# Vulnerabilities published in 2022


- [CVE-2022-44797](https://insights.sbomify.com/CVE-2022-44797/): btcd mishandles witness size checking (critical 9.8)
- [CVE-2022-44796](https://insights.sbomify.com/CVE-2022-44796/): Weak cryptography in objectfirst:ootbi (critical 9.8)
- [CVE-2022-44795](https://insights.sbomify.com/CVE-2022-44795/): Weak cryptography in objectfirst:ootbi (medium 6.5)
- [CVE-2022-44794](https://insights.sbomify.com/CVE-2022-44794/): Command injection in objectfirst:ootbi (high 8.8)
- [CVE-2022-44793](https://insights.sbomify.com/CVE-2022-44793/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2022-44792](https://insights.sbomify.com/CVE-2022-44792/): Null dereference in debian:debian linux (medium 6.5)
- [CVE-2022-44790](https://insights.sbomify.com/CVE-2022-44790/): SQL injection in interspire:email marketer (high 7.5)
- [CVE-2022-4479](https://insights.sbomify.com/CVE-2022-4479/): Table of Contents Plus < 2212 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44789](https://insights.sbomify.com/CVE-2022-44789/): Memory corruption in artifex:mujs (high 8.8)
- [CVE-2022-44788](https://insights.sbomify.com/CVE-2022-44788/): Auth bypass in maggioli:appalti \& contratti (medium 6.5)
- [CVE-2022-44787](https://insights.sbomify.com/CVE-2022-44787/): Cross-site scripting in maggioli:appalti \& contratti (medium 6.1)
- [CVE-2022-44786](https://insights.sbomify.com/CVE-2022-44786/): Path traversal in maggioli:appalti \& contratti (high 7.5)
- [CVE-2022-44785](https://insights.sbomify.com/CVE-2022-44785/): SQL injection in maggioli:appalti \& contratti (critical 9.8)
- [CVE-2022-44784](https://insights.sbomify.com/CVE-2022-44784/): Missing authorization in maggioli:appalti \& contratti (high 8.8)
- [CVE-2022-4478](https://insights.sbomify.com/CVE-2022-4478/): Font Awesome < 4.3.2 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-4477](https://insights.sbomify.com/CVE-2022-4477/): Smash Balloon Social Post Feed < 4.1.6 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44760](https://insights.sbomify.com/CVE-2022-44760/): HCL Leap is affected by an unrestricted upload of file with dangerous type vulnerability (medium 4.6)
- [CVE-2022-4476](https://insights.sbomify.com/CVE-2022-4476/): Download Manager < 3.2.62 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44759](https://insights.sbomify.com/CVE-2022-44759/): HCL Leap is affected by Cross-site scripting (XSS) (medium 4.6)
- [CVE-2022-44758](https://insights.sbomify.com/CVE-2022-44758/): HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper credential handling (medium 6.5)
- [CVE-2022-44757](https://insights.sbomify.com/CVE-2022-44757/): HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to weak cryptography (medium 6.5)
- [CVE-2022-44756](https://insights.sbomify.com/CVE-2022-44756/): HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper input validation (medium 6.4)
- [CVE-2022-44755](https://insights.sbomify.com/CVE-2022-44755/): HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView (critical 9.8)
- [CVE-2022-44754](https://insights.sbomify.com/CVE-2022-44754/): HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. (critical 9.8)
- [CVE-2022-44753](https://insights.sbomify.com/CVE-2022-44753/): HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView (critical 9.8)
- [CVE-2022-44752](https://insights.sbomify.com/CVE-2022-44752/): HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView (critical 9.8)
- [CVE-2022-44751](https://insights.sbomify.com/CVE-2022-44751/): HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView (critical 9.8)
- [CVE-2022-44750](https://insights.sbomify.com/CVE-2022-44750/): HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. (critical 9.8)
- [CVE-2022-4475](https://insights.sbomify.com/CVE-2022-4475/): Collapse-O-Matic < 1.8.3 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44749](https://insights.sbomify.com/CVE-2022-44749/): Opening workflows from untrusted resources may override arbitrary file system contents (medium 5.5)
- [CVE-2022-44748](https://insights.sbomify.com/CVE-2022-44748/): Uploading workflows to KNIME Server may override arbitrary file system contents (high 7.1)
- [CVE-2022-44747](https://insights.sbomify.com/CVE-2022-44747/): Privilege escalation in Acronis Cyber Protect Home Office (low 2.2)
- [CVE-2022-44746](https://insights.sbomify.com/CVE-2022-44746/): Information disclosure in Acronis Cyber Protect Home Office (low 2.2)
- [CVE-2022-44745](https://insights.sbomify.com/CVE-2022-44745/): Information disclosure in Acronis Cyber Protect Home Office (medium 4.0)
- [CVE-2022-44744](https://insights.sbomify.com/CVE-2022-44744/): Privilege escalation in Acronis Cyber Protect Home Office (low 2.2)
- [CVE-2022-44743](https://insights.sbomify.com/CVE-2022-44743/): WordPress Jobs for WordPress Plugin <= 2.5.11.2 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2022-44742](https://insights.sbomify.com/CVE-2022-44742/): WordPress Community Events Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS) (medium 4.8)
- [CVE-2022-44741](https://insights.sbomify.com/CVE-2022-44741/): WordPress Testimonial Slider plugin <= 1.3.1 - Cross-Site Request Forgery (CSRF) vulnerability (medium 6.1)
- [CVE-2022-44740](https://insights.sbomify.com/CVE-2022-44740/): WordPress Creative Mail plugin <= 1.5.4 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (medium 5.4)
- [CVE-2022-4474](https://insights.sbomify.com/CVE-2022-4474/): Easy Social Feed – Social Photos Gallery – Post Feed – Like Box < 6.4.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44739](https://insights.sbomify.com/CVE-2022-44739/): WordPress Quick Restaurant Reservations Plugin <= 1.5.4 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.3)
- [CVE-2022-44738](https://insights.sbomify.com/CVE-2022-44738/): WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection (medium 5.8)
- [CVE-2022-44737](https://insights.sbomify.com/CVE-2022-44737/): WordPress All In One WP Security plugin <= 5.1.0 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (medium 6.5)
- [CVE-2022-44736](https://insights.sbomify.com/CVE-2022-44736/): WordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-44735](https://insights.sbomify.com/CVE-2022-44735/): WordPress WP Clictracker Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS) (medium 4.8)
- [CVE-2022-44734](https://insights.sbomify.com/CVE-2022-44734/): WordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) (medium 4.8)
- [CVE-2022-44733](https://insights.sbomify.com/CVE-2022-44733/): Privilege escalation in Acronis Cyber Protect Home Office (high 7.3)
- [CVE-2022-44732](https://insights.sbomify.com/CVE-2022-44732/): Privilege escalation in Acronis Cyber Protect Home Office (high 7.3)
- [CVE-2022-44731](https://insights.sbomify.com/CVE-2022-44731/): Command injection in SIMATIC WinCC OA V3.15 (medium 5.4)
- [CVE-2022-44730](https://insights.sbomify.com/CVE-2022-44730/): Apache XML Graphics Batik: Information disclosure vulnerability (medium 4.4)
- [CVE-2022-4473](https://insights.sbomify.com/CVE-2022-4473/): Widget Shortcode <= 0.3.5 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44729](https://insights.sbomify.com/CVE-2022-44729/): Apache XML Graphics Batik: Information disclosure vulnerability (high 7.1)
- [CVE-2022-44727](https://insights.sbomify.com/CVE-2022-44727/): SQL injection in lineagrafica:eu cookie law gdpr (critical 9.1)
- [CVE-2022-44726](https://insights.sbomify.com/CVE-2022-44726/): Cross-site scripting in timesheets-for-jira:timesheet tracking (medium 5.4)
- [CVE-2022-44725](https://insights.sbomify.com/CVE-2022-44725/): Misconfiguration in opcfoundation:local discovery server (high 7.8)
- [CVE-2022-44724](https://insights.sbomify.com/CVE-2022-44724/): Cross-site scripting in stiltsoft:handy macros for confluence (high 8.9)
- [CVE-2022-44720](https://insights.sbomify.com/CVE-2022-44720/): Command injection in ucopia:wireless appliance firmware (critical 9.8)
- [CVE-2022-4472](https://insights.sbomify.com/CVE-2022-4472/): Simple Sitemap < 3.5.8 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44719](https://insights.sbomify.com/CVE-2022-44719/): Misconfiguration in ucopia:wireless appliance firmware (high 7.5)
- [CVE-2022-44718](https://insights.sbomify.com/CVE-2022-44718/): Open redirect in netscout:ngeniusone (low 3.5)
- [CVE-2022-44717](https://insights.sbomify.com/CVE-2022-44717/): Open redirect in netscout:ngeniusone (low 3.1)
- [CVE-2022-44715](https://insights.sbomify.com/CVE-2022-44715/): Misconfiguration in netscout:ngeniusone (high 8.8)
- [CVE-2022-44713](https://insights.sbomify.com/CVE-2022-44713/): Microsoft Outlook for Mac Spoofing Vulnerability (high 7.5)
- [CVE-2022-44710](https://insights.sbomify.com/CVE-2022-44710/): DirectX Graphics Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-4471](https://insights.sbomify.com/CVE-2022-4471/): YARPP - Yet Another Related Posts Plugin < 5.30.3 - Contributor+ Stored XSS (medium 6.8)
- [CVE-2022-44708](https://insights.sbomify.com/CVE-2022-44708/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-44707](https://insights.sbomify.com/CVE-2022-44707/): Windows Kernel Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-44704](https://insights.sbomify.com/CVE-2022-44704/): Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44702](https://insights.sbomify.com/CVE-2022-44702/): Windows Terminal Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-4470](https://insights.sbomify.com/CVE-2022-4470/): Widgets for Google Reviews < 9.8 - Contributor+ Stored XSS (medium 6.4)
- [CVE-2022-44699](https://insights.sbomify.com/CVE-2022-44699/): Azure Network Watcher Agent Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2022-44698](https://insights.sbomify.com/CVE-2022-44698/): Microsoft Defender SmartScreen Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2022-44697](https://insights.sbomify.com/CVE-2022-44697/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44696](https://insights.sbomify.com/CVE-2022-44696/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-44695](https://insights.sbomify.com/CVE-2022-44695/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-44694](https://insights.sbomify.com/CVE-2022-44694/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-44693](https://insights.sbomify.com/CVE-2022-44693/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-44692](https://insights.sbomify.com/CVE-2022-44692/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-44691](https://insights.sbomify.com/CVE-2022-44691/): Microsoft Office OneNote Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-44690](https://insights.sbomify.com/CVE-2022-44690/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-4469](https://insights.sbomify.com/CVE-2022-4469/): Simple Membership < 4.2.2 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44689](https://insights.sbomify.com/CVE-2022-44689/): Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44688](https://insights.sbomify.com/CVE-2022-44688/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2022-44687](https://insights.sbomify.com/CVE-2022-44687/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-44684](https://insights.sbomify.com/CVE-2022-44684/): Windows Local Session Manager (LSM) Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-44683](https://insights.sbomify.com/CVE-2022-44683/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44682](https://insights.sbomify.com/CVE-2022-44682/): Windows Hyper-V Denial of Service Vulnerability (medium 6.8)
- [CVE-2022-44681](https://insights.sbomify.com/CVE-2022-44681/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44680](https://insights.sbomify.com/CVE-2022-44680/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-4468](https://insights.sbomify.com/CVE-2022-4468/): WP Recipe Maker < 8.6.1 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44679](https://insights.sbomify.com/CVE-2022-44679/): Windows Graphics Component Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-44678](https://insights.sbomify.com/CVE-2022-44678/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44677](https://insights.sbomify.com/CVE-2022-44677/): Windows Projected File System Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44676](https://insights.sbomify.com/CVE-2022-44676/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-44675](https://insights.sbomify.com/CVE-2022-44675/): Windows Bluetooth Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44674](https://insights.sbomify.com/CVE-2022-44674/): Windows Bluetooth Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-44673](https://insights.sbomify.com/CVE-2022-44673/): Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-44671](https://insights.sbomify.com/CVE-2022-44671/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-44670](https://insights.sbomify.com/CVE-2022-44670/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-4467](https://insights.sbomify.com/CVE-2022-4467/): Search & Filter < 1.2.16 - Contributor+ Stored XSS (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/218/