# Vulnerabilities published in 2022 - [CVE-2022-46699](https://insights.sbomify.com/CVE-2022-46699/): Memory corruption in tvOS (high 8.8) - [CVE-2022-46698](https://insights.sbomify.com/CVE-2022-46698/): Information disclosure in iCloud for Windows (medium 6.5) - [CVE-2022-46697](https://insights.sbomify.com/CVE-2022-46697/): Memory corruption in macOS (high 7.8) - [CVE-2022-46696](https://insights.sbomify.com/CVE-2022-46696/): Memory corruption in tvOS (high 8.8) - [CVE-2022-46695](https://insights.sbomify.com/CVE-2022-46695/): Other in tvOS (medium 6.5) - [CVE-2022-46694](https://insights.sbomify.com/CVE-2022-46694/): Memory corruption in tvOS (high 7.8) - [CVE-2022-46693](https://insights.sbomify.com/CVE-2022-46693/): Memory corruption in iCloud for Windows (high 7.8) - [CVE-2022-46692](https://insights.sbomify.com/CVE-2022-46692/): Security feature bypass in iCloud for Windows (medium 5.5) - [CVE-2022-46691](https://insights.sbomify.com/CVE-2022-46691/): Memory corruption in tvOS (high 8.8) - [CVE-2022-46690](https://insights.sbomify.com/CVE-2022-46690/): Memory corruption in tvOS (high 7.8) - [CVE-2022-4669](https://insights.sbomify.com/CVE-2022-4669/): Page Builder: Live Composer < 1.5.23 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46689](https://insights.sbomify.com/CVE-2022-46689/): Race condition in macOS (high 7.0) - [CVE-2022-46688](https://insights.sbomify.com/CVE-2022-46688/): Jenkins Sonar Gerrit Plugin vulnerable to Cross-Site Request Forgery (medium 6.5) - [CVE-2022-46687](https://insights.sbomify.com/CVE-2022-46687/): Cross-site Scripting in Jenkins Spring Config Plugin (medium 5.4) - [CVE-2022-46686](https://insights.sbomify.com/CVE-2022-46686/): Jenkins Custom Build Properties Plugin vulnerable to Cross-site Scripting (medium 5.4) - [CVE-2022-46685](https://insights.sbomify.com/CVE-2022-46685/): Jenkins Gitea Plugin vulnerable to Cleartext Transmission of Sensitive Information (medium 4.3) - [CVE-2022-46684](https://insights.sbomify.com/CVE-2022-46684/): Stored XSS vulnerability in Jenkins Checkmarx Plugin (medium 5.4) - [CVE-2022-46683](https://insights.sbomify.com/CVE-2022-46683/): Jenkins Google Login Plugin Open Redirect vulnerability (medium 6.1) - [CVE-2022-46682](https://insights.sbomify.com/CVE-2022-46682/): Jenkins Plot Plugin XML External Entity Reference vulnerability (critical 9.8) - [CVE-2022-46680](https://insights.sbomify.com/CVE-2022-46680/): Information disclosure in PowerLogic PM8000 (high 8.8) - [CVE-2022-4668](https://insights.sbomify.com/CVE-2022-4668/): Easy Appointments < 3.11.2 - Contributor+ Stored XSS in Shortcode (medium 5.4) - [CVE-2022-46679](https://insights.sbomify.com/CVE-2022-46679/): Denial of service in PowerScale OneFS (medium 6.5) - [CVE-2022-46678](https://insights.sbomify.com/CVE-2022-46678/): Missing authorization in Wyse Management Suite (medium 4.9) - [CVE-2022-46677](https://insights.sbomify.com/CVE-2022-46677/): Missing authorization in Wyse Management Suite (medium 6.8) - [CVE-2022-46676](https://insights.sbomify.com/CVE-2022-46676/): Missing authorization in Wyse Management Suite (medium 4.9) - [CVE-2022-46675](https://insights.sbomify.com/CVE-2022-46675/): Information disclosure in Wyse Management Suite (medium 5.3) - [CVE-2022-46670](https://insights.sbomify.com/CVE-2022-46670/): Rockwell Automation MicroLogix 1100 & 1400 Vulnerable to Cross-Site Scripting Attack (high 7.1) - [CVE-2022-4667](https://insights.sbomify.com/CVE-2022-4667/): RSS Aggregator by Feedzy < 4.1.1 - Contributor+ Stored XSS (medium 5.4) - [CVE-2022-46664](https://insights.sbomify.com/CVE-2022-46664/): Missing authorization in Mendix Workflow Commons (high 8.1) - [CVE-2022-46663](https://insights.sbomify.com/CVE-2022-46663/): Security feature bypass in fedoraproject:fedora (high 7.5) - [CVE-2022-46662](https://insights.sbomify.com/CVE-2022-46662/): Privilege escalation in Roxio Creator LJB (medium 6.7) - [CVE-2022-46660](https://insights.sbomify.com/CVE-2022-46660/): File upload in Proficy Historian (high 7.5) - [CVE-2022-4666](https://insights.sbomify.com/CVE-2022-4666/): Markup <= 4.8.1 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46658](https://insights.sbomify.com/CVE-2022-46658/): CVE-2022-46658 (medium 6.5) - [CVE-2022-46656](https://insights.sbomify.com/CVE-2022-46656/): Privilege escalation in Intel(R) NUC Pro Software Suite (medium 6.7) - [CVE-2022-46651](https://insights.sbomify.com/CVE-2022-46651/): Apache Airflow: Security vulnerability on AirFlow Connections (medium 6.5) - [CVE-2022-46650](https://insights.sbomify.com/CVE-2022-46650/): Information disclosure in ALEOS (medium 4.9) - [CVE-2022-4665](https://insights.sbomify.com/CVE-2022-4665/): Unrestricted Upload of File with Dangerous Type in ampache/ampache (low 3.1) - [CVE-2022-46649](https://insights.sbomify.com/CVE-2022-46649/): Command injection in ALEOS (high 8.8) - [CVE-2022-46648](https://insights.sbomify.com/CVE-2022-46648/): ruby-git has potential remote code execution vulnerability (high 8.0) - [CVE-2022-46647](https://insights.sbomify.com/CVE-2022-46647/): Information disclosure in Intel Unison software (low 2.5) - [CVE-2022-46646](https://insights.sbomify.com/CVE-2022-46646/): Information disclosure in Intel Unison software (low 2.2) - [CVE-2022-46645](https://insights.sbomify.com/CVE-2022-46645/): Denial of service in Intel(R) Smart Campus Android application (medium 5.0) - [CVE-2022-46642](https://insights.sbomify.com/CVE-2022-46642/): Command injection in dlink:dir-846 firmware (critical 9.9) - [CVE-2022-46641](https://insights.sbomify.com/CVE-2022-46641/): Command injection in dlink:dir-846 firmware (critical 9.9) - [CVE-2022-46640](https://insights.sbomify.com/CVE-2022-46640/): Command injection in nanoleaf:nanoleaf desktop (critical 9.8) - [CVE-2022-4664](https://insights.sbomify.com/CVE-2022-4664/): Logo Slider < 3.6.0 - Contributor+ Stored XSS in Shortcode (medium 5.4) - [CVE-2022-46639](https://insights.sbomify.com/CVE-2022-46639/): Path traversal in correos:correos (high 7.5) - [CVE-2022-46637](https://insights.sbomify.com/CVE-2022-46637/): Hardcoded credentials in prolink2u:prs1841 firmware (critical 9.8) - [CVE-2022-46634](https://insights.sbomify.com/CVE-2022-46634/): Command injection in totolink:a7100ru firmware (critical 9.8) - [CVE-2022-46631](https://insights.sbomify.com/CVE-2022-46631/): Command injection in totolink:a7100ru firmware (critical 9.8) - [CVE-2022-4663](https://insights.sbomify.com/CVE-2022-4663/): Members Import <= 1.4.2 - Self Cross-Site Scripting (medium 5.5) - [CVE-2022-46624](https://insights.sbomify.com/CVE-2022-46624/): Cross-site scripting in online graduate tracer system project:online graduate tracer system (medium 6.1) - [CVE-2022-46623](https://insights.sbomify.com/CVE-2022-46623/): SQL injection in judging management system project:judging management system (high 7.8) - [CVE-2022-46622](https://insights.sbomify.com/CVE-2022-46622/): Cross-site scripting in judging management system project:judging management system (medium 6.1) - [CVE-2022-4662](https://insights.sbomify.com/CVE-2022-4662/): Denial of service in Kernel (medium 5.5) - [CVE-2022-46610](https://insights.sbomify.com/CVE-2022-46610/): File upload in 72crm:wukong crm (high 8.8) - [CVE-2022-4661](https://insights.sbomify.com/CVE-2022-4661/): Woo Products Widgets For Elementor < 1.0.8 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46609](https://insights.sbomify.com/CVE-2022-46609/): Supply chain in python3-restfulapi project:python3-restfulapi (critical 9.8) - [CVE-2022-46604](https://insights.sbomify.com/CVE-2022-46604/): File upload in tecrail:responsive filemanager (high 8.8) - [CVE-2022-46603](https://insights.sbomify.com/CVE-2022-46603/): Cross-site scripting in inkdrop:inkdrop (medium 6.1) - [CVE-2022-46601](https://insights.sbomify.com/CVE-2022-46601/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46600](https://insights.sbomify.com/CVE-2022-46600/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46599](https://insights.sbomify.com/CVE-2022-46599/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46598](https://insights.sbomify.com/CVE-2022-46598/): Command injection in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46597](https://insights.sbomify.com/CVE-2022-46597/): Command injection in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46596](https://insights.sbomify.com/CVE-2022-46596/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46594](https://insights.sbomify.com/CVE-2022-46594/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46593](https://insights.sbomify.com/CVE-2022-46593/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46592](https://insights.sbomify.com/CVE-2022-46592/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46591](https://insights.sbomify.com/CVE-2022-46591/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46590](https://insights.sbomify.com/CVE-2022-46590/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46589](https://insights.sbomify.com/CVE-2022-46589/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46588](https://insights.sbomify.com/CVE-2022-46588/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46586](https://insights.sbomify.com/CVE-2022-46586/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46585](https://insights.sbomify.com/CVE-2022-46585/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46584](https://insights.sbomify.com/CVE-2022-46584/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46583](https://insights.sbomify.com/CVE-2022-46583/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46582](https://insights.sbomify.com/CVE-2022-46582/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46581](https://insights.sbomify.com/CVE-2022-46581/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-46580](https://insights.sbomify.com/CVE-2022-46580/): Memory corruption in trendnet:tew-755ap firmware (critical 9.8) - [CVE-2022-4658](https://insights.sbomify.com/CVE-2022-4658/): RSSImport <= 4.6.1 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46570](https://insights.sbomify.com/CVE-2022-46570/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-4657](https://insights.sbomify.com/CVE-2022-4657/): Restaurant Menu < 2.3.6 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46569](https://insights.sbomify.com/CVE-2022-46569/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-46568](https://insights.sbomify.com/CVE-2022-46568/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-46566](https://insights.sbomify.com/CVE-2022-46566/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-46563](https://insights.sbomify.com/CVE-2022-46563/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-46562](https://insights.sbomify.com/CVE-2022-46562/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-46561](https://insights.sbomify.com/CVE-2022-46561/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-46560](https://insights.sbomify.com/CVE-2022-46560/): Memory corruption in dlink:dir-882 a1 firmware (high 7.2) - [CVE-2022-4656](https://insights.sbomify.com/CVE-2022-4656/): WP Visitor Statistics (Real Time Traffic) < 6.5 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46552](https://insights.sbomify.com/CVE-2022-46552/): Command injection in dlink:dir-846 firmware (high 8.8) - [CVE-2022-46551](https://insights.sbomify.com/CVE-2022-46551/): Memory corruption in tenda:f1203 firmware (high 7.5) - [CVE-2022-46550](https://insights.sbomify.com/CVE-2022-46550/): Memory corruption in tenda:f1203 firmware (high 7.5) - [CVE-2022-4655](https://insights.sbomify.com/CVE-2022-4655/): Welcart e-Commerce < 2.8.9 - Contributor+ Stored XSS via Shortcode (medium 5.4) - [CVE-2022-46549](https://insights.sbomify.com/CVE-2022-46549/): Memory corruption in tenda:f1203 firmware (high 7.5) - [CVE-2022-46548](https://insights.sbomify.com/CVE-2022-46548/): Memory corruption in tenda:f1203 firmware (high 7.5) - [CVE-2022-46547](https://insights.sbomify.com/CVE-2022-46547/): Memory corruption in tenda:f1203 firmware (critical 9.8) - [CVE-2022-46546](https://insights.sbomify.com/CVE-2022-46546/): Memory corruption in tenda:f1203 firmware (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/206/