[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1997.

[Assistant] Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-1997?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujan2021.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1997?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-1998 mean in the context of cybersecurity?

[Assistant] CVE-2021-1998


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1998.

[Assistant] Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-1998?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujan2021.html'}, {'name': 'FEDORA-2021-db50ab62d3', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/'}, {'name': 'FEDORA-2021-b1d1655cef', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20210219-0003/'}, {'name': 'GLSA-202105-27', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202105-27'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1998?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2021-1999 mean in the context of cybersecurity?

[Assistant] CVE-2021-1999


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2021-1999.

[Assistant] Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ZFS Storage Appliance Kit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2021-1999?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujan2021.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2021-1999?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0001 mean in the context of cybersecurity?

[Assistant] CVE-2022-0001


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0001.

[Assistant] Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0001?

[Assistant] {'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html'}, {'name': '[oss-security] 20220318 Xen Security Advisory 398 v2 - Multiple speculative security issues', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2022/03/18/2'}, {'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20220818-0004/'}, {'name': 'VU#155143', 'tags': ['third-party-advisory'], 'url': 'https://www.kb.cert.org/vuls/id/155143'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0001?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0002 mean in the context of cybersecurity?

[Assistant] CVE-2022-0002


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0002.

[Assistant] Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0002?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html'}, {'name': '[oss-security] 20220318 Xen Security Advisory 398 v2 - Multiple speculative security issues', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/03/18/2'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220818-0004/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0002?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0004 mean in the context of cybersecurity?

[Assistant] CVE-2022-0004


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0004.

[Assistant] Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0004?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0004?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0005 mean in the context of cybersecurity?

[Assistant] CVE-2022-0005


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0005.

[Assistant] Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0005?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0005?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0010 mean in the context of cybersecurity?

[Assistant] CVE-2022-0010


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0010.

[Assistant]
Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools.

An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes.

This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0010?

[Assistant] {'url': 'https://search.abb.com/library/Download.aspx?DocumentID=3BUS221709&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.108646530.1437951308.1684739395-1142547495.1678209228'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0010?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0011 mean in the context of cybersecurity?

[Assistant] CVE-2022-0011


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0011.

[Assistant] PAN-OS software provides options to exclude specific websites from URL category enforcement and those websites are blocked or allowed (depending on your rules) regardless of their associated URL category. This is done by creating a custom URL category list or by using an external dynamic list (EDL) in a URL Filtering profile. When the entries in these lists have a hostname pattern that does not end with a forward slash (/) or a hostname pattern that ends with an asterisk (*), any URL that starts with the specified pattern is considered a match. Entries with a caret (^) at the end of a hostname pattern match any top level domain. This may inadvertently allow or block more URLs than intended and allowing more URLs than intended represents a security risk. For example: example.com will match example.com.website.test example.com.* will match example.com.website.test example.com.^ will match example.com.test You should take special care when using such entries in policy rules that allow traffic. Where possible, use the exact list of hostname names ending with a forward slash (/) instead of using wildcards. PAN-OS 10.1 versions earlier than PAN-OS 10.1.3; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8; PAN-OS 9.1 versions earlier than PAN-OS 9.1.12; all PAN-OS 9.0 versions; PAN-OS 8.1 versions earlier than PAN-OS 8.1.21, and Prisma Access 2.2 and 2.1 versions do not allow customers to change this behavior without changing the URL category list or EDL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0011?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0011'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0011?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0012 mean in the context of cybersecurity?

[Assistant] CVE-2022-0012


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0012.

[Assistant] An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0012?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0012'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0012?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0013 mean in the context of cybersecurity?

[Assistant] CVE-2022-0013


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0013.

[Assistant] A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0013?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0013'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0013?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0014 mean in the context of cybersecurity?

[Assistant] CVE-2022-0014


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0014.

[Assistant] An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can then be unintentionally executed by another local user when that user utilizes a Live Terminal session. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0014?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0014'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0014?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0015 mean in the context of cybersecurity?

[Assistant] CVE-2022-0015


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0015.

[Assistant] A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0015?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0015'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0015?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0016 mean in the context of cybersecurity?

[Assistant] CVE-2022-0016


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0016.

[Assistant] An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0016?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0016'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0016?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0017 mean in the context of cybersecurity?

[Assistant] CVE-2022-0017


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0017.

[Assistant] An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a local attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges under certain circumstances. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows. GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.5 on Windows. This issue does not affect GlobalProtect app on other platforms.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0017?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0017'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0017?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0018 mean in the context of cybersecurity?

[Assistant] CVE-2022-0018


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0018.

[Assistant] An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account are sent to the GlobalProtect portal when the Single Sign-On feature is enabled in the GlobalProtect portal configuration. This product behavior is intentional and poses no security risk when connecting to trusted GlobalProtect portals configured to use the same Single Sign-On credentials both for the local user account as well as the GlobalProtect login. However when the credentials are different, the local account credentials are inadvertently sent to the GlobalProtect portal for authentication. A third party MITM type of attacker cannot see these credentials in transit. This vulnerability is a concern where the GlobalProtect app is deployed on Bring-your-Own-Device (BYOD) type of clients with private local user accounts or GlobalProtect app is used to connect to different organizations. Fixed versions of GlobalProtect app have an app setting to prevent the transmission of the user's local user credentials to the target GlobalProtect portal regardless of the portal configuration. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Windows and MacOS; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS This issue does not affect GlobalProtect app on other platforms.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0018?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0018'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0018?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0019 mean in the context of cybersecurity?

[Assistant] CVE-2022-0019


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0019.

[Assistant] An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of GlobalProtect users that saved their password during previous GlobalProtect app sessions to other local users on the system. The exposed credentials enable a local attacker to authenticate to the GlobalProtect portal or gateway as the target user without knowing of the target user’s plaintext password. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.10 on Linux. GlobalProtect app 5.2 versions earlier than and including GlobalProtect app 5.2.7 on Linux. GlobalProtect app 5.3 versions earlier than GlobalProtect app 5.3.2 on Linux. This issue does not affect the GlobalProtect app on other platforms.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0019?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0019'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0019?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0020 mean in the context of cybersecurity?

[Assistant] CVE-2022-0020


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0020.

[Assistant] A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XSOAR web interface on behalf of authenticated administrators who encounter the payload during normal operations. This issue impacts: All builds of Cortex XSOAR 6.1.0; Cortex XSOAR 6.2.0 builds earlier than build 1958888.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0020?

[Assistant] {'url': 'https://security.paloaltonetworks.com/CVE-2022-0020'}, {'url': 'http://packetstormsecurity.com/files/171782/Palo-Alto-Cortex-XSOAR-6.5.0-Cross-Site-Scripting.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0020?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0021 mean in the context of cybersecurity?

[Assistant] CVE-2022-0021


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0021.

[Assistant] An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of the connecting GlobalProtect user when authenticating using Connect Before Logon feature. This issue impacts GlobalProtect App 5.2 versions earlier than 5.2.9 on Windows. This issue does not affect the GlobalProtect app on other platforms.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0021?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0021'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0021?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0022 mean in the context of cybersecurity?

[Assistant] CVE-2022-0022


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0022.

[Assistant] Usage of a weak cryptographic algorithm in Palo Alto Networks PAN-OS software where the password hashes of administrator and local user accounts are not created with a sufficient level of computational effort, which allows for password cracking attacks on accounts in normal (non-FIPS-CC) operational mode. An attacker must have access to the account password hashes to take advantage of this weakness and can acquire those hashes if they are able to gain access to the PAN-OS software configuration. Fixed versions of PAN-OS software use a secure cryptographic algorithm for account password hashes. This issue does not impact Prisma Access firewalls. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.21; All versions of PAN-OS 9.0; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11; PAN-OS 10.0 versions earlier than PAN-OS 10.0.7.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0022?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0022'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0022?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0023 mean in the context of cybersecurity?

[Assistant] CVE-2022-0023


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0023.

[Assistant] An improper handling of exceptional conditions vulnerability exists in the DNS proxy feature of Palo Alto Networks PAN-OS software that enables a meddler-in-the-middle (MITM) to send specifically crafted traffic to the firewall that causes the service to restart unexpectedly. Repeated attempts to send this request result in denial-of-service to all PAN-OS services by restarting the device in maintenance mode. This issue does not impact Panorama appliances and Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.22; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5. This issue does not impact PAN-OS 10.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0023?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0023'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0023?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0024 mean in the context of cybersecurity?

[Assistant] CVE-2022-0024


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0024.

[Assistant] A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated network-based PAN-OS administrator to upload a specifically created configuration that disrupts system processes and potentially execute arbitrary code with root privileges when the configuration is committed on both hardware and virtual firewalls. This issue does not impact Panorama appliances or Prisma Access customers. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.23; PAN-OS 9.0 versions earlier than PAN-OS 9.0.16; PAN-OS 9.1 versions earlier than PAN-OS 9.1.13; PAN-OS 10.0 versions earlier than PAN-OS 10.0.10; PAN-OS 10.1 versions earlier than PAN-OS 10.1.5.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0024?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0024'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0024?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0025 mean in the context of cybersecurity?

[Assistant] CVE-2022-0025


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0025.

[Assistant] A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts: All versions of the Cortex XDR agent when upgrading to Cortex XDR agent 7.7.0 on Windows; Cortex XDR agent 7.7.0 without content update 500 or a later version on Windows. This issue does not impact other platforms or other versions of the Cortex XDR agent.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0025?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0025'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0025?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0026 mean in the context of cybersecurity?

[Assistant] CVE-2022-0026


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0026.

[Assistant] A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0026?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0026'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0026?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0027 mean in the context of cybersecurity?

[Assistant] CVE-2022-0027


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0027.

[Assistant] An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not have access. This issue impacts: All versions of Cortex XSOAR 6.1; All versions of Cortex XSOAR 6.2; All versions of Cortex XSOAR 6.5; Cortex XSOAR 6.6 versions earlier than Cortex XSOAR 6.6.0 build 6.6.0.2585049.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0027?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0027'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0027?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0028 mean in the context of cybersecurity?

[Assistant] CVE-2022-0028


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0028.

[Assistant] A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks. The DoS attack would appear to originate from a Palo Alto Networks PA-Series (hardware), VM-Series (virtual) and CN-Series (container) firewall against an attacker-specified target. To be misused by an external attacker, the firewall configuration must have a URL filtering profile with one or more blocked categories assigned to a source zone that has an external facing interface. This configuration is not typical for URL filtering and, if set, is likely unintended by the administrator. If exploited, this issue would not impact the confidentiality, integrity, or availability of our products. However, the resulting denial-of-service (DoS) attack may help obfuscate the identity of the attacker and implicate the firewall as the source of the attack. We have taken prompt action to address this issue in our PAN-OS software. All software updates for this issue are expected to be released no later than the week of August 15, 2022. This issue does not impact Panorama M-Series or Panorama virtual appliances. This issue has been resolved for all Cloud NGFW and Prisma Access customers and no additional action is required from them.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0028?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0028'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0028?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0029 mean in the context of cybersecurity?

[Assistant] CVE-2022-0029


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0029.

[Assistant] An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0029?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://security.paloaltonetworks.com/CVE-2022-0029'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0029?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0030 mean in the context of cybersecurity?

[Assistant] CVE-2022-0030


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0030.

[Assistant] An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0030?

[Assistant] {'url': 'https://security.paloaltonetworks.com/CVE-2022-0030'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0030?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0031 mean in the context of cybersecurity?

[Assistant] CVE-2022-0031


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0031.

[Assistant] A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XSOAR engine software running on a Linux operating system allows a local attacker with shell access to the engine to execute programs with elevated privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0031?

[Assistant] {'url': 'https://security.paloaltonetworks.com/CVE-2022-0031'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0031?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0070 mean in the context of cybersecurity?

[Assistant] CVE-2022-0070


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0070.

[Assistant] Incomplete fix for CVE-2021-3100. The Apache Log4j hotpatch package starting with log4j-cve-2021-44228-hotpatch-1.1-16 will now explicitly mimic the Linux capabilities and cgroups of the target Java process that the hotpatch is applied to.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0070?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://alas.aws.amazon.com/cve/html/CVE-2022-0070.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0070?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0071 mean in the context of cybersecurity?

[Assistant] CVE-2022-0071


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0071.

[Assistant] Incomplete fix for CVE-2021-3101. Hotdog, prior to v1.0.2, did not mimic the resource limits, device restrictions, or syscall filters of the target JVM process. This would allow a container to exhaust the resources of the host, modify devices, or make syscalls that would otherwise be blocked.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0071?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/bottlerocket-os/hotdog/security/advisories/GHSA-jr96-7frv-3mpj'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0071?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0072 mean in the context of cybersecurity?

[Assistant] CVE-2022-0072


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0072.

[Assistant] Directory Traversal vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Path Traversal. This affects versions from 1.5.11 through 1.5.12, from 1.6.5 through 1.6.20.1, from 1.7.0 before 1.7.16.1


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0072?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0072?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0073 mean in the context of cybersecurity?

[Assistant] CVE-2022-0073


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0073.

[Assistant] Improper Input Validation vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server dashboards allows Command Injection. This affects 1.7.0  versions before 1.7.16.1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0073?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0073?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0074 mean in the context of cybersecurity?

[Assistant] CVE-2022-0074


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0074.

[Assistant] Untrusted Search Path vulnerability in LiteSpeed Technologies OpenLiteSpeed Web Server and LiteSpeed Web Server Container allows Privilege Escalation. This affects versions from 1.6.15 before 1.7.16.1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0074?

[Assistant] {'url': 'https://github.com/litespeedtech/ols-dockerfiles/blob/master/template/Dockerfile#L29'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0074?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0079 mean in the context of cybersecurity?

[Assistant] CVE-2022-0079


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0079.

[Assistant] showdoc is vulnerable to Generation of Error Message Containing Sensitive Information


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0079?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/b37f0e26-355a-4d50-8495-a567c10828ee'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/star7th/showdoc/commit/e43df0a190f68aefa272507d3bd54475f566c1db'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0079?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0080 mean in the context of cybersecurity?

[Assistant] CVE-2022-0080


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0080.

[Assistant] mruby is vulnerable to Heap-based Buffer Overflow


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0080?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/59a70392-4864-4ce3-8e35-6ac2111d1e2e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/28ccc664e5dcd3f9d55173e9afde77c4705a9ab6'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0080?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0083 mean in the context of cybersecurity?

[Assistant] CVE-2022-0083


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0083.

[Assistant] livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0083?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4c477440-3b03-42eb-a6e2-a31b55090736'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/fbed8728be59040a7218610e72f6eceb5f8bc152'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0083?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0084 mean in the context of cybersecurity?

[Assistant] CVE-2022-0084


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0084.

[Assistant] A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0084?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2064226'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-0084'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/xnio/xnio/pull/291'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/xnio/xnio/commit/fdefb3b8b715d33387cadc4d48991fb1989b0c12'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0084?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0085 mean in the context of cybersecurity?

[Assistant] CVE-2022-0085


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0085.

[Assistant] Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0085?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/73dbcc78-5ba9-492f-9133-13bbc9f31236'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/dompdf/dompdf/commit/bb1ef65011a14730b7cfbe73506b4bb8a03704bd'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0085?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0086 mean in the context of cybersecurity?

[Assistant] CVE-2022-0086


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0086.

[Assistant] uppy is vulnerable to Server-Side Request Forgery (SSRF)


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0086?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0086?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0087 mean in the context of cybersecurity?

[Assistant] CVE-2022-0087


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0087.

[Assistant] keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0087?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c9d7374f-2cb9-4bac-9c90-a965942f413e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/keystonejs/keystone/commit/96bf833a23b1a0a5d365cf394467a943cc481b38'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0087?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0088 mean in the context of cybersecurity?

[Assistant] CVE-2022-0088


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0088.

[Assistant] Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0088?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/d01f0726-1a0f-4575-ae17-4b5319b11c29'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yourls/yourls/commit/1de256d8694b0ec7d4df2ac1d5976d4055e09d59'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0088?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0090 mean in the context of cybersecurity?

[Assistant] CVE-2022-0090


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0090.

[Assistant] An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement references with git sub-commands, allowing a malicious user to spoof the contents of their commits in the UI.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0090?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitaly/-/issues/3948'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1415964'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0090.json'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0090?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0093 mean in the context of cybersecurity?

[Assistant] CVE-2022-0093


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0093.

[Assistant] An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0093?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/343247'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1348738'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0093.json'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0093?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0094 mean in the context of cybersecurity?

[Assistant] CVE-2022-0094


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0094.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0094?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0094?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0095 mean in the context of cybersecurity?

[Assistant] CVE-2022-0095


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0095.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0095?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0095?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0096 mean in the context of cybersecurity?

[Assistant] CVE-2022-0096


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0096.

[Assistant] Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0096?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1275020'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0096?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0097 mean in the context of cybersecurity?

[Assistant] CVE-2022-0097


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0097.

[Assistant] Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0097?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1117173'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0097?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0098 mean in the context of cybersecurity?

[Assistant] CVE-2022-0098


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0098.

[Assistant] Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0098?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1273609'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0098?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0099 mean in the context of cybersecurity?

[Assistant] CVE-2022-0099


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0099.

[Assistant] Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0099?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1245629'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0099?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0100 mean in the context of cybersecurity?

[Assistant] CVE-2022-0100


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0100.

[Assistant] Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0100?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1238209'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0100?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0101 mean in the context of cybersecurity?

[Assistant] CVE-2022-0101


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0101.

[Assistant] Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0101?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1249426'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0101?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0102 mean in the context of cybersecurity?

[Assistant] CVE-2022-0102


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0102.

[Assistant] Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0102?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1260129'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0102?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0103 mean in the context of cybersecurity?

[Assistant] CVE-2022-0103


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0103.

[Assistant] Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0103?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1272266'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0103?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0104 mean in the context of cybersecurity?

[Assistant] CVE-2022-0104


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0104.

[Assistant] Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0104?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1273661'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0104?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0105 mean in the context of cybersecurity?

[Assistant] CVE-2022-0105


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0105.

[Assistant] Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0105?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1274376'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0105?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0106 mean in the context of cybersecurity?

[Assistant] CVE-2022-0106


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0106.

[Assistant] Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0106?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1278960'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0106?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0107 mean in the context of cybersecurity?

[Assistant] CVE-2022-0107


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0107.

[Assistant] Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0107?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1248438'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0107?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0108 mean in the context of cybersecurity?

[Assistant] CVE-2022-0108


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0108.

[Assistant] Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0108?

[Assistant] {'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'url': 'https://crbug.com/1248444'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}, {'name': '[oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/04/21/3'}, {'name': 'FEDORA-2023-5b61346bbe', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QL5OGMSHRQ26FTYWZUXVNWB2VHOSVXK/'}, {'name': 'FEDORA-2023-a4bbf02a57', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5OKKVEUQAAGH3NHMX3WHWKRPYU4QFKTQ/'}, {'name': 'DSA-5397', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5397'}, {'name': 'DSA-5396', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5396'}, {'name': 'FEDORA-2023-8900b35c6f', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC7DMUX37BRCLAI4VPQYHDUVEGTNYN5A/'}, {'name': '[debian-lts-announce] 20230512 [SECURITY] [DLA 3419-1] webkit2gtk security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/05/msg00011.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0108?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0109 mean in the context of cybersecurity?

[Assistant] CVE-2022-0109


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0109.

[Assistant] Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0109?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1261689'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0109?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0110 mean in the context of cybersecurity?

[Assistant] CVE-2022-0110


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0110.

[Assistant] Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0110?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1237310'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0110?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0111 mean in the context of cybersecurity?

[Assistant] CVE-2022-0111


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0111.

[Assistant] Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0111?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1241188'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0111?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0112 mean in the context of cybersecurity?

[Assistant] CVE-2022-0112


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0112.

[Assistant] Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0112?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1255713'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0112?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0113 mean in the context of cybersecurity?

[Assistant] CVE-2022-0113


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0113.

[Assistant] Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0113?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1039885'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0113?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0114 mean in the context of cybersecurity?

[Assistant] CVE-2022-0114


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0114.

[Assistant] Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0114?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1267627'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0114?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0115 mean in the context of cybersecurity?

[Assistant] CVE-2022-0115


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0115.

[Assistant] Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0115?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1268903'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0115?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0116 mean in the context of cybersecurity?

[Assistant] CVE-2022-0116


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0116.

[Assistant] Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0116?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1272250'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0116?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0117 mean in the context of cybersecurity?

[Assistant] CVE-2022-0117


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0117.

[Assistant] Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0117?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1115847'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0117?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0118 mean in the context of cybersecurity?

[Assistant] CVE-2022-0118


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0118.

[Assistant] Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-0118?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1238631'}, {'name': 'FEDORA-2022-d1a15f9cdb', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PAGL5M2KGYPN3VEQCRJJE6NA7D5YG5X/'}, {'name': 'FEDORA-2022-49b52819a4', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQJB6ZPRLKV6WCMX2PRRRQBFAOXFBK6B/'}, {'name': 'FEDORA-2022-57923346cf', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRWRAXAFR3JR7XCFWTHC2KALSZKWACCE/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0118?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-0120 mean in the context of cybersecurity?

[Assistant] CVE-2022-0120


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0120.

[Assistant] Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website.