CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN...9.6 Critical
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN...9.6 Critical
- wwbn avideoMultiple authentication bypass vulnerabilities exist in the objects id handling functionality of...4.8 Medium
- wwbn avideoMultiple authentication bypass vulnerabilities exist in the objects id handling functionality of...4.8 Medium
- wwbn avideoAn information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of...6.5 Medium
- wwbn avideoAn os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN...9.9 Critical
- wwbn avideoAn improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master...7.2 High
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11...9.6 Critical
- wwbn avideoA privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6...8.8 High
- wwbn avideoA directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11...9.9 Critical
- wwbn avideoAn OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN...9.9 Critical
- wwbn avideoA cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master...8.8 High
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo...9.0 Critical
- wwbn avideoAn information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6...6.5 Medium
- wwbn avideoA reflected cross-site scripting (xss) vulnerability exists in the charts tab selection...9.6 Critical
- hdf5 group libhdf5, hdfgroup hdf5 +1 moreA heap-based buffer overflow vulnerability exists in the gif2h5 functionality of HDF5 Group...7.8 High
- hdf5 group libhdf5, hdfgroup hdf5 +1 moreAn out-of-bounds write vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1...7.8 High
- hdf5 group libhdf5, hdfgroup hdf5 +1 moreAn out-of-bounds read vulnerability exists in the gif2h5 functionality of HDF5 Group libhdf5 1.10...7.8 High
- code-projects gym management system, gym management system project management system +1 moreSourceCodester Gym Management System login.php sql injection7.3 High
- eth-accountReDoS in eth-account encode_structured_data function5.9 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0...5.3 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0...4.3 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0...4.7 Medium
- dell powerscale onefs, emc powerscale onefs +1 moreDell PowerScale OneFS, versions 9.2.0 up to and including 9.2.1.12 and 9.3.0.5 contain an...3.3 Low
- baijiacms project baijiacmsBaijicms v4 was discovered to contain an arbitrary file upload vulnerability.9.8 Critical
- auto-hyperlink urls project urls, unknown auto-hyperlink urls +1 moreAuto-hyperlink URLs <= 5.4.1 - Tab Nabbing5.4 Medium
- advancedcustomfields advanced custom fields, todo advanced custom fields pro +1 moreAdvanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload8.8 High
- deliciousbrains better search replaceBetter Search and Replace < 1.4.1 - Admin+ SQLi7.2 High
- presstigers simple job boardSimple Job Board < 2.10.0 - Resume Disclosure via Directory Listing5.3 Medium
- radiustheme team - wordpress team members showcase, unknown team – wordpress team members showcase plugin +1 moreWordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion8.8 High
- yotpo reviews for woocommerce project reviews for woocommerce, unknown yotpo reviews for woocommerce (unofficial) +1 moreYotpo Reviews for WooCommerce <= 2.0.4 - Arbitrary Settings Update via CSRF6.5 Medium
- awesomemotive duplicatorDuplicator < 1.4.7.1 - Unauthenticated System Information Disclosure5.3 Medium
- awesomemotive duplicator, unknown duplicator – wordpress migration plugin +1 moreDuplicator < 1.4.7 - Unauthenticated Backup Download7.5 High
- wpmanageninja ninja job board, unknown ninja job board – ultimate wordpress job board plugin +1 moreNinja Job Board < 1.3.3 - Resume Disclosure via Directory Listing7.5 High
- slickremix feed them social, unknown feed them social – for twitter feed, youtube and more +1 moreFeed Them Social < 3.0.1 - Reflected Cross-Site Scripting6.1 Medium
- puvox wp phpmyadminWP phpMyAdmin < 5.2.0.4 - Admin+ Stored Cross-Site Scripting4.8 Medium
- lana downloads manager, lanacodes lana downloads manager +1 moreLana Downloads Manager < 1.8.0 - Contributor+ Arbitrary File Download6.5 Medium
- funnelkit automations, unknown abandoned cart recovery for woocommerce, follow up emails, newsletter builder & marketing automation by autonami +1 moreAutomations By Autonami < 2.1.2 - Subscriber+ Automation Creation4.3 Medium
- wow-company wp coder, unknown wp coder – add custom html, css and js code +1 moreWP Coder < 2.5.3 - Code Deletion via CSRF6.5 Medium
- slickremix feed them social, unknown feed them social – for twitter feed, youtube and more +1 moreFeed Them Social < 3.0.1 - Reflected Cross-Site Scripting6.1 Medium
- pickplugins product slider for woocommerceProduct Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options Deletion4.3 Medium
- wpwax directorist, unknown directorist – wordpress business directory plugin with classified ads listings +1 moreDirectorist < 7.3.0 - Subscriber+ Arbitrary E-mail Sending4.3 Medium
- okapitech wp sticky button, unknown wp sticky button – click to chat +1 moreWP Sticky Button < 1.4.1 - Unauthenticated Arbitrary Settings Update to Stored XSS5.4 Medium
- codename065 download managerDownload Manager < 3.2.50 - Bypass IP Address Blocking Restriction7.5 High
- quadlayers wp social chat, unknown wp social chat – click to chat app +1 moreSocial Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting4.8 Medium
- student result or employee database project result or employee database, unknown student result or employee database +1 moreStudent Result or Employee Database < 1.7.5 - Stored Cross Site Scripting via CSRF5.4 Medium
- unknown wp edit menu, wp edit menu project edit menu +1 moreWP Edit Menu < 1.5.0 - Unauthenticated Arbitrary Post Deletion4.3 Medium
- unknown wp edit menu, wp edit menu project edit menu +1 moreWP Edit Menu <= 1.5.0 - Arbitrary Post Deletion via CSRF4.3 Medium
- 2code wpqa builderWPQA < 5.7 - Subscriber+ Private Message Disclosure via IDOR4.3 Medium
- linkworth, unknown linkworth plugin +1 moreLinkWorth Plugin < 3.3.4 - Arbitrary Setting Update via CSRF4.3 Medium
- Show moreLoading…