# Vulnerabilities published in 2022


- [CVE-2022-48313](https://insights.sbomify.com/CVE-2022-48313/): Auth bypass in EMUI (medium 6.5)
- [CVE-2022-48312](https://insights.sbomify.com/CVE-2022-48312/): Memory corruption in EMUI (critical 9.1)
- [CVE-2022-48311](https://insights.sbomify.com/CVE-2022-48311/): Cross-site scripting in hp:deskjet 2540 a9u23b firmware (critical 9.0)
- [CVE-2022-48310](https://insights.sbomify.com/CVE-2022-48310/): Information disclosure in Sophos Connect Client (medium 5.5)
- [CVE-2022-4831](https://insights.sbomify.com/CVE-2022-4831/): Cross-site scripting in Custom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro (medium 5.4)
- [CVE-2022-48309](https://insights.sbomify.com/CVE-2022-48309/): Cross-site request forgery in Sophos Connect Client (medium 4.3)
- [CVE-2022-48308](https://insights.sbomify.com/CVE-2022-48308/): Security feature bypass in sls-logging (medium 6.3)
- [CVE-2022-48307](https://insights.sbomify.com/CVE-2022-48307/): Weak cryptography in Foundry Magritte (medium 6.3)
- [CVE-2022-48306](https://insights.sbomify.com/CVE-2022-48306/): Gotham Chat IRC help does not validate hostnames in TLS certificates (medium 5.7)
- [CVE-2022-48305](https://insights.sbomify.com/CVE-2022-48305/): Auth bypass in Simba-AL00 (medium 5.5)
- [CVE-2022-48303](https://insights.sbomify.com/CVE-2022-48303/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2022-48302](https://insights.sbomify.com/CVE-2022-48302/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-48301](https://insights.sbomify.com/CVE-2022-48301/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-48300](https://insights.sbomify.com/CVE-2022-48300/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-4830](https://insights.sbomify.com/CVE-2022-4830/): Paid Memberships Pro < 2.9.9 - Contributor+ Stored XSS via Shortcode (medium 6.1)
- [CVE-2022-48299](https://insights.sbomify.com/CVE-2022-48299/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-48298](https://insights.sbomify.com/CVE-2022-48298/): Memory corruption in EMUI (high 7.5)
- [CVE-2022-48297](https://insights.sbomify.com/CVE-2022-48297/): Memory corruption in EMUI (high 7.5)
- [CVE-2022-48296](https://insights.sbomify.com/CVE-2022-48296/): Missing authorization in EMUI (medium 5.3)
- [CVE-2022-48295](https://insights.sbomify.com/CVE-2022-48295/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-48294](https://insights.sbomify.com/CVE-2022-48294/): Auth bypass in EMUI (high 7.5)
- [CVE-2022-48293](https://insights.sbomify.com/CVE-2022-48293/): Memory corruption in EMUI (medium 6.5)
- [CVE-2022-48292](https://insights.sbomify.com/CVE-2022-48292/): Memory corruption in EMUI (medium 6.5)
- [CVE-2022-48291](https://insights.sbomify.com/CVE-2022-48291/): Auth bypass in EMUI (medium 6.5)
- [CVE-2022-48290](https://insights.sbomify.com/CVE-2022-48290/): Security feature bypass in HarmonyOS (critical 9.1)
- [CVE-2022-4829](https://insights.sbomify.com/CVE-2022-4829/): Show-Hide / Collapse-Expand < 1.3.0 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-48289](https://insights.sbomify.com/CVE-2022-48289/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-48288](https://insights.sbomify.com/CVE-2022-48288/): Missing authorization in EMUI (high 7.5)
- [CVE-2022-48287](https://insights.sbomify.com/CVE-2022-48287/): Security feature bypass in EMUI (high 7.5)
- [CVE-2022-48286](https://insights.sbomify.com/CVE-2022-48286/): Privilege escalation in EMUI (high 7.5)
- [CVE-2022-48285](https://insights.sbomify.com/CVE-2022-48285/): JSZip contains Path Traversal via loadAsync (high 7.3)
- [CVE-2022-48284](https://insights.sbomify.com/CVE-2022-48284/): Privilege escalation in HarmonyOS AILife Solution 6.0 (critical 9.8)
- [CVE-2022-48283](https://insights.sbomify.com/CVE-2022-48283/): Privilege escalation in HarmonyOS AILife Solution 6.0 (critical 9.8)
- [CVE-2022-48282](https://insights.sbomify.com/CVE-2022-48282/): Deserializing compromised object with MongoDB .NET/C# Driver may cause remote code execution (medium 6.6)
- [CVE-2022-48281](https://insights.sbomify.com/CVE-2022-48281/): Memory corruption in debian:debian linux (medium 5.5)
- [CVE-2022-4828](https://insights.sbomify.com/CVE-2022-4828/): Bold Timeline Lite < 1.1.5 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-48279](https://insights.sbomify.com/CVE-2022-48279/): Security feature bypass in debian:debian linux (high 7.5)
- [CVE-2022-4827](https://insights.sbomify.com/CVE-2022-4827/): WP Tiles <= 1.1.2 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-48261](https://insights.sbomify.com/CVE-2022-48261/): Other in BiSheng-WNM (high 7.5)
- [CVE-2022-48260](https://insights.sbomify.com/CVE-2022-48260/): Memory corruption in BiSheng-WNM (high 7.5)
- [CVE-2022-4826](https://insights.sbomify.com/CVE-2022-4826/): Simple Tooltips < 2.1.4 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-48259](https://insights.sbomify.com/CVE-2022-48259/): Command injection in BiSheng-WNM (critical 9.8)
- [CVE-2022-48258](https://insights.sbomify.com/CVE-2022-48258/): Information disclosure in eternal terminal project:eternal terminal (medium 5.3)
- [CVE-2022-48257](https://insights.sbomify.com/CVE-2022-48257/): Other in eternal terminal project:eternal terminal (medium 5.3)
- [CVE-2022-48256](https://insights.sbomify.com/CVE-2022-48256/): Denial of service in technitium:dns server (high 7.5)
- [CVE-2022-48255](https://insights.sbomify.com/CVE-2022-48255/): Command injection in BiSheng-WNM (critical 9.8)
- [CVE-2022-48254](https://insights.sbomify.com/CVE-2022-48254/): Auth bypass in Leia-B29 (medium 4.6)
- [CVE-2022-48253](https://insights.sbomify.com/CVE-2022-48253/): Path traversal in nazgul:nostromo (critical 9.8)
- [CVE-2022-48252](https://insights.sbomify.com/CVE-2022-48252/): Command injection in pi.alert project:pi.alert (critical 9.8)
- [CVE-2022-48251](https://insights.sbomify.com/CVE-2022-48251/): Weak cryptography in arm:cortex-a53 firmware (high 7.5)
- [CVE-2022-48250](https://insights.sbomify.com/CVE-2022-48250/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-4825](https://insights.sbomify.com/CVE-2022-4825/): WP-ShowHide < 1.05 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-48249](https://insights.sbomify.com/CVE-2022-48249/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48248](https://insights.sbomify.com/CVE-2022-48248/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48247](https://insights.sbomify.com/CVE-2022-48247/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48246](https://insights.sbomify.com/CVE-2022-48246/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48245](https://insights.sbomify.com/CVE-2022-48245/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48244](https://insights.sbomify.com/CVE-2022-48244/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48243](https://insights.sbomify.com/CVE-2022-48243/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-48242](https://insights.sbomify.com/CVE-2022-48242/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-48241](https://insights.sbomify.com/CVE-2022-48241/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-48240](https://insights.sbomify.com/CVE-2022-48240/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-4824](https://insights.sbomify.com/CVE-2022-4824/): WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-48239](https://insights.sbomify.com/CVE-2022-48239/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-48238](https://insights.sbomify.com/CVE-2022-48238/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-48237](https://insights.sbomify.com/CVE-2022-48237/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-48236](https://insights.sbomify.com/CVE-2022-48236/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-48235](https://insights.sbomify.com/CVE-2022-48235/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-48234](https://insights.sbomify.com/CVE-2022-48234/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-48233](https://insights.sbomify.com/CVE-2022-48233/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-48232](https://insights.sbomify.com/CVE-2022-48232/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-48231](https://insights.sbomify.com/CVE-2022-48231/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-48230](https://insights.sbomify.com/CVE-2022-48230/): Denial of service in BiSheng-WNM (high 7.5)
- [CVE-2022-4823](https://insights.sbomify.com/CVE-2022-4823/): InSTEDD Nuntium geopoll_controller.rb timing discrepancy (low 3.1)
- [CVE-2022-48228](https://insights.sbomify.com/CVE-2022-48228/): Misconfiguration in gbgplc:acuant asureid sentinel (medium 5.5)
- [CVE-2022-48227](https://insights.sbomify.com/CVE-2022-48227/): Privilege escalation in gbgplc:acuant asureid sentinel (high 7.8)
- [CVE-2022-48226](https://insights.sbomify.com/CVE-2022-48226/): Privilege escalation in gbgplc:acuant acufill sdk (high 8.4)
- [CVE-2022-48225](https://insights.sbomify.com/CVE-2022-48225/): Privilege escalation in gbgplc:acuant acufill sdk (high 7.3)
- [CVE-2022-48224](https://insights.sbomify.com/CVE-2022-48224/): Privilege escalation in gbgplc:acuant acufill sdk (high 7.3)
- [CVE-2022-48223](https://insights.sbomify.com/CVE-2022-48223/): Race condition in gbgplc:acuant acufill sdk (medium 6.7)
- [CVE-2022-48222](https://insights.sbomify.com/CVE-2022-48222/): Privilege escalation in gbgplc:acuant acufill sdk (high 7.8)
- [CVE-2022-48221](https://insights.sbomify.com/CVE-2022-48221/): Race condition in gbgplc:acuant acufill sdk (high 7.5)
- [CVE-2022-48220](https://insights.sbomify.com/CVE-2022-48220/): Security feature bypass in Certain HP Desktop PC products (medium 6.4)
- [CVE-2022-4822](https://insights.sbomify.com/CVE-2022-4822/): FlatPress Setup main.lib.php cross site scripting (low 2.4)
- [CVE-2022-48219](https://insights.sbomify.com/CVE-2022-48219/): Security feature bypass in Certain HP Desktop PC products (medium 6.4)
- [CVE-2022-48217](https://insights.sbomify.com/CVE-2022-48217/): Other in tradr-project:tf remapper (high 8.1)
- [CVE-2022-48216](https://insights.sbomify.com/CVE-2022-48216/): Uniswap Universal Router Incorrect Authorization vulnerability (high 7.5)
- [CVE-2022-4821](https://insights.sbomify.com/CVE-2022-4821/): FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting (low 2.4)
- [CVE-2022-4820](https://insights.sbomify.com/CVE-2022-4820/): FlatPress Admin Area admin.entry.list.php cross site scripting (low 3.5)
- [CVE-2022-48199](https://insights.sbomify.com/CVE-2022-48199/): Privilege escalation in softperfect:networx (high 8.8)
- [CVE-2022-48198](https://insights.sbomify.com/CVE-2022-48198/): Other in ntpd driver project:ntpd driver (critical 9.8)
- [CVE-2022-48197](https://insights.sbomify.com/CVE-2022-48197/): Cross-site scripting in yui project:yui (medium 6.1)
- [CVE-2022-48196](https://insights.sbomify.com/CVE-2022-48196/): Memory corruption in netgear:r6400v2 firmware (high 7.4)
- [CVE-2022-48195](https://insights.sbomify.com/CVE-2022-48195/): mellium.im/sasl authentication failure due to insufficient nonce randomness (critical 9.8)
- [CVE-2022-48194](https://insights.sbomify.com/CVE-2022-48194/): File upload in tp-link:tl-wr902ac firmware (high 8.8)
- [CVE-2022-48193](https://insights.sbomify.com/CVE-2022-48193/): Weak ciphers vulnerability in Softing smartLink SW-HT (medium 5.9)
- [CVE-2022-48192](https://insights.sbomify.com/CVE-2022-48192/): Cross-site scripting vulnerability in Softing smartLink SW-HT (high 7.2)
- [CVE-2022-48191](https://insights.sbomify.com/CVE-2022-48191/): Race condition in Trend Micro Maxium Security (Consumer) (high 7.0)
- [CVE-2022-4819](https://insights.sbomify.com/CVE-2022-4819/): HotCRP cross site scripting (low 2.4)
- [CVE-2022-48189](https://insights.sbomify.com/CVE-2022-48189/): Other in ThinkPad BIOS (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/196/