Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0233.

The ProfileGrid – User Profiles, Memberships, Groups and Communities WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the pm_user_avatar and pm_cover_image parameters found in the ~/admin/class-profile-magic-admin.php file which allows attackers with authenticated user access, such as subscribers, to inject arbitrary web scripts into their profile, in versions up to and including 1.2.7.


Provide references for further information: Can you share references or external links related to CVE-2022-0233?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/BigTiger2020/2022/blob/main/ProfileGrid%20Xss.md'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/browser/profilegrid-user-profiles-groups-and-communities/tags/4.7.4/admin/class-profile-magic-admin.php#L961'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0233'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0233?


Explain the CVE ID: What does the identifier CVE-2022-0234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0234.

The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJAX action (available to both unauthenticated and authenticated users) before outputting it back in the response, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0234?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/fd568a1f-bd51-41bb-960d-f8573b84527b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2659191'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0234?


Explain the CVE ID: What does the identifier CVE-2022-0235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0235.

node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor


Provide references for further information: Can you share references or external links related to CVE-2022-0235?

{'url': 'https://huntr.dev/bounties/d26ab655-38d6-48b3-be15-f9ad6b6ae6f7'}, {'url': 'https://github.com/node-fetch/node-fetch/commit/36e47e8a6406185921e4985dcbeff140d73eaa10'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf'}, {'name': '[debian-lts-announce] 20221205 [SECURITY] [DLA 3222-1] node-fetch security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/12/msg00007.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0235?


Explain the CVE ID: What does the identifier CVE-2022-0236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0236.

The WP Import Export WordPress plugin (both free and premium versions) is vulnerable to unauthenticated sensitive data disclosure due to a missing capability check on the download function wpie_process_file_download found in the ~/includes/classes/class-wpie-general.php file. This made it possible for unauthenticated attackers to download any imported or exported information from a vulnerable site which can contain sensitive information like user data. This affects versions up to, and including, 3.9.15.


Provide references for further information: Can you share references or external links related to CVE-2022-0236?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.wordfence.com/vulnerability-advisories/#CVE-2022-0236'}, {'tags': ['x_refsource_MISC'], 'url': 'https://plugins.trac.wordpress.org/changeset/2649762/wp-import-export-lite/trunk/includes/classes/class-wpie-general.php'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/qurbat/CVE-2022-0236'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0236?


Explain the CVE ID: What does the identifier CVE-2022-0237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0237.

Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the ir_agent.exe component, resulting in elevated rights and persistent access to the machine. This issue was fixed in Rapid7 Insight Agent version 3.1.3.80.


Provide references for further information: Can you share references or external links related to CVE-2022-0237?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://docs.rapid7.com/release-notes/insightagent/20220225/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://gist.github.com/n2dez/05d43c616f2b403e84ee55d4d7aab251'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0237?


Explain the CVE ID: What does the identifier CVE-2022-0238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0238.

phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)


Provide references for further information: Can you share references or external links related to CVE-2022-0238?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/63f24b24-4af2-47b8-baea-7ad5f4db3633'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/phoronix-test-suite/phoronix-test-suite/commit/5755b3bf979cd04caa6feee07e403a5be5ac320e'}, {'name': 'FEDORA-2022-8f968eea82', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/'}, {'name': 'FEDORA-2022-43f11039b2', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BU7E6OOZCXS3ZWHOQ2AR7MKM56IN2R6R/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0238?


Explain the CVE ID: What does the identifier CVE-2022-0239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0239.

corenlp is vulnerable to Improper Restriction of XML External Entity Reference


Provide references for further information: Can you share references or external links related to CVE-2022-0239?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a717aec2-5646-4a5f-ade0-dadc25736ae3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/stanfordnlp/corenlp/commit/1940ffb938dc4f3f5bc5f2a2fd8b35aabbbae3dd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0239?


Explain the CVE ID: What does the identifier CVE-2022-0240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0240.

mruby is vulnerable to NULL Pointer Dereference


Provide references for further information: Can you share references or external links related to CVE-2022-0240?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/5857eced-aad9-417d-864e-0bdf17226cbb'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/31fa3304049fc406a201a72293cce140f0557dca'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0240?


Explain the CVE ID: What does the identifier CVE-2022-0242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0242.

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0242?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/19f3e5f7-b419-44b1-9c37-7e4404cbec94'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/crater-invoice/crater/commit/dcb3ddecb9f4cde622cc42c51a2760747797624f'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0242?


Explain the CVE ID: What does the identifier CVE-2022-0243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0243.

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0243?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/orchardcms/orchardcore/commit/218f25ddfadb66a54de7a82dffe3ab2e4ab7c4b4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/fa538421-ae55-4288-928f-4e96aaed5803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0243?


Explain the CVE ID: What does the identifier CVE-2022-0244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0244.

An issue has been discovered in GitLab CE/EE affecting all versions starting with 14.5. Arbitrary file read was possible by importing a group was due to incorrect handling of file.


Provide references for further information: Can you share references or external links related to CVE-2022-0244?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/349524'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1439593'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0244.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0244?


Explain the CVE ID: What does the identifier CVE-2022-0245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0245.

Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0245?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/6a6aca72-32b7-45b3-a8ba-9b400b2d669c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/c2fa19afeb8b1ea927fea3fd452515c95f289fb9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0245?


Explain the CVE ID: What does the identifier CVE-2022-0246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0246.

The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An authorized user can import preconfigured settings of the plugin by uploading a zip file. After the uploading process, files in the uploaded zip file are extracted one by one. During the extraction process, existence of a file is checked. If the file exists, it is deleted without any security control by only considering the name of the extracted file. This behavior leads to "Zip Slip" vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-0246?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/892802b1-26e2-4ce1-be6f-71ce29687776'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0246?


Explain the CVE ID: What does the identifier CVE-2022-0247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0247.

An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that they do not have permission to. We recommend upgrading past commit d97c05d2301799ed585620a9c5c739d36e7b5d3d or any of the listed versions.


Provide references for further information: Can you share references or external links related to CVE-2022-0247?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0247?


Explain the CVE ID: What does the identifier CVE-2022-0248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0248.

The Contact Form Submissions WordPress plugin before 1.7.3 does not sanitise and escape additional fields in contact form requests before outputting them in the related submission. As a result, unauthenticated attacker could perform Cross-Site Scripting attacks against admins viewing the malicious submission


Provide references for further information: Can you share references or external links related to CVE-2022-0248?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/d02cf542-2d75-46bc-a0df-67bbe501cc89'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2682024'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0248?


Explain the CVE ID: What does the identifier CVE-2022-0249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0249.

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked.


Provide references for further information: Can you share references or external links related to CVE-2022-0249?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/29395'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/579934'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0249.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0249?


Explain the CVE ID: What does the identifier CVE-2022-0250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0250.

The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0250?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/05700942-3143-4978-89eb-814ceff74867'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0250?


Explain the CVE ID: What does the identifier CVE-2022-0251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0251.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.


Provide references for further information: Can you share references or external links related to CVE-2022-0251?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/eb4b08f9-cf8b-4335-b3b8-ed44e5fa80a5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/3ae96b9d41c117aafa45873ad10077d4b873a3cb'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0251?


Explain the CVE ID: What does the identifier CVE-2022-0252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0252.

The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0252?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2659032'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/b0e551af-087b-43e7-bdb7-11d7f639028a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0252?


Explain the CVE ID: What does the identifier CVE-2022-0253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0253.

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')


Provide references for further information: Can you share references or external links related to CVE-2022-0253?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ac7f7eba-ee0b-4a50-bd89-29fd9b3e8303'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/407d0b1a1fa56fa6f824a19092774f10f4880437'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0253?


Explain the CVE ID: What does the identifier CVE-2022-0254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0254.

The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-0254?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ae54681f-7b89-408c-b0ee-ba4a520db997'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2660225'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2680906'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0254?


Explain the CVE ID: What does the identifier CVE-2022-0255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0255.

The Database Backup for WordPress plugin before 2.5.1 does not properly sanitise and escape the fragment parameter before using it in a SQL statement in the admin dashboard, leading to a SQL injection issue


Provide references for further information: Can you share references or external links related to CVE-2022-0255?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/684bb06d-864f-4cba-ab0d-f83974d026fa'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0255?


Explain the CVE ID: What does the identifier CVE-2022-0256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0256.

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')


Provide references for further information: Can you share references or external links related to CVE-2022-0256?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8d88e48a-7124-4aaf-9f1d-6cfe4f9a79c1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0256?


Explain the CVE ID: What does the identifier CVE-2022-0257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0257.


Provide references for further information: Can you share references or external links related to CVE-2022-0257?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/bad2073c-bbd5-4425-b3e9-c336b73ddda6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0257?


Explain the CVE ID: What does the identifier CVE-2022-0258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0258.

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command


Provide references for further information: Can you share references or external links related to CVE-2022-0258?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/0df891e4-6412-4d9a-a9b7-d9df50311802'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0258?


Explain the CVE ID: What does the identifier CVE-2022-0259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0259.


Provide references for further information: Can you share references or external links related to CVE-2022-0259?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0259?


Explain the CVE ID: What does the identifier CVE-2022-0260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0260.

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.


Provide references for further information: Can you share references or external links related to CVE-2022-0260?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/89e4ab60-21ec-4396-92ad-5b78d4c2897e'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0260?


Explain the CVE ID: What does the identifier CVE-2022-0261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0261.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0261?

{'url': 'https://huntr.dev/bounties/fa795954-8775-4f23-98c6-d4d4d3fe8a82'}, {'url': 'https://github.com/vim/vim/commit/9f8c304c8a390ade133bac29963dc8e56ab14cbc'}, {'name': '[debian-lts-announce] 20220516 [SECURITY] [DLA 3011-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213444'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/43'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0261?


Explain the CVE ID: What does the identifier CVE-2022-0262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0262.

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.


Provide references for further information: Can you share references or external links related to CVE-2022-0262?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/b38a4e14-5dcb-4e49-9990-494dc2a8fa0d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/6f36e841ce55f67e2e95253dd58f80659ef166c7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0262?


Explain the CVE ID: What does the identifier CVE-2022-0263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0263.

Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.


Provide references for further information: Can you share references or external links related to CVE-2022-0263?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/96506857-06bc-4c84-88b7-4f397715bcf6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/35d1853baf64d6a1d90fd8803e52439da53a3911'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0263?


Explain the CVE ID: What does the identifier CVE-2022-0264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0264.

A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6


Provide references for further information: Can you share references or external links related to CVE-2022-0264?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0264?


Explain the CVE ID: What does the identifier CVE-2022-0265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0265.

Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.


Provide references for further information: Can you share references or external links related to CVE-2022-0265?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/d63972a2-b910-480a-a86b-d1f75d24d563'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/hazelcast/hazelcast/commit/4d6b666cd0291abd618c3b95cdbb51aa4208e748'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0265?


Explain the CVE ID: What does the identifier CVE-2022-0266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0266.

Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.


Provide references for further information: Can you share references or external links related to CVE-2022-0266?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/1ac267be-3af8-4774-89f2-77234d144d6b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/cc1122aed0d1ad9f05757eaea2ab9e6a924776bd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0266?


Explain the CVE ID: What does the identifier CVE-2022-0267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0267.

The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotate_action before using it in a SQL statement via the adrotate_request_action function available to admins, leading to a SQL injection


Provide references for further information: Can you share references or external links related to CVE-2022-0267?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7df70f49-547f-4bdb-bf9b-2e06f93488c6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0267?


Explain the CVE ID: What does the identifier CVE-2022-0268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0268.

Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.


Provide references for further information: Can you share references or external links related to CVE-2022-0268?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/67085545-331e-4469-90f3-a1a46a078d39'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/getgrav/grav/commit/6f2fa9311afb9ecd34030dec2aff7b39e9e7e735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0268?


Explain the CVE ID: What does the identifier CVE-2022-0269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0269.

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0269?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a0470915-f6df-45b8-b3a2-01aebe764df0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/yetiforcecompany/yetiforcecrm/commit/298c7870e6fe4332d8aa1757a9c8d79f841389ff'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0269?


Explain the CVE ID: What does the identifier CVE-2022-0270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0270.

Prior to v0.6.1, bored-agent failed to sanitize incoming kubernetes impersonation headers allowing a user to override assigned user name and groups.


Provide references for further information: Can you share references or external links related to CVE-2022-0270?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/Mirantis/security/blob/main/advisories/0004.md'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0270?


Explain the CVE ID: What does the identifier CVE-2022-0271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0271.

The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0271?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ad07d9cd-8a75-4f7c-bbbe-3b6b89b699f2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0271?


Explain the CVE ID: What does the identifier CVE-2022-0272 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0272.

Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0272?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/23e37ba7-96d5-4037-a90a-8c8f4a70ce44'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/detekt/detekt/commit/c965a8d2a6bbdb9bcfc6acfa7bbffd3da81f5395'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0272?


Explain the CVE ID: What does the identifier CVE-2022-0273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0273.

Improper Access Control in Pypi calibreweb prior to 0.6.16.


Provide references for further information: Can you share references or external links related to CVE-2022-0273?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0273?


Explain the CVE ID: What does the identifier CVE-2022-0274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0274.

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0274?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a82a714a-9b71-475e-bfc3-43326fcaf764'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/orchardcms/orchardcore/commit/218f25ddfadb66a54de7a82dffe3ab2e4ab7c4b4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0274?


Explain the CVE ID: What does the identifier CVE-2022-0277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0277.

Incorrect Permission Assignment for Critical Resource in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0277?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0277?


Explain the CVE ID: What does the identifier CVE-2022-0278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0278.

Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0278?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/64495d0f-d5ec-4542-9693-32372c18d030'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/b64ef574b82dbf89a908e1569d790c7012d1ccd7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0278?


Explain the CVE ID: What does the identifier CVE-2022-0279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0279.

The AnyComment WordPress plugin before 0.2.18 is affected by a race condition when liking/disliking a comment/reply, which could allow any authenticated user to quickly raise their rating or lower the rating of other users


Provide references for further information: Can you share references or external links related to CVE-2022-0279?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/43a4b2d3-1bd5-490c-982c-bb7120595865'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0279?


Explain the CVE ID: What does the identifier CVE-2022-0280 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0280.

A race condition vulnerability exists in the QuickClean feature of McAfee Total Protection for Windows prior to 16.0.43 that allows a local user to gain privilege elevation and perform an arbitrary file delete. This could lead to sensitive files being deleted and potentially cause denial of service. This attack exploits the way symlinks are created and how the product works with them.


Provide references for further information: Can you share references or external links related to CVE-2022-0280?

{'tags': ['x_refsource_MISC'], 'url': 'https://service.mcafee.com/?articleId=TS103271&page=shell&shell=article-view'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0280?


Explain the CVE ID: What does the identifier CVE-2022-0281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0281.

Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0281?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/e680e134a4215c979bfd2eaf58336be34c8fc6e6'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/315f5ac6-1b5e-4444-ad8f-802371da3505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0281?


Explain the CVE ID: What does the identifier CVE-2022-0282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0282.

Cross-site Scripting in Packagist microweber/microweber prior to 1.2.11.


Provide references for further information: Can you share references or external links related to CVE-2022-0282?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8815b642-bd9b-4737-951b-bde7319faedd'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/microweber/microweber/commit/51b5a4e3ef01e587797c0109159a8ad9d2bac77a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0282?


Explain the CVE ID: What does the identifier CVE-2022-0283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0283.

An issue has been discovered affecting GitLab versions prior to 13.5. An open redirect vulnerability was fixed in GitLab integration with Jira that a could cause the web application to redirect the request to the attacker specified URL.


Provide references for further information: Can you share references or external links related to CVE-2022-0283?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/349422'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0283.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0283?


Explain the CVE ID: What does the identifier CVE-2022-0284 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0284.

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure.


Provide references for further information: Can you share references or external links related to CVE-2022-0284?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2045943'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-0284'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ImageMagick/ImageMagick/issues/4729'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/ImageMagick/ImageMagick/commit/e50f19fd73c792ebe912df8ab83aa51a243a3da7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0284?


Explain the CVE ID: What does the identifier CVE-2022-0285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0285.

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.


Provide references for further information: Can you share references or external links related to CVE-2022-0285?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/321918b2-aa01-410e-9f7c-dca5f286bc9c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/b432225952e2a5ab0268f401b85a14480369b835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0285?


Explain the CVE ID: What does the identifier CVE-2022-0286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0286.

A flaw was found in the Linux kernel. A null pointer dereference in bond_ipsec_add_sa() may lead to local denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-0286?

{'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=105cd17a866017b45f3c45901b394c711c97bf40'}, {'tags': ['x_refsource_MISC'], 'url': 'https://syzkaller.appspot.com/bug?id=160f641886d88bf11cbf1236cc4db994bb210626'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0286?


Explain the CVE ID: What does the identifier CVE-2022-0287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0287.

The myCred WordPress plugin before 2.4.4.1 does not have any authorisation in place in its mycred-tools-select-user AJAX action, allowing any authenticated user, such as subscriber to call and retrieve all email addresses from the blog


Provide references for further information: Can you share references or external links related to CVE-2022-0287?

{'url': 'https://wpscan.com/vulnerability/6cd7cd6d-1cc1-472c-809b-b66389f149b0', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0287?


Explain the CVE ID: What does the identifier CVE-2022-0288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0288.

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0288?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/27b64412-33a4-462c-bc45-f81697e4fe42'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0288?


Explain the CVE ID: What does the identifier CVE-2022-0289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0289.

Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0289?

{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1284367'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/166547/Chrome-safe_browsing-ThreatDetails-OnReceivedThreatDOMDetails-Use-After-Free.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0289?


Explain the CVE ID: What does the identifier CVE-2022-0290 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0290.

Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0290?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1260134'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/166080/Chrome-RenderFrameHostImpl-Use-After-Free.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0290?


Explain the CVE ID: What does the identifier CVE-2022-0291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0291.

Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0291?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1281084'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0291?


Explain the CVE ID: What does the identifier CVE-2022-0292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0292.

Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0292?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1270358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0292?


Explain the CVE ID: What does the identifier CVE-2022-0293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0293.

Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0293?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1283371'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0293?


Explain the CVE ID: What does the identifier CVE-2022-0294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0294.

Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0294?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1273017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0294?


Explain the CVE ID: What does the identifier CVE-2022-0295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0295.

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0295?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1278180'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0295?


Explain the CVE ID: What does the identifier CVE-2022-0296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0296.

Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0296?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1283375'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0296?


Explain the CVE ID: What does the identifier CVE-2022-0297 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0297.

Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0297?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1274316'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0297?


Explain the CVE ID: What does the identifier CVE-2022-0298 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0298.

Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0298?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1212957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0298?


Explain the CVE ID: What does the identifier CVE-2022-0300 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0300.

Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0300?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1275438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0300?


Explain the CVE ID: What does the identifier CVE-2022-0301 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0301.

Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0301?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1276331'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0301?


Explain the CVE ID: What does the identifier CVE-2022-0302 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0302.

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0302?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1278613'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0302?


Explain the CVE ID: What does the identifier CVE-2022-0304 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0304.

Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0304?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1282118'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0304?


Explain the CVE ID: What does the identifier CVE-2022-0305 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0305.

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0305?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1282354'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0305?


Explain the CVE ID: What does the identifier CVE-2022-0306 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0306.

Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0306?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1283198'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/166367/Chrome-chrome_pdf-PDFiumEngine-RequestThumbnail-Heap-Buffer-Overflow.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0306?


Explain the CVE ID: What does the identifier CVE-2022-0307 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0307.

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0307?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1281881'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0307?


Explain the CVE ID: What does the identifier CVE-2022-0308 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0308.

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0308?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1282480'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0308?


Explain the CVE ID: What does the identifier CVE-2022-0309 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0309.

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0309?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1240472'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0309?


Explain the CVE ID: What does the identifier CVE-2022-0310 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0310.

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.


Provide references for further information: Can you share references or external links related to CVE-2022-0310?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1283805'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0310?


Explain the CVE ID: What does the identifier CVE-2022-0311 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0311.

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-0311?

{'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/01/stable-channel-update-for-desktop_19.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1283807'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0311?


Explain the CVE ID: What does the identifier CVE-2022-0313 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0313.

The Float menu WordPress plugin before 4.3.1 does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-0313?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1ce6c8f4-6f4b-4d56-8d11-43355ef32e8c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2661431'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0313?


Explain the CVE ID: What does the identifier CVE-2022-0314 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0314.

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0314?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/17585f16-c62c-422d-ad9c-9138b6da97b7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0314?


Explain the CVE ID: What does the identifier CVE-2022-0315 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0315.

Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.


Provide references for further information: Can you share references or external links related to CVE-2022-0315?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/7e50397b-dd63-4bb5-b56d-704094a7da45'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/horovod/horovod/commit/b96ecae4dc69fc0a83c7c2d3f1dde600c20a1b41'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0315?


Explain the CVE ID: What does the identifier CVE-2022-0316 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0316.

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black WordPress theme, soundblast WordPress theme, bolster WordPress theme from ChimpStudio and PixFill does not have any authorisation and upload validation in the lang_upload.php file, allowing any unauthenticated attacker to upload arbitrary files to the web server.


Provide references for further information: Can you share references or external links related to CVE-2022-0316?

{'url': 'https://wpscan.com/vulnerability/9ab3d6cf-aad7-41bc-9aae-dc5313f12f7c', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0316?


Explain the CVE ID: What does the identifier CVE-2022-0317 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0317.

An improper input validation vulnerability in go-attestation before 0.3.3 allows local users to provide a maliciously-formed Quote over no/some PCRs, causing AKPublic.Verify to succeed despite the inconsistency. Subsequent use of the same set of PCR values in Eventlog.Verify lacks the authentication performed by quote verification, meaning a local attacker could couple this vulnerability with a maliciously-crafted TCG log in Eventlog.Verify to spoof events in the TCG log, hence defeating remotely-attested measured-boot. We recommend upgrading to Version 0.4.0 or above.


Provide references for further information: Can you share references or external links related to CVE-2022-0317?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0317?


Explain the CVE ID: What does the identifier CVE-2022-0318 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0318.

Heap-based Buffer Overflow in vim/vim prior to 8.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0318?

{'url': 'https://huntr.dev/bounties/0d10ba02-b138-4e68-a284-67f781a62d08'}, {'url': 'https://github.com/vim/vim/commit/57df9e8a9f9ae1aafdde9b86b10ad907627a87dc'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213444'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/43'}, {'name': '[debian-lts-announce] 20221124 [SECURITY] [DLA 3204-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00032.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0318?


Explain the CVE ID: What does the identifier CVE-2022-0319 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0319.

Out-of-bounds Read in vim/vim prior to 8.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0319?

{'url': 'https://huntr.dev/bounties/ba622fd2-e6ef-4ad9-95b4-17f87b68755b'}, {'url': 'https://github.com/vim/vim/commit/05b27615481e72e3b338bb12990fb3e0c2ecc2a9'}, {'name': '[debian-lts-announce] 20220311 [SECURITY] [DLA 2947-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/03/msg00018.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213444'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/43'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0319?


Explain the CVE ID: What does the identifier CVE-2022-0320 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0320.

The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data before it them in include statements, which could allow unauthenticated attackers to perform Local File Inclusion attack and read arbitrary files on the server, this could also lead to RCE via user uploaded files or other LFI to RCE techniques.


Provide references for further information: Can you share references or external links related to CVE-2022-0320?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/0d02b222-e672-4ac0-a1d4-d34e1ecf4a95'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0320?


Explain the CVE ID: What does the identifier CVE-2022-0321 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0321.

The WP Voting Contest WordPress plugin before 3.0 does not sanitise and escape the post_id parameter before outputting it back in the response via the wpvc_social_share_icons AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting issue


Provide references for further information: Can you share references or external links related to CVE-2022-0321?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/286b81a0-6f6d-4024-9bbc-6cb373990a7a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0321?


Explain the CVE ID: What does the identifier CVE-2022-0322 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0322.

A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).


Provide references for further information: Can you share references or external links related to CVE-2022-0322?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2042822'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a2d859e3fc97e79d907761550dbc03ff1b36479c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0322?


Explain the CVE ID: What does the identifier CVE-2022-0323 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0323.

Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.


Provide references for further information: Can you share references or external links related to CVE-2022-0323?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a5f5a988-aa52-4443-839d-299a63f44fb7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/bobthecow/mustache.php/commit/579ffa5c96e1d292c060b3dd62811ff01ad8c24e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0323?


Explain the CVE ID: What does the identifier CVE-2022-0324 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0324.

There is a vulnerability in DHCPv6 packet parsing code that could be explored by remote attacker to craft a packet that could cause buffer overflow in a memcpy call, leading to out-of-bounds memory write that would cause dhcp6relay to crash. Dhcp6relay is a critical process and could cause dhcp relay docker to shutdown.

Discovered by Eugene Lim of GovTech Singapore.


Provide references for further information: Can you share references or external links related to CVE-2022-0324?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0324?


Explain the CVE ID: What does the identifier CVE-2022-0326 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0326.

NULL Pointer Dereference in Homebrew mruby prior to 3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0326?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/795dcbd9-1695-44bb-8c59-ad327c97c976'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/b611c43a5de061ec21b343967e1b64c45c373d7e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0326?


Explain the CVE ID: What does the identifier CVE-2022-0327 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0327.

The Master Addons for Elementor WordPress plugin before 1.8.5 does not sanitise and escape the error_message parameter before outputting it back in the response of the jltma_restrict_content AJAX action, available to unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0327?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/df38cc99-da3c-4cc0-b179-1e52e841b883'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0327?


Explain the CVE ID: What does the identifier CVE-2022-0328 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0328.

The Simple Membership WordPress plugin before 4.0.9 does not have CSRF check when deleting members in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack


Provide references for further information: Can you share references or external links related to CVE-2022-0328?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/44532b7c-4d0d-4959-ada4-733f377d6ec9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://plugins.trac.wordpress.org/changeset/2662855'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0328?


Explain the CVE ID: What does the identifier CVE-2022-0329 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0329.


Provide references for further information: Can you share references or external links related to CVE-2022-0329?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0329?


Explain the CVE ID: What does the identifier CVE-2022-0330 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0330.

A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.


Provide references for further information: Can you share references or external links related to CVE-2022-0330?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2042404'}, {'url': 'https://www.openwall.com/lists/oss-security/2022/01/25/12'}, {'url': 'https://security.netapp.com/advisory/ntap-20220526-0001/'}, {'name': '[oss-security] 20221130 Security sensitive bug in the i915 kernel driver (CVE-2022-4139)', 'tags': ['mailing-list'], 'url': 'http://www.openwall.com/lists/oss-security/2022/11/30/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0330?


Explain the CVE ID: What does the identifier CVE-2022-0331 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0331.

An information disclosure vulnerability in Webadmin allows an unauthenticated remote attacker to read the device serial number in Sophos Firewall version v18.5 MR2 and older.


Provide references for further information: Can you share references or external links related to CVE-2022-0331?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0331?


Explain the CVE ID: What does the identifier CVE-2022-0332 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0332.

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.


Provide references for further information: Can you share references or external links related to CVE-2022-0332?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2043661'}, {'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=431099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0332?


Explain the CVE ID: What does the identifier CVE-2022-0333 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0333.

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.


Provide references for further information: Can you share references or external links related to CVE-2022-0333?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2043663'}, {'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=431100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0333?


Explain the CVE ID: What does the identifier CVE-2022-0334 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0334.

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.


Provide references for further information: Can you share references or external links related to CVE-2022-0334?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2043664'}, {'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=431102'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0334?


Explain the CVE ID: What does the identifier CVE-2022-0335 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0335.

A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.


Provide references for further information: Can you share references or external links related to CVE-2022-0335?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2043666'}, {'tags': ['x_refsource_MISC'], 'url': 'https://moodle.org/mod/forum/discuss.php?d=431103'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0335?


Explain the CVE ID: What does the identifier CVE-2022-0336 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0336.

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.


Provide references for further information: Can you share references or external links related to CVE-2022-0336?

{'url': 'https://www.samba.org/samba/security/CVE-2022-0336.html'}, {'url': 'https://bugzilla.samba.org/show_bug.cgi?id=14950'}, {'url': 'https://github.com/samba-team/samba/commit/1a5dc817c0c9379bbaab14c676681b42b0039a3c'}, {'url': 'https://github.com/samba-team/samba/commit/c58ede44f382bd0125f761f0479c8d48156be400'}, {'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2046134'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-0336'}, {'name': 'GLSA-202309-06', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202309-06'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0336?


Explain the CVE ID: What does the identifier CVE-2022-0337 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0337.

Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)


Provide references for further information: Can you share references or external links related to CVE-2022-0337?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0337?


Explain the CVE ID: What does the identifier CVE-2022-0338 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0338.

Insertion of Sensitive Information into Log File in Conda loguru prior to 0.5.3.


Provide references for further information: Can you share references or external links related to CVE-2022-0338?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/359bea50-2bc6-426a-b2f9-175d401b1ed0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/delgan/loguru/commit/ea39375e62f9b8f18e2ca798a5c0fb8c972b7eaa'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0338?


Explain the CVE ID: What does the identifier CVE-2022-0339 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0339.

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.


Provide references for further information: Can you share references or external links related to CVE-2022-0339?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/499688c4-6ac4-4047-a868-7922c3eab369'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/janeczku/calibre-web/commit/3b216bfa07ec7992eff03e55d61732af6df9bb92'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0339?


Explain the CVE ID: What does the identifier CVE-2022-0341 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0341.

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.


Provide references for further information: Can you share references or external links related to CVE-2022-0341?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/fa546b57-bc15-4705-824e-9474b616f628'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/vanessa219/vditor/commit/219f8a9e272aba3cbc0096a82cac776532dbb9e5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0341?


Explain the CVE ID: What does the identifier CVE-2022-0342 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0342.

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware versions V1.20 through V1.33 Patch 4, which could allow an attacker to bypass the web authentication and obtain administrative access of the device.


Provide references for further information: Can you share references or external links related to CVE-2022-0342?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0342?


Explain the CVE ID: What does the identifier CVE-2022-0343 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0343.

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2


Provide references for further information: Can you share references or external links related to CVE-2022-0343?

{'tags': ['x_refsource_MISC'], 'url': 'https://android-review.googlesource.com/c/platform/external/perfetto/+/1999296/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0343?


Explain the CVE ID: What does the identifier CVE-2022-0344 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0344.

An issue has been discovered in GitLab affecting all versions starting from 10.0 before 14.5.4, all versions starting from 10.1 before 14.6.4, all versions starting from 10.2 before 14.7.1. Private project paths can be disclosed to unauthorized users via system notes when an Issue is closed via a Merge Request and later moved to a public project


Provide references for further information: Can you share references or external links related to CVE-2022-0344?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/37015'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/724880'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-0344.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0344?


Explain the CVE ID: What does the identifier CVE-2022-0345 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0345.

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-mail prefixes (finding the first letter, then the second one, then the third one etc.).


Provide references for further information: Can you share references or external links related to CVE-2022-0345?

{'url': 'https://wpscan.com/vulnerability/b3b523b9-6c92-4091-837a-d34e3174eb19', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0345?


Explain the CVE ID: What does the identifier CVE-2022-0346 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0346.

The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allow_url_include is turned on.


Provide references for further information: Can you share references or external links related to CVE-2022-0346?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4b339390-d71a-44e0-8682-51a12bd2bfe6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0346?


Explain the CVE ID: What does the identifier CVE-2022-0347 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0347.

The LoginPress | Custom Login Page Customizer WordPress plugin before 1.5.12 does not escape the redirect-page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-0347?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/a5084367-842b-496a-a23c-24dbebac1e8b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0347?


Explain the CVE ID: What does the identifier CVE-2022-0348 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0348.

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0348?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/250e79be-7e5d-4ba3-9c34-655e39ade2f4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/832c34aeb9f21f213295a0c28377132df996352a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0348?


Explain the CVE ID: What does the identifier CVE-2022-0349 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0349.

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nx_id parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection


Provide references for further information: Can you share references or external links related to CVE-2022-0349?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1d0dd7be-29f3-4043-a9c6-67d02746463a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0349?


Explain the CVE ID: What does the identifier CVE-2022-0350 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0350.

Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.


Provide references for further information: Can you share references or external links related to CVE-2022-0350?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8202aa06-4b49-45ff-aa0f-00982f62005c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/vanessa219/vditor/commit/e912e36ea98251d700499b1ac7702708d3398476'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0350?


Explain the CVE ID: What does the identifier CVE-2022-0351 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0351.

Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.


Provide references for further information: Can you share references or external links related to CVE-2022-0351?

{'url': 'https://huntr.dev/bounties/8b36db58-b65c-4298-be7f-40b9e37fd161'}, {'url': 'https://github.com/vim/vim/commit/fe6fb267e6ee5c5da2f41889e4e0e0ac5bf4b89d'}, {'name': '[debian-lts-announce] 20220516 [SECURITY] [DLA 3011-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00022.html'}, {'name': 'GLSA-202208-32', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202208-32'}, {'url': 'https://support.apple.com/kb/HT213444'}, {'url': 'https://support.apple.com/kb/HT213488'}, {'name': '20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/41'}, {'name': '20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/28'}, {'name': '20221030 APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2022/Oct/43'}, {'name': '[debian-lts-announce] 20221108 [SECURITY] [DLA 3182-1] vim security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00009.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0351?


Explain the CVE ID: What does the identifier CVE-2022-0352 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0352.

Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.


Provide references for further information: Can you share references or external links related to CVE-2022-0352?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/a577ff17-2ded-4c41-84ae-6ac02440f717'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/janeczku/calibre-web/commit/6bf07539788004513c3692c074ebc7ba4ce005e1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0352?


Explain the CVE ID: What does the identifier CVE-2022-0353 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0353.

A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to

1.3.1.2

 and

Lenovo Diagnostics versions prior to 4.45

 that could allow a local user with administrative access to trigger a system crash.


Provide references for further information: Can you share references or external links related to CVE-2022-0353?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0353?


Explain the CVE ID: What does the identifier CVE-2022-0354 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0354.

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.


Provide references for further information: Can you share references or external links related to CVE-2022-0354?

{'tags': ['x_refsource_MISC'], 'url': 'https://support.lenovo.com/us/en/product_security/LEN-76673'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.infosec.tirol/cve-2022-0354/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0354?


Explain the CVE ID: What does the identifier CVE-2022-0355 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0355.

Improper Removal of Sensitive Information Before Storage or Transfer in NPM simple-get prior to 4.0.1.


Provide references for further information: Can you share references or external links related to CVE-2022-0355?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0355?


Explain the CVE ID: What does the identifier CVE-2022-0357 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0357.

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.

This issue affects:

Bitdefender Total Security
versions prior to 26.0.10.45.
Bitdefender Internet Security
versions prior to 26.0.10.45.
Bitdefender Antivirus Plus
versions prior to 26.0.10.45.


Provide references for further information: Can you share references or external links related to CVE-2022-0357?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0357?


Explain the CVE ID: What does the identifier CVE-2022-0358 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0358.

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of the group. This could allow a malicious unprivileged user inside the guest to gain access to resources accessible to the root group, potentially escalating their privileges within the guest. A malicious local user in the host might also leverage this unexpected executable file created by the guest to escalate their privileges on the host system.


Provide references for further information: Can you share references or external links related to CVE-2022-0358?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-0358?


Explain the CVE ID: What does the identifier CVE-2022-0359 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-0359.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.