Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2022-1586
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.
Affected Products: pcre2
References: [{'name': 'FEDORA-2022-e56085ba31', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2077976%2C'}, {'url': 'https://github.com/PCRE2Project/pcre2/commit/50a51cb7e67268e6ad417eb07c9de9bfea5cc55a%2C'}, {'url': 'https://github.com/PCRE2Project/pcre2/commit/d4fa336fbcc388f89095b184ba6d99422cfc676c'}, {'name': 'FEDORA-2022-a3edad0ab6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/'}, {'name': 'FEDORA-2022-19f4c34184', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/'}, {'name': 'FEDORA-2022-9c9691d058', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/'}, {'url': 'https://security.netapp.com/advisory/ntap-20221028-0009/'}, {'name': '[debian-lts-announce] 20230316 [SECURITY] [DLA 3363-1] pcre2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1587
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the get_recurse_data_length() function of the pcre2_jit_compile.c file. This issue affects recursions in JIT-compiled regular expressions caused by duplicate data transfers.
Affected Products: pcre2
References: [{'name': 'FEDORA-2022-e56085ba31', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M2GLQQUEY5VFM57CFYXVIFOXN2HUZPDM/'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2077983%2C'}, {'url': 'https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0'}, {'name': 'FEDORA-2022-a3edad0ab6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KAX7767BCUFC7JMDGP7GOQ5GIZCAUGBB/'}, {'name': 'FEDORA-2022-19f4c34184', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXINO3KKI5DICQ45E2FKD6MKVMGJLEKJ/'}, {'name': 'FEDORA-2022-9c9691d058', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DWNG2NS3GINO6LQYUVC4BZLUQPJ3DYHA/'}, {'url': 'https://security.netapp.com/advisory/ntap-20221028-0009/'}, {'name': '[debian-lts-announce] 20230316 [SECURITY] [DLA 3363-1] pcre2 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/03/msg00014.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1589
The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings. The attacked could also be performed via a CSRF vector
Affected Products: Change wp-admin login
References: [{'url': 'https://wpscan.com/vulnerability/257f9e14-4f43-4852-8384-80c15d087633', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2022-1590
A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit has been disclosed to the public and may be used.
Affected Products: Bludit
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/joinia/webray.com.cn/blob/main/Bludit/Bluditreadme.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.199060'}]
CVE State: PUBLISHED
Explain CVE-2022-1591
The WordPress Ping Optimizer WordPress plugin before 2.35.1.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: WordPress Ping Optimizer
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b1a52c7e-3422-40dd-af5a-ea4c622a87aa'}]
CVE State: PUBLISHED
Explain CVE-2022-1592
Server-Side Request Forgery in scout in GitHub repository clinical-genomics/scout prior to v4.42. An attacker could make the application perform arbitrary requests to fishing steal cookie, request to private area, or lead to xss...
Affected Products: clinical-genomics/scout
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/352b39da-0f2e-415a-9793-5480cae8bd27'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/clinical-genomics/scout/commit/b0ef15f4737d0c801154c1991b52ff5cab4f5c83'}]
CVE State: PUBLISHED
Explain CVE-2022-1593
The Site Offline or Coming Soon WordPress plugin through 1.6.6 does not have CSRF check in place when updating its settings, and it also lacking sanitisation as well as escaping in some of them. As a result, attackers could make a logged in admin change them and put Cross-Site Scripting payloads in them via a CSRF attack
Affected Products: Site Offline or Coming Soon
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/67678666-402b-4010-ac56-7067a0f40185'}]
CVE State: PUBLISHED
Explain CVE-2022-1594
The HC Custom WP-Admin URL WordPress plugin through 1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, allowing them to change the login URL
Affected Products: HC Custom WP-Admin URL
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bb0efc5e-044b-47dc-9101-9aae40cdbaa5'}]
CVE State: PUBLISHED
Explain CVE-2022-1595
The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request
Affected Products: HC Custom WP-Admin URL
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0218c90c-8f79-4f37-9a6f-60cf2f47d47b'}]
CVE State: PUBLISHED
Explain CVE-2022-1596
Incorrect Permission Assignment for Critical Resource vulnerability in ABB REX640 PCL1, REX640 PCL2, REX640 PCL3 allows an authenticated attacker to launch an attack against the user database file and try to take control of an affected system node.
Affected Products: REX640 PCL1
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://search.abb.com/library/Download.aspx?DocumentID=2NGA001421'}]
CVE State: PUBLISHED
Explain CVE-2022-1597
The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks
Affected Products: WPQA Builder
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/faff9484-9fc7-4300-bdad-9cd8a30a9a4e'}]
CVE State: PUBLISHED
Explain CVE-2022-1598
The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.
Affected Products: WPQA Builder
References: [{'url': 'https://wpscan.com/vulnerability/0416ae2f-5670-4080-a88d-3484bb19d8c8', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2022-1599
The Admin Management Xtended WordPress plugin before 2.4.5 does not have CSRF checks in some of its AJAX actions, allowing attackers to make a logged users with the right capabilities to call them. This can lead to changes in post status (draft, published), slug, post date, comment status (enabled, disabled) and more.
Affected Products: Admin Management Xtended
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4a36e876-7e3b-4a81-9f16-9ff5fbb20dd6'}]
CVE State: PUBLISHED
Explain CVE-2022-1600
The YOP Poll WordPress plugin before 6.4.3 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations to vote in certain situations.
Affected Products: YOP Poll
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/2b7445fd-0992-47cd-9a48-f5f18d8171f7'}]
CVE State: PUBLISHED
Explain CVE-2022-1602
A potential security vulnerability has been identified in HP ThinPro 7.2 Service Pack 8 (SP8). The security vulnerability in SP8 is not remedied after upgrading from SP8 to Service Pack 9 (SP9). HP has released Service Pack 10 (SP10) to remediate the potential vulnerability introduced in SP8.
Affected Products: HP ThinPro OS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.hp.com/us-en/document/ish_6415074-6415171-16/hpsbhf03789'}]
CVE State: PUBLISHED
Explain CVE-2022-1603
The Mail Subscribe List WordPress plugin before 2.1.4 does not have CSRF check in place when deleting subscribed users, which could allow attackers to make a logged in admin perform such action and delete arbitrary users from the subscribed list
Affected Products: Mail Subscribe List
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0e12ba6f-a86f-4cc6-9013-8a15586098d0'}]
CVE State: PUBLISHED
Explain CVE-2022-1604
The MailerLite WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Affected Products: MailerLite – Signup forms (official)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/557c1c49-7195-4085-b67a-9fd8aca57845'}]
CVE State: PUBLISHED
Explain CVE-2022-1605
The Email Users WordPress plugin through 4.8.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and change the notification settings of arbitrary users
Affected Products: Email Users
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a1b69615-690a-423b-afdf-729dcd32bc2f'}]
CVE State: PUBLISHED
Explain CVE-2022-1606
Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects.
Affected Products: M-Files Server
References: [{'tags': ['vendor-advisory'], 'url': 'https://www.m-files.com/about/trust-center/security-advisories/cve-2022-1606/'}]
CVE State: PUBLISHED
Explain CVE-2022-1607
Cross-Site Request Forgery (CSRF) vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant allows Cross Site Request Forgery.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) – comcode 150047415.


Affected Products: Pulsar Plus System Controller NE843_S 
References: [{'url': 'https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch'}]
CVE State: PUBLISHED
Explain CVE-2022-1608
The OnePress Social Locker WordPress plugin through 5.6.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: OnePress Social Locker
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/56d2d55b-bd09-47af-988c-7f47eec4151f'}]
CVE State: PUBLISHED
Explain CVE-2022-1610
The Seamless Donations WordPress plugin before 5.1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Seamless Donations: A Platform for Global Fundraising and Rebuilding using Stripe and PayPal
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/88014da6-6179-4527-8f67-fbb610804d93'}]
CVE State: PUBLISHED
Explain CVE-2022-1611
The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF.
Affected Products: Bulk Page Creator
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3843b867-7784-4976-b5ab-8a1e7d45618a'}]
CVE State: PUBLISHED
Explain CVE-2022-1612
The Webriti SMTP Mail WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Webriti SMTP Mail
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a8cec792-6435-4047-bca8-597c104dbc1f'}]
CVE State: PUBLISHED
Explain CVE-2022-1613
The Restricted Site Access WordPress plugin before 7.3.2 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based limitations in certain situations.
Affected Products: Restricted Site Access
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/c03863ef-9ac9-402b-8f8d-9559c9988e2b'}]
CVE State: PUBLISHED
Explain CVE-2022-1614
The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMOTE_ADDR, which makes it possible to bypass IP-based anti-spamming restrictions.
Affected Products: WP-EMail
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a5940d0b-6b88-4418-87e2-02c0897bc2f1'}]
CVE State: PUBLISHED
Explain CVE-2022-1615
In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
Affected Products: Samba
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.samba.org/show_bug.cgi?id=15103'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/samba-team/samba/-/merge_requests/2644'}, {'name': 'FEDORA-2022-4555909843', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/'}]
CVE State: PUBLISHED
Explain CVE-2022-1616
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/40f1d75f-fb2f-4281-b585-a41017f217e2'}, {'url': 'https://github.com/vim/vim/commit/d88934406c5375d88f8f1b65331c9f0cab68cc6c'}, {'name': 'FEDORA-2022-e92c3ce170', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/'}, {'name': 'FEDORA-2022-f0db3943d9', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/'}, {'name': '[debian-lts-announce] 20220516 [SECURITY] [DLA 3011-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html'}, {'name': 'FEDORA-2022-8df66cdbef', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1619
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/b3200483-624e-4c76-a070-e246f62a7450'}, {'url': 'https://github.com/vim/vim/commit/ef02f16609ff0a26ffc6e20263523424980898fe'}, {'name': 'FEDORA-2022-e92c3ce170', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/'}, {'name': 'FEDORA-2022-f0db3943d9', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/'}, {'name': '[debian-lts-announce] 20220516 [SECURITY] [DLA 3011-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html'}, {'name': 'FEDORA-2022-8df66cdbef', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://security.netapp.com/advisory/ntap-20220930-0007/'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1620
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/7a4c59f3-fcc0-4496-995d-5ca6acd2da51'}, {'url': 'https://github.com/vim/vim/commit/8e4b76da1d7e987d43ca960dfbc372d1c617466f'}, {'name': 'FEDORA-2022-e92c3ce170', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A6BY5P7ERZS7KXSBCGFCOXLMLGWUUJIH/'}, {'name': 'FEDORA-2022-f0db3943d9', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JUN33257RUM4RS2I4GZETKFSAXPETATG/'}, {'name': 'FEDORA-2022-8df66cdbef', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1621
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/520ce714-bfd2-4646-9458-f52cd22bb2fb'}, {'url': 'https://github.com/vim/vim/commit/7c824682d2028432ee082703ef0ab399867a089b'}, {'name': '[debian-lts-announce] 20220516 [SECURITY] [DLA 3011-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html'}, {'name': 'FEDORA-2022-8df66cdbef', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1622
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
Affected Products: libtiff
References: [{'url': 'https://gitlab.com/libtiff/libtiff/-/issues/410'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/commit/b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1622.json'}, {'url': 'https://security.netapp.com/advisory/ntap-20220616-0005/'}, {'name': 'FEDORA-2022-ea3ebeff3d', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXAFOP6QQRNZD3HPZ6BMCEZZOM4YIZMK/'}, {'name': 'FEDORA-2022-e9fe21d102', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7IWZTB4J2N4F5OR5QY4VHDSKWKZSWN3/'}, {'url': 'https://support.apple.com/kb/HT213443'}, {'url': 'https://support.apple.com/kb/HT213444'}, {'url': 'https://support.apple.com/kb/HT213446'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'url': 'https://support.apple.com/kb/HT213486'}, {'url': 'https://support.apple.com/kb/HT213487'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/39'}]
CVE State: PUBLISHED
Explain CVE-2022-1623
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.
Affected Products: libtiff
References: [{'url': 'https://gitlab.com/libtiff/libtiff/-/issues/410'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/commit/b4e79bfa0c7d2d08f6f1e7ec38143fc8cb11394a'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1623.json'}, {'url': 'https://security.netapp.com/advisory/ntap-20220616-0005/'}, {'name': 'FEDORA-2022-ea3ebeff3d', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXAFOP6QQRNZD3HPZ6BMCEZZOM4YIZMK/'}, {'name': 'FEDORA-2022-e9fe21d102', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7IWZTB4J2N4F5OR5QY4VHDSKWKZSWN3/'}, {'name': 'GLSA-202210-10', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-10'}, {'name': 'DSA-5333', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5333'}]
CVE State: PUBLISHED
Explain CVE-2022-1624
The Latest Tweets Widget WordPress plugin through 1.1.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: Latest Tweets Widget
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/06e547fd-cddf-4294-87be-54f58d6138a7'}]
CVE State: PUBLISHED
Explain CVE-2022-1625
The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes (for bypassing the provided restrictions) and to change plugin settings by tricking admin users into visiting specially crafted websites.
Affected Products: New User Approve
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e1693318-900c-47f1-bb77-008b0d33327f'}]
CVE State: PUBLISHED
Explain CVE-2022-1626
The Sharebar WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and also lead to Stored Cross-Site Scripting issue due to the lack of sanitisation and escaping in some of them
Affected Products: Sharebar
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3d1f90d9-45da-42f8-93f8-15c8a4ff90ca'}]
CVE State: PUBLISHED
Explain CVE-2022-1627
The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
Affected Products: My Private Site
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/70ce3654-8fd9-4c33-b594-fac13ec26137'}]
CVE State: PUBLISHED
Explain CVE-2022-1628
The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by authenticated users with Contributor and above permissions to inject arbitrary web scripts into posts/pages that execute whenever an administrator access the page.
Affected Products: Simple SEO
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2754807%40cds-simple-seo&new=2754807%40cds-simple-seo&sfp_email=&sfph_mail='}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1628'}]
CVE State: PUBLISHED
Explain CVE-2022-1629
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
Affected Products: vim/vim
References: [{'url': 'https://huntr.dev/bounties/e26d08d4-1886-41f0-9af4-f3e1bf3d52ee'}, {'url': 'https://github.com/vim/vim/commit/53a70289c2712808e6d4e88927e03cac01b470dd'}, {'name': 'FEDORA-2022-8df66cdbef', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HIP7KG7TVS5YF3QREAY2GOGUT3YUBZAI/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}]
CVE State: PUBLISHED
Explain CVE-2022-1630
The WP-EMail WordPress plugin before 2.69.0 does not protect its log deletion functionality with nonce checks, allowing attacker to make a logged in admin delete logs via a CSRF attack
Affected Products: WP-EMail
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/178d0c49-3a93-4948-8734-f3d7518361b3'}]
CVE State: PUBLISHED
Explain CVE-2022-1631
Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Email. This allows an attacker to gain pre-authentication to the victim’s account. Further, due to the lack of proper validation of email coming from Social Login and failing to check if an account already exists, the victim will not identify if an account is already existing. Hence, the attacker’s persistence will remain. An attacker would be able to see all the activities performed by the victim user impacting the confidentiality and attempt to modify/corrupt the data impacting the integrity and availability factor. This attack becomes more interesting when an attacker can register an account from an employee’s email address. Assuming the organization uses G-Suite, it is much more impactful to hijack into an employee’s account.
Affected Products: microweber/microweber
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/5494e258-5c7b-44b4-b443-85cff7ae0ba4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/c162dfffb9bfd264d232aaaf5bb3daee16a3cb38'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/167376/Microweber-CMS-1.2.15-Account-Takeover.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1632
An Improper Certificate Validation attack was found in Openshift. A re-encrypt Route with destinationCACertificate explicitly set to the default serviceCA skips internal Service TLS certificate validation. This flaw allows an attacker to exploit an invalid certificate, resulting in a loss of confidentiality.
Affected Products: Openshift
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2081181'}]
CVE State: PUBLISHED
Explain CVE-2022-1633
Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1316990'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1634
Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific user interactions.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1314908'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1635
Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1319797'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1636
Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1297283'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1637
Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1311820'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1638
Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1316946'}]
CVE State: PUBLISHED
Explain CVE-2022-1639
Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1317650'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1640
Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1320592'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1641
Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/05/stable-channel-update-for-desktop_10.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1305068'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1642
A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mechanism offered by the Swift standard library, the Codable protocol; and the JSONDecoder class offered by swift-corelibs-foundation, which can deserialize types that adopt the Codable protocol based on the content of a provided JSON document. When a type that adopts Codable requests the initialization of a field with an integer value, the JSONDecoder class uses a type-erased container with different accessor methods to attempt and coerce a corresponding JSON value and produce an integer. In the case the JSON value was a numeric literal with a floating-point portion, JSONDecoder used different type-eraser methods during validation than it did during the final casting of the value. The checked casting produces a deterministic crash due to this mismatch. The JSONDecoder class is often wrapped by popular Swift-based web frameworks to parse the body of HTTP requests and perform basic type validation. This makes the attack low-effort: sending a specifically crafted JSON document during a request to these endpoints will cause them to crash. The attack does not have any confidentiality or integrity risks in and of itself; the crash is produced deterministically by an abort function that ensures that execution does not continue in the face of this violation of assumptions. However, unexpected crashes can lead to violations of invariants in services, so it's possible that this attack can be used to trigger error conditions that escalate the risk. Producing a denial of service may also be the goal of an attacker in itself. This issue is solved in Swift 5.6.2 for Linux and Windows. This issue was solved by ensuring that the same methods are invoked both when validating and during casting, so that no type mismatch occurs. Swift for Linux and Windows versions are not ABI-interchangeable. To upgrade a service, its owner must update to this version of the Swift toolchain, then recompile and redeploy their software. The new version of Swift includes an updated swift-corelibs-foundation package. Versions of Swift running on Darwin-based operating systems are not affected.
Affected Products: Swift Corelib-Foundation
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/apple/swift-corelibs-foundation/security/advisories/GHSA-239c-6cv2-wwx8'}]
CVE State: PUBLISHED
Explain CVE-2022-1643
The Birthdays Widget WordPress plugin through 1.7.18 does not sanitise and escape some of its fields, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Affected Products: Birthdays Widget
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/73111c7e-c772-4bed-b282-854c1ae57444'}]
CVE State: PUBLISHED
Explain CVE-2022-1644
The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
Affected Products: Call&Book Mobile Bar
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0184d70a-548c-4258-b01d-7477f03cc346'}]
CVE State: PUBLISHED
Explain CVE-2022-1645
The Amazon Link WordPress plugin through 3.2.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.
Affected Products: Amazon Link
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/915b7d79-f9dd-451d-bf8f-6d14ec3e67d2'}]
CVE State: PUBLISHED
Explain CVE-2022-1646
The Simple Real Estate Pack WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed
Affected Products: Simple Real Estate Pack
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8a32896d-bf1b-4d7b-8d84-dc38b877928b'}]
CVE State: PUBLISHED
Explain CVE-2022-1647
The FormCraft WordPress plugin before 1.2.6 does not sanitise and escape Field Labels, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Affected Products: FormCraft – Contact Form Builder for WordPress
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8e8f6b08-90ab-466a-9828-dca0c0da2c9c'}]
CVE State: PUBLISHED
Explain CVE-2022-1648
Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote Code Execution with running application privilege.
Affected Products: Pandora FMS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.incibe.es/en/cve-assignment-publication/coordinated-cves'}]
CVE State: PUBLISHED
Explain CVE-2022-1649
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html).
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c07e4918-cf86-4d2e-8969-5fb63575b449'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/a5aafb99c3965259c84ddcf45a91144bf7eb4cf1'}]
CVE State: PUBLISHED
Explain CVE-2022-1650
Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.


Affected Products: eventsource/eventsource
References: [{'url': 'https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e'}, {'url': 'https://github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4'}, {'name': '[debian-lts-announce] 20221211 [SECURITY] [DLA 3235-1] node-eventsource security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/12/msg00021.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1651
A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.
Affected Products: Kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecd1735f14d6ac868ae5d8b7a2bf193fa11f388b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220901-0008/'}]
CVE State: PUBLISHED
Explain CVE-2022-1652
Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
Affected Products: kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://francozappa.github.io/about-bias/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1832397'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kb.cert.org/vuls/id/647177/'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220722-0002/'}]
CVE State: PUBLISHED
Explain CVE-2022-1653
The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin settings, as well as create, delete and rename projects and networks.
Affected Products: Social Share Buttons by Supsystic
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48'}]
CVE State: PUBLISHED
Explain CVE-2022-1654
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abb_uninstall_template" (both) and "jupiterx_core_cp_uninstall_template" (JupiterX Core Only) AJAX actions
Affected Products: Jupiter X Core
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/blog/2022/05/critical-privilege-escalation-vulnerability-in-jupiter-and-jupiterx-premium-themes/'}]
CVE State: PUBLISHED
Explain CVE-2022-1655
An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.
Affected Products: OpenStack
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2022-1655'}]
CVE State: PUBLISHED
Explain CVE-2022-1656
Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the functions registered in lib/api/api/ajax.php, which also grant access to the jupiterx_api_ajax_ actions registered by the JupiterX Core Plugin (<=2.0.6). This includes the ability to deactivate arbitrary plugins as well as update the theme’s API key.
Affected Products: Jupiter X Core
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/blog/2022/05/critical-privilege-escalation-vulnerability-in-jupiter-and-jupiterx-premium-themes/'}]
CVE State: PUBLISHED
Explain CVE-2022-1657
Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file calls the load_control_panel_pane function. It is possible to use this action to include any local PHP file via the slug parameter. The Jupiter theme has a nearly identical vulnerability which can be exploited via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function.
Affected Products: Jupiter
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/blog/2022/05/critical-privilege-escalation-vulnerability-in-jupiter-and-jupiterx-premium-themes/'}]
CVE State: PUBLISHED