CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation < 1.0.8 - Admin+ RCE7.2 High
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation <= 1.0.8 - Admin+ SQL Injection7.2 High
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation <= 1.0.8 - Subscriber+ Unauthorised Calls6.5 Medium
- rezgo online booking, unknown rezgo online booking +1 moreRezgo Online Booking < 4.1.8 - Reflected Cross-Site-Scripting6.1 Medium
- rich-web coming soon, unknown coming soon – under construction +1 moreComing Soon - Under Construction <= 1.1.9 - Admin+ Stored Cross-Site Scripting4.8 Medium
- inkthemes ask meAsk Me < 6.8.4 - CSRF in Edit Profile4.3 Medium
- simple banner project banner, unknown simple banner +1 moreSimple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting4.8 Medium
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation < 1.0.8 - CSRF to Stored XSS5.4 Medium
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation < 1.0.8 - Stored Cross-Site Scripting5.4 Medium
- oferwald transposh wordpress translation, transposh wordpress translation +1 moreTransposh WordPress Translation < 1.0.8 - Reflected Cross-Site Scripting6.1 Medium
- smartypants sp project & document manager (wordpress plugin), smartypantsplugins sp project \& document manager +1 moreWordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability6.1 Medium
- maxfoundry maxbuttons, max foundry maxbuttons (wordpress plugin) +1 moreWordPress MaxButtons plugin <= 9.2 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities4.3 Medium
- miniorange wp oauth server, wp oauth server (wordpress plugin) +1 moreWordPress WP OAuth Server plugin <= 3.0.4 - Authentication Bypass vulnerability9.8 Critical
- miniorange oauth 2.0 client for sso, oauth 2.0 client for sso (wordpress plugin) +1 moreWordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability9.8 Critical
- awesomemotive easy digital downloads, easy digital downloads digital downloads +1 moreWordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability4.1 Medium
- the foreman foreman, redhat satellite +1 moreA flaw was found in Foreman project. A credential leak was identified which will expose Azure...8.8 High
- pega platform, pegasystems pega infinity +1 morePega Platform from 8.3 to 8.7.3 vulnerability may allow authenticated security administrators to...6.8 Medium
- pega platform, pegasystems pega infinity +1 morePega Platform from 7.3 to 8.7.3 is affected by an XSS issue due to a misconfiguration of a...6.1 Medium
- w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 moreWordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability4.2 Medium
- pega platform, pegasystems pega infinity +1 morePega Platform from 8.5.4 to 8.7.3 is affected by an XSS issue with an unauthenticated user and...6.1 Medium
- redhat servicemesh-operator, openshift service mesh +1 moreA flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do...9.8 Critical
- wpshopmart testimonial builder, testimonial (wordpress plugin) +1 moreWordPress Testimonial Builder plugin <= 1.6.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- thimpress wp hotel bookingWordPress WP Hotel Booking plugin <= 1.10.5 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- keycloakIncorrect implementation of lockout feature in Keycloak7.5 High
- webba-booking webba booking, webbaplugins webba booking (wordpress plugin) +1 moreWordPress Webba Booking plugin <= 4.2.21 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- dlink dir-816 firmwareD-link DIR-816 A2_v1.10CNB04.img reboots the router without authentication via /goform/doReboot....7.5 High
- redhat openshift api managementA flaw was found in the Red Hat OpenShift API Management product. User input is not validated...5.4 Medium
- redhat openshift container platformA flaw was found in cluster-ingress-operator. A change to how the router-default service allows only certain IP source ranges could allow an attacker to access resources that would otherwise be restri…9.8 Critical
- tabitTabit - password enumeration4.3 Medium
- tabitTabit - giftcard stealth5.5 Medium
- tabitTabit - Excessive data exposure6.3 Medium
- tabitTabit - Arbitrary account modification6.3 Medium
- dlink dir-816 firmwareD-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When...9.8 Critical
- tabitTabit - HTTP Method manipulation4.9 Medium
- tabitTabit - sensitive information disclosure4.6 Medium
- tabitTabit - arbitrary SMS send on Tabits behalf5.5 Medium
- planex mzk-dp150n firmwareInsecure Permissions in administration interface in Planex MZK-DP150N 1.42 and 1.43 allows...7.2 High
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm9.0 Critical
- bustle bustle/mobiledoc-kit, bdg mobiledoc kit +1 moreCross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit9.8 Critical
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm7.0 High
- octoprint, octoprint octoprint/octoprint +1 moreUnverified Password Change in octoprint/octoprint5.3 Medium
- notrinos notrinos/notrinoserp, notrinoserp +1 moreWeak Password Requirements in notrinos/notrinoserp7.3 High
- asr falconCrowdStrike Falcon Uninstallation authorization2.7 Low
- oretnom23 clinic\'s patient management systemClinic's Patient Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via patients...6.1 Medium
- phpgurukul bus pass management systemMultiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view...9.8 Critical
wiresharkOSS-FuzzStack-buffer-overflow in get_transactionNo scoreapache-commons-jxpathOSS-FuzzSecurity exception in org.apache.commons.jxpath.ri.axes.UnionContext.setPositionNo score- wkhtmltopdfwkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the...9.8 Critical
- vim, vim vim/vim, fedoraproject fedora +2 moreNULL Pointer Dereference in vim/vim6.6 Medium
- debian linux, linux kernel, fedoraproject fedora +6 more +8 moreAn out-of-bounds memory access flaw was found in the Linux kernel Intel’s iSMT SMBus host...5.5 Medium
- Show moreLoading…