CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a heap-buffer overflow via /release-x64/otfccdump+0x6b544e.6.5 Medium
- otfcc project otfccOTFCC v0.10.4 was discovered to contain a global overflow via /release-x64/otfccdump+0x718693.6.5 Medium
- synacor zimbra server, zimbra collaboration +1 moreZimbra zmslapd arbitrary module load7.8 High
- pngdec project pngdecPNGDec commit 8abf6be was discovered to contain a stack overflow via /linux/main.cpp.6.5 Medium
- pngdec project pngdecPNGDec commit 8abf6be was discovered to contain a heap buffer overflow via __interceptor_fwrite...6.5 Medium
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a FPE via TIFFSHORT at /src/jpeg.inl.5.5 Medium
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a global buffer overflow via ucDitherBuffer at ...7.8 High
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a segmentation fault via TIFFSHORT at /src/jpeg...5.5 Medium
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a segmentation fault via fseek at /libio/fseek.c.5.5 Medium
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a FPE via DecodeJPEG at /src/jpeg.inl.5.5 Medium
- bitbanksoftware jpegdecJPEGDEC commit be4843c was discovered to contain a global buffer overflow via JPEGDecodeMCU at ...7.8 High
- sequi portbloque s, portbloque s firmware +1 moreSequi PortBloque S Improper Authentication9.6 Critical
- sequi portbloque s, portbloque s firmware +1 moreSequi PortBloque S Improper Authorization9.9 Critical
- splunk, splunk enterprise +1 moreIngest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation7.4 High
- splunk, splunk enterprise, universal forwarders +1 more +3 moreMalformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input5.5 Medium
- splunk, splunk enterprise, cloud platform +2 moreInformation disclosure via the dashboard drilldown in Splunk Enterprise2.6 Low
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Security feature bypass5.3 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code execution6.1 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce XML Injection Arbitrary code execution9.1 Critical
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Privilege escalation8.8 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution8.5 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Authorization Privilege escalation7.5 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code execution4.8 Medium
- red hat amq, redhat jboss a-mq +1 moreA flaw was found in Red Hat AMQ Broker in a way that a XEE attack can be done via Broker's...5.6 Medium
- moodleMoodle reflected XSS Vulnerability6.1 Medium
- automationbroker apbA flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. This...7.8 High
- moodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the...7.2 High
- moodleIn Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a...5.3 Medium
- blenderWhen rendering with headless builds, show an error instead of crashing. Previously...7.5 High
- blenderEndless Infinite loop in Blender-thumnailing due to logical bugs.7.5 High
- blenderA loaded (and valid) image can be crafted such that an out-of-bounds read or write occurs when...7.5 High
- guest management system project management system, sourcecodester guest management system +1 moreSourceCodester Guest Management System front.php sql injection6.3 Medium
- motopress timetable and event scheduleMotoPress Timetable and Event Schedule Calendar cross site scripting3.5 Low
- motopress timetable and event scheduleMotoPress Timetable and Event Schedule Quick Edit admin-ajax.php cross site scripting3.5 Low
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4,...4.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4,...6.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4,...5.4 Medium
- tibco data science - workbench, statistica, tibco software inc. statistica - estore edition +1 more +3 moreTIBCO Statistica Stored Cross Site Scripting (XSS) Vulnerability8.7 High
- tibco data science - workbench, statistica, tibco software inc. statistica - estore edition +1 more +3 moreTIBCO Statistica Reflected Cross Site Scripting (XSS) Vulnerability7.3 High
- esri portal for arcgisThere is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.5.4 Medium
- esri portal for arcgisThere is an improper access control vulnerability in Portal for ArcGIS versions 10.8.17.5 High
- esri portal for arcgisThere is a stored cross-site scripting (XSS) vulnerability in ArcGIS API for JavaScript.6.1 Medium
- esri portal for arcgisCode injection issue in Portal for ArcGIS (10.7.1 and 10.8.1)6.1 Medium
- esri portal for arcgisPortal for ArcGIS system properties are not properly encrypted (10.8.1 only)6.7 Medium
- oretnom23 clinic\'s patient management systemClinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine...9.8 Critical
compat-openssl098SUSESecurity update for compat-openssl098No score- apache software foundation airflow, apache apache-airflow-providers-docker +1 moreDocker Provider <3.0 RCE vulnerability in example dag8.8 High
- mingsoft mcmsMingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List9.8 Critical
- mingsoft mcmsMingsoft MCMS SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter9.8 Critical
- Show moreLoading…