CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- google chrome, fedoraproject fedora +1 moreUse after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora, google chromium intents +2 moreInsufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0...6.5 Medium
- google chrome, fedoraproject fedora +1 moreUse after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora +1 moreHeap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a...8.8 High
- google chrome, fedoraproject fedora +1 moreUse after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to...8.8 High
- intel control centerImproper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2...7.8 High
- intel data center managerImproper access control in the Intel(R) Data Center Manager software before version 4.1 may allow...8.0 High
- intel dual band wireless-ac 8260 firmware, dual band wireless-ac 8265 firmware, killer ac 1550 firmware +4 more +6 moreImproper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...7.8 High
- intel killer ac 1550 firmware, killer wi-fi 6 ax1650 firmware, killer wi-fi 6e ax1675 firmware +6 more +8 moreImproper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...6.5 Medium
- intel killer ac 1550 firmware, killer wi-fi 6 ax1650 firmware, killer wi-fi 6e ax1675 firmware +10 more +12 moreImproper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...7.8 High
- intel killer wi-fi 6e ax1675 firmware, killer wi-fi 6e ax1690 firmware, proset wi-fi 6e ax210 firmware +2 more +4 moreImproper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may...7.8 High
- intel dual band wireless-ac 3165 firmware, dual band wireless-ac 3168 firmware, dual band wireless-ac 8260 firmware +15 more +17 moreOut of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow...6.5 Medium
- keking kkfileviewkkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities...6.1 Medium
- zoom rooms, zoom video communications inc room for conference room for windows +1 moreLocal Privilege Escalation in the Zoom Rooms for Windows Client8.8 High
- zoom meetings, zoom video communications inc client for meetings for macos +1 moreLocal Privilege Escalation in Zoom Client for Meetings for MacOS8.8 High
- maccmsmaccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection...6.5 Medium
- sony xperia 1 firmware, xperia 5 firmware, xperia pro firmware +2 moreIn Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of...9.8 Critical
- html-js doracmsDoraCMS v2.18 and earlier allows attackers to bypass login authentication via a crafted HTTP...9.8 Critical
- cherrytree project cherrytreeA cross-site scripting (XSS) vulnerability in CherryTree v0.99.30 allows attackers to execute...6.1 Medium
- ecowitt gw1100 firmwareAn access control issue in Ecowitt GW1100 Series Weather Stations <=GW1100B_v2.1.5 allows...9.1 Critical
- efm networks co., ltd nas1dual, nas2dual, nas4dual, iptime nas1dual firmware, nas2dual firmware +1 more +3 moreIPTIME NAS family CSRF vulnerability8.0 High
- teruten webcubeTERUTEN WebCube update remote code execution vulnerability8.8 High
- wisa smart wing cmsWISA Smart Wing CMS File Download Vulnerability8.1 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server NULL Pointer Dereference7.5 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Out-of-bounds Read7.5 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Cleartext Transmission of Sensitive Information5.7 Medium
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Integer Underflow7.5 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Uncontrolled Search Path Element7.2 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Relative Path Traversal7.2 High
- softing edgeaggregator, edgeconnector, opc +7 more +9 moreSofting Secure Integration Server NULL Pointer Dereference7.5 High
- softing edgeaggregator, edgeconnector, secure integration server +6 more +8 moreSofting Secure Integration Server Improper Authentication9.8 Critical
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server NULL Pointer Dereference7.5 High
- xxyopen novel-plusNovel-Plus v3.6.1 was discovered to contain a SQL injection vulnerability via the keyword...9.8 Critical
- dedebiz dedecmsv6DedeBIZ v6 was discovered to contain a remote code execution vulnerability in sys_info.php.7.2 High
- dedecmsDedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in...9.8 Critical
- dedecmsDedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in...7.2 High
- laravellaravel deserialization4.1 Medium
openjdk-8-demoTuxCare,openjdk-8-docTuxCare,openjdk-8-jdkTuxCare +6 more +8 moreFix CVE(s):No score- oretnom23 clinic\'s patient management systemClinic's Patient Management System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- ibm security verify governanceIBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an...2.3 Low
- gpacA Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the...7.5 High
- gog galaxyAn exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to...7.8 High
- hashicorp consul templateHashiCorp Consul Template could reveal Vault secret contents in error messages7.5 High
- emerson controlwave micro firmware, controlwave pac firmware +1 moreThe Emerson ControlWave 'Next Generation' RTUs through 2022-05-02 mishandle firmware integrity....7.8 High
- amperecomputing ampere altra firmware, ampere altra max firmware +1 moreAmpere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to...7.8 High
- amperecomputing ampere altra firmware, ampere altra max firmware +1 moreAmpere Altra before SRP 1.08b and Altra Max? before SRP 2.05 allow information disclosure of...7.5 High
- notrinos notrinos/notrinoserp, notrinoserp +1 moreCross-site Scripting (XSS) - Stored in notrinos/notrinoserp4.6 Medium
- Show moreLoading…