CVEs published August 10, 2022
52 CVEs were published on August 10, 2022: 5 critical, 9 high. 1 is now in CISA KEV.
- Published
- 52
- Critical
- 5
- High
- 9
- Medium
- 29
- Low
- 1
- Unrated
- 8
- Now in CISA KEV
- 1
- Fix available
- 18
Most affected products
- Dell Wyse Management Suite
- 10
- Apache Software Foundation Apache Traffic Server
- 6
- Cisco Small Business RV Series Router Firmware
- 3
- Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86
- 3
- Cisco Webex Meetings
- 2
- IBM Robotic Process Automation
- 2
- Keysight Technologies Sensor Management Server
- 2
- Siemens Teamcenter
- 2
- All F-Secure and WithSecure Endpoint Protection products fo…
- 1
- Atlassian Jira Server · Atlassian Jira Data Center
- 1
Critical 5
- CVE-2022-36323Affected devices do not properly sanitize an input field.Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86
- CVE-2022-2242KUKA V/KSS WoV SH access control vulnerabilityKUKA SystemSoftware V/KSS
- CVE-2022-20827Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20842Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
- CVE-2022-20841Cisco Small Business RV Series Routers VulnerabilitiesCisco Small Business RV Series Router Firmware
High 9
- CVE-2022-33926Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability.Dell Wyse Management Suite
- CVE-2022-29090Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability.Dell Wyse Management Suite
- CVE-2022-20866Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2022-38129A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor MKeysight Technologies Sensor Management Server
- CVE-2022-0028PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL FilteringPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1
- CVE-2022-2756Server-Side Request Forgery (SSRF) in kareadita/kavitakareadita/kavita
- CVE-2022-36324Affected devices do not properly handle the renegotiation of SSL/TLS parameters.Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86
- CVE-2022-20792A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 aCisco Clam AntiVirus
- CVE-2022-25973Arbitrary Command Executionmc-kill-port
Medium, low and unrated 38
- CVE-2022-35715IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error messageIBM InfoSphere Information Server
- CVE-2022-35280IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes iIBM Robotic Process Automation
- CVE-2022-22490IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential informationIBM Robotic Process Automation
- CVE-2022-22411IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allow the attacker to manIBM Spectrum Scale DAS
- CVE-2022-22369IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system to crash.IBM Workload Scheduler
- CVE-2022-36270Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php.
- CVE-2022-34365WMS 3.7 contains a Path Traversal Vulnerability in Device API.Dell Wyse Management Suite
- CVE-2022-33931Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI.Dell Wyse Management Suite
- CVE-2022-33930Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages.Dell Wyse Management Suite
- CVE-2022-33929Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page.Dell Wyse Management Suite
- CVE-2022-33928Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI.Dell Wyse Management Suite
- CVE-2022-33927Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability.Dell Wyse Management Suite
- CVE-2022-33925Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI.Dell Wyse Management Suite
- CVE-2022-33924Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to createDell Wyse Management Suite
- CVE-2022-36750Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update_user.php?id=.
- CVE-2022-20713A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat DefeCisco Adaptive Security Appliance (ASA) Software · Cisco Fi…
- CVE-2022-38130The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS.Keysight Technologies Sensor Management Server
- CVE-2022-25793A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper vAutodesk 3ds Max
- CVE-2022-28881Denial-of-Service (DoS) VulnerabilityAll F-Secure and WithSecure Endpoint Protection products fo…
- CVE-2022-38133In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some casesJetBrains TeamCity
- CVE-2022-36923Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils
- CVE-2022-36325Affected devices do not properly sanitize data introduced by an user when rendering the web interface.Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86
- CVE-2022-34661A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), TeamcenteSiemens Teamcenter
- CVE-2022-34660A vulnerability has been identified in Teamcenter V12.4 (All versions < V12.4.0.15), Teamcenter V13.0 (All versions < V13.0.0.10), TeamcenteSiemens Teamcenter
- CVE-2022-34659A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used).Siemens Simcenter STAR-CCM+
- CVE-2021-46304A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (AlSiemens CP-8000 MASTER MODULE WITH I/O -25/+70°C · Sieme… +2
- CVE-2022-20820Cisco Webex Meetings Web Interface VulnerabilitiesCisco Webex Meetings
- CVE-2022-20816Cisco Unified Communications Manager Arbitrary File Deletion VulnerabilityCisco Unified Communications Manager
- CVE-2022-20914Cisco Identity Services Engine Sensitive Information Disclosure VulnerabilityCisco Identity Services Engine Software
- CVE-2022-20869Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting VulnerabilityCisco BroadWorks
- CVE-2022-20852Cisco Webex Meetings Web Interface VulnerabilitiesCisco Webex Meetings
- CVE-2022-31779Improper HTTP/2 scheme and method validationApache Software Foundation Apache Traffic Server
- CVE-2022-25763Improper input validation on HTTP/2 headers Apache Software Foundation Apache Traffic Server
- CVE-2022-36801Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a RefAtlassian Jira Server · Atlassian Jira Data Center
- CVE-2021-37150Protocol vs scheme mismatchApache Software Foundation Apache Traffic Server
- CVE-2022-28129Insufficient Validation of HTTP/1.x HeadersApache Software Foundation Apache Traffic Server
- CVE-2022-31778Transfer-Encoding not treated as hop-by-hopApache Software Foundation Apache Traffic Server
- CVE-2022-31780HTTP/2 framing vulnerabilitiesApache Software Foundation Apache Traffic Server