Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2022-1039
The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.
Affected Products: DA50N
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03'}]
CVE State: PUBLISHED
Explain CVE-2022-1040
An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.
Affected Products: Sophos Firewall
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.exploit-db.com/exploits/51006'}]
CVE State: PUBLISHED
Explain CVE-2022-1041
In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.
Affected Products: zephyr
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p449-9hv9-pj38'}]
CVE State: PUBLISHED
Explain CVE-2022-1042
In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.
Affected Products: zephyr
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j7v7-w73r-mm5x'}]
CVE State: PUBLISHED
Explain CVE-2022-1043
A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges.
Affected Products: Kernel
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1997328'}, {'url': 'https://www.zerodayinitiative.com/advisories/ZDI-22-362/'}, {'url': 'https://github.com/torvalds/linux/commit/a30f895ad3239f45012e860d4f94c1a388b36d14'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1043'}, {'url': 'http://packetstormsecurity.com/files/170834/io_uring-Same-Type-Object-Reuse-Privilege-Escalation.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1044
Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.
Affected Products: polonel/trudesk
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ff878be9-563a-4d0e-99c1-fc3c767f6d3e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/097b4823935c4fa524e71ab2dd107cf2056922b0'}]
CVE State: PUBLISHED
Explain CVE-2022-1045
Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.
Affected Products: polonel/trudesk
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/b0c4f992-4ac8-4479-82f4-367ed1a2a826'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/c4b262c2613d4a8865de0b3252112544bd81997a'}]
CVE State: PUBLISHED
Explain CVE-2022-1046
The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: Visual Form Builder
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a1ae4512-0b5b-4f36-8334-14633bf24758'}]
CVE State: PUBLISHED
Explain CVE-2022-1047
The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.
Affected Products: themify-ptb-search
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/078bd5f6-64f7-4665-825b-9fd0c2b7b91b'}]
CVE State: PUBLISHED
Explain CVE-2022-1048
A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.
Affected Products: kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2066706'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3'}, {'name': 'DSA-5127', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5127'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220629-0001/'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}]
CVE State: PUBLISHED
Explain CVE-2022-1049
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.
Affected Products: clusterlabs/pcs
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5'}, {'name': 'DSA-5226', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5226'}, {'name': '[debian-lts-announce] 20220914 [SECURITY] [DLA 3108-1] pcs security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/09/msg00017.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1050
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
Affected Products: QEMU
References: [{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2069625'}, {'name': '[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1051
The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks.
Affected Products: WPQA Builder Plugin
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/cb2fa587-da2f-460e-a402-225df7744765'}]
CVE State: PUBLISHED
Explain CVE-2022-1052
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3b3b7f77-ab8d-4de3-999b-eeec0a3eebe7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/0052500c1ed5bf8263b26b9fd7773dbdc6f170c4'}]
CVE State: PUBLISHED
Explain CVE-2022-1053
Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an AK of a software TPM. A successful attack breaks the entire chain of trust because a not validated AK is used by the verifier. This issue is worse if the validation happens first and then the agent gets added to the verifier because the timing is easier and the verifier does not validate the regcount entry being equal to 1,
Affected Products: keylime
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2065024%2C'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5%2C'}, {'name': 'FEDORA-2022-748fda10e7', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/'}, {'name': 'FEDORA-2022-7c9173843a', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/'}, {'name': 'FEDORA-2022-f9ace23a78', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/'}]
CVE State: PUBLISHED
Explain CVE-2022-1054
The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and has the export function hooked to the init action. As a result, unauthenticated attackers could call it and retrieve PII such as first name, last name and email address of user registered for events
Affected Products: RSVP and Event Management Plugin
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d'}]
CVE State: PUBLISHED
Explain CVE-2022-1055
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
Affected Products: Kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220506-0007/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html'}]
CVE State: PUBLISHED
Explain CVE-2022-1056
Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.
Affected Products: libtiff
References: [{'url': 'https://gitlab.com/libtiff/libtiff/-/issues/391'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/merge_requests/307'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.json'}, {'name': 'GLSA-202210-10', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-10'}, {'url': 'https://security.netapp.com/advisory/ntap-20221228-0008/'}]
CVE State: PUBLISHED
Explain CVE-2022-1057
The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection
Affected Products: Pricing Deals for WooCommerce
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7c33ffc3-84d1-4a0f-a837-794cdc3ad243'}]
CVE State: PUBLISHED
Explain CVE-2022-1058
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.
Affected Products: go-gitea/gitea
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4fb42144-ac70-4f76-a5e1-ef6b5e55dc0d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48'}]
CVE State: PUBLISHED
Explain CVE-2022-1059
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.
Affected Products: TUG Home Base Server
References: [{'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05'}]
CVE State: PUBLISHED
Explain CVE-2022-1061
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.
Affected Products: radareorg/radare2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a7546dae-01c5-4fb0-8a8e-c04ea4e9bac7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/d4ce40b516ffd70cf2e9e36832d8de139117d522'}]
CVE State: PUBLISHED
Explain CVE-2022-1062
The th23 Social WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: th23 Social
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e770ba87-95d2-40c9-89cc-5d7390e9cbb0'}]
CVE State: PUBLISHED
Explain CVE-2022-1063
The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputting it in the Messages list, which could allow high privileges users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: Thank Me Later
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f90c528b-8c3a-4f9a-aa36-099c24abe082'}]
CVE State: PUBLISHED
Explain CVE-2022-1064
SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.
Affected Products: forkcms/forkcms
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2f664985-c5fc-485b-b4fc-4c401be2cf40'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/forkcms/forkcms/commit/6aca30e10b4181534f73f96d6e2ebeb45ec15069'}]
CVE State: PUBLISHED
Explain CVE-2022-1065
A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions prior to R1 of 2022-01-15; v2021 versions prior to R4 of 2022-01-15; v2020 versions prior to R6 of 2022-01-15; v2019 versions later than R5 (service pack); v2018 versions later than R5 (service pack). This issue does not affect: Abacus ERP v2019 versions prior to R5 of 2020-03-15; v2018 versions prior to R7 of 2020-04-15; v2017 version and prior versions and prior versions.
Affected Products: Abacus ERP
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.redguard.ch/advisories/abacus_mfa_bypass.txt'}]
CVE State: PUBLISHED
Explain CVE-2022-1066
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.
Affected Products: TUG Home Base Server
References: [{'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05'}]
CVE State: PUBLISHED
Explain CVE-2022-1067
Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.
Affected Products: Patient Portal
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsma-22-095-01'}]
CVE State: PUBLISHED
Explain CVE-2022-1068
Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.
Affected Products: Modbus Slave
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-04'}]
CVE State: PUBLISHED
Explain CVE-2022-1069
A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.
Affected Products: Secure Integration Server
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04'}]
CVE State: PUBLISHED
Explain CVE-2022-1070
Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.
Affected Products: TUG Home Base Server
References: [{'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05'}]
CVE State: PUBLISHED
Explain CVE-2022-1071
User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
Affected Products: mruby/mruby
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/aaa28a508903041dd7399d4159a8ace9766b022f'}]
CVE State: PUBLISHED
Explain CVE-2022-1073
A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely.
Affected Products: Automatic Question Paper Generator
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194839'}]
CVE State: PUBLISHED
Explain CVE-2022-1074
A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input <h1>HTML Injection</h1> in the WiFi settings of the dashboard leads to html injection.
Affected Products: FLEX-1085
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194845'}]
CVE State: PUBLISHED
Explain CVE-2022-1075
A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.
Affected Products: College Website Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.sourcecodester.com/php/15203/college-website-content-management-system-phpoop-free-source-code.ht'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194846'}]
CVE State: PUBLISHED
Explain CVE-2022-1076
A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.
Affected Products: Automatic Question Paper Generator System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194847'}]
CVE State: PUBLISHED
Explain CVE-2022-1077
A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.
Affected Products: FLEX-1080
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194848'}]
CVE State: PUBLISHED
Explain CVE-2022-1078
A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.
Affected Products: College Website Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194856'}]
CVE State: PUBLISHED
Explain CVE-2022-1079
A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.
Affected Products: One Church Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195426'}]
CVE State: PUBLISHED
Explain CVE-2022-1080
A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.
Affected Products: One Church Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195442'}]
CVE State: PUBLISHED
Explain CVE-2022-1081
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack can be initiated remotely.
Affected Products: Microfinance Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195640'}]
CVE State: PUBLISHED
Explain CVE-2022-1082
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated remotely.
Affected Products: Microfinance Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195641'}]
CVE State: PUBLISHED
Explain CVE-2022-1083
A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.
Affected Products: Microfinance Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195642'}]
CVE State: PUBLISHED
Explain CVE-2022-1084
A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /one_church/userregister.php. The manipulation leads to authentication bypass. The attack can be launched remotely.
Affected Products: One Church Management System
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195643'}]
CVE State: PUBLISHED
Explain CVE-2022-1085
A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Products: CLTPHP
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194857'}]
CVE State: PUBLISHED
Explain CVE-2022-1086
A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Products: DolphinPHP
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/xiahao90/CVEproject/blob/main/DolphinPHPV1.5.0_xss.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195368'}]
CVE State: PUBLISHED
Explain CVE-2022-1087
A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipulation of the field Title with script tags leads to persistent cross site scripting. The attack may be initiated remotely and requires an authentication. A simple POC has been disclosed to the public and may be used.
Affected Products: htmly
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/liaojia-99/project/tree/main/htmly'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/liaojia-99/project/blob/main/htmly/1.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195203'}]
CVE State: PUBLISHED
Explain CVE-2022-1088
The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: Page Security & Membership
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e86d456d-7a54-43e8-acf1-0b6a0a8bb41b'}]
CVE State: PUBLISHED
Explain CVE-2022-1089
The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: Bulk Edit and Create User Profiles – WP Sheet Editor
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/75a9fd23-7fa9-4cb1-a55b-ec5deae5d6fa'}]
CVE State: PUBLISHED
Explain CVE-2022-1090
The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: Good & Bad comments
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3993fa42-b4c3-462b-b568-0a08fe112c19'}]
CVE State: PUBLISHED
Explain CVE-2022-1091
The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).
Affected Products: Safe SVG
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4d12533e-bdb7-411f-bcdf-4c5046db13f3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/10up/safe-svg/pull/28'}]
CVE State: PUBLISHED
Explain CVE-2022-1092
The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowing any authenticated user to call and and retrieve the list of email address present in the blog
Affected Products: myCred
References: [{'url': 'https://wpscan.com/vulnerability/95759d5c-8802-4493-b7e5-7f2bc546af61', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2022-1093
The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it to the page, allowing a high privilege user such as an administrator to inject arbitrary javascript into the page even when unfiltered html is disallowed.
Affected Products: WP Meta SEO
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/57017050-811e-474d-8256-33d19d4c0553'}]
CVE State: PUBLISHED
Explain CVE-2022-1094
The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: amr users
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3c03816b-e381-481c-b9f5-63d0c24ff329'}]
CVE State: PUBLISHED
Explain CVE-2022-1095
The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected Products: Mihdan: No External Links
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bf476a3e-05ba-4b54-8a65-3d261ad5337b'}]
CVE State: PUBLISHED
Explain CVE-2022-1096
Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1309225'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1097
<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.
Affected Products: Thunderbird
References: [{'url': 'https://www.mozilla.org/security/advisories/mfsa2022-13/'}, {'url': 'https://www.mozilla.org/security/advisories/mfsa2022-14/'}, {'url': 'https://www.mozilla.org/security/advisories/mfsa2022-15/'}, {'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1745667'}]
CVE State: PUBLISHED
Explain CVE-2022-1098
Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4.2.2 above, this makes it possible for an attacker to escalate privileges
Affected Products: DIAEnergie
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}]
CVE State: PUBLISHED
Explain CVE-2022-1099
Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to impact the performance of GitLab
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/328593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1099.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1100
A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/273771'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1100.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1101
A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifier VDB-195785 was assigned to this vulnerability.
Affected Products: Royale Event Management System
References: [{'url': 'https://vuldb.com/?id.195785', 'tags': ['vdb-entry']}, {'url': 'https://vuldb.com/?ctiid.195785', 'tags': ['signature', 'permissions-required']}]
CVE State: PUBLISHED
Explain CVE-2022-1102
A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royal_event/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. It is possible to launch the attack remotely. VDB-195786 is the identifier assigned to this vulnerability.
Affected Products: Royale Event Management System
References: [{'url': 'https://vuldb.com/?id.195786', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.195786', 'tags': ['signature', 'permissions-required']}, {'url': 'https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html?', 'tags': ['related']}]
CVE State: PUBLISHED
Explain CVE-2022-1103
The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE
Affected Products: Advanced uploader
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18'}]
CVE State: PUBLISHED
Explain CVE-2022-1104
The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected Products: Popup Maker – Popup for opt-ins, lead gen, & more
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4d4709f3-ad38-4519-a24a-73bc04b20e52'}]
CVE State: PUBLISHED
Explain CVE-2022-1105
An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an unauthorized user to access pipeline analytics even when public pipelines are disabled
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/335933'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1105.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1106
use after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.
Affected Products: mruby/mruby
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/16b9d0ea-71ed-41bc-8a88-2deb4c20be8f'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/7f5a490d09f4d56801ac3a3e4e39e03e1471b44c'}]
CVE State: PUBLISHED
Explain CVE-2022-1107
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
Affected Products: ThinkPad BIOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/us/en/product_security/LEN-84943'}]
CVE State: PUBLISHED
Explain CVE-2022-1108
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.
Affected Products: ThinkPad BIOS
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/us/en/product_security/LEN-84943'}]
CVE State: PUBLISHED
Explain CVE-2022-1110
A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker to cause denial of service.
Affected Products: Smart Standby Driver
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/us/en/product_security/LEN-79452'}]
CVE State: PUBLISHED
Explain CVE-2022-1111
A business logic error in Project Import in GitLab CE/EE versions 14.9 prior to 14.9.2, 14.8 prior to 14.8.5, and 14.0 prior to 14.7.7 under certain conditions caused imported projects to show an incorrect user in the 'Access Granted' column in the project membership pages
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/345236'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1111.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1112
The Autolinks WordPress plugin through 1.0.1 does not have CSRF check in place when updating its settings, and does not sanitise as well as escape them, which could allow attackers to perform Stored Cross-Site scripting against a logged in admin via a CSRF attack
Affected Products: Autolinks
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/746c7cf2-0902-461a-a364-285505d73505'}]
CVE State: PUBLISHED
Explain CVE-2022-1113
The Flower Delivery by Florist One WordPress plugin through 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed (for example in multisite setups)
Affected Products: Flower Delivery by Florist One
References: [{'url': 'https://wpscan.com/vulnerability/ea438e84-f842-4cb9-b6c0-550cd8187701', 'tags': ['exploit', 'vdb-entry', 'technical-description']}]
CVE State: PUBLISHED
Explain CVE-2022-1114
A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service.
Affected Products: ImageMagick
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2064538'}]
CVE State: PUBLISHED
Explain CVE-2022-1115
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.
Affected Products: ImageMagick
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2067022'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ImageMagick/ImageMagick/issues/4974'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ImageMagick/ImageMagick6/commit/1f860f52bd8d58737ad883072203391096b30b51'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ImageMagick/ImageMagick/commit/c8718305f120293d8bf13724f12eed885d830b09'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1115'}]
CVE State: PUBLISHED
Explain CVE-2022-1116
Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions.
Affected Products: Kernel
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/fs/io_uring.c?h=v5.4.189&id=1a623d361ffe5cecd4244a02f449528416360038'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kernel.dance/#1a623d361ffe5cecd4244a02f449528416360038'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220629-0004/'}]
CVE State: PUBLISHED
Explain CVE-2022-1117
A vulnerability was found in fapolicyd. The vulnerability occurs due to an assumption on how glibc names the runtime linker, a build time regular expression may not correctly detect the runtime linker. The consequence is that the pattern detection for applications launched by the run time linker may fail to detect the pattern and allow execution.
Affected Products: fapolicyd
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2068171'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2066904'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/linux-application-whitelisting/fapolicyd/commit/38a942613f93824c53164730b2b7a2f75b8cd263'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1117'}]
CVE State: PUBLISHED
Explain CVE-2022-1118
Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in arbitrary code execution. This vulnerability requires user interaction to be successfully exploited
Affected Products: Connected Component Workbench
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-095-01'}]
CVE State: PUBLISHED
Explain CVE-2022-1119
The Simple File List WordPress plugin is vulnerable to Arbitrary File Download via the eeFile parameter found in the ~/includes/ee-downloader.php file due to missing controls which makes it possible unauthenticated attackers to supply a path to a file that will subsequently be downloaded, in versions up to and including 3.2.7.
Affected Products: Simple File List
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/075a3cc5-1970-4b64-a16f-3ec97e22b606'}, {'tags': ['x_refsource_MISC'], 'url': 'https://docs.google.com/document/d/1qIZXTzEpI4tO6832vk1KfsSAroT0FY2l--THlhJ8z3c/edit'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/browser/simple-file-list/trunk/includes/ee-downloader.php?rev=2071880'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1119'}]
CVE State: PUBLISHED
Explain CVE-2022-1120
Missing filtering in an error message in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 exposed sensitive information when an include directive fails in the CI/CD configuration.
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/343466'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1408731'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1120.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1121
A lack of appropriate timeouts in GitLab Pages included in GitLab CE/EE all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to cause unlimited resource consumption.
Affected Products: GitLab Pages
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab-pages/-/issues/684'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1121.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1122
A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free() on an uninitialized pointer, leading to a segmentation fault and a denial of service.
Affected Products: openjpeg2
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/uclouvain/openjpeg/issues/1368'}, {'name': 'FEDORA-2022-9515529c96', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ROSN5NRUFOH7HGLJ4ZSKPGAKLFXJALW4/'}, {'name': '[debian-lts-announce] 20220410 [SECURITY] [DLA 2975-1] openjpeg2 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html'}, {'name': 'FEDORA-2022-2d112d4480', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MIWSQFQWXDU4MT3XTVAO6HC7TVL3NHS7/'}, {'name': 'FEDORA-2022-975e21444a', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RMKBAMK2CAM5TMC5TODKVCE5AAPTD5YV/'}, {'name': 'GLSA-202209-04', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202209-04'}]
CVE State: PUBLISHED
Explain CVE-2022-1123
The Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps) WordPress plugin before 3.12.5 does not properly sanitize some parameters before inserting them into SQL queries. As a result, high privilege users could perform SQL injection attacks.
Affected Products: Leaflet Maps Marker (Google Maps, OpenStreetMap, Bing Maps)
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/03e0d4d5-0184-4a15-b8ac-fdc2010e4812'}]
CVE State: PUBLISHED
Explain CVE-2022-1124
An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled
Affected Products: GitLab
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/323552'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1113405'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1124.json'}]
CVE State: PUBLISHED
Explain CVE-2022-1125
Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1292261'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1127
Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1291891'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1128
Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1301920'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED
Explain CVE-2022-1129
Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Affected Products: Chrome
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_29.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1300253'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}]
CVE State: PUBLISHED