CVEs published August 4, 2022
58 CVEs were published on August 4, 2022: 3 critical, 22 high.
- Published
- 58
- Critical
- 3
- High
- 22
- Medium
- 14
- Low
- 5
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 42
Most affected products
- F5 BIG-IP
- 12
- Apache Software Foundation Apache JSPWiki · org.apache.jspw…
- 5
- ITPison OMICARD EDM
- 4
- nextcloud security-advisories
- 4
- contiki-ng
- 3
- F5 BIG-IP · F5 BIG-IQ Centralized Management
- 3
- F5 BIG-IP APM
- 3
- raneto
- 3
- SourceCodester Online Admission System
- 3
- SourceCodester Multi Language Hotel Management Software
- 2
Critical 3
High 22
- CVE-2022-35930Ability to bypass attestation verification in sigstore PolicyControllersigstore policy-controller · github.com/sigstore/policy-con…
- CVE-2022-35927Unverified DIO prefix info lengths in RPL-Classic in Contiki-NGcontiki-ng
- CVE-2021-32771Buffer overflow in contiki-ngcontiki-ng
- CVE-2022-35929False positive signature verification in cosignsigstore cosign · github.com/sigstore/cosign
- CVE-2022-35735BIG-IP monitor configuration vulnerability CVE-2022-35735F5 BIG-IP
- CVE-2022-35728iControl REST vulnerability CVE-2022-35728F5 BIG-IP · F5 BIG-IQ Centralized Management
- CVE-2022-35272BIG-IP HTTP MRF vulnerability CVE-2022-35272F5 BIG-IP
- CVE-2022-35245BIG-IP APM access policy vulnerability CVE-2022-35245F5 BIG-IP APM
- CVE-2022-35243Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243F5 BIG-IP
- CVE-2022-35240BIG-IP Message Routing MQTT vulnerability CVE-2022-35240F5 BIG-IP
- CVE-2022-35236HTTP2 profile vulnerability CVE-2022-35236F5 BIG-IP
- CVE-2022-34862TMM vulnerability CVE-2022-34862F5 BIG-IP
- CVE-2022-34655TMM vulnerability CVE-2022-34655F5 BIG-IP
- CVE-2022-34651BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651F5 BIG-IP
- CVE-2022-33203BIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203F5 BIG-IP APM
- CVE-2022-32455TMM vulnerability CVE-2022-32455F5 BIG-IP
- CVE-2022-31132Unauthenticated SSRF in 3rd party module "cerdic/csstidy"nextcloud security-advisories
- CVE-2022-2652Use of Externally-Controlled Format String in umlaeute/v4l2loopbackumlaeute/v4l2loopback
- CVE-2022-2653Path Traversal in plankanban/plankaplankanban/planka
- CVE-2022-35216ITPison OMICARD EDM - Use of Hard-coded CredentialsITPison OMICARD EDM
- CVE-2022-32963ITPison OMICARD EDM - Path Traversal-1ITPison OMICARD EDM
- CVE-2022-2647jeecg-boot unrestricted uploadjeecg-boot
Medium, low and unrated 33
- CVE-2022-37030Weak permissions on the configuration file in the PAM module in Grommunio Gromox 0.5 through 1.x before 1.28 allow a local unprivileged user
- CVE-2022-31793do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single characte
- CVE-2022-35926Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NGcontiki-ng
- CVE-2022-35858The TEE_PopulateTransientObject and __utee_from_attr functions in Samsung mTower 0.3.0 allow a trusted application to trigger a memory overw
- CVE-2022-35142An issue in Renato v0.17.0 allows attackers to cause a Denial of Service (DoS) via a crafted payload injected into the Search parameter.raneto
- CVE-2022-35143Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.raneto
- CVE-2022-35144Renato v0.17.0 was discovered to contain a cross-site scripting (XSS) vulnerability.raneto
- CVE-2022-34993Totolink A3600R_Firmware V4.1.2cu.5182_B20201102 contains a hard code password for root in /etc/shadow.sample.
- CVE-2022-34970Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h.
- CVE-2022-35241NGINX Instance Manager vulnerability CVE-2022-35241F5 NGINX Instance Manager
- CVE-2022-34865Traffic intelligence feeds vulnerability CVE-2022-34865F5 BIG-IP
- CVE-2022-34851BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851F5 BIG-IP · F5 BIG-IQ Centralized Management
- CVE-2022-34844BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844F5 BIG-IP · F5 BIG-IQ Centralized Management
- CVE-2022-33968BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968F5 BIG-IP
- CVE-2022-33962BIG-IP iRule vulnerability CVE-2022-33962F5 BIG-IP
- CVE-2022-33947BIG-IP DNS TMUI Vulnerability CVE-2022-33947F5 BIG-IP DNS
- CVE-2022-31473BIG-IP APM Appliance mode vulnerability CVE-2022-31473F5 BIG-IP APM
- CVE-2022-30535NGINX Ingress Controller vulnerability CVE-2022-30535F5 NGINX Ingress Controller
- CVE-2022-31119Password disclosure in log file in Nextcloud Mail Appnextcloud security-advisories
- CVE-2022-31120Federated share accepting/declining is not logged in audit log in Nextcloud Servernextcloud security-advisories
- CVE-2022-31118Missing brute force protection on cloud federation sharing in Nextcloud Servernextcloud security-advisories
- CVE-2022-25168Command injection in org.apache.hadoop.fs.FileUtil.unTarUsingTarApache Software Foundation Apache Hadoop · org.apache.hadoo…
- CVE-2022-2656SourceCodester Multi Language Hotel Management Software sql injectionSourceCodester Multi Language Hotel Management Software
- CVE-2022-2648SourceCodester Multi Language Hotel Management Software sql injectionSourceCodester Multi Language Hotel Management Software
- CVE-2022-2646SourceCodester Online Admission System index.php cross site scriptingSourceCodester Online Admission System
- CVE-2022-2645SourceCodester Garage Management System edituser.php cross site scriptingSourceCodester Garage Management System
- CVE-2022-2644SourceCodester Online Admission System GET Parameter sql injectionSourceCodester Online Admission System
- CVE-2022-2643SourceCodester Online Admission System POST Parameter sql injectionSourceCodester Online Admission System
- CVE-2022-34158User Group Privilege EscalationApache Software Foundation Apache JSPWiki · org.apache.jspw…
- CVE-2022-28732Apache JSPWiki Cross-site scripting vulnerability on WeblogPluginApache Software Foundation Apache JSPWiki · org.apache.jspw…
- CVE-2022-28731Apache JSPWiki CSRF in UserPreferences.jspApache Software Foundation Apache JSPWiki · org.apache.jspw…
- CVE-2022-28730Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jspApache Software Foundation Apache JSPWiki · org.apache.jspw…
- CVE-2022-27166XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2Apache Software Foundation Apache JSPWiki · org.apache.jspw…