saikiranpennam/new_cves_pps huggingface dataset:
Explain the vulnerability: CVE-2022-0846
Description:The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dk_speakout_sendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users
Explain the vulnerability: CVE-2022-0145
Description:Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.
Explain the vulnerability: CVE-2022-0515
Description:Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.
Explain the vulnerability: CVE-2022-0796
Description:Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0779
Description:The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged users such as subscriber to enumerate the local files on the web server via path traversal payloads
Explain the vulnerability: CVE-2022-0283
Description:An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL.
Explain the vulnerability: CVE-2022-0954
Description:Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0542
Description:Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.
Explain the vulnerability: CVE-2022-0112
Description:Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.
Explain the vulnerability: CVE-2022-0811
Description:A flaw was found in CRI-O in the way it set kernel options for a pod. This issue allows anyone with rights to deploy a pod on a Kubernetes cluster that uses the CRI-O runtime to achieve a container escape and arbitrary code execution as root on the cluster node, where the malicious pod was deployed.
Explain the vulnerability: CVE-2022-0684
Description:The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Explain the vulnerability: CVE-2022-0539
Description:Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.
Explain the vulnerability: CVE-2022-0169
Description:The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL injection
Explain the vulnerability: CVE-2022-0493
Description:The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed.
Explain the vulnerability: CVE-2022-0885
Description:The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.
Explain the vulnerability: CVE-2022-0186
Description:The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks against other users having access to the gallery dashboard
Explain the vulnerability: CVE-2022-0305
Description:Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Explain the vulnerability: CVE-2022-0755
Description:Missing Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.
Explain the vulnerability: CVE-2022-0240
Description:mruby is vulnerable to NULL Pointer Dereference
Explain the vulnerability: CVE-2022-0610
Description:Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0581
Description:Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Explain the vulnerability: CVE-2022-0702
Description:The Petfinder Listings WordPress plugin through 1.0.18 does not escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Explain the vulnerability: CVE-2022-0352
Description:Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.
Explain the vulnerability: CVE-2022-0647
Description:The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the post_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Explain the vulnerability: CVE-2022-0578
Description:Code Injection in GitHub repository publify/publify prior to 9.2.8.
Explain the vulnerability: CVE-2022-0128
Description:vim is vulnerable to Out-of-bounds Read
Explain the vulnerability: CVE-2022-0981
Description:A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended.
Explain the vulnerability: CVE-2022-0597
Description:Open Redirect in Packagist microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0344
Description:An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project
Explain the vulnerability: CVE-2022-0714
Description:Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.
Explain the vulnerability: CVE-2022-0201
Description:The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site Scripting issue
Explain the vulnerability: CVE-2022-0651
Description:The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.
Explain the vulnerability: CVE-2022-0485
Description:A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.
Explain the vulnerability: CVE-2022-0190
Description:The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.6 is affected by a SQL Injection in the id parameter of the delete action.
Explain the vulnerability: CVE-2022-0893
Description:Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
Explain the vulnerability: CVE-2022-0743
Description:Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.
Explain the vulnerability: CVE-2022-0313
Description:The Float menu WordPress plugin before 4.3.1 does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack
Explain the vulnerability: CVE-2022-0606
Description:Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0256
Description:pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Explain the vulnerability: CVE-2022-0221
Description:A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could result in information disclosure when opening a malicious solution file provided by an attacker with SCADAPack Workbench. This could be exploited to pass data from local files to a remote system controlled by an attacker. Affected Product: SCADAPack Workbench (6.6.8a and prior)
Explain the vulnerability: CVE-2022-0671
Description:A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.
Explain the vulnerability: CVE-2022-0364
Description:The Modern Events Calendar Lite WordPress plugin before 6.4.0 does not sanitize and escape some of the Hourly Schedule parameters which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks
Explain the vulnerability: CVE-2022-0734
Description:A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.35 through 5.20, and VPN series firmware versions 4.35 through 5.20, that could allow an attacker to obtain some information stored in the user's browser, such as cookies or session tokens, via a malicious script.
Explain the vulnerability: CVE-2022-0558
Description:Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0763
Description:Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.
Explain the vulnerability: CVE-2022-0333
Description:A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.
Explain the vulnerability: CVE-2022-0919
Description:The Salon booking system Free and pro WordPress plugins before 7.6.3 do not have proper authorisation when searching bookings, allowing any unauthenticated users to search other's booking, as well as retrieve sensitive information about the bookings, such as the full name, email and phone number of the person who booked it.
Explain the vulnerability: CVE-2022-0260
Description:Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.
Explain the vulnerability: CVE-2022-0630
Description:Out-of-bounds Read in Homebrew mruby prior to 3.2.
Explain the vulnerability: CVE-2022-0775
Description:The WooCommerce WordPress plugin before 6.2.1 does not have proper authorisation check when deleting reviews, which could allow any authenticated users, such as subscriber to delete arbitrary comment
Explain the vulnerability: CVE-2022-0519
Description:Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
Explain the vulnerability: CVE-2022-0149
Description:The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.
Explain the vulnerability: CVE-2022-0667
Description:When the vulnerability is triggered the BIND process will exit. BIND 9.18.0
Explain the vulnerability: CVE-2022-0237
Description:Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the ir_agent.exe component, resulting in elevated rights and persistent access to the machine. This issue was fixed in Rapid7 Insight Agent version 3.1.3.80.
Explain the vulnerability: CVE-2022-0722
Description:Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.
Explain the vulnerability: CVE-2022-0372
Description:Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.
Explain the vulnerability: CVE-2022-0688
Description:Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0958
Description:The Mark Posts WordPress plugin before 2.0.1 does not escape new markers, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Explain the vulnerability: CVE-2022-0759
Description:A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate (it wrongly returns VERIFY_NONE). Ruby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).
Explain the vulnerability: CVE-2022-0309
Description:Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Explain the vulnerability: CVE-2022-0866
Description:This is a concurrency issue that can result in the wrong caller principal being returned from the session context of an EJB that is configured with a RunAs principal. In particular, the org.jboss.as.ejb3.component.EJBComponent class has an incomingRunAsIdentity field. This field is used by the org.jboss.as.ejb3.security.RunAsPrincipalInterceptor to keep track of the current identity prior to switching to a new identity created using the RunAs principal. The exploit consist that the EJBComponent#incomingRunAsIdentity field is currently just a SecurityIdentity. This means in a concurrent environment, where multiple users are repeatedly invoking an EJB that is configured with a RunAs principal, it's possible for the wrong the caller principal to be returned from EJBComponent#getCallerPrincipal. Similarly, it's also possible for EJBComponent#isCallerInRole to return the wrong value. Both of these methods rely on incomingRunAsIdentity. Affects all versions of JBoss EAP from 7.1.0 and all versions of WildFly 11+ when Elytron is enabled.
Explain the vulnerability: CVE-2022-0165
Description:The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
Explain the vulnerability: CVE-2022-0020
Description:A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.
Explain the vulnerability: CVE-2022-0470
Description:Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0923
Description:Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
Explain the vulnerability: CVE-2022-0889
Description:The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and including 3.3.12.
Explain the vulnerability: CVE-2022-0562
Description:Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.
Explain the vulnerability: CVE-2022-0098
Description:Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.
Explain the vulnerability: CVE-2022-0132
Description:peertube is vulnerable to Server-Side Request Forgery (SSRF)
Explain the vulnerability: CVE-2022-0831
Description:Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
Explain the vulnerability: CVE-2022-0974
Description:Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0427
Description:Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
Explain the vulnerability: CVE-2022-0348
Description:Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.
Explain the vulnerability: CVE-2022-0827
Description:The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users
Explain the vulnerability: CVE-2022-0124
Description:An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. Gitlab's Slack integration is incorrectly validating user input and allows to craft malicious URLs that are sent to slack.
Explain the vulnerability: CVE-2022-0574
Description:Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
Explain the vulnerability: CVE-2022-0431
Description:The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting
Explain the vulnerability: CVE-2022-0962
Description:Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.
Explain the vulnerability: CVE-2022-0523
Description:Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
Explain the vulnerability: CVE-2022-0489
Description:An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.
Explain the vulnerability: CVE-2022-0870
Description:Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.
Explain the vulnerability: CVE-2022-0935
Description:Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.
Explain the vulnerability: CVE-2022-0466
Description:Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.
Explain the vulnerability: CVE-2022-0314
Description:The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Explain the vulnerability: CVE-2022-0601
Description:The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Explain the vulnerability: CVE-2022-0251
Description:Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.
Explain the vulnerability: CVE-2022-0178
Description:Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8.
Explain the vulnerability: CVE-2022-0528
Description:Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
Explain the vulnerability: CVE-2022-0894
Description:Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.
Explain the vulnerability: CVE-2022-0197
Description:phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
Explain the vulnerability: CVE-2022-0343
Description:A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2
Explain the vulnerability: CVE-2022-0713
Description:Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
Explain the vulnerability: CVE-2022-0206
Description:The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
Explain the vulnerability: CVE-2022-0986
Description:Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.
Explain the vulnerability: CVE-2022-0085
Description:Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.
Explain the vulnerability: CVE-2022-0590
Description:The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Explain the vulnerability: CVE-2022-0969
Description:The Image optimization & Lazy Load by Optimole WordPress plugin before 3.3.2 does not sanitise and escape its "Lazyload background images for selectors" settings, which could allow high privilege users such as admin to perform Cross-Site scripting attacks even when the unfiltered_html capability is disallowed.
Explain the vulnerability: CVE-2022-0640
Description:The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Explain the vulnerability: CVE-2022-0210
Description:The Random Banner WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the category parameter found in the ~/include/models/model.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.1.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Explain the vulnerability: CVE-2022-0139
Description:Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
Explain the vulnerability: CVE-2022-0093
Description:An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.
Explain the vulnerability: CVE-2022-0586
Description:Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Explain the vulnerability: CVE-2022-0302
Description:Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0617
Description:A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.
Explain the vulnerability: CVE-2022-0494
Description:A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
Explain the vulnerability: CVE-2022-0396
Description:BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.
Explain the vulnerability: CVE-2022-0379
Description:Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0683
Description:The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the ~/includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 5.0.8.
Explain the vulnerability: CVE-2022-0400
Description:An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.
Explain the vulnerability: CVE-2022-0953
Description:The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters
Explain the vulnerability: CVE-2022-0545
Description:An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
Explain the vulnerability: CVE-2022-0115
Description:Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Explain the vulnerability: CVE-2022-0791
Description:Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions.
Explain the vulnerability: CVE-2022-0284
Description:A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.
Explain the vulnerability: CVE-2022-0142
Description:The Visual Form Builder WordPress plugin before 3.0.8 is vulnerable to CSV injection allowing a user with low level or no privileges to inject a command that will be included in the exported CSV file, leading to possible code execution.
Explain the vulnerability: CVE-2022-0841
Description:OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.
Explain the vulnerability: CVE-2022-0787
Description:The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections
Explain the vulnerability: CVE-2022-0338
Description:Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.
Explain the vulnerability: CVE-2022-0768
Description:Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.
Explain the vulnerability: CVE-2022-0912
Description:Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0857
Description:A reflected cross-site scripting (XSS) vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote attacker to potentially obtain access to an ePO administrator's session by convincing the attacker to click on a carefully crafted link. This would lead to limited access to sensitive information and limited ability to alter some information in ePO due to the area of the User Interface the vulnerability is present in.
Explain the vulnerability: CVE-2022-0154
Description:An issue has been discovered in GitLab affecting all versions starting from 7.7 before 14.4.5, all versions starting from 14.5.0 before 14.5.3, all versions starting from 14.6.0 before 14.6.2. GitLab was vulnerable to a Cross-Site Request Forgery attack that allows a malicious user to have their GitHub project imported on another GitLab user account.
Explain the vulnerability: CVE-2022-0380
Description:The Fotobook WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping and the use of $_SERVER['PHP_SELF'] found in the ~/options-fotobook.php file which allows attackers to inject arbitrary web scripts onto the page, in versions up to and including 3.2.3.
Explain the vulnerability: CVE-2022-0695
Description:Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
Explain the vulnerability: CVE-2022-0945
Description:Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.
Explain the vulnerability: CVE-2022-0103
Description:Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0553
Description:There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.
Explain the vulnerability: CVE-2022-0800
Description:Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0877
Description:Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
Explain the vulnerability: CVE-2022-0524
Description:Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.
Explain the vulnerability: CVE-2022-0174
Description:Improper Validation of Specified Quantity in Input vulnerability in dolibarr dolibarr/dolibarr.
Explain the vulnerability: CVE-2022-0461
Description:Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page.
Explain the vulnerability: CVE-2022-0031
Description:A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.
Explain the vulnerability: CVE-2022-0898
Description:The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
Explain the vulnerability: CVE-2022-0932
Description:Missing Authorization in GitHub repository saleor/saleor prior to 3.1.2.
Explain the vulnerability: CVE-2022-0318
Description:Heap-based Buffer Overflow in vim/vim prior to 8.2.
Explain the vulnerability: CVE-2022-0748
Description:The package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.
Explain the vulnerability: CVE-2022-0123
Description:An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services.
Explain the vulnerability: CVE-2022-0573
Description:JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.
Explain the vulnerability: CVE-2022-0820
Description:Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.
Explain the vulnerability: CVE-2022-0965
Description:Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.
Explain the vulnerability: CVE-2022-0436
Description:Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.
Explain the vulnerability: CVE-2022-0836
Description:The SEMA API WordPress plugin before 4.02 does not properly sanitise and escape some parameters before using them in SQL statements via an AJAX action, leading to SQL Injections exploitable by unauthenticated users
Explain the vulnerability: CVE-2022-0565
Description:Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.
Explain the vulnerability: CVE-2022-0135
Description:An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl, leading to a denial of service or possible code execution.
Explain the vulnerability: CVE-2022-0420
Description:The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks
Explain the vulnerability: CVE-2022-0070
Description:Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.
Explain the vulnerability: CVE-2022-0973
Description:Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0359
Description:Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Explain the vulnerability: CVE-2022-0162
Description:The vulnerability exists in TP-Link TL-WR841N V11 3.16.9 Build 160325 Rel.62500n wireless router due to transmission of authentication information in cleartextbase64 format. Successful exploitation of this vulnerability could allow a remote attacker to intercept credentials and subsequently perform administrative operations on the affected device through web-based management interface.
Explain the vulnerability: CVE-2022-0861
Description:A XML Extended entity vulnerability in McAfee Enterprise ePolicy Orchestrator (ePO) prior to 5.10 Update 13 allows a remote administrator attacker to upload a malicious XML file through the extension import functionality. The impact is limited to some access to confidential information and some ability to alter data.
Explain the vulnerability: CVE-2022-0924
Description:Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 408976c4.
Explain the vulnerability: CVE-2022-0027
Description:An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.
Explain the vulnerability: CVE-2022-0549
Description:An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI.
Explain the vulnerability: CVE-2022-0660
Description:Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
Explain the vulnerability: CVE-2022-0230
Description:The Better WordPress Google XML Sitemaps WordPress plugin through 1.4.1 does not sanitise and escape its logs when outputting them in the admin dashboard, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks against admins
Explain the vulnerability: CVE-2022-0725
Description:A flaw was found in keepass. The vulnerability occurs due to logging the plain text passwords in system log and leads to an Information Exposure vulnerability. This flaw allows an attacker to interact and read sensitive passwords and logs.
Explain the vulnerability: CVE-2022-0375
Description:Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
Explain the vulnerability: CVE-2022-0637
Description:open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6
Explain the vulnerability: CVE-2022-0772
Description:Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.
Explain the vulnerability: CVE-2022-0158
Description:vim is vulnerable to Heap-based Buffer Overflow
Explain the vulnerability: CVE-2022-0508
Description:Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
Explain the vulnerability: CVE-2022-0621
Description:The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Explain the vulnerability: CVE-2022-0271
Description:The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting
Explain the vulnerability: CVE-2022-0764
Description:Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.
Explain the vulnerability: CVE-2022-0334
Description:A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.
Explain the vulnerability: CVE-2022-0949
Description:The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbots_grava_fingerprint AJAX action, available to unauthenticated users, leading to a SQL injection
Explain the vulnerability: CVE-2022-0226
Description:livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Explain the vulnerability: CVE-2022-0676
Description:Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
Explain the vulnerability: CVE-2022-0363
Description:The myCred WordPress plugin before 2.4.3.1 does not have any authorisation and CSRF checks in the mycred-tools-import-export AJAX action, allowing any authenticated users, such as subscribers, to call it and import mycred setup, thus creating badges, managing points or creating arbitrary posts.
Explain the vulnerability: CVE-2022-0699
Description:A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.
Explain the vulnerability: CVE-2022-0677
Description:Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.
Explain the vulnerability: CVE-2022-0362
Description:SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.
Explain the vulnerability: CVE-2022-0698
Description:Microweber version 1.3.1 allows an unauthenticated user to perform an account takeover via an XSS on the 'select-file' parameter.
Explain the vulnerability: CVE-2022-0732
Description:The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR (Insecure Direct Object Reference) vulnerability.
Explain the vulnerability: CVE-2022-0948
Description:The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not sanitise and escape the id parameter before using it in a SQL statement via a REST route available to unauthenticated users, leading to an SQL injection
Explain the vulnerability: CVE-2022-0620
Description:The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Explain the vulnerability: CVE-2022-0765
Description:The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline events from elements in the source translation strings before outputting them in the editor in the plugin admin panel, allowing any user with access to the plugin (Translator and Administrator by default) to add arbitrary javascript payloads to the source strings leading to a stored cross-site scripting (XSS) vulnerability.
Explain the vulnerability: CVE-2022-0335
Description:A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.
Explain the vulnerability: CVE-2022-0509
Description:Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.
Explain the vulnerability: CVE-2022-0266
Description:Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.
Explain the vulnerability: CVE-2022-0636
Description:A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash.
Explain the vulnerability: CVE-2022-0773
Description:The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.
Explain the vulnerability: CVE-2022-0289
Description:Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Explain the vulnerability: CVE-2022-0661
Description:The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a stored cross-site scripting (XSS) vulnerability. Further it is also possible to inject PHP code, leading to a Remote Code execution (RCE) vulnerability, even if the DISALLOW_FILE_EDIT and DISALLOW_FILE_MOD constants are both set.
Explain the vulnerability: CVE-2022-0231
Description:livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)
Explain the vulnerability: CVE-2022-0374
Description:Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
Explain the vulnerability: CVE-2022-0118
Description:Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page.
Explain the vulnerability: CVE-2022-0163
Description:The Smart Forms WordPress plugin before 2.6.71 does not have authorisation in its rednao_smart_forms_entries_list AJAX action, allowing any authenticated users, such as subscriber, to download arbitrary form's data, which could include sensitive information such as PII depending on the form.
Explain the vulnerability: CVE-2022-0499
Description:The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones.
Explain the vulnerability: CVE-2022-0860
Description:Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
Explain the vulnerability: CVE-2022-0026
Description:A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.
Explain the vulnerability: CVE-2022-0358
Description:A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.
Explain the vulnerability: CVE-2022-0708
Description:Mattermost 6.3.0 and earlier fails to protect email addresses of the creator of the team via one of the APIs, which allows authenticated team members to access this information resulting in sensitive & private information disclosure.