Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

Affected: Trend Micro Apex One and Apex One as a Service

Trend Micro Apex One and Apex One as a Service contain an improper validation of rollback mechanism components that could lead to remote code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-353, CWE-641

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

Affected: Apple iOS, iPadOS, and macOS

Apple kernel, which is included in iOS, iPadOS, and macOS, contains an unspecified vulnerability where an application may be able to execute code with kernel privileges.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Google Chromium Mojo Insufficient Data Validation Vulnerability

Affected: Google Chromium Mojo

Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply updates per ven


QNAP Photo Station Externally Controlled Reference Vulnerability

Affected: QNAP Photo Station

Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-610

[Source: CISA Known Exploited Vulnerabiliti


D-Link DIR-820L Remote Code Execution Vulnerability

Affected: D-Link DIR-820L

D-Link DIR-820L contains an unspecified vulnerability in Device Name parameter in /lan.asp which allows for remote code execution.

Required Action: The impacted product is end-of-life and should be disconnected if still in use.

CWE(s): CWE-78

[Source: CISA Known Exploited Vulnerabilities Catalog]


dotCMS Unrestricted Upload of File Vulnerability

Affected: dotCMS dotCMS

dotCMS ContentResource API contains an unrestricted upload of file with a dangerous type vulnerability that allows for directory traversal, in which the file is saved outside of the intended storage location. Exploitation allows for remote code execution.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-22, CWE-138

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Affected: Apache CouchDB

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-1188

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apache APISIX Authentication Bypass Vulnerability

Affected: Apache APISIX

Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-290

[Source: CISA Known Exploited Vulnerabilities Catalog]


VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Affected: VMware Tanzu Spring Cloud

When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


WebRTC Heap Buffer Overflow Vulnerability

Affected: WebRTC WebRTC

WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-122

[Source: CISA Known Exploited Vulnerabilities Catalog]


Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability

Affected: Palo Alto Networks PAN-OS

A Palo Alto Networks PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) attacks.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-940

[Source: CISA Known Exploited Vulnerabilities Catalog]


SAP Multiple Products HTTP Request Smuggling Vulnerability

Affected: SAP Multiple Products

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

Required Action: Apply updates per vendor instructions.

CWE(s): C


Apple iOS and macOS Out-of-Bounds Write Vulnerability

Affected: Apple iOS and macOS

Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow an application to execute code with kernel privileges.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple iOS and macOS Out-of-Bounds Write Vulnerability

Affected: Apple iOS and macOS

Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Google Chromium Intents Insufficient Input Validation Vulnerability

Affected: Google Chromium Intents

Google Chromium Intents contains an insufficient validation of untrusted input vulnerability that allows a remote attacker to browse to a malicious website via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply updates per vendor instructions.

CWE(s):


Microsoft Active Directory Domain Services Privilege Escalation Vulnerability

Affected: Microsoft Active Directory

An authenticated user could manipulate attributes on computer accounts they own or manage, and acquire a certificate from Active Directory Certificate Services that would allow for privilege escalation to SYSTEM.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-295

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Runtime Remote Code Execution Vulnerability

Affected: Microsoft Windows

Microsoft Windows Runtime contains an unspecified vulnerability that allows for remote code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-824

[Source: CISA Known Exploited Vulnerabilities Catalog]


Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

Affected: Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an authenticated attacker to upload arbitrary files to perform remote code execution. This vulnerability was chained with CVE-2022-37042 which allows for unauthenticated remote code execution.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE


Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability

Affected: Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxImportServlet. This vulnerability was chained with CVE-2022-27925 which allows for unauthenticated remote code execution.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-23

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Affected: Microsoft Windows

A remote code execution vulnerability exists when Microsoft Windows MSDT is called using the URL protocol from a calling application.

Required Action: Apply updates per vendor instructions.

[Source: CISA Known Exploited Vulnerabilities Catalog]


RARLAB UnRAR Directory Traversal Vulnerability

Affected: RARLAB UnRAR

RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-22, CWE-59

[Source: CISA Known Exploited Vulnerabilities Catalog]


Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability

Affected: Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to inject memcache commands into a targeted instance which causes an overwrite of arbitrary cached entries.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-93

[Source: CISA Known Exploited Vulnerabilities Catalog]


Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability

Affected: Atlassian Confluence

Atlassian Questions For Confluence App has hard-coded credentials, exposing the username and password in plaintext. A remote unauthenticated attacker can use these credentials to log into Confluence and access all content accessible to users in the confluence-users group.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-798

[Source: CISA Known Exploited Vulnerabiliti


Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows CSRSS contains an unspecified vulnerability that allows for privilege escalation to SYSTEM privileges.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-426

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows LSA Spoofing Vulnerability

Affected: Microsoft Windows

Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.

Required Action: Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].

CWE(s): CWE-306

[Source: CISA Known Exploited Vulnerabilities Catalog]


Mitel MiVoice Connect Data Validation Vulnerability

Affected: Mitel MiVoice Connect

The Service Appliance component in Mitel MiVoice Connect allows remote code execution due to incorrect data validation.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-20

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

Affected: Microsoft Windows

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-610

[Source: CISA Known Exploited Vulnerabilitie


Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability

Affected: Atlassian Confluence Server/Data Center

Atlassian Confluence Server and Data Center contain a remote code execution vulnerability that allows for an unauthenticated attacker to perform remote code execution.

Required Action: Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2


Cisco IOS XR Open Port Vulnerability

Affected: Cisco IOS XR

Cisco IOS XR software health check opens TCP port 6379 by default on activation. An attacker can connect to the Redis instance on the open port and allow access to the Redis instance that is running within the NOSi container.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-923

[Source: CISA Known Exploited Vulnerabilities Catalog]


Zyxel Multiple Firewalls OS Command Injection Vulnerability

Affected: Zyxel Multiple Firewalls

A command injection vulnerability in the CGI program of some Zyxel firewall versions could allow an attacker to modify specific files and then execute some OS commands on a vulnerable device.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-78

[Source: CISA Known Exploited Vulnerabilities Catalog]


VMware Spring Cloud Gateway Code Injection Vulnerability

Affected: VMware Spring Cloud Gateway

Spring Cloud Gateway applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


F5 BIG-IP Missing Authentication Vulnerability

Affected: F5 BIG-IP

F5 BIG-IP contains a missing authentication in critical function vulnerability which can allow for remote code execution, creation or deletion of files, or disabling services.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-306

[Source: CISA Known Exploited Vulnerabilities Catalog]


WSO2 Multiple Products Unrestrictive Upload of File Vulnerability

Affected: WSO2 Multiple Products

Multiple WSO2 products allow for unrestricted file upload, resulting in remote code execution.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-22

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-362

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows User Profile Service Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-1386

[Source: CISA Known Exploited Vulnerabilities Catalog]


Linux Kernel Privilege Escalation Vulnerability

Affected: Linux Kernel

Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of "Dirty Pipe."

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-665

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows Print Spooler contains an unspecified vulnerability which allow for privilege escalation.

Required Action: Apply updates per vendor instructions.

[Source: CISA Known Exploited Vulnerabilities Catalog]


VMware Multiple Products Privilege Escalation Vulnerability

Affected: VMware Multiple Products

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-250

[Source: CISA Known Exploited Vulnerabilities Catalog]


VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability

Affected: VMware Workspace ONE Access and Identity Manager

VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


Microsoft Windows CLFS Driver Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-787, CWE-1285

[Source: CISA Known Exploited Vulnerabilities Catalog]


WatchGuard Firebox and XTM Privilege Escalation Vulnerability

Affected: WatchGuard Firebox and XTM

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.

Required Action: Apply updates per vendor instructions.

[Source: CISA Known Exploited Vulnerabilities Catalog]


Spring Framework JDK 9+ Remote Code Execution Vulnerability

Affected: VMware Spring Framework

Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-94

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple macOS Out-of-Bounds Write Vulnerability

Affected: Apple macOS

macOS Monterey contains an out-of-bounds write vulnerability that could allow an application to execute arbitrary code with kernel privileges.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-125

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple macOS Out-of-Bounds Read Vulnerability

Affected: Apple macOS

macOS Monterey contains an out-of-bounds read vulnerability that could allow an application to read kernel memory.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-125

[Source: CISA Known Exploited Vulnerabilities Catalog]


Trend Micro Apex Central Arbitrary File Upload Vulnerability

Affected: Trend Micro Apex Central

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-184

[Source: CISA Known Exploited Vulnerabilities Catalog]


Sophos Firewall Authentication Bypass Vulnerability

Affected: Sophos Firewall

An authentication bypass vulnerability in User Portal and Webadmin of Sophos Firewall allows for remote code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-158

[Source: CISA Known Exploited Vulnerabilities Catalog]


Debian-specific Redis Server Lua Sandbox Escape Vulnerability

Affected: Redis Debian-specific Redis Servers

Redis is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-862

[Source: CISA Known Exploited Vulnerabilities Catalog]


WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

Affected: WatchGuard Firebox and XTM Appliances

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-122

[Source: CISA Known Exploited Vulnerabilities Catalog]


MiCollab, MiVoice Business Express Access Control Vulnerability

Affected: Mitel MiCollab, MiVoice Business Express

A vulnerability has been identified in MiCollab and MiVoice Business Express that may allow a malicious actor to gain unauthorized access to sensitive information and services, cause performance degradations or a denial of service condition on the affected system.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-306, CWE-406

[Source: CISA Known Exploited Vuln


Microsoft Windows Print Spooler Privilege Escalation Vulnerability

Affected: Microsoft Windows

Microsoft Windows Print Spooler contains an unspecified vulnerability which can allow for privilege escalation.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-40, CWE-1386

[Source: CISA Known Exploited Vulnerabilities Catalog]


Mozilla Firefox Use-After-Free Vulnerability

Affected: Mozilla Firefox

Mozilla Firefox contains a use-after-free vulnerability in WebGPU IPC Framework which can be exploited to perform arbitrary code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-416

[Source: CISA Known Exploited Vulnerabilities Catalog]


Mozilla Firefox Use-After-Free Vulnerability

Affected: Mozilla Firefox

Mozilla Firefox contains a use-after-free vulnerability in XSLT parameter processing which can be exploited to perform arbitrary code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-416

[Source: CISA Known Exploited Vulnerabilities Catalog]


Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability

Affected: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers

A vulnerability in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

Required


Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability

Affected: Synacor Zimbra Collaborate Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code.

Required Action: Apply updates per vendor instructions.

Ransomware: Known

CWE(s): CWE-79, CWE-116

[Source: CISA Known Exploited Vulnerabilities Catalog]


Zabbix Frontend Authentication Bypass Vulnerability

Affected: Zabbix Frontend

Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-290

[Source: CISA Known Exploited Vulnerabilities Catalog]


Zabbix Frontend Improper Access Control Vulnerability

Affected: Zabbix Frontend

Malicious actors can pass step checks and potentially change the configuration of Zabbix Frontend.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-284

[Source: CISA Known Exploited Vulnerabilities Catalog]


Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

Affected: Adobe Commerce and Magento Open Source

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20

[Source: CISA Known Exploited Vulnerabilities Catalog]


Google Chromium Animation Use-After-Free Vulnerability

Affected: Google Chromium Animation

Google Chromium Animation contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-416

[Source: CISA Known Ex


Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability

Affected: Apple iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-41


Microsoft Win32k Privilege Escalation Vulnerability

Affected: Microsoft Win32k

Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


Apple Memory Corruption Vulnerability

Affected: Apple iOS and macOS

Apple IOMobileFrameBuffer contains a memory corruption vulnerability which can allow a malicious application to execute arbitrary code with kernel privileges.

Required Action: Apply updates per vendor instructions.

CWE(s): CWE-20, CWE-787

[Source: CISA Known Exploited Vulnerabilities Catalog]


CVE: CVE-2022-0079

[{'lang': 'en', 'value': 'showdoc is vulnerable to Generation of Error Message Containing Sensitive Information'}]

Fix commit: Merge branch 'v2.10.0'


CVE: CVE-2022-0080

[{'lang': 'en', 'value': 'mruby is vulnerable to Heap-based Buffer Overflow'}]

Fix commit: proc.c: should not reference `irep` when copying failed.

It may cause broken reference count numbers.


CVE: CVE-2022-0083

[{'lang': 'en', 'value': 'livehelperchat is vulnerable to Generation of Error Message Containing Sensitive Information'}]

Fix commit: Show same message in all cases


CVE: CVE-2022-0084

[{'lang': 'en', 'value': 'A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk fill-up.'}]

Fix commit: Merge pull request #291 from OrangeDog/patch-1


CVE: CVE-2022-0085

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository dompdf/dompdf prior to 2.0.0.'}]

Fix commit: Add a default context

- creates a user agent
- disables following redirects


CVE: CVE-2022-0086

[{'lang': 'en', 'value': 'uppy is vulnerable to Server-Side Request Forgery (SSRF)'}]

Fix commit: improve private ip check (#3403)

https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122/


CVE: CVE-2022-0087

[{'lang': 'en', 'value': "keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]

Fix commit: Do not add `from` parameter to URL on signin page when it matches the default redirect

Additionally extract redirect logic for ease of reuse


CVE: CVE-2022-0088

[{'lang': 'en', 'value': 'Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.'}]

Fix commit: Add nonce to the logout link (#3264)

* Add nonce to the logout link
* Add tests for cookies being set or reset
* More tests: check nonces are different for different actions & users

Fixes #3170


CVE: CVE-2022-0121

[{'lang': 'en', 'value': 'hoppscotch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor'}]

Fix commit: fix: apply sandbox to HTML preview iframe


CVE: CVE-2022-0122

[{'lang': 'en', 'value': 'forge is vulnerable to URL Redirection to Untrusted Site'}]

Fix commit: Remove forge.util.parseUrl.

- Switch URL parsing to the WHATWG URL Standard `URL` API.
- Older browser or Node.js usage of related code might now require a URL
  polyfill.


CVE: CVE-2022-0128

[{'lang': 'en', 'value': 'vim is vulnerable to Out-of-bounds Read'}]

Fix commit: patch 8.2.4009: reading one byte beyond the end of the line

Problem:    Reading one byte beyond the end of the line.
Solution:   Check for NUL byte first.


CVE: CVE-2022-0132

[{'lang': 'en', 'value': 'peertube is vulnerable to Server-Side Request Forgery (SSRF)'}]

Fix commit: Prevent video import on non unicast ips


CVE: CVE-2022-0133

[{'lang': 'en', 'value': 'peertube is vulnerable to Improper Access Control'}]

Fix commit: Prevent caption listing of private videos


CVE: CVE-2022-0139

[{'lang': 'en', 'value': 'Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.'}]

Fix commit: Fix use-after-free in iobank rbtree usage ##io

* See havoc4 bin for reproducer
* Reported via huntr.dev by 'Cen Zhang'


CVE: CVE-2022-0144

[{'lang': 'en', 'value': 'shelljs is vulnerable to Improper Privilege Management'}]

Fix commit: fix(exec): lockdown file permissions (#1060)

This locks down file permissions used by the internal implementation of
`shell.exec()`.

Issue #1058
Tested manually using the documented scenarios


CVE: CVE-2022-0145

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository forkcms/forkcms prior to 5.11.1.'}]

Fix commit: Fix xss though the description in the info.xml file of a theme or module


CVE: CVE-2022-0153

[{'lang': 'en', 'value': 'SQL Injection in GitHub repository forkcms/forkcms prior to 5.11.1.'}]

Fix commit: Prevent sql injection through the ids of the action


CVE: CVE-2022-0155

[{'lang': 'en', 'value': 'follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor'}]

Fix commit: Drop Cookie header across domains.

Fixes https://github.com/follow-redirects/follow-redirects/issues/183


CVE: CVE-2022-0156

[{'lang': 'en', 'value': 'vim is vulnerable to Use After Free'}]

Fix commit: patch 8.2.4040: keeping track of allocated lines is too complicated

Problem:    Keeping track of allocated lines in user functions is too
            complicated.
Solution:   Instead of freeing individual lines keep them all until the end.


CVE: CVE-2022-0157

[{'lang': 'en', 'value': "phoronix-test-suite is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]

Fix commit: phodevi: Input sanitization updates for Phoromatic Server

Also other code formatting / cleanups while reviewing the code...


CVE: CVE-2022-0158

[{'lang': 'en', 'value': 'vim is vulnerable to Heap-based Buffer Overflow'}]

Fix commit: patch 8.2.4049: Vim9: reading before the start of the line with "$"

Problem:    Vim9: reading before the start of the line with "$" by itself.
Solution:   Do not subtract one when reporting the error.


CVE: CVE-2022-0159

[{'lang': 'en', 'value': "orchardcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]

Fix commit: Fix encoding issues (#11008)


CVE: CVE-2022-0170

[{'lang': 'en', 'value': 'peertube is vulnerable to Improper Access Control'}]

Fix commit: Don't display comments of private/internal videos


CVE: CVE-2022-0173

[{'lang': 'en', 'value': 'radare2 is vulnerable to Out-of-bounds Read'}]

Fix commit: Fix use-after-free in iobank rbtree usage ##io

* See havoc4 bin for reproducer
* Reported via huntr.dev by 'Cen Zhang'


CVE: CVE-2022-0174

[{'lang': 'en', 'value': 'dolibarr is vulnerable to Business Logic Errors'}]

Fix commit: Fix error management


CVE: CVE-2022-0178

[{'lang': 'en', 'value': 'snipe-it is vulnerable to Improper Access Control'}]

Fix commit: Merge pull request #10504 from snipe/fixes/auth_controls_on_api_key_creation

Fixes auth controls on api key creation


CVE: CVE-2022-0179

[{'lang': 'en', 'value': 'snipe-it is vulnerable to Improper Access Control'}]

Fix commit: Merge pull request #10498 from Haxatron/master

Fix access control


CVE: CVE-2022-0196

[{'lang': 'en', 'value': 'phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)'}]

Fix commit: phoromatic: Some additional input sanitization and starting on some CSRF token handling


CVE: CVE-2022-0197

[{'lang': 'en', 'value': 'phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)'}]

Fix commit: phoromatic: Some additional input sanitization and starting on some CSRF token handling


CVE: CVE-2022-0203

[{'lang': 'en', 'value': 'Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.'}]

Fix commit: solve payment method delete issue


CVE: CVE-2022-0204

[{'lang': 'en', 'value': 'A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.'}]

Fix commit: shared/gatt-server: Fix heap overflow when appending prepare writes

The code shall check if the prepare writes would append more the
allowed maximum attribute length.

Fixes https://github.com/bluez/bluez/security/a


CVE: CVE-2022-0213

[{'lang': 'en', 'value': 'vim is vulnerable to Heap-based Buffer Overflow'}]

Fix commit: patch 8.2.4074: going over the end of NameBuff

Problem:    Going over the end of NameBuff.
Solution:   Check length when appending a space.


CVE: CVE-2022-0219

[{'lang': 'en', 'value': 'Improper Restriction of XML External Entity Reference in GitHub repository skylot/jadx prior to 1.3.2.'}]

Fix commit: fix: use secure xml parser for process manifest


CVE: CVE-2022-0224

[{'lang': 'en', 'value': 'dolibarr is vulnerable to Improper Neutralization of Special Elements used in an SQL Command'}]

Fix commit: Fix #hunterf1d1ce3e-ca92-4c7b-b1b8-934e28eaa486

Conflicts:
	test/phpunit/CodingPhpTest.php


CVE: CVE-2022-0226

[{'lang': 'en', 'value': 'livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)'}]

Fix commit: Missing csfr check


CVE: CVE-2022-0231

[{'lang': 'en', 'value': 'livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF)'}]

Fix commit: CSRF for file configuration URL


CVE: CVE-2022-0235

[{'lang': 'en', 'value': 'node-fetch is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor'}]

Fix commit: 3.1.1 release (#1451)


CVE: CVE-2022-0238

[{'lang': 'en', 'value': 'phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)'}]

Fix commit: phoromatic: Additional input sanitization / validation


CVE: CVE-2022-0240

[{'lang': 'en', 'value': 'mruby is vulnerable to NULL Pointer Dereference'}]

Fix commit: class.c: add `obj->c` check before `prepare_singleton_class()`.


CVE: CVE-2022-0243

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.'}]

Fix commit: Fix localization and sanitization usages (#11034)


CVE: CVE-2022-0245

[{'lang': 'en', 'value': 'Cross-Site Request Forgery (CSRF) in GitHub repository livehelperchat/livehelperchat prior to 2.0.'}]

Fix commit: CSRF tokens


CVE: CVE-2022-0251

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.10.'}]

Fix commit: disallow html entity names on import - follow up to #11217


CVE: CVE-2022-0253

[{'lang': 'en', 'value': "livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]

Fix commit: Do not execute angular title


CVE: CVE-2022-0261

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4120: block insert goes over the end of the line

Problem:    Block insert goes over the end of the line.
Solution:   Handle invalid byte better.  Fix inserting the wrong text.


CVE: CVE-2022-0263

[{'lang': 'en', 'value': 'Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.'}]

Fix commit: [Settings] Validate SVG uploads for branding


CVE: CVE-2022-0265

[{'lang': 'en', 'value': 'Improper Restriction of XML External Entity Reference in GitHub repository hazelcast/hazelcast in 5.1-BETA-1.'}]

Fix commit: Add helper method to XmlUtil to enable XXE protection in the SAXParserFactory and XMLInputFactory (#20407)


CVE: CVE-2022-0266

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in Packagist remdex/livehelperchat prior to 3.92v.'}]

Fix commit: Display logic should match backand logic


CVE: CVE-2022-0268

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist getgrav/grav prior to 1.7.28.'}]

Fix commit: Fixed XSS check not detecting escaped `&#58`


CVE: CVE-2022-0269

[{'lang': 'en', 'value': 'Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.'}]

Fix commit: Improved CSRF protection


CVE: CVE-2022-0272

[{'lang': 'en', 'value': 'Improper Restriction of XML External Entity Reference in GitHub repository detekt/detekt prior to 1.20.0.'}]

Fix commit: Parse Baseline in a secure way (#4499)


CVE: CVE-2022-0273

[{'lang': 'en', 'value': 'Improper Access Control in Pypi calibreweb prior to 0.6.16.'}]

Fix commit: Prevent creating a public shelf without permission


CVE: CVE-2022-0274

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.'}]

Fix commit: Fix localization and sanitization usages (#11034)


CVE: CVE-2022-0277

[{'lang': 'en', 'value': 'Improper Access Control in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: search_authors only admins


CVE: CVE-2022-0278

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: xss on contact form fix


CVE: CVE-2022-0281

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: search_authors only admins


CVE: CVE-2022-0282

[{'lang': 'en', 'value': 'Code Injection in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: fix comments xss


CVE: CVE-2022-0285

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.9.'}]

Fix commit: [Thumbnails] Escape group text properly


CVE: CVE-2022-0315

[{'lang': 'en', 'value': 'Insecure Temporary File in GitHub repository horovod/horovod prior to 0.24.0.'}]

Fix commit: Replaced use of tempfile.mktemp() with tempfile.mkstemp() (#3358)

Signed-off-by: Abin Shahab <ashahab@linkedin.com>


CVE: CVE-2022-0318

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4151: reading beyond the end of a line

Problem:    Reading beyond the end of a line.
Solution:   For block insert only use the offset for correcting the length.


CVE: CVE-2022-0319

[{'lang': 'en', 'value': 'Out-of-bounds Read in vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4154: ml_get error when exchanging windows in Visual mode

Problem:    ml_get error when exchanging windows in Visual mode.
Solution:   Correct end of Visual area when entering another buffer.


CVE: CVE-2022-0323

[{'lang': 'en', 'value': 'Improper Neutralization of Special Elements Used in a Template Engine in Packagist mustache/mustache prior to 2.14.1.'}]

Fix commit: Fix CVE-2022-0323 (improper neutralization of section names)

- Fixes possible RCE when rendering untrusted user templates.
- Remove unnecessary comments in generated source.


CVE: CVE-2022-0326

[{'lang': 'en', 'value': 'NULL Pointer Dereference in Homebrew mruby prior to 3.2.'}]

Fix commit: codegen.c: no `OP_HASHADD` required when `val` is false.


CVE: CVE-2022-0338

[{'lang': 'en', 'value': 'Improper Privilege Management in Conda loguru prior to 0.5.3.'}]

Fix commit: Document several security considerations and best practices


CVE: CVE-2022-0339

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.'}]

Fix commit: Kobo sync token is now also created if accessed from localhost(fixes #1990)
Create kobo sync token button is now "unclicked" after closing dialog
Additional localhost route is catched
If book format is deleted this also deletes the book synced to kobo status


CVE: CVE-2022-0341

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.12.'}]

Fix commit: :bug: 所见即所得模式传入字符串 ```<Table></Table>``` 报错 Fix https://github.com/Vanessa219/vditor/issues/1102


CVE: CVE-2022-0348

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.'}]

Fix commit: added escape function to the icon field


CVE: CVE-2022-0350

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.'}]

Fix commit: :arrow_up:


CVE: CVE-2022-0351

[{'lang': 'en', 'value': 'Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4206: condition with many "(" causes a crash

Problem:    Condition with many "(" causes a crash.
Solution:   Limit recursion to 1000.


CVE: CVE-2022-0352

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.'}]

Fix commit: Prevent wrong use of safe statement


CVE: CVE-2022-0355

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in NPM simple-get prior to 4.0.1.'}]

Fix commit: Merge pull request #73 from ranjit-git/master


CVE: CVE-2022-0359

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4214: illegal memory access with large 'tabstop' in Ex mode

Problem:    Illegal memory access with large 'tabstop' in Ex mode.
Solution:   Allocate enough memory.


CVE: CVE-2022-0361

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4215: illegal memory access when copying lines in Visual mode

Problem:    Illegal memory access when copying lines in Visual mode.
Solution:   Adjust the Visual position after copying lines.


CVE: CVE-2022-0362

[{'lang': 'en', 'value': 'SQL Injection in Packagist showdoc/showdoc prior to 2.10.3.'}]

Fix commit: bug


CVE: CVE-2022-0368

[{'lang': 'en', 'value': 'Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4217: illegal memory access when undo makes Visual area invalid

Problem:    Illegal memory access when undo makes Visual area invalid.
Solution:   Correct the Visual area after undo.


CVE: CVE-2022-0370

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: CSRF For personal theme


CVE: CVE-2022-0372

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.'}]

Fix commit: Unrestricted php file upload fix (#681)

https://huntr.dev/bounties/d7453360-baca-4e56-985f-481275fa38db/


CVE: CVE-2022-0374

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: fx #1734


CVE: CVE-2022-0375

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: fx #1734


CVE: CVE-2022-0377

[{'lang': 'en', 'value': 'Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the image. As a result of this request, the name of the user-supplied image is changed with a MD5 value. This process can be conducted only when type of the image


CVE: CVE-2022-0378

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: fix xss on module api call in value parameters


CVE: CVE-2022-0379

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0382

[{'lang': 'en', 'value': "An information leak flaw was found due to uninitialized memory in the Linux kernel's TIPC protocol subsystem, in the way a user sends a TIPC datagram to one or more destinations. This flaw allows a local user to read some kernel memory. This issue is limited to no more than 7 bytes, and the user cannot control what is read. This flaw affects the Linux kernel versions prior to 5.17-rc1."}]

Fix commit: net ticp:fix a kernel-infoleak in __tipc_sendmsg(


CVE: CVE-2022-0387

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: fix


CVE: CVE-2022-0392

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.'}]

Fix commit: patch 8.2.4218: illegal memory access with bracketed paste in Ex mode

Problem:    Illegal memory access with bracketed paste in Ex mode.
Solution:   Reserve space for the trailing NUL.


CVE: CVE-2022-0393

[{'lang': 'en', 'value': 'Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4233: crash when recording and using Select mode

Problem:    Crash when recording and using Select mode.
Solution:   When deleting the last recorded character check there is something
            to delete.


CVE: CVE-2022-0394

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: Escape for angular in embed pages


CVE: CVE-2022-0395

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: Escape in user box


CVE: CVE-2022-0401

[{'lang': 'en', 'value': 'Path Traversal in NPM w-zip prior to 1.0.12.'}]

Fix commit: fix: change output to filename for Disclosure/DoS/RCE


CVE: CVE-2022-0405

[{'lang': 'en', 'value': 'Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.'}]

Fix commit: Kobo sync token is now also created if accessed from localhost(fixes #1990)
Create kobo sync token button is now "unclicked" after closing dialog
Additional localhost route is catched
If book format is deleted this also deletes the book synced to kobo status


CVE: CVE-2022-0406

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.'}]

Fix commit: Upates for new release


CVE: CVE-2022-0407

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4219: reading before the start of the line

Problem:    Reading before the start of the line.
Solution:   Check boundary before trying to read the character.


CVE: CVE-2022-0408

[{'lang': 'en', 'value': 'Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4247: stack corruption when looking for spell suggestions

Problem:    Stack corruption when looking for spell suggestions.
Solution:   Prevent the depth increased too much.  Add a five second time
            limit to finding suggestions.


CVE: CVE-2022-0409

[{'lang': 'en', 'value': 'Unrestricted Upload of File with Dangerous Type in Packagist showdoc/showdoc prior to 2.10.2.'}]

Fix commit: File upload vulnerability


CVE: CVE-2022-0413

[{'lang': 'en', 'value': 'Use After Free in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4253: using freed memory when substitute with function call

Problem:    Using freed memory when substitute uses a recursive function call.
Solution:   Make a copy of the substitute text.


CVE: CVE-2022-0414

[{'lang': 'en', 'value': 'Business Logic Errors in Packagist dolibarr/dolibarr prior to 16.0.'}]

Fix commit: Fix #huntr76f3b405-9f5d-44b1-8434-b52b56ee395f


CVE: CVE-2022-0417

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4245: ":retab 0" may cause illegal memory access

Problem:    ":retab 0" may cause illegal memory access.
Solution:   Limit the value of 'tabstop' to 10000.


CVE: CVE-2022-0419

[{'lang': 'en', 'value': 'NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.'}]

Fix commit: Fix null deref in xnu.kernelcache ##crash

* Reported by @xshad3 via huntr.dev


CVE: CVE-2022-0430

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.'}]

Fix commit: Implement new style cookies


CVE: CVE-2022-0432

[{'lang': 'en', 'value': 'Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.'}]

Fix commit: Fixed prototype pollution bug and only allow trusted origin (#17420)


CVE: CVE-2022-0436

[{'lang': 'en', 'value': 'Path Traversal in GitHub repository gruntjs/grunt prior to 1.5.2.'}]

Fix commit: Update dependencies, tests...


CVE: CVE-2022-0437

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.'}]

Fix commit: fix(security): remove XSS vulnerability in `returnUrl` query param

The `returnUrl` query parameter can be used to execute malicious code. For
example, visiting
`http://localhost:9876/?return_url=javascript:alert(document.domain)` will
display an alert.


CVE: CVE-2022-0443

[{'lang': 'en', 'value': 'Use After Free in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4281: using freed memory with :lopen and :bwipe

Problem:    Using freed memory with :lopen and :bwipe.
Solution:   Do not use a wiped out buffer.


CVE: CVE-2022-0451

[{'lang': 'en', 'value': 'Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirection logic. If a request is sent to example.com with authorization header and it redirects to an attackers site, they might not expect attacker site to receive authorization header. We recommend updating the Dart SDK t


CVE: CVE-2022-0472

[{'lang': 'en', 'value': 'Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.'}]

Fix commit: Fix vulnerability report from hunter.dev


CVE: CVE-2022-0476

[{'lang': 'en', 'value': 'Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.'}]

Fix commit: Fix DoS in the minidump parser ##crash

* Reported by lazymio via huntr.dev
* Reproducer: mdmp-dos


CVE: CVE-2022-0481

[{'lang': 'en', 'value': 'NULL Pointer Dereference in Homebrew mruby prior to 3.2.'}]

Fix commit: codegen.c: fixed a bug in hash code generation with `!val`.


CVE: CVE-2022-0482

[{'lang': 'en', 'value': 'Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository alextselegidis/easyappointments prior to 1.4.3.'}]

Fix commit: Release v1.4.3


CVE: CVE-2022-0501

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in Packagist ptrofimov/beanstalk_console prior to 1.7.12.'}]

Fix commit: Sanitize input


CVE: CVE-2022-0502

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: Canned messages fixes


CVE: CVE-2022-0504

[{'lang': 'en', 'value': 'Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0505

[{'lang': 'en', 'value': 'Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update api.php


CVE: CVE-2022-0506

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: add css middleware


CVE: CVE-2022-0508

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832'}]

Fix commit: Correctly check import target URL IP


CVE: CVE-2022-0509

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.3.1.'}]

Fix commit: [Admin] Website Settings - Escape grid values properly


CVE: CVE-2022-0510

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.'}]

Fix commit: [Admin] DataObject - Escape class definitions group properly


CVE: CVE-2022-0512

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.6.'}]

Fix commit: [fix] Correctly handle userinfo containing the at sign


CVE: CVE-2022-0514

[{'lang': 'en', 'value': 'Business Logic Errors in GitHub repository crater-invoice/crater prior to 6.0.5.'}]

Fix commit: Fix tax per item issue & check currency key


CVE: CVE-2022-0515

[{'lang': 'en', 'value': 'Cross-Site Request Forgery (CSRF) in GitHub repository crater-invoice/crater prior to 6.0.4.'}]

Fix commit: changed route method


CVE: CVE-2022-0518

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.'}]

Fix commit: Fix oobread segfault in java arith8.class ##crash

* Reported by Cen Zhang via huntr.dev


CVE: CVE-2022-0519

[{'lang': 'en', 'value': 'Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.'}]

Fix commit: Improve boundary checks to fix oobread segfaults ##crash

* Reported by Cen Zhang via huntr.dev
* Reproducer: bins/fuzzed/javaoob-havoc.class


CVE: CVE-2022-0520

[{'lang': 'en', 'value': 'Use After Free in NPM radare2.js prior to 5.6.2.'}]

Fix commit: Fix bins/*/rep8 - UAF crash in pyc parser ##crash

* Reported by Cen Zhang via huntr.dev


CVE: CVE-2022-0521

[{'lang': 'en', 'value': 'Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.'}]

Fix commit: Improve boundary checks to fix oobread segfaults ##crash

* Reported by Cen Zhang via huntr.dev
* Reproducer: bins/fuzzed/javaoob-havoc.class


CVE: CVE-2022-0522

[{'lang': 'en', 'value': 'Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.'}]

Fix commit: Fix negative index in anal.arm64.cs ##crash

* Reported by Cen Zhang via huntr.dev


CVE: CVE-2022-0523

[{'lang': 'en', 'value': 'Expired Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.2.'}]

Fix commit: Fix UAF in pyc parser ##crash

* Reported by Cen Zhang via huntr.dev
* Reproducer: bins/fuzzed/harep2.pyc


CVE: CVE-2022-0524

[{'lang': 'en', 'value': 'Business Logic Errors in GitHub repository publify/publify prior to 9.2.7.'}]

Fix commit: Fix setting the article password from the Admin

The password field was present in the form, but not accepted by the
controller. This change adds password to the list of accepted fields.


CVE: CVE-2022-0525

[{'lang': 'en', 'value': 'Out-of-bounds Read in Homebrew mruby prior to 3.2.'}]

Fix commit: codegen.c: stack position may be wrong on assignments.

When `[]=` access includes keyword arguments.


CVE: CVE-2022-0526

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.'}]

Fix commit: fix: Render valid urls only in custom attributes (#3921)


CVE: CVE-2022-0527

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.2.0.'}]

Fix commit: fix: Ongoing campaign URL validation (#3890)


CVE: CVE-2022-0528

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository transloadit/uppy prior to 3.3.1.'}]

Fix commit: replace debug

remove debug flag
instead add allowLocalUrls (COMPANION_ALLOW_LOCAL_URLS)
which defaults to false
this fixes https://huntr.dev/bounties/8b060cc3-2420-468e-8293-b9216620175b/

also don't allow localhost for any providers getURLMeta


CVE: CVE-2022-0534

[{'lang': 'en', 'value': 'A vulnerability was found in htmldoc version 1.9.15 where the stack out-of-bounds read takes place in gif_get_code() and occurs when opening a malicious GIF file, which can result in a crash (segmentation fault).'}]

Fix commit: Block GIF images with a code size > 12 (Issue #463)


CVE: CVE-2022-0536

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in NPM follow-redirects prior to 1.14.8.'}]

Fix commit: Drop confidential headers across schemes.


CVE: CVE-2022-0539

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist ptrofimov/beanstalk_console prior to 1.7.14.'}]

Fix commit: applying htmlspecialchars for sanitization output
Fix issue XSS
Disclosure : https://huntr.dev/bounties/5f41b182-dda2-4c6f-9668-2a9afaed53af/


CVE: CVE-2022-0542

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - DOM in GitHub repository chatwoot/chatwoot prior to 2.7.0.'}]

Fix commit: fix: Handle unsanitized markup in DOM (#4110)


CVE: CVE-2022-0552

[{'lang': 'en', 'value': 'A flaw was found in the original fix for the netty-codec-http CVE-2021-21409, where the OpenShift Logging openshift-logging/elasticsearch6-rhel8 container was incomplete. The vulnerable netty-codec-http maven package was not removed from the image content. This flaw affects origin-aggregated-logging versions 3.11.'}]

Fix commit: Update netty to 4.1.63


CVE: CVE-2022-0554

[{'lang': 'en', 'value': 'Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4327: may end up with no current buffer

Problem:    May end up with no current buffer.
Solution:   When deleting the current buffer to not pick a quickfix buffer as
            the new current buffer.


CVE: CVE-2022-0557

[{'lang': 'en', 'value': 'OS Command Injection in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update plupload.php


CVE: CVE-2022-0558

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: xss fix on tagging module


CVE: CVE-2022-0559

[{'lang': 'en', 'value': 'Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.'}]

Fix commit: Prefer memleak over usaf in io.bank's rbtree bug ##crash

* That's a workaround, proper fix will come later
* Reproducer: bins/fuzzed/iobank-crash
* Reported by Akyne Choi via huntr.dev


CVE: CVE-2022-0560

[{'lang': 'en', 'value': 'Open Redirect in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0565

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in Packagist pimcore/pimcore prior to 10.3.1.'}]

Fix commit: Svg sanitization (#11386)

* setting up the svg saniziter on logo and assets upload

* more detailed exception message

* changed to mime type check instead of file extension

* adding the sanitization to "Upload new version"

* refactor to sanitize on preAdd/preUpdate, rollback AssetController.php

* fix resource|string,


CVE: CVE-2022-0569

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in Packagist snipe/snipe-it prior to v5.3.9.'}]

Fix commit: Updated language string

Signed-off-by: snipe <snipe@snipe.net>


CVE: CVE-2022-0570

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.'}]

Fix commit: codegen.c: fix a bug in `gen_values()`.

- Fix limit handling that fails 15 arguments method calls.
- Fix too early argument packing in arrays.


CVE: CVE-2022-0571

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in GitHub repository phoronix-test-suite/phoronix-test-suite prior to 10.8.2.'}]

Fix commit: phoromatic: Reject HTML encoded character input and other strings that likely have no use within the context of Phoromatic inputs


CVE: CVE-2022-0572

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4359: crash when repeatedly using :retab

Problem:    crash when repeatedly using :retab.
Solution:   Bail out when the line is getting too long.


CVE: CVE-2022-0574

[{'lang': 'en', 'value': 'Improper Access Control in GitHub repository publify/publify prior to 9.2.8.'}]

Fix commit: Do not allow comments on Article if not published


CVE: CVE-2022-0575

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.2.0.'}]

Fix commit: XSS fix, cont. (#13776)

https://huntr.dev/bounties/13951f51-deed-4a3d-8275-52306cc5a87d/


CVE: CVE-2022-0576

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Generic in Packagist librenms/librenms prior to 22.1.0.'}]

Fix commit: security - XSS Fix 01

fixing https://huntr.dev/bounties/114ba055-a2f0-4db9-aafb-95df944ba177/ (#13775)


CVE: CVE-2022-0577

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.'}]

Fix commit: Merge pull request from GHSA-cjvr-mfj7-j4j8

* Do not carry over cookies to a different domain on redirect

* Cover the cookie-domain redirect fix in the release notes

* Cover 1.8.2 in the release notes

* Fix redirect Cookie handling when the cookie middleware is disabled

* Update the 1.8.2 release date


CVE: CVE-2022-0578

[{'lang': 'en', 'value': 'Code Injection in GitHub repository publify/publify prior to 9.2.8.'}]

Fix commit: Do not allow images in comments


CVE: CVE-2022-0579

[{'lang': 'en', 'value': 'Improper Privilege Management in Packagist snipe/snipe-it prior to 5.3.9.'}]

Fix commit: Merge pull request #10665 from snipe/fixes/adds_gate_to_supplier_view

Adds gate to supplier


CVE: CVE-2022-0580

[{'lang': 'en', 'value': 'Improper Access Control in Packagist librenms/librenms prior to 22.2.0.'}]

Fix commit: Moved some pages to be within admin route (#13782)

* Moved plugin admin pages to be within admin route
* Wrap html transports page in admin check
* Moved Port group controller to be admin protected
* fixed tests


CVE: CVE-2022-0587

[{'lang': 'en', 'value': 'Improper Authorization in Packagist librenms/librenms prior to 22.2.0.'}]

Fix commit: Moved some pages to be within admin route (#13782)

* Moved plugin admin pages to be within admin route
* Wrap html transports page in admin check
* Moved Port group controller to be admin protected
* fixed tests


CVE: CVE-2022-0588

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in Packagist librenms/librenms prior to 22.2.0.'}]

Fix commit: Moved some pages to be within admin route (#13782)

* Moved plugin admin pages to be within admin route
* Wrap html transports page in admin check
* Moved Port group controller to be admin protected
* fixed tests


CVE: CVE-2022-0589

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist librenms/librenms prior to 22.1.0.'}]

Fix commit: XSS fixes (#13780)


CVE: CVE-2022-0596

[{'lang': 'en', 'value': 'Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update AdminMakeInstall.php


CVE: CVE-2022-0597

[{'lang': 'en', 'value': 'Open Redirect in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Merge branch 'dev' of https://github.com/microweber/microweber into dev


CVE: CVE-2022-0602

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - DOM in GitHub repository tastyigniter/tastyigniter prior to 3.3.0.'}]

Fix commit: Minor fixes

Signed-off-by: Sam Poyigi <6567634+sampoyigi@users.noreply.github.com>


CVE: CVE-2022-0611

[{'lang': 'en', 'value': 'Improper Privilege Management in Packagist snipe/snipe-it prior to 5.3.11.'}]

Fix commit: Merge pull request #10672 from snipe/fixes/missing_gates_for_maintenances

Added Asset edit/delete gates to maintenances


CVE: CVE-2022-0612

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in Packagist remdex/livehelperchat prior to 3.93v.'}]

Fix commit: Non bindable logo


CVE: CVE-2022-0613

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in NPM urijs prior to 1.19.8.'}]

Fix commit: fix(parse): case insensitive scheme - #412


CVE: CVE-2022-0614

[{'lang': 'en', 'value': 'Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.'}]

Fix commit: vm.c: should check type before hash access.

Since the operand of double splat (`**`) may not be a hash, simple
assertion (previous code since d42a64e) was not enough for this case.


CVE: CVE-2022-0622

[{'lang': 'en', 'value': 'Generation of Error Message Containing Sensitive Information in Packagist snipe/snipe-it prior to 5.3.11.'}]

Fix commit: Added usleep :(

Signed-off-by: snipe <snipe@snipe.net>


CVE: CVE-2022-0623

[{'lang': 'en', 'value': 'Out-of-bounds Read in Homebrew mruby prior to 3.2.'}]

Fix commit: vm.c: should check type before hash access.

Since the operand of double splat (`**`) may not be a hash, simple
assertion (previous code since d42a64e) was not enough for this case.


CVE: CVE-2022-0624

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in GitHub repository ionicabizau/parse-path prior to 5.0.0.'}]

Fix commit: Refactor the codebase to make it more secure


CVE: CVE-2022-0629

[{'lang': 'en', 'value': 'Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.'}]

Fix commit: patch 8.2.4397: crash when using many composing characters in error message

Problem:    Crash when using many composing characters in error message.
Solution:   Use mb_cptr2char_adv() instead of mb_ptr2char_adv().


CVE: CVE-2022-0630

[{'lang': 'en', 'value': 'Out-of-bounds Read in Homebrew mruby prior to 3.2.'}]

Fix commit: vm.c: should check type before hash access.

Since the operand of double splat (`**`) may not be a hash, simple
assertion (previous code since d42a64e) was not enough for this case.


CVE: CVE-2022-0631

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in Homebrew mruby prior to 3.2.'}]

Fix commit: vm.c: packed arguments length may be zero for `send` method.


CVE: CVE-2022-0632

[{'lang': 'en', 'value': 'NULL Pointer Dereference in Homebrew mruby prior to 3.2.'}]

Fix commit: codegen.c: adjust stack position for `OP_SUPER` instruction.


CVE: CVE-2022-0638

[{'lang': 'en', 'value': 'Cross-Site Request Forgery (CSRF) in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update UserLogoutController.php


CVE: CVE-2022-0639

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.7.'}]

Fix commit: [fix] Readd the empty userinfo to `url.href` (#226)

If the userinfo is present but empty, the parsed host is also empty, and
`url.pathname` is not `'/'`, then readd the empty userinfo to `url.href`,
otherwise the original invalid URL might be transformed into a valid one
with `url.pathname` as host.


CVE: CVE-2022-0645

[{'lang': 'en', 'value': 'Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.'}]

Fix commit: fix(toolbar): only redirect to hosts in app_urls (#9268)

* fix(toolbar): only redirect to hosts in app_urls

* fix mypy and regex


CVE: CVE-2022-0654

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository fgribreau/node-request-retry prior to 7.0.0.'}]

Fix commit: Prevent Cookie & Authorization Headers from being forwarded when the URL redirects to another domain (information leak) #137


CVE: CVE-2022-0660

[{'lang': 'en', 'value': 'Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update Comment.php


CVE: CVE-2022-0664

[{'lang': 'en', 'value': 'Use of Hard-coded Cryptographic Key in Go github.com/gravitl/netmaker prior to 0.8.5,0.9.4,0.10.0,0.10.1.'}]

Fix commit: hotfix 2


CVE: CVE-2022-0665

[{'lang': 'en', 'value': 'Path Traversal in GitHub repository pimcore/pimcore prior to 10.3.2.'}]

Fix commit: [Admin] Translations - use session for file import to prevent path traversal - Merge PR #11498


CVE: CVE-2022-0666

[{'lang': 'en', 'value': 'CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update UrlManager.php


CVE: CVE-2022-0676

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.'}]

Fix commit: Fix heap buffer overflow in dyldcache parser ##crash

* Reported by: Lazymio via huntr.dev
* Reproducer: dyldovf


CVE: CVE-2022-0678

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: Update UrlManager.php


CVE: CVE-2022-0685

[{'lang': 'en', 'value': 'Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.'}]

Fix commit: patch 8.2.4418: crash when using special multi-byte character

Problem:    Crash when using special multi-byte character.
Solution:   Don't use isalpha() for an arbitrary character.


CVE: CVE-2022-0686

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.8.'}]

Fix commit: [fix] Handle the case where the port is specified but empty


CVE: CVE-2022-0688

[{'lang': 'en', 'value': 'Business Logic Errors in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0689

[{'lang': 'en', 'value': 'Use multiple time the one-time coupon in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0690

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0691

[{'lang': 'en', 'value': 'Authorization Bypass Through User-Controlled Key in NPM url-parse prior to 1.5.9.'}]

Fix commit: [fix] Strip all control characters from the beginning of the URL


CVE: CVE-2022-0692

[{'lang': 'en', 'value': 'Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.'}]

Fix commit: Don't redirect to REQUEST_URI when browsing to index.php
Instead, we can make sure everything works correctly on index.php


CVE: CVE-2022-0695

[{'lang': 'en', 'value': 'Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.'}]

Fix commit: Fix DoS in PE/QNX/DYLDCACHE/PSX parsers ##crash

* Reported by lazymio
* Reproducer: AAA4AAAAAB4=


CVE: CVE-2022-0696

[{'lang': 'en', 'value': 'NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.'}]

Fix commit: patch 8.2.4428: crash when switching tabpage while in the cmdline window

Problem:    Crash when switching tabpage while in the cmdline window.
Solution:   Disallow switching tabpage when in the cmdline window.


CVE: CVE-2022-0697

[{'lang': 'en', 'value': 'Open Redirect in GitHub repository archivy/archivy prior to 1.7.0.'}]

Fix commit: fix open redirect


CVE: CVE-2022-0704

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.'}]

Fix commit: [Admin] Security - Add handler to enable Content Security Policy (#11447)

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy - fix document preview

* [Admin] Security - Add handler to enab


CVE: CVE-2022-0705

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.'}]

Fix commit: [Admin] Security - Add handler to enable Content Security Policy (#11447)

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy - fix document preview

* [Admin] Security - Add handler to enab


CVE: CVE-2022-0711

[{'lang': 'en', 'value': 'A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.'}]

Fix commit: BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies

Ensure calls to http_find_header() termin


CVE: CVE-2022-0712

[{'lang': 'en', 'value': 'NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.'}]

Fix commit: Fix null deref in bin.symbols ##crash

* Reported by cnitlrt via huntr.dev


CVE: CVE-2022-0713

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.'}]

Fix commit: Fix oobread in macho core symbolication ##crash

* Reported by @cnitlrt via huntr.dev


CVE: CVE-2022-0714

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.'}]

Fix commit: patch 8.2.4436: crash with weird 'vartabstop' value

Problem:    Crash with weird 'vartabstop' value.
Solution:   Check for running into the end of the line.


CVE: CVE-2022-0717

[{'lang': 'en', 'value': 'Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2.'}]

Fix commit: codegen.c: fix a argument generation bug in array assignment.


CVE: CVE-2022-0719

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: Update UrlManager.php


CVE: CVE-2022-0721

[{'lang': 'en', 'value': 'Insertion of Sensitive Information Into Debugging Code in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: Update Handler.php


CVE: CVE-2022-0722

[{'lang': 'en', 'value': 'Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository ionicabizau/parse-url prior to 7.0.0.'}]

Fix commit: Refactor codebase, upgrade dependencies


CVE: CVE-2022-0723

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0724

[{'lang': 'en', 'value': 'Insecure Storage of Sensitive Information in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: Update plupload.php


CVE: CVE-2022-0726

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.'}]

Fix commit: Check video privacy when creating comments/rates


CVE: CVE-2022-0727

[{'lang': 'en', 'value': 'Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.'}]

Fix commit: Check video privacy when creating comments/rates


CVE: CVE-2022-0729

[{'lang': 'en', 'value': 'Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.'}]

Fix commit: patch 8.2.4440: crash with specific regexp pattern and string

Problem:    Crash with specific regexp pattern and string.
Solution:   Stop at the start of the string.


CVE: CVE-2022-0731

[{'lang': 'en', 'value': 'Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.'}]

Fix commit: FIX #hunterb812ea22-0c02-46fe-b89f-04519dfb1ebd


CVE: CVE-2022-0736

[{'lang': 'en', 'value': 'Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.'}]

Fix commit: Use mkstemp to replace deprecated mktemp call (#5303)

* Use mkstemp

Signed-off-by: dbczumar <corey.zumar@databricks.com>

* Remove num examples

Signed-off-by: dbczumar <corey.zumar@databricks.com>

* Close instead of remove

Signed-off-by: dbczumar <corey.zumar@databricks.com>

* Close the handle

Signed-off-by: dbczumar <corey.zumar@databrick


CVE: CVE-2022-0743

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.'}]

Fix commit: Fixed entity sanitization for XSS detection


CVE: CVE-2022-0746

[{'lang': 'en', 'value': 'Business Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0.'}]

Fix commit: Fix #hunterb812ea22-0c02-46fe-b89f-04519dfb1ebd


CVE: CVE-2022-0752

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9.'}]

Fix commit: Fix XXS issues (#2432)

* XSS patches

* Reslove XSS vulnrebilty

* Resolve XSS vulnrebility

* Prevent showing edit form from non exsiting records

* Improve error handling message

Create a function

* Make sure $user from $_SESSION is escapeshellarg

Prevent double escapeshellarg in Edit/web/index

* Enable translateable erro


CVE: CVE-2022-0753

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9.'}]

Fix commit: Fix XXS issues (#2432)

* XSS patches

* Reslove XSS vulnrebilty

* Resolve XSS vulnrebility

* Prevent showing edit form from non exsiting records

* Improve error handling message

Create a function

* Make sure $user from $_SESSION is escapeshellarg

Prevent double escapeshellarg in Edit/web/index

* Enable translateable er


CVE: CVE-2022-0754

[{'lang': 'en', 'value': 'SQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.'}]

Fix commit: SuiteCRM 7.12.5 Release


CVE: CVE-2022-0755

[{'lang': 'en', 'value': 'Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.12.5.'}]

Fix commit: SuiteCRM 7.12.5 Release


CVE: CVE-2022-0756

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.'}]

Fix commit: SuiteCRM 7.12.5 Release


CVE: CVE-2022-0762

[{'lang': 'en', 'value': 'Business Logic Errors in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: check product is deleted before add to cart


CVE: CVE-2022-0763

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: add xss clean to create media dir method


CVE: CVE-2022-0764

[{'lang': 'en', 'value': 'Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.'}]

Fix commit: Merge pull request #12649 from strapi/cli-security

update execa commands


CVE: CVE-2022-0766

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.'}]

Fix commit: Don't allow redirects on cover uploads, catch more addresses which resolve to localhost


CVE: CVE-2022-0767

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.'}]

Fix commit: Don't allow redirects on cover uploads, catch more addresses which resolve to localhost


CVE: CVE-2022-0768

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.'}]

Fix commit: Merge branch 'hotfix/3.0.2'


CVE: CVE-2022-0772

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 22.2.2.'}]

Fix commit: Resolved XSS issue from alert rule list modal (#13805)


CVE: CVE-2022-0776

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to 4.3.0.'}]

Fix commit: Fix DOM XSS


CVE: CVE-2022-0777

[{'lang': 'en', 'value': 'Weak Password Recovery Mechanism for Forgotten Password in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: forgot password add throttle


CVE: CVE-2022-0819

[{'lang': 'en', 'value': 'Code Injection in GitHub repository dolibarr/dolibarr prior to 15.0.1.'}]

Fix commit: Fix #hunterb03d4415-d4f9-48c8-9ae2-d3aa248027b5


CVE: CVE-2022-0820

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.3.0.'}]

Fix commit: Fix missing permission checks and encoding. (#11344)


CVE: CVE-2022-0821

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0.'}]

Fix commit: Fix missing permission checks and encoding. (#11344)


CVE: CVE-2022-0822

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in GitHub repository orchardcms/orchardcore prior to 1.3.0.'}]

Fix commit: Fix missing permission checks and encoding. (#11344)


CVE: CVE-2022-0824

[{'lang': 'en', 'value': 'Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.'}]

Fix commit: Foreign module may need a check


CVE: CVE-2022-0829

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository webmin/webmin prior to 1.990.'}]

Fix commit: Add missing permissions check when saving allowed cron users


CVE: CVE-2022-0831

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.'}]

Fix commit: escaping 'key' custom property field in elements


CVE: CVE-2022-0832

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.'}]

Fix commit: escaping fields in SERP preview


CVE: CVE-2022-0838

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.10.'}]

Fix commit: replace html() with text

+ 2 small problems on add / edit database page


CVE: CVE-2022-0839

[{'lang': 'en', 'value': 'Improper Restriction of XML External Entity Reference in GitHub repository liquibase/liquibase prior to 4.8.0.'}]

Fix commit: Added liquibase.secureParsing test


CVE: CVE-2022-0841

[{'lang': 'en', 'value': 'OS Command Injection in GitHub repository ljharb/npm-lockfile in v2.0.3 and v2.0.4.'}]

Fix commit: [Fix] reject invalid `only` values


CVE: CVE-2022-0845

[{'lang': 'en', 'value': 'Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.'}]

Fix commit: Replace `eval()` with `ast.literal_eval()` for security (#12212)

Co-authored-by: Carlos Mocholi <carlossmocholi@gmail.com>


CVE: CVE-2022-0848

[{'lang': 'en', 'value': 'OS Command Injection in GitHub repository part-db/part-db prior to 0.5.11.'}]

Fix commit: Disallow uploading of potentially unsafe file extensions.


CVE: CVE-2022-0849

[{'lang': 'en', 'value': 'Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.'}]

Fix commit: aaef on arm/thumb switches causes uaf ##crash

* Reported by peacock-doris via huntr.dev
* Reproducer: poc_uaf_r_reg_get


CVE: CVE-2022-0855

[{'lang': 'en', 'value': 'Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4.'}]

Fix commit: update


CVE: CVE-2022-0860

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.'}]

Fix commit: Merge pull request from GHSA-mcg6-h362-cmq5

Security: Fix CVE-2022-0860


CVE: CVE-2022-0868

[{'lang': 'en', 'value': 'Open Redirect in GitHub repository medialize/uri.js prior to 1.19.10.'}]

Fix commit: fix(parse): handle excessive colons in scheme delimiter

reported by @huydoppa via huntr.dev


CVE: CVE-2022-0869

[{'lang': 'en', 'value': 'Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.'}]

Fix commit: fix unsafe redirect (#308)


CVE: CVE-2022-0877

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.'}]

Fix commit: Updated CSP with frame-src rules

- Configurable via 'ALLOWED_IFRAME_SOURCES' .env option.
- Also updated how CSP rules are set, with a single header being used
  instead of many.
- Also applied CSP rules to HTML export outputs.
- Updated tests to cover.

For #3314


CVE: CVE-2022-0880

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository star7th/showdoc prior to 2.10.2.'}]

Fix commit: file upload bug


CVE: CVE-2022-0881

[{'lang': 'en', 'value': 'Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.'}]

Fix commit: Remove exif tags when processing images


CVE: CVE-2022-0890

[{'lang': 'en', 'value': 'NULL Pointer Dereference in GitHub repository mruby/mruby prior to 3.2.'}]

Fix commit: fiber.c: should pack 15+ arguments in an array.


CVE: CVE-2022-0893

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.'}]

Fix commit: [Admin] Security - Add handler to enable Content Security Policy (#11447)

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy - fix document preview

* [Admin] Security - Add handler to enab


CVE: CVE-2022-0894

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.'}]

Fix commit: [Admin] Security - Add handler to enable Content Security Policy (#11447)

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy - fix document preview

* [Admin] Security - Add handler to enab


CVE: CVE-2022-0895

[{'lang': 'en', 'value': 'Static Code Injection in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: Update ContactInformationTrait.php


CVE: CVE-2022-0896

[{'lang': 'en', 'value': 'Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: Update AdminCommentController.php


CVE: CVE-2022-0905

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository go-gitea/gitea prior to 1.16.4.'}]

Fix commit: fix pam authorization (#19040)

https://huntr.dev/bounties/8d221f92-b2b1-4878-bc31-66ff272e5ceb/

Co-authored-by: ysf <34326+ysf@users.noreply.github.com>


CVE: CVE-2022-0906

[{'lang': 'en', 'value': 'Unrestricted file upload leads to stored XSS in GitHub repository microweber/microweber prior to 1.1.12.'}]

Fix commit: update


CVE: CVE-2022-0911

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.4.0.'}]

Fix commit: [Admin] Security - Add handler to enable Content Security Policy (#11447)

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy

* [Admin] Security - Add handler to enable Content Security Policy - fix document preview

* [Admin] Security - Add handler to enab


CVE: CVE-2022-0912

[{'lang': 'en', 'value': 'Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.2.11.'}]

Fix commit: update


CVE: CVE-2022-0913

[{'lang': 'en', 'value': 'Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3.'}]

Fix commit: checkout shipping address validation - max chars allowed


CVE: CVE-2022-0921

[{'lang': 'en', 'value': 'Abusing Backup/Restore feature to achieve Remote Code Execution in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: secure upgrade on php files upload


CVE: CVE-2022-0926

[{'lang': 'en', 'value': 'File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: Update Files.php


CVE: CVE-2022-0928

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: upgrade taxes to laravel routers


CVE: CVE-2022-0929

[{'lang': 'en', 'value': 'XSS on dynamic_text module in GitHub repository microweber/microweber prior to 1.2.11.'}]

Fix commit: Update build-and-upload.yml


CVE: CVE-2022-0930

[{'lang': 'en', 'value': 'File upload filter bypass leading to stored XSS in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: make plupload only allowed files


CVE: CVE-2022-0932

[{'lang': 'en', 'value': 'Improper Authorization in GitHub repository saleor/saleor prior to 3.1.2.'}]

Fix commit: Require manage orders for fetching `user.orders` (#9128)

* Require manage orders for fetching customer.orders

* Update changelog

Co-authored-by: Marcin Gębala <5421321+maarcingebala@users.noreply.github.com>


CVE: CVE-2022-0935

[{'lang': 'en', 'value': 'Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97.'}]

Fix commit: Migrate to static HTTP_HOST (#1754)

Static HTTP_HOST option and security section in update page.


CVE: CVE-2022-0936

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository autolab/autolab prior to 2.8.0.'}]

Fix commit: Force download of attachments (#1490)

* Rubocop fix

* resolve merge

* restore gemfile

* restore nl


CVE: CVE-2022-0937

[{'lang': 'en', 'value': 'Stored xss in showdoc through file upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: file upload bug


CVE: CVE-2022-0938

[{'lang': 'en', 'value': 'Stored XSS via file upload in GitHub repository star7th/showdoc prior to v2.10.4.'}]

Fix commit: Merge pull request #1628 from ajaysenr/master

Update AttachmentModel.class.php


CVE: CVE-2022-0939

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.'}]

Fix commit: Better epub cover parsing with multiple cover-image items
Code cosmetics
renamed variables
refactored xml page generation
refactored prepare author


CVE: CVE-2022-0940

[{'lang': 'en', 'value': 'Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.'}]

Fix commit: Merge pull request #1629 from ajaysenr/master

Update AttachmentModel.class.php


CVE: CVE-2022-0941

[{'lang': 'en', 'value': 'Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to v2.10.4.'}]

Fix commit: Merge pull request #1630 from ajaysenr/master

Update AttachmentModel.class.php


CVE: CVE-2022-0942

[{'lang': 'en', 'value': 'Stored XSS due to Unrestricted File Upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Upload file vulnerability


CVE: CVE-2022-0943

[{'lang': 'en', 'value': 'Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.'}]

Fix commit: patch 8.2.4563: "z=" in Visual mode may go beyond the end of the line

Problem:    "z=" in Visual mode may go beyond the end of the line.
Solution:   Adjust "badlen".


CVE: CVE-2022-0944

[{'lang': 'en', 'value': 'Template injection in connection test endpoint leads to RCE in GitHub repository sqlpad/sqlpad prior to 6.10.1.'}]

Fix commit: Use mustache to process connection template (#1110)


CVE: CVE-2022-0945

[{'lang': 'en', 'value': 'Stored XSS viva axd and cshtml file upload in star7th/showdoc in GitHub repository star7th/showdoc prior to v2.10.4.'}]

Fix commit: bug


CVE: CVE-2022-0946

[{'lang': 'en', 'value': 'Stored XSS viva cshtm file upload in GitHub repository star7th/showdoc prior to v2.10.4.'}]

Fix commit: bug


CVE: CVE-2022-0950

[{'lang': 'en', 'value': 'Unrestricted Upload of File with Dangerous Type in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: file upload bug


CVE: CVE-2022-0951

[{'lang': 'en', 'value': 'File Upload Restriction Bypass leading to Stored XSS Vulnerability in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: file upload bug


CVE: CVE-2022-0954

[{'lang': 'en', 'value': "Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11."}]

Fix commit: Update SaveOptionApiController.php


CVE: CVE-2022-0955

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/data-hub prior to 1.2.4.'}]

Fix commit: follow up to https://github.com/pimcore/data-hub/pull/462


CVE: CVE-2022-0956

[{'lang': 'en', 'value': 'Stored XSS via File Upload in GitHub repository star7th/showdoc prior to v.2.10.4.'}]

Fix commit: file upload bug


CVE: CVE-2022-0957

[{'lang': 'en', 'value': 'Stored XSS via File Upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Merge pull request #1632 from ajaysenr/master

Update AttachmentModel.class.php


CVE: CVE-2022-0960

[{'lang': 'en', 'value': 'Stored XSS viva .properties file upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: file upload bug


CVE: CVE-2022-0961

[{'lang': 'en', 'value': 'The microweber application allows large characters to insert in the input field "post title" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: Update PostRequest.php


CVE: CVE-2022-0962

[{'lang': 'en', 'value': 'Stored XSS viva .webma file upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Upload file vulnerability


CVE: CVE-2022-0963

[{'lang': 'en', 'value': 'Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: Update Files.php


CVE: CVE-2022-0964

[{'lang': 'en', 'value': 'Stored XSS viva .webmv file upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Upload file vulnerability


CVE: CVE-2022-0965

[{'lang': 'en', 'value': 'Stored XSS viva .ofd file upload in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Upload file vulnerability


CVE: CVE-2022-0966

[{'lang': 'en', 'value': 'Stored XSS via File Upload in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.4.10.'}]

Fix commit: Upload file vulnerability


CVE: CVE-2022-0967

[{'lang': 'en', 'value': 'Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Upload file vulnerability


CVE: CVE-2022-0968

[{'lang': 'en', 'value': 'The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: user update requrest validation


CVE: CVE-2022-0970

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.'}]

Fix commit: Added XSS check for uploaded SVG files before they get stored


CVE: CVE-2022-0986

[{'lang': 'en', 'value': 'Reflected Cross-site Scripting (XSS) Vulnerability in GitHub repository hestiacp/hestiacp prior to 1.5.11.'}]

Fix commit: Patch out XSS  in edit server (#2471)


CVE: CVE-2022-0990

[{'lang': 'en', 'value': 'Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.'}]

Fix commit: Better epub cover parsing with multiple cover-image items
Code cosmetics
renamed variables
refactored xml page generation
refactored prepare author


CVE: CVE-2022-0991

[{'lang': 'en', 'value': 'Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.'}]

Fix commit: Sessions should be invalidated if password was changed #1238


CVE: CVE-2022-1000

[{'lang': 'en', 'value': 'Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.'}]

Fix commit: apply fix to path traversal vulnerability (#718)

Co-authored-by: João Maurício <joao.goncalves.mauricio@pwc.com>


CVE: CVE-2022-1021

[{'lang': 'en', 'value': 'Insecure Storage of Sensitive Information in GitHub repository chatwoot/chatwoot prior to 2.6.0.'}]

Fix commit: fix: Referer URL validation (#4309)

Fixes #354


CVE: CVE-2022-1022

[{'lang': 'en', 'value': 'Cross-site Scripting (XSS) - Stored in GitHub repository chatwoot/chatwoot prior to 2.5.0.'}]

Fix commit: chore: Sanitize html content  (#4498)


CVE: CVE-2022-1031

[{'lang': 'en', 'value': 'Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.'}]

Fix commit: Fix UAF in aaaa on arm/thumb switching ##crash

* Reported by @peacock-doris via huntr.dev
* Reproducer tests_65185
* This is a logic fix, but not the fully safe as changes in the code
  can result on UAF again, to properly protect r2 from crashing we
  need to break the ABI and add refcounting to RRegItem, which can't
  happen in 5.6.x because of ab


CVE: CVE-2022-1032

[{'lang': 'en', 'value': 'Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.'}]

Fix commit: Module upload validation (#857)

https://huntr.dev/bounties/cb9a0393-be34-4021-a06c-00c7791c7622/


CVE: CVE-2022-1033

[{'lang': 'en', 'value': 'Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6.'}]

Fix commit: Expense attachment validation fix (#855)

https://huntr.dev/bounties/4d7d4fc9-e0cf-42d3-b89c-6ea57a769045/


CVE: CVE-2022-1034

[{'lang': 'en', 'value': 'There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.'}]

Fix commit: Security update / 安全性更新


CVE: CVE-2022-1035

[{'lang': 'en', 'value': 'Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV.'}]

Fix commit: fixed #2146


CVE: CVE-2022-1036

[{'lang': 'en', 'value': 'Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior to 1.2.12.'}]

Fix commit: max 500 chars on password


CVE: CVE-2022-1044

[{'lang': 'en', 'value': 'Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.'}]

Fix commit: fix(uploads): removal of EXIF data on profile picture uploads


CVE: CVE-2022-1045

[{'lang': 'en', 'value': 'Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.'}]

Fix commit: fix(tickets): disable uploading .svg as an attachment


CVE: CVE-2022-1052

[{'lang': 'en', 'value': 'Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.'}]

Fix commit: Fix heap OOB read in macho.iterate_chained_fixups ##crash

* Reported by peacock-doris via huntr.dev
* Reproducer 'tests_65305'

mrmacete:
* Return early if segs_count is 0
* Initialize segs_count also for reconstructed fixups

Co-authored-by: pancake <pancake@nopcode.org>
Co-authored-by: Francesco Tamagni <mrmacete@protonmail


CVE: CVE-2022-1053

[{'lang': 'en', 'value': 'Keylime does not enforce that the agent registrar data is the same when the tenant uses it for validation of the EK and identity quote and the verifier for validating the integrity quote. This allows an attacker to use one AK, EK pair from a real TPM to pass EK validation and give the verifier an AK of a software TPM. A successful attack breaks the entire chain of trust because a not validated AK is used by the verifier. This issue is worse if the va


CVE: CVE-2022-1061

[{'lang': 'en', 'value': 'Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.'}]

Fix commit: Fix oobread in symbols header parsing ##bin


CVE: CVE-2022-1064

[{'lang': 'en', 'value': 'SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.'}]

Fix commit: Prevent sql injection through the ids of the blog comments


CVE: CVE-2022-1071

[{'lang': 'en', 'value': 'User after free in mrb_vm_exec in GitHub repository mruby/mruby prior to 3.2.'}]

Fix commit: vm.c: stack may be reallocated in functions calls.

Probably due to recursive VM calls via `mrb_funcall()`.