CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- dmitrylitvinov uploading svg, webp and ico files (wordpress plugin), uploading svg\, webp and ico files project svg\, webp and ico files +1 moreWordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- notrinos notrinos/notrinoserp, notrinoserp +1 moreImproper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp6.4 Medium
- bluecms project bluecmsBlueCMS 1.6 has SQL injection in line 132 of admin/article.php9.8 Critical
- bluecms project bluecmsBlueCMS 1.6 has SQL injection in line 55 of admin/model.php9.8 Critical
- bluecms project bluecmsBluecms 1.6 has SQL injection in line 132 of admin/area.php9.8 Critical
dpdkopenSUSE,dpdk-thunderxopenSUSE +1 moreSecurity update for dpdkNo score- jflyfox jfinal cmsSQL injection in jflyfox jfinal9.8 Critical
- jflyfox jfinal cmsSQL injection in jflyfox jfinal9.8 Critical
- taogogo taocmsAn arbitrary file deletion vulnerability was discovered in taocms 3.0.2, that allows attacker to...9.1 Critical
- trendnet tv-ip572pi firmwareAn access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access...7.2 High
- dlink dir-615 firmware, dir-615 j1 firmware, dir-615 t1 firmware +1 more +3 moreThe WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.06 can be...9.8 Critical
- consoletvs noxenConsoleTVs Noxen users.php cross site scripting3.5 Low
- codesys visualizationCODESYS Visualization vulnerable to user enumeration5.3 Medium
- pimcore, pimcore pimcore/pimcore +1 moreCross-site Scripting (XSS) - Stored in pimcore/pimcore6.7 Medium
- pukiwikiStored cross-site scripting vulnerability in PukiWiki versions 1.3.1 to 1.5.3 allows a remote...5.4 Medium
- pukiwikiPath traversal vulnerability in PukiWiki versions 1.4.5 to 1.5.3 allows a remote authenticated...7.2 High
- pukiwikiReflected cross-site scripting vulnerability in PukiWiki versions 1.5.1 to 1.5.3 allows a remote...6.1 Medium
- asneg opc ua stackDenial of Service (DoS)7.5 High
- opcua project opcuaDenial of Service (DoS)7.5 High
- open62541, fedoraproject fedora +1 moreDenial of Service (DoS)7.5 High
- freeopcuaDenial of Service (DoS)7.5 High
- node-opcua project node-opcuaDenial of Service (DoS)7.5 High
- node-opcua project node-opcuaDenial of Service (DoS)7.5 High
- asyncua project asyncua, opcua project opcua +1 moreDenial of Service (DoS)7.5 High
- opc ua stack project ua stackDenial of Service (DoS)7.5 High
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreCross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm8.8 High
- unimo udr-ja1016 firmware, udr-ja1004 firmware, udr-ja1008 firmware +1 more +3 moreMissing authentication for critical function vulnerability in UNIMO Technology digital video...9.8 Critical
- fiserv prologueFiserv Prologue through 2020-12-16 does not properly protect the database password. If an...6.5 Medium
- zengenti contensisThe file upload wizard in Zengenti Contensis Classic before 15.2.1.79 does not correctly check...9.8 Critical
- gravitee api managementPath Traversal in Gravitee API Management6.1 Medium
- tp-link archer a7 firmwareTP-Link Archer A7 Archer A7(US)_V5_210519 is affected by a command injection vulnerability in ...9.8 Critical
- opcfoundation ua .net standard stackExposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server7.5 High
- apache artemis, apache software foundation activemq artemis, netapp active iq unified manager +1 more +3 moreHTML Injection in ActiveMQ Artemis Web Console6.1 Medium
- vmware tools, debian linux, fedoraproject fedora +1 more +3 moreVMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A...7.8 High
- vim, vim vim/vim, debian linux +1 more +3 moreUse After Free in vim/vim7.8 High
- linux kernel, fedoraproject fedora, netapp h300s firmware +5 more +7 moreA flaw was found in the Linux kernel's implementation of Pressure Stall Information. While the...7.8 High
- python, fedoraproject fedora, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 morePython 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no...7.4 High
- libpng pngcheck, debian linux +1 moreA global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied)...7.8 High
- dlink dsl-3782 firmwareD-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows...6.5 Medium
- ibm hardware management console 7063-cr2 firmware, power 9 ac922, power system ac922 \(8335-gtg\) firmware +2 more +4 moreIBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity...4.5 Medium
- crowcpp crowHTTP applications (servers) based on Crow through 1.0+4 may allow a Use-After-Free and code...9.8 Critical
- crowcpp crowHTTP applications (servers) based on Crow through 1.0+4 may reveal potentially sensitive data...7.5 High
- xpdfreader xpdf, freedesktop poppler +1 moreXpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream:...7.8 High
- wwbn avideoA sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev...8.3 High
- wwbn avideoA sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev...8.3 High
- wwbn avideoA sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev...8.3 High
- wwbn avideoA sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev...8.3 High
- wwbn avideoAn information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6...7.5 High
- wwbn avideoAn information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6...7.5 High
- wwbn avideoA cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN...9.6 Critical
- Show moreLoading…