# Vulnerabilities published in 2022


- [CVE-2022-44543](https://insights.sbomify.com/CVE-2022-44543/): TYPO3 Extension femanager vulnerable to Broken Access Control (medium 5.3)
- [CVE-2022-44542](https://insights.sbomify.com/CVE-2022-44542/): Deserialization in lesspipe project:lesspipe (critical 9.8)
- [CVE-2022-4454](https://insights.sbomify.com/CVE-2022-4454/): m0ver bible-online Search search.java query sql injection (medium 5.5)
- [CVE-2022-44535](https://insights.sbomify.com/CVE-2022-44535/): Privilege escalation in Aruba EdgeConnect Enterprise Orchestration Software (high 8.8)
- [CVE-2022-44534](https://insights.sbomify.com/CVE-2022-44534/): Command injection in Aruba EdgeConnect Enterprise Orchestration Software (high 7.2)
- [CVE-2022-44533](https://insights.sbomify.com/CVE-2022-44533/): Code injection in Aruba EdgeConnect Enterprise Software (high 7.2)
- [CVE-2022-44532](https://insights.sbomify.com/CVE-2022-44532/): Path traversal in Aruba EdgeConnect Enterprise Software (medium 4.9)
- [CVE-2022-4453](https://insights.sbomify.com/CVE-2022-4453/): 3D FlipBook <= 1.13.2 - Contributor+ Stored XSS (medium 6.1)
- [CVE-2022-44520](https://insights.sbomify.com/CVE-2022-44520/): Acrobat Reader | Use After Free (CWE-416) (high 7.8)
- [CVE-2022-4452](https://insights.sbomify.com/CVE-2022-4452/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-44519](https://insights.sbomify.com/CVE-2022-44519/): Acrobat Reader | Use After Free (CWE-416) (medium 5.5)
- [CVE-2022-44518](https://insights.sbomify.com/CVE-2022-44518/): Acrobat Reader | Use After Free (CWE-416) (high 7.8)
- [CVE-2022-44517](https://insights.sbomify.com/CVE-2022-44517/): Acrobat Reader | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2022-44516](https://insights.sbomify.com/CVE-2022-44516/): Acrobat Reader | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2022-44515](https://insights.sbomify.com/CVE-2022-44515/): Acrobat Reader | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2022-44514](https://insights.sbomify.com/CVE-2022-44514/): Acrobat Reader | Use After Free (CWE-416) (high 7.8)
- [CVE-2022-44513](https://insights.sbomify.com/CVE-2022-44513/): Acrobat Reader | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2022-44512](https://insights.sbomify.com/CVE-2022-44512/): Acrobat Reader | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2022-44510](https://insights.sbomify.com/CVE-2022-44510/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-4451](https://insights.sbomify.com/CVE-2022-4451/): Sassy Social Share < 3.3.45 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44502](https://insights.sbomify.com/CVE-2022-44502/): Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-44500](https://insights.sbomify.com/CVE-2022-44500/): Adobe Illustrator Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-4450](https://insights.sbomify.com/CVE-2022-4450/): Double free after calling PEM_read_bio_ex (high 7.5)
- [CVE-2022-44499](https://insights.sbomify.com/CVE-2022-44499/): Adobe Illustrator Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-44498](https://insights.sbomify.com/CVE-2022-44498/): Adobe Illustrator Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-4449](https://insights.sbomify.com/CVE-2022-4449/): Page Scroll To ID < 1.7.6 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44488](https://insights.sbomify.com/CVE-2022-44488/): AEM URL Redirection to Untrusted Site Security feature bypass (low 3.5)
- [CVE-2022-4448](https://insights.sbomify.com/CVE-2022-4448/): GiveWP < 2.24.0 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-44474](https://insights.sbomify.com/CVE-2022-44474/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44473](https://insights.sbomify.com/CVE-2022-44473/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44471](https://insights.sbomify.com/CVE-2022-44471/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44470](https://insights.sbomify.com/CVE-2022-44470/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-4447](https://insights.sbomify.com/CVE-2022-4447/): Fontsy <= 1.8.6 - Multiple Unauthenticated SQLi (critical 9.8)
- [CVE-2022-44469](https://insights.sbomify.com/CVE-2022-44469/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44468](https://insights.sbomify.com/CVE-2022-44468/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44467](https://insights.sbomify.com/CVE-2022-44467/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44466](https://insights.sbomify.com/CVE-2022-44466/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44465](https://insights.sbomify.com/CVE-2022-44465/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44463](https://insights.sbomify.com/CVE-2022-44463/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-44462](https://insights.sbomify.com/CVE-2022-44462/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-4446](https://insights.sbomify.com/CVE-2022-4446/): PHP Remote File Inclusion in tsolucio/corebos (critical 9.8)
- [CVE-2022-44457](https://insights.sbomify.com/CVE-2022-44457/): Auth bypass in Mendix SAML (Mendix 7 compatible) (critical 9.8)
- [CVE-2022-44456](https://insights.sbomify.com/CVE-2022-44456/): Command injection in CONPROSYS HMI System (CHS) (critical 9.8)
- [CVE-2022-44455](https://insights.sbomify.com/CVE-2022-44455/): Memory corruption in OpenHarmony (medium 6.8)
- [CVE-2022-44451](https://insights.sbomify.com/CVE-2022-44451/): Open Babel has uninitialized pointer dereference in MSI atom parser (critical 9.8)
- [CVE-2022-4445](https://insights.sbomify.com/CVE-2022-4445/): FL3R FeelBox <= 8.1 - Unauthenticated SQLi (critical 9.8)
- [CVE-2022-44449](https://insights.sbomify.com/CVE-2022-44449/): Cross-site scripting in Zenphoto (medium 6.1)
- [CVE-2022-44448](https://insights.sbomify.com/CVE-2022-44448/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.4)
- [CVE-2022-44447](https://insights.sbomify.com/CVE-2022-44447/): Null dereference in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44446](https://insights.sbomify.com/CVE-2022-44446/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44445](https://insights.sbomify.com/CVE-2022-44445/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44444](https://insights.sbomify.com/CVE-2022-44444/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44443](https://insights.sbomify.com/CVE-2022-44443/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44442](https://insights.sbomify.com/CVE-2022-44442/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44441](https://insights.sbomify.com/CVE-2022-44441/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44440](https://insights.sbomify.com/CVE-2022-44440/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4444](https://insights.sbomify.com/CVE-2022-4444/): ipti br.tag cross site scripting (low 3.5)
- [CVE-2022-44439](https://insights.sbomify.com/CVE-2022-44439/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44438](https://insights.sbomify.com/CVE-2022-44438/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44437](https://insights.sbomify.com/CVE-2022-44437/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44436](https://insights.sbomify.com/CVE-2022-44436/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44435](https://insights.sbomify.com/CVE-2022-44435/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44434](https://insights.sbomify.com/CVE-2022-44434/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44433](https://insights.sbomify.com/CVE-2022-44433/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-44432](https://insights.sbomify.com/CVE-2022-44432/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44431](https://insights.sbomify.com/CVE-2022-44431/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44430](https://insights.sbomify.com/CVE-2022-44430/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4443](https://insights.sbomify.com/CVE-2022-4443/): BruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF (medium 6.5)
- [CVE-2022-44429](https://insights.sbomify.com/CVE-2022-44429/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44428](https://insights.sbomify.com/CVE-2022-44428/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44427](https://insights.sbomify.com/CVE-2022-44427/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44426](https://insights.sbomify.com/CVE-2022-44426/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44425](https://insights.sbomify.com/CVE-2022-44425/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44424](https://insights.sbomify.com/CVE-2022-44424/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44423](https://insights.sbomify.com/CVE-2022-44423/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44422](https://insights.sbomify.com/CVE-2022-44422/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44421](https://insights.sbomify.com/CVE-2022-44421/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44420](https://insights.sbomify.com/CVE-2022-44420/): Security feature bypass in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-4442](https://insights.sbomify.com/CVE-2022-4442/): WCK < 2.3.3 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-44419](https://insights.sbomify.com/CVE-2022-44419/): Security feature bypass in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-44415](https://insights.sbomify.com/CVE-2022-44415/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2)
- [CVE-2022-44414](https://insights.sbomify.com/CVE-2022-44414/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2)
- [CVE-2022-44413](https://insights.sbomify.com/CVE-2022-44413/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2)
- [CVE-2022-44411](https://insights.sbomify.com/CVE-2022-44411/): Information disclosure in web based quiz system project:web based quiz system (high 7.5)
- [CVE-2022-4441](https://insights.sbomify.com/CVE-2022-4441/): Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter (high 7.6)
- [CVE-2022-44403](https://insights.sbomify.com/CVE-2022-44403/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2)
- [CVE-2022-44402](https://insights.sbomify.com/CVE-2022-44402/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2)
- [CVE-2022-44401](https://insights.sbomify.com/CVE-2022-44401/): File upload in online tours \& travels management system project:online tours \& travels management system (critical 9.8)
- [CVE-2022-44400](https://insights.sbomify.com/CVE-2022-44400/): File upload in purchase order management system project:purchase order management system (critical 9.8)
- [CVE-2022-4440](https://insights.sbomify.com/CVE-2022-4440/): Use after free in Chrome (high 8.8)
- [CVE-2022-44399](https://insights.sbomify.com/CVE-2022-44399/): SQL injection in poultry farm management system project:poultry farm management system (critical 9.8)
- [CVE-2022-44393](https://insights.sbomify.com/CVE-2022-44393/): SQL injection in sanitization management system project:sanitization management system (high 7.2)
- [CVE-2022-44390](https://insights.sbomify.com/CVE-2022-44390/): Cross-site scripting in eyoucms:eyoucms (medium 5.4)
- [CVE-2022-4439](https://insights.sbomify.com/CVE-2022-4439/): Use after free in Chrome (high 8.8)
- [CVE-2022-44389](https://insights.sbomify.com/CVE-2022-44389/): Cross-site request forgery in eyoucms:eyoucms (medium 6.5)
- [CVE-2022-44387](https://insights.sbomify.com/CVE-2022-44387/): Cross-site request forgery in eyoucms:eyoucms (high 8.8)
- [CVE-2022-44384](https://insights.sbomify.com/CVE-2022-44384/): File upload in rconfig:rconfig (high 8.8)
- [CVE-2022-44381](https://insights.sbomify.com/CVE-2022-44381/): Snipe-IT allows attackers to check whether a user account exists (medium 5.3)
- [CVE-2022-44380](https://insights.sbomify.com/CVE-2022-44380/): Snipe-IT vulnerable to Cross Site Scripting for View Assigned Assets (medium 5.4)
- [CVE-2022-4438](https://insights.sbomify.com/CVE-2022-4438/): Use after free in Chrome (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/220/