# Vulnerabilities published in 2022


- [CVE-2022-4574](https://insights.sbomify.com/CVE-2022-4574/): Other in ThinkPad BIOS (medium 6.7)
- [CVE-2022-45730](https://insights.sbomify.com/CVE-2022-45730/): Cross-site scripting in phpgurukul:doctor appointment management system (medium 6.1)
- [CVE-2022-4573](https://insights.sbomify.com/CVE-2022-4573/): Other in ThinkPad X1 Fold Gen 1 (medium 6.7)
- [CVE-2022-45729](https://insights.sbomify.com/CVE-2022-45729/): Cross-site scripting in phpgurukul:doctor appointment management system (medium 6.1)
- [CVE-2022-45728](https://insights.sbomify.com/CVE-2022-45728/): Cross-site scripting in phpgurukul:doctor appointment management system (medium 6.1)
- [CVE-2022-45725](https://insights.sbomify.com/CVE-2022-45725/): Code injection in comfast:cf-wr610n firmware (high 8.8)
- [CVE-2022-45724](https://insights.sbomify.com/CVE-2022-45724/): Auth bypass in comfast:cf-wr610n firmware (medium 5.4)
- [CVE-2022-45722](https://insights.sbomify.com/CVE-2022-45722/): Cross-site scripting in gzwhir:ezeip (medium 6.1)
- [CVE-2022-45721](https://insights.sbomify.com/CVE-2022-45721/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45720](https://insights.sbomify.com/CVE-2022-45720/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-4572](https://insights.sbomify.com/CVE-2022-4572/): UBI Reader UBIFS File output.py ubireader_extract_files path traversal (medium 5.4)
- [CVE-2022-45719](https://insights.sbomify.com/CVE-2022-45719/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45718](https://insights.sbomify.com/CVE-2022-45718/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45717](https://insights.sbomify.com/CVE-2022-45717/): Command injection in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45716](https://insights.sbomify.com/CVE-2022-45716/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45715](https://insights.sbomify.com/CVE-2022-45715/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45714](https://insights.sbomify.com/CVE-2022-45714/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45712](https://insights.sbomify.com/CVE-2022-45712/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45711](https://insights.sbomify.com/CVE-2022-45711/): Command injection in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45710](https://insights.sbomify.com/CVE-2022-45710/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-4571](https://insights.sbomify.com/CVE-2022-4571/): Seriously Simple Podcasting < 2.19.1 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-45709](https://insights.sbomify.com/CVE-2022-45709/): Command injection in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45708](https://insights.sbomify.com/CVE-2022-45708/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45707](https://insights.sbomify.com/CVE-2022-45707/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45706](https://insights.sbomify.com/CVE-2022-45706/): Memory corruption in ip-com:m50 firmware (critical 9.8)
- [CVE-2022-45703](https://insights.sbomify.com/CVE-2022-45703/): Memory corruption in gnu:binutils (high 7.8)
- [CVE-2022-45701](https://insights.sbomify.com/CVE-2022-45701/): Command injection in commscope:arris sbg10 firmware (high 8.8)
- [CVE-2022-4570](https://insights.sbomify.com/CVE-2022-4570/): Top 10 < 3.2.3 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-45699](https://insights.sbomify.com/CVE-2022-45699/): Command injection in apsystems:ecu-r firmware (critical 9.8)
- [CVE-2022-45697](https://insights.sbomify.com/CVE-2022-45697/): Path traversal in razer:razer central (high 7.8)
- [CVE-2022-45693](https://insights.sbomify.com/CVE-2022-45693/): Jettison Out-of-bounds Write vulnerability (high 7.5)
- [CVE-2022-45690](https://insights.sbomify.com/CVE-2022-45690/): hutool-json stack overflow vulnerability (high 7.5)
- [CVE-2022-4569](https://insights.sbomify.com/CVE-2022-4569/): Privilege escalation in ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool (high 7.8)
- [CVE-2022-45689](https://insights.sbomify.com/CVE-2022-45689/): hutool-json vulnerable to memory exhaustion (high 7.5)
- [CVE-2022-45688](https://insights.sbomify.com/CVE-2022-45688/): json stack overflow vulnerability (high 7.5)
- [CVE-2022-45685](https://insights.sbomify.com/CVE-2022-45685/): Jettison Out-of-bounds Write vulnerability (high 7.5)
- [CVE-2022-4568](https://insights.sbomify.com/CVE-2022-4568/): Privilege escalation in Lenovo System Update (high 7.0)
- [CVE-2022-45677](https://insights.sbomify.com/CVE-2022-45677/): SQL injection in tuition management system project:tuition management system (critical 9.8)
- [CVE-2022-45674](https://insights.sbomify.com/CVE-2022-45674/): Cross-site request forgery in tenda:ac6 firmware (medium 6.5)
- [CVE-2022-45673](https://insights.sbomify.com/CVE-2022-45673/): Cross-site request forgery in tenda:ac6 firmware (medium 6.5)
- [CVE-2022-45672](https://insights.sbomify.com/CVE-2022-45672/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45671](https://insights.sbomify.com/CVE-2022-45671/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45670](https://insights.sbomify.com/CVE-2022-45670/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-4567](https://insights.sbomify.com/CVE-2022-4567/): Improper Access Control in openemr/openemr (high 8.1)
- [CVE-2022-45669](https://insights.sbomify.com/CVE-2022-45669/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45668](https://insights.sbomify.com/CVE-2022-45668/): Cross-site request forgery in tenda:i22 firmware (medium 6.5)
- [CVE-2022-45667](https://insights.sbomify.com/CVE-2022-45667/): Cross-site request forgery in tenda:i22 firmware (medium 6.5)
- [CVE-2022-45666](https://insights.sbomify.com/CVE-2022-45666/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45665](https://insights.sbomify.com/CVE-2022-45665/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45664](https://insights.sbomify.com/CVE-2022-45664/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45663](https://insights.sbomify.com/CVE-2022-45663/): Memory corruption in tenda:i22 firmware (high 7.5)
- [CVE-2022-45661](https://insights.sbomify.com/CVE-2022-45661/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45660](https://insights.sbomify.com/CVE-2022-45660/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-4566](https://insights.sbomify.com/CVE-2022-4566/): y_project RuoYi GenController sql injection (medium 5.5)
- [CVE-2022-45659](https://insights.sbomify.com/CVE-2022-45659/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45658](https://insights.sbomify.com/CVE-2022-45658/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45657](https://insights.sbomify.com/CVE-2022-45657/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45656](https://insights.sbomify.com/CVE-2022-45656/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45655](https://insights.sbomify.com/CVE-2022-45655/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45654](https://insights.sbomify.com/CVE-2022-45654/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45653](https://insights.sbomify.com/CVE-2022-45653/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45652](https://insights.sbomify.com/CVE-2022-45652/): Memory corruption in tendacn:ac6 firmware (critical 9.1)
- [CVE-2022-45651](https://insights.sbomify.com/CVE-2022-45651/): Memory corruption in tendacn:ac6 firmware (critical 9.1)
- [CVE-2022-45650](https://insights.sbomify.com/CVE-2022-45650/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-4565](https://insights.sbomify.com/CVE-2022-4565/): Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption (medium 4.3)
- [CVE-2022-45649](https://insights.sbomify.com/CVE-2022-45649/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45648](https://insights.sbomify.com/CVE-2022-45648/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45647](https://insights.sbomify.com/CVE-2022-45647/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45646](https://insights.sbomify.com/CVE-2022-45646/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45645](https://insights.sbomify.com/CVE-2022-45645/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45644](https://insights.sbomify.com/CVE-2022-45644/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45643](https://insights.sbomify.com/CVE-2022-45643/): Memory corruption in tendacn:ac6 firmware (high 7.5)
- [CVE-2022-45641](https://insights.sbomify.com/CVE-2022-45641/): Memory corruption in tenda:ac6 firmware (high 7.5)
- [CVE-2022-45640](https://insights.sbomify.com/CVE-2022-45640/): Memory corruption in tenda:ac6 firmware (high 7.5)
- [CVE-2022-4564](https://insights.sbomify.com/CVE-2022-4564/): University of Central Florida Materia API Controller api.php before cross-site request forgery (medium 4.3)
- [CVE-2022-45639](https://insights.sbomify.com/CVE-2022-45639/): Command injection in sleuthkit:the sleuth kit (high 7.8)
- [CVE-2022-45637](https://insights.sbomify.com/CVE-2022-45637/): Auth bypass in megafeis:bofei dbd\+ (critical 9.8)
- [CVE-2022-45636](https://insights.sbomify.com/CVE-2022-45636/): Missing authorization in megafeis:bofei dbd\+ (high 8.1)
- [CVE-2022-45635](https://insights.sbomify.com/CVE-2022-45635/): Weak cryptography in megafeis:bofei dbd\+ (high 7.5)
- [CVE-2022-45634](https://insights.sbomify.com/CVE-2022-45634/): Information disclosure in megaeis:dbd\+ (medium 4.3)
- [CVE-2022-4563](https://insights.sbomify.com/CVE-2022-4563/): Freedom of the Press SecureDrop gpg-agent.conf symlink (high 7.8)
- [CVE-2022-4562](https://insights.sbomify.com/CVE-2022-4562/): Meks Flexible Shortcodes < 1.3.5 - Contributor+ Stored XSS (medium 4.6)
- [CVE-2022-45613](https://insights.sbomify.com/CVE-2022-45613/): Cross-site scripting in book store management system project:book store management system (medium 5.4)
- [CVE-2022-45611](https://insights.sbomify.com/CVE-2022-45611/): Information disclosure in fresenius-kabi:pharmahelp firmware (critical 9.8)
- [CVE-2022-4561](https://insights.sbomify.com/CVE-2022-4561/): SemanticDrilldown Extension GET Parameter SDBrowseDataPage.php printFilterLine cross site scripting (low 3.5)
- [CVE-2022-45608](https://insights.sbomify.com/CVE-2022-45608/): Privilege escalation in thingsboard:thingsboard (high 8.8)
- [CVE-2022-45600](https://insights.sbomify.com/CVE-2022-45600/): Auth bypass in aztech:wmb250ac firmware (high 8.8)
- [CVE-2022-4560](https://insights.sbomify.com/CVE-2022-4560/): Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting (low 3.5)
- [CVE-2022-45599](https://insights.sbomify.com/CVE-2022-45599/): Auth bypass in aztech:wmb250ac firmware (critical 9.8)
- [CVE-2022-45598](https://insights.sbomify.com/CVE-2022-45598/): Joplin Desktop App vulnerable to Cross-site Scripting (medium 6.1)
- [CVE-2022-45597](https://insights.sbomify.com/CVE-2022-45597/): Security feature bypass in componentspace:saml (critical 9.8)
- [CVE-2022-4559](https://insights.sbomify.com/CVE-2022-4559/): INEX IPX-Manager list.foil.php cross site scripting (low 3.5)
- [CVE-2022-45589](https://insights.sbomify.com/CVE-2022-45589/): SQL injection in talend:esb runtime (high 7.2)
- [CVE-2022-45588](https://insights.sbomify.com/CVE-2022-45588/): XML external entity in talend:remote engine gen 2 (high 7.8)
- [CVE-2022-45587](https://insights.sbomify.com/CVE-2022-45587/): Memory corruption in xpdfreader:xpdf (medium 5.5)
- [CVE-2022-45586](https://insights.sbomify.com/CVE-2022-45586/): Memory corruption in xpdfreader:xpdf (medium 5.5)
- [CVE-2022-45582](https://insights.sbomify.com/CVE-2022-45582/): Horizon Web Dashboard Open Redirect vulnerability (medium 6.1)
- [CVE-2022-4558](https://insights.sbomify.com/CVE-2022-4558/): Alinto SOGo Folder/Mail NSString+Utilities.m cross site scripting (low 3.5)
- [CVE-2022-4557](https://insights.sbomify.com/CVE-2022-4557/): SQL Injection in Smartpower Web (critical 9.8)
- [CVE-2022-45564](https://insights.sbomify.com/CVE-2022-45564/): SQL injection in znfit:home improvement erp management system (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/212/