CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- frappe erpnextFrappe ERPNext 12.29.0 is vulnerable to XSS where the software does not neutralize or incorrectly...6.1 Medium
- apache flumeImproper Input Validation (JNDI Injection) in JMSMessageConsumer9.8 Critical
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm6.7 Medium
- malighting grandma2 light firmwareMA Lighting grandMA2 Light has a password of root for the root account. NOTE: The vendor's...8.8 High
- notrinos notrinos/notrinoserp, notrinoserp +1 moreExposure of Private Personal Information to an Unauthorized Actor in notrinos/notrinoserp8.8 High
apache-commons-jxpathOSS-FuzzSecurity exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesizeNo scoreosqueryOSS-FuzzHeap-buffer-overflow in sqlite3VdbeExecNo score- rhonabwy project rhonabwyRhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This allows attackers to cause a Denial of Service via a crafted JWE (JSON Web Encryptio…7.5 High
- simple and nice shopping cart script project and nice shopping cart script, sourcecodester simple and nice shopping cart script +1 moreSourceCodester Simple and Nice Shopping Cart Script profile.php unrestricted upload6.3 Medium
jackson-dataformats-textOSS-FuzzSecurity exception in com.fasterxml.jackson.dataformat.toml.Parser.parseInlineTableNo scorexstreamOSS-FuzzSecurity exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpecNo scoreghostscriptOSS-FuzzUNKNOWN WRITE in pdfi_free_arrayNo scoreghostscriptOSS-FuzzGlobal-buffer-overflow in chunk_obj_allocNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in gs_type2_interpretNo scorec-blosc2OSS-FuzzHeap-buffer-overflow in do_jobNo scorexstreamOSS-FuzzSecurity exception in com.ctc.wstx.dtd.FullDTDReader.readContentSpecNo score- project-nexus project project-nexusSQL Injection in Project-nexus9.8 Critical
- adobe commerce, magento commerce +1 moreAdobe Commerce Improper Access Control Security feature bypass5.3 Medium
- artifex ghostscript, debian linux, red hat enterprise linux 6 +3 more +5 moreGhostscript: heap buffer over write vulnerability in ghostscript's lp8000_print_page() in gdevlp8k.c7.1 High
- radare radare2A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation...9.1 Critical
- radare radare2An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c....7.5 High
- radare radare2A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when...7.5 High
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353...5.9 Medium
- bpcbt smartvistaMultiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista...6.1 Medium
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulnerable to CWE-345...4.7 Medium
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-347...5.9 Medium
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-284...6.6 Medium
- tendacn ac9 firmwareTenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.5.5 Medium
- mapgis igserverMapGIS IGServer 10.5.6.11 is vulnerable to Arbitrary file deletion.8.1 High
- xuxueli xxl-jobImproper Privilege Management in com.xuxueli:xxl-job8.8 High
- emerson electric proficy machine edition, emerson electric\'s proficy +1 moreEmerson Electric's Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path...3.9 Low
- tenda ac15 firmwareTenda ac15 firmware V15.03.05.18 httpd server has stack buffer overflow in /goform/formWifiBasicSet.9.8 Critical
- directusUnhandled exception on illegal filename_disk value6.5 Medium
- matrix dendrite, gomatrixserverlib +1 moreIncorrect parsing of access level in gomatrixserverlib and dendrite5.0 Medium
- mapgis igserverMapGIS 10.5 Pro IGServer has hardcoded credentials in the front-end and can lead to escalation of...8.8 High
- hjiang jsonxx, json\+\+ +1 moreStack overflow in Jsonxx5.9 Medium
- hjiang jsonxx, json\+\+ +1 moreDouble free or Use after Free in Value class of Jsonxx8.1 High
- ibm mqIBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity...8.2 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreCross-site Scripting (XSS) - DOM in chatwoot/chatwoot8.8 High
- wellcmsWellcms 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF).8.8 High
- jizhicmsjizhicms v2.3.1 has SQL injection in the background.9.8 Critical
- jizhicmsAn issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin.8.8 High
- dolphinphp project dolphinphpDolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system...5.4 Medium
- eyoucmsEyouCMS V1.5.8-UTF8-SP1 is vulnerable to Cross Site Request Forgery (CSRF) via the background,...8.8 High
- xunruicmsXunRuiCMS V4.5.6 is vulnerable to Cross Site Request Forgery (CSRF).8.8 High
- logitech streamlabs desktopStreamLabs Desktop Application 1.9.0 is vulnerable to Incorrect Access Control via obs64.exe. An...7.3 High
- yimihome ywoaYwoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool...9.8 Critical
- yimihome ywoaYimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.9.8 Critical
- tenda ac18 firmwareTenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.9.8 Critical
- mealieMealie1.0.0beta3 does not terminate download tokens after a user logs out, allowing attackers to...5.9 Medium
- Show moreLoading…