# Vulnerabilities published in 2022


- [CVE-2022-47544](https://insights.sbomify.com/CVE-2022-47544/): Security feature bypass in siren:investigate (critical 9.8)
- [CVE-2022-47543](https://insights.sbomify.com/CVE-2022-47543/): Missing authorization in siren:investigate (medium 5.3)
- [CVE-2022-47542](https://insights.sbomify.com/CVE-2022-47542/): Privilege escalation in red-gate:sql monitor (high 8.8)
- [CVE-2022-4754](https://insights.sbomify.com/CVE-2022-4754/): Easy Social Box <= 4.1.2 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-47532](https://insights.sbomify.com/CVE-2022-47532/): SQL injection in filerun:filerun (critical 9.8)
- [CVE-2022-47531](https://insights.sbomify.com/CVE-2022-47531/): Security feature bypass in ericsson:evolved packet gateway (high 8.8)
- [CVE-2022-4753](https://insights.sbomify.com/CVE-2022-4753/): Print-O-Matic < 2.1.8 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-47529](https://insights.sbomify.com/CVE-2022-47529/): Privilege escalation in rsa:netwitness (medium 6.7)
- [CVE-2022-47526](https://insights.sbomify.com/CVE-2022-47526/): Path traversal in fox-it:fox datadiode firmware (critical 9.8)
- [CVE-2022-47525](https://insights.sbomify.com/CVE-2022-47525/): Denial of service in fox-it:fox datadiode firmware (high 7.5)
- [CVE-2022-47524](https://insights.sbomify.com/CVE-2022-47524/): Security feature bypass in f-secure:safe (medium 5.4)
- [CVE-2022-47523](https://insights.sbomify.com/CVE-2022-47523/): SQL injection in zohocorp:manageengine access manager plus (critical 9.8)
- [CVE-2022-47522](https://insights.sbomify.com/CVE-2022-47522/): Auth bypass in ieee:ieee 802.11 (high 7.5)
- [CVE-2022-47521](https://insights.sbomify.com/CVE-2022-47521/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2022-47520](https://insights.sbomify.com/CVE-2022-47520/): Memory corruption in debian:debian linux (high 7.1)
- [CVE-2022-4752](https://insights.sbomify.com/CVE-2022-4752/): Opening Hours <= 2.3.0 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-47519](https://insights.sbomify.com/CVE-2022-47519/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2022-47518](https://insights.sbomify.com/CVE-2022-47518/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2022-47517](https://insights.sbomify.com/CVE-2022-47517/): Memory corruption in drachtio:drachtio-server (high 7.5)
- [CVE-2022-47516](https://insights.sbomify.com/CVE-2022-47516/): Denial of service in drachtio:drachtio-server (high 7.5)
- [CVE-2022-47515](https://insights.sbomify.com/CVE-2022-47515/): Denial of service in drachtio:drachtio-server (high 7.5)
- [CVE-2022-47514](https://insights.sbomify.com/CVE-2022-47514/): XML external entity in xml-rpc.net project:xml-rpc.net (high 8.8)
- [CVE-2022-47512](https://insights.sbomify.com/CVE-2022-47512/): Sensitive Data Disclosure Vulnerability (medium 5.5)
- [CVE-2022-4751](https://insights.sbomify.com/CVE-2022-4751/): Word Balloon < 4.19.3 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-47509](https://insights.sbomify.com/CVE-2022-47509/): SolarWinds Platform Incorrect Input Neutralization Vulnerability (medium 6.1)
- [CVE-2022-47508](https://insights.sbomify.com/CVE-2022-47508/): Disable NTLM: SAM 2022.4 (high 7.5)
- [CVE-2022-47507](https://insights.sbomify.com/CVE-2022-47507/): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (high 7.2)
- [CVE-2022-47506](https://insights.sbomify.com/CVE-2022-47506/): SolarWinds Platform Directory Traversal Vulnerability (high 7.8)
- [CVE-2022-47505](https://insights.sbomify.com/CVE-2022-47505/): SolarWinds Platform Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2022-47504](https://insights.sbomify.com/CVE-2022-47504/): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (high 7.2)
- [CVE-2022-47503](https://insights.sbomify.com/CVE-2022-47503/): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (high 7.2)
- [CVE-2022-47502](https://insights.sbomify.com/CVE-2022-47502/): Apache OpenOffice: Macro URL arbitrary script execution (high 7.8)
- [CVE-2022-47501](https://insights.sbomify.com/CVE-2022-47501/): Apache OFBiz: Arbitrary file reading vulnerability (high 7.5)
- [CVE-2022-47500](https://insights.sbomify.com/CVE-2022-47500/): Apache Helix: Open redirect (medium 6.1)
- [CVE-2022-4750](https://insights.sbomify.com/CVE-2022-4750/): WP Responsive Testimonials Slider And Widget <= 1.5 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-47499](https://insights.sbomify.com/CVE-2022-47499/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47498](https://insights.sbomify.com/CVE-2022-47498/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47497](https://insights.sbomify.com/CVE-2022-47497/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47496](https://insights.sbomify.com/CVE-2022-47496/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47495](https://insights.sbomify.com/CVE-2022-47495/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47494](https://insights.sbomify.com/CVE-2022-47494/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47493](https://insights.sbomify.com/CVE-2022-47493/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47492](https://insights.sbomify.com/CVE-2022-47492/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47491](https://insights.sbomify.com/CVE-2022-47491/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47490](https://insights.sbomify.com/CVE-2022-47490/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4749](https://insights.sbomify.com/CVE-2022-4749/): Posts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-47489](https://insights.sbomify.com/CVE-2022-47489/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47488](https://insights.sbomify.com/CVE-2022-47488/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47487](https://insights.sbomify.com/CVE-2022-47487/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47486](https://insights.sbomify.com/CVE-2022-47486/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47485](https://insights.sbomify.com/CVE-2022-47485/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47484](https://insights.sbomify.com/CVE-2022-47484/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47483](https://insights.sbomify.com/CVE-2022-47483/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47482](https://insights.sbomify.com/CVE-2022-47482/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47481](https://insights.sbomify.com/CVE-2022-47481/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47480](https://insights.sbomify.com/CVE-2022-47480/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4748](https://insights.sbomify.com/CVE-2022-4748/): FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal (medium 5.5)
- [CVE-2022-47479](https://insights.sbomify.com/CVE-2022-47479/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47478](https://insights.sbomify.com/CVE-2022-47478/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47477](https://insights.sbomify.com/CVE-2022-47477/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47476](https://insights.sbomify.com/CVE-2022-47476/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47475](https://insights.sbomify.com/CVE-2022-47475/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47474](https://insights.sbomify.com/CVE-2022-47474/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47473](https://insights.sbomify.com/CVE-2022-47473/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47472](https://insights.sbomify.com/CVE-2022-47472/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47471](https://insights.sbomify.com/CVE-2022-47471/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47470](https://insights.sbomify.com/CVE-2022-47470/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-4747](https://insights.sbomify.com/CVE-2022-4747/): Post Category Image With Grid and Slider < 1.4.8 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-47469](https://insights.sbomify.com/CVE-2022-47469/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47468](https://insights.sbomify.com/CVE-2022-47468/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47467](https://insights.sbomify.com/CVE-2022-47467/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47466](https://insights.sbomify.com/CVE-2022-47466/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47465](https://insights.sbomify.com/CVE-2022-47465/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47464](https://insights.sbomify.com/CVE-2022-47464/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47463](https://insights.sbomify.com/CVE-2022-47463/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47462](https://insights.sbomify.com/CVE-2022-47462/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2022-47461](https://insights.sbomify.com/CVE-2022-47461/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2022-47460](https://insights.sbomify.com/CVE-2022-47460/): Use after free in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4746](https://insights.sbomify.com/CVE-2022-4746/): FluentAuth < 1.0.2 - Bypass blocks by IP Spoofing (high 7.5)
- [CVE-2022-47459](https://insights.sbomify.com/CVE-2022-47459/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47458](https://insights.sbomify.com/CVE-2022-47458/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47457](https://insights.sbomify.com/CVE-2022-47457/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47456](https://insights.sbomify.com/CVE-2022-47456/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47455](https://insights.sbomify.com/CVE-2022-47455/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47454](https://insights.sbomify.com/CVE-2022-47454/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47453](https://insights.sbomify.com/CVE-2022-47453/): Denial of service in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47452](https://insights.sbomify.com/CVE-2022-47452/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47451](https://insights.sbomify.com/CVE-2022-47451/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.3)
- [CVE-2022-47450](https://insights.sbomify.com/CVE-2022-47450/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4745](https://insights.sbomify.com/CVE-2022-4745/): WP Customer Area < 8.1.4 - Unauthorised Actions via CSRF (medium 6.1)
- [CVE-2022-47449](https://insights.sbomify.com/CVE-2022-47449/): Cross-site scripting in Cart Lift – Abandoned Cart Recovery for WooCommerce and EDD (high 7.1)
- [CVE-2022-47448](https://insights.sbomify.com/CVE-2022-47448/): WordPress xili-tidy-tags Plugin <= 1.12.03 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-47447](https://insights.sbomify.com/CVE-2022-47447/): WordPress WP-Advanced-Search Plugin <= 3.3.8 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2022-47446](https://insights.sbomify.com/CVE-2022-47446/): WordPress Store Locator Plugin <= 3.98.7 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-47445](https://insights.sbomify.com/CVE-2022-47445/): WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection (high 8.2)
- [CVE-2022-47444](https://insights.sbomify.com/CVE-2022-47444/): WordPress ProfilePress Plugin <= 4.4.1 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2022-47443](https://insights.sbomify.com/CVE-2022-47443/): WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2022-47442](https://insights.sbomify.com/CVE-2022-47442/): WordPress UsersWP Plugin <= 1.2.3.9 is vulnerable to CSV Injection (medium 5.8)
- [CVE-2022-47441](https://insights.sbomify.com/CVE-2022-47441/): WordPress Charitable Plugin <= 1.7.0.10 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2022-47440](https://insights.sbomify.com/CVE-2022-47440/): WordPress My Tickets Plugin <= 1.9.10 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/200/