CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
openscOSS-FuzzHeap-double-free in sc_pkcs15_encode_dfNo scoreghostscriptOSS-FuzzHeap-use-after-free in pdfi_cidtype2_get_glyph_indexNo score- mozilla firefox, firefox esr, thunderbird +2 moreMembers the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present...8.8 High
- mozilla firefox esr, thunderbird +1 moreA data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use...7.5 High
- mozilla firefoxAn attacker could have written a value to the first element in a zero-length JavaScript array....6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions ...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn attacker could have abused XSLT error handling to associate attacker-controlled content with...6.5 Medium
- apple ipados, macos, ios and ipados +3 more +5 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...7.8 High
- apple ipados, macos, safari +7 more +9 moreAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...8.8 High
- apple ipados, macos, tvos +3 more +5 moreMultiple out-of-bounds write issues were addressed with improved bounds checking. This issue is...7.5 High
- debian linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moreA flaw use after free in the Linux kernel NILFS file system was found in the way user triggers...7.8 High
- stormshield network securityFlooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal...7.5 High
- systemd project systemd, netapp active iq unified manager, h300s firmware +3 more +5 moreA use-after-free vulnerability was found in systemd. This issue occurs due to the on_stream_io()...9.8 Critical
- libpng, debian linux, netapp ontap select deploy administration utility +2 moreA heap overflow flaw was found in libpngs' pngimage.c program. This flaw allows an attacker with...5.5 Medium
- linksys mr8300 router, mr8300 firmware +1 moreCommand injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitr…8.2 High
- servicenowServiceNow through San Diego Patch 4b and Patch 6 allows reflected XSS in the logout functionality.6.1 Medium
- servicenowServiceNow through San Diego Patch 3 allows XSS via the name field during creation of a new...6.1 Medium
- icewarp webclient dc2IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection...9.8 Critical
- honor pcmanagerA potential vulnerability was reported in Lenovo PCManager prior to version 5.0.10.4191 that may...7.3 High
- jenkins collabnet, jenkins project collabnet plugins plugin +1 moreRabbitMQ password stored in plain text by Jenkins CollabNet Plugins Plugin6.5 Medium
- jenkins job configuration history, jenkins project job configuration history plugin +1 moreCross-site Scripting in Jenkins Job Configuration History Plugin5.4 Medium
- jenkins git, jenkins project git plugin +1 moreImproper masking of credentials Jenkins in Git Plugin6.5 Medium
- powerdns recursor, fedoraproject fedora +1 morePowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled,...6.5 Medium
- f-secure atlant, cloud protection for salesforce, elements collaboration protection +5 more +7 moreDenial-of-Service (DoS) Vulnerability3.5 Low
- f-secure atlant, cloud protection for salesforce, elements collaboration protection +5 more +7 moreDenial-of-Service (DoS) Vulnerability4.3 Medium
- keycloakKeycloak vulnerable to Improper Certificate Validation5.4 Medium
- redhat amq brokerA flaw was found in the Red Hat AMQ Broker management console in version 7.8 where an existing...4.3 Medium
- linux kernelA flaw was found in the Linux kernel. A memory leak problem was found in mbochs_ioctl in samples...5.5 Medium
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the Linux kernels memory deduplication mechanism. Previous work has shown...5.9 Medium
- redhat ansible runneransible-runner vulnerable to Race Condition6.3 Medium
- redhat ansible runneransible-runner has default temporary files written to world R/W locations6.6 Medium
- opencryptokiA flaw was found in openCryptoki. The openCryptoki Soft token does not check if an EC key is...5.5 Medium
- wordplus better messages, better messages (wordpress plugin) +1 moreWordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability4.3 Medium
- amcharts amcharts: charts and maps (wordpress plugin), amcharts\ +1 moreWordPress amCharts: Charts and Maps plugin <= 1.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- thealpinepress alpine phototile for pinterest, alpine press phototile for pinterest (wordpress plugin) +1 moreWordPress Alpine PhotoTile for Pinterest plugin <= 1.3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- wpchill gallery photoblocks, gallery photoblocks (wordpress plugin) +1 moreWordPress Gallery PhotoBlocks plugin <= 1.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities5.4 Medium
- dmitrylitvinov uploading svg, webp and ico files (wordpress plugin), uploading svg\, webp and ico files project svg\, webp and ico files +1 moreWordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability7.2 High
- yotuwp video gallery, video gallery (wordpress plugin) +1 moreWordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability4.3 Medium
- yookassa yukassa for woocommerce, yoomoney юkassa для woocommerce (wordpress plugin) +1 moreWordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Cross-Site Request Forgery (CSRF) leading to plugin settings update8.8 High
- contest-gallery contest gallery, contest gallery (wordpress plugin) +1 moreWordPress Contest Gallery plugin <= 17.0.4 - Authenticated SQL Injection (SQLi) vulnerability7.6 High
- akash soni as – create pinterest pinboard pages (wordpress plugin), as - create pinterest pinboard pages project - create pinterest pinboard pages +1 moreWordPress AS – Create Pinterest Pinboard Pages plugin <= 1.0 - Authenticated plugin settings change leading to Stored Cross-Site Scripting (XSS) vulnerability5.4 Medium
- w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 moreWordPress Download Manager plugin <= 3.2.48 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities5.4 Medium
- xplodedthemes wpide – file manager & code editor (wordpress plugin), wpide - file manager \& code editor +1 moreWordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerability4.9 Medium
- search exclude project exclude, roman pronskiy search exclude (wordpress plugin) +1 moreWordPress Search Exclude plugin <= 1.2.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability4.8 Medium
- w3eden download manager, w3 eden, inc. download manager (wordpress plugin) +1 moreWordPress Download Manager plugin <= 3.2.48 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities5.4 Medium
- wordplus better messages, better messages (wordpress plugin) +1 moreWordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability7.7 High
- yookassa yukassa for woocommerce, yoomoney юkassa для woocommerce (wordpress plugin) +1 moreWordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability8.8 High
- 59sec the leads management system: 59sec lite (wordpress plugin), the leads management system\ +1 moreWordPress THE Leads Management System: 59sec LITE plugin <= 3.4.1 - Unauthenticated plugin settings change vulnerability6.5 Medium
- 8 degree themes notification bar for wordpress, 8degreethemes notification bar +1 moreWordPress Notification Bar for WordPress plugin <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability6.1 Medium
- Show moreLoading…