# Vulnerabilities published in 2022


- [CVE-2022-45562](https://insights.sbomify.com/CVE-2022-45562/): Hardcoded credentials in telosalliance:omnia mpx node firmware (high 8.8)
- [CVE-2022-4556](https://insights.sbomify.com/CVE-2022-4556/): Alinto SOGo Identity SOGoUserDefaults.m _migrateMailIdentities cross site scripting (low 3.5)
- [CVE-2022-45558](https://insights.sbomify.com/CVE-2022-45558/): Cross-site scripting in left project:left (medium 6.1)
- [CVE-2022-45557](https://insights.sbomify.com/CVE-2022-45557/): Cross-site scripting in left project:left (medium 6.1)
- [CVE-2022-45553](https://insights.sbomify.com/CVE-2022-45553/): Code injection in zbt:we1626 firmware (critical 9.8)
- [CVE-2022-45552](https://insights.sbomify.com/CVE-2022-45552/): Information disclosure in zbt:we1626 firmware (high 7.5)
- [CVE-2022-45551](https://insights.sbomify.com/CVE-2022-45551/): Auth bypass in zbt:we1626 firmware (critical 9.8)
- [CVE-2022-45550](https://insights.sbomify.com/CVE-2022-45550/): Code injection in ayacms project:ayacms (critical 9.8)
- [CVE-2022-4555](https://insights.sbomify.com/CVE-2022-4555/): WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation (medium 6.5)
- [CVE-2022-45548](https://insights.sbomify.com/CVE-2022-45548/): File upload in ayacms project:ayacms (high 8.8)
- [CVE-2022-45546](https://insights.sbomify.com/CVE-2022-45546/): Information disclosure in screencheck:badgemaker (high 7.5)
- [CVE-2022-45544](https://insights.sbomify.com/CVE-2022-45544/): File upload in schlix:cms (high 8.8)
- [CVE-2022-45543](https://insights.sbomify.com/CVE-2022-45543/): Cross-site scripting in discuz:discuzx (medium 6.1)
- [CVE-2022-45542](https://insights.sbomify.com/CVE-2022-45542/): Cross-site scripting in eyoucms:eyoucms (medium 5.4)
- [CVE-2022-45541](https://insights.sbomify.com/CVE-2022-45541/): Cross-site scripting in eyoucms:eyoucms (medium 6.1)
- [CVE-2022-45540](https://insights.sbomify.com/CVE-2022-45540/): Cross-site scripting in eyoucms:eyoucms (medium 6.1)
- [CVE-2022-4554](https://insights.sbomify.com/CVE-2022-4554/): Reflected XSS B2B Dealer Ordering System (medium 5.4)
- [CVE-2022-45539](https://insights.sbomify.com/CVE-2022-45539/): Cross-site scripting in eyoucms:eyoucms (medium 6.1)
- [CVE-2022-45538](https://insights.sbomify.com/CVE-2022-45538/): Cross-site scripting in eyoucms:eyoucms (medium 6.1)
- [CVE-2022-45537](https://insights.sbomify.com/CVE-2022-45537/): Cross-site scripting in eyoucms:eyoucms (medium 6.1)
- [CVE-2022-45536](https://insights.sbomify.com/CVE-2022-45536/): SQL injection in aerocms project:aerocms (medium 4.9)
- [CVE-2022-45535](https://insights.sbomify.com/CVE-2022-45535/): SQL injection in aerocms project:aerocms (medium 4.9)
- [CVE-2022-4553](https://insights.sbomify.com/CVE-2022-4553/): FL3R FeelBox <= 8.1 - Moods Reset via CSRF (medium 4.3)
- [CVE-2022-45529](https://insights.sbomify.com/CVE-2022-45529/): SQL injection in aerocms project:aerocms (medium 4.9)
- [CVE-2022-45527](https://insights.sbomify.com/CVE-2022-45527/): File upload in institutional management website project:institutional management website (critical 9.8)
- [CVE-2022-45526](https://insights.sbomify.com/CVE-2022-45526/): SQL injection in institutional management website project:institutional management website (critical 9.8)
- [CVE-2022-45525](https://insights.sbomify.com/CVE-2022-45525/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45524](https://insights.sbomify.com/CVE-2022-45524/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45523](https://insights.sbomify.com/CVE-2022-45523/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45522](https://insights.sbomify.com/CVE-2022-45522/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45521](https://insights.sbomify.com/CVE-2022-45521/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45520](https://insights.sbomify.com/CVE-2022-45520/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-4552](https://insights.sbomify.com/CVE-2022-4552/): FL3R FeelBox <= 8.1 - Settings Update via CSRF to Stored XSS (medium 6.1)
- [CVE-2022-45519](https://insights.sbomify.com/CVE-2022-45519/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45518](https://insights.sbomify.com/CVE-2022-45518/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45517](https://insights.sbomify.com/CVE-2022-45517/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45516](https://insights.sbomify.com/CVE-2022-45516/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45515](https://insights.sbomify.com/CVE-2022-45515/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45514](https://insights.sbomify.com/CVE-2022-45514/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45513](https://insights.sbomify.com/CVE-2022-45513/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45512](https://insights.sbomify.com/CVE-2022-45512/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45511](https://insights.sbomify.com/CVE-2022-45511/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45510](https://insights.sbomify.com/CVE-2022-45510/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-4551](https://insights.sbomify.com/CVE-2022-4551/): Rich Table of Contents < 1.3.9 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-45509](https://insights.sbomify.com/CVE-2022-45509/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45508](https://insights.sbomify.com/CVE-2022-45508/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45507](https://insights.sbomify.com/CVE-2022-45507/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45506](https://insights.sbomify.com/CVE-2022-45506/): Command injection in tenda:w30e firmware (critical 9.8)
- [CVE-2022-45505](https://insights.sbomify.com/CVE-2022-45505/): Memory corruption in tenda:w30e firmware (high 7.5)
- [CVE-2022-45504](https://insights.sbomify.com/CVE-2022-45504/): Missing authorization in tenda:w6-s firmware (high 7.5)
- [CVE-2022-45503](https://insights.sbomify.com/CVE-2022-45503/): Memory corruption in tenda:w6-s firmware (high 7.5)
- [CVE-2022-45501](https://insights.sbomify.com/CVE-2022-45501/): Memory corruption in tenda:w6-s firmware (high 7.5)
- [CVE-2022-4550](https://insights.sbomify.com/CVE-2022-4550/): User Activity <= 1.0.1 - IP Spoofing (high 7.5)
- [CVE-2022-45499](https://insights.sbomify.com/CVE-2022-45499/): Memory corruption in tenda:w6-s firmware (high 7.5)
- [CVE-2022-45498](https://insights.sbomify.com/CVE-2022-45498/): Missing authorization in tenda:w6-s firmware (high 7.5)
- [CVE-2022-45497](https://insights.sbomify.com/CVE-2022-45497/): Command injection in tenda:w6-s firmware (critical 9.8)
- [CVE-2022-45496](https://insights.sbomify.com/CVE-2022-45496/): Memory corruption in json.h project:json.h (high 8.8)
- [CVE-2022-45494](https://insights.sbomify.com/CVE-2022-45494/): Memory corruption in json.h project:json.h (high 7.8)
- [CVE-2022-45493](https://insights.sbomify.com/CVE-2022-45493/): Memory corruption in json.h project:json.h (high 7.8)
- [CVE-2022-45492](https://insights.sbomify.com/CVE-2022-45492/): Memory corruption in json.h project:json.h (high 7.8)
- [CVE-2022-45491](https://insights.sbomify.com/CVE-2022-45491/): Memory corruption in json.h project:json.h (high 7.8)
- [CVE-2022-4549](https://insights.sbomify.com/CVE-2022-4549/): Tickera < 3.5.1.0 - Plugin Data Deletion via CSRF (medium 4.3)
- [CVE-2022-45484](https://insights.sbomify.com/CVE-2022-45484/): Memory corruption in JT2Go (low 3.3)
- [CVE-2022-45483](https://insights.sbomify.com/CVE-2022-45483/): Information disclosure in Lazy Mouse (medium 5.9)
- [CVE-2022-45482](https://insights.sbomify.com/CVE-2022-45482/): Auth bypass in Lazy Mouse (critical 9.8)
- [CVE-2022-45481](https://insights.sbomify.com/CVE-2022-45481/): Auth bypass in Lazy Mouse (critical 9.8)
- [CVE-2022-45480](https://insights.sbomify.com/CVE-2022-45480/): Information disclosure in PC Keyboard WiFi & Bluetooth (medium 5.9)
- [CVE-2022-4548](https://insights.sbomify.com/CVE-2022-4548/): Optimize images ALT Text (alt tag) & names for SEO using AI < 2.0.8 - Settings Update via CSRF (medium 6.5)
- [CVE-2022-45479](https://insights.sbomify.com/CVE-2022-45479/): Missing authorization in PC Keyboard WiFi & Bluetooth (critical 9.8)
- [CVE-2022-45478](https://insights.sbomify.com/CVE-2022-45478/): Information disclosure in Telepad (medium 5.1)
- [CVE-2022-45477](https://insights.sbomify.com/CVE-2022-45477/): Missing authorization in Telepad (critical 9.8)
- [CVE-2022-45476](https://insights.sbomify.com/CVE-2022-45476/): File upload in Tiny File Manager (critical 9.8)
- [CVE-2022-45475](https://insights.sbomify.com/CVE-2022-45475/): Missing authorization in Tiny File Manager (medium 6.5)
- [CVE-2022-45474](https://insights.sbomify.com/CVE-2022-45474/): Use after free in drachtio:drachtio-server (critical 9.8)
- [CVE-2022-45473](https://insights.sbomify.com/CVE-2022-45473/): Misconfiguration in drachtio:drachtio-server (medium 5.5)
- [CVE-2022-45472](https://insights.sbomify.com/CVE-2022-45472/): Cross-site scripting in caehealthcare:learningspace enterprise (medium 5.4)
- [CVE-2022-45471](https://insights.sbomify.com/CVE-2022-45471/): Denial of service in Hub (low 3.5)
- [CVE-2022-45470](https://insights.sbomify.com/CVE-2022-45470/): Apache Hama allows XSS and information disclosure (high 7.5)
- [CVE-2022-4547](https://insights.sbomify.com/CVE-2022-4547/): Conditional Payment Methods for WooCommerce <= 1.0 - Admin+ SQLi (high 7.2)
- [CVE-2022-45469](https://insights.sbomify.com/CVE-2022-45469/): Privilege escalation in Intel Unison software (low 2.2)
- [CVE-2022-45468](https://insights.sbomify.com/CVE-2022-45468/): CVE-2022-45468 (medium 5.5)
- [CVE-2022-45462](https://insights.sbomify.com/CVE-2022-45462/): Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability (critical 9.8)
- [CVE-2022-45461](https://insights.sbomify.com/CVE-2022-45461/): Command injection in veritas:netbackup (high 7.5)
- [CVE-2022-45460](https://insights.sbomify.com/CVE-2022-45460/): Memory corruption in xiongmaitech:mbd6304t firmware (critical 9.8)
- [CVE-2022-4546](https://insights.sbomify.com/CVE-2022-4546/): Mapwiz <= 1.0.1 - Admin+ SQLi (high 7.2)
- [CVE-2022-45459](https://insights.sbomify.com/CVE-2022-45459/): Misconfiguration in Acronis Agent (low 3.8)
- [CVE-2022-45458](https://insights.sbomify.com/CVE-2022-45458/): Security feature bypass in Acronis Agent (medium 4.2)
- [CVE-2022-45457](https://insights.sbomify.com/CVE-2022-45457/): Security feature bypass in Acronis Agent (medium 4.2)
- [CVE-2022-45456](https://insights.sbomify.com/CVE-2022-45456/): Auth bypass in Acronis Agent (low 3.3)
- [CVE-2022-45455](https://insights.sbomify.com/CVE-2022-45455/): Privilege escalation in Acronis Agent (medium 6.6)
- [CVE-2022-45454](https://insights.sbomify.com/CVE-2022-45454/): Misconfiguration in Acronis Agent (low 2.2)
- [CVE-2022-45453](https://insights.sbomify.com/CVE-2022-45453/): Weak cryptography in Acronis Cyber Protect 15 (medium 5.3)
- [CVE-2022-45452](https://insights.sbomify.com/CVE-2022-45452/): Privilege escalation in Acronis Agent (high 7.3)
- [CVE-2022-45451](https://insights.sbomify.com/CVE-2022-45451/): Privilege escalation in Acronis Agent (high 8.8)
- [CVE-2022-45450](https://insights.sbomify.com/CVE-2022-45450/): Missing authorization in Acronis Agent (medium 5.4)
- [CVE-2022-4545](https://insights.sbomify.com/CVE-2022-4545/): Sitemap < 4.4 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-45449](https://insights.sbomify.com/CVE-2022-45449/): Information disclosure in Acronis Cyber Protect 15 (high 7.7)
- [CVE-2022-45448](https://insights.sbomify.com/CVE-2022-45448/): Cross-site Scripting in M4 PDF plugin for Prestashop sites (low 3.5)
- [CVE-2022-45447](https://insights.sbomify.com/CVE-2022-45447/): Path Traversal in M4 PDF plugin for Prestashop sites (medium 6.5)
- [CVE-2022-45444](https://insights.sbomify.com/CVE-2022-45444/): CVE-2022-45444 (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/213/