# CVEs published 2022-08-06

12 CVEs were published on August 6, 2022: 0 critical, 0 high. Days are UTC.

- [CVE-2022-26979](https://cve.now/CVE-2022-26979.md): Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.add (no CVSS)
- [CVE-2022-27944](https://cve.now/CVE-2022-27944.md): Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference. (no CVSS)
- [CVE-2022-2694](https://cve.now/CVE-2022-2694.md): SourceCodester Company Website CMS unrestricted upload (CVSS 6.3, SourceCodester Company Website CMS)
- [CVE-2022-2693](https://cve.now/CVE-2022-2693.md): SourceCodester Electronic Medical Records System UPDATE Statement register.php sql injection (CVSS 6.3, SourceCodester Electronic Medical Records System)
- [CVE-2022-2692](https://cve.now/CVE-2022-2692.md): SourceCodester Wedding Hall Booking System Staff User Profile cross site scripting (CVSS 3.5, SourceCodester Wedding Hall Booking System)
- [CVE-2022-2691](https://cve.now/CVE-2022-2691.md): SourceCodester Wedding Hall Booking System Profile Page cross site scripting (CVSS 3.5, SourceCodester Wedding Hall Booking System)
- [CVE-2022-2690](https://cve.now/CVE-2022-2690.md): SourceCodester Wedding Hall Booking System Booking Form cross site scripting (CVSS 3.5, SourceCodester Wedding Hall Booking System)
- [CVE-2022-2689](https://cve.now/CVE-2022-2689.md): SourceCodester Wedding Hall Booking System Contact Page cross site scripting (CVSS 3.5, SourceCodester Wedding Hall Booking System)
- [CVE-2022-2688](https://cve.now/CVE-2022-2688.md): SourceCodester Expense Management System POST Parameter report.php fetch\_report\_credit sql injection (CVSS 6.3, SourceCodester Expense Management System)
- [CVE-2022-37451](https://cve.now/CVE-2022-37451.md): Exim before 4.96 has an invalid free in pam\_converse in auths/call\_pam.c because store\_free is not used after store\_malloc. (no CVSS)
- [CVE-2022-2687](https://cve.now/CVE-2022-2687.md): SourceCodester Gym Management System sql injection (CVSS 6.3, SourceCodester Gym Management System)
- [CVE-2022-2686](https://cve.now/CVE-2022-2686.md): oretnom23 Fast Food Ordering System Menu List Page cross site scripting (CVSS 3.5, oretnom23 Fast Food Ordering System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.