CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- hytec hwl-2511-ss firmwareHytec Inter HWL-2511-SS v1.05 and below was discovered to contain a command injection...9.8 Critical
- patlite nbm-d88n firmware, nhl-3fb1 firmware, nhl-3fv1n firmware +2 morePatlite NH-FB v1.46 and below was discovered to contain insufficient firmware validation during...8.8 High
- gopkg.in/yaml.v2, yaml project yaml +1 moreExcessive resource consumption in gopkg.in/yaml.v27.5 High
- ibm engineering test management, rational quality manager +1 moreIBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This...5.4 Medium
- oauth2-server project oauth2-serveroauth2-server through 3.1.1 vulnerable to Open Redirect7.2 High
- oracle linuxA flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash...6.2 Medium
- zohocorp manageengine opmanager, manageengine netflow analyzer, manageengine network configuration manager +3 more +5 moreZoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager,...8.8 High
- totolink a7000r firmwareTOTOLINK A7000R V4.1cu.4134 was discovered to contain an access control issue via /cgi-bin...9.8 Critical
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreCross-site Scripting (XSS) - Stored in snipe/snipe-it5.9 Medium
- getkirby kirbyCross-site scripting (XSS) from dynamic options in the multiselect field in Kirby5.9 Medium
- mdx-mermaid project mdx-mermaidImproper Control of Generation of Code ('Code Injection') in mdx-mermaid3.6 Low
- atlasgondal export all urlsExport All URLs < 4.4 - Admin+ Arbitrary System File Removal6.5 Medium
- anti-malware security and brute-force firewall project security and brute-force firewall, scheeeli anti-malware security and brute-force firewall +1 moreAnti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting6.1 Medium
- wpmanageninja fluent support, unknown fluent support – wordpress helpdesk and customer support ticket plugin +1 moreFluent Support < 1.5.8 - Admin+ SQLi7.2 High
- mailchimp for woocommerce, unknown mailchimp for woocommerce +1 moreMailChimp for Woocommerce < 2.7.2 - Admin+ SSRF2.7 Low
- nsp-code wp hide & security enhancer, wp hide \& security enhancer +1 moreWP Hide & Security Enhancer < 1.8 - Reflected Cross-Site Scripting6.1 Medium
- unknown woocommerce pdf invoices & packing slips, wpovernight woocommerce pdf invoices\& packing slips +1 moreWooCommerce PDF Invoices & Packing Slips < 3.0.1 - Reflected Cross-Site Scripting6.1 Medium
- nsqua simply schedule appointments, unknown simply schedule appointments – wordpress booking plugin +1 moreSimply Schedule Appointments < 1.5.7.7 - Admin+ Stored Cross-Site Scripting4.8 Medium
- nsqua simply schedule appointments, unknown simply schedule appointments – wordpress booking plugin +1 moreSimply Schedule Appointments < 1.5.7.7 - Unauthenticated Email Address Disclosure5.3 Medium
- mailchimp for woocommerce, unknown mailchimp for woocommerce +1 moreMailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF4.3 Medium
- xplodedthemes wpide, unknown wpide – file manager & code editor +1 moreWPide < 3.0 - Admin+ Local File Inclusion7.2 High
- cainthebest nitrado.jsPossible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js7.5 High
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a Broken Password Strength Checks vulnerability.5.9 Medium
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a link to non-existent domain vulnerability.6.1 Medium
- hcl software inotes, hcltech hcl inotes, domino +2 moreHCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability8.3 High
- zulip, zulip zulip-mobile +1 moreCrafted link in Zulip message can cause disclosure of credentials8.0 High
- automattic sensei lms, sensei lms – online courses, quizzes, & learning +1 moreSensei LMS < 4.5.2 - Arbitrary Private Message Sending via IDOR4.3 Medium
- automattic sensei lmsSensei LMS < 4.5.0 - Unauthenticated Private Messages Disclosure via Rest API5.3 Medium
- stop spam comments project spam comments, unknown stop spam comments +1 moreStop Spam Comments <= 0.2.1.2 - Access Token Bypass6.5 Medium
- mapsmarker leaflet maps marker, unknown leaflet maps marker (google maps, openstreetmap, bing maps) +1 moreLeaflet Maps Marker < 3.12.5 - Admin+ SQLi7.2 High
- fiberhome hg150-ub firmwareIn FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be...7.5 High
- imagemagickA heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum...5.5 Medium
- convert2rhel project convert2rhel, redhat enterprise linux +1 moreThere is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription...5.5 Medium
- convert2rhel project convert2rhel, redhat enterprise linux +1 moreThere is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the...5.5 Medium
- libmodbus, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 moreA heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c.7.8 High
- linux kernel, redhat enterprise linux +1 moreA flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can...5.5 Medium
- linux kernelAn out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack,...7.5 High
- vmware pinnipedPinniped Supervisor Insufficient Session Expiration vulnerability5.4 Medium
- ingredient stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredient stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredient stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- ingredient stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain an arbitrary file deletion...6.5 Medium
- ingredient stock management system project stock management systemIngredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability...8.8 High
- hitachi hc-ip9100hd firmwareHitachi Kokusai Electric Inc ISnex HC-IP9100HD Version 1.07 and below allows attackers to perform...7.5 High
- hitachi hc-ip9100hd firmwareAn access control issue in Hitachi Kokusai Electric Inc ISnex HC-IP9100HD Version 1.07 and below...7.5 High
- intelliants subrion cmsSubrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel4.8 Medium
- centreonCentreon 22.04.0 is vulnerable to Cross Site Scripting (XSS) from the function Pollers > Broker...5.4 Medium
- draytek vigor1000b firmware, vigor165 firmware, vigor166 firmware +65 more +67 moreAn issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910...10.0 Critical
- tooljet, tooljet tooljet/tooljet +1 moreImproper Access Control in tooljet/tooljet7.1 High
clamavMageiaUpdated clamav packages fix security vulnerabilityNo score- Show moreLoading…