CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- mcafee security scan plusAn improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262...7.8 High
- qualys cloud agent for linuxAn issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full...7.3 High
- qualys cloud agent** DISPUTED ** An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe"...5.5 Medium
openjdk-8-demoTuxCare,openjdk-8-docTuxCare,openjdk-8-jdkTuxCare +6 more +8 moreFix CVE(s):No score- itsourcecode student management system, student management system project management system +1 moreSourceCodester Student Management System index.php sql injection6.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreBrowse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreOperation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreOperation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreHTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker...6.5 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreBrowse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreInformation disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8...5.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreBrowse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a...4.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5...6.1 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreBrowse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a...4.3 Medium
- contract management system project managment systemContract Management System v2.0 contains a weak default password which gives attackers to access...7.5 High
- nginx njsAn issue was discovered in Nginx NJS v0.7.5. The JUMP offset for a break instruction was not set...7.5 High
- jpeg libjpeglibjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG:...5.5 Medium
- axiosys bento4An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial...5.5 Medium
- gnu libredwgLibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via...9.8 Critical
- shopro mall systemShopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value...9.8 Critical
- hestiacp control panelA cross-site scripting (XSS) vulnerability in /admin/list_key.html of HestiaCP before v1.3.5...6.1 Medium
- fusionpbxFusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax_send.php.9.8 Critical
- hestiacpAn issue was discovered in HestiaCP before v1.3.5. Attackers are able to arbitrarily install...7.5 High
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0...9.8 Critical
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows...9.8 Critical
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0...9.8 Critical
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows...9.8 Critical
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0...9.8 Critical
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows...9.8 Critical
- inventorymanagementsystem project inventorymanagementsystemA SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem...9.8 Critical
ghostscriptOSS-FuzzHeap-use-after-free in gx_device_forward_finalizeNo scorelibjxlOSS-FuzzHeap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRowNo scoreghostscriptOSS-FuzzStack-buffer-underflow in gs_type2_interpretNo scorefreecivopenSUSESecurity update for freecivNo score- flir ax8 firmwareAll FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote...9.8 Critical
- flir ax8 firmwareFLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory...7.5 High
- broadcom tcpreplay, fedoraproject fedora +1 moreThe component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow...7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreThe component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer...7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moreThe component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer...7.8 High
- hyperledger fabricRemote denial of service in Hyperledger Fabric Gateway7.0 High
- intel standard manageability, active management technology firmware +1 moreInsufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may...5.5 Medium
- intel standard manageability, active management technology firmware +1 moreInsufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may...9.8 Critical
- google chromeUse after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote...8.8 High
- vim, vim vim/vim +1 moreNULL Pointer Dereference in vim/vim6.6 Medium
- intel standard manageability, active management technology firmware +1 moreImproper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may...6.8 Medium
- google chrome, fedoraproject fedora +1 moreInappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed...6.5 Medium
- google chrome, fedoraproject fedora +1 moreInsufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a...6.5 Medium
- Show moreLoading…