# Vulnerabilities published in 2022 - [CVE-2022-48432](https://insights.sbomify.com/CVE-2022-48432/): Security feature bypass in IntelliJ IDEA (medium 5.2) - [CVE-2022-48431](https://insights.sbomify.com/CVE-2022-48431/): Security feature bypass in IntelliJ IDEA (medium 4.5) - [CVE-2022-48430](https://insights.sbomify.com/CVE-2022-48430/): Information disclosure in IntelliJ IDEA (medium 5.5) - [CVE-2022-4843](https://insights.sbomify.com/CVE-2022-4843/): NULL Pointer Dereference in radareorg/radare2 (medium 4.4) - [CVE-2022-48429](https://insights.sbomify.com/CVE-2022-48429/): Cross-site scripting in Hub (medium 4.6) - [CVE-2022-48428](https://insights.sbomify.com/CVE-2022-48428/): Cross-site scripting in TeamCity (medium 4.6) - [CVE-2022-48427](https://insights.sbomify.com/CVE-2022-48427/): Cross-site scripting in TeamCity (medium 4.6) - [CVE-2022-48426](https://insights.sbomify.com/CVE-2022-48426/): Cross-site scripting in TeamCity (medium 4.6) - [CVE-2022-48425](https://insights.sbomify.com/CVE-2022-48425/): Memory corruption in linux:linux kernel (high 7.8) - [CVE-2022-48424](https://insights.sbomify.com/CVE-2022-48424/): Denial of service in linux:linux kernel (high 7.8) - [CVE-2022-48423](https://insights.sbomify.com/CVE-2022-48423/): Memory corruption in linux:linux kernel (high 7.8) - [CVE-2022-48422](https://insights.sbomify.com/CVE-2022-48422/): Privilege escalation in onlyoffice:document server (high 7.8) - [CVE-2022-4842](https://insights.sbomify.com/CVE-2022-4842/): Null dereference in Kernel (medium 5.5) - [CVE-2022-4841](https://insights.sbomify.com/CVE-2022-4841/): Cross-site Scripting (XSS) - Stored in usememos/memos (high 8.6) - [CVE-2022-4840](https://insights.sbomify.com/CVE-2022-4840/): Cross-site Scripting (XSS) - Stored in usememos/memos (high 7.6) - [CVE-2022-48392](https://insights.sbomify.com/CVE-2022-48392/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-48391](https://insights.sbomify.com/CVE-2022-48391/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48390](https://insights.sbomify.com/CVE-2022-48390/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.3) - [CVE-2022-4839](https://insights.sbomify.com/CVE-2022-4839/): Cross-site Scripting (XSS) - Stored in usememos/memos (high 8.0) - [CVE-2022-48389](https://insights.sbomify.com/CVE-2022-48389/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48388](https://insights.sbomify.com/CVE-2022-48388/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-48387](https://insights.sbomify.com/CVE-2022-48387/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48386](https://insights.sbomify.com/CVE-2022-48386/): Use after free in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48385](https://insights.sbomify.com/CVE-2022-48385/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48384](https://insights.sbomify.com/CVE-2022-48384/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-48383](https://insights.sbomify.com/CVE-2022-48383/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-48382](https://insights.sbomify.com/CVE-2022-48382/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48381](https://insights.sbomify.com/CVE-2022-48381/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48380](https://insights.sbomify.com/CVE-2022-48380/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-4838](https://insights.sbomify.com/CVE-2022-4838/): Clean Login < 1.13.7 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48379](https://insights.sbomify.com/CVE-2022-48379/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48378](https://insights.sbomify.com/CVE-2022-48378/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48377](https://insights.sbomify.com/CVE-2022-48377/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48376](https://insights.sbomify.com/CVE-2022-48376/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48375](https://insights.sbomify.com/CVE-2022-48375/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48374](https://insights.sbomify.com/CVE-2022-48374/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48373](https://insights.sbomify.com/CVE-2022-48373/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48372](https://insights.sbomify.com/CVE-2022-48372/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4) - [CVE-2022-48371](https://insights.sbomify.com/CVE-2022-48371/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-48370](https://insights.sbomify.com/CVE-2022-48370/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-4837](https://insights.sbomify.com/CVE-2022-4837/): CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48369](https://insights.sbomify.com/CVE-2022-48369/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-48368](https://insights.sbomify.com/CVE-2022-48368/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-48367](https://insights.sbomify.com/CVE-2022-48367/): Object state limitation has no effect (critical 9.8) - [CVE-2022-48366](https://insights.sbomify.com/CVE-2022-48366/): Timing attack in eZ Platform Ibexa (low 3.7) - [CVE-2022-48365](https://insights.sbomify.com/CVE-2022-48365/): Company admin role gives excessive privileges in eZ Platform Ibexa (high 7.2) - [CVE-2022-48364](https://insights.sbomify.com/CVE-2022-48364/): Information disclosure in joinmastodon:mastodon (medium 4.3) - [CVE-2022-48363](https://insights.sbomify.com/CVE-2022-48363/): Null dereference in musicpd:music player daemon (high 7.5) - [CVE-2022-48362](https://insights.sbomify.com/CVE-2022-48362/): Path traversal in zohocorp:manageengine desktop central (high 8.8) - [CVE-2022-48361](https://insights.sbomify.com/CVE-2022-48361/): Path traversal in EMUI (medium 5.3) - [CVE-2022-48360](https://insights.sbomify.com/CVE-2022-48360/): Misconfiguration in EMUI (high 7.5) - [CVE-2022-4836](https://insights.sbomify.com/CVE-2022-4836/): Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48359](https://insights.sbomify.com/CVE-2022-48359/): Other in EMUI (high 7.5) - [CVE-2022-48358](https://insights.sbomify.com/CVE-2022-48358/): Open redirect in EMUI (high 7.4) - [CVE-2022-48357](https://insights.sbomify.com/CVE-2022-48357/): Race condition in EMUI (high 7.5) - [CVE-2022-48356](https://insights.sbomify.com/CVE-2022-48356/): Other in EMUI (high 7.5) - [CVE-2022-48355](https://insights.sbomify.com/CVE-2022-48355/): Memory corruption in EMUI (medium 6.5) - [CVE-2022-48354](https://insights.sbomify.com/CVE-2022-48354/): Memory corruption in EMUI (medium 6.5) - [CVE-2022-48353](https://insights.sbomify.com/CVE-2022-48353/): Privilege escalation in EMUI (critical 9.8) - [CVE-2022-48352](https://insights.sbomify.com/CVE-2022-48352/): Other in EMUI (high 7.5) - [CVE-2022-48351](https://insights.sbomify.com/CVE-2022-48351/): Misconfiguration in EMUI (high 7.5) - [CVE-2022-48350](https://insights.sbomify.com/CVE-2022-48350/): Missing authorization in EMUI (high 7.5) - [CVE-2022-4835](https://insights.sbomify.com/CVE-2022-4835/): Social Sharing Toolkit <= 2.6 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48349](https://insights.sbomify.com/CVE-2022-48349/): Auth bypass in EMUI (critical 9.1) - [CVE-2022-48348](https://insights.sbomify.com/CVE-2022-48348/): Information disclosure in EMUI (critical 9.1) - [CVE-2022-48347](https://insights.sbomify.com/CVE-2022-48347/): Information disclosure in EMUI (high 7.5) - [CVE-2022-48346](https://insights.sbomify.com/CVE-2022-48346/): Security feature bypass in EMUI (high 7.5) - [CVE-2022-48345](https://insights.sbomify.com/CVE-2022-48345/): @braintree/sanitize-url Cross-site Scripting vulnerability (medium 6.1) - [CVE-2022-48344](https://insights.sbomify.com/CVE-2022-48344/): Cross-site scripting in TeamCity (medium 5.4) - [CVE-2022-48343](https://insights.sbomify.com/CVE-2022-48343/): Cross-site scripting in TeamCity (medium 5.4) - [CVE-2022-48342](https://insights.sbomify.com/CVE-2022-48342/): Misconfiguration in TeamCity (medium 5.2) - [CVE-2022-48341](https://insights.sbomify.com/CVE-2022-48341/): Privilege escalation in thingsboard:thingsboard (high 8.8) - [CVE-2022-48340](https://insights.sbomify.com/CVE-2022-48340/): Use after free in gluster:glusterfs (high 7.5) - [CVE-2022-4834](https://insights.sbomify.com/CVE-2022-4834/): CPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48339](https://insights.sbomify.com/CVE-2022-48339/): Command injection in gnu:emacs (high 7.8) - [CVE-2022-48338](https://insights.sbomify.com/CVE-2022-48338/): Command injection in gnu:emacs (high 7.3) - [CVE-2022-48337](https://insights.sbomify.com/CVE-2022-48337/): Command injection in debian:debian linux (critical 9.8) - [CVE-2022-48336](https://insights.sbomify.com/CVE-2022-48336/): Integer overflow in widevine:trusted application (critical 9.8) - [CVE-2022-48335](https://insights.sbomify.com/CVE-2022-48335/): Integer overflow in widevine:trusted application (critical 9.8) - [CVE-2022-48334](https://insights.sbomify.com/CVE-2022-48334/): Integer overflow in widevine:trusted application (critical 9.8) - [CVE-2022-48333](https://insights.sbomify.com/CVE-2022-48333/): Integer overflow in widevine:trusted application (critical 9.8) - [CVE-2022-48332](https://insights.sbomify.com/CVE-2022-48332/): Integer overflow in widevine:trusted application (critical 9.8) - [CVE-2022-48331](https://insights.sbomify.com/CVE-2022-48331/): Integer overflow in widevine:trusted application (critical 9.8) - [CVE-2022-48330](https://insights.sbomify.com/CVE-2022-48330/): Memory corruption in FLMG-10 (high 8.0) - [CVE-2022-4833](https://insights.sbomify.com/CVE-2022-4833/): YourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48329](https://insights.sbomify.com/CVE-2022-48329/): Other in misp-project:misp (critical 9.8) - [CVE-2022-48328](https://insights.sbomify.com/CVE-2022-48328/): Other in misp-project:misp (critical 9.8) - [CVE-2022-48327](https://insights.sbomify.com/CVE-2022-48327/): Cross-site scripting in mapos:map-os (medium 6.1) - [CVE-2022-48326](https://insights.sbomify.com/CVE-2022-48326/): Cross-site scripting in mapos:map-os (medium 6.1) - [CVE-2022-48325](https://insights.sbomify.com/CVE-2022-48325/): Cross-site scripting in mapos:map-os (medium 6.1) - [CVE-2022-48324](https://insights.sbomify.com/CVE-2022-48324/): Cross-site scripting in mapos:map-os (medium 6.1) - [CVE-2022-48323](https://insights.sbomify.com/CVE-2022-48323/): Path traversal in sunlogin:sunflower (critical 9.8) - [CVE-2022-48322](https://insights.sbomify.com/CVE-2022-48322/): Memory corruption in netgear:mr60 firmware (critical 9.8) - [CVE-2022-48321](https://insights.sbomify.com/CVE-2022-48321/): SSRF in agent-receiver API (medium 6.8) - [CVE-2022-48320](https://insights.sbomify.com/CVE-2022-48320/): CSRF in add-visual endpoint (medium 5.4) - [CVE-2022-4832](https://insights.sbomify.com/CVE-2022-4832/): Store Locator WordPress < 1.4.9 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-48319](https://insights.sbomify.com/CVE-2022-48319/): Host secret disclosed in Checkmk logs (medium 6.5) - [CVE-2022-48318](https://insights.sbomify.com/CVE-2022-48318/): Insecure access control mechanisms for RestAPI documentation (medium 5.3) - [CVE-2022-48317](https://insights.sbomify.com/CVE-2022-48317/): Insecure Termination of RestAPI Session Tokens (medium 5.6) - [CVE-2022-48314](https://insights.sbomify.com/CVE-2022-48314/): Auth bypass in EMUI (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/195/