Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2022-1834
When displaying the sender of an email, and the sender name contained the Braille Pattern Blank space character multiple times, Thunderbird would have displayed all the spaces. This could have been used by an attacker to send an email message with the attacker's digital signature, that was shown with an arbitrary sender email address chosen by the attacker. If the sender name started with a false email address, followed by many Braille space characters, the attacker's email address was not visible. Because Thunderbird compared the invisible sender address with the signature's email address, if the signing key or certificate was accepted by Thunderbird, the email was shown as having a valid digital signature. This vulnerability affects Thunderbird < 91.10.
Affected Products: Thunderbird
References: [{'url': 'https://www.mozilla.org/security/advisories/mfsa2022-22/'}, {'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1767816'}]
CVE State: PUBLISHED
Explain CVE-2022-1837
A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php phpinfo();?> leads to code execution. The attack may be launched remotely but demands an authentication. Exploit details have been disclosed to the public.
Affected Products: Home Clean Services Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20Services%20Management%20System/HCS_add_register.php_File_Upload_Getshell.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.200582'}]
CVE State: PUBLISHED
Explain CVE-2022-1838
A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'/**/AND/**/(SELECT/**/5383/**/FROM/**/(SELECT(SLEEP(5)))JPeh)/**/AND/**/'frfq%'='frfq leads to sql injection. It is possible to initiate the attack remotely but it requires authentication. Exploit details have been disclosed to the public.
Affected Products: Home Clean Services Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20Services%20Management%20System/HCS_admin_SQL_Inject.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.200583'}]
CVE State: PUBLISHED
Explain CVE-2022-1839
A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'/**/AND/**/(SELECT/**/5383/**/FROM/**/(SELECT(SLEEP(2)))JPeh)/**/AND/**/'frfq%'='frfq leads to sql injection. The attack can be initiated remotely but it requires authentication. Exploit details have been disclosed to the public.
Affected Products: Home Clean Services Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20Services%20Management%20System/HCS_login_email_SQL_injection.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.200584'}]
CVE State: PUBLISHED
Explain CVE-2022-1840
A vulnerability, which was classified as problematic, has been found in Home Clean Services Management System 1.0. This issue affects register.php?link=registerand. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely but demands authentication. Exploit details have been disclosed to the public.
Affected Products: Home Clean Services Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20Services%20Management%20System/Home%20Clean%20Services%20Management%20System%20Stored%20Cross-Site%20Scripting%28XSS%29.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.200585'}]
CVE State: PUBLISHED
Explain CVE-2022-1841
In subsys/net/ip/tcp.c , function tcp_flags , when the incoming parameter flags is ECN or CWR , the buf will out-of-bounds write a byte zero.
Affected Products: zephyr
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-5c3j-p8cr-2pgh'}]
CVE State: PUBLISHED
Explain CVE-2022-1842
The OpenBook Book Data WordPress plugin through 3.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well
Affected Products: OpenBook Book Data
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/77aafeb9-af80-490a-b3d7-4fa973bab61c'}]
CVE State: PUBLISHED
Explain CVE-2022-1843
The MailPress WordPress plugin through 7.2.1 does not have CSRF checks in various places, which could allow attackers to make a logged in admin change the settings, purge log files and more via CSRF attacks
Affected Products: MailPress
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/aa59f811-2375-4593-93d4-f587f9870ed1'}]
CVE State: PUBLISHED
Explain CVE-2022-1844
The WP Sentry WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well
Affected Products: WP Sentry
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f0b0baac-7f44-44e1-af73-5a72b967858d'}]
CVE State: PUBLISHED
Explain CVE-2022-1845
The WP Post Styling WordPress plugin before 1.3.1 does not have CSRF checks in various actions, which could allow attackers to make a logged in admin delete plugin's data, update the settings, add new entries and more via CSRF attacks
Affected Products: WP Post Styling
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6ee3e9e2-ff57-41c4-8cc5-b258801a8a02'}]
CVE State: PUBLISHED
Explain CVE-2022-1846
The Tiny Contact Form WordPress plugin through 0.7 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Tiny Contact Form
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/5fa5838e-4843-4d9c-9884-e3ebbf56fc6a'}]
CVE State: PUBLISHED
Explain CVE-2022-1847
The Rotating Posts WordPress plugin through 1.11 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Rotating Posts
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d34ed713-4cca-4cef-b431-f132f1b10aa6'}]
CVE State: PUBLISHED
Explain CVE-2022-1848
Business Logic Errors in GitHub repository erudika/para prior to 1.45.11.
Affected Products: erudika/para
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8dfe0877-e44b-4a1a-8eee-5c03c93ae90a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/erudika/para/commit/fa677c629842df60099daa9c23bd802bc41b48d1'}]
CVE State: PUBLISHED
Explain CVE-2022-1849
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
Affected Products: filegator/filegator
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/881f8f36-d5c8-470d-8261-f109e6d5db4b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/filegator/filegator/commit/fcd3995f64f5dfc6a4c2c059cc22a2fef1e81225'}]
CVE State: PUBLISHED
Explain CVE-2022-1850
Path Traversal in GitHub repository filegator/filegator prior to 7.8.0.
Affected Products: filegator/filegator
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/07755f07-a412-4911-84a4-2f8c03c8f7ce'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/filegator/filegator/commit/6e2b68f17f48cdc1d6a4a93a2369d2069fe64989'}]
CVE State: PUBLISHED
Explain CVE-2022-1851
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/f8af901a-9a46-440d-942a-8f815b59394d'}, {'url': 'https://github.com/vim/vim/commit/78d52883e10d71f23ab72a3d8b9733b00da8c9ad'}, {'name': 'FEDORA-2022-5ce148636b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/'}, {'name': 'FEDORA-2022-d94440bf0e', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/'}, {'name': 'FEDORA-2022-bb2daad935', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/'}, {'name': '[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1852
A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Intel CPU.
Affected Products: kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/fee060cd52d69c114b62d1a2948ea9648b5131f9'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2089815'}]
CVE State: PUBLISHED
Explain CVE-2022-1853
Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1324864'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1854
Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1320024'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1855
Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1228661'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1856
Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension or specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1323239'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1857
Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1227995'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1858
Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1314310'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1859
Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1322744'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1860
Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1297209'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1861
Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1316846'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1862
Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1236325'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1863
Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1292870'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1864
Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1320624'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1865
Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1289192'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1866
Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific user interactions.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1292264'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1867
Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via a crafted clipboard content.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1315563'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1868
Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1301203'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1869
Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1309467'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1870
Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1323236'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1871
Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1308199'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1872
Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1310461'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1873
Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1305394'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1874
Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1251588'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1875
Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1306443'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1876
Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_24.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1313600'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1881
In affected versions of Octopus Server an Insecure Direct Object Reference vulnerability exists where it is possible for a user to download Project Exports from a Project they do not have permissions to access. This vulnerability only impacts projects within the same Space.
Affected Products: Octopus Server
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://advisories.octopus.com/post/2022/sa2022-06/'}]
CVE State: PUBLISHED
Explain CVE-2022-1882
A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected Products: kernel
References: [{'url': 'https://lore.kernel.org/lkml/20220507115605.96775-1-tcs.kernel%40gmail.com/T/'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2089701'}, {'url': 'https://security.netapp.com/advisory/ntap-20220715-0002/'}]
CVE State: PUBLISHED
Explain CVE-2022-1883
SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0.
Affected Products: camptocamp/terraboard
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a25d15bd-cd23-487e-85cd-587960f1b9e7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/camptocamp/terraboard/commit/2a5dbaac015dc0714b41a59995e24f5767f89ddc'}]
CVE State: PUBLISHED
Explain CVE-2022-1885
The Cimy Header Image Rotator WordPress plugin through 6.1.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Cimy Header Image Rotator
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8416cbcf-086d-42ff-b2a4-f3954c8ff0c8'}]
CVE State: PUBLISHED
Explain CVE-2022-1886
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/fa0ad526-b608-45b3-9ebc-f2b607834d6a'}, {'url': 'https://github.com/vim/vim/commit/2a585c85013be22f59f184d49612074fd9b115d7'}, {'name': 'FEDORA-2022-bb2daad935', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1887
The search term could have been specified externally to trigger SQL injection. This vulnerability affects Firefox for iOS < 101.
Affected Products: Firefox for iOS
References: [{'url': 'https://www.mozilla.org/security/advisories/mfsa2022-23/'}, {'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1767205'}]
CVE State: PUBLISHED
Explain CVE-2022-1888
Alpha7 PC Loader (All versions) is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code.
Affected Products: Alpha7 PC Loader
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-151-01'}]
CVE State: PUBLISHED
Explain CVE-2022-1889
The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed
Affected Products: Newsletter – Send awesome emails from WordPress
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ee3832e2-ce40-4063-a23e-44c7f7f5f46a'}]
CVE State: PUBLISHED
Explain CVE-2022-1893
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository polonel/trudesk prior to 1.2.3.
Affected Products: polonel/trudesk
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a1cfe61b-5248-4a73-9a80-0b764edc9b26'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/ae904d37eaa38bffebfbfe8e949c0385c63e3263'}]
CVE State: PUBLISHED
Explain CVE-2022-1894
The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfiltred_html is disallowed
Affected Products: Popup Builder – Create highly converting, mobile friendly marketing popups.
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/68af14ef-ca66-40d6-a1e5-09f74e2cd971'}]
CVE State: PUBLISHED
Explain CVE-2022-1895
The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction mode, which could allow attackers to make a logged in admin perform such action via a CSRF attack
Affected Products: underConstruction
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bd9ef7e0-ebbb-4b91-8c58-265218a3c536'}]
CVE State: PUBLISHED
Explain CVE-2022-1896
The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own HTML" setting before outputting it, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiletred_html capability is disallowed.
Affected Products: underConstruction
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3e8bd875-2435-4a15-8ee8-8a00882b499c'}]
CVE State: PUBLISHED
Explain CVE-2022-1897
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/82c12151-c283-40cf-aa05-2e39efa89118'}, {'url': 'https://github.com/vim/vim/commit/338f1fc0ee3ca929387448fe464579d6113fa76a'}, {'name': 'FEDORA-2022-5ce148636b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/'}, {'name': 'FEDORA-2022-d94440bf0e', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/'}, {'name': 'FEDORA-2022-bb2daad935', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1898
Use After Free in GitHub repository vim/vim prior to 8.2.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/45aad635-c2f1-47ca-a4f9-db5b25979cea'}, {'url': 'https://github.com/vim/vim/commit/e2fa213cf571041dbd04ab0329303ffdc980678a'}, {'name': 'FEDORA-2022-5ce148636b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMFHBC5OQXDPV2SDYA2JUQGVCPYASTJB/'}, {'name': 'FEDORA-2022-d94440bf0e', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OZSLFIKFYU5Y2KM5EJKQNYHWRUBDQ4GJ/'}, {'name': 'FEDORA-2022-bb2daad935', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TYNK6SDCMOLQJOI3B4AOE66P2G2IH4ZM/'}, {'name': '[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1899
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8a3dc5cb-08b3-4807-82b2-77f08c137a04'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/193f4fe01d7f626e2ea937450f2e0c4604420e9d'}]
CVE State: PUBLISHED
Explain CVE-2022-1900
The Copify plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.0. This is due to missing nonce validation on the CopifySettings page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Products: Copify
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1900'}]
CVE State: PUBLISHED
Explain CVE-2022-1902
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate their privileges.
Affected Products: Red Hat Advanced Cluster Security for Kubernetes
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2090957'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1902'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/stackrox/stackrox/pull/1803'}]
CVE State: PUBLISHED
Explain CVE-2022-1903
The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password of arbitrary users by knowing their username
Affected Products: ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/28d26aa6-a8db-4c20-9ec7-39821c606a08'}]
CVE State: PUBLISHED
Explain CVE-2022-1904
The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting
Affected Products: Pricing Tables WordPress Plugin – Easy Pricing Tables
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/92215d07-d129-49b4-a838-0de1a944c06b'}]
CVE State: PUBLISHED
Explain CVE-2022-1905
The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
Affected Products: Events Made Easy
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ff5fd894-aff3-400a-8eec-fad9d50f788e'}]
CVE State: PUBLISHED
Explain CVE-2022-1906
The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled.
Affected Products: Copyright Proof
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/af4f459e-e60b-4384-aad9-0dc18aa3b338'}]
CVE State: PUBLISHED
Explain CVE-2022-1907
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Affected Products: bfabiszewski/libmobi
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4eb0fa3e-4480-4fb5-8ec0-fbcd71de6012'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba'}]
CVE State: PUBLISHED
Explain CVE-2022-1908
Buffer Over-read in GitHub repository bfabiszewski/libmobi prior to 0.11.
Affected Products: bfabiszewski/libmobi
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/bfabiszewski/libmobi/commit/1e0378e6f9e4ae415cedc9eb10850888897c5dba'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a7436e88-0488-4bd4-816f-2e2c803e93e8'}]
CVE State: PUBLISHED
Explain CVE-2022-1909
Cross-site Scripting (XSS) - Stored in GitHub repository causefx/organizr prior to 2.1.2200.
Affected Products: causefx/organizr
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8f83eb8f-51a8-41c0-bc7d-077f48faebdc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/d5245cab1f4b9180856330266911d6ceda14858b'}]
CVE State: PUBLISHED
Explain CVE-2022-1910
The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Affected Products: Shortcodes and extra features for Phlox theme
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8afe1638-66fa-44c7-9d02-c81573193b47'}]
CVE State: PUBLISHED
Explain CVE-2022-1911
Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system.


Affected Products: M-Files Server
References: [{'url': 'https://www.m-files.com/about/trust-center/security-advisories/cve-2022-1911/'}]
CVE State: PUBLISHED
Explain CVE-2022-1912
The Button Widget Smartsoft plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.1. This is due to missing nonce validation on the smartsoftbutton_settings page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Products: Button Widget Smartsoft
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/browser/smartsoftbutton-widget-de-botones-de-chat/trunk/admin/pages/settings.php#L60'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1912'}]
CVE State: PUBLISHED
Explain CVE-2022-1913
The Add Post URL WordPress plugin through 2.1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping
Affected Products: Add Post URL
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/2cafef43-e64a-4897-8c41-f0ed473d7ead'}]
CVE State: PUBLISHED
Explain CVE-2022-1914
The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due to the lack of sanitisation and escaping as well
Affected Products: Clean-Contact
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8c8dad47-8591-47dc-b84f-8c5cb18b2d78'}]
CVE State: PUBLISHED
Explain CVE-2022-1915
The WP Zillow Review Slider WordPress plugin before 2.4 does not escape a settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite)
Affected Products: WP Zillow Review Slider
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/c3c28edf-19bc-4f3a-b58e-f1c67557aa29'}]
CVE State: PUBLISHED
Explain CVE-2022-1916
The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected cross-Site Scripting
Affected Products: Active Products Tables for WooCommerce. Professional products tables for WooCommerce store 
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d16a0c3d-4318-4ecd-9e65-fc4165af8808'}]
CVE State: PUBLISHED
Explain CVE-2022-1918
The ToolBar to Share plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing nonce validation on the plugin_toolbar_comparte page. This makes it possible for unauthenticated attackers to update the plugins settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Affected Products: ToolBar to Share
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1918'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/browser/toolbar-to-share/trunk/toolbartoshare.php'}]
CVE State: PUBLISHED
Explain CVE-2022-1919
Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'url': 'https://crbug.com/1313709'}, {'name': 'GLSA-202208-08', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-08'}, {'name': 'FEDORA-2023-ea7128b5ce', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/'}]
CVE State: PUBLISHED
Explain CVE-2022-1920
Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential for arbitrary code execution through heap overwrite.
Affected Products: GStreamer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1226'}, {'name': '[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html'}, {'name': 'DSA-5204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5204'}]
CVE State: PUBLISHED
Explain CVE-2022-1921
Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execution through heap overwrite.
Affected Products: GStreamer
References: [{'url': 'https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1224'}, {'name': '[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html'}, {'name': 'DSA-5204', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2022/dsa-5204'}]
CVE State: PUBLISHED
Explain CVE-2022-1922
DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.
Affected Products: GStreamer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225'}, {'name': '[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html'}, {'name': 'DSA-5204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5204'}]
CVE State: PUBLISHED
Explain CVE-2022-1923
DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.
Affected Products: GStreamer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/1225'}, {'name': '[debian-lts-announce] 20220809 [SECURITY] [DLA 3069-1] gst-plugins-good1.0 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/08/msg00001.html'}, {'name': 'DSA-5204', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5204'}]
CVE State: PUBLISHED