# CVEs published 2022-08-10

52 CVEs were published on August 10, 2022: 5 critical, 9 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2022-35715](https://cve.now/CVE-2022-35715.md): IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message (CVSS 5.3, IBM InfoSphere Information Server)
- [CVE-2022-35280](https://cve.now/CVE-2022-35280.md): IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by default, which makes i (CVSS 4.6, IBM Robotic Process Automation)
- [CVE-2022-22490](https://cve.now/CVE-2022-22490.md): IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot credential information (CVSS 4.4, IBM Robotic Process Automation)
- [CVE-2022-22411](https://cve.now/CVE-2022-22411.md): IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allow the attacker to man (CVSS 6.3, IBM Spectrum Scale DAS)
- [CVE-2022-22369](https://cve.now/CVE-2022-22369.md): IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system to crash. (CVSS 6.2, IBM Workload Scheduler)
- [CVE-2022-36270](https://cve.now/CVE-2022-36270.md): Clinic's Patient Management System v1.0 has arbitrary code execution via url: ip/pms/users.php. (no CVSS)
- [CVE-2022-34365](https://cve.now/CVE-2022-34365.md): WMS 3.7 contains a Path Traversal Vulnerability in Device API. (CVSS 6.5, Dell Wyse Management Suite)
- [CVE-2022-33931](https://cve.now/CVE-2022-33931.md): Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. (CVSS 6.3, Dell Wyse Management Suite)
- [CVE-2022-33930](https://cve.now/CVE-2022-33930.md): Dell Wyse Management Suite 3.6.1 and below contains Information Disclosure in Devices error pages. (CVSS 4.3, Dell Wyse Management Suite)
- [CVE-2022-33929](https://cve.now/CVE-2022-33929.md): Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in EndUserSummary page. (CVSS 6.1, Dell Wyse Management Suite)
- [CVE-2022-33928](https://cve.now/CVE-2022-33928.md): Dell Wyse Management Suite 3.6.1 and below contains an Plain-text Password Storage Vulnerability in UI. (CVSS 6.4, Dell Wyse Management Suite)
- [CVE-2022-33927](https://cve.now/CVE-2022-33927.md): Dell Wyse Management Suite 3.6.1 and below contains a Session Fixation vulnerability. (CVSS 5.4, Dell Wyse Management Suite)
- [CVE-2022-33926](https://cve.now/CVE-2022-33926.md): Dell Wyse Management Suite 3.6.1 and below contains an improper access control vulnerability. (CVSS 7.1, Dell Wyse Management Suite)
- [CVE-2022-33925](https://cve.now/CVE-2022-33925.md): Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability in UI. (CVSS 6.5, Dell Wyse Management Suite)
- [CVE-2022-33924](https://cve.now/CVE-2022-33924.md): Dell Wyse Management Suite 3.6.1 and below contains an Improper Access control vulnerability with which an attacker with no access to create (CVSS 4.3, Dell Wyse Management Suite)
- [CVE-2022-29090](https://cve.now/CVE-2022-29090.md): Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. (CVSS 8.5, Dell Wyse Management Suite)
- [CVE-2022-36750](https://cve.now/CVE-2022-36750.md): Clinic's Patient Management System v1.0 is vulnerable to SQL injection via /pms/update\_user.php?id=. (no CVSS)
- [CVE-2022-20866](https://cve.now/CVE-2022-20866.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability (CVSS 7.4, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2022-20713](https://cve.now/CVE-2022-20713.md): A vulnerability in the VPN web client services component of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defe (CVSS 4.3, Cisco Adaptive Security Appliance (ASA) Software · Cisco Fi…)
- [CVE-2022-38130](https://cve.now/CVE-2022-38130.md): The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. (no CVSS, Keysight Technologies Sensor Management Server)
- [CVE-2022-38129](https://cve.now/CVE-2022-38129.md): A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor M (CVSS 8.1, Keysight Technologies Sensor Management Server)
- [CVE-2022-25793](https://cve.now/CVE-2022-25793.md): A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper v (no CVSS, Autodesk 3ds Max)
- [CVE-2022-28881](https://cve.now/CVE-2022-28881.md): Denial-of-Service (DoS) Vulnerability (CVSS 4.3, All F-Secure and WithSecure Endpoint Protection products fo…)
- [CVE-2022-0028](https://cve.now/CVE-2022-0028.md): PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering (CVSS 8.6, KEV, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2022-38133](https://cve.now/CVE-2022-38133.md): In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases (CVSS 3.2, JetBrains TeamCity)
- [CVE-2022-2756](https://cve.now/CVE-2022-2756.md): Server-Side Request Forgery (SSRF) in kareadita/kavita (CVSS 7.1, kareadita/kavita)
- [CVE-2022-36923](https://cve.now/CVE-2022-36923.md): Zoho ManageEngine OpManager, OpManager Plus, OpManager MSP, Network Configuration Manager, NetFlow Analyzer, Firewall Analyzer, and OpUtils (CVSS 5.4)
- [CVE-2022-36325](https://cve.now/CVE-2022-36325.md): Affected devices do not properly sanitize data introduced by an user when rendering the web interface. (CVSS 6.8, Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86)
- [CVE-2022-36324](https://cve.now/CVE-2022-36324.md): Affected devices do not properly handle the renegotiation of SSL/TLS parameters. (CVSS 7.5, Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86)
- [CVE-2022-36323](https://cve.now/CVE-2022-36323.md): Affected devices do not properly sanitize an input field. (CVSS 9.1, Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +86)
- [CVE-2022-34661](https://cve.now/CVE-2022-34661.md): A vulnerability has been identified in Teamcenter V12.4 (All versions \< V12.4.0.15), Teamcenter V13.0 (All versions \< V13.0.0.10), Teamcente (CVSS 6.5, Siemens Teamcenter)
- [CVE-2022-34660](https://cve.now/CVE-2022-34660.md): A vulnerability has been identified in Teamcenter V12.4 (All versions \< V12.4.0.15), Teamcenter V13.0 (All versions \< V13.0.0.10), Teamcente (CVSS 6.8, Siemens Teamcenter)
- [CVE-2022-34659](https://cve.now/CVE-2022-34659.md): A vulnerability has been identified in Simcenter STAR-CCM+ (All versions only if the Power-on-Demand public license server is used). (CVSS 5.3, Siemens Simcenter STAR-CCM+)
- [CVE-2021-46304](https://cve.now/CVE-2021-46304.md): A vulnerability has been identified in CP-8000 MASTER MODULE WITH I/O -25/+70°C (All versions), CP-8000 MASTER MODULE WITH I/O -40/+70°C (Al (CVSS 5.3, Siemens CP-8000 MASTER MODULE WITH I/O -25/+70°C · Sieme… +2)
- [CVE-2022-2242](https://cve.now/CVE-2022-2242.md): KUKA V/KSS WoV SH access control vulnerability (CVSS 9.8, KUKA SystemSoftware V/KSS)
- [CVE-2022-20792](https://cve.now/CVE-2022-20792.md): A vulnerability in the regex module used by the signature database load module of Clam AntiVirus (ClamAV) versions 0.104.0 through 0.104.2 a (CVSS 7.8, Cisco Clam AntiVirus)
- [CVE-2022-20827](https://cve.now/CVE-2022-20827.md): Cisco Small Business RV Series Routers Vulnerabilities (CVSS 9.0, Cisco Small Business RV Series Router Firmware)
- [CVE-2022-20820](https://cve.now/CVE-2022-20820.md): Cisco Webex Meetings Web Interface Vulnerabilities (CVSS 5.4, Cisco Webex Meetings)
- [CVE-2022-20816](https://cve.now/CVE-2022-20816.md): Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability (CVSS 6.5, Cisco Unified Communications Manager)
- [CVE-2022-20914](https://cve.now/CVE-2022-20914.md): Cisco Identity Services Engine Sensitive Information Disclosure Vulnerability (CVSS 4.9, Cisco Identity Services Engine Software)
- [CVE-2022-20869](https://cve.now/CVE-2022-20869.md): Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco BroadWorks)
- [CVE-2022-20852](https://cve.now/CVE-2022-20852.md): Cisco Webex Meetings Web Interface Vulnerabilities (CVSS 5.4, Cisco Webex Meetings)
- [CVE-2022-20842](https://cve.now/CVE-2022-20842.md): Cisco Small Business RV Series Routers Vulnerabilities (CVSS 9.0, Cisco Small Business RV Series Router Firmware)
- [CVE-2022-20841](https://cve.now/CVE-2022-20841.md): Cisco Small Business RV Series Routers Vulnerabilities (CVSS 9.0, Cisco Small Business RV Series Router Firmware)
- [CVE-2022-31779](https://cve.now/CVE-2022-31779.md): Improper HTTP/2 scheme and method validation (no CVSS, Apache Software Foundation Apache Traffic Server)
- [CVE-2022-25763](https://cve.now/CVE-2022-25763.md): Improper input validation on HTTP/2 headers (CVSS 6.8, Apache Software Foundation Apache Traffic Server)
- [CVE-2022-25973](https://cve.now/CVE-2022-25973.md): Arbitrary Command Execution (CVSS 7.8, mc-kill-port)
- [CVE-2022-36801](https://cve.now/CVE-2022-36801.md): Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Ref (CVSS 6.1, Atlassian Jira Server · Atlassian Jira Data Center)
- [CVE-2021-37150](https://cve.now/CVE-2021-37150.md): Protocol vs scheme mismatch (CVSS 4.2, Apache Software Foundation Apache Traffic Server)
- [CVE-2022-28129](https://cve.now/CVE-2022-28129.md): Insufficient Validation of HTTP/1.x Headers (no CVSS, Apache Software Foundation Apache Traffic Server)
- [CVE-2022-31778](https://cve.now/CVE-2022-31778.md): Transfer-Encoding not treated as hop-by-hop (no CVSS, Apache Software Foundation Apache Traffic Server)
- [CVE-2022-31780](https://cve.now/CVE-2022-31780.md): HTTP/2 framing vulnerabilities (no CVSS, Apache Software Foundation Apache Traffic Server)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.