# CVEs published 2022-08-18

127 CVEs were published on August 18, 2022: 4 critical, 32 high. Days are UTC.

- [CVE-2020-36599](https://cve.now/CVE-2020-36599.md): lib/omniauth/failure\_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message\_key value. (no CVSS, omniauth)
- [CVE-2022-35540](https://cve.now/CVE-2022-35540.md): Hardcoded JWT Secret in AgileConfig \<1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access. (no CVSS, AgileConfig.Client)
- [CVE-2022-36947](https://cve.now/CVE-2022-36947.md): Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow. (no CVSS)
- [CVE-2022-34345](https://cve.now/CVE-2022-34345.md): Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially (no CVSS, Intel(R) NUC Laptop Kits)
- [CVE-2022-32579](https://cve.now/CVE-2022-32579.md): Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially e (CVSS 6.9, Intel(R) NUC Laptop Kits)
- [CVE-2022-34488](https://cve.now/CVE-2022-34488.md): Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentia (CVSS 7.8, Intel(R) NUC Laptop Kits)
- [CVE-2022-27493](https://cve.now/CVE-2022-27493.md): Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially e (CVSS 7.8, Intel(R) NUC Laptop Kits)
- [CVE-2022-33209](https://cve.now/CVE-2022-33209.md): Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially (CVSS 7.8, Intel(R) NUC Laptop Kits)
- [CVE-2022-28858](https://cve.now/CVE-2022-28858.md): Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potential (CVSS 7.8, Intel(R) NUC Laptop Kits)
- [CVE-2022-29507](https://cve.now/CVE-2022-29507.md): Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authenticated user to potenti (CVSS 5.5, version)
- [CVE-2022-30296](https://cve.now/CVE-2022-30296.md): Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an unauthenticated user (CVSS 7.5, version)
- [CVE-2022-26374](https://cve.now/CVE-2022-26374.md): Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable (CVSS 7.8, version)
- [CVE-2022-26344](https://cve.now/CVE-2022-26344.md): Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially en (CVSS 7.8, version)
- [CVE-2022-26844](https://cve.now/CVE-2022-26844.md): Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to pote (CVSS 7.8, version)
- [CVE-2022-25899](https://cve.now/CVE-2022-25899.md): Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenti (CVSS 9.8, Intel)
- [CVE-2021-33060](https://cve.now/CVE-2021-33060.md): Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of pr (CVSS 7.8, Intel(R) Processors)
- [CVE-2022-28696](https://cve.now/CVE-2022-28696.md): Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enab (CVSS 7.8, Intel(R) Distribution for Python)
- [CVE-2022-26017](https://cve.now/CVE-2022-26017.md): Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escala (CVSS 8.0, Intel(R) DSA software for)
- [CVE-2022-25841](https://cve.now/CVE-2022-25841.md): Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an authenticated user (CVSS 7.8, version)
- [CVE-2022-25999](https://cve.now/CVE-2022-25999.md): Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may allow an authenticate (CVSS 7.8, version)
- [CVE-2022-26074](https://cve.now/CVE-2022-26074.md): Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS\_E3\_04.08.04.330.0 and SPS\_E3\_04.01.04.530.0 may allow a priv (CVSS 4.4, Intel(R) SPS)
- [CVE-2022-23403](https://cve.now/CVE-2022-23403.md): Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially ena (CVSS 5.5, Intel(R) Data Center Manager software)
- [CVE-2022-36727](https://cve.now/CVE-2022-36727.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php. (no CVSS)
- [CVE-2022-36722](https://cve.now/CVE-2022-36722.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php. (no CVSS)
- [CVE-2022-36728](https://cve.now/CVE-2022-36728.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php. (no CVSS)
- [CVE-2022-36725](https://cve.now/CVE-2022-36725.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M\_Id parameter at /student/dele.php. (no CVSS)
- [CVE-2022-36729](https://cve.now/CVE-2022-36729.md): Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M\_Id parameter at /librarian/del.php. (no CVSS)
- [CVE-2022-24378](https://cve.now/CVE-2022-24378.md): Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enabl (CVSS 5.5, Intel(R) Data Center Manager software)
- [CVE-2022-23182](https://cve.now/CVE-2022-23182.md): Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated user to potentially ena (CVSS 8.8, Intel(R) Data Center Manager software)
- [CVE-2022-27500](https://cve.now/CVE-2022-27500.md): Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially en (CVSS 5.5, Intel(R) Support Android application)
- [CVE-2022-21807](https://cve.now/CVE-2022-21807.md): Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to pot (CVSS 7.8, Intel(R) VTune(TM) Profiler software)
- [CVE-2022-21812](https://cve.now/CVE-2022-21812.md): Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potentially enable escalation (CVSS 7.8, Intel(R) HAXM software)
- [CVE-2022-21152](https://cve.now/CVE-2022-21152.md): Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potent (CVSS 5.5, Intel(R) Edge Insights for Industrial software)
- [CVE-2022-21148](https://cve.now/CVE-2022-21148.md): Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potent (CVSS 7.8, Intel(R) Edge Insights for Industrial software)
- [CVE-2022-25966](https://cve.now/CVE-2022-25966.md): Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potent (CVSS 7.8, Intel(R) Edge Insights for Industrial software)
- [CVE-2022-22730](https://cve.now/CVE-2022-22730.md): Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to pote (CVSS 9.8, Intel(R) Edge Insights for Industrial software)
- [CVE-2022-21793](https://cve.now/CVE-2022-21793.md): Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the In (CVSS 5.5, Intel(R) Ethernet 500 Series Controller drivers for VMWare…)
- [CVE-2021-23179](https://cve.now/CVE-2021-23179.md): Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow (CVSS 7.1, Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…)
- [CVE-2021-26950](https://cve.now/CVE-2021-26950.md): Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow (CVSS 5.5, Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…)
- [CVE-2021-26257](https://cve.now/CVE-2021-26257.md): Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 (CVSS 5.5, Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…)
- [CVE-2021-33847](https://cve.now/CVE-2021-33847.md): Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 (CVSS 7.8, Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R)…)
- [CVE-2022-21140](https://cve.now/CVE-2022-21140.md): Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enabl (CVSS 5.5, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2022-21212](https://cve.now/CVE-2022-21212.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of (CVSS 6.5, Intel(R) PROSet/Wireless WiFi products)
- [CVE-2021-23188](https://cve.now/CVE-2021-23188.md): Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an authenticated user to potentially e (CVSS 3.3, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2022-21160](https://cve.now/CVE-2022-21160.md): Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial (CVSS 7.5, Intel(R) PROSet/Wireless WiFi products)
- [CVE-2022-21197](https://cve.now/CVE-2022-21197.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of (CVSS 7.5, Intel(R) PROSet/Wireless WiFi products)
- [CVE-2022-21139](https://cve.now/CVE-2022-21139.md): Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable escal (CVSS 8.8, Intel(R) PROSet/Wireless WiFi products)
- [CVE-2022-21240](https://cve.now/CVE-2022-21240.md): Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure (CVSS 4.4, Intel(R) PROSet/Wireless WiFi products)
- [CVE-2022-21172](https://cve.now/CVE-2022-21172.md): Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privileg (CVSS 6.7, Intel(R) PROSet/Wireless WiFi products)
- [CVE-2021-26254](https://cve.now/CVE-2021-26254.md): Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable den (CVSS 5.5, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2021-44470](https://cve.now/CVE-2021-44470.md): Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenticated user to potenti (CVSS 5.5, Intel(R) Connect M Android application)
- [CVE-2022-28709](https://cve.now/CVE-2022-28709.md): Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a privileged user to po (CVSS 4.4, Intel(R) E810 Ethernet Controllers)
- [CVE-2021-33128](https://cve.now/CVE-2021-33128.md): Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to po (CVSS 4.4, Intel(R) E810 Ethernet Controllers)
- [CVE-2021-33126](https://cve.now/CVE-2021-33126.md): Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 (CVSS 4.4, Intel(R) 700 and 722 Series Ethernet Controllers and Adapte…)
- [CVE-2022-28757](https://cve.now/CVE-2022-28757.md): Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS (CVSS 8.8, Zoom Video Communications Zoom Client for Meetings for MacOS)
- [CVE-2022-37770](https://cve.now/CVE-2022-37770.md): libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. (no CVSS)
- [CVE-2022-37769](https://cve.now/CVE-2022-37769.md): libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. (no CVSS)
- [CVE-2022-37768](https://cve.now/CVE-2022-37768.md): libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer. (no CVSS)
- [CVE-2022-35213](https://cve.now/CVE-2022-35213.md): Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerability via the function b (no CVSS)
- [CVE-2022-35212](https://cve.now/CVE-2022-35212.md): osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep\_db\_error(). (no CVSS)
- [CVE-2022-25228](https://cve.now/CVE-2022-25228.md): CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter (no CVSS, CandidATS)
- [CVE-2022-2568](https://cve.now/CVE-2022-2568.md): A privilege escalation flaw was found in the Ansible Automation Platform. (no CVSS, Red Hat Ansible Automation Platform)
- [CVE-2020-27788](https://cve.now/CVE-2020-27788.md): An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p\_lx\_elf.cpp file. (no CVSS, upx)
- [CVE-2020-27790](https://cve.now/CVE-2020-27790.md): A floating point exception issue was discovered in UPX in PackLinuxElf64::invert\_pt\_dynamic() function of p\_lx\_elf.cpp file. (no CVSS, upx)
- [CVE-2022-35976](https://cve.now/CVE-2022-35976.md): Improper KubeConfig handling allows arbitrary code execution (CVSS 5.2, weaveworks vscode-gitops-tools)
- [CVE-2020-27787](https://cve.now/CVE-2020-27787.md): A Segmentaation fault was found in UPX in invert\_pt\_dynamic() function in p\_lx\_elf.cpp. (no CVSS, upx)
- [CVE-2022-35204](https://cve.now/CVE-2022-35204.md): Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service. (no CVSS, vite)
- [CVE-2022-37422](https://cve.now/CVE-2022-37422.md): Payara through 5.2022.2 allows directory traversal without authentication. (no CVSS, fish.payara.api:payara-bom)
- [CVE-2022-35975](https://cve.now/CVE-2022-35975.md): Improper object validation allows for arbitrary code execution in GitOps Tools Extension for VSCode (CVSS 9.0, weaveworks vscode-gitops-tools)
- [CVE-2022-35175](https://cve.now/CVE-2022-35175.md): Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden\_id parameter at /blotter/blotter.php. (no CVSS)
- [CVE-2022-35174](https://cve.now/CVE-2022-35174.md): A stored cross-site scripting (XSS) vulnerability in Kirby's Starterkit v3.7.0.2 allows attackers to execute arbitrary web scripts or HTML v (no CVSS, getkirby/starterkit)
- [CVE-2022-37063](https://cve.now/CVE-2022-37063.md): All FLIR AX8 thermal sensor cameras versions up to and including 1.46.16 are vulnerable to Cross Site Scripting (XSS) due to improper input (no CVSS)
- [CVE-2022-37062](https://cve.now/CVE-2022-37062.md): All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are affected by an insecure design vulnerability due to an improper (no CVSS)
- [CVE-2022-36024](https://cve.now/CVE-2022-36024.md): Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution (CVSS 7.5, Pycord-Development pycord · py-cord)
- [CVE-2022-37025](https://cve.now/CVE-2022-37025.md): An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a con (no CVSS)
- [CVE-2022-29549](https://cve.now/CVE-2022-29549.md): An issue was discovered in Qualys Cloud Agent 4.8.0-49. (no CVSS)
- [CVE-2022-29550](https://cve.now/CVE-2022-29550.md): An issue was discovered in Qualys Cloud Agent 4.8.0-49. (no CVSS)
- [CVE-2022-2876](https://cve.now/CVE-2022-2876.md): SourceCodester Student Management System index.php sql injection (CVSS 6.3, SourceCodester Student Management System)
- [CVE-2022-33311](https://cve.now/CVE-2022-33311.md): Browse restriction bypass vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain t (no CVSS, Cybozu Office)
- [CVE-2022-33151](https://cve.now/CVE-2022-33151.md): Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows remote attackers to inject an arbitra (no CVSS, Cybozu Office)
- [CVE-2022-32583](https://cve.now/CVE-2022-32583.md): Operation restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter th (no CVSS, Cybozu Office)
- [CVE-2022-32544](https://cve.now/CVE-2022-32544.md): Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the (no CVSS, Cybozu Office)
- [CVE-2022-32453](https://cve.now/CVE-2022-32453.md): HTTP header injection vulnerability in Cybozu Office 10.0.0 to 10.8.5 may allow a remote attacker to obtain and/or alter the data of the pro (no CVSS, Cybozu Office)
- [CVE-2022-32283](https://cve.now/CVE-2022-32283.md): Browse restriction bypass vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the da (no CVSS, Cybozu Office)
- [CVE-2022-30693](https://cve.now/CVE-2022-30693.md): Information disclosure vulnerability in the system configuration of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to obtain the da (no CVSS, Cybozu Office)
- [CVE-2022-30604](https://cve.now/CVE-2022-30604.md): Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitr (no CVSS, Cybozu Office)
- [CVE-2022-29891](https://cve.now/CVE-2022-29891.md): Browse restriction bypass vulnerability in Custom Ap of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the (no CVSS, Cybozu Office)
- [CVE-2022-29487](https://cve.now/CVE-2022-29487.md): Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitrary script via unspecified (no CVSS, Cybozu Office)
- [CVE-2022-28715](https://cve.now/CVE-2022-28715.md): Cross-site scripting vulnerability in the specific parameters of Cybozu Office 10.0.0 to 10.8.5 allows a remote attacker to inject an arbitr (no CVSS, Cybozu Office)
- [CVE-2022-25986](https://cve.now/CVE-2022-25986.md): Browse restriction bypass vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to obtain the (no CVSS, Cybozu Office)
- [CVE-2022-35198](https://cve.now/CVE-2022-35198.md): Contract Management System v2.0 contains a weak default password which gives attackers to access database connection information. (no CVSS)
- [CVE-2022-35173](https://cve.now/CVE-2022-35173.md): An issue was discovered in Nginx NJS v0.7.5. (no CVSS)
- [CVE-2022-35166](https://cve.now/CVE-2022-35166.md): libjpeg commit 842c7ba was discovered to contain an infinite loop via the component JPEG::ReadInternal. (no CVSS)
- [CVE-2022-35164](https://cve.now/CVE-2022-35164.md): LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit\_copy\_chain. (no CVSS)
- [CVE-2022-35165](https://cve.now/CVE-2022-35165.md): An issue in AP4\_SgpdAtom::AP4\_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input. (no CVSS)
- [CVE-2022-35154](https://cve.now/CVE-2022-35154.md): Shopro Mall System v1.3.8 was discovered to contain a SQL injection vulnerability via the value parameter. (no CVSS)
- [CVE-2021-30071](https://cve.now/CVE-2021-30071.md): A cross-site scripting (XSS) vulnerability in /admin/list\_key.html of HestiaCP before v1.3.5 allows attackers to execute arbitrary web scrip (no CVSS)
- [CVE-2021-30070](https://cve.now/CVE-2021-30070.md): An issue was discovered in HestiaCP before v1.3.5. (no CVSS)
- [CVE-2022-35153](https://cve.now/CVE-2022-35153.md): FusionPBX 5.0.1 was discovered to contain a command injection vulnerability via /fax/fax\_send.php. (no CVSS)
- [CVE-2022-35606](https://cve.now/CVE-2022-35606.md): A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2022-35605](https://cve.now/CVE-2022-35605.md): A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2022-35603](https://cve.now/CVE-2022-35603.md): A SQL injection vulnerability in CustomerDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2022-35602](https://cve.now/CVE-2022-35602.md): A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2022-35601](https://cve.now/CVE-2022-35601.md): A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2022-35599](https://cve.now/CVE-2022-35599.md): A SQL injection vulnerability in Stocks.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2022-35598](https://cve.now/CVE-2022-35598.md): A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary S (no CVSS)
- [CVE-2021-23168](https://cve.now/CVE-2021-23168.md): Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enab (CVSS 6.5, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2021-23223](https://cve.now/CVE-2021-23223.md): Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enabl (CVSS 7.8, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2021-32862](https://cve.now/CVE-2021-32862.md): nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths (CVSS 7.5, jupyter nbconvert · nbconvert)
- [CVE-2021-37409](https://cve.now/CVE-2021-37409.md): Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enabl (CVSS 7.8, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2021-44545](https://cve.now/CVE-2021-44545.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potential (CVSS 6.5, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2022-21181](https://cve.now/CVE-2022-21181.md): Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially ena (CVSS 7.8, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products)
- [CVE-2022-21225](https://cve.now/CVE-2022-21225.md): Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enabl (CVSS 8.0, Intel(R) Data Center Manager software)
- [CVE-2022-21229](https://cve.now/CVE-2022-21229.md): Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an authenticated user to p (CVSS 7.8, Intel(R) NUC 9 Extreme Laptop Kit drivers)
- [CVE-2022-21233](https://cve.now/CVE-2022-21233.md): Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure (CVSS 5.5, Intel(R) Processors)
- [CVE-2022-2625](https://cve.now/CVE-2022-2625.md): A vulnerability was found in PostgreSQL. (no CVSS, postgresql)
- [CVE-2022-26373](https://cve.now/CVE-2022-26373.md): Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially (CVSS 5.5, Intel(R) Processors)
- [CVE-2022-28697](https://cve.now/CVE-2022-28697.md): Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially en (CVSS 6.8, Intel(R) AMT and Intel(R) Standard Manageability)
- [CVE-2022-2874](https://cve.now/CVE-2022-2874.md): NULL Pointer Dereference in vim/vim (CVSS 6.6, vim/vim)
- [CVE-2022-30601](https://cve.now/CVE-2022-30601.md): Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially e (CVSS 9.8, Intel(R) AMT and Intel(R) Standard Manageability)
- [CVE-2022-30944](https://cve.now/CVE-2022-30944.md): Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable (CVSS 5.5, Intel(R) AMT and Intel(R) Standard Manageability)
- [CVE-2022-36023](https://cve.now/CVE-2022-36023.md): Remote denial of service in Hyperledger Fabric Gateway (CVSS 7.0, hyperledger fabric · github.com/hyperledger/fabric)
- [CVE-2022-37047](https://cve.now/CVE-2022-37047.md): The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get\_ipv6\_next at common/get.c:713. (no CVSS)
- [CVE-2022-37048](https://cve.now/CVE-2022-37048.md): The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get\_l2len\_protocol at common/get.c:34 (no CVSS)
- [CVE-2022-37049](https://cve.now/CVE-2022-37049.md): The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse\_mpls at common/get.c:150. (no CVSS)
- [CVE-2022-37060](https://cve.now/CVE-2022-37060.md): FLIR AX8 thermal sensor cameras version up to and including 1.46.16 is vulnerable to Directory Traversal due to an improper access restricti (no CVSS)
- [CVE-2022-37061](https://cve.now/CVE-2022-37061.md): All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vulnerable to Remote Command Injection. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.