Provide references for further information: Can you share references or external links related to CVE-2022-1644?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0184d70a-548c-4258-b01d-7477f03cc346'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1644?


Explain the CVE ID: What does the identifier CVE-2022-1645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1645.

The Amazon Link WordPress plugin through 3.2.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-1645?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/915b7d79-f9dd-451d-bf8f-6d14ec3e67d2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1645?


Explain the CVE ID: What does the identifier CVE-2022-1646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1646.

The Simple Real Estate Pack WordPress plugin through 1.4.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-1646?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8a32896d-bf1b-4d7b-8d84-dc38b877928b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1646?


Explain the CVE ID: What does the identifier CVE-2022-1647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1647.

The FormCraft WordPress plugin before 1.2.6 does not sanitise and escape Field Labels, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-1647?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/8e8f6b08-90ab-466a-9828-dca0c0da2c9c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1647?


Explain the CVE ID: What does the identifier CVE-2022-1648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1648.

Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote Code Execution with running application privilege.


Provide references for further information: Can you share references or external links related to CVE-2022-1648?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.incibe.es/en/cve-assignment-publication/coordinated-cves'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1648?


Explain the CVE ID: What does the identifier CVE-2022-1649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1649.

Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html).


Provide references for further information: Can you share references or external links related to CVE-2022-1649?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c07e4918-cf86-4d2e-8969-5fb63575b449'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/a5aafb99c3965259c84ddcf45a91144bf7eb4cf1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1649?


Explain the CVE ID: What does the identifier CVE-2022-1650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1650.

Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository eventsource/eventsource prior to v2.0.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1650?

{'url': 'https://huntr.dev/bounties/dc9e467f-be5d-4945-867d-1044d27e9b8e'}, {'url': 'https://github.com/eventsource/eventsource/commit/10ee0c4881a6ba2fe65ec18ed195ac35889583c4'}, {'name': '[debian-lts-announce] 20221211 [SECURITY] [DLA 3235-1] node-eventsource security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/12/msg00021.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1650?


Explain the CVE ID: What does the identifier CVE-2022-1651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1651.

A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1651?

{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ecd1735f14d6ac868ae5d8b7a2bf193fa11f388b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220901-0008/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1651?


Explain the CVE ID: What does the identifier CVE-2022-1652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1652.

Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.


Provide references for further information: Can you share references or external links related to CVE-2022-1652?

{'tags': ['x_refsource_MISC'], 'url': 'https://francozappa.github.io/about-bias/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1832397'}, {'tags': ['x_refsource_MISC'], 'url': 'https://kb.cert.org/vuls/id/647177/'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220722-0002/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1652?


Explain the CVE ID: What does the identifier CVE-2022-1653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1653.

The Social Share Buttons by Supsystic WordPress plugin before 2.2.4 does not perform CSRF checks in it's ajax endpoints and admin pages, allowing an attacker to trick any logged in user to manipulate or change the plugin settings, as well as create, delete and rename projects and networks.


Provide references for further information: Can you share references or external links related to CVE-2022-1653?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/52eff451-8ce3-4ac4-b530-3196aa82db48'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1653?


Explain the CVE ID: What does the identifier CVE-2022-1654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1654.

Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abb_uninstall_template" (both) and "jupiterx_core_cp_uninstall_template" (JupiterX Core Only) AJAX actions


Provide references for further information: Can you share references or external links related to CVE-2022-1654?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1654?


Explain the CVE ID: What does the identifier CVE-2022-1655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1655.

An Incorrect Permission Assignment for Critical Resource flaw was found in Horizon on Red Hat OpenStack. Horizon session cookies are created without the HttpOnly flag despite HorizonSecureCookies being set to true in the environmental files, possibly leading to a loss of confidentiality and integrity.


Provide references for further information: Can you share references or external links related to CVE-2022-1655?

{'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/cve-2022-1655'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1655?


Explain the CVE ID: What does the identifier CVE-2022-1656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1656.

Vulnerable versions of the JupiterX Theme (<=2.0.6) allow any logged-in user, including subscriber-level users, to access any of the functions registered in lib/api/api/ajax.php, which also grant access to the jupiterx_api_ajax_ actions registered by the JupiterX Core Plugin (<=2.0.6). This includes the ability to deactivate arbitrary plugins as well as update the theme’s API key.


Provide references for further information: Can you share references or external links related to CVE-2022-1656?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1656?


Explain the CVE ID: What does the identifier CVE-2022-1657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1657.

Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file calls the load_control_panel_pane function. It is possible to use this action to include any local PHP file via the slug parameter. The Jupiter theme has a nearly identical vulnerability which can be exploited via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function.


Provide references for further information: Can you share references or external links related to CVE-2022-1657?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1657?


Explain the CVE ID: What does the identifier CVE-2022-1658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1658.

Vulnerable versions of the Jupiter Theme (<= 6.10.1) allow arbitrary plugin deletion by any authenticated user, including users with the subscriber role, via the abb_remove_plugin AJAX action registered in the framework/admin/control-panel/logic/plugin-management.php file. Using this functionality, any logged-in user can delete any installed plugin on the site.


Provide references for further information: Can you share references or external links related to CVE-2022-1658?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1658?


Explain the CVE ID: What does the identifier CVE-2022-1659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1659.

Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call any function in the includes/condition/class-condition-manager.php file by sending the desired function to call in the sub_action parameter. This can be used to view site configuration and logged-in users, modify post conditions, or perform a denial of service attack.


Provide references for further information: Can you share references or external links related to CVE-2022-1659?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1659?


Explain the CVE ID: What does the identifier CVE-2022-1660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1660.

The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2022-1660?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1660?


Explain the CVE ID: What does the identifier CVE-2022-1661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1661.

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files.


Provide references for further information: Can you share references or external links related to CVE-2022-1661?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1661?


Explain the CVE ID: What does the identifier CVE-2022-1662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1662.

In convert2rhel, there's an ansible playbook named ansible/run-convert2rhel.yml which passes the Red Hat Subscription Manager user password via the CLI to convert2rhel. This could allow unauthorized local users to view the password via the process list while convert2rhel is running. However, this ansible playbook is only an example in the upstream repository and it is not shipped in officially supported versions of convert2rhel.


Provide references for further information: Can you share references or external links related to CVE-2022-1662?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2083851'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1662?


Explain the CVE ID: What does the identifier CVE-2022-1663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1663.

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request.


Provide references for further information: Can you share references or external links related to CVE-2022-1663?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/30820be1-e96a-4ff6-b1ec-efda14069e70'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1663?


Explain the CVE ID: What does the identifier CVE-2022-1664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1664.

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction can lead to directory traversal situations on specially crafted orig.tar and debian.tar tarballs.


Provide references for further information: Can you share references or external links related to CVE-2022-1664?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1664?


Explain the CVE ID: What does the identifier CVE-2022-1665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1665.

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied to it and can bypass the secure boot validations, allowing the attacker to load another non-trusted code.


Provide references for further information: Can you share references or external links related to CVE-2022-1665?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2089529'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1665?


Explain the CVE ID: What does the identifier CVE-2022-1666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1666.

The default password for the web application’s root user (the vendor’s private account) was weak and the MD5 hash was used to crack the password using a widely available open-source tool.


Provide references for further information: Can you share references or external links related to CVE-2022-1666?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1666?


Explain the CVE ID: What does the identifier CVE-2022-1667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1667.

Client-side JavaScript controls may be bypassed by directly running a JS function to reboot the PLC (e.g., from the browser console) or by loading the corresponding, browser accessible PHP script


Provide references for further information: Can you share references or external links related to CVE-2022-1667?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1667?


Explain the CVE ID: What does the identifier CVE-2022-1668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1668.

Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH.


Provide references for further information: Can you share references or external links related to CVE-2022-1668?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1668?


Explain the CVE ID: What does the identifier CVE-2022-1669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1669.

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.


Provide references for further information: Can you share references or external links related to CVE-2022-1669?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-137-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1669?


Explain the CVE ID: What does the identifier CVE-2022-1670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1670.

When generating a user invitation code in Octopus Server, the validity of this code can be set for a specific number of users. It was possible to bypass this restriction of validity to create extra user accounts above the initial number of invited users.


Provide references for further information: Can you share references or external links related to CVE-2022-1670?

{'tags': ['x_refsource_MISC'], 'url': 'https://advisories.octopus.com/post/2022/sa2022-04/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1670?


Explain the CVE ID: What does the identifier CVE-2022-1671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1671.

A NULL pointer dereference flaw was found in rxrpc_preparse_s in net/rxrpc/server_key.c in the Linux kernel. This flaw allows a local attacker to crash the system or leak internal kernel information.


Provide references for further information: Can you share references or external links related to CVE-2022-1671?

{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ff8376ade4f668130385839cef586a0990f8ef87'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220901-0008/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220901-0004/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1671?


Explain the CVE ID: What does the identifier CVE-2022-1672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1672.

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks


Provide references for further information: Can you share references or external links related to CVE-2022-1672?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/5c5955d7-24f0-45e6-9c27-78ef50446dad'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1672?


Explain the CVE ID: What does the identifier CVE-2022-1673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1673.

The WooCommerce Green Wallet Gateway WordPress plugin before 1.0.2 does not escape the error_envision query parameter before outputting it to the page, leading to a Reflected Cross-Site Scripting vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1673?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/14283389-a6b8-4dd8-9441-f16fcc4ab3c0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1673?


Explain the CVE ID: What does the identifier CVE-2022-1674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1674.

NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.


Provide references for further information: Can you share references or external links related to CVE-2022-1674?

{'url': 'https://huntr.dev/bounties/a74ba4a4-7a39-4a22-bde3-d2f8ee07b385'}, {'url': 'https://github.com/vim/vim/commit/a59f2dfd0cf9ee1a584d3de5b7c2d47648e79060'}, {'name': 'FEDORA-2022-d20b51de9c', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ODXVYZC5Z4XRRZK7CK6B6IURYVYHA25U/'}, {'name': 'FEDORA-2022-74b9e404c1', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/'}, {'name': 'FEDORA-2022-d044e7e0b4', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1674?


Explain the CVE ID: What does the identifier CVE-2022-1676 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1676.


Provide references for further information: Can you share references or external links related to CVE-2022-1676?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1676?


Explain the CVE ID: What does the identifier CVE-2022-1677 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1677.

In OpenShift Container Platform, a user with permissions to create or modify Routes can craft a payload that inserts a malformed entry into one of the cluster router's HAProxy configuration files. This malformed entry can match any arbitrary hostname, or all hostnames in the cluster, and direct traffic to an arbitrary application within the cluster, including one under attacker control.


Provide references for further information: Can you share references or external links related to CVE-2022-1677?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2076211'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1677'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1677?


Explain the CVE ID: What does the identifier CVE-2022-1678 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1678.

An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.


Provide references for further information: Can you share references or external links related to CVE-2022-1678?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.openanolis.cn/show_bug.cgi?id=61'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lore.kernel.org/all/20200602080425.93712-1-kerneljasonxing%40gmail.com/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/0a70f118475e037732557796accd0878a00fc25a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gitee.com/anolis/cloud-kernel/commit/bed537da691b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://anas.openanolis.cn/cves/detail/CVE-2022-1678'}, {'tags': ['x_refsource_MISC'], 'url': 'https://anas.openanolis.cn/errata/detail/ANSA-2022:0143'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220715-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1678?


Explain the CVE ID: What does the identifier CVE-2022-1679 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1679.

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.


Provide references for further information: Can you share references or external links related to CVE-2022-1679?

{'url': 'https://lore.kernel.org/lkml/87ilqc7jv9.fsf%40kernel.org/t/'}, {'url': 'https://security.netapp.com/advisory/ntap-20220629-0007/'}, {'name': '[debian-lts-announce] 20221002 [SECURITY] [DLA 3131-1] linux security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html'}, {'name': '[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1679?


Explain the CVE ID: What does the identifier CVE-2022-1680 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1680.

An account takeover issue has been discovered in GitLab EE affecting all versions starting from 11.10 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. When group SAML SSO is configured, the SCIM feature (available only on Premium+ subscriptions) may allow any owner of a Premium group to invite arbitrary users through their username and email, then change those users' email addresses via SCIM to an attacker controlled email address and thus - in the absence of 2FA - take over those accounts. It is also possible for the attacker to change the display name and username of the targeted account.


Provide references for further information: Can you share references or external links related to CVE-2022-1680?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/363058'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1680.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1680?


Explain the CVE ID: What does the identifier CVE-2022-1681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1681.

Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions


Provide references for further information: Can you share references or external links related to CVE-2022-1681?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/591b11e1-7504-4a96-99c6-08f2b419e767'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/requarks/wiki/commit/78d02dc8e5d103d248e5d7632bf7a6facdf4264c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1681?


Explain the CVE ID: What does the identifier CVE-2022-1682 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1682.

Reflected Xss using url based payload in GitHub repository neorazorx/facturascripts prior to 2022.07. Xss can use to steal user's cookies which lead to Account takeover or do any malicious activity in victim's browser


Provide references for further information: Can you share references or external links related to CVE-2022-1682?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/e962d191-93e2-405e-a6af-b4a4e4d02527'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/neorazorx/facturascripts/commit/8e31d8434014a6d1e8791a489d84268fd74b0c9a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1682?


Explain the CVE ID: What does the identifier CVE-2022-1683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1683.

The amtyThumb WordPress plugin through 4.2.0 does not sanitise and escape a parameter before using it in a SQL statement via its shortcode, leading to an SQL injection and is exploitable by any authenticated user (and not just Author+ like the original advisory mention) due to the fact that they can execute shortcodes via an AJAX action


Provide references for further information: Can you share references or external links related to CVE-2022-1683?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/359d145b-c365-4e7c-a12e-c26b7b8617ce'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/amtythumb_4-2-0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1683?


Explain the CVE ID: What does the identifier CVE-2022-1684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1684.

The Cube Slider WordPress plugin through 1.2 does not sanitise and escape the idslider parameter before using it in various SQL queries, leading to SQL Injections exploitable by high privileged users such as admin


Provide references for further information: Can you share references or external links related to CVE-2022-1684?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/db7fb815-945a-41c7-8932-834cc646a806'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/cube-slider_1-2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1684?


Explain the CVE ID: What does the identifier CVE-2022-1685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1685.

The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection


Provide references for further information: Can you share references or external links related to CVE-2022-1685?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/86bd28d5-6767-4bca-ab59-710c1c4ecd97'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/five-minute-webshop_1-3-2_1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1685?


Explain the CVE ID: What does the identifier CVE-2022-1686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1686.

The Five Minute Webshop WordPress plugin through 1.3.2 does not sanitise and escape the id parameter before using it in a SQL statement when editing a product via the admin dashboard, leading to an SQL Injection


Provide references for further information: Can you share references or external links related to CVE-2022-1686?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1a5ce0dd-6847-42e7-8d88-3b63053fab71'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/five-minute-webshop_1-3-2_2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1686?


Explain the CVE ID: What does the identifier CVE-2022-1687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1687.

The Logo Slider WordPress plugin through 1.4.8 does not sanitise and escape the lsp_slider_id parameter before using it in a SQL statement via the Manage Slider Images admin page, leading to an SQL Injection


Provide references for further information: Can you share references or external links related to CVE-2022-1687?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e7506906-5c3d-4963-ae24-55f18c3e5081'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/logo-slider_1-4-8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1687?


Explain the CVE ID: What does the identifier CVE-2022-1688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1688.

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections


Provide references for further information: Can you share references or external links related to CVE-2022-1688?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/63d4444b-9b04-47f5-a692-c6c6c8ea7d92'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/note-press_0-1-10_1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1688?


Explain the CVE ID: What does the identifier CVE-2022-1689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1689.

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the Update parameter before using it in a SQL statement when updating a note via the admin dashboard, leading to an SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-1689?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/982f84a1-216d-41ed-87bd-433b695cec28'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/note-press_0-1-10_2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1689?


Explain the CVE ID: What does the identifier CVE-2022-1690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1690.

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-1690?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/54e16f0a-667c-44ea-98ad-0306c4a35d9d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/note-press_0-1-10_3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1690?


Explain the CVE ID: What does the identifier CVE-2022-1691 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1691.

The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-1691?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f9363b4c-c434-4f15-93f8-46162d2d7049'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/realty-workstation_1-0-6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1691?


Explain the CVE ID: What does the identifier CVE-2022-1692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1692.

The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack


Provide references for further information: Can you share references or external links related to CVE-2022-1692?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/83bae80c-f583-4d89-8282-e6384bbc7571'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bulletin.iese.de/post/cp-image-store_1-0-67'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1692?


Explain the CVE ID: What does the identifier CVE-2022-1694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1694.

The Useful Banner Manager WordPress plugin through 1.6.1 does not perform CSRF checks on POST requests to its admin page, allowing an attacker to trick a logged in admin to add, modify or delete banners from the plugin by submitting a form.


Provide references for further information: Can you share references or external links related to CVE-2022-1694?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/169a6c81-6c76-4f29-8f60-b2551042b962'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1694?


Explain the CVE ID: What does the identifier CVE-2022-1695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1695.

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.


Provide references for further information: Can you share references or external links related to CVE-2022-1695?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/2ac5b87b-1390-41ce-af6e-c50e5709baaa'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1695?


Explain the CVE ID: What does the identifier CVE-2022-1697 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1697.

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.


Provide references for further information: Can you share references or external links related to CVE-2022-1697?

{'tags': ['x_refsource_MISC'], 'url': 'https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697'}, {'tags': ['x_refsource_MISC'], 'url': 'https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm'}, {'tags': ['x_refsource_MISC'], 'url': 'https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1697?


Explain the CVE ID: What does the identifier CVE-2022-1698 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1698.

Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.


Provide references for further information: Can you share references or external links related to CVE-2022-1698?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/f4ab747b-e89a-4514-9432-ac1ea56639f3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1698?


Explain the CVE ID: What does the identifier CVE-2022-1699 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1699.

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.


Provide references for further information: Can you share references or external links related to CVE-2022-1699?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3024b2bb-50ca-46a2-85db-1cc916791cda'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1699?


Explain the CVE ID: What does the identifier CVE-2022-1700 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1700.

Improper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022.


Provide references for further information: Can you share references or external links related to CVE-2022-1700?

{'tags': ['x_refsource_MISC'], 'url': 'https://help.forcepoint.com/security/CVE/CVE-2022-1700.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1700?


Explain the CVE ID: What does the identifier CVE-2022-1701 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1701.

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data.


Provide references for further information: Can you share references or external links related to CVE-2022-1701?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1701?


Explain the CVE ID: What does the identifier CVE-2022-1702 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1702.

SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1702?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1702?


Explain the CVE ID: What does the identifier CVE-2022-1703 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1703.

Improper neutralization of special elements in the SonicWall SSL-VPN SMA100 series management interface allows a remote authenticated attacker to inject OS Commands which potentially leads to remote command execution vulnerability or denial of service (DoS) attack.


Provide references for further information: Can you share references or external links related to CVE-2022-1703?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1703?


Explain the CVE ID: What does the identifier CVE-2022-1704 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1704.

Due to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.


Provide references for further information: Can you share references or external links related to CVE-2022-1704?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-207-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1704?


Explain the CVE ID: What does the identifier CVE-2022-1705 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1705.

Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12 and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly fails to reject the header as invalid.


Provide references for further information: Can you share references or external links related to CVE-2022-1705?

{'url': 'https://go.dev/cl/409874'}, {'url': 'https://go.googlesource.com/go/+/e5017a93fcde94f09836200bca55324af037ee5f'}, {'url': 'https://go.dev/issue/53188'}, {'url': 'https://go.dev/cl/410714'}, {'url': 'https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE'}, {'url': 'https://pkg.go.dev/vuln/GO-2022-0525'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1705?


Explain the CVE ID: What does the identifier CVE-2022-1706 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1706.

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data confidentiality. Possible workaround is to not put secrets in the Ignition config.


Provide references for further information: Can you share references or external links related to CVE-2022-1706?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2082274'}, {'url': 'https://github.com/coreos/ignition/issues/1300'}, {'url': 'https://github.com/coreos/ignition/issues/1315'}, {'url': 'https://github.com/coreos/ignition/pull/1350'}, {'url': 'https://github.com/coreos/ignition/commit/4b70b44b430ecf8377a276e89b5acd3a6957d4ea'}, {'name': 'FEDORA-2022-393948cc9e', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NP765L7TJI7CD4XVOHUWZVRYRH3FYBOR/'}, {'name': 'FEDORA-2022-7846cac830', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LY7LKGMQMXV6DGD263YQHNSLOJJ5VLV5/'}, {'name': 'FEDORA-2022-5df5dc8ec5', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5QQXRGQKTN4YX2ZF3GQNEBDEOKJGCN3/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1706?


Explain the CVE ID: What does the identifier CVE-2022-1707 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1707.

The Google Tag Manager for WordPress plugin for WordPress is vulnerable to reflected Cross-Site Scripting via the s parameter due to the site search populating into the data layer of sites with insufficient sanitization in versions up to an including 1.15. The affected file is ~/public/frontend.php and this could be exploited by unauthenticated attackers.


Provide references for further information: Can you share references or external links related to CVE-2022-1707?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1707?


Explain the CVE ID: What does the identifier CVE-2022-1708 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1708.

A vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.


Provide references for further information: Can you share references or external links related to CVE-2022-1708?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2085361'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/cri-o/cri-o/security/advisories/GHSA-fcm2-6c3h-pg6j'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/cri-o/cri-o/commit/f032cf649ecc7e0c46718bd9e7814bfb317cb544'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1708?


Explain the CVE ID: What does the identifier CVE-2022-1709 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1709.

The Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-1709?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ac290535-d9ec-459a-abc3-27cd78eb54fc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1709?


Explain the CVE ID: What does the identifier CVE-2022-1710 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1710.

The Appointment Hour Booking WordPress plugin before 1.3.56 does not sanitise and escape a settings of its Calendar fields, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-1710?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ed162ccc-88e6-41e8-b24d-1b9f77a038b6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1710?


Explain the CVE ID: What does the identifier CVE-2022-1711 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1711.

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.


Provide references for further information: Can you share references or external links related to CVE-2022-1711?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c32afff5-6ad5-4d4d-beea-f55ab4925797'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1711?


Explain the CVE ID: What does the identifier CVE-2022-1712 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1712.

The LiveSync for WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-1712?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/9ab9626f-66d5-47e4-bdb8-d8fb519f9515'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1712?


Explain the CVE ID: What does the identifier CVE-2022-1713 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1713.

SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.


Provide references for further information: Can you share references or external links related to CVE-2022-1713?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cad3902f-3afb-4ed2-abd0-9f96a248de11'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/283d41ec80ad410d68634245cf56114bc19331ee'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1713?


Explain the CVE ID: What does the identifier CVE-2022-1714 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1714.

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.


Provide references for further information: Can you share references or external links related to CVE-2022-1714?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1714?


Explain the CVE ID: What does the identifier CVE-2022-1715 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1715.

Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.


Provide references for further information: Can you share references or external links related to CVE-2022-1715?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/58918962-ccb5-47f9-bb43-ffd8cae1ef24'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/neorazorx/facturascripts/commit/714bebf4c35e3eedda138f5ee912a8031bc8b1ab'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1715?


Explain the CVE ID: What does the identifier CVE-2022-1716 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1716.

Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.


Provide references for further information: Can you share references or external links related to CVE-2022-1716?

{'tags': ['x_refsource_MISC'], 'url': 'https://fluidattacks.com/advisories/tyler/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kitetech.co/keepmynotes'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1716?


Explain the CVE ID: What does the identifier CVE-2022-1717 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1717.

The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-1717?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/79a532e9-bc6e-4722-8d67-9c15720d06a6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1717?


Explain the CVE ID: What does the identifier CVE-2022-1718 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1718.

The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1718?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/1ff8afe4-6ff7-45aa-a652-d8aac7e5be7e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/87e231e04495fb705fe1e03cb56fc4136bafe895'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1718?


Explain the CVE ID: What does the identifier CVE-2022-1719 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1719.

Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page


Provide references for further information: Can you share references or external links related to CVE-2022-1719?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/790ba3fd-41e9-4393-8e2f-71161b56279b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/36a542abbbb74828338ce402d65653ac58db42e0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1719?


Explain the CVE ID: What does the identifier CVE-2022-1720 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1720.

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.


Provide references for further information: Can you share references or external links related to CVE-2022-1720?

{'url': 'https://huntr.dev/bounties/5ccfb386-7eb9-46e5-98e5-243ea4b358a8'}, {'url': 'https://github.com/vim/vim/commit/395bd1f6d3edc9f7edb5d1f2d7deaf5a9e3ab93c'}, {'name': '[debian-lts-announce] 20220620 [SECURITY] [DLA 3053-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/06/msg00014.html'}, {'name': 'FEDORA-2022-719f3ec21b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFD2A4YLBR7OIRHTL7CK6YNMEIQ264CN/'}, {'name': 'FEDORA-2022-bb7f3cacbf', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U743FMJGFQ35GBPCQ6OWMVZEJPDFVEWM/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213443'}, {'url': 'https://support.apple.com/kb/HT213444'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/43'}, {'name': '20221030 APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/45'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1720?


Explain the CVE ID: What does the identifier CVE-2022-1721 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1721.

Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.


Provide references for further information: Can you share references or external links related to CVE-2022-1721?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/000931cc-6d0e-4a4f-b4d8-4ba46ba0e699'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/01ccb271d34258872b859c0fc1d253cc81341917'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1721?


Explain the CVE ID: What does the identifier CVE-2022-1722 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1722.

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses


Provide references for further information: Can you share references or external links related to CVE-2022-1722?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c903d563-ba97-44e9-b421-22bfab1e0cbd'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/cf5c78aa0f3127fb10053db55b39f3017a0654ae'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1722?


Explain the CVE ID: What does the identifier CVE-2022-1723 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1723.

Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.


Provide references for further information: Can you share references or external links related to CVE-2022-1723?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/619851a4-2a08-4196-80e9-ab41953491d8'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/7a68ebe22a64fe722704e9c4527791209fee2034'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1723?


Explain the CVE ID: What does the identifier CVE-2022-1724 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1724.

The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1724?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/96a0a667-9c4b-4ea6-b78a-0681e9a9bbae'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1724?


Explain the CVE ID: What does the identifier CVE-2022-1725 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1725.

NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.


Provide references for further information: Can you share references or external links related to CVE-2022-1725?

{'url': 'https://huntr.dev/bounties/4363cf07-233e-4d0a-a1d5-c731a400525c'}, {'url': 'https://github.com/vim/vim/commit/b62dc5e7825bc195efe3041d5b3a9f1528359e1c'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1725?


Explain the CVE ID: What does the identifier CVE-2022-1726 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1726.

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties.


Provide references for further information: Can you share references or external links related to CVE-2022-1726?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/wenzhixin/bootstrap-table/commit/b4a1e5dd332be652e0bc376fd9256886cf4bbde9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1726?


Explain the CVE ID: What does the identifier CVE-2022-1727 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1727.

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.


Provide references for further information: Can you share references or external links related to CVE-2022-1727?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/b242e806-fc8c-41c0-aad7-e0c9c37ecdee'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/4deecee18191f67e242422abf3ca304e19e49687'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1727?


Explain the CVE ID: What does the identifier CVE-2022-1728 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1728.

Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.


Provide references for further information: Can you share references or external links related to CVE-2022-1728?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3c6cb129-6995-4722-81b5-af052572b519'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1728?


Explain the CVE ID: What does the identifier CVE-2022-1729 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1729.

A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.


Provide references for further information: Can you share references or external links related to CVE-2022-1729?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1729?


Explain the CVE ID: What does the identifier CVE-2022-1730 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1730.

Cross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.


Provide references for further information: Can you share references or external links related to CVE-2022-1730?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/jgraph/drawio/commit/4deecee18191f67e242422abf3ca304e19e49687'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/fded4835-bd49-4533-8311-1d71e0ed7c00'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1730?


Explain the CVE ID: What does the identifier CVE-2022-1731 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1731.

Metasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.


Provide references for further information: Can you share references or external links related to CVE-2022-1731?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.tenable.com/security/research/tra-2022-17'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1731?


Explain the CVE ID: What does the identifier CVE-2022-1732 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1732.

The Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-1732?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3620a087-032e-4a5f-99c8-f9e7e9c29813'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1732?


Explain the CVE ID: What does the identifier CVE-2022-1733 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1733.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.


Provide references for further information: Can you share references or external links related to CVE-2022-1733?

{'url': 'https://huntr.dev/bounties/6ff03b27-472b-4bef-a2bf-410fae65ff0a'}, {'url': 'https://github.com/vim/vim/commit/60ae0e71490c97f2871a6344aca61cacf220f813'}, {'name': 'FEDORA-2022-d6d1ac4ca7', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QKIX5HYKWXWG6QBCPPTPQ53GNOFHSAIS/'}, {'name': 'FEDORA-2022-74b9e404c1', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IUPOLEX5GXC733HL4EFYMHFU7NISJJZG/'}, {'name': 'FEDORA-2022-d044e7e0b4', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BFAZTAT5CZC2R6KYDYA2HBAVEDSIX6MW/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1733?


Explain the CVE ID: What does the identifier CVE-2022-1734 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1734.

A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.


Provide references for further information: Can you share references or external links related to CVE-2022-1734?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/d270453a0d9ec10bb8a802a142fb1b3601a83098'}, {'name': '[oss-security] 20220605 Re: Linux kernel: UAF, null-ptr-deref and double-free vulnerabilities in nfcmrvl module', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/06/05/4'}, {'name': '[oss-security] 20220609 Re: Linux kernel: UAF, null-ptr-deref and double-free vulnerabilities in nfcmrvl module', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/06/09/1'}, {'name': '[debian-lts-announce] 20220701 [SECURITY] [DLA 3065-1] linux security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/07/msg00000.html'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220707-0007/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1734?


Explain the CVE ID: What does the identifier CVE-2022-1735 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1735.

Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.


Provide references for further information: Can you share references or external links related to CVE-2022-1735?

{'url': 'https://huntr.dev/bounties/c9f85608-ff11-48e4-933d-53d1759d44d9'}, {'url': 'https://github.com/vim/vim/commit/7ce5b2b590256ce53d6af28c1d203fb3bc1d2d97'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': 'GLSA-202305-16', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202305-16'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1735?


Explain the CVE ID: What does the identifier CVE-2022-1737 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1737.

Pyramid Solutions' affected products, the Developer and DLL kits for EtherNet/IP Adapter and EtherNet/IP Scanner, are vulnerable to an out-of-bounds write, which may allow an unauthorized attacker to send a specially crafted packet that may result in a denial-of-service condition.


Provide references for further information: Can you share references or external links related to CVE-2022-1737?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-174-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1737?


Explain the CVE ID: What does the identifier CVE-2022-1738 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1738.

Fuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process memory.


Provide references for further information: Can you share references or external links related to CVE-2022-1738?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1738?


Explain the CVE ID: What does the identifier CVE-2022-1739 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1739.

The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to detect tampering. An attacker could leverage this vulnerability to install malicious code, which could also be spread to other vulnerable ImageCast X devices via removable media.


Provide references for further information: Can you share references or external links related to CVE-2022-1739?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1739?


Explain the CVE ID: What does the identifier CVE-2022-1740 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1740.

The tested version of Dominion Voting Systems ImageCast X’s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device.


Provide references for further information: Can you share references or external links related to CVE-2022-1740?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1740?


Explain the CVE ID: What does the identifier CVE-2022-1741 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1741.

The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code.


Provide references for further information: Can you share references or external links related to CVE-2022-1741?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1741?


Explain the CVE ID: What does the identifier CVE-2022-1742 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1742.

The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.


Provide references for further information: Can you share references or external links related to CVE-2022-1742?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1742?


Explain the CVE ID: What does the identifier CVE-2022-1743 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1743.

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.


Provide references for further information: Can you share references or external links related to CVE-2022-1743?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1743?


Explain the CVE ID: What does the identifier CVE-2022-1744 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1744.

Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.


Provide references for further information: Can you share references or external links related to CVE-2022-1744?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1744?


Explain the CVE ID: What does the identifier CVE-2022-1745 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1745.

The authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.


Provide references for further information: Can you share references or external links related to CVE-2022-1745?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1745?


Explain the CVE ID: What does the identifier CVE-2022-1746 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1746.

The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.


Provide references for further information: Can you share references or external links related to CVE-2022-1746?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1746?


Explain the CVE ID: What does the identifier CVE-2022-1747 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1747.

The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization.


Provide references for further information: Can you share references or external links related to CVE-2022-1747?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1747?


Explain the CVE ID: What does the identifier CVE-2022-1748 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1748.

Softing OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1748?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-228-04'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://industrial.softing.com/fileadmin/psirt/downloads/syt-2022-7.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1748?


Explain the CVE ID: What does the identifier CVE-2022-1749 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1749.

The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1.


Provide references for further information: Can you share references or external links related to CVE-2022-1749?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1749?


Explain the CVE ID: What does the identifier CVE-2022-1750 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1750.

The Sticky Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ popup_title' parameter in versions up to, and including, 1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with admin level capabilities and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This issue mostly affects sites where unfiltered_html has been disabled for administrators and on multi-site installations where unfiltered_html is disabled for administrators.


Provide references for further information: Can you share references or external links related to CVE-2022-1750?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1750?


Explain the CVE ID: What does the identifier CVE-2022-1751 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1751.

The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.


Provide references for further information: Can you share references or external links related to CVE-2022-1751?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1751?


Explain the CVE ID: What does the identifier CVE-2022-1752 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1752.

Unrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1752?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/66e9bfa9-598f-49ab-a472-752911df3f2d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/d107f12e71c0fe1e7ac0fdc7463f59c4965a42cd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1752?


Explain the CVE ID: What does the identifier CVE-2022-1753 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1753.

A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument group_id allows posting messages in other groups. It is possible to launch the attack remotely but it might require authentication. A video explaining the attack has been disclosed to the public.


Provide references for further information: Can you share references or external links related to CVE-2022-1753?

{'tags': ['x_refsource_MISC'], 'url': 'https://youtu.be/tIzOZtp2fxA'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.youtube.com/watch?v=tIzOZtp2fxA'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.199974'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1753?


Explain the CVE ID: What does the identifier CVE-2022-1754 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1754.

Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1754?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/e836d04d16787c2c9c72e7bf011cf396d1f73c19'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2f65af7c-a74b-46a6-8847-5db6785f1cf2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1754?


Explain the CVE ID: What does the identifier CVE-2022-1755 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1755.

The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks


Provide references for further information: Can you share references or external links related to CVE-2022-1755?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/62b2548e-6b59-48b8-b1c2-9bd47e634982'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1755?


Explain the CVE ID: What does the identifier CVE-2022-1756 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1756.

The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is still vulnerable to Reflected XSS in older browsers such as Internet Explorer 9 or below.


Provide references for further information: Can you share references or external links related to CVE-2022-1756?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6ad407fe-db2b-41fb-834b-dd8c4f62b072'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1756?


Explain the CVE ID: What does the identifier CVE-2022-1757 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1757.

The pagebar WordPress plugin before 2.70 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation in some of them, it could also lead to Stored XSS issues


Provide references for further information: Can you share references or external links related to CVE-2022-1757?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e648633e-868b-45b2-870a-308a2f9cb7f5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1757?


Explain the CVE ID: What does the identifier CVE-2022-1758 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1758.

The Genki Pre-Publish Reminder WordPress plugin through 1.4.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS as well as RCE when custom code is added via the plugin settings.


Provide references for further information: Can you share references or external links related to CVE-2022-1758?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/211816ce-d2bc-469b-9a8e-e0c2a5c4461b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1758?


Explain the CVE ID: What does the identifier CVE-2022-1759 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1759.

The RB Internal Links WordPress plugin through 2.0.16 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, as well as perform Stored Cross-Site Scripting attacks due to the lack of sanitisation and escaping


Provide references for further information: Can you share references or external links related to CVE-2022-1759?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d8e63f78-f38a-4f68-96ba-8059d175cea8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1759?


Explain the CVE ID: What does the identifier CVE-2022-1760 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1760.

The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-1760?

{'url': 'https://wpscan.com/vulnerability/c7906b1d-25c9-4f34-bd02-66824878b88e/', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1760?


Explain the CVE ID: What does the identifier CVE-2022-1761 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1761.

The Peter’s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.


Provide references for further information: Can you share references or external links related to CVE-2022-1761?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/31b413e1-d4b5-463e-9910-37876881c062'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1761?


Explain the CVE ID: What does the identifier CVE-2022-1762 mean in the context of cybersecurity?