroot names4.3 Medium
- wkhtmltopdf, debian linux +1 moreDirectory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read...7.5 High
- guest management system project management system, sourcecodester guest management system +1 moreSourceCodester Guest Management System cleartext storage4.3 Medium
- guest management system project management system, sourcecodester guest management system +1 moreSourceCodester Guest Management System index.php sql injection7.3 High
- guest management system project management system, sourcecodester guest management system +1 moreSourceCodester Guest Management System myform.php cross site scripting3.5 Low
- jlangch venicePartial Path Traversal in com.github.jlangch:venice6.1 Medium
- arvadosAuthenticated remote code execution due to insecure deserialization (GHSL-2022-063)7.9 High
- openzeppelin contracts, contracts upgradeable, openzeppelin-contracts +2 moreECDSA signature malleability in OpenZeppelin Contracts7.9 High
ndpiOSS-FuzzHeap-buffer-overflow in ndpi_search_florensiaNo scorelcmsOSS-FuzzHeap-buffer-overflow in _cmsMAT3perNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in pdfi_read_cff_dictNo score- Show moreLoading…