CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- mealieMealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference (IDOR)...6.5 Medium
- mealieMealie 1.0.0beta3 employs weak password requirements which allows attackers to potentially gain...9.8 Critical
- ethz safe exam browserKiosk breakout (without quit password) in Safe Exam Browser (Windows) <3.4.0, which allows an...9.8 Critical
- chatwoot, chatwoot chatwoot/chatwoot +1 moreInsecure Storage of Sensitive Information in chatwoot/chatwoot7.6 High
- laravelLaravel deserialization5.0 Medium
- jellyfinIncorrect Access Control and Cross Site Scripting in Jellyfin8.8 High
- jellyfinIn Jellyfin before 10.8, stored XSS allows theft of an admin access token.5.4 Medium
- fishbowlinventory fishbowlA Java Deserialization vulnerability in the Fishbowl Server in Fishbowl Inventory before 2022.4.1...9.8 Critical
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service...7.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using...7.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via...7.5 High
- octopus serverIn affected versions of Octopus Deploy it is possible to unmask sensitive variables by using...5.3 Medium
- phpgurukul online marriage registration systemCross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration...5.4 Medium
- prinitix cloud print managementPrintix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure...8.8 High
ghostscriptOSS-FuzzStack-buffer-overflow in gs_glyph_data_from_bytesNo scoreapache-commons-jxpathOSS-FuzzSecurity exception in org.apache.commons.jxpath.ri.parser.XPathParser.MultiplicativeExprNo scorejackson-modules-java8OSS-FuzzSecurity exception in DatatypeFuzzer.fuzzerTestOneInputNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in copy_glyph_dataNo scoreguiceOSS-FuzzSecurity exception in jaz.Zer.<clinit>No scoreapache-commons-jxpathOSS-FuzzSecurity exception in org.apache.commons.jxpath.ri.compiler.CoreOperationMultiply.computeValueNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in s_file_write_flushNo score- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vim7.8 High
- omniauthOmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value9.8 Critical
- dotnetcore agileconfigUse of Hard-coded Credentials in AgileConfig.Client9.8 Critical
- faststone image viewerUnsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack...9.8 Critical
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076...6.2 Medium
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076...7.2 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076...7.8 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreImproper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version...7.8 High
- intel team blue, philips version +1 moreInsufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions...5.5 Medium
- intel datacenter group event, philips version +1 moreInsufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all...7.5 High
- philips version, intel single event api +1 moreUncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow...7.8 High
- philips version, intel single event api +1 moreIncorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may...7.8 High
- philips version, intel single event api +1 moreInsufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all...7.8 High
- intel open active management technology cloud toolkitAuthentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before...9.8 Critical
- intel xeon gold 5315y firmware, xeon gold 5317 firmware, xeon gold 5318h firmware +69 more +71 moreOut-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated...7.8 High
- intel distribution for pythonUncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may...7.8 High
- intel driver \& support assistantImproper access control in the Intel(R) DSA software for before version 22.2.14 may allow an...8.0 High
- intel datacenter group event, philips version +1 moreUncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all...7.8 High
- philips version, intel enpirion digital power configurator gui +1 moreUncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI...7.8 High
- intel server platform services firmwareIncomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0...4.4 Medium
- intel data center managerImproper input validation in the Intel(R) Data Center Manager software before version 4.1 may...5.5 Medium
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- intel data center managerImproper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow...5.5 Medium
- Show moreLoading…