CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- openstack keystone, debian linux, redhat openstack platform +2 moreOpenstack Keystone Incorrect Authorization vulnerability7.4 High
- keycloak, redhat single sign-on +1 moreKeycloak's improper input validation allows using email as username5.3 Medium
- qemu, debian linux +1 moreA deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ...4.4 Medium
- serverless, redhat openshift serverless +1 moreIt was found that the CVE-2021-27918, CVE-2021-31525 and CVE-2021-33196 have been incorrectly...7.5 High
- redhat jboss core services httpdA flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not...4.8 Medium
- red hat wildfly-core, redhat wildfly, descision manager +2 morewildfly-core allows user with access to management interface to access vault expression, retrieve item from vault3.3 Low
- debian linux, linux kernel, redhat enterprise linux +2 moreA flaw was found in the way the dumpable flag setting was handled when certain SUID binaries...7.0 High
- keycloakKeycloak has Files or Directories Accessible to External Parties4.3 Medium
- the foreman foremanA flaw was found in the Foreman project. The Datacenter plugin exposes the password through the...7.8 High
- cskefuInsecure permissions in cskefu v7.0.1 allows unauthenticated attackers to arbitrarily add...7.5 High
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- mm-wiki project mm-wikimm-wiki v0.2.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows...6.5 Medium
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- simple task scheduling system project task scheduling systemSimple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- htmlyhtmly v2.8.1 was discovered to contain an arbitrary file deletion vulnerability via the component...8.1 High
- mm-wiki project mm-wikimm-wiki v0.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- online diagnostic lab management system project diagnostic lab management systemThere is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0.7.5 High
- online diagnostic lab management system project diagnostic lab management systemAn issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection...9.8 Critical
- online diagnostic lab management system project diagnostic lab management systemAn issue was discovered in Online Diagnostic Lab Management System 1.0. There is a stored XSS...5.4 Medium
os_socketaddrcrates.io`os_socketaddr` invalidly assumes the memory layout of std::net::SocketAddrNo scorewasm3OSS-FuzzSegv on unknown address in FreeCodePagesNo scorewasmtimeOSS-FuzzSegv on unknown address in wasmtime_runtime::traphandlers::catch_traps::call_closure::hec711b3339636b04No score- zk framework auuploader, zkoss zk framework +1 moreZK Framework vulnerable to malicious POST7.5 High
- eurosoft-uk uefi bootloader, microsoft windows 10, windows 11 +7 more +9 moreA flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader...6.7 Medium
- horizondatasys uefi bootloader, microsoft windows 10, windows 11 +7 more +9 moreA flaw was found in New Horizon Datasys bootloaders before 2022-06-01. An attacker may use this...6.7 Medium
- kidan cryptopro securedisk for bitlocker, microsoft windows 10, windows 11 +7 more +9 moreA flaw was found in CryptoPro Secure Disk bootloaders before 2022-06-01. An attacker may use this...6.7 Medium
- qemu, fedoraproject fedora +1 moreA use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of...4.4 Medium
- debian linux, linux kernel, redhat enterprise linux +1 more +3 moreA flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a...5.5 Medium
- red hat, inc. rpm, redhat enterprise linux +1 moreIt was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only...6.7 Medium
- imagemagick, fedoraproject fedora +1 moreA vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the...3.3 Low
- deluge-torrent delugeDeluge Web-UI vulnerable to XSS through a crafted torrent file6.1 Medium
- wuzhicmsA directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app...2.7 Low
- siteservercms project siteservercmsSiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax...7.2 High
- ericsson network managerIn Ericsson Network Manager (ENM) releases before 21.2, users belonging to the same AMOS...4.9 Medium
- dlink dsl-3782 firmwareD-Link Wireless AC1200 Dual Band VDSL ADSL Modem Router DSL-3782 Firmware v1.01 allows...7.5 High
- rubrik cdmA buffer overflow vulnerability in the Rubrik Backup Service (RBS) Agent for Linux or Unix-based...7.8 High
- lexmark b2236 firmware, b2338 firmware, b2442 firmware +114 more +116 moreVarious Lexmark products through 2022-04-27 allow External Control of a System or Configuration...8.1 High
- ssctech blue prism enterpriseAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...5.3 Medium
- ssctech blue prism enterpriseAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...8.1 High
- ssctech blue prismAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...8.8 High
- ssctech blue prismAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...5.3 Medium
- ssctech blue prismAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...3.1 Low
- ssctech blue prismAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...5.3 Medium
- ssctech blue prismAn issue was discovered in Blue Prism Enterprise 6.0 through 7.01. In a misconfigured environment...7.1 High
- rsa archerArcher Platform 6.8 before 6.11 P3 (6.11.0.3) contains an improper API access control...6.5 Medium
- rsa archerArcher Platform 6.9 SP2 P2 before 6.11 P3 (6.11.0.3) contain a reflected XSS vulnerability. A...7.0 High
- rsa archerArcher Platform 6.x before 6.11 P3 contain an HTML injection vulnerability. An authenticated...7.6 High
- Show moreLoading…