yahoo-inc/cve-impacts huggingface dataset:
CVE-2022-0396: BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.
Key phrases: tcp streams
CVE-2022-0397: The WPC Smart Wishlist for WooCommerce WordPress plugin before 2.9.4 does not sanitise and escape the key parameter before outputting it back in the wishlist_quickview AJAX action's response (available to any authenticated user), leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0398: The ThirstyAffiliates Affiliate Link Manager WordPress plugin before 3.10.5 does not have authorisation and CSRF checks when creating affiliate links, which could allow any authenticated user, such as subscriber to create arbitrary affiliate links, which could then be used to redirect users to an arbitrary website
Key phrases: create arbitrary affiliate links, csrf checks
CVE-2022-0399: The Advanced Product Labels for WooCommerce WordPress plugin before 1.2.3.7 does not sanitise and escape the tax_color_set_type parameter before outputting it back in the berocket_apl_color_listener AJAX action's response, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0400: An out-of-bounds read vulnerability was discovered in linux kernel in the smc protocol stack, causing remote dos.
Key phrases: out-of-bounds read, remote dos, out of bounds read
CVE-2022-0401: Path Traversal in NPM w-zip prior to 1.0.12.
Key phrases: path traversal
CVE-2022-0403: The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is know to be affected by security issues (CVE-2021-32682), and does not have any authorisation as well as CSRF checks in its connector AJAX action, allowing any authenticated users, such as subscriber to call it. Furthermore, as the options passed to the elFinder library does not restrict any file type, users with a role as low as subscriber can Create/Upload/Delete Arbitrary files and folders.
Key phrases: call it, arbitrary file
CVE-2022-0404: The Material Design for Contact Form 7 WordPress plugin through 2.6.4 does not check authorization or that the option mentioned in the notice param belongs to the plugin when processing requests to the cf7md_dismiss_notice action, allowing any logged in user (with roles as low as Subscriber) to set arbitrary options to true, potentially leading to Denial of Service by breaking the site.
Key phrases: set arbitrary options, set arbitrary options to true, denial of service, breaking the site
CVE-2022-0405: Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.
Key phrases: improper access control
CVE-2022-0406: Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.
Key phrases: improper authorization
CVE-2022-0407: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Key phrases: heap-based buffer overflow
CVE-2022-0408: Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Key phrases: stack-based buffer overflow
CVE-2022-0409: Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.
Key phrases: unrestricted upload of file with dangerous type
CVE-2022-0410: The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 5.6 does not sanitise and escape the id parameter before using it in a SQL statement via the refUrlDetails AJAX action, available to any authenticated user, leading to a SQL injection
Key phrases: sql injection
CVE-2022-0411: The Asgaros Forum WordPress plugin before 2.0.0 does not sanitise and escape the post_id parameter before using it in a SQL statement via a REST route of the plugin (accessible to any authenticated user), leading to a SQL injection
Key phrases: sql injection
CVE-2022-0412: The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishlist Pro WordPress plugin before 1.40.1 do not sanitise and escape the item_id parameter before using it in a SQL statement via the wishlist/remove_product REST endpoint, allowing unauthenticated attackers to perform SQL injection attacks
Key phrases: perform SQL injection attacks, sql injection
CVE-2022-0413: Use After Free in GitHub repository vim/vim prior to 8.2.
Key phrases: use after free
CVE-2022-0414: Improper Validation of Specified Quantity in Input in Packagist dolibarr/dolibarr prior to 16.0.
Key phrases: improper validation
CVE-2022-0415: Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.
Key phrases: remote command execution
CVE-2022-0417: Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.
Key phrases: heap-based buffer overflow
CVE-2022-0418: The Event List WordPress plugin before 0.8.8 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks against other admin even when the unfiltered_html is disallowed
Key phrases: perform Cross-Site Scripting attacks against other, cross-site scripting, unfiltered_html
CVE-2022-0419: NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
Key phrases: null pointer dereference
CVE-2022-0420: The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks
Key phrases: perform SQL injection attacks, sql injection
CVE-2022-0421: The Five Star Restaurant Reservations WordPress plugin before 2.4.12 does not have authorisation when changing whether a payment was successful or failed, allowing unauthenticated users to change the payment status of arbitrary bookings. Furthermore, due to the lack of sanitisation and escaping, attackers could perform Cross-Site Scripting attacks against a logged in admin viewing the failed payments
Key phrases: change the payment status of arbitrary bookings, sanitisation, cross-site scripting
CVE-2022-0422: The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_custom_js] parameter before outputting it back in the response while previewing, leading to a Reflected Cross-Site Scripting issue
Key phrases: reflected cross-site scripting
CVE-2022-0423: The 3D FlipBook WordPress plugin before 1.12.1 does not have authorisation and CSRF checks when updating its settings, and does not have any sanitisation/escaping, allowing any authenticated users, such as subscriber to put Cross-Site Scripting payloads in all pages with a 3d flipbook.
Key phrases: put Cross-Site Scripting payloads in all, cross-site scripting payloads
CVE-2022-0424: The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users
Key phrases: call it and get the email addresses of
CVE-2022-0425: A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.
Key phrases: trigger Server Side Request Forgery (SSRF), dns rebinding, server side request forgery (ssrf)
CVE-2022-0426: The Product Feed PRO for WooCommerce WordPress plugin before 11.2.3 does not escape the rowCount parameter before outputting it back in an attribute via the woosea_categories_dropdown AJAX action (available to any authenticated user), leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0427: Missing sanitization of HTML attributes in Jupyter notebooks in all versions of GitLab CE/EE since version 14.5 allows an attacker to perform arbitrary HTTP POST requests on a user's behalf leading to potential account takeover
Key phrases: perform arbitrary HTTP POST requests, perform arbitrary HTTP POST requests on a user, missing sanitization of html attributes, account takeover
CVE-2022-0428: The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0429: The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.
Key phrases: cross-site scripting
CVE-2022-0430: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.
CVE-2022-0431: The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0432: Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.
Key phrases: prototype pollution
CVE-2022-0433: A NULL pointer dereference flaw was found in the Linux kernel's BPF subsystem in the way a user triggers the map_get_next_key function of the BPF bloom filter. This flaw allows a local user to crash the system. This flaw affects Linux kernel versions prior to 5.17-rc1.
Key phrases: crash the system, null pointer dereference flaw, crash system
CVE-2022-0434: The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape the post_ids parameter before using it in a SQL statement via a REST endpoint, available to both unauthenticated and authenticated users. As a result, unauthenticated attackers could perform SQL injection attacks
Key phrases: sql injection
CVE-2022-0435: A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate their privileges if they have access to the TIPC network.
Key phrases: crash the system or possibly escalate their privileges, stack overflow, crash system, escalate privilege
CVE-2022-0436: Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.
Key phrases: path traversal
CVE-2022-0437: Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
Key phrases: cross-site scripting (xss)
CVE-2022-0439: The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not correctly escape the `order` and `orderby` parameters to the `ajax_fetch_report_list` action, making it vulnerable to blind SQL injection attacks by users with roles as low as Subscriber. Further, it does not have any CSRF protection in place for the action, allowing an attacker to trick any logged in user to perform the action by clicking a link.
Key phrases: trick any logged in user to perform the, sql injection, csrf protection
CVE-2022-0440: The Catch Themes Demo Import WordPress plugin before 2.1.1 does not validate one of the file to be imported, which could allow high privivilege admin to upload an arbitrary PHP file and gain RCE even in the case of an hardened blog (ie DISALLOW_UNFILTERED_HTML, DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS constants set to true)
Key phrases: gain RCE even in the case of an hardened blog, upload an arbitrary PHP file and gain RCE, rce, arbitrary php
CVE-2022-0441: The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin
Key phrases: register as an admin, unauthenticated users
CVE-2022-0442: The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar.
Key phrases: overwrite another users avatar, access controls
CVE-2022-0443: Use After Free in GitHub repository vim/vim prior to 8.2.
Key phrases: use after free
CVE-2022-0444: The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin WordPress plugin before 4.3.6 does not have authorisation and CSRF checks when resetting its settings, allowing unauthenticated attackers to reset them, including generating a new backup encryption key.
Key phrases: reset them, csrf checks
CVE-2022-0445: The WordPress Real Cookie Banner: GDPR (DSGVO) & ePrivacy Cookie Consent WordPress plugin before 2.14.2 does not have CSRF checks in place when resetting its settings, allowing attackers to make a logged in admin reset them via a CSRF attack
Key phrases: make a logged in admin reset them via, csrf checks
CVE-2022-0446: The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Key phrases: perform Cross-Site Scripting attacks even when, cross-site scripting, unfiltered_html capability
CVE-2022-0447: The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting it back in the response of the post_grid_update_taxonomies_terms_by_posttypes AJAX action, available to any authenticated users, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0448: The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Key phrases: perform Cross-Site Scripting attacks even when, cross-site scripting, unfiltered_html
CVE-2022-0449: The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, leading to a Reflected Cross-Site Scripting
Key phrases: reflected cross-site scripting
CVE-2022-0450: The Menu Image, Icons made easy WordPress plugin before 3.0.6 does not have authorisation and CSRF checks when saving menu settings, and does not validate, sanitise and escape them. As a result, any authenticate users, such as subscriber can update the settings or arbitrary menu and put Cross-Site Scripting payloads in them which will be triggered in the related menu in the frontend
Key phrases: cross-site scripting payloads
CVE-2022-0451: Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirection logic. If a request is sent to example.com with authorization header and it redirects to an attackers site, they might not expect attacker site to receive authorization header. We recommend updating the Dart SDK to version 2.16.0 or beyond.
Key phrases: sensitive information
CVE-2022-0452: Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Key phrases: use after free, sandbox escape
CVE-2022-0453: Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption
CVE-2022-0454: Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Key phrases: heap buffer overflow, heap corruption
CVE-2022-0455: Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Key phrases: spoofing
CVE-2022-0456: Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction.
Key phrases: use after free, heap corruption, profile destruction
CVE-2022-0457: Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Key phrases: type confusion, heap corruption
CVE-2022-0458: Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption
CVE-2022-0459: Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption, convince
CVE-2022-0460: Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption
CVE-2022-0461: Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page.
Key phrases: bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed, bypass iframe sandbox via a crafted HTML page, Policy bypass, policy bypass
CVE-2022-0462: Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Key phrases: cross-origin data
CVE-2022-0463: Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.
Key phrases: use after free, heap corruption, convince
CVE-2022-0464: Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.
Key phrases: use after free, heap corruption, convince
CVE-2022-0465: Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction.
Key phrases: use after free, heap corruption
CVE-2022-0466: Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.
Key phrases: sandbox escape, convince
CVE-2022-0467: Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98.0.4758.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
Key phrases: bypass navigation restrictions
CVE-2022-0468: Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption
CVE-2022-0469: Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page.
Key phrases: use after free, heap corruption, convince
CVE-2022-0470: Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Key phrases: out of bounds memory access, heap corruption
CVE-2022-0471: The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue
Key phrases: reflected cross-site scripting
CVE-2022-0472: Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.
Key phrases: unrestricted upload of file with dangerous type
CVE-2022-0473: OTRS administrators can configure dynamic field and inject malicious JavaScript code in the error message of the regular expression check. When used in the agent interface, malicious code might be exectued in the browser. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.31 and prior versions.
Key phrases: dynamic field
CVE-2022-0474: Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions.
CVE-2022-0475: Malicious translator is able to inject JavaScript code in few translatable strings (where HTML is allowed). The code could be executed in the Package manager. This issue affects: OTRS AG OTRS 7.0.x version: 7.0.32 and prior versions, 8.0.x version: 8.0.19 and prior versions.
CVE-2022-0476: Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
Key phrases: denial of service
CVE-2022-0477: An issue has been discovered in GitLab affecting all versions starting from 11.9 before 14.5.4, all versions starting from 14.6.0 before 14.6.4, all versions starting from 14.7.0 before 14.7.1. GitLab was not correctly handling bulk requests to delete existing packages from the package registries which could result in a Denial of Service under specific conditions.
Key phrases: denial of service
CVE-2022-0478: The Event Manager and Tickets Selling for WooCommerce WordPress plugin before 3.5.8 does not validate and escape the post_author_gutenberg parameter before using it in a SQL statement when creating/editing events, which could allow users with a role as low as contributor to perform SQL Injection attacks
Key phrases: perform SQL Injection attacks, sql injection
CVE-2022-0479: The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard, leading to a SQL injection, which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link
Key phrases: sql injection, reflected cross-site scripting
CVE-2022-0480: A flaw was found in the filelock_init in fs/locks.c function in the Linux kernel. This issue can lead to host memory exhaustion due to memcg not limiting the number of Portable Operating System Interface (POSIX) file locks.
Key phrases: host memory exhaustion
CVE-2022-0481: NULL Pointer Dereference in Homebrew mruby prior to 3.2.
Key phrases: null pointer dereference
CVE-2022-0482: Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.
Key phrases: exposure of private personal information
CVE-2022-0483: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor (Windows) before build 53
Key phrases: local privilege escalation, insecure folder permissions
CVE-2022-0484: Lack of validation of URLs causes Mirantis Container Cloud Lens Extension before v3.1.1 to open external programs other than the default browser to perform sign on to a new cluster. An attacker could host a webserver which serves a malicious Mirantis Container Cloud configuration file and induce the victim to add a new cluster via its URL. This issue affects: Mirantis Mirantis Container Cloud Lens Extension v3 versions prior to v3.1.1.
Key phrases: lack of validation of urls
CVE-2022-0485: A flaw was found in the copying tool `nbdcopy` of libnbd. When performing multi-threaded copies using asynchronous nbd calls, nbdcopy was blindly treating the completion of an asynchronous command as successful, rather than checking the *error parameter. This could result in the silent creation of a corrupted destination image.
CVE-2022-0486: Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is present in Fidelis Network and Deception versions prior to 9.4.5. Patches and updates are available to address this vulnerability.
Key phrases: improper file permissions, escalation privilege
CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.
Key phrases: use-after-free, system confidentiality, use after free
CVE-2022-0488: An issue has been discovered in GitLab CE/EE affecting all versions starting with version 8.10. It was possible to trigger a timeout on a page with markdown by using a specific amount of block-quotes.
CVE-2022-0489: An issue has been discovered in GitLab CE/EE affecting all versions starting with 8.15 . It was possible to trigger a DOS by using the math feature with a specific formula in issue comments.
Key phrases: dos
CVE-2022-0492: A vulnerability was found in the Linux kernels cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.
Key phrases: bypass the namespace isolation unexpectedly, escalate privileges and bypass the namespace isolation unexpectedly
CVE-2022-0493: The String locator WordPress plugin before 2.5.0 does not properly validate the path of the files to be searched, allowing high privilege users such as admin to query arbitrary files on the web server via a path traversal vector. Furthermore, due to a flaw in the search, allowing a pattern to be provided, which will be used to output the relevant matches from the matching file, all content of the file can be disclosed.
Key phrases: query arbitrary files, query arbitrary files on the web server via, be provided, disclosed, path traversal
CVE-2022-0494: A kernel information leak flaw was identified in the scsi_ioctl function in drivers/scsi/scsi_ioctl.c in the Linux kernel. This flaw allows a local attacker with a special user privilege (CAP_SYS_ADMIN or CAP_SYS_RAWIO) to create issues with confidentiality.
Key phrases: create issues with confidentiality, kernel information leak
CVE-2022-0495: The library automation system product KOHA developed by Parantez Teknoloji before version 19.05.03 has an unauthenticated SQL Injection vulnerability. This has been fixed in the version 19.05.03.01.
Key phrases: sql injection
CVE-2022-0496: A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().
Key phrases: out-of-bounds memory access, out of bounds memory
CVE-2022-0497: A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.
Key phrases: out-of-bounds read, out of bounds read
CVE-2022-0499: The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones.
Key phrases: upload arbitrary files, make a logged in admin upload arbitrary files, csrf checks
CVE-2022-0500: A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernels BPF subsystem due to the way a user loads BTF. This flaw allows a local user to crash or escalate their privileges on the system.
Key phrases: crash or escalate their privileges on the system, out-of-bounds memory write, out of bounds memory, escalate privilege
CVE-2022-0501: Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12.
Key phrases: cross-site scripting (xss)
CVE-2022-0502: Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.
Key phrases: cross-site scripting (xss)
CVE-2022-0503: The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.2 does not sanitise and escape the s parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in the network dashboard
Key phrases: reflected cross-site scripting issue
CVE-2022-0504: Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.
Key phrases: sensitive information
CVE-2022-0505: Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.
Key phrases: cross-site request forgery (csrf)
CVE-2022-0506: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
Key phrases: cross-site scripting (xss)
CVE-2022-0507: Found a potential security vulnerability inside the Pandora API. Affected Pandora FMS version range: all versions of NG version, up to OUM 759. This vulnerability could allow an attacker with authenticated IP to inject SQL.
Key phrases: inject SQL
CVE-2022-0508: Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
Key phrases: server-side request forgery (ssrf)
CVE-2022-0509: Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.
Key phrases: cross-site scripting (xss)
CVE-2022-0510: Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.
Key phrases: cross-site scripting (xss)
CVE-2022-0511: Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 97.
Key phrases: run arbitrary code, memory safety bugs, memory corruption
CVE-2022-0512: Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.
Key phrases: Bypass Through User-Controlled, Authorization Bypass, authorization bypass
CVE-2022-0513: The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusion_reason parameter found in the ~/includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.4. This requires the "Record Exclusions" option to be enabled on the vulnerable site.
Key phrases: inject arbitrary SQL, obtain sensitive information, inject arbitrary SQL queries to obtain sensitive information, sql injection
CVE-2022-0514: Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5.
Key phrases: business logic errors
CVE-2022-0515: Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.
Key phrases: cross-site request forgery (csrf)
CVE-2022-0516: A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.
Key phrases: obtain unauthorized memory write access, linux kernel versions prior to
CVE-2022-0517: Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage this to launch arbitrary code with SYSTEM privilege. This vulnerability affects Mozilla VPN < 2.7.1.
Key phrases: launch arbitrary code, unsecured directory
CVE-2022-0518: Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
Key phrases: heap-based buffer overflow
CVE-2022-0519: Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
Key phrases: buffer access
CVE-2022-0520: Use After Free in NPM radare2.js prior to 5.6.2.
Key phrases: use after free
CVE-2022-0521: Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
Key phrases: access of memory location
CVE-2022-0522: Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
Key phrases: access of memory location
CVE-2022-0523: Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
Key phrases: use after free
CVE-2022-0524: Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.
Key phrases: business logic errors
CVE-2022-0525: Out-of-bounds Read in Homebrew mruby prior to 3.2.
Key phrases: out-of-bounds read
CVE-2022-0526: Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.
Key phrases: cross-site scripting (xss)
CVE-2022-0527: Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.
Key phrases: cross-site scripting (xss)
CVE-2022-0528: Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
Key phrases: server-side request forgery (ssrf)
CVE-2022-0529: A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
Key phrases: input a specially crafted zip file, out-of-bound write, crash, code execution, out of bound write
CVE-2022-0530: A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
Key phrases: input a specially crafted zip file, out-of-bound write, crash, code execution, out of bound write
CVE-2022-0531: The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the sub_page parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting
Key phrases: cross-site scripting
CVE-2022-0532: An incorrect sysctls validation vulnerability was found in CRI-O 1.18 and earlier. The sysctls from the list of "safe" sysctls specified for the cluster will be applied to the host if an attacker is able to create a pod with a hostIPC and hostNetwork kernel namespace.
Key phrases: sysctls validation
CVE-2022-0533: The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability.
Key phrases: reflected cross-site scripting (xss)
CVE-2022-0534: A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).
Key phrases: stack out-of-bounds read, crash, out of bounds read, segmentation fault
CVE-2022-0535: The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Key phrases: perform Cross-Site Scripting attacks even when, cross-site scripting, unfiltered_html capability
CVE-2022-0536: Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8.
Key phrases: improper removal of sensitive information
CVE-2022-0537: The MapPress Maps for WordPress plugin before 2.73.13 allows a high privileged user to bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files to the site through the "ajax_save" function. The file is written relative to the current 's stylesheet directory, and a .php file extension is added. No validation is performed on the content of the file, triggering an RCE vulnerability by uploading a web shell. Further the name parameter is not sanitized, allowing the payload to be uploaded to any directory to which the server has write access.
Key phrases: upload arbitrary files, bypass the DISALLOW_FILE_EDIT and DISALLOW_FILE_MODS settings and upload arbitrary files, be uploaded to any directory to which the, rce, file write
CVE-2022-0538: Jenkins 2.333 and earlier, LTS 2.319.2 and earlier defines custom XStream converters that have not been updated to apply the protections for the vulnerability CVE-2021-43859 and allow unconstrained resource usage.
Key phrases: unconstrained resource usage
CVE-2022-0539: Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.
Key phrases: cross-site scripting (xss)
CVE-2022-0540: A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
Key phrases: bypass authentication, bypass authentication by sending a specially crafted HTTP, jira seraph
CVE-2022-0541: The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary value.
Key phrases: initiate a new site install by setting the, arbitrary value
CVE-2022-0542: Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.
Key phrases: cross-site scripting (xss)
CVE-2022-0543: It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.
Key phrases: lua sandbox escape, remote code execution
CVE-2022-0544: An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
Key phrases: read sensitive data using a crafted DDS image, integer underflow, out-of-bounds read, out of bounds read
CVE-2022-0545: An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
Key phrases: leak sensitive information or achieve code execution in, integer overflow, write-what-where, out-of-bounds read, out of bounds read
CVE-2022-0546: A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
Key phrases: cause denial of service, out-of-bounds heap access, memory corruption, code execution
CVE-2022-0547: OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
Key phrases: bypass in external authentication, authentication bypass, be granted access with only partially correct credentials
CVE-2022-0549: An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not possible to do through the Web UI.
Key phrases: add other users to groups even if that
CVE-2022-0550: Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.
Key phrases: execute unattended commands on the appliance using web, improper input validation
CVE-2022-0551: Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.
Key phrases: execute unattended commands on the appliance using web, improper input validation, file upload
CVE-2022-0552: A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.
CVE-2022-0553: There is no check to see if slot 0 is being uploaded from the device to the host. When using encrypted images this means the unencrypted firmware can be retrieved easily.
Key phrases: slot 0, unencrypted firmware
CVE-2022-0554: Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
Key phrases: out-of-range pointer offset
CVE-2022-0556: A local privilege escalation vulnerability caused by incorrect permission assignment in some directories of the Zyxel AP Configurator (ZAC) version 1.1.4, which could allow an attacker to execute arbitrary code as a local administrator.
Key phrases: execute arbitrary code, execute arbitrary code as a local administrator, local privilege escalation
CVE-2022-0557: OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
Key phrases: os command injection
CVE-2022-0558: Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.
Key phrases: cross-site scripting (xss)
CVE-2022-0559: Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
Key phrases: use after free
CVE-2022-0560: Open Redirect in Packagist microweber/microweber prior to 1.2.11.
Key phrases: open redirect
CVE-2022-0561: Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, the fix is available with commit eecb0712.
Key phrases: null source pointer, denial of service
CVE-2022-0562: Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service via crafted TIFF file. For users that compile libtiff from sources, a fix is available with commit 561599c.
Key phrases: null source pointer, denial of service
CVE-2022-0563: A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specified file, it prints an error message containing data from the file. This flaw allows an unprivileged user to read root-owned files, potentially leading to privilege escalation. This flaw affects util-linux versions prior to 2.37.4.
Key phrases: read root-owned files, privilege escalation
CVE-2022-0564: A vulnerability in Qlik Sense Enterprise on Windows could allow an remote attacker to enumerate domain user accounts. An attacker could exploit this vulnerability by sending authentication requests to an affected system. A successful exploit could allow the attacker to compare the response time that are returned by the affected system to determine which accounts are valid user accounts. Affected systems are only vulnerable if they have LDAP configured.
Key phrases: enumerate domain user accounts, compare the response time that are returned by
CVE-2022-0565: Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.
Key phrases: cross-site scripting
CVE-2022-0566: It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.
Key phrases: out-of-bounds write, affects thunderbird <, out of bounds write
CVE-2022-0567: A flaw was found in ovn-kubernetes. This flaw allows a system administrator or privileged attacker to create an egress network policy that bypasses existing ingress policies of other pods in a cluster, allowing network traffic to access pods that should not be reachable. This issue results in information disclosure and other attacks on other pods that should not be reachable.
Key phrases: create an egress network policy that bypasses existing, access pods that should not be reachable, information disclosure
CVE-2022-0569: Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9.
Key phrases: observable discrepancy
CVE-2022-0570: Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.
Key phrases: heap-based buffer overflow
CVE-2022-0571: Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.
Key phrases: cross-site scripting (xss)
CVE-2022-0572: Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Key phrases: heap-based buffer overflow
CVE-2022-0573: JFrog Artifactory before 7.36.1 and 6.23.41, is vulnerable to Insecure Deserialization of untrusted data which can lead to DoS, Privilege Escalation and Remote Code Execution when a specially crafted request is sent by a low privileged authenticated user due to insufficient validation of a user-provided serialized object.
Key phrases: insecure deserialization, dos, privilege escalation, remote code execution
CVE-2022-0574: Improper Access Control in GitHub repository publify/publify prior to 9.2.8.
Key phrases: improper access control
CVE-2022-0575: Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.
Key phrases: cross-site scripting (xss)
CVE-2022-0576: Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.
Key phrases: cross-site scripting (xss)
CVE-2022-0577: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.
CVE-2022-0578: Code Injection in GitHub repository publify/publify prior to 9.2.8.
Key phrases: code injection
CVE-2022-0579: Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.
Key phrases: missing authorization
CVE-2022-0580: Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.
Key phrases: incorrect authorization
CVE-2022-0581: Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Key phrases: denial of service via packet injection or crafted, crash
CVE-2022-0582: Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Key phrases: denial of service via packet injection or crafted, unaligned access
CVE-2022-0583: Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file
Key phrases: denial of service via packet injection or crafted, crash