# Vulnerabilities published in 2022


- [CVE-2022-4744](https://insights.sbomify.com/CVE-2022-4744/): Memory corruption in Kernel (high 7.8)
- [CVE-2022-47439](https://insights.sbomify.com/CVE-2022-47439/): WordPress Open Graphite Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2022-47438](https://insights.sbomify.com/CVE-2022-47438/): WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47437](https://insights.sbomify.com/CVE-2022-47437/): WordPress WSB Brands Plugin <= 1.1.8 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47436](https://insights.sbomify.com/CVE-2022-47436/): WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47435](https://insights.sbomify.com/CVE-2022-47435/): WordPress WP-OliveCart Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47434](https://insights.sbomify.com/CVE-2022-47434/): WordPress PB SEO Friendly Images Plugin <= 4.0.5 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47433](https://insights.sbomify.com/CVE-2022-47433/): WordPress Multi Rating Plugin <= 5.0.5 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2022-47432](https://insights.sbomify.com/CVE-2022-47432/): WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection (medium 6.7)
- [CVE-2022-47431](https://insights.sbomify.com/CVE-2022-47431/): WordPress Open RDW kenteken voertuiginformatie Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS) (high 7.1)
- [CVE-2022-47430](https://insights.sbomify.com/CVE-2022-47430/): WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection (medium 6.7)
- [CVE-2022-4743](https://insights.sbomify.com/CVE-2022-4743/): Denial of service in SDL2 (high 7.5)
- [CVE-2022-47429](https://insights.sbomify.com/CVE-2022-47429/): WordPress Coming Soon Landing Page and Maintenance Mode WordPress Plugin plugin <= 2.2.0 - Broken Access Control (medium 5.3)
- [CVE-2022-47428](https://insights.sbomify.com/CVE-2022-47428/): WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection (medium 6.7)
- [CVE-2022-47427](https://insights.sbomify.com/CVE-2022-47427/): WordPress My Calendar Plugin <= 3.3.24.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-47426](https://insights.sbomify.com/CVE-2022-47426/): WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection (medium 6.0)
- [CVE-2022-47425](https://insights.sbomify.com/CVE-2022-47425/): Missing authorization in ARMember (medium 4.3)
- [CVE-2022-47424](https://insights.sbomify.com/CVE-2022-47424/): WordPress ARMember plugin <= 4.0.5 - Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-47423](https://insights.sbomify.com/CVE-2022-47423/): WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47422](https://insights.sbomify.com/CVE-2022-47422/): Cross-site request forgery in Accept Stripe Donation – AidWP (medium 4.3)
- [CVE-2022-47421](https://insights.sbomify.com/CVE-2022-47421/): WordPress ARMember (free) and ARMember (premium) plugins - vulnerable to Auth. Stored Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-47420](https://insights.sbomify.com/CVE-2022-47420/): WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection (medium 6.4)
- [CVE-2022-4742](https://insights.sbomify.com/CVE-2022-4742/): json-pointer index.js set prototype pollution (medium 6.3)
- [CVE-2022-47419](https://insights.sbomify.com/CVE-2022-47419/): Mayan EDMS Tag XSS (medium 5.4)
- [CVE-2022-47418](https://insights.sbomify.com/CVE-2022-47418/): LogicalDOC Document Version Comment Stored XSS (medium 5.4)
- [CVE-2022-47417](https://insights.sbomify.com/CVE-2022-47417/): LogicalDOC Document File Name Stored XSS (medium 5.4)
- [CVE-2022-47416](https://insights.sbomify.com/CVE-2022-47416/): LogicalDOC Chat Stored XSS (medium 5.4)
- [CVE-2022-47415](https://insights.sbomify.com/CVE-2022-47415/): LogicalDOC Messaging Stored XSS (medium 5.4)
- [CVE-2022-47414](https://insights.sbomify.com/CVE-2022-47414/): Cross-site scripting in OpenKM (medium 5.4)
- [CVE-2022-47413](https://insights.sbomify.com/CVE-2022-47413/): Cross-site scripting in OpenKM (medium 5.4)
- [CVE-2022-47412](https://insights.sbomify.com/CVE-2022-47412/): ONLYOFFICE Workspace Search Stored XSS (medium 5.4)
- [CVE-2022-47411](https://insights.sbomify.com/CVE-2022-47411/): "Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data (critical 9.1)
- [CVE-2022-47410](https://insights.sbomify.com/CVE-2022-47410/): "Newsletter subscriber management" (fp_newsletter) TYPO3 extension leaks subscriber data (critical 9.1)
- [CVE-2022-4741](https://insights.sbomify.com/CVE-2022-4741/): docconv XMLToText memory allocation (medium 4.3)
- [CVE-2022-47409](https://insights.sbomify.com/CVE-2022-47409/): Missing authorization in fp newsletter project:fp newsletter (critical 9.1)
- [CVE-2022-47408](https://insights.sbomify.com/CVE-2022-47408/): Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter) (critical 9.1)
- [CVE-2022-47407](https://insights.sbomify.com/CVE-2022-47407/): TYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz) (medium 6.5)
- [CVE-2022-47406](https://insights.sbomify.com/CVE-2022-47406/): TYPO3 vulnerable to Insufficient Session Expiration (medium 5.4)
- [CVE-2022-4740](https://insights.sbomify.com/CVE-2022-4740/): kkFileView picturesPreview setWatermarkAttribute cross site scripting (low 3.5)
- [CVE-2022-47395](https://insights.sbomify.com/CVE-2022-47395/): CVE-2022-47395 (high 8.1)
- [CVE-2022-47393](https://insights.sbomify.com/CVE-2022-47393/): CODESYS: Multiple products prone to improperly restricted memory operations (medium 6.5)
- [CVE-2022-47392](https://insights.sbomify.com/CVE-2022-47392/): CODESYS: Multiple products prone to Improper Input Validation (medium 6.5)
- [CVE-2022-47391](https://insights.sbomify.com/CVE-2022-47391/): CODESYS: Multiple products prone to Improper Input Validation (high 7.5)
- [CVE-2022-47390](https://insights.sbomify.com/CVE-2022-47390/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-4739](https://insights.sbomify.com/CVE-2022-4739/): SourceCodester School Dormitory Management System Admin Login sql injection (high 7.3)
- [CVE-2022-47389](https://insights.sbomify.com/CVE-2022-47389/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47388](https://insights.sbomify.com/CVE-2022-47388/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47387](https://insights.sbomify.com/CVE-2022-47387/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47386](https://insights.sbomify.com/CVE-2022-47386/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47385](https://insights.sbomify.com/CVE-2022-47385/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47384](https://insights.sbomify.com/CVE-2022-47384/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47383](https://insights.sbomify.com/CVE-2022-47383/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47382](https://insights.sbomify.com/CVE-2022-47382/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47381](https://insights.sbomify.com/CVE-2022-47381/): CODESYS: Multiple products prone to stack based out-of-bounds write (high 8.8)
- [CVE-2022-47380](https://insights.sbomify.com/CVE-2022-47380/): CODESYS: Multiple products prone to out-of-bounds write (high 8.8)
- [CVE-2022-4738](https://insights.sbomify.com/CVE-2022-4738/): SourceCodester Blood Bank Management System User Registration cross site scripting (medium 4.3)
- [CVE-2022-47379](https://insights.sbomify.com/CVE-2022-47379/): CODESYS: Multiple products prone to out-of-bounds write (high 8.8)
- [CVE-2022-47378](https://insights.sbomify.com/CVE-2022-47378/): CODESYS: Multiple products prone to Improper Input Validation (medium 6.5)
- [CVE-2022-47377](https://insights.sbomify.com/CVE-2022-47377/): Auth bypass in SICK SIM2000ST (LFT PPC) (critical 9.8)
- [CVE-2022-47376](https://insights.sbomify.com/CVE-2022-47376/): Information disclosure in Alaris Infusion Central (high 7.3)
- [CVE-2022-47375](https://insights.sbomify.com/CVE-2022-47375/): Memory corruption in SIMATIC S7-400 CPU 412-2 PN V7 (high 7.5)
- [CVE-2022-47374](https://insights.sbomify.com/CVE-2022-47374/): Denial of service in SIMATIC S7-400 CPU 412-2 PN V7 (high 7.5)
- [CVE-2022-47373](https://insights.sbomify.com/CVE-2022-47373/): Reflected Cross Site Scripting in Search Functionality of Module Library (medium 6.4)
- [CVE-2022-47372](https://insights.sbomify.com/CVE-2022-47372/): Stored cross-site scripting vulnerability in create event section (high 7.6)
- [CVE-2022-47371](https://insights.sbomify.com/CVE-2022-47371/): Use after free in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47370](https://insights.sbomify.com/CVE-2022-47370/): Denial of service in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.0)
- [CVE-2022-4737](https://insights.sbomify.com/CVE-2022-4737/): SourceCodester Blood Bank Management System login.php sql injection (high 7.3)
- [CVE-2022-47369](https://insights.sbomify.com/CVE-2022-47369/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.7)
- [CVE-2022-47368](https://insights.sbomify.com/CVE-2022-47368/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.7)
- [CVE-2022-47367](https://insights.sbomify.com/CVE-2022-47367/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.8)
- [CVE-2022-47366](https://insights.sbomify.com/CVE-2022-47366/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.4)
- [CVE-2022-47365](https://insights.sbomify.com/CVE-2022-47365/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.4)
- [CVE-2022-47364](https://insights.sbomify.com/CVE-2022-47364/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.7)
- [CVE-2022-47363](https://insights.sbomify.com/CVE-2022-47363/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.7)
- [CVE-2022-47362](https://insights.sbomify.com/CVE-2022-47362/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47361](https://insights.sbomify.com/CVE-2022-47361/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-47360](https://insights.sbomify.com/CVE-2022-47360/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4736](https://insights.sbomify.com/CVE-2022-4736/): Venganzas del Pasado cross site scripting (low 3.5)
- [CVE-2022-47359](https://insights.sbomify.com/CVE-2022-47359/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47358](https://insights.sbomify.com/CVE-2022-47358/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47357](https://insights.sbomify.com/CVE-2022-47357/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47356](https://insights.sbomify.com/CVE-2022-47356/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.0)
- [CVE-2022-47355](https://insights.sbomify.com/CVE-2022-47355/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.0)
- [CVE-2022-47354](https://insights.sbomify.com/CVE-2022-47354/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.0)
- [CVE-2022-47353](https://insights.sbomify.com/CVE-2022-47353/): Denial of service in T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47352](https://insights.sbomify.com/CVE-2022-47352/): Memory corruption in T610/T618 (medium 4.4)
- [CVE-2022-47351](https://insights.sbomify.com/CVE-2022-47351/): Memory corruption in T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-47350](https://insights.sbomify.com/CVE-2022-47350/): Memory corruption in SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-4735](https://insights.sbomify.com/CVE-2022-4735/): asrashley dash-live DOM Node media.js ready cross site scripting (low 3.5)
- [CVE-2022-47348](https://insights.sbomify.com/CVE-2022-47348/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.0)
- [CVE-2022-47347](https://insights.sbomify.com/CVE-2022-47347/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47346](https://insights.sbomify.com/CVE-2022-47346/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.0)
- [CVE-2022-47345](https://insights.sbomify.com/CVE-2022-47345/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47344](https://insights.sbomify.com/CVE-2022-47344/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47343](https://insights.sbomify.com/CVE-2022-47343/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47342](https://insights.sbomify.com/CVE-2022-47342/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-47341](https://insights.sbomify.com/CVE-2022-47341/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2022-47340](https://insights.sbomify.com/CVE-2022-47340/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4734](https://insights.sbomify.com/CVE-2022-4734/): Improper Removal of Sensitive Information Before Storage or Transfer in usememos/memos (high 8.1)
- [CVE-2022-47339](https://insights.sbomify.com/CVE-2022-47339/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/201/