CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- gosecure titan inbox detection \& responseKey reuse in GoSecure Titan Inbox Detection & Response (IDR) through 2022-04-05 leads to remote...9.8 Critical
- nortekcontrol emerge e3 firmwareNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo=...6.1 Medium
- nortekcontrol emerge e3 firmwareNortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to...9.8 Critical
- nortekcontrol emerge e3 firmwareNortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that...8.2 High
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...8.8 High
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...8.8 High
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the ok...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- mumara classicA SQL injection vulnerability in license_update.php in Mumara Classic through 2.93 allows a...9.8 Critical
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...9.8 Critical
- freecivFreeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack...8.8 High
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredients stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreSession Fixation in snipe/snipe-it4.6 Medium
- upxAn floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0...5.5 Medium
- upxA heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via...7.8 High
- upxA heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via...7.8 High
- upxA heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX...7.8 High
- upxAn invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX...5.5 Medium
- upxAn invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in...5.5 Medium
- upxA heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in...7.8 High
- redhat smallrye health, build of quarkus, openshift application runtimes +2 moreSmallRye Health UI Cross-site Scripting vulnerability6.1 Medium
- sound exchange project exchangeA vulnerability was found in SoX, where a heap-buffer-overflow occurs in function startread() in...5.5 Medium
- red hat ansible-tower, redhat ansible automation platform, ansible automation platform early access +2 more +4 moreA flaw was found in ansible-tower where the default installation is vulnerable to job isolation...8.8 High
- sound exchange project exchangeA vulnerability was found in SoX, where a heap-buffer-overflow occurs in function lsx_read_w_buf(...5.5 Medium
- sound exchange project exchangeA floating point exception (divide-by-zero) issue was discovered in SoX in functon read_samples()...5.5 Medium
- sound exchange project exchangeA floating point exception (divide-by-zero) issue was discovered in SoX in functon startread() of...5.5 Medium
- jflyfox jfinal cmsJfinal Cross-site Scripting vulnerability5.4 Medium
- cisco nx-os software, mds 9506 firmware, mds 9513 firmware +142 more +144 moreCisco FXOS and NX-OS Software Cisco Discovery Protocol Denial of Service and Arbitrary Code Execution Vulnerability8.8 High
- cisco nx-os software, nexus 3016 firmware, nexus 3016q firmware +145 more +147 moreCisco NX-OS Software OSPFv3 Denial of Service Vulnerability8.6 High
- cisco firepower extensible operating system (fxos), firepower 4110 firmware, firepower 4112 firmware +10 more +12 moreCisco FXOS Software Command Injection Vulnerability6.7 Medium
- cisco aci multi-site orchestrator, aci multi-site orchestrator software +1 moreCisco ACI Multi-Site Orchestrator Privilege Escalation Vulnerability8.8 High
- postgresqlOdyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is...5.9 Medium
- odyssey project odysseyOdyssey passes to server unencrypted bytes from man-in-the-middle When Odyssey is configured to...8.1 High
- colord project colordThere are two Information Disclosure vulnerabilities in colord, and they lie in colord/src/cd...7.5 High
- gnome anjutaThere is a Information Disclosure vulnerability in anjuta/plugins/document-manager/anjuta...7.5 High
- rizinA vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture....5.5 Medium
- ge workstationstWorkstationST - Reflected XSS in iHistorian Data Display Tags4.7 Medium
- ge workstationstWorkstationST - Response Splitting in AM Gateway Challenge-Response4.7 Medium
- netapp active iq unified managerActive IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9...5.3 Medium
- elastic cloud enterpriseA flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive...6.5 Medium
- seo scout scout, seoscout seo scout +1 moreWordPress SEO Scout plugin <= 0.9.83 - Cross-Site Request Forgery (CSRF) vulnerability5.4 Medium
- Show moreLoading…