Provide references for further information: Can you share references or external links related to CVE-2022-0578?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/02c81928-eb47-476f-8000-e93dc796dbcc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/publify/publify/commit/b50df050c593cc532b2c516792989bcfce2d73f7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0578?


Explain the CVE ID: What does the identifier CVE-2022-0579 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0579.

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9.


Provide references for further information: Can you share references or external links related to CVE-2022-0579?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/70a99cf4-3241-4ffc-b9ed-5c54932f3849'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/snipe/snipe-it/commit/db0c0e790892db874573d95f8ae4268b8a011ab1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0579?


Explain the CVE ID: What does the identifier CVE-2022-0580 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0580.

Incorrect Authorization in Packagist librenms/librenms prior to 22.2.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0580?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2494106c-7703-4558-bb1f-1eae59d264e3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/librenms/librenms/commit/95970af78e4c899744a715766d744deef8c505f7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0580?


Explain the CVE ID: What does the identifier CVE-2022-0581 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0581.

Crash in the CMS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2022-0581?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2022-05.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17935'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0581.json'}, {'name': 'FEDORA-2022-5a3603afe0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/'}, {'name': 'FEDORA-2022-e29665a42b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/'}, {'name': '[debian-lts-announce] 20220331 [SECURITY] [DLA 2967-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html'}, {'name': 'GLSA-202210-04', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0581?


Explain the CVE ID: What does the identifier CVE-2022-0582 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0582.

Unaligned access in the CSN.1 protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2022-0582?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2022-04.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17882'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0582.json'}, {'name': 'FEDORA-2022-5a3603afe0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/'}, {'name': 'FEDORA-2022-e29665a42b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/'}, {'name': '[debian-lts-announce] 20220331 [SECURITY] [DLA 2967-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html'}, {'name': 'GLSA-202210-04', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0582?


Explain the CVE ID: What does the identifier CVE-2022-0583 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0583.

Crash in the PVFS protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2022-0583?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2022-03.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17840'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0583.json'}, {'name': 'FEDORA-2022-5a3603afe0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/'}, {'name': 'FEDORA-2022-e29665a42b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/'}, {'name': '[debian-lts-announce] 20220331 [SECURITY] [DLA 2967-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html'}, {'name': 'GLSA-202210-04', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0583?


Explain the CVE ID: What does the identifier CVE-2022-0585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0585.

Large loops in multiple protocol dissectors in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allow denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2022-0585?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2022-02.html'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0585.json'}, {'name': 'FEDORA-2022-5a3603afe0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/'}, {'name': 'FEDORA-2022-e29665a42b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/'}, {'name': '[debian-lts-announce] 20220331 [SECURITY] [DLA 2967-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html'}, {'name': 'GLSA-202210-04', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0585?


Explain the CVE ID: What does the identifier CVE-2022-0586 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0586.

Infinite loop in RTMPT protocol dissector in Wireshark 3.6.0 to 3.6.1 and 3.4.0 to 3.4.11 allows denial of service via packet injection or crafted capture file


Provide references for further information: Can you share references or external links related to CVE-2022-0586?

{'url': 'https://www.wireshark.org/security/wnpa-sec-2022-01.html'}, {'url': 'https://gitlab.com/wireshark/wireshark/-/issues/17813'}, {'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0586.json'}, {'name': 'FEDORA-2022-5a3603afe0', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRJ24JRKLA6XMDKLGVTOPM5KBBU4UHLN/'}, {'name': 'FEDORA-2022-e29665a42b', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V3DZD2JU56ZI4XV2B3HGVGA5PXQDNA5T/'}, {'name': '[debian-lts-announce] 20220331 [SECURITY] [DLA 2967-1] wireshark security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html'}, {'name': 'GLSA-202210-04', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0586?


Explain the CVE ID: What does the identifier CVE-2022-0587 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0587.

Improper Authorization in Packagist librenms/librenms prior to 22.2.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0587?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/librenms/librenms/commit/95970af78e4c899744a715766d744deef8c505f7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/0c7c9ecd-33ac-4865-b05b-447ced735469'}, {'tags': ['x_refsource_MISC'], 'url': 'https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0587?


Explain the CVE ID: What does the identifier CVE-2022-0588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0588.

Missing Authorization in Packagist librenms/librenms prior to 22.2.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0588?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/librenms/librenms/commit/95970af78e4c899744a715766d744deef8c505f7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/caab3310-0d70-4c8a-8768-956f8dd3326d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0588?


Explain the CVE ID: What does the identifier CVE-2022-0589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0589.

Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0589?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/d943d95c-076f-441a-ab21-cbf6b15f6768'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/librenms/librenms/commit/4c9d4eefd8064a0285f9718ef38f5617d7f9d6fa'}, {'tags': ['x_refsource_MISC'], 'url': 'https://notes.netbytesec.com/2022/02/multiple-vulnerabilities-in-librenms.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0589?


Explain the CVE ID: What does the identifier CVE-2022-0590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0590.

The BulletProof Security WordPress plugin before 5.8 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-0590?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/08b66b69-3c69-4a1e-9c0a-5697e31bc04e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0590?


Explain the CVE ID: What does the identifier CVE-2022-0591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0591.

The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users


Provide references for further information: Can you share references or external links related to CVE-2022-0591?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b5303e63-d640-4178-9237-d0f524b13d47'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0591?


Explain the CVE ID: What does the identifier CVE-2022-0592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0592.

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.


Provide references for further information: Can you share references or external links related to CVE-2022-0592?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/5d8d53ad-dc88-4b50-a292-fc447484c27b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0592?


Explain the CVE ID: What does the identifier CVE-2022-0593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0593.

The Login with phone number WordPress plugin before 1.3.7 includes a file delete.php with no form of authentication or authorization checks placed in the plugin directory, allowing unauthenticated user to remotely delete the plugin files leading to a potential Denial of Service situation.


Provide references for further information: Can you share references or external links related to CVE-2022-0593?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/76a50157-04b5-43e8-afbc-a6ddf6d1cba3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wordpress.org/plugins/login-with-phone-number'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0593?


Explain the CVE ID: What does the identifier CVE-2022-0594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0594.

The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, allowing them to call it and retrieve various information such as the list of active plugins, various version like PHP, cURL, WP etc.


Provide references for further information: Can you share references or external links related to CVE-2022-0594?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4de9451e-2c8d-4d99-a255-b027466d29b1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0594?


Explain the CVE ID: What does the identifier CVE-2022-0595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0595.

The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SVG files to be uploaded by default via the dnd_codedropz_upload AJAX action, which could lead to Stored Cross-Site Scripting issue


Provide references for further information: Can you share references or external links related to CVE-2022-0595?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1b849957-eaca-47ea-8f84-23a3a98cc8de'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2686614'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0595?


Explain the CVE ID: What does the identifier CVE-2022-0596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0596.

Improper Validation of Specified Quantity in Input in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0596?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0596?


Explain the CVE ID: What does the identifier CVE-2022-0597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0597.

Open Redirect in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0597?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/68c22eab-cc69-4e9f-bcb6-2df3db626813'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/acfc6a581d1ea86096d1b0ecd8a0eec927c0e9b2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0597?


Explain the CVE ID: What does the identifier CVE-2022-0598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0598.

The Login with phone number WordPress plugin before 1.3.8 does not sanitise and escape plugin settings which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-0598?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4688d39e-ac9b-47f5-a4c1-f9548b63c68c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0598?


Explain the CVE ID: What does the identifier CVE-2022-0599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0599.

The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does not sanitize and escape the mmursp_id parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0599?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4f1d45bc-d3bd-472c-959d-05abeff32765'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0599?


Explain the CVE ID: What does the identifier CVE-2022-0600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0600.

The Conference Scheduler WordPress plugin before 2.4.3 does not sanitize and escape the tab parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0600?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/5dd6f625-6738-4e6a-81dc-21c0add4368d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0600?


Explain the CVE ID: What does the identifier CVE-2022-0601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0601.

The Countdown, Coming Soon, Maintenance WordPress plugin before 2.2.9 does not sanitize and escape the post parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0601?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6ec62eae-2072-4098-8f77-b22d61a89cbf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2679245'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0601?


Explain the CVE ID: What does the identifier CVE-2022-0602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0602.

Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0602?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/615f1788-d474-4580-b0ef-5edd50274010'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tastyigniter/tastyigniter/commit/992d4ce6444805c3132e3635a01b6fd222063554'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0602?


Explain the CVE ID: What does the identifier CVE-2022-0603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0603.

Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0603?

{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1290008'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0603?


Explain the CVE ID: What does the identifier CVE-2022-0604 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0604.

Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0604?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1273397'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0604?


Explain the CVE ID: What does the identifier CVE-2022-0605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0605.

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0605?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1286940'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0605?


Explain the CVE ID: What does the identifier CVE-2022-0606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0606.

Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0606?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1288020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0606?


Explain the CVE ID: What does the identifier CVE-2022-0607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0607.

Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0607?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1250655'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0607?


Explain the CVE ID: What does the identifier CVE-2022-0608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0608.

Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0608?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1270333'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0608?


Explain the CVE ID: What does the identifier CVE-2022-0609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0609.

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0609?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1296150'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0609?


Explain the CVE ID: What does the identifier CVE-2022-0610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0610.

Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0610?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1285449'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0610?


Explain the CVE ID: What does the identifier CVE-2022-0611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0611.

Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0611?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/7b7447fc-f1b0-446c-b016-ee3f6511010b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/snipe/snipe-it/commit/321be4733d3997fc738f0118e1b9af5905f95439'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0611?


Explain the CVE ID: What does the identifier CVE-2022-0612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0612.

Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.


Provide references for further information: Can you share references or external links related to CVE-2022-0612?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/eadcf7d2-a479-4901-abcc-1505d3f1b32f'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/4d4f1db1701f09177896a38e43fd0c693835f03b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0612?


Explain the CVE ID: What does the identifier CVE-2022-0613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0613.

Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.


Provide references for further information: Can you share references or external links related to CVE-2022-0613?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/f53d5c42-c108-40b8-917d-9dad51535083'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/medialize/uri.js/commit/6ea641cc8648b025ed5f30b090c2abd4d1a5249f'}, {'name': 'FEDORA-2022-7cca5b6d38', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MXSSATHALUSXXD2KT6UFZAX7EG4GR332/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0613?


Explain the CVE ID: What does the identifier CVE-2022-0614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0614.

Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0614?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a980ce4d-c359-4425-92c4-e844c0055879'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0614?


Explain the CVE ID: What does the identifier CVE-2022-0615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0615.

Use-after-free in eset_rtp kernel module used in ESET products for Linux allows potential attacker to trigger denial-of-service condition on the system.


Provide references for further information: Can you share references or external links related to CVE-2022-0615?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.eset.com/en/ca8230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0615?


Explain the CVE ID: What does the identifier CVE-2022-0616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0616.

The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-0616?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7c63d76e-34ca-4778-8784-437d446c16e0'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0616?


Explain the CVE ID: What does the identifier CVE-2022-0617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0617.

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.


Provide references for further information: Can you share references or external links related to CVE-2022-0617?

{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7fc3b7c2981bbd1047916ade327beccb90994eee'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ea8569194b43f0f01f0a84c689388542c7254a1f'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lore.kernel.org/lkml/20220114172329.ygzry5rlz64ua2nr%40quack3.lan/T/'}, {'name': '[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00011.html'}, {'name': '[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html'}, {'name': 'DSA-5095', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5095'}, {'name': 'DSA-5096', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5096'}, {'name': '[oss-security] 20220413 CVE-2022-0617: udf:A null-ptr-deref bug be triggered when write to an ICB inode', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2022/04/13/2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0617?


Explain the CVE ID: What does the identifier CVE-2022-0618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0618.

A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a logical error when parsing a HTTP/2 HEADERS or HTTP/2 PUSH_PROMISE frame where the frame contains padding information without any other data. This logical error caused confusion about the size of the frame, leading to a parsing error. This parsing error immediately crashes the entire process. Sending a HEADERS frame or PUSH_PROMISE frame with HTTP/2 padding information does not require any special permission, so any HTTP/2 connection peer may send such a frame. For clients, this means any server to which they connect may launch this attack. For servers, anyone they allow to connect to them may launch such an attack. The attack is low-effort: it takes very little resources to send an appropriately crafted frame. The impact on availability is high: receiving the frame immediately crashes the server, dropping all in-flight connections and causing the service to need to restart. It is straightforward for an attacker to repeatedly send appropriately crafted frames, so attackers require very few resources to achieve a substantial denial of service. The attack does not have any confidentiality or integrity risks in and of itself: swift-nio-http2 is parsing the frame in memory-safe code, so the crash is safe. However, sudden process crashes can lead to violations of invariants in services, so it is possible that this attack can be used to trigger an error condition that has confidentiality or integrity risks. The risk can be mitigated if untrusted peers can be prevented from communicating with the service. This mitigation is not available to many services. The issue is fixed by rewriting the parsing code to correctly handle the condition. The issue was found by automated fuzzing by oss-fuzz.


Provide references for further information: Can you share references or external links related to CVE-2022-0618?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0618?


Explain the CVE ID: What does the identifier CVE-2022-0619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0619.

The Database Peek WordPress plugin through 1.2 does not sanitize and escape the match parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0619?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d18892c6-2b19-4037-bc39-5d170adaf3d9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0619?


Explain the CVE ID: What does the identifier CVE-2022-0620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0620.

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0620?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/77b92130-167c-4e8a-bde5-3fd1bd6982c6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0620?


Explain the CVE ID: What does the identifier CVE-2022-0621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0621.

The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0621?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b5578747-298d-4f4b-867e-46b767485a98'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0621?


Explain the CVE ID: What does the identifier CVE-2022-0622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0622.

Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0622?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4ed99dab-5319-4b6b-919a-84a9acd0061a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/snipe/snipe-it/commit/178e44095141ab805c282f563fb088df1a10b2e2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0622?


Explain the CVE ID: What does the identifier CVE-2022-0623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0623.

Out-of-bounds Read in Homebrew mruby prior to 3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0623?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/5b908ac7-d8f1-4fcd-9355-85df565f7580'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0623?


Explain the CVE ID: What does the identifier CVE-2022-0624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0624.

Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0624?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/afffb2bd-fb06-4144-829e-ecbbcbc85388'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ionicabizau/parse-path/commit/f9ad8856a3c8ae18e1cf4caef5edbabbc42840e8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0624?


Explain the CVE ID: What does the identifier CVE-2022-0625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0625.

The Admin Menu Editor WordPress plugin through 1.0.4 does not sanitize and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0625?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ec5c331c-fb74-4ccc-a4d4-446c2b4e703a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0625?


Explain the CVE ID: What does the identifier CVE-2022-0626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0626.

The Advanced Admin Search WordPress plugin before 1.1.6 does not sanitize and escape some parameters before outputting them back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0626?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d72164e2-8449-4fb1-aad3-bfa86d645e47'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0626?


Explain the CVE ID: What does the identifier CVE-2022-0627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0627.

The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0627?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/fd8c720a-a94a-438f-b686-3a734e3c24e4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0627?


Explain the CVE ID: What does the identifier CVE-2022-0628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0628.

The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0628?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/af9787ee-c496-4f02-a22c-c8f8a97ad902'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2684307'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0628?


Explain the CVE ID: What does the identifier CVE-2022-0629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0629.

Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0629?

{'url': 'https://huntr.dev/bounties/95e2b0da-e480-4ee8-9324-a93a2ab0a877'}, {'url': 'https://github.com/vim/vim/commit/34f8117dec685ace52cd9e578e2729db278163fc'}, {'name': 'FEDORA-2022-8622ebdebb', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UURGABNDL77YR5FRQKTFBYNBDQX2KO7Q/'}, {'name': 'FEDORA-2022-48bf3cb1c4', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0629?


Explain the CVE ID: What does the identifier CVE-2022-0630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0630.


Provide references for further information: Can you share references or external links related to CVE-2022-0630?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/ff3a5ebed6ffbe3e70481531cfb969b497aa73ad'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/f7cdd680-1a7f-4992-b4b8-44b5e4ba3e32'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0630?


Explain the CVE ID: What does the identifier CVE-2022-0631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0631.

Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0631?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/9bdc49ca-6697-4adc-a785-081e1961bf40'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/47068ae07a5fa3aa9a1879cdfe98a9ce0f339299'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0631?


Explain the CVE ID: What does the identifier CVE-2022-0632 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0632.

NULL Pointer Dereference in Homebrew mruby prior to 3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0632?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3e5bb8f6-30fd-4553-86dd-761e9459ce1b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/44f591aa8f7091e6ca6cb418e428ae6d4ceaf77d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0632?


Explain the CVE ID: What does the identifier CVE-2022-0633 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0633.

The UpdraftPlus WordPress plugin Free before 1.22.3 and Premium before 2.22.3 do not properly validate a user has the required privileges to access a backup's nonce identifier, which may allow any users with an account on the site (such as subscriber) to download the most recent site & database backup.


Provide references for further information: Can you share references or external links related to CVE-2022-0633?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d257c28f-3c7e-422b-a5c2-e618ed3c0bf3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://updraftplus.com/updraftplus-security-release-1-22-3-2-22-3/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://jetpack.com/2022/02/17/severe-vulnerability-fixed-in-updraftplus-1-22-3/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/166059/WordPress-UpdraftPlus-1.22.2-Backup-Disclosure.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0633?


Explain the CVE ID: What does the identifier CVE-2022-0634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0634.

The ThirstyAffiliates WordPress plugin before 3.10.5 lacks authorization checks in the ta_insert_external_image action, allowing a low-privilege user (with a role as low as Subscriber) to add an image from an external URL to an affiliate link. Further the plugin lacks csrf checks, allowing an attacker to trick a logged in user to perform the action by crafting a special request.


Provide references for further information: Can you share references or external links related to CVE-2022-0634?

{'url': 'https://wpscan.com/vulnerability/7e11aeb0-b231-407d-86ec-9018c2c7eee3', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0634?


Explain the CVE ID: What does the identifier CVE-2022-0635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0635.

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.


Provide references for further information: Can you share references or external links related to CVE-2022-0635?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.isc.org/v1/docs/cve-2022-0635'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220408-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0635?


Explain the CVE ID: What does the identifier CVE-2022-0636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0636.

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash.


Provide references for further information: Can you share references or external links related to CVE-2022-0636?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/us/en/product_security/LEN-78116'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0636?


Explain the CVE ID: What does the identifier CVE-2022-0637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0637.

open redirect in pollbot (pollbot.services.mozilla.com) in versions before 1.4.6


Provide references for further information: Can you share references or external links related to CVE-2022-0637?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0637?


Explain the CVE ID: What does the identifier CVE-2022-0638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0638.

Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0638?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/9d3d883c-d74c-4fe2-9978-a8e3d1ccf9f3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/756096da1260f29ff6f4532234d93d8e41dd5aa8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0638?


Explain the CVE ID: What does the identifier CVE-2022-0639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0639.

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.


Provide references for further information: Can you share references or external links related to CVE-2022-0639?

{'url': 'https://huntr.dev/bounties/83a6bc9a-b542-4a38-82cd-d995a1481155'}, {'url': 'https://github.com/unshiftio/url-parse/commit/ef45a1355375a8244063793a19059b4f62fc8788'}, {'name': '[debian-lts-announce] 20230223 [SECURITY] [DLA 3336-1] node-url-parse security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0639?


Explain the CVE ID: What does the identifier CVE-2022-0640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0640.

The Pricing Table Builder WordPress plugin before 1.1.5 does not sanitize and escape the postid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0640?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/f8405e06-9cf3-4acb-aebb-e80fb402daa9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2684253'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0640?


Explain the CVE ID: What does the identifier CVE-2022-0641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0641.

The Popup Like box WordPress plugin before 3.6.1 does not sanitize and escape the ays_fb_tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0641?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0a9830df-5f5d-40a3-9841-40994275136f'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0641?


Explain the CVE ID: What does the identifier CVE-2022-0642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0642.

The JivoChat Live Chat WordPress plugin before 1.3.5.4 does not properly check CSRF tokens on POST requests to the plugins admin page, and does not sanitise some parameters, leading to a stored Cross-Site Scripting vulnerability where an attacker can trick a logged in administrator to inject arbitrary javascript.


Provide references for further information: Can you share references or external links related to CVE-2022-0642?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/099cf9b4-0b3a-43c6-8ca9-7c2d50f86425'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0642?


Explain the CVE ID: What does the identifier CVE-2022-0643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0643.

The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0643?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/5be0de93-9625-419a-8c37-521c1bd9c24c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0643?


Explain the CVE ID: What does the identifier CVE-2022-0644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0644.


Provide references for further information: Can you share references or external links related to CVE-2022-0644?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0644?


Explain the CVE ID: What does the identifier CVE-2022-0645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0645.

Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.


Provide references for further information: Can you share references or external links related to CVE-2022-0645?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c13258a2-30e3-4261-9a3b-2f39c49a8bd6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/posthog/posthog/commit/859d8ed9ac7c5026db09714a26c85c1458abb038'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0645?


Explain the CVE ID: What does the identifier CVE-2022-0646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0646.

A flaw use after free in the Linux kernel Management Component Transport Protocol (MCTP) subsystem was found in the way user triggers cancel_work_sync after the unregister_netdev during removing device. A local user could use this flaw to crash the system or escalate their privileges on the system. It is actual from Linux Kernel 5.17-rc1 (when mctp-serial.c introduced) till 5.17-rc5.


Provide references for further information: Can you share references or external links related to CVE-2022-0646?

{'tags': ['x_refsource_MISC'], 'url': 'https://lore.kernel.org/all/20220211011552.1861886-1-jk%40codeconstruct.com.au'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220318-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0646?


Explain the CVE ID: What does the identifier CVE-2022-0647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0647.

The Bulk Creator WordPress plugin through 1.0.1 does not sanitize and escape the post_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0647?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4a585d5f-72ba-43e3-b04f-8b3e1b84444a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0647?


Explain the CVE ID: What does the identifier CVE-2022-0648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0648.

The Team Circle Image Slider With Lightbox WordPress plugin before 1.0.16 does not sanitize and escape the order_pos parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-0648?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/90f9ad6a-4855-4a8e-97f6-5f403eb6455d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0648?


Explain the CVE ID: What does the identifier CVE-2022-0649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0649.

The AdRotate WordPress plugin before 5.8.23 does not escape Group Names, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-0649?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/284fbc98-803d-4da5-8920-411eeae4bac8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0649?


Explain the CVE ID: What does the identifier CVE-2022-0650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0650.

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N 3.20.1 Build 200316 Rel.34392n (5553) routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-13993.


Provide references for further information: Can you share references or external links related to CVE-2022-0650?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0650?


Explain the CVE ID: What does the identifier CVE-2022-0651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0651.

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5.


Provide references for further information: Can you share references or external links related to CVE-2022-0651?

{'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/Xib3rR4dAr/5dbd58b7f57a5037fe461fba8e696042'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0651'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2679983%40wp-statistics&new=2679983%40wp-statistics&sfp_email=&sfph_mail='}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0651?


Explain the CVE ID: What does the identifier CVE-2022-0652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0652.

Confd log files contain local users', including root’s, SHA512crypt password hashes with insecure access permissions. This allows a local attacker to attempt off-line brute-force attacks against these password hashes in Sophos UTM before version 9.710.


Provide references for further information: Can you share references or external links related to CVE-2022-0652?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.sophos.com/en-us/security-advisories/sophos-sa-20220321-utm-9710'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0652?


Explain the CVE ID: What does the identifier CVE-2022-0653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0653.

The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the site_url parameter found in the ~/assets/misc/fallback-page.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 3.6.1.


Provide references for further information: Can you share references or external links related to CVE-2022-0653?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0653?


Explain the CVE ID: What does the identifier CVE-2022-0654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0654.

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0654?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a779faf5-c2cc-48be-a31d-4ddfac357afc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/fgribreau/node-request-retry/commit/0979c6001d9d57c2aac3157c11b007397158922a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0654?


Explain the CVE ID: What does the identifier CVE-2022-0655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0655.


Provide references for further information: Can you share references or external links related to CVE-2022-0655?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0655?


Explain the CVE ID: What does the identifier CVE-2022-0656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0656.

The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate the url parameter in its udraw_convert_url_to_base64 AJAX action (available to both unauthenticated and authenticated users) before using it in the file_get_contents function and returning its content base64 encoded in the response. As a result, unauthenticated users could read arbitrary files on the web server (such as /etc/passwd, wp-config.php etc)


Provide references for further information: Can you share references or external links related to CVE-2022-0656?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/925c4c28-ae94-4684-a365-5f1e34e6c151'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0656?


Explain the CVE ID: What does the identifier CVE-2022-0657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0657.

The 5 Stars Rating Funnel WordPress Plugin | RRatingg WordPress plugin before 1.2.54 does not properly sanitise, validate and escape lead ids before using them in a SQL statement via the rrtngg_delete_leads AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue. There is an attempt to sanitise the input, using sanitize_text_field(), however such function is not intended to prevent SQL injections.


Provide references for further information: Can you share references or external links related to CVE-2022-0657?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/e7fe8218-4ef5-4ef9-9850-8567c207e8e6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0657?


Explain the CVE ID: What does the identifier CVE-2022-0658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0658.

The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendar_data AJAX action (available to unauthenticated users) before it is used in dynamically constructed SQL queries, leading to an unauthenticated SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-0658?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d7f0805a-61ce-454a-96fb-5ecacd767578'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0658?


Explain the CVE ID: What does the identifier CVE-2022-0659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0659.

The Sync QCloud COS WordPress plugin before 2.0.1 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-0659?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/22dc2661-ba64-49e7-af65-892a617ab02c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0659?


Explain the CVE ID: What does the identifier CVE-2022-0660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0660.

Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0660?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/01fd2e0d-b8cf-487f-a16c-7b088ef3a291'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/2417bd2eda2aa2868c1dad1abf62341f22bfc20a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0660?


Explain the CVE ID: What does the identifier CVE-2022-0661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0661.

The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disallowed, leading to a stored cross-site scripting (XSS) vulnerability. Further it is also possible to inject PHP code, leading to a Remote Code execution (RCE) vulnerability, even if the DISALLOW_FILE_EDIT and DISALLOW_FILE_MOD constants are both set.


Provide references for further information: Can you share references or external links related to CVE-2022-0661?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3c5a7b03-d4c3-46b9-af65-fb50e58b0bfd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0661?


Explain the CVE ID: What does the identifier CVE-2022-0662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0662.

The AdRotate WordPress plugin before 5.8.23 does not sanitise and escape Advert Names which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-0662?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/27ad58ba-b648-41d9-8074-16e4feeaee69'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0662?


Explain the CVE ID: What does the identifier CVE-2022-0663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0663.

The Print, PDF, Email by PrintFriendly WordPress plugin before 5.2.3 does not sanitise and escape the Custom Button Text settings, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-0663?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b586b217-f91e-42d3-81f1-cc3ee3a4b01e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0663?


Explain the CVE ID: What does the identifier CVE-2022-0664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0664.

Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.


Provide references for further information: Can you share references or external links related to CVE-2022-0664?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/29898a42-fd4f-4b5b-a8e3-ab573cb87eac'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/gravitl/netmaker/commit/9bee12642986cb9534e268447b70e6f0f03c59cf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0664?


Explain the CVE ID: What does the identifier CVE-2022-0665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0665.

Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0665?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/423df64d-c591-4ad9-bf1c-411bcbc06ba3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/28945649a6234ccaa8c94c6cd83d1954603baf3e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0665?


Explain the CVE ID: What does the identifier CVE-2022-0666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0666.

CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0666?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/7215afc7-9133-4749-8e8e-0569317dbd55'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/f0e338f1b7dc5ec9d99231f4ed3fa6245a5eb128'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0666?


Explain the CVE ID: What does the identifier CVE-2022-0667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0667.

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0


Provide references for further information: Can you share references or external links related to CVE-2022-0667?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.isc.org/v1/docs/cve-2022-0667'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220408-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0667?


Explain the CVE ID: What does the identifier CVE-2022-0668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0668.

JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.


Provide references for further information: Can you share references or external links related to CVE-2022-0668?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0668?


Explain the CVE ID: What does the identifier CVE-2022-0669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0669.

A flaw was found in dpdk. This flaw allows a malicious vhost-user master to attach an unexpected number of fds as ancillary data to VHOST_USER_GET_INFLIGHT_FD / VHOST_USER_SET_INFLIGHT_FD messages that are not closed by the vhost-user slave. By sending such messages continuously, the vhost-user master exhausts available fd in the vhost-user slave process, leading to a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-0669?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2055793'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.dpdk.org/show_bug.cgi?id=922'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/DPDK/dpdk/commit/af74f7db384ed149fe42b21dbd7975f8a54ef227'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-0669'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2022-0669'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0669?


Explain the CVE ID: What does the identifier CVE-2022-0670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0670.

A flaw was found in Openstack manilla owning a Ceph File system "share", which enables the owner to read/write any manilla share or entire file system. The vulnerability is due to a bug in the "volumes" plugin in Ceph Manager. This allows an attacker to compromise Confidentiality and Integrity of a file system. Fixed in RHCS 5.2 and Ceph 17.2.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0670?

{'tags': ['x_refsource_MISC'], 'url': 'https://ceph.io/en/news/blog/2022/v17-2-2-quincy-released/'}, {'name': 'FEDORA-2022-67e0522b94', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5O3XMDFZWA2FWU6GAYOVSFJPOUTXN42N/'}, {'name': 'FEDORA-2022-6d129f14f2', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TIRTTRG5O4YP2TNGDCDOHIHP2DM3DFBT/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0670?


Explain the CVE ID: What does the identifier CVE-2022-0671 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0671.

A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.


Provide references for further information: Can you share references or external links related to CVE-2022-0671?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/redhat-developer/vscode-xml/blob/master/CHANGELOG.md#0190-february-14-2022'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/eclipse/lemminx/blob/master/CHANGELOG.md#0190-february-14-2022'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0671?


Explain the CVE ID: What does the identifier CVE-2022-0672 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0672.

A flaw was found in LemMinX in versions prior to 0.19.0. Insecure redirect could allow unauthorized access to sensitive information locally if LemMinX is run under a privileged user.


Provide references for further information: Can you share references or external links related to CVE-2022-0672?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0672?


Explain the CVE ID: What does the identifier CVE-2022-0673 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0673.

A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal.


Provide references for further information: Can you share references or external links related to CVE-2022-0673?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0673?


Explain the CVE ID: What does the identifier CVE-2022-0674 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0674.

The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error "From" Address' settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-0674?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/332e1e1e-7420-4605-99bc-4074e212ff9b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0674?


Explain the CVE ID: What does the identifier CVE-2022-0675 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0675.

In certain situations it is possible for an unmanaged rule to exist on the target system that has the same comment as the rule specified in the manifest. This could allow for unmanaged rules to exist on the target system and leave the system in an unsafe state.


Provide references for further information: Can you share references or external links related to CVE-2022-0675?

{'tags': ['x_refsource_MISC'], 'url': 'https://puppet.com/security/cve/CVE-2022-0675'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0675?


Explain the CVE ID: What does the identifier CVE-2022-0676 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0676.

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.


Provide references for further information: Can you share references or external links related to CVE-2022-0676?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/5ad814a1-5dd3-43f4-869b-33b8dab78485'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/c84b7232626badd075caf3ae29661b609164bac6'}, {'name': 'FEDORA-2022-7db9e7bb5b', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/'}, {'name': 'FEDORA-2022-85b277e748', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0676?


Explain the CVE ID: What does the identifier CVE-2022-0677 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0677.

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.


Provide references for further information: Can you share references or external links related to CVE-2022-0677?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0677?


Explain the CVE ID: What does the identifier CVE-2022-0678 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0678.

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0678?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/d707137a-aace-44c5-b15c-1807035716c0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/2b8fa5aac31e51e2aca83c7ef5d1281ba2e755f8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0678?


Explain the CVE ID: What does the identifier CVE-2022-0679 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0679.

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is passed into a call to require() via the narnoo_distributor_lib_request AJAX action (available to both unauthenticated and authenticated users) which results in the disclosure of arbitrary files as the content of the file is then displayed in the response as JSON data. This could also lead to RCE with various tricks but depends on the underlying system and it's configuration.


Provide references for further information: Can you share references or external links related to CVE-2022-0679?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0ea79eb1-6561-4c21-a20b-a1870863b0a8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0679?


Explain the CVE ID: What does the identifier CVE-2022-0680 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0680.

The Plezi WordPress plugin before 1.0.3 has a REST endpoint allowing unauthenticated users to update the plz_configuration_tracker_enable option, which is then displayed in the admin panel without sanitisation and escaping, leading to a Stored Cross-Site Scripting issue


Provide references for further information: Can you share references or external links related to CVE-2022-0680?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7cede02e-9af7-4f50-95a8-84ef4c7f7ded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0680?


Explain the CVE ID: What does the identifier CVE-2022-0681 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0681.

The Simple Membership WordPress plugin before 4.1.0 does not have CSRF check in place when deleting Transactions, which could allow attackers to make a logged in admin delete arbitrary transactions via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-0681?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/c5765816-4439-4c14-a847-044248ada0ef'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0681?


Explain the CVE ID: What does the identifier CVE-2022-0683 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0683.

The Essential Addons for Elementor Lite WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the settings parameter found in the ~/includes/Traits/Helper.php file which allows attackers to inject arbitrary web scripts onto a pages that executes whenever a user clicks on a specially crafted link by an attacker. This affects versions up to and including 5.0.8.


Provide references for further information: Can you share references or external links related to CVE-2022-0683?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0683?


Explain the CVE ID: What does the identifier CVE-2022-0684 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0684.

The WP Home Page Menu WordPress plugin before 3.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-0684?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/69b178f3-5951-4879-9bbe-183951d002ec'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2681478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0684?


Explain the CVE ID: What does the identifier CVE-2022-0685 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0685.

Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.


Provide references for further information: Can you share references or external links related to CVE-2022-0685?

{'url': 'https://huntr.dev/bounties/27230da3-9b1a-4d5d-8cdf-4b1e62fcd782'}, {'url': 'https://github.com/vim/vim/commit/5921aeb5741fc6e84c870d68c7c35b93ad0c9f87'}, {'name': 'FEDORA-2022-48bf3cb1c4', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ZLEHVP4LNAGER4ZDGUDS5V5YVQD6INF/'}, {'name': '[debian-lts-announce] 20220311 [SECURITY] [DLA 2947-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0685?


Explain the CVE ID: What does the identifier CVE-2022-0686 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0686.

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.


Provide references for further information: Can you share references or external links related to CVE-2022-0686?

{'url': 'https://huntr.dev/bounties/55fd06cd-9054-4d80-83be-eb5a454be78c'}, {'url': 'https://github.com/unshiftio/url-parse/commit/d5c64791ef496ca5459ae7f2176a31ea53b127e5'}, {'url': 'https://security.netapp.com/advisory/ntap-20220325-0006/'}, {'name': '[debian-lts-announce] 20230223 [SECURITY] [DLA 3336-1] node-url-parse security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0686?


Explain the CVE ID: What does the identifier CVE-2022-0687 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0687.

The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being uploaded onto the site. This vulnerability can be exploited by logged-in users with the custom "Amelia Manager" role.


Provide references for further information: Can you share references or external links related to CVE-2022-0687?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3cf05815-9b74-4491-a935-d69a0834146c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0687?


Explain the CVE ID: What does the identifier CVE-2022-0688 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0688.

Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0688?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/051ec6d4-0b0a-41bf-9ded-27813037c9c9'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/a41f0fddaf08ff12b2b82506b1ca9490c93ab605'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0688?


Explain the CVE ID: What does the identifier CVE-2022-0689 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0689.

Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0689?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/fa5dbbd3-97fe-41a9-8797-2e54d9a9c649'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/c3c25ae6c421bb4a65df9e0035edcc2f75594a04'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0689?


Explain the CVE ID: What does the identifier CVE-2022-0690 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0690.

Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0690?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4999a0f4-6efb-4681-b4ba-b36babc366f9'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/f7f5d41ba1a08ceed37c00d5f70a3f48b272e9f2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0690?


Explain the CVE ID: What does the identifier CVE-2022-0691 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0691.

Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.


Provide references for further information: Can you share references or external links related to CVE-2022-0691?

{'url': 'https://huntr.dev/bounties/57124ed5-4b68-4934-8325-2c546257f2e4'}, {'url': 'https://github.com/unshiftio/url-parse/commit/0e3fb542d60ddbf6933f22eb9b1e06e25eaa5b63'}, {'url': 'https://security.netapp.com/advisory/ntap-20220325-0006/'}, {'name': '[debian-lts-announce] 20230223 [SECURITY] [DLA 3336-1] node-url-parse security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0691?


Explain the CVE ID: What does the identifier CVE-2022-0692 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0692.

Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.


Provide references for further information: Can you share references or external links related to CVE-2022-0692?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/4fb39400-e08b-47af-8c1f-5093c9a51203'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/rudloff/alltube/commit/bc14b6e45c766c05757fb607ef8d444cbbfba71a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0692?


Explain the CVE ID: What does the identifier CVE-2022-0693 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0693.

The Master Elements WordPress plugin through 8.0 does not validate and escape the meta_ids parameter of its remove_post_meta_condition AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL Injection


Provide references for further information: Can you share references or external links related to CVE-2022-0693?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a72bf075-fd4b-4aa5-b4a4-5f62a0620643'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0693?


Explain the CVE ID: What does the identifier CVE-2022-0694 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0694.

The Advanced Booking Calendar WordPress plugin before 1.7.0 does not validate and escape the calendar parameter before using it in a SQL statement via the abc_booking_getSingleCalendar AJAX action (available to both unauthenticated and authenticated users), leading to an unauthenticated SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-0694?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/990d1b0a-dbd1-42d0-9a40-c345407c6fe0'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2682086'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0694?


Explain the CVE ID: What does the identifier CVE-2022-0695 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0695.

Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.


Provide references for further information: Can you share references or external links related to CVE-2022-0695?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/bdbddc0e-fb06-4211-a90b-7cbedcee2bea'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/634b886e84a5c568d243e744becc6b3223e089cf'}, {'name': 'FEDORA-2022-7db9e7bb5b', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/'}, {'name': 'FEDORA-2022-85b277e748', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/'}