CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- tenda ac9 firmwareTenda AC9 V15.03.2.21_cn is vulnerable to command injection via goform/SetSysTimeCfg.9.8 Critical
- emerson dl8000 firmware, fb3000 rtu firmware, roc800l firmware +2 more +4 moreThe Emerson ROC and FloBoss RTU product lines through 2022-05-02 perform insecure filesystem...9.8 Critical
- rageframeAn issue was discovered in rageframe2 2.6.37. There is a XSS vulnerability in the user agent...6.1 Medium
- power-software-download viewpowerupsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure...7.8 High
- emerson openbsiEmerson OpenBSI through 2022-04-29 mishandles credential storage. It is an engineering...5.5 Medium
- eclipse sphinx, the eclipse foundation eclipse sphinx +1 moreIn Eclipse Sphinx™ before version 0.13.1, Apache Xerces XML Parser was used without disabling...5.3 Medium
- opensuse canna, backports sle-15-sp3, backports sle-15-sp4 +2 morecanna: unsafe handling of /tmp/.iroha_unix directory5.3 Medium
seamonkeyopenSUSESecurity update for seamonkeyNo score- nintendo co., ltd. wi-fi network adaptor wap-001, nintendo wi-fi network adaptor wap 001 firmware +1 moreOS command injection vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows...7.2 High
- justsystems corporation just online update for j-license', justsystems atok medical 2, atok medical 3 +58 more +60 moreAn unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License'...9.8 Critical
- nintendo co., ltd. wi-fi network adaptor wap-001, nintendo wi-fi network adaptor wap 001 firmware +1 moreBuffer overflow vulnerability in Nintendo Wi-Fi Network Adaptor WAP-001 All versions allows an...7.2 High
- hj holdings, inc. 'hulu / フールー' app for android, hjholdings hulu +1 more'Hulu / ????' App for Android from version 3.0.47 to the version prior to 3.1.2 uses a hard-coded...7.5 High
- contec co., ltd. solarview compact, contec sv-cpt-mc310 firmware, sv-cpt-mc310f firmware +2 moreThe image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT...8.8 High
- hj holdings, inc. 'hulu / フールー' app for ios, hjholdings hulu +1 more'Hulu / ????' App for iOS versions prior to 3.0.81 improperly verifies server certificates, which...4.8 Medium
- yokogawa electric corporation centum vp / cs 3000 controller fcs, yokogawa centum cs 3000 cp31 firmware, centum cs 3000 cp33 firmware +5 more +7 moreCENTUM VP / CS 3000 controller FCS (CP31, CP33, CP345, CP401, and CP451) contains an issue in...7.5 High
- mapbox, mapbox maps software development kit +1 moreMapbox is vulnerable to Integer Overflow7.5 High
- airspan airvelocity, airvelocity 1500 firmware +1 moreAirspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's...8.8 High
- airspan airvelocity, airvelocity 1500 firmware +1 moreAirspan AirVelocity 1500 prior to software version 15.18.00.2511 is vulnerable to injection...6.1 Medium
- airspan airvelocity, airvelocity 1500 firmware +1 moreAirspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the…8.8 High
- airspan airvelocity, airvelocity 1500 firmware +1 moreAirspan AirVelocity 1500 software versions prior to 15.18.00.2511 have a root command injection vulnerability in the ActiveBank parameter of the recoverySubmit.cgi script running on the eNodeB's web m…8.8 High
- airspan airvelocity, airvelocity 1500 firmware +1 moreAirspan AirVelocity 1500 web management UI displays SNMP credentials in plaintext on software versions older than 15.18.00.2511, and stores SNMPv3 credentials unhashed on the filesystem, enabling anyo…9.1 Critical
- airspan airvelocity, airvelocity 1500 firmware +1 moreThe AirVelocity 1500 prints SNMP credentials on its physically accessible serial port during boot. This was fixed in AirVelocity 1500 software version 15.18.00.2511 and may affect other AirVelocity an…6.8 Medium
- airspan airvelocity, airvelocity 1500 firmware +1 moreAn authenticated attacker can enumerate and download sensitive files, including the eNodeB's web management UI's TLS private key, the web server binary, and the web server configuration file. These vu…6.5 Medium
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal7.5 High
- apple ios, safari, tvos +2 more +4 moreThe issue was addressed with improved UI handling. This issue is fixed in Safari 16, tvOS 16,...6.1 Medium
- dwbooster calendar event multi viewCalendar Event Multi View < 1.4.07 - Unauthenticated Arbitrary Event Creation to Stored XSS4.3 Medium
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal6.5 Medium
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal7.0 High
- eternal terminal project terminal, jason gauci eternal terminal +1 moreSecurity update for EternalTerminal7.5 High
- moodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it...7.5 High
- moodleMoodle Incorrect Authorization vulnerability8.8 High
- theforeman foremanA flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat...4.4 Medium
- zoom meetings, zoom video communications inc client for meetings for macos +1 moreLocal Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS8.8 High
- eyeofnetwork eyes of network webImproper neutralization of special elements leaves the Eyes of Network Web application vulnerable...8.8 High
- eyeofnetwork eyes of network webCross-site request forgery attacks can be carried out against the Eyes of Network web application...8.8 High
- eyeofnetwork eyes of network webImproper neutralization of input during web page generation leaves the Eyes of Network web...6.1 Medium
- esri portal for arcgisHTML injection vulnerability in Portal for ArcGIS6.1 Medium
- esri portal for arcgisPrevent access to sharing/rest/content/features/analyze to unauthorized users7.5 High
- aviatrix gatewayAn issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because...8.8 High
- esri portal for arcgisThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1 which may allow...7.1 High
- esri portal for arcgisStored cross-site scripting vulnerability in Esri Portal for ArcGIS Configurable Apps6.1 Medium
- esri portal for arcgisThere is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below which...7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Defender Credential Guard Security Feature Bypass Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +12 more +14 moreWindows Defender Credential Guard Elevation of Privilege Vulnerability7.8 High
- cling project cling4thline cling uPnP protocol issue can lead to denial of service7.5 High
- zohocorp manageengine analytics plusDirectory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho...9.8 Critical
- zohocorp manageengine analytics plusOut-of-Band XML External Entity (OOB-XXE) vulnerability in Zoho ManageEngine Analytics Plus...7.5 High
- minetestLua sandbox escape from mod in Minetest7.7 High
- intelbras ata 200 firmwareAuthenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in...5.4 Medium
- oxyno-zeta react-editable-json-tree, react editable json tree project editable json tree +1 moreArbitrary code execution via function parsing in react-editable-json-tree10.0 Critical
- Show moreLoading…