Provide references for further information: Can you share references or external links related to CVE-2022-1177?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/0bb2979b-9643-4cdf-ab58-4354976b481b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/a2e918abcf15f9fc1f7cb4a1f2b09ff019021175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1177?


Explain the CVE ID: What does the identifier CVE-2022-1178 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1178.

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.


Provide references for further information: Can you share references or external links related to CVE-2022-1178?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/5813bd1f-b3aa-44f3-a5c0-aeeee2bf6fa4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/347ad614507183035d188ba14427bc162419778c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1178?


Explain the CVE ID: What does the identifier CVE-2022-1179 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1179.

Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.


Provide references for further information: Can you share references or external links related to CVE-2022-1179?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/347ad614507183035d188ba14427bc162419778c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8025e31f-7dcf-4db9-ab07-06c1e055ab42'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1179?


Explain the CVE ID: What does the identifier CVE-2022-1180 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1180.

Reflected Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4.


Provide references for further information: Can you share references or external links related to CVE-2022-1180?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/347ad614507183035d188ba14427bc162419778c'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/0e281ea2-70f7-4ed7-8814-74502eff9dd5'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1180?


Explain the CVE ID: What does the identifier CVE-2022-1181 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1181.

Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1181?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/2534e0fb-f503-4a4b-aed1-ec448c98bf60'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/openemr/openemr/commit/2835cc397610fc28037302dad948c38fda032022'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1181?


Explain the CVE ID: What does the identifier CVE-2022-1182 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1182.

The Visual Slide Box Builder WordPress plugin through 3.2.9 does not sanitise and escape various parameters before using them in SQL statements via some of its AJAX actions available to any authenticated users (such as subscriber), leading to SQL Injections


Provide references for further information: Can you share references or external links related to CVE-2022-1182?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/01d108bb-d134-4651-9c74-babcc88da177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1182?


Explain the CVE ID: What does the identifier CVE-2022-1183 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1183.

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS over HTTPS (DoH), but configurations using DoT alone are unaffected. Affects BIND 9.18.0 -> 9.18.2 and version 9.19.0 of the BIND 9.19 development branch.


Provide references for further information: Can you share references or external links related to CVE-2022-1183?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.isc.org/docs/cve-2022-1183'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220707-0002/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1183?


Explain the CVE ID: What does the identifier CVE-2022-1184 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1184.

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1184?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2070205'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1184'}, {'url': 'https://ubuntu.com/security/CVE-2022-1184'}, {'name': 'DSA-5257', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2022/dsa-5257'}, {'name': '[debian-lts-announce] 20221101 [SECURITY] [DLA 3173-1] linux-5.10 security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00001.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1184?


Explain the CVE ID: What does the identifier CVE-2022-1185 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1185.

A denial of service vulnerability when rendering RDoc files in GitLab CE/EE versions 10 to 14.7.7, 14.8.0 to 14.8.5, and 14.9.0 to 14.9.2 allows an attacker to crash the GitLab web application with a maliciously crafted RDoc file


Provide references for further information: Can you share references or external links related to CVE-2022-1185?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/349148'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1415071'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1185.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1185?


Explain the CVE ID: What does the identifier CVE-2022-1186 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1186.

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.


Provide references for further information: Can you share references or external links related to CVE-2022-1186?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1186?


Explain the CVE ID: What does the identifier CVE-2022-1187 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1187.

The WordPress WP YouTube Live Plugin is vulnerable to Reflected Cross-Site Scripting via POST data found in the ~/inc/admin.php file which allows unauthenticated attackers to inject arbitrary web scripts in versions up to, and including, 1.7.21.


Provide references for further information: Can you share references or external links related to CVE-2022-1187?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1187?


Explain the CVE ID: What does the identifier CVE-2022-1188 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1188.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the repository mirroring feature was possible.


Provide references for further information: Can you share references or external links related to CVE-2022-1188?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/354059'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1486659'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1188.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1188?


Explain the CVE ID: What does the identifier CVE-2022-1189 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1189.

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.2 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 that allowed for an unauthorised user to read the the approval rules of a private project.


Provide references for further information: Can you share references or external links related to CVE-2022-1189?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/353718'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1189.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1189?


Explain the CVE ID: What does the identifier CVE-2022-1190 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1190.

Improper handling of user input in GitLab CE/EE versions 8.3 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to exploit a stored XSS by abusing multi-word milestone references in issue descriptions, comments, etc.


Provide references for further information: Can you share references or external links related to CVE-2022-1190?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/352392'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1455036'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1190.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1190?


Explain the CVE ID: What does the identifier CVE-2022-1191 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1191.

SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.


Provide references for further information: Can you share references or external links related to CVE-2022-1191?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/7264a2e1-17e7-4244-93e4-49ec14f282b3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/c41f283a2c1b46c42dd2af16ecbeaedd2fe1f5df'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1191?


Explain the CVE ID: What does the identifier CVE-2022-1192 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1192.

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1192?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/18660c71-5a89-4ef6-b0dd-7a166e3449d6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1192?


Explain the CVE ID: What does the identifier CVE-2022-1193 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1193.

Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allows a malicious actor to obtain details of the latest commit in a private project via Merge Requests under certain circumstances


Provide references for further information: Can you share references or external links related to CVE-2022-1193?

{'tags': ['x_refsource_MISC'], 'url': 'https://gitlab.com/gitlab-org/gitlab/-/issues/351823'}, {'tags': ['x_refsource_MISC'], 'url': 'https://hackerone.com/reports/1465994'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-1193.json'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1193?


Explain the CVE ID: What does the identifier CVE-2022-1194 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1194.

The Mobile Events Manager WordPress plugin before 1.4.8 does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1194?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/62be0991-f095-43cf-a167-3daaed254594'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1194?


Explain the CVE ID: What does the identifier CVE-2022-1195 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1195.

A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of service (DOS) when the mkiss or sixpack device is detached and reclaim resources early.


Provide references for further information: Can you share references or external links related to CVE-2022-1195?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2056381'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0b9111922b1f399aba6ed1e1b8f2079c3da1aed8'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e0588c291d6ce225f2b891753ca41d45ba42469'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=81b1d548d00bcd028303c4f3150fa753b9b8aa71'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b2f37aead1b82a770c48b5d583f35ec22aabb61e'}, {'name': 'DSA-5127', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5127'}, {'name': 'DSA-5173', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2022/dsa-5173'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1195?


Explain the CVE ID: What does the identifier CVE-2022-1196 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1196.

After a VR Process is destroyed, a reference to it may have been retained and used, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Thunderbird < 91.8 and Firefox ESR < 91.8.


Provide references for further information: Can you share references or external links related to CVE-2022-1196?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1196?


Explain the CVE ID: What does the identifier CVE-2022-1197 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1197.

When importing a revoked key that specified key compromise as the revocation reason, Thunderbird did not update the existing copy of the key that was not yet revoked, and the existing key was kept as non-revoked. Revocation statements that used another revocation reason, or that didn't specify a revocation reason, were unaffected. This vulnerability affects Thunderbird < 91.8.


Provide references for further information: Can you share references or external links related to CVE-2022-1197?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1197?


Explain the CVE ID: What does the identifier CVE-2022-1198 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1198.

A use-after-free vulnerabilitity was discovered in drivers/net/hamradio/6pack.c of linux that allows an attacker to crash linux kernel by simulating ax25 device using 6pack driver from user space.


Provide references for further information: Can you share references or external links related to CVE-2022-1198?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2070689'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2022/04/02/3'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/efe4186e6a1b54bf38b9e05450d43b0da1fd7739'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1198'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1198?


Explain the CVE ID: What does the identifier CVE-2022-1199 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1199.

A flaw was found in the Linux kernel. This flaw allows an attacker to crash the Linux kernel by simulating amateur radio from the user space, resulting in a null-ptr-deref vulnerability and a use-after-free vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1199?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1199?


Explain the CVE ID: What does the identifier CVE-2022-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1201.

NULL Pointer Dereference in mrb_vm_exec with super in GitHub repository mruby/mruby prior to 3.2. This vulnerability is capable of making the mruby interpreter crash, thus affecting the availability of the system.


Provide references for further information: Can you share references or external links related to CVE-2022-1201?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/6f930add-c9d8-4870-ae56-d4bd8354703b'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/00acae117da1b45b318dc36531a7b0021b8097ae'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1201?


Explain the CVE ID: What does the identifier CVE-2022-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1202.

The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1202?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/53c8190c-baef-4807-970b-f01ab440576a'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1202?


Explain the CVE ID: What does the identifier CVE-2022-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1203.

The Content Mask WordPress plugin before 1.8.4.1 does not have authorisation and CSRF checks in various AJAX actions, as well as does not validate the option to be updated to ensure it belongs to the plugin. As a result, any authenticated user, such as subscriber could modify arbitrary blog options


Provide references for further information: Can you share references or external links related to CVE-2022-1203?

{'url': 'https://wpscan.com/vulnerability/3c9969e5-ca8e-4e5d-a482-c6b5c4257820', 'tags': ['exploit', 'vdb-entry', 'technical-description']}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1203?


Explain the CVE ID: What does the identifier CVE-2022-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1204.

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.


Provide references for further information: Can you share references or external links related to CVE-2022-1204?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2071051'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2022/04/02/2'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2022-1204'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1204'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1204?


Explain the CVE ID: What does the identifier CVE-2022-1205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1205.

A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system.


Provide references for further information: Can you share references or external links related to CVE-2022-1205?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2071047'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2022/04/02/4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/fc6d01ff9ef03b66d4a3a23b46fc3c3d8cf92009'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/82e31755e55fbcea6a9dfaae5fe4860ade17cbc0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1205'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1205?


Explain the CVE ID: What does the identifier CVE-2022-1206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1206.

The AdRotate Banner Manager – The only ad manager you'll need plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension sanitization in the adrotate_insert_media() function in all versions up to, and including, 5.13.2. This makes it possible for authenticated attackers, with administrator-level access and above, to upload arbitrary files with double extensions on the affected site's server which may make remote code execution possible. This is only exploitable on select instances where the configuration will execute the first extension present.


Provide references for further information: Can you share references or external links related to CVE-2022-1206?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1206?


Explain the CVE ID: What does the identifier CVE-2022-1207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1207.

Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary.


Provide references for further information: Can you share references or external links related to CVE-2022-1207?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/7b979e76-ae54-4132-b455-0833e45195eb'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/605785b65dd356d46d4487faa41dbf90943b8bc1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1207?


Explain the CVE ID: What does the identifier CVE-2022-1208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1208.

The Ultimate Member plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Biography field featured on individual user profile pages due to insufficient input sanitization and output escaping that allows users to encode malicious web scripts with HTML encoding that is reflected back on the page. This affects versions up to, and including, 2.3.2. Please note this issue was only partially fixed in version 2.3.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1208?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1208?


Explain the CVE ID: What does the identifier CVE-2022-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1209.

The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims in versions up to, and including, 2.3.1.


Provide references for further information: Can you share references or external links related to CVE-2022-1209?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1209?


Explain the CVE ID: What does the identifier CVE-2022-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1210.

A vulnerability classified as problematic was found in LibTIFF 4.3.0. Affected by this vulnerability is the TIFF File Handler of tiff2ps. Opening a malicious file leads to a denial of service. The attack can be launched remotely but requires user interaction. The exploit has been disclosed to the public and may be used.


Provide references for further information: Can you share references or external links related to CVE-2022-1210?

{'url': 'https://gitlab.com/libtiff/libtiff/-/issues/402'}, {'url': 'https://gitlab.com/libtiff/libtiff/uploads/c3da94e53cf1e1e8e6d4d3780dc8c42f/example.tiff'}, {'url': 'https://vuldb.com/?id.196363'}, {'url': 'https://security.netapp.com/advisory/ntap-20220513-0005/'}, {'name': 'GLSA-202210-10', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-10'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1210?


Explain the CVE ID: What does the identifier CVE-2022-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1211.

A vulnerability classified as critical has been found in tildearrow Furnace dev73. This affects the FUR to VGM converter in console mode which causes stack-based overflows and crashes. It is possible to initiate the attack remotely but it requires user-interaction. A POC has been disclosed to the public and may be used.


Provide references for further information: Can you share references or external links related to CVE-2022-1211?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tildearrow/furnace/issues/325'}, {'tags': ['x_refsource_MISC'], 'url': 'https://drive.google.com/file/d/1h111beVcWG8F99jRffO7_HKYEhm7Qgvb/view?usp=sharing'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196371'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1211?


Explain the CVE ID: What does the identifier CVE-2022-1212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1212.

Use-After-Free in str_escape in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.


Provide references for further information: Can you share references or external links related to CVE-2022-1212?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/9fcc06d0-08e4-49c8-afda-2cae40946abe'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/3cf291f72224715942beaf8553e42ba8891ab3c6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1212?


Explain the CVE ID: What does the identifier CVE-2022-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1213.

SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191


Provide references for further information: Can you share references or external links related to CVE-2022-1213?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/084387f6-5b9c-4017-baa2-5fcf65b051e1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/abc9599ee7aded466ca216741dcaea533c908111'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1213?


Explain the CVE ID: What does the identifier CVE-2022-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1214.


Provide references for further information: Can you share references or external links related to CVE-2022-1214?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1214?


Explain the CVE ID: What does the identifier CVE-2022-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1215.

A format string vulnerability was found in libinput


Provide references for further information: Can you share references or external links related to CVE-2022-1215?

{'url': 'https://seclists.org/oss-sec/2022/q2/47'}, {'name': 'GLSA-202310-14', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202310-14'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1215?


Explain the CVE ID: What does the identifier CVE-2022-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1216.

The Advanced Image Sitemap WordPress plugin through 1.2 does not sanitise and escape the PHP_SELF PHP variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-1216?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/31a5b138-3d9e-4cd6-b85c-d20406ab51bd'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1216?


Explain the CVE ID: What does the identifier CVE-2022-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1217.

The Custom TinyMCE Shortcode Button WordPress plugin through 1.1 does not sanitise and escape the PHP_SELF variable before outputting it back in an attribute in an admin page, leading to Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-1217?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/15875f52-7a49-44c7-8a36-b49ddf37c20c'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1217?


Explain the CVE ID: What does the identifier CVE-2022-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1218.

The Domain Replace WordPress plugin through 1.3.8 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1218?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/fc1e8681-9229-4645-bc22-4897522d0c65'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1218?


Explain the CVE ID: What does the identifier CVE-2022-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1219.

SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data


Provide references for further information: Can you share references or external links related to CVE-2022-1219?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/f700bd18-1fd3-4a05-867f-07176aebc7f6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/pimcore/pimcore/commit/a697830359df06246acca502ee2455614de68017'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1219?


Explain the CVE ID: What does the identifier CVE-2022-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1220.

The FoxyShop WordPress plugin before 4.8.2 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1220?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/eb58f43e-4304-40e7-9e0f-d0d6fe049724'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1220?


Explain the CVE ID: What does the identifier CVE-2022-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1221.

The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 does not sanitise and escape some parameters before outputting them back in attributes, leading to a Reflected Cross-Site Scripting.


Provide references for further information: Can you share references or external links related to CVE-2022-1221?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/641be9f6-2f74-4386-b16e-4b9488f0d2a9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1221?


Explain the CVE ID: What does the identifier CVE-2022-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1222.

Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.


Provide references for further information: Can you share references or external links related to CVE-2022-1222?

{'url': 'https://huntr.dev/bounties/f8cb85b8-7ff3-47f1-a9a6-7080eb371a3d'}, {'url': 'https://github.com/gpac/gpac/commit/7f060bbb72966cae80d6fee338d0b07fa3fc06e1'}, {'name': 'DSA-5411', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5411'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1222?


Explain the CVE ID: What does the identifier CVE-2022-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1223.

Incorrect Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.


Provide references for further information: Can you share references or external links related to CVE-2022-1223?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/baec4c23-2466-4b13-b3c0-eaf1d000d4ab'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1223?


Explain the CVE ID: What does the identifier CVE-2022-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1224.

Improper Authorization in GitHub repository phpipam/phpipam prior to 1.4.6.


Provide references for further information: Can you share references or external links related to CVE-2022-1224?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/cd9e1508-5682-427e-a921-14b4f520b85a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1224?


Explain the CVE ID: What does the identifier CVE-2022-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1225.

Incorrect Privilege Assignment in GitHub repository phpipam/phpipam prior to 1.4.6.


Provide references for further information: Can you share references or external links related to CVE-2022-1225?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/phpipam/phpipam/commit/f6a49fd9f93b7d7e0a4fbf1d35338502eed35953'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/49b44cfa-d142-4d79-b529-7805507169d2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1225?


Explain the CVE ID: What does the identifier CVE-2022-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1226.

A Cross-Site Scripting (XSS) vulnerability in phpipam/phpipam versions prior to 1.4.7 allows attackers to execute arbitrary JavaScript code in the browser of a victim. This vulnerability affects the import Data set feature via a spreadsheet file upload. The affected endpoints include import-vlan-preview.php, import-subnets-preview.php, import-vrf-preview.php, import-ipaddr-preview.php, import-devtype-preview.php, import-devices-preview.php, and import-l2dom-preview.php. The vulnerability can be exploited by uploading a specially crafted spreadsheet file containing malicious JavaScript payloads, which are then executed in the context of the victim's browser. This can lead to defacement of websites, execution of malicious JavaScript code, stealing of user cookies, and unauthorized access to user accounts.


Provide references for further information: Can you share references or external links related to CVE-2022-1226?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1226?


Explain the CVE ID: What does the identifier CVE-2022-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1227.

A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1227?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2070368'}, {'url': 'https://github.com/containers/podman/issues/10941'}, {'name': 'FEDORA-2022-5e637f6cc6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DLUJZV3HBP56ADXU6QH2V7RNYUPMVBXQ/'}, {'url': 'https://security.netapp.com/advisory/ntap-20240628-0001/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1227?


Explain the CVE ID: What does the identifier CVE-2022-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1228.

The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-1228?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ef6830c0-e933-4e62-8321-011d91f9cfea'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1228?


Explain the CVE ID: What does the identifier CVE-2022-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1229.

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.2.034. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IFC files. Crafted data in an IFC file can trigger a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-16581.


Provide references for further information: Can you share references or external links related to CVE-2022-1229?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1229?


Explain the CVE ID: What does the identifier CVE-2022-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1230.

This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prior to 4.5.40.5 phones. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of redirections. An attacker can force a redirection to a site that serves malicious content. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the current user. Was ZDI-CAN-15918.


Provide references for further information: Can you share references or external links related to CVE-2022-1230?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1230?


Explain the CVE ID: What does the identifier CVE-2022-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1231.

XSS via Embedded SVG in SVG Diagram Format in GitHub repository plantuml/plantuml prior to 1.2022.4. Stored XSS in the context of the diagram embedder. Depending on the actual context, this ranges from stealing secrets to account hijacking or even to code execution for example in desktop applications. Web based applications are the ones most affected. Since the SVG format allows clickable links in diagrams, it is commonly used in plugins for web based projects (like the Confluence plugin, etc. see https://plantuml.com/de/running).


Provide references for further information: Can you share references or external links related to CVE-2022-1231?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/27db9509-6cd3-4148-8d70-5942f3837604'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/plantuml/plantuml/commit/c9137be051ce98b3e3e27f65f54ec7d9f8886903'}, {'name': 'FEDORA-2022-e8b1324ec8', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FQMHXN5BVBK433C5SVSSBXWB5JLJ7NID/'}, {'name': 'FEDORA-2022-930b54aa84', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EO26WBHQRMWTS44M5VLZJIJZOIGJYL3A/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1231?


Explain the CVE ID: What does the identifier CVE-2022-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1232.

Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.


Provide references for further information: Can you share references or external links related to CVE-2022-1232?

{'tags': ['x_refsource_MISC'], 'url': 'https://crbug.com/1311641'}, {'tags': ['x_refsource_MISC'], 'url': 'https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop.html'}, {'name': 'GLSA-202208-25', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202208-25'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1232?


Explain the CVE ID: What does the identifier CVE-2022-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1233.

URL Confusion When Scheme Not Supplied in GitHub repository medialize/uri.js prior to 1.19.11.


Provide references for further information: Can you share references or external links related to CVE-2022-1233?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/228d5548-1109-49f8-8aee-91038e88371c'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/medialize/uri.js/commit/88805fd3da03bd7a5e60947adb49d182011f1277'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1233?


Explain the CVE ID: What does the identifier CVE-2022-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1234.

XSS in livehelperchat in GitHub repository livehelperchat/livehelperchat prior to 3.97. This vulnerability has the potential to deface websites, result in compromised user accounts, and can run malicious code on web pages, which can lead to a compromise of the user’s device.


Provide references for further information: Can you share references or external links related to CVE-2022-1234?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/0d235252-0882-4053-85c1-b41b94c814d4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/a09aa0d793818dc4cae78ac4bcfb557d4fd2a30d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1234?


Explain the CVE ID: What does the identifier CVE-2022-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1235.

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96.


Provide references for further information: Can you share references or external links related to CVE-2022-1235?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/92f7b2d4-fa88-4c62-a2ee-721eebe01705'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/livehelperchat/livehelperchat/commit/6538d6df3d8a60fee254170b08dd76a161f7bfdc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1235?


Explain the CVE ID: What does the identifier CVE-2022-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1236.

Weak Password Requirements in GitHub repository weseek/growi prior to v5.0.0.


Provide references for further information: Can you share references or external links related to CVE-2022-1236?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c7df088f-e355-45e6-9267-e41030dc6a32'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/weseek/growi/commit/b584e2a47ee3c8ce1d8ef38238302825c015327e'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1236?


Explain the CVE ID: What does the identifier CVE-2022-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1237.

Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).


Provide references for further information: Can you share references or external links related to CVE-2022-1237?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1237?


Explain the CVE ID: What does the identifier CVE-2022-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1238.

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).


Provide references for further information: Can you share references or external links related to CVE-2022-1238?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1238?


Explain the CVE ID: What does the identifier CVE-2022-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1239.

The HubSpot WordPress plugin before 8.8.15 does not validate the proxy URL given to the proxy REST endpoint, which could allow users with the edit_posts capability (by default contributor and above) to perform SSRF attacks


Provide references for further information: Can you share references or external links related to CVE-2022-1239?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/4ad2bb96-87a4-4590-a058-b03b33d2fcee'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1239?


Explain the CVE ID: What does the identifier CVE-2022-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1240.

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).


Provide references for further information: Can you share references or external links related to CVE-2022-1240?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/e589bd97-4c74-4e79-93b5-0951a281facc'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/ca8d8b39f3e34a4fd943270330b80f1148129de4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1240?


Explain the CVE ID: What does the identifier CVE-2022-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1241.

The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues


Provide references for further information: Can you share references or external links related to CVE-2022-1241?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/3258393a-eafb-4356-994e-2ff8ce223c9b'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1241?


Explain the CVE ID: What does the identifier CVE-2022-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1242.

Apport can be tricked into connecting to arbitrary sockets as the root user


Provide references for further information: Can you share references or external links related to CVE-2022-1242?

{'tags': ['vendor-advisory'], 'url': 'https://ubuntu.com/security/notices/USN-5427-1'}, {'tags': ['issue-tracking'], 'url': 'https://www.cve.org/CVERecord?id=CVE-2022-1242'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1242?


Explain the CVE ID: What does the identifier CVE-2022-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1243.

CRHTLF can lead to invalid protocol extraction potentially leading to XSS in GitHub repository medialize/uri.js prior to 1.19.11.


Provide references for further information: Can you share references or external links related to CVE-2022-1243?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8c5afc47-1553-4eba-a98e-024e4cc3dfb7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/medialize/uri.js/commit/b0c9796aa1a95a85f40924fb18b1e5da3dc8ffae'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1243?


Explain the CVE ID: What does the identifier CVE-2022-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1244.

heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1244?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/8ae2c61a-2220-47a5-bfe8-fe6d41ab1f82'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/2b77b277d67ce061ee6ef839e7139ebc2103c1e3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1244?


Explain the CVE ID: What does the identifier CVE-2022-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1245.

A privilege escalation flaw was found in the token exchange feature of keycloak. Missing authorization allows a client application holding a valid access token to exchange tokens for any target client by passing the client_id of the target. This could allow a client to gain unauthorized access to additional services.


Provide references for further information: Can you share references or external links related to CVE-2022-1245?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/keycloak/keycloak/security/advisories/GHSA-75p6-52g3-rqc8'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1245?


Explain the CVE ID: What does the identifier CVE-2022-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1246.


Provide references for further information: Can you share references or external links related to CVE-2022-1246?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1246?


Explain the CVE ID: What does the identifier CVE-2022-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1247.

An issue found in linux-kernel that leads to a race condition in rose_connect(). The rose driver uses rose_neigh->use to represent how many objects are using the rose_neigh. When a user wants to delete a rose_route via rose_ioctl(), the rose driver calls rose_del_node() and removes neighbours only if their “count” and “use” are zero.


Provide references for further information: Can you share references or external links related to CVE-2022-1247?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2066799'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1247'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1247?


Explain the CVE ID: What does the identifier CVE-2022-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1248.

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.


Provide references for further information: Can you share references or external links related to CVE-2022-1248?

{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196550'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1248?


Explain the CVE ID: What does the identifier CVE-2022-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1249.

A NULL pointer dereference flaw was found in pesign's cms_set_pw_data() function of the cms_common.c file. The function fails to handle the NULL pwdata invocation from daemon.c, which leads to an explicit NULL dereference and crash on all attempts to daemonize pesign.


Provide references for further information: Can you share references or external links related to CVE-2022-1249?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2065771'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1249?


Explain the CVE ID: What does the identifier CVE-2022-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1250.

The LifterLMS PayPal WordPress plugin before 1.4.0 does not sanitise and escape some parameters from the payment confirmation page before outputting them back in the page, leading to a Reflected Cross-Site Scripting issue


Provide references for further information: Can you share references or external links related to CVE-2022-1250?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/1f8cb0b9-7447-44db-8d13-292db5b17718'}, {'tags': ['x_refsource_MISC'], 'url': 'https://make.lifterlms.com/2022/04/04/lifterlms-paypal-version-1-4-0/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1250?


Explain the CVE ID: What does the identifier CVE-2022-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1251.

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted request.


Provide references for further information: Can you share references or external links related to CVE-2022-1251?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/34b3fc35-381a-4bd7-87e3-f1ef0a15a349'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1251?


Explain the CVE ID: What does the identifier CVE-2022-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1252.

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and including 5.5.5. A vulnerability in gnuboard v5.5.5 and below uses weak encryption algorithms leading to sensitive information exposure. This allows an attacker to derive the email address of any user, including when the 'Let others see my information.' box is ticked off. Or to send emails to any email address, with full control of its contents


Provide references for further information: Can you share references or external links related to CVE-2022-1252?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/c8c2c3e1-67d0-4a11-a4d4-11af567a9ebb'}, {'tags': ['x_refsource_MISC'], 'url': 'https://0g.vc/posts/insecure-cipher-gnuboard5/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1252?


Explain the CVE ID: What does the identifier CVE-2022-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1253.

Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official release.


Provide references for further information: Can you share references or external links related to CVE-2022-1253?

{'url': 'https://huntr.dev/bounties/1-other-strukturag/libde265'}, {'url': 'https://github.com/strukturag/libde265/commit/8e89fe0e175d2870c39486fdd09250b230ec10b8'}, {'name': 'DSA-5346', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2023/dsa-5346'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1253?


Explain the CVE ID: What does the identifier CVE-2022-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1254.

A URL redirection vulnerability in Skyhigh SWG in main releases 10.x prior to 10.2.9, 9.x prior to 9.2.20, 8.x prior to 8.2.27, and 7.x prior to 7.8.2.31, and controlled release 11.x prior to 11.1.3 allows a remote attacker to redirect a user to a malicious website controlled by the attacker. This is possible because SWG incorrectly creates a HTTP redirect response when a user clicks a carefully constructed URL. Following the redirect response, the new request is still filtered by the SWG policy.


Provide references for further information: Can you share references or external links related to CVE-2022-1254?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10381'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1254?


Explain the CVE ID: What does the identifier CVE-2022-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1255.

The Import and export users and customers WordPress plugin before 1.19.2.1 does not sanitise and escaped imported CSV data, which could allow high privilege users to import malicious javascript code and lead to Stored Cross-Site Scripting issues


Provide references for further information: Can you share references or external links related to CVE-2022-1255?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/22fe68c4-8f47-491e-be87-5e8e40535a82'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1255?


Explain the CVE ID: What does the identifier CVE-2022-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1256.

A local privilege escalation vulnerability in MA for Windows prior to 5.7.6 allows a local low privileged user to gain system privileges through running the repair functionality. Temporary file actions were performed on the local user's %TEMP% directory with System privileges through manipulation of symbolic links.


Provide references for further information: Can you share references or external links related to CVE-2022-1256?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10382'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1256?


Explain the CVE ID: What does the identifier CVE-2022-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1257.

Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Windows prior to 5.7.6 allows a local user to gain access to sensitive information through storage in ma.db. The sensitive information has been moved to encrypted database files.


Provide references for further information: Can you share references or external links related to CVE-2022-1257?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1257?


Explain the CVE ID: What does the identifier CVE-2022-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1258.

A blind SQL injection vulnerability in the ePolicy Orchestrator (ePO) extension of MA prior to 5.7.6 can be exploited by an authenticated administrator on ePO to perform arbitrary SQL queries in the back-end database, potentially leading to command execution on the server.


Provide references for further information: Can you share references or external links related to CVE-2022-1258?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1258?


Explain the CVE ID: What does the identifier CVE-2022-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1259.

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.


Provide references for further information: Can you share references or external links related to CVE-2022-1259?

{'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2072339'}, {'url': 'https://access.redhat.com/security/cve/CVE-2022-1259'}, {'url': 'https://security.netapp.com/advisory/ntap-20221014-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1259?


Explain the CVE ID: What does the identifier CVE-2022-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1260.


Provide references for further information: Can you share references or external links related to CVE-2022-1260?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1260?


Explain the CVE ID: What does the identifier CVE-2022-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1261.

Matrikon, a subsidary of Honeywell Matrikon OPC Server (all versions) is vulnerable to a condition where a low privileged user allowed to connect to the OPC server to use the functions of the IPersisFile to execute operating system processes with system-level privileges.


Provide references for further information: Can you share references or external links related to CVE-2022-1261?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-144-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1261?


Explain the CVE ID: What does the identifier CVE-2022-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1262.

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary commands as root.


Provide references for further information: Can you share references or external links related to CVE-2022-1262?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.tenable.com/security/research/tra-2022-09'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1262?


Explain the CVE ID: What does the identifier CVE-2022-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1263.

A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1263?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2072698'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2022/04/07/1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/5593473a1e6c743764b08e3b6071cb43b5cfa6c4'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1263'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1263?


Explain the CVE ID: What does the identifier CVE-2022-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1264.

The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2022-1264?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.cisa.gov/uscert/ics/advisories/icsa-22-102-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1264?


Explain the CVE ID: What does the identifier CVE-2022-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1265.

The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-1265?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/9b66819d-8479-4c0b-b206-7f7ff769f758'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1265?


Explain the CVE ID: What does the identifier CVE-2022-1266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1266.

The Post Grid, Slider & Carousel Ultimate WordPress plugin before 1.5.0 does not sanitise and escape the Header Title, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.


Provide references for further information: Can you share references or external links related to CVE-2022-1266?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/7800d583-fcfc-4360-9dc3-af3f73e12ab4'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1266?


Explain the CVE ID: What does the identifier CVE-2022-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1267.

The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1267?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ed2971c2-b99c-4320-ac46-bea5a0a493ed'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1267?


Explain the CVE ID: What does the identifier CVE-2022-1268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1268.

The Donate Extra WordPress plugin through 2.02 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1268?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/6d596afb-cac3-4ef2-9742-235c068d1006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1268?


Explain the CVE ID: What does the identifier CVE-2022-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1269.

The Fast Flow WordPress plugin before 1.2.12 does not sanitise and escape the page parameter before outputting back in an attribute in an admin dashboard, leading to a Reflected Cross-Site Scripting


Provide references for further information: Can you share references or external links related to CVE-2022-1269?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/65ff0e71-0fcd-4357-9b00-143cb18901bf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1269?


Explain the CVE ID: What does the identifier CVE-2022-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1270.

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF.


Provide references for further information: Can you share references or external links related to CVE-2022-1270?

{'url': 'https://sourceforge.net/p/graphicsmagick/bugs/664/'}, {'name': 'GLSA-202209-19', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202209-19'}, {'name': '[debian-lts-announce] 20221121 [SECURITY] [DLA 3200-1] graphicsmagick security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/11/msg00028.html'}, {'name': 'DSA-5288', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2022/dsa-5288'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1270?


Explain the CVE ID: What does the identifier CVE-2022-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1271.

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw occurs due to insufficient validation when processing filenames with two or more newlines where selected content and the target file names are embedded in crafted multi-line file names. This flaw allows a remote, low privileged attacker to force zgrep to write arbitrary files on the system.


Provide references for further information: Can you share references or external links related to CVE-2022-1271?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2073310'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2022/04/07/8'}, {'tags': ['x_refsource_MISC'], 'url': 'https://lists.gnu.org/r/bug-gzip/2022-04/msg00011.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://tukaani.org/xz/xzgrep-ZDI-CAN-16587.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'https://git.tukaani.org/?p=xz.git%3Ba=commit%3Bh=69d1b3fc29677af8ade8dc15dba83f0589cb63d6'}, {'tags': ['x_refsource_MISC'], 'url': 'https://security-tracker.debian.org/tracker/CVE-2022-1271'}, {'tags': ['x_refsource_MISC'], 'url': 'https://access.redhat.com/security/cve/CVE-2022-1271'}, {'name': 'GLSA-202209-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/202209-01'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20220930-0006/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1271?


Explain the CVE ID: What does the identifier CVE-2022-1273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1273.

The Import WP WordPress plugin before 2.4.6 does not validate the imported file in some cases, allowing high privilege users such as admin to upload arbitrary files (such as PHP), leading to RCE


Provide references for further information: Can you share references or external links related to CVE-2022-1273?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/ad99b9ba-5f24-4682-a787-00f0e8e32603'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1273?


Explain the CVE ID: What does the identifier CVE-2022-1274 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1274.

A flaw was found in Keycloak in the execute-actions-email endpoint. This issue allows arbitrary HTML to be injected into emails sent to Keycloak users and can be misused to perform phishing or other attacks against users.


Provide references for further information: Can you share references or external links related to CVE-2022-1274?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1274?


Explain the CVE ID: What does the identifier CVE-2022-1275 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1275.

The BannerMan WordPress plugin through 0.2.4 does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in multisite)


Provide references for further information: Can you share references or external links related to CVE-2022-1275?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/bc2e5be3-cd2b-4ee9-8d7a-cabce46b7092'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1275?


Explain the CVE ID: What does the identifier CVE-2022-1276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1276.

Out-of-bounds Read in mrb_get_args in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.


Provide references for further information: Can you share references or external links related to CVE-2022-1276?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/6ea041d1-e2aa-472c-bf3e-da5fa8726c25'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/c8c083cb750606b2da81582cd8e43b442bb143e6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1276?


Explain the CVE ID: What does the identifier CVE-2022-1277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1277.

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2022-1277?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.usom.gov.tr/bildirim/tr-22-0514'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1277?


Explain the CVE ID: What does the identifier CVE-2022-1278 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1278.

A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.


Provide references for further information: Can you share references or external links related to CVE-2022-1278?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2073401'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1278?


Explain the CVE ID: What does the identifier CVE-2022-1279 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1279.

A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1279?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/ebics-java/ebics-java-client/releases/tag/1.2'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1279?


Explain the CVE ID: What does the identifier CVE-2022-1280 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1280.

A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak.


Provide references for further information: Can you share references or external links related to CVE-2022-1280?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=2071022'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.openwall.com/lists/oss-security/2022/04/12/3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1280?


Explain the CVE ID: What does the identifier CVE-2022-1281 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1281.

The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_POST['filter_tag'] parameter, which is appended to an SQL query, making SQL Injection attacks possible.


Provide references for further information: Can you share references or external links related to CVE-2022-1281?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1281?


Explain the CVE ID: What does the identifier CVE-2022-1282 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1282.

The Photo Gallery by 10Web WordPress plugin before 1.6.3 does not properly sanitize the $_GET['image_url'] variable, which is reflected back to the users when executing the editimage_bwg AJAX action.


Provide references for further information: Can you share references or external links related to CVE-2022-1282?


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1282?


Explain the CVE ID: What does the identifier CVE-2022-1283 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1283.

NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).


Provide references for further information: Can you share references or external links related to CVE-2022-1283?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/bfeb8fb8-644d-4587-80d4-cb704c404013'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/18d1d064bf599a255d55f09fca3104776fc34a67'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1283?


Explain the CVE ID: What does the identifier CVE-2022-1284 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1284.

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.


Provide references for further information: Can you share references or external links related to CVE-2022-1284?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/e98ad92c-3a64-48fb-84d4-d13afdbcbdd7'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/64a82e284dddabaeb549228380103b57dead32a6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1284?


Explain the CVE ID: What does the identifier CVE-2022-1285 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1285.

Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.8.


Provide references for further information: Can you share references or external links related to CVE-2022-1285?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/da1fbd6e-7a02-458e-9c2e-6d226c47046d'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/gogs/gogs/commit/7885f454a4946c4bbec1b4f8c603b5eea7429c7f'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1285?


Explain the CVE ID: What does the identifier CVE-2022-1286 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1286.

heap-buffer-overflow in mrb_vm_exec in mruby/mruby in GitHub repository mruby/mruby prior to 3.2. Possible arbitrary code execution if being exploited.


Provide references for further information: Can you share references or external links related to CVE-2022-1286?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/f918376e-b488-4113-963d-ffe8716e4189'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/mruby/mruby/commit/b1d0296a937fe278239bdfac840a3fd0e93b3ee9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1286?


Explain the CVE ID: What does the identifier CVE-2022-1287 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1287.

A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not require authentication. The exploit has been disclosed to the public and may be used.


Provide references for further information: Can you share references or external links related to CVE-2022-1287?

{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196750'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1287?


Explain the CVE ID: What does the identifier CVE-2022-1288 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1288.

A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. This issue affects access to /scas/admin/. The manipulation of the parameter page with the input %22%3E%3Cimg%20src=x%20onerror=alert(1)%3E leads to a reflected cross site scripting. The attack may be initiated remotely and does not require any form of authentication. The exploit has been disclosed to the public and may be used.


Provide references for further information: Can you share references or external links related to CVE-2022-1288?

{'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196751'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1288?


Explain the CVE ID: What does the identifier CVE-2022-1289 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1289.

A denial of service vulnerability was found in tildearrow Furnace. It has been classified as problematic. This is due to an incomplete fix of CVE-2022-1211. It is possible to initiate the attack remotely but it requires user interaction. The issue got fixed with the patch 0eb02422d5161767e9983bdaa5c429762d3477ce.


Provide references for further information: Can you share references or external links related to CVE-2022-1289?

{'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tildearrow/furnace/issues/325#issuecomment-1094139655'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/tildearrow/furnace/commit/0eb02422d5161767e9983bdaa5c429762d3477ce'}, {'tags': ['x_refsource_MISC'], 'url': 'https://vuldb.com/?id.196755'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1289?


Explain the CVE ID: What does the identifier CVE-2022-1290 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1290.

Stored XSS in "Name", "Group Name" & "Title" in GitHub repository polonel/trudesk prior to v1.2.0. This allows attackers to execute malicious scripts in the user's browser and it can lead to session hijacking, sensitive data exposure, and worse.


Provide references for further information: Can you share references or external links related to CVE-2022-1290?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/da6d03e6-053f-43b6-99a7-78c2e386e3ed'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/polonel/trudesk/commit/4f48b3bb86ba66a0085803591065bb6437e864ec'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1290?


Explain the CVE ID: What does the identifier CVE-2022-1291 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1291.

XSS vulnerability with default `onCellHtmlData` function in GitHub repository hhurz/tableexport.jquery.plugin prior to 1.25.0. Transmitting cookies to third-party servers. Sending data from secure sessions to third-party servers


Provide references for further information: Can you share references or external links related to CVE-2022-1291?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/49a14371-6058-47dd-9801-ec38a7459fc5'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/hhurz/tableexport.jquery.plugin/commit/dcbaee23cf98328397a153e71556f75202988ec9'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1291?


Explain the CVE ID: What does the identifier CVE-2022-1292 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1292.

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).


Provide references for further information: Can you share references or external links related to CVE-2022-1292?

{'url': 'https://www.openssl.org/news/secadv/20220503.txt'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23'}, {'url': 'https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb'}, {'name': '[debian-lts-announce] 20220515 [SECURITY] [DLA 3008-1] openssl security update', 'tags': ['mailing-list'], 'url': 'https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html'}, {'name': 'DSA-5139', 'tags': ['vendor-advisory'], 'url': 'https://www.debian.org/security/2022/dsa-5139'}, {'name': 'FEDORA-2022-b651cb69e6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/'}, {'name': 'FEDORA-2022-c9c02865f6', 'tags': ['vendor-advisory'], 'url': 'https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/'}, {'url': 'https://www.oracle.com/security-alerts/cpujul2022.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20220602-0009/'}, {'url': 'https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011'}, {'url': 'https://security.netapp.com/advisory/ntap-20220729-0004/'}, {'name': 'GLSA-202210-02', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/202210-02'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1292?


Explain the CVE ID: What does the identifier CVE-2022-1293 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1293.

The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.


Provide references for further information: Can you share references or external links related to CVE-2022-1293?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.ercom.com/security-updates'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1293?


Explain the CVE ID: What does the identifier CVE-2022-1294 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1294.

The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed


Provide references for further information: Can you share references or external links related to CVE-2022-1294?

{'tags': ['x_refsource_MISC'], 'url': 'https://wpscan.com/vulnerability/205a24b8-6d14-4458-aecd-79748e1324c7'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1294?


Explain the CVE ID: What does the identifier CVE-2022-1295 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1295.

Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.


Provide references for further information: Can you share references or external links related to CVE-2022-1295?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/3b9d450c-24ac-4037-b04d-4d4dafbf593a'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/alvarotrigo/fullpage.js/commit/bf62492a22e5d296e63c3ed918a42fc5645a0d48'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1295?


Explain the CVE ID: What does the identifier CVE-2022-1296 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1296.

Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.


Provide references for further information: Can you share references or external links related to CVE-2022-1296?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/52b57274-0e1a-4d61-ab29-1373b555fea0'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/153bcdc29f11cd8c90e7d639a7405450f644ddb6'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2022-1296?


Explain the CVE ID: What does the identifier CVE-2022-1297 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2022-1297.

Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.


Provide references for further information: Can you share references or external links related to CVE-2022-1297?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://huntr.dev/bounties/ec538fa4-06c6-4050-a141-f60153ddeaac'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/radareorg/radare2/commit/0a557045476a2969c7079aec9eeb29d02f2809c6'}