Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE Program Container: - CISA ADP Vulnrichment: References: - https://fuchsia.googlesource.com/fuchsia/+/d97c05d2301799ed585620a9c5c739d36e7b5d3d
CVE ID: CVE-2022-0248 State: PUBLISHED Published: 2022-03-14T14:41:25 Last Updated: 2024-08-02T23:18:42.892Z Vendors: Unknown Products: Contact Form Submissions Problem Types: CWE-79 Description: The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/d02cf542-2d75-46bc-a0df-67bbe501cc89 - https://plugins.trac.wordpress.org/changeset/2682024
CVE ID: CVE-2022-0249 State: PUBLISHED Published: 2022-03-28T18:53:07 Last Updated: 2024-08-02T23:18:42.887Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: GitLab Products: GitLab Problem Types: Information exposure in GitLab Description: A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/29395 - https://hackerone.com/reports/579934 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0249.json
CVE ID: CVE-2022-0250 State: PUBLISHED Published: 2022-07-04T13:05:38 Last Updated: 2024-08-02T23:18:42.879Z Vendors: Unknown Products: Redirection for Contact Form 7 Problem Types: CWE-79 Description: The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/05700942-3143-4978-89eb-814ceff74867
CVE ID: CVE-2022-0251 State: PUBLISHED Published: 2022-01-26T10:35:10 Last Updated: 2024-08-02T23:18:42.889Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/eb4b08f9-cf8b-4335-b3b8-ed44e5fa80a5 - https://github.com/pimcore/pimcore/commit/3ae96b9d41c117aafa45873ad10077d4b873a3cb
CVE ID: CVE-2022-0252 State: PUBLISHED Published: 2022-02-21T10:46:09 Last Updated: 2024-08-02T23:25:38.791Z Vendors: Unknown Products: GiveWP – Donation Plugin and Fundraising Platform Problem Types: CWE-79 Description: The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/2659032 - https://wpscan.com/vulnerability/b0e551af-087b-43e7-bdb7-11d7f639028a
CVE ID: CVE-2022-0253 State: PUBLISHED Published: 2022-01-17T13:15:09 Last Updated: 2024-08-02T23:25:40.447Z Severity: HIGH (CVSS 7.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/ac7f7eba-ee0b-4a50-bd89-29fd9b3e8303 - https://github.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437
CVE ID: CVE-2022-0254 State: PUBLISHED Published: 2022-03-14T14:41:26 Last Updated: 2024-08-02T23:25:38.902Z Vendors: Unknown Products: WordPress Zero Spam Problem Types: CWE-89 Description: The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ae54681f-7b89-408c-b0ee-ba4a520db997 - https://plugins.trac.wordpress.org/changeset/2660225 - https://plugins.trac.wordpress.org/changeset/2680906
CVE ID: CVE-2022-0255 State: PUBLISHED Published: 2022-02-21T10:46:11 Last Updated: 2024-08-02T23:25:38.812Z Vendors: Unknown Products: Database Backup for WordPress Problem Types: CWE-89 Description: The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/684bb06d-864f-4cba-ab0d-f83974d026fa
CVE ID: CVE-2022-0256 State: PUBLISHED Published: 2022-01-17T15:10:09 Last Updated: 2024-08-02T23:25:40.154Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8d88e48a-7124-4aaf-9f1d-6cfe4f9a79c1 - https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7
CVE ID: CVE-2022-0257 State: PUBLISHED Published: 2022-01-17T15:15:15 Last Updated: 2024-08-02T23:25:39.597Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/bad2073c-bbd5-4425-b3e9-c336b73ddda6 - https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d
CVE ID: CVE-2022-0258 State: PUBLISHED Published: 2022-01-17T15:15:10 Last Updated: 2024-08-02T23:25:38.783Z Severity: HIGH (CVSS 8.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-89 Description: pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0df891e4-6412-4d9a-a9b7-d9df50311802 - https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd
CVE ID: CVE-2022-0259 State: REJECTED Published: N/A Last Updated: 2023-01-04T00:00:00 Description: No description available.
CVE ID: CVE-2022-0260 State: PUBLISHED Published: 2022-01-18T15:00:11 Last Updated: 2024-08-02T23:25:38.795Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/89e4ab60-21ec-4396-92ad-5b78d4c2897e - https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f
CVE ID: CVE-2022-0261 State: PUBLISHED Published: 2022-01-18T00:00:00.000Z Last Updated: 2025-11-03T20:34:18.558Z Vendors: vim Products: vim/vim Problem Types: CWE-122 Description: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/fa795954-8775-4f23-98c6-d4d4d3fe8a82 - https://github.com/vim/vim/commit/9f8c304c8a390ade133bac29963dc8e56ab14cbc - https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html - https://security.gentoo.org/glsa/202208-32 - https://support.apple.com/kb/HT213444 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41
/support.apple.com/kb/HT213444 - https://support.apple.com/kb/HT213488 - http://seclists.org/fulldisclosure/2022/Oct/41 - http://seclists.org/fulldisclosure/2022/Oct/28 - http://seclists.org/fulldisclosure/2022/Oct/43 - https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html
CVE ID: CVE-2022-0262 State: PUBLISHED Published: 2022-01-18T15:40:11 Last Updated: 2024-08-02T23:25:38.887Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/b38a4e14-5dcb-4e49-9990-494dc2a8fa0d - https://github.com/pimcore/pimcore/commit/6f36e841ce55f67e2e95253dd58f80659ef166c7
CVE ID: CVE-2022-0263 State: PUBLISHED Published: 2022-01-18T15:55:10 Last Updated: 2024-08-02T23:25:40.358Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/96506857-06bc-4c84-88b7-4f397715bcf6 - https://github.com/pimcore/pimcore/commit/35d1853baf64d6a1d90fd8803e52439da53a3911
CVE ID: CVE-2022-0264 State: PUBLISHED Published: 2022-02-04T00:00:00 Last Updated: 2024-08-02T23:25:40.050Z Vendors: n/a Products: kernel Problem Types: CWE-755 Description: A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6 Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2041547
CVE ID: CVE-2022-0265 State: PUBLISHED Published: 2022-03-03T21:40:10 Last Updated: 2024-08-02T23:25:38.846Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: hazelcast Products: hazelcast/hazelcast Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/d63972a2-b910-480a-a86b-d1f75d24d563 - https://github.com/hazelcast/hazelcast/commit/4d6b666cd0291abd618c3b95cdbb51aa4208e748
CVE ID: CVE-2022-0266 State: PUBLISHED Published: 2022-01-19T05:20:10 Last Updated: 2024-08-02T23:25:40.180Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/1ac267be-3af8-4774-89f2-77234d144d6b - https://github.com/livehelperchat/livehelperchat/commit/cc1122aed0d1ad9f05757eaea2ab9e6a924776bd
CVE ID: CVE-2022-0267 State: PUBLISHED Published: 2022-03-07T08:16:24 Last Updated: 2024-08-02T23:25:38.787Z Vendors: Unknown Products: AdRotate – Ad manager & AdSense Ads Problem Types: CWE-89 Description: The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/7df70f49-547f-4bdb-bf9b-2e06f93488c6
CVE ID: CVE-2022-0268 State: PUBLISHED Published: 2022-01-25T10:40:11 Last Updated: 2024-08-02T23:25:39.494Z Severity: MEDIUM (CVSS 5.7 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L) Vendors: getgrav Products: getgrav/grav Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/67085545-331e-4469-90f3-a1a46a078d39 - https://github.com/getgrav/grav/commit/6f2fa9311afb9ecd34030dec2aff7b39e9e7e735
CVE ID: CVE-2022-0269 State: PUBLISHED Published: 2022-01-24T11:30:11 Last Updated: 2024-08-02T23:25:40.484Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: yetiforcecompany Products: yetiforcecompany/yetiforcecrm Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a0470915-f6df-45b8-b3a2-01aebe764df0 - https://github.com/yetiforcecompany/yetiforcecrm/commit/298c7870e6fe4332d8aa1757a9c8d79f841389ff
CVE ID: CVE-2022-0270 State: PUBLISHED Published: 2022-01-25T19:11:09.513495Z Last Updated: 2024-09-16T18:09:09.262Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Mirantis Products: bored-agent Problem Types: CWE-284 Description: Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Mirantis/security/blob/main/advisories/0004.md
CVE ID: CVE-2022-0271 State: PUBLISHED Published: 2022-04-11T14:40:41 Last Updated: 2024-08-02T23:25:40.172Z Vendors: Unknown Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-79 Description: The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/ad07d9cd-8a75-4f7c-bbbe-3b6b89b699f2
CVE ID: CVE-2022-0272 State: PUBLISHED Published: 2022-04-21T16:20:10 Last Updated: 2024-08-02T23:25:40.273Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: detekt Products: detekt/detekt Problem Types: CWE-611 Description: Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44 - https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395
CVE ID: CVE-2022-0273 State: PUBLISHED Published: 2022-01-30T13:21:51 Last Updated: 2024-08-02T23:25:40.376Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: janeczku Products: janeczku/calibre-web Problem Types: CWE-284 Description: Improper Access Control in Pypi calibreweb prior to 0.6.16. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13 - https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf
CVE ID: CVE-2022-0274 State: PUBLISHED Published: 2022-01-19T18:10:11 Last Updated: 2024-08-02T23:25:40.234Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: orchardcms Products: orchardcms/orchardcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/a82a714a-9b71-475e-bfc3-43326fcaf764 - https://github.com/orchardcms/orchardcore/commit/218f25ddfadb66a54de7a82dffe3ab2e4ab7c4b4
CVE ID: CVE-2022-0277 State: PUBLISHED Published: 2022-01-20T00:00:00 Last Updated: 2024-08-02T23:25:40.516Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-732 Description: Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/0e776f3d-35b1-4a9e-8fe8-91e46c0d6316 - https://github.com/microweber/microweber/commit/e680e134a4215c979bfd2eaf58336be34c8fc6e6
CVE ID: CVE-2022-0278 State: PUBLISHED Published: 2022-01-20T10:10:11 Last Updated: 2024-08-02T23:25:39.615Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/64495d0f-d5ec-4542-9693-32372c18d030 - https://github.com/microweber/microweber/commit/b64ef574b82dbf89a908e1569d790c7012d1ccd7
CVE ID: CVE-2022-0279 State: PUBLISHED Published: 2022-02-21T10:46:12 Last Updated: 2024-08-02T23:25:40.247Z Vendors: Unknown Products: AnyComment Problem Types: CWE-362 Description: The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/43a4b2d3-1bd5-490c-982c-bb7120595865
CVE ID: CVE-2022-0280 State: PUBLISHED Published: 2022-03-10T22:35:09 Last Updated: 2024-08-02T23:25:40.191Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: McAfee Products: McAfee Total Protection for Windows Problem Types: CWE-367 Description: A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service. This attack exploits the way symlinks are created and how the product works with them. Additional Analyst Notes: - CVE Pr
his attack exploits the way symlinks are created and how the product works with them. Additional Analyst Notes: - CVE Program Container: References: - https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view
CVE ID: CVE-2022-0281 State: PUBLISHED Published: 2022-01-20T11:10:11 Last Updated: 2024-08-02T23:25:39.785Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: microweber Products: microweber/microweber Problem Types: CWE-200 Description: Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/microweber/microweber/commit/e680e134a4215c979bfd2eaf58336be34c8fc6e6 - https://huntr.dev/bounties/315f5ac6-1b5e-4444-ad8f-802371da3505
CVE ID: CVE-2022-0282 State: PUBLISHED Published: 2022-01-20T11:15:11 Last Updated: 2024-08-02T23:25:39.522Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: microweber Products: microweber/microweber Problem Types: CWE-79 Description: Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/8815b642-bd9b-4737-951b-bde7319faedd - https://github.com/microweber/microweber/commit/51b5a4e3ef01e587797c0109159a8ad9d2bac77a
CVE ID: CVE-2022-0283 State: PUBLISHED Published: 2022-03-28T18:53:11 Last Updated: 2024-08-02T23:25:40.269Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N) Vendors: GitLab Products: GitLab Problem Types: Externally controlled reference to a resource in another sphere in GitLab Description: An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/349422 - https://gitlab.com/gitlab-
- CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/349422 - https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0283.json
CVE ID: CVE-2022-0284 State: PUBLISHED Published: 2022-08-29T14:03:03 Last Updated: 2024-08-02T23:25:40.272Z Vendors: n/a Products: ImageMagick Problem Types: CWE-125 Description: A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2045943 - https://access.redhat.com/security/cve/CVE-2022-0284 -
ferences: - https://bugzilla.redhat.com/show_bug.cgi?id=2045943 - https://access.redhat.com/security/cve/CVE-2022-0284 - https://github.com/ImageMagick/ImageMagick/issues/4729 - https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7
CVE ID: CVE-2022-0285 State: PUBLISHED Published: 2022-01-20T15:00:12 Last Updated: 2024-08-02T23:25:40.066Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H) Vendors: pimcore Products: pimcore/pimcore Problem Types: CWE-79 Description: Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/321918b2-aa01-410e-9f7c-dca5f286bc9c - https://github.com/pimcore/pimcore/commit/b432225952e2a5ab0268f401b85a14480369b835
CVE ID: CVE-2022-0286 State: PUBLISHED Published: 2022-01-31T15:57:34 Last Updated: 2024-08-02T23:25:40.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=105cd17a866017b45f3c45901b394c711c97bf40 - https://syzkaller.appspot.com/bug?id=160f641886d88bf11cbf1236cc4db994bb210626 - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2022-0287 State: PUBLISHED Published: 2022-04-25T15:50:55 Last Updated: 2024-08-02T23:25:40.098Z Vendors: Unknown Products: myCred Problem Types: CWE-862 Missing Authorization Description: The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing any authenticated user, such as subscriber to call and retrieve all email addresses from the blog Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/6cd7cd6d-1cc1-472c-809b-b66389f149b0
CVE ID: CVE-2022-0288 State: PUBLISHED Published: 2022-02-21T10:46:13 Last Updated: 2024-08-02T23:25:39.962Z Vendors: Unknown Products: Ad Inserter – Ad Manager & AdSense Ads, Ad Inserter Pro Problem Types: CWE-79 Description: The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/27b64412-33a4-462c-bc45-f81697e4fe42