CVEs published in August 2022
2,372 vulnerabilities, 381 critical, 10 exploited.
- delta electronics cncsoftDelta Electronics CNCSoft Out-of-bounds Read3.3 Low
- quarkusQuarkus does not terminate HTTP requests header context9.8 Critical
- cimgA flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with...5.5 Medium
- linux kernel, fedoraproject fedora, redhat enterprise linux +2 moreAn issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver...7.0 High
- fuji electric alpha7 pc loader, fujielectric alpha7 pc loader firmware +1 moreFuji Electric Alpha7 PC Loader Fuji Electric Alpha7 PC Loader7.8 High
- honeywell experion lx firmwareHoneywell Experion LX through 2022-05-06 has Missing Authentication for a Critical Function....9.1 Critical
- fluxcd flux2Flux CLI Workload Injection7.7 High
badgecrates.iobadge is UnmaintainedNo score- axum-core project axum-coreDoS in axum-core due to missing request size limit7.5 High
- joomla joomla\!, joomla! project cms +1 more[20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'5.3 Medium
- apache geodeApache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 116.5 Medium
- apache geodeApache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 118.8 High
- apache geodeApache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8.9.8 Critical
crasOSS-FuzzUse-of-uninitialized-value in _dbus_marshal_write_basicNo score- gnu glibc, netapp h300s firmware, h410c firmware +4 more +6 moreAn issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a...7.5 High
- wolfsslAn issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however,...5.9 Medium
- wolfsslAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL...7.5 High
- dlink dir-816 firmwareIn D-Link DIR-816 A2_v1.10CNB04.img a command injection vulnerability occurs in /goform/Diagnosis...9.8 Critical
- dlink dir-816 firmwareD-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/addRouting.7.5 High
- haxx curl, apple macos, debian linux +14 more +16 moreWhen curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using...3.7 Low
- debian linux, linux kernel, fedoraproject fedora +1 more +3 moreA race condition was found in the Linux kernel's IP framework for transforming packets (XFRM...7.0 High
- libtiff, debian linux +1 moreIt was found in libtiff 4.4.0rc1 that there is an invalid pointer free operation in TIFFClose()...6.5 Medium
- libtiff, debian linux +1 moreA flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at...6.5 Medium
- libtiff, debian linux +1 moreThere is a double free or corruption in rotateImage() at tiffcrop.c:8839 found in libtiff 4.4.0rc16.5 Medium
- linux kernelA flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker...7.8 High
- red hat undertow, netapp active iq unified manager, cloud secure agent +4 more +6 moreA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 High
- red hat undertow, netapp active iq unified manager, cloud secure agent +7 more +9 moreA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 High
- sourcefabric rpi-jukebox-rfidRPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the...9.8 Critical
- picuploader project picuploaderPicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- cobub razorRazor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the...6.1 Medium
- librenmsLibreNMS vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- librenmsLibreNMS vulnerable to Cross-Site Scripting (XSS)6.1 Medium
- hcl software versionvault expressOverload/denial of service affects HCL VersionVault Express7.5 High
- hcl software versionvault expressAn insufficiently protected credential vulnerability affects HCL VersionVault Express6.0 Medium
- library management system project management systemLibrary Management System v1.0 was discovered to contain a cross-site scripting (XSS)...4.8 Medium
- zitadelBroken Authorization in ZITADEL Actions8.7 High
strapi-plugin-ezformsnpmCaptcha Bypass in strapi-plugin-ezformsNo scoregetkirby/cmsPackagistCross-site scripting from content entered in the tags and multiselect fields7.1 High- helmDenial of service in Helm6.5 Medium
- microsoft waylandAn internal reference count is held on the buffer pool, incremented every time a new buffer is...6.6 Medium
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the id...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- library management system project management systemLibrary Management System v1.0 was discovered to contain a SQL injection vulnerability via the...9.8 Critical
- vercel next.jsUnexpected server crash in Next.js version 12.2.35.3 Medium
- nodebbAccount takeover via cryptographically weak PRNG in NodeBB Forum9.0 Critical
- vim, vim vim/vim, fedoraproject fedora +1 more +3 moreUse After Free in vim/vim7.8 High
moment-timezonenpmCommand Injection in moment-timezoneNo score- Show moreLoading…