CVEs published August 8, 2022
44 CVEs were published on August 8, 2022: 0 critical, 2 high.
- Published
- 44
- Critical
- 0
- High
- 2
- Medium
- 12
- Low
- 1
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- SourceCodester Gym Management System
- 3
- SourceCodester Simple E-Learning System
- 3
- SourceCodester Online Class and Exam Scheduling System
- 2
- WSM Downloader
- 2
- YaySMTP – Simple WP SMTP Mail
- 2
- Auto More Tag
- 1
- Better Tag Cloud
- 1
- cockpit-hq/cockpit · aheinze/cockpit
- 1
- Crowdsignal Dashboard – Polls, Surveys & more
- 1
- Directorist – WordPress Business Directory Plugin with Clas…
- 1
High 2
Medium, low and unrated 42
- CVE-2021-41615websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinpara
- CVE-2022-34293wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.
- CVE-2022-36264In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists an Unauthenticated remote Arbitrary File Upload vulnerability which allows
- CVE-2022-36265In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Hidden system command web page.
- CVE-2022-36266In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a stored XSS vulnerability.
- CVE-2022-36267In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability.
- CVE-2022-35493A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Web
- CVE-2022-35490Zammad 5.2.0 is vulnerable to privilege escalation.
- CVE-2022-35489In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those
- CVE-2022-35488In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests f
- CVE-2022-35487Zammad 5.2.0 suffers from Incorrect Access Control.
- CVE-2022-2460WPDating < 7.4.0 - Multiple Unauthenticated SQLiWPDating
- CVE-2022-2426Thinkific Uploader <= 1.0.0 - Admin+ Stored Cross-Site ScriptingThinkific Uploader
- CVE-2022-2425WP DS Blog Map <= 3.1.3 - Admin+ Stored Cross-Site ScriptingWP DS Blog Map
- CVE-2022-2424Google Maps Anywhere <= 1.2.6.3 - Admin+ Stored Cross-Site ScriptingGoogle Maps Anywhere
- CVE-2022-2423DW Promobar <= 1.0.4 - Admin+ Stored Cross-Site ScriptingDW Promobar
- CVE-2022-2412Better Tag Cloud <= 0.99.5 - Admin+ Stored Cross-Site ScriptingBetter Tag Cloud
- CVE-2022-2411Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site ScriptingAuto More Tag
- CVE-2022-2410mTouch Quiz <= 3.1.3 - Admin+ Stored Cross Site ScriptingmTouch Quiz
- CVE-2022-2409Rough Chart <= 1.0.0 - Admin+ Stored Cross-Site ScriptingRough Chart
- CVE-2022-2398WP Comments Fields < 4.1 - Admin+ Stored Cross-Site ScriptingWordPress Comments Fields
- CVE-2022-2395weForms < 1.6.14 - Admin+ Stored Cross-Site ScriptingweForms – Easy Drag & Drop Contact Form Builder For WordPre…
- CVE-2022-2391Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site ScriptingInspiro PRO
- CVE-2022-2386Crowdsignal Polls & Ratings < 3.0.8 - Reflected Cross-Site ScriptingCrowdsignal Dashboard – Polls, Surveys & more
- CVE-2022-2372YaySMTP < 2.2.2 - Admin+ Stored Cross-Site ScriptingYaySMTP – Simple WP SMTP Mail
- CVE-2022-2371YaySMTP < 2.2.1 - Subscriber+ Stored Cross-Site ScriptingYaySMTP – Simple WP SMTP Mail
- CVE-2022-2367WSM Downloader <= 1.4.0 - Domain Name Restriction BypassWSM Downloader
- CVE-2022-2357WSM Downloader <= 1.4.0 - Unauthenticated Arbitrary File DownloadWSM Downloader
- CVE-2022-2356User Private Files < 1.1.3 - Subscriber+ Arbitrary File UploadFrontend File Manager & Sharing – User Private Files
- CVE-2022-2355Easy Username Updater < 1.0.5 - Arbitrary Username Update via CSRFEasy Username Updater
- CVE-2022-2269Website File Changes Monitor < 1.8.3 - Admin+ SQLiWebsite File Changes Monitor
- CVE-2022-2046Directorist - Business Directory Plugin < 7.2.3 - Admin+ Arbitrary File UploadDirectorist – WordPress Business Directory Plugin with Clas…
- CVE-2022-1323Discy < 5.0 - Subscriber+ Broken Access Control to change settingsDiscy
- CVE-2022-2708SourceCodester Gym Management System login.php sql injectionSourceCodester Gym Management System
- CVE-2022-2707SourceCodester Online Class and Exam Scheduling System faculty_sched.php sql injectionSourceCodester Online Class and Exam Scheduling System
- CVE-2022-2706SourceCodester Online Class and Exam Scheduling System class_sched.php sql injectionSourceCodester Online Class and Exam Scheduling System
- CVE-2022-2705SourceCodester Simple Student Information System manage_department.php sql injectionSourceCodester Simple Student Information System
- CVE-2022-2704SourceCodester Simple E-Learning System downloadFiles.php information disclosureSourceCodester Simple E-Learning System
- CVE-2022-2703SourceCodester Gym Management System Exercises Module sql injectionSourceCodester Gym Management System
- CVE-2022-2701SourceCodester Simple E-Learning System claire_blake cross site scriptingSourceCodester Simple E-Learning System
- CVE-2022-2700SourceCodester Gym Management System GET Parameter sql injectionSourceCodester Gym Management System
- CVE-2022-2699SourceCodester Simple E-Learning System claire_blake sql injectionSourceCodester Simple E-Learning System