CVEs published August 5, 2022
169 CVEs were published on August 5, 2022: 34 critical, 24 high. Browse them by severity, product and exploitation status.
- Published
- 169
- Critical
- 34
- High
- 24
- Medium
- 70
- Low
- 15
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 57
Most affected products
- TCL LinkHub Mesh Wifi
- 42
- Samsung Mobile Devices
- 19
- GitLab
- 16
- VMware Workspace ONE Access, Identity Manager and vRealize…
- 9
- Artica PFMS Pandora FMS
- 6
- Samsung Mobile Charm by Samsung
- 5
- NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- 3
- ESTsoft Alyac
- 2
- FreshTomato
- 2
- hestiacp/hestiacp
- 2
Critical 34
- CVE-2022-27660A denial of service vulnerability exists in the confctl_set_guest_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-27185A denial of service vulnerability exists in the confctl_set_master_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-27178A denial of service vulnerability exists in the confctl_set_wan_cfg functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-26346A denial of service vulnerability exists in the ucloud_del_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24029A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24028A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24027A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24026A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24025A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24024A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24023A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24022A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24021A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24020A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24019A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24018A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24017A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24016A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24015A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24014A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24013A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24012A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24011A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24010A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24009A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
Show all 34 entriesShow fewer entries
- CVE-2022-24008A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24007A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24006A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-24005A buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-22140An os command injection vulnerability exists in the confsrv ucloud_add_node functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-21178An os command injection vulnerability exists in the confsrv ucloud_add_new_node functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-2626Incorrect Privilege Assignment in hestiacp/hestiacphestiacp/hestiacp
- CVE-2022-21186Arbitrary Command Injection@acrontum/filesystem-template
- CVE-2022-37434zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.
High 24
- CVE-2022-32543An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files.ESTsoft Alyac
- CVE-2022-29886An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files.ESTsoft Alyac
- CVE-2022-29465An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0.Accusoft ImageGear
- CVE-2022-26342A buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-26009A stack-based buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi…TCL LinkHub Mesh Wifi
- CVE-2022-25996A stack-based buffer overflow vulnerability exists in the confsrv addTimeGroup functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23919A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23918A stack-based buffer overflow vulnerability exists in the confsrv set_mf_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23399A stack-based buffer overflow vulnerability exists in the confsrv set_port_fwd_rule functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-23103A stack-based buffer overflow vulnerability exists in the confsrv confctl_set_app_language functionality of TCL LinkHub Mesh Wi-Fi…TCL LinkHub Mesh Wifi
- CVE-2022-22144A hard-coded password vulnerability exists in the libcommonprod.so prod_change_root_passwd functionality of TCL LinkHub Mesh Wi-Fi…TCL LinkHub Mesh Wifi
- CVE-2022-21201A stack-based buffer overflow vulnerability exists in the confers ucloud_add_node_new functionality of TCL LinkHub Mesh Wi-Fi…TCL LinkHub Mesh Wifi
- CVE-2022-31614NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources.NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-31609NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources…NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-37398A stack-based buffer overflow vulnerability was found on ADMASUSTOR ADM
- CVE-2022-1704Inductive Automation IgnitionInductive Automation Ignition
- CVE-2022-22299A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0…Fortinet FortiADC, FortiProxy, FortiMail, FortiOS
- CVE-2022-33719Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow.Samsung Mobile Devices
- CVE-2022-36833Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android…Samsung Mobile Game Optimizing Service
- CVE-2022-2497An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 15.0.5, all versions starting from 15.1…GitLab
- CVE-2022-35936Ethermint DoS through Unintended Contract Selfdestructevmos ethermint · github.com/evmos/ethermint +9
- CVE-2022-2674SourceCodester Best Fee Management System admin_class.php login sql injectionSourceCodester Best Fee Management System
- CVE-2022-2664Private Cloud Management Platform POST Request global_config_query improper authenticationPrivate Cloud Management Platform
- CVE-2022-2636Code Injection in hestiacp/hestiacphestiacp/hestiacp
Medium, low and unrated 111
- CVE-2022-28665A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.FreshTomato
- CVE-2022-28664A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1.FreshTomato
- CVE-2022-27633An information disclosure vulnerability exists in the confctl_get_guest_wlan functionality of TCL LinkHub Mesh Wifi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-27631A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599.DD-WRT
- CVE-2022-27630An information disclosure vulnerability exists in the confctl_get_master_wlan functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14.TCL LinkHub Mesh Wifi
- CVE-2022-26376A memory corruption vulnerability exists in the httpd unescape functionality of Asuswrt prior to 3.0.0.4.386_48706 and Asuswrt-Merlin New…Asuswrt-Merlin New Gen
- CVE-2022-31618NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it can dereference a null pointer, which may…NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming
- CVE-2022-37450Go Ethereum (aka geth) through 1.10.21 allows attackers to increase rewards by mining blocks in certain situations, and using a…github.com/ethereum/go-ethereum
- CVE-2022-2685SourceCodester Interview Management System addQuestion.php cross site scriptingSourceCodester Interview Management System
- CVE-2022-2684SourceCodester Apartment Visitor Management System manage-apartment.php cross site scriptingSourceCodester Apartment Visitor Management System
- CVE-2022-2683SourceCodester Simple Food Ordering System login.php cross site scriptingSourceCodester Simple Food Ordering System
- CVE-2022-2682SourceCodester Alphaware Simple E-Commerce System stockin.php cross site scriptingSourceCodester Alphaware Simple E-Commerce System
- CVE-2022-2681SourceCodester Online Student Admission System Student User Page edit-profile.php cross site scriptingSourceCodester Online Student Admission System
- CVE-2022-2680SourceCodester Church Management System login.php sql injectionSourceCodester Church Management System
- CVE-2022-2679SourceCodester Interview Management System viewReport.php sql injectionSourceCodester Interview Management System
- CVE-2022-2678SourceCodester Alphaware Simple E-Commerce System Background Management Page admin_feature.php unrestricted uploadSourceCodester Alphaware Simple E-Commerce System
- CVE-2022-2677SourceCodester Apartment Visitor Management System index.php sql injectionSourceCodester Apartment Visitor Management System
- CVE-2022-2676SourceCodester Electronic Medical Records System POST Request sql injectionSourceCodester Electronic Medical Records System
- CVE-2022-35163Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the U_NAME parameter at…
- CVE-2022-35162Complete Online Job Search System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the CATEGORY parameter at…
- CVE-2022-2675Unitree Go 1 "Robot Dog" Unauthenticated Remote Power DownUnitree Go
- CVE-2022-27535Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All…Kaspersky VPN Secure Connection for Windows
- CVE-2021-28511This advisory documents the impact of an internally found vulnerability in Arista EOS for security ACL bypass. The impact of this…Arista Networks EOS
- CVE-2022-29071This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where…Arista Networks CloudVision Portal
- CVE-2022-28880Denial-of-Service (DoS) VulnerabilityAll F-Secure and WithSecure Endpoint Protection products fo…
Show all 111 entriesShow fewer entries
- CVE-2022-2668An issue was discovered in Keycloak that allows arbitrary Javascript to be uploaded for the SAML protocol mapper even if the…keycloak · org.keycloak:keycloak-parent
- CVE-2021-46678Vulnerability XSS in service form name fieldArtica PFMS Pandora FMS
- CVE-2021-46680Vulnerability XSS in module form name fieldArtica PFMS Pandora FMS
- CVE-2021-46677Vulnerability XSS in Event filter name fieldArtica PFMS Pandora FMS
- CVE-2021-46676Vulnerability XSS in Transaction Map name fieldArtica PFMS Pandora FMS
- CVE-2021-46679Vulnerability XSS in service elementsArtica PFMS Pandora FMS
- CVE-2021-46681Vulnerability XSS in module mass operation name fieldArtica PFMS Pandora FMS
- CVE-2022-34769Michlol - rashim web interface Insecure direct object references (IDOR)Michlol - rashim web
- CVE-2022-34768Synel - eHarmony Stored XSSSynel eHarmony
- CVE-2021-27798privileged directory transversal.in Brocade Fabric OS versions 7.4.1.x and 7.3.xBrocade Fabric OS
- CVE-2022-2053When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit…Undertow · io.undertow:undertow-core
- CVE-2016-3098Cross-site request forgery (CSRF) vulnerability in administrate 0.1.4 and earlier allows remote attackers to hijack the user's OAuth…administrate
- CVE-2020-1754In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all groups' capability were…Moodle
- CVE-2020-1691In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of stored cross-site…Moodle · moodle/moodle
- CVE-2022-33720Improper authentication vulnerability in AppLock prior to SMR Aug-2022 Release 1 allows physical attacker to access Chrome locked by…Samsung Mobile Devices
- CVE-2022-33730Heap-based buffer overflow vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows arbitrary code execution by physical…Samsung Mobile Devices
- CVE-2022-33724Exposure of Sensitive Information in Samsung Dialer application?prior to SMR Aug-2022 Release 1 allows local attackers to access ICCID via…Samsung Mobile Devices
- CVE-2022-33726Unprotected dynamic receiver in Samsung Galaxy Friends prior to SMR Aug-2022 Release 1 allows attacker to launch activity.Samsung Mobile Devices
- CVE-2022-33722Implicit Intent hijacking vulnerability in Smart View prior to SMR Aug-2022 Release 1 allows attacker to access connected device MAC…Samsung Mobile Devices
- CVE-2022-36839SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information.Samsung Mobile Samsung Checkout
- CVE-2022-33721A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege.Samsung Mobile Devices
- CVE-2022-33732Improper access control vulnerability in Samsung Dex for PC prior to SMR Aug-2022 Release 1 allows local attackers to scan and connect to…Samsung Mobile Devices
- CVE-2022-36832Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to…Samsung Mobile Cameralyzer
- CVE-2022-33731Improper access control vulnerability in DesktopSystemUI prior to SMR Aug-2022 Release 1 allows attackers to enable and disable arbitrary…Samsung Mobile Devices
- CVE-2022-36840DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code.Samsung Mobile Samsung Update Setup
- CVE-2022-36834Exposure of Sensitive Information vulnerability in Game Launcher prior to version 6.0.07 allows local attacker to access app data with…Samsung Mobile Game Launcher
- CVE-2022-33714Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting…Samsung Mobile Devices
- CVE-2022-33718An improper access control vulnerability in Wi-Fi Service prior to SMR AUG-2022 Release 1 allows untrusted applications to manipulate the…Samsung Mobile Devices
- CVE-2022-33715Improper access control and path traversal vulnerability in LauncherProvider prior to SMR Aug-2022 Release 1 allow local attacker to…Samsung Mobile Devices
- CVE-2022-36836Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connection state without permission.Samsung Mobile Charm by Samsung
- CVE-2022-36830PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access…Samsung Mobile Charm by Samsung
- CVE-2022-36829PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local attackers to access files…Samsung Mobile Charm by Samsung
- CVE-2022-33734Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth…Samsung Mobile Charm by Samsung
- CVE-2022-33733Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth…Samsung Mobile Charm by Samsung
- CVE-2022-36837Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive…Samsung Mobile Samsung email
- CVE-2022-36838Implicit Intent hijacking vulnerability in Galaxy Wearable prior to version 2.2.50 allows attacker to get sensitive information.Samsung Mobile Galaxy Wearable
- CVE-2022-33725A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system…Samsung Mobile Devices
- CVE-2022-33717A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory.Samsung Mobile Devices
- CVE-2022-33716An absence of variable initialization in ICCC TA prior to SMR Aug-2022 Release 1 allows local attacker to read uninitialized memory.Samsung Mobile Devices
- CVE-2022-36831Path traversal vulnerability in UriFileUtils of Samsung Notes prior to version 4.3.14.39 allows attacker to access some file as Samsung…Samsung Mobile Samsung notes
- CVE-2022-33728Exposure of sensitive information in Bluetooth prior to SMR Aug-2022 Release 1 allows local attackers to access connected BT macAddress…Samsung Mobile Devices
- CVE-2022-33729Improper restriction of broadcasting Intent in ConfirmConnectActivity of?NFC prior to SMR Aug-2022 Release 1 leaks MAC address of the…Samsung Mobile Devices
- CVE-2022-33727A vulnerable code in onCreate of SecDevicePickerDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an…Samsung Mobile Devices
- CVE-2022-33723A vulnerable code in onCreate of BluetoothScanDialog prior to SMR Aug-2022 Release 1, allows attackers to trick the user to select an…Samsung Mobile Devices
- CVE-2022-36835Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files.Samsung Mobile Samsung Internet Browser
- CVE-2022-2095An improper access control check in GitLab CE/EE affecting all versions starting from 13.7 before 15.0.5, all versions starting from 15.1…GitLab
- CVE-2022-2459An issue has been discovered in GitLab EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all…GitLab
- CVE-2022-2500A cross-site scripting issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, 15.1 prior to 15.1.4, and 15.2…GitLab
- CVE-2022-2501An improper access control issue in GitLab EE affecting all versions from 12.0 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to…GitLab
- CVE-2022-2534An issue has been discovered in GitLab CE/EE affecting all versions starting from 9.3 before 15.0.5, all versions starting from 15.1…GitLab
- CVE-2022-2303An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all…GitLab
- CVE-2022-2326An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all…GitLab
- CVE-2022-2307A lack of cascading deletes in GitLab CE/EE affecting all versions starting from 13.0 before 15.0.5, all versions starting from 15.1…GitLab
- CVE-2022-2498An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to…GitLab
- CVE-2022-2456An issue has been discovered in GitLab CE/EE affecting all versions before 15.0.5, all versions starting from 15.1 before 15.1.4, all…GitLab
- CVE-2022-2417Insufficient validation in GitLab CE/EE affecting all versions from 12.10 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1…GitLab
- CVE-2022-2539An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.6 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2…GitLab
- CVE-2022-2512An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.0 before 15.0.5, all versions starting from 15.1…GitLab
- CVE-2022-2499An issue has been discovered in GitLab EE affecting all versions starting from 13.10 before 15.0.5, all versions starting from 15.1 before…GitLab
- CVE-2022-2531An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 15.0.5, all versions starting from 15.1 before…GitLab
- CVE-2022-36284WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Authenticated IDOR vulnerability leading to PayPal email changeStoreApps Affiliate For WooCommerce
- CVE-2021-36861WordPress Rich Reviews by Starfish plugin <= 1.9.14 - Cross-Site Request Forgery (CSRF) vulnerabilityStarfish Reviews Rich Reviews by Starfish
- CVE-2022-33201WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerabilityMailerLite
- CVE-2022-36296WordPress ActiveDEMAND plugin <= 0.2.27 - Broken Authentication vulnerabilityJumpDEMAND ActiveDEMAND
- CVE-2022-25649WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilitiesStoreApps Affiliate For WooCommerce
- CVE-2022-31657VMware Workspace ONE Access and Identity Manager contain a URL injection vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31656VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local…VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31658VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31661VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two privilege escalation vulnerabilities.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31659VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31663VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a reflected cross-site scripting (XSS) vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31664VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31665VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a remote code execution vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31660VMware Workspace ONE Access, Identity Manager and vRealize Automation contains a privilege escalation vulnerability.VMware Workspace ONE Access, Identity Manager and vRealize…
- CVE-2022-31662VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation contain a path traversal vulnerability.VMware Workspace ONE Access, Access Connector, Identity Man…
- CVE-2022-2673Rigatur Online Booking and Hotel Management System POST Request login.php sql injectionRigatur Online Booking and Hotel Management System
- CVE-2022-2672SourceCodester Garage Management System createUser.php sql injectionSourceCodester Garage Management System
- CVE-2022-2671SourceCodester Garage Management System removeUser.php sql injectionSourceCodester Garage Management System
- CVE-2022-2667SourceCodester Loan Management System delete_lplan.php sql injectionSourceCodester Loan Management System
- CVE-2022-2665SourceCodester Simple E-Learning System classroom.php sql injectionSourceCodester Simple E-Learning System
- CVE-2022-37431A Reflected Cross-site scripting (XSS) issue was discovered in dotCMS Core through 22.06.
- CVE-2022-37416Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.
- CVE-2022-37415The Uniwill SparkIO.sys driver 1.0 is vulnerable to a stack-based buffer overflow via IOCTL 0x40002008.
- CVE-2022-1012A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size.Kernel
- CVE-2022-1158A flaw was found in KVM.kernel
- CVE-2022-1973A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal.kernel