[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1288.

[Assistant] A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a reflected cross site scripting. The attack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the public and may be used.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1288?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196751'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1288?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1289 mean in the context of cybersecurity?

[Assistant] CVE-2022-1289


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1289.

[Assistant] A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1289?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tildearrow/furnace/commit/0eb02422d5161767e9983bdaa5c429762d3477ce'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196755'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1289?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1290 mean in the context of cybersecurity?

[Assistant] CVE-2022-1290


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1290.

[Assistant] Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1290?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/da6d03e6-053f-43b6-99a7-78c2e386e3ed'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/4f48b3bb86ba66a0085803591065bb6437e864ec'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1290?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1291 mean in the context of cybersecurity?

[Assistant] CVE-2022-1291


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1291.

[Assistant] XSS vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. Transmitting cookies to third-party servers. Sending data from secure sessions to third-party servers


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1291?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/49a14371-6058-47dd-9801-ec38a7459fc5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/hhurz/tableexport.jquery.plugin/commit/dcbaee23cf98328397a153e71556f75202988ec9'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1291?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1292 mean in the context of cybersecurity?

[Assistant] CVE-2022-1292


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1292.

[Assistant] The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1292?

[Assistant] {'url': 'https://www.openssl.org/news/secadv/20220503.txt'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb'}, {'name': '[debian-lts-announce] 20220515 [SECURITY] [DLA 3008-1] openssl security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html'}, {'name': 'DSA-5139', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2022/dsa-5139'}, {'name': 'FEDORA-2022-b651cb69e6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/'}, {'name': 'FEDORA-2022-c9c02865f6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/'}, {'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20220602-0009/'}, {'url': 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011'}, {'url': 'https://security.netapp.com/advisory/ntap-20220729-0004/'}, {'name': 'GLSA-202210-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-02'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1292?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1293 mean in the context of cybersecurity?

[Assistant] CVE-2022-1293


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1293.

[Assistant] The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1293?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.ercom.com/security-updates'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1293?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1294 mean in the context of cybersecurity?

[Assistant] CVE-2022-1294


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1294.

[Assistant] The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1294?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/205a24b8-6d14-4458-aecd-79748e1324c7'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1294?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1295 mean in the context of cybersecurity?

[Assistant] CVE-2022-1295


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1295.

[Assistant] Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1295?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3b9d450c-24ac-4037-b04d-4d4dafbf593a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/alvarotrigo/fullpage.js/commit/bf62492a22e5d296e63c3ed918a42fc5645a0d48'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1295?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1296 mean in the context of cybersecurity?

[Assistant] CVE-2022-1296


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1296.

[Assistant] Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1296?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/52b57274-0e1a-4d61-ab29-1373b555fea0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/153bcdc29f11cd8c90e7d639a7405450f644ddb6'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1296?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1297 mean in the context of cybersecurity?

[Assistant] CVE-2022-1297


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1297.

[Assistant] Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1297?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ec538fa4-06c6-4050-a141-f60153ddeaac'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/0a557045476a2969c7079aec9eeb29d02f2809c6'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1297?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1298 mean in the context of cybersecurity?

[Assistant] CVE-2022-1298


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1298.

[Assistant] The Tabs WordPress plugin before 2.2.8 does not sanitise and escape Tab descriptions, which could allow high privileged users with a role as low as editor to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1298?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e124d1ab-3e02-4ca5-8218-ce635e8bf074'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1298?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1299 mean in the context of cybersecurity?

[Assistant] CVE-2022-1299


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1299.

[Assistant] The Slideshow WordPress plugin through 2.3.1 does not sanitize and escape some of its default slideshow settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1299?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8c46adb1-82d7-4621-a8c3-15cd90e98b96'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1299?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1300 mean in the context of cybersecurity?

[Assistant] CVE-2022-1300


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1300.

[Assistant] Multiple Version of TRUMPF TruTops products expose a service function without necessary authentication. Execution of this function may result in unauthorized access to change of data or disruption of the whole service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1300?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert.vde.com/en/advisories/VDE-2022-016/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1300?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1301 mean in the context of cybersecurity?

[Assistant] CVE-2022-1301


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1301.

[Assistant] The WP Contact Slider WordPress plugin before 2.4.7 does not sanitize and escape the Text to Display settings of sliders, which could allow high privileged users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1301?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/69b75983-1010-453e-bf67-27b4a2a327a8'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1301?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1302 mean in the context of cybersecurity?

[Assistant] CVE-2022-1302


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1302.

[Assistant] In the MZ Automation LibIEC61850 in versions prior to 1.5.1 an unauthenticated attacker can craft a goose message, which may result in a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1302?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://libiec61850.com/new-release-1-5-1-of-libiec61850/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1302?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1303 mean in the context of cybersecurity?

[Assistant] CVE-2022-1303


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1303.

[Assistant] The Slide Anything WordPress plugin before 2.3.44 does not sanitize and escape sliders' description, which could allow high privilege users such as editor and above to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1303?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/590b446d-f8bc-49b0-93e7-2a6f2e6f62f1'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1303?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1304 mean in the context of cybersecurity?

[Assistant] CVE-2022-1304


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1304.

[Assistant] An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1304?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2069726'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1304?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1305 mean in the context of cybersecurity?

[Assistant] CVE-2022-1305


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1305.

[Assistant] Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1305?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1285234'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1305?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1306 mean in the context of cybersecurity?

[Assistant] CVE-2022-1306


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1306.

[Assistant] Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1306?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1299287'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1306?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1307 mean in the context of cybersecurity?

[Assistant] CVE-2022-1307


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1307.

[Assistant] Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1307?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1301873'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1307?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1308 mean in the context of cybersecurity?

[Assistant] CVE-2022-1308


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1308.

[Assistant] Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1308?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1283050'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1308?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1309 mean in the context of cybersecurity?

[Assistant] CVE-2022-1309


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1309.

[Assistant] Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1309?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1106456'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1309?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1310 mean in the context of cybersecurity?

[Assistant] CVE-2022-1310


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1310.

[Assistant] Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1310?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1307610'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1310?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1311 mean in the context of cybersecurity?

[Assistant] CVE-2022-1311


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1311.

[Assistant] Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1311?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1310717'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1311?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1312 mean in the context of cybersecurity?

[Assistant] CVE-2022-1312


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1312.

[Assistant] Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1312?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1311701'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1312?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1313 mean in the context of cybersecurity?

[Assistant] CVE-2022-1313


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1313.

[Assistant] Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1313?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1270539'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1313?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1314 mean in the context of cybersecurity?

[Assistant] CVE-2022-1314


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1314.

[Assistant] Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1314?

[Assistant] {'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_11.html'}, {'url': 'https://crbug.com/1304658'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-25'}, {'url': 'https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-1314'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1314?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1316 mean in the context of cybersecurity?

[Assistant] CVE-2022-1316


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1316.

[Assistant] Incorrect Permission Assignment for Critical Resource in GitHub repository zerotier/zerotierone prior to 1.8.8. Local Privilege Escalation


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1316?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/e7835226-1b20-4546-b256-3f625badb022'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/zerotier/zerotierone/commit/ffb444dbeb6bea3cb155502395e61cb6d18708c9'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1316?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1318 mean in the context of cybersecurity?

[Assistant] CVE-2022-1318


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1318.

[Assistant] Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communications packets are predictable. This would allow an attacker to learn the state of the system if they can observe the traffic. This would be possible even if the traffic were encrypted, e.g., using WPA2, as the packet sizes would remain observable. The communication encryption scheme is theoretically sound, but is not strong enough for the level of protection required.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1318?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.corporate.carrier.com/Images/CARR-PSA-Hills-ComNav-002-1121_tcm558-149392.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1318?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1319 mean in the context of cybersecurity?

[Assistant] CVE-2022-1319


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1319.

[Assistant] A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1319?

[Assistant] {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2073890'}, {'url': 'https://issues.redhat.com/browse/UNDERTOW-2060'}, {'url': 'https://github.com/undertow-io/undertow/commit/1443a1a2bbb8e32e56788109d8285db250d55c8b'}, {'url': 'https://github.com/undertow-io/undertow/commit/7c5b3ab885b5638fd3f1e8a935d5063d68aa2df3'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1319'}, {'url': 'https://security.netapp.com/advisory/ntap-20221014-0006/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1319?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1320 mean in the context of cybersecurity?

[Assistant] CVE-2022-1320


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1320.

[Assistant] The Sliderby10Web WordPress plugin before 1.2.52 does not properly sanitize and escape some of its settings, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1320?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/43581d6b-333a-48d9-a1ae-b9479da8ff87'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1320?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1321 mean in the context of cybersecurity?

[Assistant] CVE-2022-1321


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1321.

[Assistant] The miniOrange's Google Authenticator WordPress plugin before 5.5.6 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1321?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b8784995-0deb-4c83-959f-52b37881e05c'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1321?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1322 mean in the context of cybersecurity?

[Assistant] CVE-2022-1322


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1322.

[Assistant] The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1322?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e1724471-26bd-4cb3-a279-51783102ed0c'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1322?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1323 mean in the context of cybersecurity?

[Assistant] CVE-2022-1323


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1323.

[Assistant] The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_options action,  allowing any logged in users (with privileges as low as Subscriber,) to change Theme options by sending a crafted POST request.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1323?

[Assistant] {'url': 'https://wpscan.com/vulnerability/2d8020e1-6489-4555-9956-2dc190aaa61b', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1323?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1324 mean in the context of cybersecurity?

[Assistant] CVE-2022-1324


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1324.

[Assistant] The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1324?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/2ce2a387-acc8-482a-9452-a4d9acb187fd'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1324?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1325 mean in the context of cybersecurity?

[Assistant] CVE-2022-1325


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1325.

[Assistant] A flaw was found in Clmg, where with the help of a maliciously crafted pandore or bmp file with modified dx and dy header field values it is possible to trick the application into allocating huge buffer sizes like 64 Gigabyte upon reading the file from disk or from a virtual buffer.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1325?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2074549'}, {'tags': ['x_refsource_MISC'], 'url': 'https://huntr.dev/bounties/a5e4fc45-8f14-4dd1-811b-740fc50c95d2/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/GreycLab/CImg/issues/343'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/GreycLab/CImg/pull/348'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/GreycLab/CImg/commit/619cb58dd90b4e03ac68286c70ed98acbefd1c90'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1325'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1325?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1326 mean in the context of cybersecurity?

[Assistant] CVE-2022-1326


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1326.

[Assistant] The Form - Contact Form WordPress plugin through 1.2.0 does not sanitize and escape Custom text fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1326?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f57615d9-a567-4c2a-9f06-2c6b61f56074'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1326?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1327 mean in the context of cybersecurity?

[Assistant] CVE-2022-1327


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1327.

[Assistant] The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1327?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6b71eb38-0a4a-49d1-96bc-84bbe675be1e'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1327?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1328 mean in the context of cybersecurity?

[Assistant] CVE-2022-1328


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1328.

[Assistant] Buffer Overflow in uudecoder in Mutt affecting all versions starting from 0.94.13 before 2.2.3 allows read past end of input line


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1328?

[Assistant] {'url': 'https://gitlab.com/muttmua/mutt/-/issues/404'}, {'url': 'https://gitlab.com/muttmua/mutt/-/commit/e5ed080c00e59701ca62ef9b2a6d2612ebf765a5'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1328.json'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1328?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1329 mean in the context of cybersecurity?

[Assistant] CVE-2022-1329


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1329.

[Assistant] The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the ~/core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files that can be used to obtain remote code execution, in versions 3.6.0 to 3.6.2.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1329?


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1329?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1330 mean in the context of cybersecurity?

[Assistant] CVE-2022-1330


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1330.

[Assistant] stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1330?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/08d2a6d0-772f-4b05-834e-86343f263c35'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/alvarotrigo/fullpage.js/commit/e7a5db42711700c8a584e61b5e532a64039fe92b'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1330?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1331 mean in the context of cybersecurity?

[Assistant] CVE-2022-1331


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1331.

[Assistant] In four instances DMARS (All versions prior to v2.1.10.24) does not properly restrict references of XML external entities while processing specific project files, which may allow unauthorized information disclosure.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1331?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-104-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1331?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1332 mean in the context of cybersecurity?

[Assistant] CVE-2022-1332


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1332.

[Assistant] One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1332?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://mattermost.com/security-updates/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1332?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1333 mean in the context of cybersecurity?

[Assistant] CVE-2022-1333


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1333.

[Assistant] Mattermost Playbooks plugin v1.24.0 and earlier fails to properly check the limit on the number of webhooks, which allows authenticated and authorized users to create a specifically drafted Playbook which could trigger a large amount of webhook requests leading to Denial of Service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1333?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://mattermost.com/security-updates/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1333?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1334 mean in the context of cybersecurity?

[Assistant] CVE-2022-1334


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1334.

[Assistant] The WP YouTube Live WordPress plugin before 1.8.3 does not validate, sanitise and escape various of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1334?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/af3b32c9-f386-4bb6-a362-86a27f49a739'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1334?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1335 mean in the context of cybersecurity?

[Assistant] CVE-2022-1335


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1335.

[Assistant] The Slideshow CK WordPress plugin before 1.4.10 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1335?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/cfc80857-8674-478f-9604-7a8849e5b85e'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1335?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1336 mean in the context of cybersecurity?

[Assistant] CVE-2022-1336


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1336.

[Assistant] The Carousel CK WordPress plugin through 1.1.0 does not sanitize and escape Slide's descriptions, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1336?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/39e127f1-c36e-4699-892f-3755ee17bab6'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1336?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1337 mean in the context of cybersecurity?

[Assistant] CVE-2022-1337


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1337.

[Assistant] The image proxy component in Mattermost version 6.4.1 and earlier allocates memory for multiple copies of a proxied image, which allows an authenticated attacker to crash the server via links to very large image files.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1337?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://mattermost.com/security-updates/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1337?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1338 mean in the context of cybersecurity?

[Assistant] CVE-2022-1338


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1338.

[Assistant] The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1338?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/51b91d0e-33af-41ce-b95f-d422586f1d5f'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1338?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1339 mean in the context of cybersecurity?

[Assistant] CVE-2022-1339


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1339.

[Assistant] SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1339?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ae8dc737-844e-40da-a9f7-e72d8e50f6f9'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/adae3be64427466bf0df15ceaea2ac30da93752c'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1339?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1340 mean in the context of cybersecurity?

[Assistant] CVE-2022-1340


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1340.

[Assistant] Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1340?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4746f149-fc55-48a1-a7ab-fd7c7412c05a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yetiforcecompany/yetiforcecrm/commit/2c14baaf8dbc7fd82d5c585f2fa0c23528450618'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1340?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1341 mean in the context of cybersecurity?

[Assistant] CVE-2022-1341


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1341.

[Assistant] An issue was discovered in in bwm-ng v0.6.2. An arbitrary null write exists in get_cmdln_options() function in src/options.c.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1341?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/vgropp/bwm-ng/issues/26'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/vgropp/bwm-ng/commit/9774f23bf78a6e6d3ae4cfe3d73bad34f2fdcd17'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1341?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1342 mean in the context of cybersecurity?

[Assistant] CVE-2022-1342


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1342.

[Assistant] A lack of password masking in Devolutions Remote Desktop Manager allows physically proximate attackers to observe sensitive data. A caching issue can cause sensitive fields to sometimes stay revealed when closing and reopening a panel, which could lead to involuntarily disclosing sensitive information. This issue affects: Devolutions Remote Desktop Manager 2022.1.24 version and prior versions.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1342?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://devolutions.net/security/advisories/DEVO-2022-0003'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1342?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1343 mean in the context of cybersecurity?

[Assistant] CVE-2022-1343


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1343.

[Assistant] The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case where the response signing certificate fails to verify. It is anticipated that most users of `OCSP_basic_verify` will not use the OCSP_NOCHECKS flag. In this case the `OCSP_basic_verify` function will return a negative value (indicating a fatal error) in the case of a certificate verification failure. The normal expected return value in this case would be 0. This issue also impacts the command line OpenSSL "ocsp" application. When verifying an ocsp response with the "-no_cert_checks" option the command line application will report that the verification is successful even though it has in fact failed. In this case the incorrect successful response will also be accompanied by error messages showing the failure and contradicting the apparently successful result. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2).


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1343?

[Assistant] {'url': 'https://www.openssl.org/news/secadv/20220503.txt'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2eda98790c5c2741d76d23cc1e74b0dc4f4b391a'}, {'url': 'https://security.netapp.com/advisory/ntap-20220602-0009/'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1343?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1344 mean in the context of cybersecurity?

[Assistant] CVE-2022-1344


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1344.

[Assistant] Stored XSS due to no sanitization in the filename in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1344?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/35f66966-af13-4f07-9734-0c50fdfc3a8c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1344?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1345 mean in the context of cybersecurity?

[Assistant] CVE-2022-1345


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1345.

[Assistant] Stored XSS viva .svg file upload in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1345?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/781b5c2a-bc98-41a0-a276-ea12399e5a25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1345?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1346 mean in the context of cybersecurity?

[Assistant] CVE-2022-1346


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1346.

[Assistant] Multiple Stored XSS in GitHub repository causefx/organizr prior to 2.1.1810. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1346?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8fe435b0-192f-41ca-b41e-580fcd34892f'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1346?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1347 mean in the context of cybersecurity?

[Assistant] CVE-2022-1347


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1347.

[Assistant] Stored XSS in the "Username" & "Email" input fields leads to account takeover of Admin & Co-admin users in GitHub repository causefx/organizr prior to 2.1.1810. Account takeover and privilege escalation


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1347?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/a09d834d995599756b62016af7026d2408ecf43a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/6059501f-05d2-4e76-ae03-5eb64835e6bf'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1347?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1348 mean in the context of cybersecurity?

[Assistant] CVE-2022-1348


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1348.

[Assistant] A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1348?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348'}, {'name': '[oss-security] 20220525 Re: CVE-2022-1348 logrotate: potential DoS from unprivileged users via the state file', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/05/25/3'}, {'name': '[oss-security] 20220525 Re: Re: CVE-2022-1348 logrotate: potential DoS from unprivileged users via the state file', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/05/25/4'}, {'name': '[oss-security] 20220525 Re: Re: CVE-2022-1348 logrotate: potential DoS from unprivileged users via the state file', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/05/25/5'}, {'name': 'FEDORA-2022-87c0f05204', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/'}, {'name': 'FEDORA-2022-ff0188b37c', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1348?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1349 mean in the context of cybersecurity?

[Assistant] CVE-2022-1349


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1349.

[Assistant] The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the value passed to the image_id parameter of the ajax action wpqa_remove_image belongs to the requesting user, allowing any users (with privileges as low as Subscriber) to delete the profile pictures of any other user.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1349?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7ee95a53-5fe9-404c-a77a-d1218265e4aa'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1349?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1350 mean in the context of cybersecurity?

[Assistant] CVE-2022-1350


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1350.

[Assistant] A vulnerability classified as problematic was found in GhostPCL 9.55.0. This vulnerability affects the function chunk_free_object of the file gsmchunk.c. The manipulation with a malicious file leads to a memory corruption. The attack can be initiated remotely but requires user interaction. The exploit has been disclosed to the public as a POC and may be used. It is recommended to apply the patches to fix this issue.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1350?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.ghostscript.com/show_bug.cgi?id=705156'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.ghostscript.com/attachment.cgi?id=22323'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.197290'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1350?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1351 mean in the context of cybersecurity?

[Assistant] CVE-2022-1351


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1351.

[Assistant] Stored XSS in Tooltip in GitHub repository pimcore/pimcore prior to 10.4.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1351?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c23ae6c2-2e53-4bf5-85b0-e90418476615'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/8c39a8b8f14dce078b31f61c4da599ca6f8fc7ac'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1351?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1352 mean in the context of cybersecurity?

[Assistant] CVE-2022-1352


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1352.

[Assistant] Due to an insecure direct object reference vulnerability in Gitlab EE/CE affecting all versions from 11.0 prior to 14.8.6, 14.9 prior to 14.9.4, and 14.10 prior to 14.10.1, an endpoint may reveal the issue title to a user who crafted an API call with the ID of the issue from a public project that restricts access to issue only to project members.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1352?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/350691'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1450306'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1352.json'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1352?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1353 mean in the context of cybersecurity?

[Assistant] CVE-2022-1353


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1353.

[Assistant] A vulnerability was found in the pfkey_register function in net/key/af_key.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1353?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2066819'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/9a564bccb78a76740ea9d75a259942df8143d02c'}, {'name': 'DSA-5127', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5127'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220629-0001/'}, {'name': '[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1353?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1354 mean in the context of cybersecurity?

[Assistant] CVE-2022-1354


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1354.

[Assistant] A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffinfo tool, triggering a heap buffer overflow issue and causing a crash that leads to a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1354?

[Assistant] {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2074404'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/issues/319'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/commit/87f580f39011109b3bb5f6eca13fac543a542798'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1354'}, {'url': 'https://security.netapp.com/advisory/ntap-20221014-0007/'}, {'name': 'GLSA-202210-10', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-10'}, {'name': '[debian-lts-announce] 20230120 [SECURITY] [DLA 3278-1] tiff security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html'}, {'name': 'DSA-5333', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5333'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1354?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1355 mean in the context of cybersecurity?

[Assistant] CVE-2022-1355


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1355.

[Assistant] A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggering a stack buffer overflow issue, possibly corrupting the memory, and causing a crash that leads to a denial of service.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1355?

[Assistant] {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2074415'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/issues/400'}, {'url': 'https://gitlab.com/libtiff/libtiff/-/merge_requests/323'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1355'}, {'url': 'https://security.netapp.com/advisory/ntap-20221014-0007/'}, {'name': 'GLSA-202210-10', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-10'}, {'name': '[debian-lts-announce] 20230120 [SECURITY] [DLA 3278-1] tiff security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/01/msg00018.html'}, {'name': 'DSA-5333', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5333'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1355?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1356 mean in the context of cybersecurity?

[Assistant] CVE-2022-1356


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1356.

[Assistant] cnMaestro is vulnerable to a local privilege escalation. By default, a user does not have root privileges. However, a user can run scripts as sudo, which could allow an attacker to gain root privileges when running user scripts outside allowed commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1356?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1356?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1357 mean in the context of cybersecurity?

[Assistant] CVE-2022-1357


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1357.

[Assistant] The affected On-Premise cnMaestro allows an unauthenticated attacker to access the cnMaestro server and execute arbitrary code in the privileges of the web server. This lack of validation could allow an attacker to append arbitrary data to the logger command.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1357?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1357?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1358 mean in the context of cybersecurity?

[Assistant] CVE-2022-1358


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1358.

[Assistant] The affected On-Premise is vulnerable to data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate and dump all data held in the cnMaestro database.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1358?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1358?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1359 mean in the context of cybersecurity?

[Assistant] CVE-2022-1359


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1359.

[Assistant] The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specific route. If an attacker supplied path traversal charters (../) as part of a filename, the server will save the file where the attacker chooses. This could allow an attacker to write any data to any file in the server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1359?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1359?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1360 mean in the context of cybersecurity?

[Assistant] CVE-2022-1360


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1360.

[Assistant] The affected On-Premise cnMaestro is vulnerable to execution of code on the cnMaestro hosting server. This could allow a remote attacker to change server configuration settings.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1360?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1360?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1361 mean in the context of cybersecurity?

[Assistant] CVE-2022-1361


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1361.

[Assistant] The affected On-Premise cnMaestro is vulnerable to a pre-auth data exfiltration through improper neutralization of special elements used in an SQL command. This could allow an attacker to exfiltrate data about other user’s accounts and devices.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1361?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1361?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1362 mean in the context of cybersecurity?

[Assistant] CVE-2022-1362


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1362.

[Assistant] The affected On-Premise cnMaestro is vulnerable inside a specific route where a user can upload a crafted package to the system. An attacker could abuse this user-controlled data to execute arbitrary commands on the server.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1362?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-132-04'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1362?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1364 mean in the context of cybersecurity?

[Assistant] CVE-2022-1364


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1364.

[Assistant] Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1364?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1315901'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1364?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1365 mean in the context of cybersecurity?

[Assistant] CVE-2022-1365


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1365.

[Assistant] Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository lquixada/cross-fetch prior to 3.1.5.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1365?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ab55dfdd-2a60-437a-a832-e3efe3d264ac'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/lquixada/cross-fetch/commit/a3b3a9481091ddd06b8f83784ba9c4e034dc912a'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1365?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1366 mean in the context of cybersecurity?

[Assistant] CVE-2022-1366


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1366.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1366?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1366?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1367 mean in the context of cybersecurity?

[Assistant] CVE-2022-1367


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1367.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1367?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1367?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1368 mean in the context of cybersecurity?

[Assistant] CVE-2022-1368


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1368.

[Assistant] The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitoring web socket communications from an unauthenticated session. This could allow an attacker to escalate privileges to match those of the compromised account.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1368?

[Assistant] {'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-03'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1368?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1369 mean in the context of cybersecurity?

[Assistant] CVE-2022-1369


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1369.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1369?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1369?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1370 mean in the context of cybersecurity?

[Assistant] CVE-2022-1370


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1370.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1370?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1370?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1371 mean in the context of cybersecurity?

[Assistant] CVE-2022-1371


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1371.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1371?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1371?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1372 mean in the context of cybersecurity?

[Assistant] CVE-2022-1372


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1372.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1372?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1372?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1373 mean in the context of cybersecurity?

[Assistant] CVE-2022-1373


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1373.

[Assistant] The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1373?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-5.html'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1373?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1374 mean in the context of cybersecurity?

[Assistant] CVE-2022-1374


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1374.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_unHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1374?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1374?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1375 mean in the context of cybersecurity?

[Assistant] CVE-2022-1375


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1375.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_slogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1375?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1375?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1376 mean in the context of cybersecurity?

[Assistant] CVE-2022-1376


[System] CVE Vulnerability Information

[User] Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1376.

[Assistant] Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_privgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.


[System] CVE Vulnerability Information

[User] Provide references for further information: Can you share references or external links related to CVE-2022-1376?

[Assistant] {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01'}


[System] CVE Vulnerability Information

[User] Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1376?

[Assistant] PUBLISHED


[System] CVE Vulnerability Information

[User] Explain the CVE ID: What does the identifier CVE-2022-1377 mean in the context of cybersecurity?

[Assistant] CVE-2022-1377