[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1013 mean in the context of cybersecurity?

[Assistant] CVE-2022-1013


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1013.

[Assistant] The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1013?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/eed70659-9e3e-42a2-b427-56c52e0fbc0d'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1013?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1014 mean in the context of cybersecurity?

[Assistant] CVE-2022-1014


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1014.

[Assistant] The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1014?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/eb9e202d-04aa-4343-86a2-4aa2edaa7f6b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1014?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1015 mean in the context of cybersecurity?

[Assistant] CVE-2022-1015


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1015.

[Assistant] A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1015?

[Assistant] {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2065323'}, {'url': 'http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/'}, {'url': 'https://seclists.org/oss-sec/2022/q1/205'}, {'name': '[oss-security] 20220825 Re: Linux kernel: CVE-2022-1015,CVE-2022-1016 in nf_tables cause privilege escalation, information leak', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2022/08/25/2'}, {'url': 'http://packetstormsecurity.com/files/169951/Kernel-Live-Patch-Security-Notice-LSN-0090-1.html'}, {'name': '[oss-security] 20230113 CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/01/13/2'}, {'name': '[oss-security] 20230223 Re: CVE-2023-0179: Linux kernel stack buffer overflow in nftables: PoC and writeup', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2023/02/23/1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1015?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1016 mean in the context of cybersecurity?

[Assistant] CVE-2022-1016


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1016.

[Assistant] A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1016?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://seclists.org/oss-sec/2022/q1/205'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2066614'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1016'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1016?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1018 mean in the context of cybersecurity?

[Assistant] CVE-2022-1018


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1018.

[Assistant] When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1018?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1018?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1019 mean in the context of cybersecurity?

[Assistant] CVE-2022-1019


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1019.

[Assistant] Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malicious file.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1019?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.corporate.carrier.com/Images/CARR-PSA-ALC-WebCTRL-001-1121_tcm558-149395.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1019?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1020 mean in the context of cybersecurity?

[Assistant] CVE-2022-1020


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1020.

[Assistant] The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.2 does not have authorisation and CSRF checks in the wpt_admin_update_notice_option AJAX action (available to both unauthenticated and authenticated users), as well as does not validate the callback parameter, allowing unauthenticated attackers to call arbitrary functions with either none or one user controlled argument


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1020?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/04fe89b3-8ad1-482f-a96d-759d1d3a0dd5'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1020?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1021 mean in the context of cybersecurity?

[Assistant] CVE-2022-1021


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1021.

[Assistant] Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1021?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a8187478-75e1-4d62-b894-651269401ca3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/chatwoot/chatwoot/commit/24b20c10cebd25e61de8d4266c63fde94772e889'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1021?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1022 mean in the context of cybersecurity?

[Assistant] CVE-2022-1022


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1022.

[Assistant] Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1022?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2e4ac6b5-7357-415d-9633-65c636b20e94'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/chatwoot/chatwoot/commit/27ddd77a1b621f503fe89a436a49f44b0b1204b5'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1022?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1023 mean in the context of cybersecurity?

[Assistant] CVE-2022-1023


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1023.

[Assistant] The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1023?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/163069cd-98a8-4cfb-8b58-a6727a7d5c48'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2696254'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1023?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1024 mean in the context of cybersecurity?

[Assistant] CVE-2022-1024


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1024.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1024?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1024?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1025 mean in the context of cybersecurity?

[Assistant] CVE-2022-1025


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1025.

[Assistant] All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1025?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/argoproj/argo-cd/security/advisories/GHSA-2f5v-8r3f-8pww'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1025?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1026 mean in the context of cybersecurity?

[Assistant] CVE-2022-1026


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1026.

[Assistant] Kyocera multifunction printers running vulnerable versions of Net View unintentionally expose sensitive user information, including usernames and passwords, through an insufficiently protected address book export function.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1026?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2022-04-04.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1026?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1027 mean in the context of cybersecurity?

[Assistant] CVE-2022-1027


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1027.

[Assistant] The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrator privileges to the settings page to inject Javascript code to its settings leading to stored Cross-Site Scripting that will only affect administrator users.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1027?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/9dbb0d6d-bc84-4b85-8aa5-fa2a8e6fa5e3'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1027?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1028 mean in the context of cybersecurity?

[Assistant] CVE-2022-1028


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1028.

[Assistant] The WordPress Security Firewall, Malware Scanner, Secure Login and Backup plugin before 4.2.1 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1028?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/16fc08ec-8476-4f3c-93ea-6a51ed880dd5'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1028?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1029 mean in the context of cybersecurity?

[Assistant] CVE-2022-1029


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1029.

[Assistant] The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1029?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0e74eeb4-89e2-4873-904f-ad4f25c4a8ba'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1029?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1030 mean in the context of cybersecurity?

[Assistant] CVE-2022-1030


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1030.

[Assistant] Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1030?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2022-1030'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1030?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1031 mean in the context of cybersecurity?

[Assistant] CVE-2022-1031


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1031.

[Assistant] Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1031?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/37da2cd6-0b46-4878-a32e-acbfd8f6f457'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/a7ce29647fcb38386d7439696375e16e093d6acb'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1031?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1032 mean in the context of cybersecurity?

[Assistant] CVE-2022-1032


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1032.

[Assistant] Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1032?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cb9a0393-be34-4021-a06c-00c7791c7622'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/crater-invoice/crater/commit/7cde971f8b79579951df98384a5210d25f698af5'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1032?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1033 mean in the context of cybersecurity?

[Assistant] CVE-2022-1033


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1033.

[Assistant] Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1033?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4d7d4fc9-e0cf-42d3-b89c-6ea57a769045'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/crater-invoice/crater/commit/88035ea49082f7053a37ef07bf3587e09d9d22b4'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1033?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1034 mean in the context of cybersecurity?

[Assistant] CVE-2022-1034


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1034.

[Assistant] There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1034?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1034?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1035 mean in the context of cybersecurity?

[Assistant] CVE-2022-1035


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1035.

[Assistant] Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1035?

[Assistant] {'url': 'https://huntr.dev/bounties/851942a4-1d64-4553-8fdc-9fccd167864b'}, {'url': 'https://github.com/gpac/gpac/commit/3718d583c6ade191dc7979c64f48c001ca6f0243'}, {'name': 'DSA-5411', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5411'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1035?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1036 mean in the context of cybersecurity?

[Assistant] CVE-2022-1036


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1036.

[Assistant] Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1036?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/db615581-d5a9-4ca5-a3e9-7a39eceaa424'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/82be4f0b4729be870ccefdae99a04833f134aa6a'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1036?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1037 mean in the context of cybersecurity?

[Assistant] CVE-2022-1037


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1037.

[Assistant] The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF issue by using local URLs


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1037?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bd8555bd-8086-41d0-a1f7-3557bc3af957'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1037?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1038 mean in the context of cybersecurity?

[Assistant] CVE-2022-1038


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1038.

[Assistant] A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recommending that customers uninstall HP Jumpstart and use myHP software.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1038?

[Assistant] {'url': 'https://support.hp.com/us-en/document/ish_6189329-6189528-16/hpsbhf03791'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1038?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1039 mean in the context of cybersecurity?

[Assistant] CVE-2022-1039


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1039.

[Assistant] The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1039?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-03'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1039?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1040 mean in the context of cybersecurity?

[Assistant] CVE-2022-1040


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1040.

[Assistant] An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v18.5 MR3 and older.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1040?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.sophos.com/en-us/security-advisories/sophos-sa-20220325-sfos-rce'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/168046/Sophos-XG115w-Firewall-17.0.10-MR-10-Authentication-Bypass.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.exploit-db.com/exploits/51006'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1040?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1041 mean in the context of cybersecurity?

[Assistant] CVE-2022-1041


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1041.

[Assistant] In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1041?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-p449-9hv9-pj38'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1041?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1042 mean in the context of cybersecurity?

[Assistant] CVE-2022-1042


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1042.

[Assistant] In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1042?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'http://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-j7v7-w73r-mm5x'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1042?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1043 mean in the context of cybersecurity?

[Assistant] CVE-2022-1043


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1043.

[Assistant] A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, crash the system or escalate privileges.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1043?

[Assistant] {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1997328'}, {'url': 'https://www.zerodayinitiative.com/advisories/ZDI-22-362/'}, {'url': 'https://github.com/torvalds/linux/commit/a30f895ad3239f45012e860d4f94c1a388b36d14'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1043'}, {'url': 'http://packetstormsecurity.com/files/170834/io_uring-Same-Type-Object-Reuse-Privilege-Escalation.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1043?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1044 mean in the context of cybersecurity?

[Assistant] CVE-2022-1044


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1044.

[Assistant] Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1044?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ff878be9-563a-4d0e-99c1-fc3c767f6d3e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/097b4823935c4fa524e71ab2dd107cf2056922b0'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1044?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1045 mean in the context of cybersecurity?

[Assistant] CVE-2022-1045


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1045.

[Assistant] Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1045?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/b0c4f992-4ac8-4479-82f4-367ed1a2a826'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/c4b262c2613d4a8865de0b3252112544bd81997a'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1045?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1046 mean in the context of cybersecurity?

[Assistant] CVE-2022-1046


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1046.

[Assistant] The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1046?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a1ae4512-0b5b-4f36-8334-14633bf24758'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1046?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1047 mean in the context of cybersecurity?

[Assistant] CVE-2022-1047


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1047.

[Assistant] The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1047?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/078bd5f6-64f7-4665-825b-9fd0c2b7b91b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1047?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1048 mean in the context of cybersecurity?

[Assistant] CVE-2022-1048


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1048.

[Assistant] A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalate their privileges on the system.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1048?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2066706'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lore.kernel.org/lkml/20220322170720.3529-5-tiwai%40suse.de/T/#m1d3b791b815556012c6be92f1c4a7086b854f7f3'}, {'name': 'DSA-5127', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5127'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220629-0001/'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1048?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1049 mean in the context of cybersecurity?

[Assistant] CVE-2022-1049


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1049.

[Assistant] A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1049?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5'}, {'name': 'DSA-5226', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5226'}, {'name': '[debian-lts-announce] 20220914 [SECURITY] [DLA 3108-1] pcs security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/09/msg00017.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1049?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1050 mean in the context of cybersecurity?

[Assistant] CVE-2022-1050


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1050.

[Assistant] A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1050?

[Assistant] {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2069625'}, {'name': '[debian-lts-announce] 20230314 [SECURITY] [DLA 3362-1] qemu security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/03/msg00013.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1050?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1051 mean in the context of cybersecurity?

[Assistant] CVE-2022-1051


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1051.

[Assistant] The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1051?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/cb2fa587-da2f-460e-a402-225df7744765'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1051?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1052 mean in the context of cybersecurity?

[Assistant] CVE-2022-1052


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1052.

[Assistant] Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1052?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3b3b7f77-ab8d-4de3-999b-eeec0a3eebe7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/0052500c1ed5bf8263b26b9fd7773dbdc6f170c4'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1052?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1053 mean in the context of cybersecurity?

[Assistant] CVE-2022-1053


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1053.

[Assistant] Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an AK of a software TPM. A successful attack breaks the entire chain of trust because a not validated AK is used by the verifier. This issue is worse if the validation happens first and then the agent gets added to the verifier because the timing is easier and the verifier does not validate the regcount entry being equal to 1,


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1053?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/keylime/keylime/commit/bd5de712acdd77860e7dc58969181e16c7a8dc5d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2065024%2C'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/keylime/keylime/security/advisories/GHSA-jf66-3q76-h5p5%2C'}, {'name': 'FEDORA-2022-748fda10e7', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A7WAKVXM7L5D2DUACV6EHA6EJNAX2GVL/'}, {'name': 'FEDORA-2022-7c9173843a', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEW2PAXO5YGLDLPG45YV2OPLJXJSCECQ/'}, {'name': 'FEDORA-2022-f9ace23a78', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RF6QHU4UGSBATC3HOOE7OP66CYVTR7CV/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1053?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1054 mean in the context of cybersecurity?

[Assistant] CVE-2022-1054


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1054.

[Assistant] The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have any authorisation checks when exporting its entries, and has the export function hooked to the init action. As a result, unauthenticated attackers could call it and retrieve PII such as first name, last name and email address of user registered for events


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1054?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/95a5fad1-e823-4571-8640-19bf5436578d'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1054?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1055 mean in the context of cybersecurity?

[Assistant] CVE-2022-1055


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1055.

[Assistant] A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1055?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220506-0007/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1055?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1056 mean in the context of cybersecurity?

[Assistant] CVE-2022-1056


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1056.

[Assistant] Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit 46dc8fcd.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1056?

[Assistant] {'url': 'https://gitlab.com/libtiff/libtiff/-/issues/391'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/merge_requests/307'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1056.json'}, {'name': 'GLSA-202210-10', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-10'}, {'url': 'https://security.netapp.com/advisory/ntap-20221228-0008/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1056?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1057 mean in the context of cybersecurity?

[Assistant] CVE-2022-1057


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1057.

[Assistant] The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1057?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7c33ffc3-84d1-4a0f-a837-794cdc3ad243'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1057?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1058 mean in the context of cybersecurity?

[Assistant] CVE-2022-1058


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1058.

[Assistant] Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1058?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4fb42144-ac70-4f76-a5e1-ef6b5e55dc0d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/go-gitea/gitea/commit/e3d8e92bdc67562783de9a76b5b7842b68daeb48'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1058?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1059 mean in the context of cybersecurity?

[Assistant] CVE-2022-1059


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1059.

[Assistant] Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1059?

[Assistant] {'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1059?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1061 mean in the context of cybersecurity?

[Assistant] CVE-2022-1061


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1061.

[Assistant] Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1061?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a7546dae-01c5-4fb0-8a8e-c04ea4e9bac7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/d4ce40b516ffd70cf2e9e36832d8de139117d522'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1061?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1062 mean in the context of cybersecurity?

[Assistant] CVE-2022-1062


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1062.

[Assistant] The th23 Social WordPress plugin through 1.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1062?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e770ba87-95d2-40c9-89cc-5d7390e9cbb0'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1062?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1063 mean in the context of cybersecurity?

[Assistant] CVE-2022-1063


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1063.

[Assistant] The Thank Me Later WordPress plugin through 3.3.4 does not sanitise and escape the Message Subject field before outputting it in the Messages list, which could allow high privileges users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1063?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f90c528b-8c3a-4f9a-aa36-099c24abe082'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1063?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1064 mean in the context of cybersecurity?

[Assistant] CVE-2022-1064


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1064.

[Assistant] SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1064?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2f664985-c5fc-485b-b4fc-4c401be2cf40'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/forkcms/forkcms/commit/6aca30e10b4181534f73f96d6e2ebeb45ec15069'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1064?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1065 mean in the context of cybersecurity?

[Assistant] CVE-2022-1065


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1065.

[Assistant] A vulnerability within the authentication process of Abacus ERP allows a remote attacker to bypass the second authentication factor. This issue affects: Abacus ERP v2022 versions prior to R1 of 2022-01-15; v2021 versions prior to R4 of 2022-01-15; v2020 versions prior to R6 of 2022-01-15; v2019 versions later than R5 (service pack); v2018 versions later than R5 (service pack). This issue does not affect: Abacus ERP v2019 versions prior to R5 of 2020-03-15; v2018 versions prior to R7 of 2020-04-15; v2017 version and prior versions and prior versions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1065?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.redguard.ch/advisories/abacus_mfa_bypass.txt'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1065?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1066 mean in the context of cybersecurity?

[Assistant] CVE-2022-1066


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1066.

[Assistant] Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1066?

[Assistant] {'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1066?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1067 mean in the context of cybersecurity?

[Assistant] CVE-2022-1067


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1067.

[Assistant] Navigating to a specific URL with a patient ID number will result in the server generating a PDF of a lab report without authentication and rate limiting.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1067?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsma-22-095-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1067?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1068 mean in the context of cybersecurity?

[Assistant] CVE-2022-1068


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1068.

[Assistant] Modbus Tools Modbus Slave (versions 7.4.2 and prior) is vulnerable to a stack-based buffer overflow in the registration field. This may cause the program to crash when a long character string is used.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1068?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-088-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1068?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1069 mean in the context of cybersecurity?

[Assistant] CVE-2022-1069


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1069.

[Assistant] A crafted HTTP packet with a large content-length header can create a denial-of-service condition in Softing Secure Integration Server V1.22.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1069?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-4.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1069?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1070 mean in the context of cybersecurity?

[Assistant] CVE-2022-1070


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1070.

[Assistant] Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1070?

[Assistant] {'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-05'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1070?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1071 mean in the context of cybersecurity?

[Assistant] CVE-2022-1071


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1071.

[Assistant] User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1071?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/6597ece9-07af-415b-809b-919ce0a17cf3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/aaa28a508903041dd7399d4159a8ace9766b022f'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1071?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1072 mean in the context of cybersecurity?

[Assistant] CVE-2022-1072


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1072.

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1072?

[Assistant] N\A


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1072?

[Assistant] REJECTED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1073 mean in the context of cybersecurity?

[Assistant] CVE-2022-1073


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1073.

[Assistant] A vulnerability was found in Automatic Question Paper Generator 1.0. It has been declared as critical. An attack leads to privilege escalation. The attack can be launched remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1073?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194839'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1073?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1074 mean in the context of cybersecurity?

[Assistant] CVE-2022-1074


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1074.

[Assistant]
A vulnerability has been found in TEM FLEX-1085 1.6.0 and classified as problematic. Using the input
HTML Injection
 in the WiFi settings of the dashboard leads to html injection.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1074?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194845'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1074?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1075 mean in the context of cybersecurity?

[Assistant] CVE-2022-1075


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1075.

[Assistant] A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1075?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.sourcecodester.com/php/15203/college-website-content-management-system-phpoop-free-source-code.ht'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194846'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1075?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1076 mean in the context of cybersecurity?

[Assistant] CVE-2022-1076


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1076.

[Assistant] A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aqpg/users/login.php of the component My Account Page. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to initiate the attack remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1076?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194847'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1076?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1077 mean in the context of cybersecurity?

[Assistant] CVE-2022-1077


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1077.

[Assistant] A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely and does not require any form of authentication.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1077?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194848'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1077?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1078 mean in the context of cybersecurity?

[Assistant] CVE-2022-1078


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1078.

[Assistant] A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1078?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194856'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1078?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1079 mean in the context of cybersecurity?

[Assistant] CVE-2022-1079


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1079.

[Assistant] A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and parameters which are prone to to cross site scripting. It is possible to launch the attack remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1079?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195426'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1079?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1080 mean in the context of cybersecurity?

[Assistant] CVE-2022-1080


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1080.

[Assistant] A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects code of the file attendancy.php as the manipulation of the argument search2 leads to sql injection. The attack can be initiated remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1080?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195442'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1080?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1081 mean in the context of cybersecurity?

[Assistant] CVE-2022-1081


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1081.

[Assistant] A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affects the file /mims/app/addcustomerHandler.php. The manipulation of the argument first_name, middle_name, and surname leads to cross site scripting. The attack can be initiated remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1081?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195640'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1081?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1082 mean in the context of cybersecurity?

[Assistant] CVE-2022-1082


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1082.

[Assistant] A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1082?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195641'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1082?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1083 mean in the context of cybersecurity?

[Assistant] CVE-2022-1083


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1083.

[Assistant] A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1083?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195642'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1083?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1084 mean in the context of cybersecurity?

[Assistant] CVE-2022-1084


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1084.

[Assistant] A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /one_church/userregister.php. The manipulation leads to authentication bypass. The attack can be launched remotely.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1084?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195643'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1084?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1085 mean in the context of cybersecurity?

[Assistant] CVE-2022-1085


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1085.

[Assistant] A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1085?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.194857'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1085?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1086 mean in the context of cybersecurity?

[Assistant] CVE-2022-1086


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1086.

[Assistant] A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1086?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/xiahao90/CVEproject/blob/main/DolphinPHPV1.5.0_xss.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195368'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1086?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1087 mean in the context of cybersecurity?

[Assistant] CVE-2022-1087


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1087.

[Assistant] A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipulation of the field Title with script tags leads to persistent cross site scripting. The attack may be initiated remotely and requires an authentication. A simple POC has been disclosed to the public and may be used.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1087?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/liaojia-99/project/tree/main/htmly'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/liaojia-99/project/blob/main/htmly/1.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.195203'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1087?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1088 mean in the context of cybersecurity?

[Assistant] CVE-2022-1088


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1088.

[Assistant] The Page Security & Membership WordPress plugin through 1.5.15 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1088?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e86d456d-7a54-43e8-acf1-0b6a0a8bb41b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1088?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1089 mean in the context of cybersecurity?

[Assistant] CVE-2022-1089


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1089.

[Assistant] The Bulk Edit and Create User Profiles WordPress plugin before 1.5.14 does not sanitise and escape the Users Login, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1089?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/75a9fd23-7fa9-4cb1-a55b-ec5deae5d6fa'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1089?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1090 mean in the context of cybersecurity?

[Assistant] CVE-2022-1090


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1090.

[Assistant] The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1090?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3993fa42-b4c3-462b-b568-0a08fe112c19'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1090?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1091 mean in the context of cybersecurity?

[Assistant] CVE-2022-1091


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1091.

[Assistant] The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1091?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4d12533e-bdb7-411f-bcdf-4c5046db13f3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/10up/safe-svg/pull/28'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1091?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1092 mean in the context of cybersecurity?

[Assistant] CVE-2022-1092


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1092.

[Assistant] The myCred WordPress plugin before 2.4.3.1 does not have authorisation and CSRF checks in its mycred-tools-import-export AJAX action, allowing any authenticated user to call and and retrieve the list of email address present in the blog


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1092?

[Assistant] {'url': 'https://wpscan.com/vulnerability/95759d5c-8802-4493-b7e5-7f2bc546af61', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1092?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1093 mean in the context of cybersecurity?

[Assistant] CVE-2022-1093


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1093.

[Assistant] The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it to the page, allowing a high privilege user such as an administrator to inject arbitrary javascript into the page even when unfiltered html is disallowed.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1093?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/57017050-811e-474d-8256-33d19d4c0553'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1093?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1094 mean in the context of cybersecurity?

[Assistant] CVE-2022-1094


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1094.

[Assistant] The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1094?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3c03816b-e381-481c-b9f5-63d0c24ff329'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1094?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1095 mean in the context of cybersecurity?

[Assistant] CVE-2022-1095


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1095.

[Assistant] The Mihdan: No External Links WordPress plugin before 5.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1095?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bf476a3e-05ba-4b54-8a65-3d261ad5337b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1095?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1096 mean in the context of cybersecurity?

[Assistant] CVE-2022-1096


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1096.

[Assistant] Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1096?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1309225'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop_25.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1096?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1097 mean in the context of cybersecurity?

[Assistant] CVE-2022-1097


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1097.

[Assistant] NSSToken objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1097?

[Assistant] {'url': 'https://www.mozilla.org/security/advisories/mfsa2022-13/'}, {'url': 'https://www.mozilla.org/security/advisories/mfsa2022-14/'}, {'url': 'https://www.mozilla.org/security/advisories/mfsa2022-15/'}, {'url': 'https://bugzilla.mozilla.org/show_bug.cgi?id=1745667'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1097?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1098 mean in the context of cybersecurity?

[Assistant] CVE-2022-1098


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1098.

[Assistant] Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4.2.2 above, this makes it possible for an attacker to escalate privileges


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1098?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1098?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1099 mean in the context of cybersecurity?

[Assistant] CVE-2022-1099


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1099.

[Assistant] Adding a very large number of tags to a runner in GitLab CE/EE affecting all versions prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an attacker to impact the performance of GitLab


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1099?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/328593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1099.json'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1099?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1100 mean in the context of cybersecurity?

[Assistant] CVE-2022-1100


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1100.

[Assistant] A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions from 13.1 prior to 14.7.7, 14.8.0 prior to 14.8.5, and 14.9.0 prior to 14.9.2. The api to update an asset as a link from a release had a regex check which caused exponential number of backtracks for certain user supplied values resulting in high CPU usage.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1100?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/273771'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1100.json'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1100?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1101 mean in the context of cybersecurity?

[Assistant] CVE-2022-1101


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1101.

[Assistant] A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifier VDB-195785 was assigned to this vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1101?

[Assistant] {'url': 'https://vuldb.com/?id.195785', 'tags': ['vdb-entry']}, {'url': 'https://vuldb.com/?ctiid.195785', 'tags': ['signature', 'permissions-required']}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1101?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1102 mean in the context of cybersecurity?

[Assistant] CVE-2022-1102


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1102.

[Assistant] A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royal_event/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. It is possible to launch the attack remotely. VDB-195786 is the identifier assigned to this vulnerability.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1102?

[Assistant] {'url': 'https://vuldb.com/?id.195786', 'tags': ['vdb-entry', 'technical-description']}, {'url': 'https://vuldb.com/?ctiid.195786', 'tags': ['signature', 'permissions-required']}, {'url': 'https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html?', 'tags': ['related']}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1102?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1103 mean in the context of cybersecurity?

[Assistant] CVE-2022-1103


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1103.

[Assistant] The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1103?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/9ddeef95-7c7f-4296-a55b-fd3304c91c18'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1103?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1104 mean in the context of cybersecurity?

[Assistant] CVE-2022-1104


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1104.

[Assistant] The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1104?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4d4709f3-ad38-4519-a24a-73bc04b20e52'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1104?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1105 mean in the context of cybersecurity?

[Assistant] CVE-2022-1105


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1105.

[Assistant] An improper access control vulnerability in GitLab CE/EE affecting all versions from 13.11 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows an unauthorized user to access pipeline analytics even when public pipelines are disabled


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1105?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/335933'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1105.json'}