CVEs published August 30, 2022
47 CVEs were published on August 30, 2022: 1 critical, 7 high.
- Published
- 47
- Critical
- 1
- High
- 7
- Medium
- 11
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- Realtek Linux/Android Bluetooth Mesh SDK
- 4
- Dell Container Storage Modules
- 2
- HCL Software HCL VersionVault Express
- 2
- librenms/librenms
- 2
- Dell Data Protection Advisor
- 1
- Dell NetWorker Management Console
- 1
- Dell Smart Fabric Storage Software
- 1
- HGiga OAKlouds
- 1
- IBM Security Identity Manager
- 1
- Le-yan Co. Personnel and Salary Management System
- 1
Critical 1
High 7
- CVE-2022-27563Overload/denial of service affects HCL VersionVault ExpressHCL Software HCL VersionVault Express
- CVE-2022-3037Use After Free in vim/vimvim/vim
- CVE-2022-34375Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries.Dell Container Storage Modules
- CVE-2022-34374Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries.Dell Container Storage Modules
- CVE-2022-31232SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability.Dell Smart Fabric Storage Software
- CVE-2022-25857Denial of Service (DoS)org.yaml:snakeyaml
- CVE-2022-38118HGiga OAKlouds - SQL InjectionHGiga OAKlouds
Medium, low and unrated 39
- CVE-2022-36749RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php.
- CVE-2022-36748PicUploader v2.6.3 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /master/index.php.
- CVE-2022-36747Razor v0.8.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the function uploadchannel().
- CVE-2022-36745LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component print-customoid.php.librenms/librenms
- CVE-2022-36746LibreNMS v22.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component oxidized-cfg-check.inc.php.librenms/librenms
- CVE-2022-27560An insufficiently protected credential vulnerability affects HCL VersionVault ExpressHCL Software HCL VersionVault Express
- CVE-2022-36657Library Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /librarian/edit_book_d
- CVE-2022-36735Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.
- CVE-2022-36734Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.
- CVE-2022-36733Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.
- CVE-2022-36732Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.
- CVE-2022-36731Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /librarian/delstu.php.
- CVE-2022-36730Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /librarian/delete.php.
- CVE-2022-34368Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or PrivilegDell NetWorker Management Console
- CVE-2022-33935Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit thDell Data Protection Advisor
- CVE-2022-37173An issue in the installer of gvim 9.0.0000 allows authenticated attackers to execute arbitrary code via a binary hijacking attack on C:\Prog
- CVE-2022-36565Incorrect access control in the install directory (C:\Wamp64) of Wamp v3.2.6 and below allows authenticated attackers to execute arbitrary c
- CVE-2022-37172Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows authenticated attackers to execute arbitra
- CVE-2022-36563Incorrect access control in the install directory (C:\RailsInstaller) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to e
- CVE-2022-36564Incorrect access control in the install directory (C:\Strawberry) of StrawberryPerl v5.32.1.1 and below allows authenticated attackers to ex
- CVE-2022-36562Incorrect access control in the install directory (C:\Ruby31-x64) of Rubyinstaller2 v3.1.2 and below allows authenticated attackers to execu
- CVE-2022-36561XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.
- CVE-2021-29864IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Security Identity Manager
- CVE-2022-37237An attacker can send malicious RTMP requests to make the ZLMediaKit server crash remotely.
- CVE-2022-37176Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains a vulnerability which allows attackers to remove the Wi-Fi password and for
- CVE-2022-36552Tenda AC6(AC1200) v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to
- CVE-2022-37149WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi.
- CVE-2022-2330XXE vulnerability in DLP Endpoint for WindowsTrellix DLP Endpoint for Windows
- CVE-2022-25646Cross-site Scripting (XSS)x-data-spreadsheet
- CVE-2022-25887Regular Expression Denial of Service (ReDoS)sanitize-html
- CVE-2022-26529Realtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowRealtek Linux/Android Bluetooth Mesh SDK
- CVE-2022-26528Realtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowRealtek Linux/Android Bluetooth Mesh SDK
- CVE-2022-26527Realtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowRealtek Linux/Android Bluetooth Mesh SDK
- CVE-2022-25635Realtek Linux/Android Bluetooth Mesh SDK - Buffer OverflowRealtek Linux/Android Bluetooth Mesh SDK
- CVE-2022-24106In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the imag
- CVE-2022-24107Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
- CVE-2022-38784Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc)
- CVE-2021-46837res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7,
- CVE-2022-39028telnetd in GNU Inetutils through 2.3, MIT krb5-appl through 1.0.3, and derivative works has a NULL pointer dereference via 0xff 0xf7 or 0xff