Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2022-1404
Delta Electronics CNCSoft (All versions prior to 1.01.32) does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
Affected Products: CNCSoft
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01'}]
CVE State: PUBLISHED
Explain CVE-2022-1405
CNCSoft: All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible stack-based buffer overflow condition.
Affected Products: CNCSoft
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-01'}]
CVE State: PUBLISHED
Explain CVE-2022-1406
Improper input validation in GitLab CE/EE affecting all versions from 8.12 prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0 allows a Developer to read protected Group or Project CI/CD variables by importing a malicious project
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/353958'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1485381'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1406.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1407
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding a tracking campaign, and does not escape the campaign fields when outputting them In attributes. As a result, attackers could make a logged in admin add tracking campaign with XSS payloads in them via a CSRF attack
Affected Products: VikBooking Hotel Booking Engine & PMS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/19a9e266-daf6-4cc5-a300-2b5436b6d07d'}]
CVE State: PUBLISHED
Explain CVE-2022-1408
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before outputting them in attributes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Affected Products: VikBooking Hotel Booking Engine & PMS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/48dccf4c-07e0-4877-867d-f8f43aeb5705'}]
CVE State: PUBLISHED
Explain CVE-2022-1409
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code
Affected Products: VikBooking Hotel Booking Engine & PMS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1330f8f7-4a59-4e9d-acae-21656a4101fe'}]
CVE State: PUBLISHED
Explain CVE-2022-1410
OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute remote code on the device. This issue affects: Device42 CMDB version 18.01.00 and prior versions.
Affected Products: CMDB
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.bitdefender.com/blog/labs/a-red-team-perspective-on-the-device42-asset-management-appliance/'}]
CVE State: PUBLISHED
Explain CVE-2022-1411
Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data from the web application without that data being made safe to render in the browser and steals victim's cookie leads to account takeover.
Affected Products: yetiforcecompany/yetiforcecrm
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/75c7cf09-d118-4f91-9686-22b142772529'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yetiforcecompany/yetiforcecrm/commit/bf69c427260011ffca42f7b6935bb54080c54124'}]
CVE State: PUBLISHED
Explain CVE-2022-1412
The Log WP_Mail WordPress plugin through 0.1 saves sent email in a publicly accessible directory using predictable filenames, allowing any unauthenticated visitor to obtain potentially sensitive information like generated passwords.
Affected Products: Log WP_Mail
References: [{'url': 'https://wpscan.com/vulnerability/ee10f21f-4476-4f3d-85ed-94d438c61ec2', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2022-1413
Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 causes potentially sensitive integration properties to be disclosed in the web interface
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/353720'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1413.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1414
3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain access to sensitive information or conduct further attacks.
Affected Products: 3scale-amp-system
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2076794'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1414'}]
CVE State: PUBLISHED
Explain CVE-2022-1416
Missing sanitization of data in Pipeline error messages in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows for rendering of attacker controlled HTML tags and CSS styling
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/342988'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1362405'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1416.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1417
Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6, all versions starting from 14.9 before 14.9.4, and all versions starting from 14.10 before 14.10.1 allows non-project members to access contents of Project Members-only Wikis via malicious CI jobs
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/297282'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1075586'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1417.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1418
The Social Stickers WordPress plugin through 2.2.9 does not have CSRF checks in place when updating its Social Network settings, and does not escape some of these fields, which could allow attackers to make a logged-in admin change them and lead to Stored Cross-Site Scripting issues.
Affected Products: Social Stickers
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3851e61e-f462-4259-af0a-8d832809d559'}]
CVE State: PUBLISHED
Explain CVE-2022-1419
The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.
Affected Products: kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2077560'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}]
CVE State: PUBLISHED
Explain CVE-2022-1420
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/a4323ef8-90ea-4e1c-90e9-c778f0ecf326'}, {'url': 'https://github.com/vim/vim/commit/8b91e71441069b1dde9ac9ff9d9a829b1b4aecca'}, {'name': 'FEDORA-2022-e304fffd34', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6E457NYOIRWBJHKB7ON44UY5AVTG4HU/'}, {'name': 'FEDORA-2022-b605768c94', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KVPZVE2CIE2NGCHZDMEHPBWN3LK2UQAA/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1421
The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings including payment methods via a CSRF attack
Affected Products: Discy
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a7a24e8e-9056-4967-bcad-b96cc0c5b249'}]
CVE State: PUBLISHED
Explain CVE-2022-1422
The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into resetting the site settings back to defaults.
Affected Products: Discy
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/29aff4bf-1691-4dc1-a670-1f2c9a765a3b'}]
CVE State: PUBLISHED
Explain CVE-2022-1423
Improper access control in the CI/CD cache mechanism in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 allows a malicious actor with Developer privileges to perform cache poisoning leading to arbitrary code execution in protected branches
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/330047'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1182375'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1423.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1424
The Ask me WordPress theme before 6.8.2 does not perform CSRF checks for any of its AJAX actions, allowing an attacker to trick logged in users to perform various actions on their behalf on the site.
Affected Products: Ask me
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/147b4097-dec8-4542-b122-7b237db81c05'}]
CVE State: PUBLISHED
Explain CVE-2022-1425
The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the message_id of the wpqa_message_view ajax action belongs to the requesting user, leading to any user being able to read messages for any other users via a Insecure Direct Object Reference (IDOR) vulnerability.
Affected Products: WPQA Builder Plugin
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b110e2f7-4aa3-47b5-a8f2-0a7fe53cc467'}]
CVE State: PUBLISHED
Explain CVE-2022-1426
An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user that had some certain amount of information which allowed an user to authenticate without a personal access token.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/296866'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1070097'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1426.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1427
Out-of-bounds Read in mrb_obj_is_kind_of in in GitHub repository mruby/mruby prior to 3.2. # Impact: Possible arbitrary code execution if being exploited.
Affected Products: mruby/mruby
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/23b6f0a9-64f5-421e-a55f-b5b7a671f301'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/a4d97934d51cb88954cc49161dc1d151f64afb6b'}]
CVE State: PUBLISHED
Explain CVE-2022-1428
An issue has been discovered in GitLab affecting all versions before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was incorrectly verifying throttling limits for authenticated package requests which resulted in limits not being enforced.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/342481'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1428.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1429
SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data
Affected Products: pimcore/pimcore
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cfba30b4-85fa-4499-9160-cd6e3119310e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/523a735ab94f004459b84ffdfd3db784586bbd82'}]
CVE State: PUBLISHED
Explain CVE-2022-1430
Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0.
Affected Products: octoprint/octoprint
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/0cd30d71-1e32-4a0b-b4c3-faaa1907b541'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/octoprint/octoprint/commit/8087528e4a7ddd15c7d95ff662deb5ef7de90045'}]
CVE State: PUBLISHED
Explain CVE-2022-1431
An issue has been discovered in GitLab affecting all versions starting from 12.10 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly handling malicious requests to the PyPi API endpoint allowing the attacker to cause uncontrolled resource consumption.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/262724'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/996850'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1431.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1432
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0.
Affected Products: octoprint/octoprint
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cb545c63-a3c1-4d57-8f06-e4593ab389bf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/octoprint/octoprint/commit/6d259d7e6f5b0de9a1c762831537a386e53978d3'}]
CVE State: PUBLISHED
Explain CVE-2022-1433
An issue has been discovered in GitLab affecting all versions starting from 14.4 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. Missing invalidation of Markdown caching causes potential payloads from a previously exploitable XSS vulnerability (CVE-2022-1175) to persist and execute.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/357930'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1528829'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1433.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1434
The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such that the modified data would still pass the MAC integrity check. Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0 endpoint will always be rejected by the recipient and the connection will fail at that point. Many application protocols require data to be sent from the client to the server first. Therefore, in such a case, only an OpenSSL 3.0 server would be impacted when talking to a non-OpenSSL 3.0 client. If both endpoints are OpenSSL 3.0 then the attacker could modify data being sent in both directions. In this case both clients and servers could be affected, regardless of the application protocol. Note that in the absence of an attacker this bug means that an OpenSSL 3.0 endpoint communicating with a non-OpenSSL 3.0 endpoint will fail to complete the handshake when using this ciphersuite. The confidentiality of data is not impacted by this issue, i.e. an attacker cannot decrypt data that has been encrypted using this ciphersuite - they can only modify it. In order for this attack to work both endpoints must legitimately negotiate the RC4-MD5 ciphersuite. This ciphersuite is not compiled by default in OpenSSL 3.0, and is not available within the default provider or the default ciphersuite list. This ciphersuite will never be used if TLSv1.3 has been negotiated. In order for an OpenSSL 3.0 endpoint to use this ciphersuite the following must have occurred: 1) OpenSSL must have been compiled with the (non-default) compile time option enable-weak-ssl-ciphers 2) OpenSSL must have had the legacy provider explicitly loaded (either through application code or via configuration) 3) The ciphersuite must have been explicitly added to the ciphersuite list 4) The libssl security level must have been set to 0 (default is 1) 5) A version of SSL/TLS below TLSv1.3 must have been negotiated 6) Both endpoints must negotiate the RC4-MD5 ciphersuite in preference to any others that both endpoints have in common Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).
Affected Products: OpenSSL
References: [{'url': 'https://www.openssl.org/news/secadv/20220503.txt'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7d56a74a96828985db7354a55227a511615f732b'}, {'url': 'https://security.netapp.com/advisory/ntap-20220602-0009/'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf'}]
CVE State: PUBLISHED
Explain CVE-2022-1435
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
Affected Products: WPCargo Track & Trace
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ef5aa8a7-23a7-4ce0-bb09-d9c986386114'}]
CVE State: PUBLISHED
Explain CVE-2022-1436
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
Affected Products: WPCargo Track & Trace
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d5c6f894-6ad1-46f4-bd77-17ad9234cfc3'}]
CVE State: PUBLISHED
Explain CVE-2022-1437
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/af6c3e9e-b7df-4d80-b48f-77fdd17b4038'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/669a404b6d98d5db409a5ebadae4e94b34ef5136'}]
CVE State: PUBLISHED
Explain CVE-2022-1439
Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It's the only payload I found working, you might need to press "tab" but there is probably a paylaod that runs without user interaction.
Affected Products: microweber/microweber
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/86f6a762-0f3d-443d-a676-20f8496907e0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/ad3928f67b2cd4443f4323d858b666d35a919ba8'}]
CVE State: PUBLISHED
Explain CVE-2022-1440
Command Injection vulnerability in git-interface@2.1.1 in GitHub repository yarkeev/git-interface prior to 2.1.2. If both are provided by user input, then the use of a `--upload-pack` command-line argument feature of git is also supported for `git clone`, which would then allow for any operating system command to be spawned by the attacker.
Affected Products: yarkeev/git-interface
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cdc25408-d3c1-4a9d-bb45-33b12a715ca1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yarkeev/git-interface/commit/f828aa790016fee3aa667f7b44cf94bf0aa8c60d'}]
CVE State: PUBLISHED
Explain CVE-2022-1441
MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In this function, it allocates a buffer `str` with fixed length. However, content read from `bs` is controllable by user, so is the length, which causes a buffer overflow.
Affected Products: gpac
References: [{'url': 'https://github.com/gpac/gpac/issues/2175'}, {'url': 'https://github.com/gpac/gpac/commit/3dbe11b37d65c8472faf0654410068e5500b3adb'}, {'name': 'DSA-5411', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5411'}]
CVE State: PUBLISHED
Explain CVE-2022-1442
The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3.
Affected Products: Metform Elementor Contact Form Builder 
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset/2711944/metform/trunk/core/forms/action.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/Xib3rR4dAr/6e6c6e5fa1f8818058c7f03de1eda6bf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1442'}]
CVE State: PUBLISHED
Explain CVE-2022-1444
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service.
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/b438a940-f8a4-4872-b030-59bdd1ab72aa'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/14189710859c27981adb4c2c2aed2863c1859ec5'}]
CVE State: PUBLISHED
Explain CVE-2022-1445
Stored Cross Site Scripting vulnerability in the checked_out_to parameter in GitHub repository snipe/snipe-it prior to 5.4.3. The vulnerability is capable of stolen the user Cookie.
Affected Products: snipe/snipe-it
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/f4420149-5236-4051-a458-5d4f1d5b7abd'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/snipe/snipe-it/commit/f623d05d0c3487ae24c4f13907e4709484e5bf41'}]
CVE State: PUBLISHED
Explain CVE-2022-1451
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/229a2e0d-9e5c-402f-9a24-57fa2eb1aaa7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/0927ed3ae99444e7b47b84e43118deb10fe37529'}]
CVE State: PUBLISHED
Explain CVE-2022-1452
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c8f4c2de-7d96-4ad4-857a-c099effca2d6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/ecc44b6a2f18ee70ac133365de0e509d26d5e168'}]
CVE State: PUBLISHED
Explain CVE-2022-1453
The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5.
Affected Products: RSVPMaker
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/davidfcarr/rsvpmaker/commit/bfb189f49af7ab0d34499a2da772e3266f72167d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2714389%40rsvpmaker&new=2714389%40rsvpmaker&sfp_email=&sfph_mail='}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1453'}]
CVE State: PUBLISHED
Explain CVE-2022-1455
The Call Now Button WordPress plugin before 1.1.2 does not escape a parameter before outputting it back in an attribute of a hidden input, leading to a Reflected Cross-Site Scripting when the premium is enabled
Affected Products: Call Now Button
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8267046e-870e-4ccd-b920-340233ed3b93'}]
CVE State: PUBLISHED
Explain CVE-2022-1456
The Poll Maker WordPress plugin before 4.0.2 does not sanitise and escape some settings, which could allow high privilege users such as admin to perform Store Cross-Site Scripting attack even when unfiltered_html is disallowed
Affected Products: Poll Maker
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1f41fc5c-18d0-493d-9a7d-8b521ab49f85'}]
CVE State: PUBLISHED
Explain CVE-2022-1457
Store XSS in title parameter executing at EditUser Page & EditProducto page in GitHub repository neorazorx/facturascripts prior to 2022.04. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies, allowing them to perform any action allowed by the user account.
Affected Products: neorazorx/facturascripts
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8c80caa0-dc89-43f2-8f5f-db02d2669046'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/neorazorx/facturascripts/commit/b3e7527d1e100898c15fec067825b6bc738613df'}]
CVE State: PUBLISHED
Explain CVE-2022-1458
Stored XSS Leads To Session Hijacking in GitHub repository openemr/openemr prior to 6.1.0.1.
Affected Products: openemr/openemr
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/78674078-0796-4102-a81e-f699cd6981b0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/31f08005e53b17d1bc921d23f7ee774930ad416d'}]
CVE State: PUBLISHED
Explain CVE-2022-1459
Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1.
Affected Products: openemr/openemr
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/9023ca9b-a601-4e5d-8952-640c60d029f1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/8f8a97724c0e8fcc4096b4b30af9aaf064ada45a'}]
CVE State: PUBLISHED
Explain CVE-2022-1460
An issue has been discovered in GitLab affecting all versions starting from 9.2 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not performing correct authorizations on scheduled pipelines allowing a malicious user to run a pipeline in the context of another user.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/118782'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/755078'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1460.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1461
Non Privilege User can Enable or Disable Registered in GitHub repository openemr/openemr prior to 6.1.0.1.
Affected Products: openemr/openemr
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/690a8ec5-64fc-4180-9f1f-c3c599bae0a9'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/3af1f4a28a8df0e446043232214ed08cc8e0889d'}]
CVE State: PUBLISHED
Explain CVE-2022-1462
An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.
Affected Products: kernel
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2078466'}, {'name': '[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html'}, {'url': 'https://seclists.org/oss-sec/2022/q2/155'}]
CVE State: PUBLISHED
Explain CVE-2022-1463
The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode in versions up to, and including, 9.1. This could be exploited by subscriber-level users and above to call arbitrary PHP objects on a vulnerable site.
Affected Products: Booking Calendar
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/blog/2022/04/php-object-injection-in-booking-calendar-plugin/'}]
CVE State: PUBLISHED
Explain CVE-2022-1464
Stored xss bug in GitHub repository gogs/gogs prior to 0.12.7. As the repo is public , any user can view the report and when open the attachment then xss is executed. This bug allow executed any javascript code in victim account .
Affected Products: gogs/gogs
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/34a12146-3a5d-4efc-a0f8-7a3ae04b198d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/gogs/gogs/commit/bc77440b301ac8780698be91dff1ac33b7cee850'}]
CVE State: PUBLISHED
Explain CVE-2022-1465
The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.9 does not sanitise and escape a parameter before outputting it back in an attribute via an AJAX action, leading to a Reflected Cross-Site Scripting issue.
Affected Products: WPC Smart Wishlist for WooCommerce
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6781033a-f166-4198-874f-3e142854daf7'}]
CVE State: PUBLISHED
Explain CVE-2022-1466
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted.
Affected Products: rhsso
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2050228'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-076.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.syss.de/pentest-blog/fehlerhafte-autorisierung-bei-red-hat-single-sign-on-750ga-syss-2021-076'}]
CVE State: PUBLISHED
Explain CVE-2022-1467
Windows OS can be configured to overlay a “language bar” on top of any application. When this OS functionality is enabled, the OS language bar UI will be viewable in the browser alongside the AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere applications. It is possible to manipulate the Windows OS language bar to launch an OS command prompt, resulting in a context-escape from application into OS.
Affected Products: AVEVA InTouch Access Anywhere
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.aveva.com/en/support-and-success/cyber-security-updates/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-130-05'}]
CVE State: PUBLISHED
Explain CVE-2022-1468
On all versions of 17.0.x, 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x on F5 BIG-IP, an authenticated iControl REST user with at least guest role privileges can cause processing delays to iControl REST requests via undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected Products: BIG-IP
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.f5.com/csp/article/K15101402'}]
CVE State: PUBLISHED
Explain CVE-2022-1469
The FiboSearch WordPress plugin before 1.17.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Affected Products: FiboSearch – Ajax Search for WooCommerce
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/88869380-173d-4d4f-81d8-3c20add5f98d'}]
CVE State: PUBLISHED
Explain CVE-2022-1470
The Ultimate WooCommerce CSV Importer WordPress plugin through 2.0 does not sanitise and escape the imported data before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Affected Products: Ultimate WooCommerce CSV Importer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/13bb796f-7a17-47c9-a46f-a1d6ca4b6b91'}]
CVE State: PUBLISHED
Explain CVE-2022-1471
SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization. Deserializing yaml content provided by an attacker can lead to remote code execution. We recommend using SnakeYaml's SafeConsturctor when parsing untrusted content to restrict deserialization. We recommend upgrading to version 2.0 and beyond.

Affected Products: SnakeYAML
References: [{'url': 'https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2'}, {'url': 'https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479'}, {'url': 'https://github.com/mbechler/marshalsec'}, {'url': 'https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true'}, {'url': 'https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc'}]
CVE State: PUBLISHED
Explain CVE-2022-1472
The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection
Affected Products: Better Find and Replace
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/9c608b14-dc5e-469e-b97a-84696fae804c'}]
CVE State: PUBLISHED
Explain CVE-2022-1473
The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process periodically decodes certificates or keys its memory usage will expand without bounds and the process might be terminated by the operating system causing a denial of service. Also traversing the empty hash table entries will take increasingly more time. Typically such long lived processes might be TLS clients or TLS servers configured to accept client certificate authentication. The function was added in the OpenSSL 3.0 version thus older releases are not affected by the issue. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).
Affected Products: OpenSSL
References: [{'url': 'https://www.openssl.org/news/secadv/20220503.txt'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=64c85430f95200b6b51fe9475bd5203f7c19daf1'}, {'url': 'https://security.netapp.com/advisory/ntap-20220602-0009/'}, {'name': 'GLSA-202210-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-02'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf'}]
CVE State: PUBLISHED
Explain CVE-2022-1474
The WP Event Manager WordPress plugin before 3.1.28 does not sanitise and escape its search before outputting it back in an attribute on the event dashboard, leading to a Reflected Cross-Site Scripting
Affected Products: WP Event Manager – Easily Build your Calendar of Events!
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/2d821464-c502-4f71-afee-97b3dea16612'}]
CVE State: PUBLISHED
Explain CVE-2022-1475
An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when processing a specially crafted file.
Affected Products: FFmpeg
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://trac.ffmpeg.org/ticket/9651'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2076764'}]
CVE State: PUBLISHED
Explain CVE-2022-1476
The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~/lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users who have access to the site's secret key.
Affected Products: All-in-One WP Migration
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715609%40all-in-one-wp-migration&new=2715609%40all-in-one-wp-migration&sfp_email=&sfph_mail='}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1476'}]
CVE State: PUBLISHED
Explain CVE-2022-1477
Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1313905'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1478
Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1299261'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1479
Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1305190'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1481
Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1302949'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1482
Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1304987'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1483
Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1314754'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1484
Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1297429'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1485
Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1299743'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1486
Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1314616'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1487
Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1304368'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1488
Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1302959'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1489
Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1300561'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1490
Use after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1301840'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1491
Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1305706'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1492
Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1315040'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1493
Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_26.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1275414'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED