CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- dell container storage modulesDell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick...8.8 High
- dell container storage modulesDell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick...8.8 High
- dell emc networker, networker management console +1 moreDell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper...6.1 Medium
- dell data protection advisor, emc data protection advisor +1 moreDell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site...5.4 Medium
- dell smartfabric storage software, smart fabric storage software +1 moreSmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote...8.6 High
github.com/cilium/ciliumGoNetwork Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels4.3 Medium- vim gvimAn issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary...7.8 High
- msys2Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows...7.8 High
- wampserverIncorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows...8.8 High
- strawberryperlIncorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and...8.8 High
- rubyinstaller rubyinstaller2Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2...8.8 High
- rubyinstaller rubyinstaller2Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and...8.8 High
- xpdfreader xpdfXPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm...5.5 Medium
- ibm security identity managerIBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing...6.8 Medium
- zlmediakitAn attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely....7.5 High
- tendacn ac6 firmwareTenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows...9.8 Critical
- tendacn ac6 firmwareTenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi...7.5 High
- wavlink wl-wn575a3 firmwareWAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection...9.8 Critical
- trellix dlp endpoint for windows, mcafee data loss prevention endpoint +1 moreXXE vulnerability in DLP Endpoint for Windows6.5 Medium
- x-data-spreadsheet project x-data-spreadsheetCross-site Scripting (XSS)5.4 Medium
- snakeyaml project snakeyaml, debian linux +1 moreDenial of Service (DoS)7.5 High
- apostrophecms sanitize-htmlRegular Expression Denial of Service (ReDoS)5.3 Medium
- hgiga oaklouds, oaklouds portal +1 moreHGiga OAKlouds - SQL Injection8.8 High
- le-yan co., ltd. personnel and salary management system, leyan salary management system +1 moreLe-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password9.8 Critical
- realtek linux/android bluetooth mesh sdk, bluetooth mesh software development kit +1 moreRealtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow6.5 Medium
- realtek linux/android bluetooth mesh sdk, bluetooth mesh software development kit +1 moreRealtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow6.5 Medium
- realtek linux/android bluetooth mesh sdk, bluetooth mesh software development kit +1 moreRealtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow6.5 Medium
- realtek linux/android bluetooth mesh sdk, bluetooth mesh software development kit +1 moreRealtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow6.5 Medium
- glyphandcog xpdfreaderIn Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to...7.8 High
- glyphandcog xpdfreaderXpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.7.8 High
- freedesktop poppler, debian linux, fedoraproject fedora +2 morePoppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder ...7.8 High
ghostscriptOSS-FuzzGlobal-buffer-overflow in get_unpack_procNo scorelcmsOSS-FuzzHeap-buffer-overflow in _cmsMAT3perNo scoreghostscriptOSS-FuzzSegv on unknown address in gs_fapi_ft_get_scaled_fontNo score- debian linux, gnu inetutils, mit kerberos 5 +1 more +3 moretelnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a...7.5 High
- nvidia data plane development kit, flare +1 moreNVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in...6.5 Medium
- [unknown] dpdk, debian linux, dpdk data plane development kit +6 more +8 moreA permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker...8.6 High
- asterisk certified asterisk, digium asterisk, debian linux +2 moreres_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2...6.5 Medium
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- seiko-sol skybridge mb-a200 firmwareSeiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain multiple hard-coded...9.8 Critical
- seiko-sol skybridge mb-a200 firmwareSeiko SkyBridge MB-A200 v01.00.04 and below was discovered to contain a command injection...9.8 Critical
- seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +1 moreSeiko SkyBridge MB-A100/A110 v4.2.0 and below implements a hard-coded passcode for the root...9.8 Critical
- seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +1 moreSeiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain an arbitrary file upload...9.8 Critical
- seiko-sol skybridge mb-a100 firmware, skybridge mb-a110 firmware +1 moreSeiko SkyBridge MB-A100/A110 v4.2.0 and below was discovered to contain a command injection...9.8 Critical
- hytec hwl-2511-ss firmwareHytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which...9.8 Critical
- hytec hwl-2511-ss firmwareA command injection vulnerability in the CLI (Command Line Interface) implementation of Hytec...9.8 Critical
- Show moreLoading…