CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function...7.5 High
- tenda m3 firmwareTenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function...7.5 High
- linksys e1200 firmwareLinksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.9.8 Critical
- d-link routers, dlink go-rt-ac750 firmware +1 moreD-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer...9.8 Critical
- dlink go-rt-ac750 firmwareD-Link GO-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 is vulnerable to Command...9.8 Critical
- dlink go-rt-ac750 firmwareD-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to...9.8 Critical
- trendnet tew733gr firmwareTRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.9.8 Critical
- trendnet tew733gr firmwareTrendnet TEW733GR v1.03B01 contains a Static Default Credential vulnerability in /etc/init0.d...9.8 Critical
- dlink dir-845l firmwareD-Link DIR845L v1.00-v1.03 contains a Static Default Credential vulnerability in /etc/init0.d...9.8 Critical
- dlink dir-845l firmwareDIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.9.8 Critical
- dlink dir-845l firmwareD-Link DIR845L A1 contains a authentication vulnerability via an AUTHORIZED_GROUP=1 value, as...9.8 Critical
- froxlor, froxlor froxlor/froxlor +1 moreCross-Site Request Forgery (CSRF) in froxlor/froxlor4.3 Medium
grokOSS-FuzzIncorrect-function-pointer-type in grk::BufferedStream::readNo scorelcmsOSS-FuzzHeap-use-after-free in cmsFreeNamedColorListNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in Ins_NPUSHBNo scorepclOSS-FuzzUNKNOWN READ in pcl::PLYReader::readNo score- vim, vim vim/vim, fedoraproject fedora +2 moreUse After Free in vim/vim7.8 High
- zaver project zaverZaver through 2020-12-15 allows directory traversal via the GET /.. substring.7.5 High
- exotel project exotelexotel-py includes code execution backdoor inserted by a third party9.8 Critical
- fast food ordering system project food ordering system, oretnom23 fast food ordering system +1 moreoretnom23 Fast Food Ordering System cross site scripting3.5 Low
- simple task managing system project task managing system, sourcecodester simple task managing system +1 moreSourceCodester Simple Task Managing System cross site scripting3.5 Low
- simple task managing system project task managing system, sourcecodester simple task managing system +1 moreSourceCodester Simple Task Managing System loginVaLidation.php sql injection6.3 Medium
- fast food ordering system project food ordering system, oretnom23 fast food ordering system +1 moreoretnom23 Fast Food Ordering System index.php sql injection6.3 Medium
exiv2OSS-FuzzHeap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<chNo scoretomcatOSS-FuzzSecurity exception in java.base/java.util.Arrays.copyOfNo scorednsmasqOSS-FuzzHeap-buffer-overflow in resize_packetNo score- mariadb, fedoraproject fedora +1 moreIn MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release...5.5 Medium
- hashenudara edoc-doctor-appointment-systemEdoc-doctor-appointment-system v1.0.1 was discovered to contain a stored cross-site scripting ...5.4 Medium
- hashenudara edoc-doctor-appointment-systemEdoc-doctor-appointment-system v1.0.1 was discovered to contain a reflected cross-site scripting ...6.1 Medium
- hashenudara edoc-doctor-appointment-systemEdoc-doctor-appointment-system v1.0.1 was discovered to contain a Cross-Site Request Forgery ...8.8 High
- hashenudara edoc-doctor-appointment-systemEdoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- hashenudara edoc-doctor-appointment-systemEdoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- hashenudara edoc-doctor-appointment-systemEdoc-doctor-appointment-system v1.0.1 was discovered to contain a SQL injection vulnerability via...9.8 Critical
- hashenudara edoc-doctor-appointment-systemAn access control issue in the component /ip/admin/ of Edoc-doctor-appointment-system v1.0.1...6.5 Medium
- sonicwall sma100, sma 200 firmware, sma 210 firmware +3 more +5 moreA Heap-based Buffer Overflow vulnerability in the SonicWall SMA100 appliance allows a remote...8.8 High
- kensite cms project cmsKensite CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities via the name...8.8 High
- mikrotik routerosMikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the...6.5 Medium
deep-translatorPyPIThe deep-translator project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and download…No scorespamPyPIThe spam project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ran…No scoreexotelPyPIThe exotel project on PyPI was taken over via user account compromise via a phishing attack and a new malicious release made which contained code which some environment variables and downloaded and ra…No score- [unknown] vdsm, redhat virtualization, virtualization for ibm power little endian +1 more +3 moreA race condition was found in vdsm. Functionality to obfuscate sensitive values in log files that...4.7 Medium
- keycloak, redhat single sign-on +1 moreStored Cross-Site Scripting (XSS) in Keycloak via groups dropdown5.4 Medium
- redhat xnio, integration camel k, integration camel quarkus +1 more +3 moreXNIO `notifyReadClosed` method logging message to unexpected end7.5 High
- ibm maximo asset managementIBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm datapower gatewayIBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery...8.8 High
- broadcom symantec privileged access managementA malicious unauthorized PAM user can access the administration configuration data and change the...8.8 High
- artifex mupdfA Floating point exception (division-by-zero) flaw was found in Mupdf for zero width pages in...5.5 Medium
- [unknown] satelliteA flaw was found in satellite. When giving granular permission related to the organization, other...8.1 High
- keycloak, redhat single sign-on +1 moreKeycloak allows anyone to register new security device or key for any user by using WebAuthn password-less login flow7.5 High
- openstack tripleo heat templatesA flaw was found in openstack-tripleo-heat-templates. Plain passwords from RHSM exist in the logs...5.5 Medium
- Show moreLoading…