Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2022-1924
DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.
Affected Products: GStreamer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225'}, {'name': '[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html'}, {'name': 'DSA-5204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5204'}]
CVE State: PUBLISHED
Explain CVE-2022-1925
DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data function which causes a heap overflow. Due to restrictions on chunk sizes in the matroskademux element, the overflow can't be triggered, however the matroskaparse element has no size checks.
Affected Products: GStreamer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225'}, {'name': '[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html'}, {'name': 'DSA-5204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5204'}]
CVE State: PUBLISHED
Explain CVE-2022-1926
Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.3.
Affected Products: polonel/trudesk
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3fda8902-68ee-4734-86a3-9551ab17c893'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/b7c15180b6d4e556ad05d0881eb72d8b2f1637a0'}]
CVE State: PUBLISHED
Explain CVE-2022-1927
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/945107ef-0b27-41c7-a03c-db99def0e777'}, {'url': 'https://github.com/vim/vim/commit/4d97a565ae8be0d4debba04ebd2ac3e75a0c8010'}, {'name': 'FEDORA-2022-5ce148636b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/'}, {'name': 'FEDORA-2022-d94440bf0e', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/'}, {'name': 'FEDORA-2022-bb2daad935', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1928
Cross-site Scripting (XSS) - Stored in GitHub repository go-gitea/gitea prior to 1.16.9.
Affected Products: go-gitea/gitea
References: [{'url': 'https://huntr.dev/bounties/6336ec42-5c4d-4f61-ae38-2bb539f433d2'}, {'url': 'https://github.com/go-gitea/gitea/commit/65e0688a5c9dacad50e71024b7529fdf0e3c2e9c'}, {'name': 'GLSA-202210-14', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-14'}]
CVE State: PUBLISHED
Explain CVE-2022-1929
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method
Affected Products: devcert
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://research.jfrog.com/vulnerabilities/devcert-redos-xray-211352/'}]
CVE State: PUBLISHED
Explain CVE-2022-1930
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the eth-account PyPI package, when an attacker is able to supply arbitrary input to the encode_structured_data method
Affected Products: eth-account
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://research.jfrog.com/vulnerabilities/eth-account-redos-xray-248681/'}]
CVE State: PUBLISHED
Explain CVE-2022-1931
Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.
Affected Products: polonel/trudesk
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/50c4cb63-65db-41c5-a16d-0560d7131fde'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/314540864dbf2c0eaa99aa42c3d317de9501eb67'}]
CVE State: PUBLISHED
Explain CVE-2022-1932
The Rezgo Online Booking WordPress plugin before 4.1.8 does not sanitise and escape some parameters before outputting them back in a page, leading to a Reflected Cross-Site Scripting, which can be exploited either via a LFI in an AJAX action, or direct call to the affected file
Affected Products: Rezgo Online Booking
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/005c2300-f6bd-416e-97a6-d42284bbb093'}]
CVE State: PUBLISHED
Explain CVE-2022-1933
The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting
Affected Products: CDI – Collect and Deliver Interface for Woocommerce
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6cedb27f-6140-4cba-836f-63de98e521bf'}]
CVE State: PUBLISHED
Explain CVE-2022-1934
Use After Free in GitHub repository mruby/mruby prior to 3.2.
Affected Products: mruby/mruby
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/99e6df06-b9f7-4c53-a722-6bb89fbfb51f'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/aa7f98dedb68d735a1665d3a289036c88b0c47ce'}]
CVE State: PUBLISHED
Explain CVE-2022-1935
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Trigger Token to misuse it from any location even when IP address restrictions were configured
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/363650'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1935.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1936
Incorrect authorization in GitLab EE affecting all versions from 12.0 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1 allowed an attacker already in possession of a valid Project Deploy Token to misuse it from any location even when IP address restrictions were configured
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/363638'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1936.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1937
The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting
Affected Products: Awin Data Feed
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/eb40ea5d-a463-4947-9a40-d55911ff50e9'}]
CVE State: PUBLISHED
Explain CVE-2022-1938
The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a header when processing request to generate analytics data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against a logged in admin viewing the plugin's settings
Affected Products: Awin Data Feed
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/70aed824-c53e-4672-84c9-039dc34ed5fa'}]
CVE State: PUBLISHED
Explain CVE-2022-1939
The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to
Affected Products: Allow svg files
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4d7b62e1-558b-4504-a6e2-78246a8b554f'}]
CVE State: PUBLISHED
Explain CVE-2022-1940
A Stored Cross-Site Scripting vulnerability in Jira integration in GitLab EE affecting all versions from 13.11 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows an attacker to execute arbitrary JavaScript code in GitLab on a victim's behalf via specially crafted Jira Issues
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/359142'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1533976'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1940.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1941
A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of memory failures. A specially crafted message with multiple key-value per elements creates parsing issues, and can lead to a Denial of Service against services receiving unsanitized input. We recommend upgrading to versions 3.18.3, 3.19.5, 3.20.2, 3.21.6 for protobuf-cpp and 3.18.3, 3.19.5, 3.20.2, 4.21.6 for protobuf-python. Versions for 3.16 and 3.17 are no longer updated.
Affected Products: protobuf-cpp
References: [{'url': 'https://cloud.google.com/support/bulletins#GCP-2022-019'}, {'url': 'https://github.com/protocolbuffers/protobuf/security/advisories/GHSA-8gq9-2x98-w8hf'}, {'name': '[oss-security] 20220927 CVE-2022-1941: Protobuf C++, Python DoS', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2022/09/27/1'}, {'name': 'FEDORA-2022-25f35ed634', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBAUKJQL6O4TIWYBENORSY5P43TVB4M3/'}, {'name': '[debian-lts-announce] 20230418 [SECURITY] [DLA 3393-1] protobuf security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html'}, {'name': 'FEDORA-2022-15729fa33d', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MPCGUT3T5L6C3IDWUPSUO22QDCGQKTOP/'}]
CVE State: PUBLISHED
Explain CVE-2022-1942
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/67ca4d3b-9175-43c1-925c-72a7091bc071'}, {'url': 'https://github.com/vim/vim/commit/71223e2db87c2bf3b09aecb46266b56cda26191d'}, {'name': 'FEDORA-2022-bb2daad935', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1943
A flaw out of bounds memory write in the Linux kernel UDF file system functionality was found in the way user triggers some file operation which triggers udf_write_fi(). A local user could use this flaw to crash the system or potentially
Affected Products: Kernel
References: [{'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c1ad35dd0548ce947d97aaf92f7f2f9a202951cf'}]
CVE State: PUBLISHED
Explain CVE-2022-1944
When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows users with the Developer role to open terminals on other Developers' running jobs
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/349750'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1944.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1945
The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings, allowing high privilege users such as admin to perform Stored Cross-Site Scripting when unfiltered_html is disallowed (for example in multisite setup)
Affected Products: Coming Soon & Maintenance Mode by Colorlib
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4ad297e5-c92d-403c-abf4-9decf7e8378b'}]
CVE State: PUBLISHED
Explain CVE-2022-1946
The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue
Affected Products: Gallery – Image and Video Gallery with Thumbnails
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0903920c-be2e-4515-901f-87253eb30940'}]
CVE State: PUBLISHED
Explain CVE-2022-1947
Use of Incorrect Operator in GitHub repository polonel/trudesk prior to 1.2.3.
Affected Products: polonel/trudesk
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cb4d0ab3-51ba-4a42-9e38-ac0e544266f1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/a9e38f25c2af2722dee4fdafb2fb70d30d5106c5'}]
CVE State: PUBLISHED
Explain CVE-2022-1948
An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/security/gitlab/-/issues/673'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1578400'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1948.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1949
An access control bypass vulnerability found in 389-ds-base. That mishandling of the filter that would yield incorrect results, but as that has progressed, can be determined that it actually is an access control bypass. This may allow any remote unauthenticated user to issue a filter that allows searching for database items they do not have access to, including but not limited to potentially userPassword hashes and other sensitive data.
Affected Products: 389-ds-base
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2091781'}]
CVE State: PUBLISHED
Explain CVE-2022-1950
The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
Affected Products: Youzify – BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4352283f-dd43-4827-b417-0c55d0f4637d'}]
CVE State: PUBLISHED
Explain CVE-2022-1951
The core plugin for kitestudio WordPress plugin before 2.3.1 does not sanitise and escape some parameters before outputting them back in a response of an AJAX action, available to both unauthenticated and authenticated users when a premium theme from the vendor is active, leading to a Reflected Cross-Site Scripting.
Affected Products: core plugin for kitestudio themes
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f56f7244-e8ec-4a87-9419-643bc13b45a0'}]
CVE State: PUBLISHED
Explain CVE-2022-1952
The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.
Affected Products: Free Booking Plugin for Hotels, Restaurant and Car Rental – eaSYNC
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ecf61d17-8b07-4cb6-93a8-64c2c4fbbe04'}]
CVE State: PUBLISHED
Explain CVE-2022-1953
The Product Configurator for WooCommerce WordPress plugin before 1.2.32 suffers from an arbitrary file deletion vulnerability via an AJAX action, accessible to unauthenticated users, which accepts user input that is being used in a path and passed to unlink() without validation first
Affected Products: Product Configurator for WooCommerce
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b66d6682-edbc-435f-a73a-dced32a32770'}]
CVE State: PUBLISHED
Explain CVE-2022-1954
A Regular Expression Denial of Service vulnerability in GitLab CE/EE affecting all versions from 1.0.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 allows an attacker to make a GitLab instance inaccessible via specially crafted web server response headers
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/358160'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1531958'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1954.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1955
Session 1.13.0 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.
Affected Products: Session
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://fluidattacks.com/advisories/tempest/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/oxen-io/session-android/pull/897'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/oxen-io/session-android'}]
CVE State: PUBLISHED
Explain CVE-2022-1956
The Shortcut Macros WordPress plugin through 1.3 does not have authorisation and CSRF checks in place when updating its settings, which could allow any authenticated users, such as subscriber, to update them.
Affected Products: Shortcut Macros
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ef6d0393-0ce3-465c-84c8-53bf8c58958a'}]
CVE State: PUBLISHED
Explain CVE-2022-1957
The Comment License WordPress plugin before 1.4.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Comment License
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ad3f6f3d-e12c-4867-906c-73aa001c7351'}]
CVE State: PUBLISHED
Explain CVE-2022-1958
A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-201960.
Affected Products: FileCloud
References: [{'url': 'https://vuldb.com/?id.201960', 'tags': ['vdb-entry']}, {'url': 'https://vuldb.com/?ctiid.201960', 'tags': ['signature', 'permissions-required']}, {'url': 'https://www.filecloud.com/supportdocs/fcdoc/2v/server/security-advisories/2022-security-advisories/advisory-2022-06-01-potential-unauthorized-data-access-when-using-network-folders-with-ntfs-permissions', 'tags': ['related']}, {'url': 'https://www.scip.ch/?news.20220615', 'tags': ['related']}]
CVE State: PUBLISHED
Explain CVE-2022-1959
AppLock version 7.9.29 allows an attacker with physical access to the device to bypass biometric authentication. This is possible because the application did not correctly implement fingerprint validations.
Affected Products: AppLock - Fingerprint
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://fluidattacks.com/advisories/walker/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.spsoftmobile.com/'}]
CVE State: PUBLISHED
Explain CVE-2022-1960
The MyCSS WordPress plugin through 1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: MyCSS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bc97dd57-e9f6-4bc3-a4c2-40303786ae4a'}]
CVE State: PUBLISHED
Explain CVE-2022-1961
The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the `gtm4wp-options[scroller-contentid]` parameter found in the `~/public/frontend.php` file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Affected Products: Google Tag Manager for WordPress (GTM4WP) 
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/Xib3rR4dAr/02a21cd0ea0b7bf586131c5eebb69f1d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2732977%40duracelltomi-google-tag-manager&new=2732977%40duracelltomi-google-tag-manager&sfp_email=&sfph_mail='}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1961'}]
CVE State: PUBLISHED
Explain CVE-2022-1962
Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an attacker to cause a panic due to stack exhaustion via deeply nested types or declarations.
Affected Products: go/parser
References: [{'url': 'https://go.dev/cl/417063'}, {'url': 'https://go.googlesource.com/go/+/695be961d57508da5a82217f7415200a11845879'}, {'url': 'https://go.dev/issue/53616'}, {'url': 'https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE'}, {'url': 'https://pkg.go.dev/vuln/GO-2022-0515'}]
CVE State: PUBLISHED
Explain CVE-2022-1963
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4 before 14.10.5, all versions starting from 15.0 before 15.0.4, all versions starting from 15.1 before 15.1.1. GitLab reveals if a user has enabled two-factor authentication on their account in the HTML source, to unauthenticated users.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/352210'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1470023'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1963.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1964
The Easy SVG Support WordPress plugin before 3.3.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
Affected Products: Easy SVG Support
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/52cf7e3c-2a0c-45c4-be27-be87424f1338'}]
CVE State: PUBLISHED
Explain CVE-2022-1965
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.
Affected Products: Runtime Toolkit
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download='}]
CVE State: PUBLISHED
Explain CVE-2022-1967
The WP Championship WordPress plugin before 9.3 is lacking CSRF checks in various places, allowing attackers to make a logged in admin perform unwanted actions, such as create and delete arbitrary teams as well as update the plugin's settings. Due to the lack of sanitisation and escaping, it could also lead to Stored Cross-Site Scripting issues
Affected Products: WP Championship
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/02d25736-c796-49bd-b774-66e0e3fcf4c9'}]
CVE State: PUBLISHED
Explain CVE-2022-1968
Use After Free in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/949090e5-f4ea-4edf-bd79-cd98f0498a5b'}, {'url': 'https://github.com/vim/vim/commit/409510c588b1eec1ae33511ae97a21eb8e110895'}, {'name': '[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1969
The Mobile browser color select plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing or incorrect nonce validation on the admin_update_data() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Products: Mobile browser color select
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1969'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/browser/mobile-browser-color-select/trunk/mobile-browser-color-select.php#L62'}]
CVE State: PUBLISHED
Explain CVE-2022-1970
keycloak 18.0.0: open redirect in auth endpoint via the redirect_uri parameter.
Affected Products: Keycloak
References: [{'tags': ['vdb-entry', 'x_redhatRef'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1970'}, {'name': 'RHBZ#2092434', 'tags': ['issue-tracking', 'x_redhatRef'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2092434'}]
CVE State: PUBLISHED
Explain CVE-2022-1971
The NextCellent Gallery WordPress plugin through 1.9.35 does not sanitise and escape some of its image settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected Products: NextCellent Gallery – NextGEN Legacy
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1bffbbef-7876-43a6-9cb0-6e09bb4ff2b0'}]
CVE State: PUBLISHED
Explain CVE-2022-1973
A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem.
Affected Products: kernel
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2092542'}, {'url': 'https://security.netapp.com/advisory/ntap-20230120-0001/'}]
CVE State: PUBLISHED
Explain CVE-2022-1974
A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.
Affected Products: Linux kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/da5c0f119203ad9728920456a0f52a6d850c01cd'}]
CVE State: PUBLISHED
Explain CVE-2022-1975
There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.
Affected Products: Linux kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/4071bf121d59944d5cd2238de0642f3d7995a997'}]
CVE State: PUBLISHED
Explain CVE-2022-1976
A flaw was found in the Linux kernel’s implementation of IO-URING. This flaw allows an attacker with local executable permission to create a string of requests that can cause a use-after-free flaw within the kernel. This issue leads to memory corruption and possible privilege escalation.
Affected Products: kernel
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2092549'}, {'url': 'https://security.netapp.com/advisory/ntap-20230214-0005/'}]
CVE State: PUBLISHED
Explain CVE-2022-1977
The Import Export All WordPress Images, Users & Post Types WordPress plugin before 6.5.3 does not fully validate the file to be imported via an URL before making an HTTP request to it, which could allow high privilege users such as admin to perform Blind SSRF attacks
Affected Products: Import Export All WordPress Images, Users & Post Types
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1b640519-75e1-48cb-944e-b9bff9de6d3d'}]
CVE State: PUBLISHED
Explain CVE-2022-1979
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been declared as problematic. This vulnerability affects p=contact. The manipulation of the Message textbox with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely but requires authentication. Exploit details have been disclosed to the public.
Affected Products: Product Show Room Site
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Product%20Show%20Room%20Site/%27Message%27%20Stored%20Cross-Site%20Scripting%28XSS%29.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.200950'}]
CVE State: PUBLISHED
Explain CVE-2022-1980
A vulnerability was found in SourceCodester Product Show Room Site 1.0. It has been rated as problematic. This issue affects the file /admin/?page=system_info/contact_info. The manipulation of the textbox Telephone with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely but requires authentication. Exploit details have been disclosed to the public.
Affected Products: Product Show Room Site
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Product%20Show%20Room%20Site/%27Telephone%27%20Stored%20Cross-Site%20Scripting%28XSS%29.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.200951'}]
CVE State: PUBLISHED
Explain CVE-2022-1981
An issue has been discovered in GitLab EE affecting all versions starting from 12.2 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. In GitLab, if a group enables the setting to restrict access to users belonging to specific domains, that allow-list may be bypassed if a Maintainer uses the 'Invite a group' feature to invite a group that has members that don't comply with domain allow-list.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/354791'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1501733'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1981.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1982
Uncontrolled resource consumption in Mattermost version 6.6.0 and earlier allows an authenticated attacker to crash the server via a crafted SVG attachment on a post.
Affected Products: Mattermost
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://mattermost.com/security-updates/'}]
CVE State: PUBLISHED
Explain CVE-2022-1983
Incorrect authorization in GitLab EE affecting all versions from 10.7 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1, allowed an attacker already in possession of a valid Deploy Key or a Deploy Token to misuse it from any location to access Container Registries even when IP address restrictions were configured.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/363651'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1983.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1984
This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.
Affected Products: HYPR Windows WFA
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.hypr.com/security-advisories/'}]
CVE State: PUBLISHED
Explain CVE-2022-1985
The Download Manager Plugin for WordPress is vulnerable to reflected Cross-Site Scripting in versions up to, and including 3.2.42. This is due to insufficient input sanitization and output escaping on the 'frameid' parameter found in the ~/src/Package/views/shortcode-iframe.php file.
Affected Products: Download Manager
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2736071%40download-manager&new=2736071%40download-manager&sfp_email=&sfph_mail='}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1985'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/blog/2022/06/security-vulnerability-download-manager-plugin/'}]
CVE State: PUBLISHED
Explain CVE-2022-1986
OS Command Injection in GitHub repository gogs/gogs prior to 0.12.9.
Affected Products: gogs/gogs
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/776e8f29-ff5e-4501-bb9f-0bd335007930'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/gogs/gogs/commit/38aff73251cc46ced96dd608dab6190415032a82'}]
CVE State: PUBLISHED
Explain CVE-2022-1987
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Affected Products: bfabiszewski/libmobi
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/e8197737-7557-443e-a59f-2a86e8dda75f'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/bfabiszewski/libmobi/commit/612562bc1ea38f1708b044e7a079c47a05b1291d'}]
CVE State: PUBLISHED
Explain CVE-2022-1988
Cross-site Scripting (XSS) - Generic in GitHub repository neorazorx/facturascripts prior to 2022.09.
Affected Products: neorazorx/facturascripts
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/7882a35a-b27e-4d7e-9fcc-e9e009d0b01c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/neorazorx/facturascripts/commit/93fc65ced3847a8e0837561e9fdfa0dbace2cfcb'}]
CVE State: PUBLISHED
Explain CVE-2022-1989
All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.
Affected Products: CODESYS Visualization
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download='}]
CVE State: PUBLISHED
Explain CVE-2022-1990
The Nested Pages WordPress plugin before 3.1.21 does not escape and sanitize the some of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltered_html is disallowed
Affected Products: Nested Pages
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/42f1bf1f-95a8-41ee-a637-88deb80ab870'}]
CVE State: PUBLISHED
Explain CVE-2022-1991
A vulnerability classified as problematic has been found in Fast Food Ordering System 1.0. Affected is the file Master.php of the Master List. The manipulation of the argument Description with the input foo "><img src="" onerror="alert(document.cookie)"> leads to cross site scripting. It is possible to launch the attack remotely but it requires authentication. Exploit details have been disclosed to the public.
Affected Products: Fast Food Ordering System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://cyberthoth.medium.com/fast-food-ordering-system-1-0-cross-site-scripting-7927f4b1edd6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.201276'}]
CVE State: PUBLISHED
Explain CVE-2022-1992
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.
Affected Products: gogs/gogs
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2e8cdc57-a9cf-46ae-9088-87f09e6c90ab'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/gogs/gogs/commit/2ca014250fbf0bba94c914d9e43b1f6d8eca3bb0'}]
CVE State: PUBLISHED
Explain CVE-2022-1993
Path Traversal in GitHub repository gogs/gogs prior to 0.12.9.
Affected Products: gogs/gogs
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/22f9c074-cf60-4c67-b5c4-72fdf312609d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/gogs/gogs/commit/9bf748b6c4c9a17d3aa77f6b9abcfae65451febf'}]
CVE State: PUBLISHED
Explain CVE-2022-1994
The Login With OTP Over SMS, Email, WhatsApp and Google Authenticator WordPress plugin before 1.0.8 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
Affected Products: Login With OTP Over SMS, Email, WhatsApp and Google Authenticator
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/114d94be-b567-4b4b-9a44-f2c05cdbe18e'}]
CVE State: PUBLISHED
Explain CVE-2022-1995
The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)
Affected Products: Malware Scanner
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/62fb399d-3327-45d0-b10f-769d2d164903'}]
CVE State: PUBLISHED
Explain CVE-2022-1996
Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.
Affected Products: emicklei/go-restful
References: [{'url': 'https://huntr.dev/bounties/be837427-415c-4d8c-808b-62ce20aa84f1'}, {'url': 'https://github.com/emicklei/go-restful/commit/fd3c327a379ce08c68ef18765bdc925f5d9bad10'}, {'name': 'FEDORA-2022-185697ef56', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OBDD3Q23RCGAGHIXUCWBU6N3S4RNAKXB/'}, {'name': 'FEDORA-2022-589a0ad690', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/575BLJ3Y2EQBRNTFR2OSQQ6L2W6UCST3/'}, {'name': 'FEDORA-2022-fae3ecee19', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZY2SLWOQR4ZURQ7UBRZ7JIX6H6F5JHJR/'}, {'name': 'FEDORA-2022-ba365d3703', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z55VUVGO7E5PJFXIOVAY373NZRHBNCI5/'}, {'name': 'FEDORA-2022-30c5ed5625', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RQXU752ALW53OJAF5MG3WMR5CCZVLWW6/'}, {'url': 'https://security.netapp.com/advisory/ntap-20220923-0005/'}, {'name': 'FEDORA-2023-6550d9323b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W56PP46JVZEKCANBKXFKRVSBBRRMCY6V/'}, {'name': 'FEDORA-2023-4e2068ba5d', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZGQKWD6SE75PFBPFVSZYAKAVXKBZXKWS/'}, {'name': 'FEDORA-2023-c9b2182a4e', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SO5QC2JFW2PXBWAE27OYYYL5SPFUBHTY/'}]
CVE State: PUBLISHED
Explain CVE-2022-1997
Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.
Affected Products: francoisjacquet/rosariosis
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/28861ae9-7b09-45b7-a003-eccf903db71d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/francoisjacquet/rosariosis/commit/6b22c0b5b40fad891c8cf9e7eeff3e42a35c0bf8'}]
CVE State: PUBLISHED
Explain CVE-2022-1998
A use after free in the Linux kernel File System notify functionality was found in the way user triggers copy_info_records_to_user() call to fail in copy_event_to_user(). A local user could use this flaw to crash the system or potentially escalate their privileges on the system.
Affected Products: Kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/notify/fanotify/fanotify_user.c?h=v5.17&id=ee12595147ac1fbfb5bcb23837e26dd58d94b15d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://seclists.org/oss-sec/2022/q1/99'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220707-0009/'}]
CVE State: PUBLISHED
Explain CVE-2022-1999
An issue has been discovered in GitLab CE/EE affecting all versions from 8.13 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1. Under certain conditions, using the REST API an unprivileged user was able to change labels description.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/357963'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1999.json'}]
CVE State: PUBLISHED
Explain CVE-2023-0001
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then use to execute privileged cytool commands that disable or uninstall the agent.
Affected Products: Cortex XDR agent
References: [{'url': 'https://security.paloaltonetworks.com/CVE-2023-0001'}]
CVE State: PUBLISHED
Explain CVE-2023-0002
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.

Affected Products: Cortex XDR agent
References: [{'url': 'https://security.paloaltonetworks.com/CVE-2023-0002'}]
CVE State: PUBLISHED
Explain CVE-2023-0003
A file disclosure vulnerability in the Palo Alto Networks Cortex XSOAR server software enables an authenticated user with access to the web interface to read local files from the server.

Affected Products: Cortex XSOAR
References: [{'url': 'https://security.paloaltonetworks.com/CVE-2023-0003'}, {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VEEQIN5242K5NBE2CZ4DYTNA5B4YTYE5/'}, {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UEJWL67XR67JAGEL2ZK22NA3BRKNMZNY/'}, {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VKFMKD4MJZIKFQJAAJ4VZ2FHIJ764A76/'}, {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HMEELCREWMRT6NS7HWXLA6XFLLMO36HE/'}]
CVE State: PUBLISHED
Explain CVE-2023-0004
A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges.

These files can include logs and system components that impact the integrity and availability of PAN-OS software.
Affected Products: PAN-OS
References: [{'url': 'https://security.paloaltonetworks.com/CVE-2023-0004'}]
CVE State: PUBLISHED
Explain CVE-2023-0007
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software on Panorama appliances enables an authenticated read-write administrator to store a JavaScript payload in the web interface that will execute in the context of another administrator’s browser when viewed.

Affected Products: PAN-OS
References: [{'url': 'https://security.paloaltonetworks.com/CVE-2023-0007'}]
CVE State: PUBLISHED
Explain CVE-2023-0010
A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software can allow a JavaScript payload to be executed in the context of an authenticated Captive Portal user’s browser when they click on a specifically crafted link.

Affected Products: PAN-OS
References: [{'url': 'https://security.paloaltonetworks.com/CVE-2023-0010'}]
CVE State: PUBLISHED
Explain CVE-2023-0012
In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAP_LocaAdmin are denied the ability to logon locally by security policy so that this can only occur if the system has already been compromised.
Affected Products: Host Agent (Windows)
References: [{'url': 'https://launchpad.support.sap.com/#/notes/3276120'}, {'url': 'https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html'}]
CVE State: PUBLISHED