# Vulnerabilities published in 2022 - [CVE-2022-44379](https://insights.sbomify.com/CVE-2022-44379/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2) - [CVE-2022-44378](https://insights.sbomify.com/CVE-2022-44378/): SQL injection in automotive shop management system project:automotive shop management system (high 7.2) - [CVE-2022-44373](https://insights.sbomify.com/CVE-2022-44373/): Memory corruption in trendnet:tew-820ap firmware (high 8.8) - [CVE-2022-44371](https://insights.sbomify.com/CVE-2022-44371/): Deserialization in hope-boot project:hope-boot (critical 9.8) - [CVE-2022-44370](https://insights.sbomify.com/CVE-2022-44370/): Memory corruption in nasm:netwide assembler (high 7.8) - [CVE-2022-4437](https://insights.sbomify.com/CVE-2022-4437/): Use after free in Chrome (high 8.8) - [CVE-2022-44369](https://insights.sbomify.com/CVE-2022-44369/): Null dereference in nasm:netwide assembler (medium 5.5) - [CVE-2022-44368](https://insights.sbomify.com/CVE-2022-44368/): Null dereference in nasm:netwide assembler (medium 5.5) - [CVE-2022-44367](https://insights.sbomify.com/CVE-2022-44367/): Memory corruption in tenda:i21 firmware (critical 9.8) - [CVE-2022-44366](https://insights.sbomify.com/CVE-2022-44366/): Memory corruption in tenda:i21 firmware (critical 9.8) - [CVE-2022-44365](https://insights.sbomify.com/CVE-2022-44365/): Memory corruption in tenda:i21 firmware (critical 9.8) - [CVE-2022-44363](https://insights.sbomify.com/CVE-2022-44363/): Memory corruption in tenda:i21 firmware (critical 9.8) - [CVE-2022-44362](https://insights.sbomify.com/CVE-2022-44362/): Memory corruption in tenda:i21 firmware (critical 9.8) - [CVE-2022-44361](https://insights.sbomify.com/CVE-2022-44361/): Cross-site scripting in zzcms:zzcms (medium 5.4) - [CVE-2022-4436](https://insights.sbomify.com/CVE-2022-4436/): Use after free in Chrome (high 8.8) - [CVE-2022-44356](https://insights.sbomify.com/CVE-2022-44356/): Missing authorization in wavlink:wl-wn531g3 firmware (high 7.5) - [CVE-2022-44355](https://insights.sbomify.com/CVE-2022-44355/): Cross-site scripting in contec:solarview compact firmware (medium 6.1) - [CVE-2022-44354](https://insights.sbomify.com/CVE-2022-44354/): File upload in contec:solarview compact firmware (critical 9.8) - [CVE-2022-44351](https://insights.sbomify.com/CVE-2022-44351/): Deserialization in skycaiji:skycaiji (critical 9.8) - [CVE-2022-4435](https://insights.sbomify.com/CVE-2022-4435/): Memory corruption in ThinkPad X13s (medium 6.7) - [CVE-2022-44349](https://insights.sbomify.com/CVE-2022-44349/): Cross-site scripting in navblue:n-ops \& crew (medium 5.4) - [CVE-2022-44348](https://insights.sbomify.com/CVE-2022-44348/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44347](https://insights.sbomify.com/CVE-2022-44347/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44345](https://insights.sbomify.com/CVE-2022-44345/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44343](https://insights.sbomify.com/CVE-2022-44343/): Path traversal in crmeb:crmeb (high 7.5) - [CVE-2022-4434](https://insights.sbomify.com/CVE-2022-4434/): Memory corruption in ThinkPad X13s (medium 6.7) - [CVE-2022-4433](https://insights.sbomify.com/CVE-2022-4433/): Memory corruption in ThinkPad X13s (medium 6.7) - [CVE-2022-44321](https://insights.sbomify.com/CVE-2022-44321/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44320](https://insights.sbomify.com/CVE-2022-44320/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-4432](https://insights.sbomify.com/CVE-2022-4432/): Memory corruption in ThinkPad X13s (medium 6.7) - [CVE-2022-44319](https://insights.sbomify.com/CVE-2022-44319/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44318](https://insights.sbomify.com/CVE-2022-44318/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44317](https://insights.sbomify.com/CVE-2022-44317/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44316](https://insights.sbomify.com/CVE-2022-44316/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44315](https://insights.sbomify.com/CVE-2022-44315/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44314](https://insights.sbomify.com/CVE-2022-44314/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44313](https://insights.sbomify.com/CVE-2022-44313/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44312](https://insights.sbomify.com/CVE-2022-44312/): Memory corruption in picoc project:picoc (medium 5.5) - [CVE-2022-44311](https://insights.sbomify.com/CVE-2022-44311/): Memory corruption in html2xhtml project:html2xhtml (high 8.1) - [CVE-2022-44310](https://insights.sbomify.com/CVE-2022-44310/): ecdh vulnerable to Exposure of Resource to Wrong Sphere (high 7.5) - [CVE-2022-4431](https://insights.sbomify.com/CVE-2022-4431/): WOOCS < 1.3.9.4 - Contributor+ Stored XSS (medium 5.4) - [CVE-2022-44303](https://insights.sbomify.com/CVE-2022-44303/): Resque Scheduler Reflected XSS In Delayed Jobs View (medium 6.1) - [CVE-2022-44299](https://insights.sbomify.com/CVE-2022-44299/): Path traversal in sscms:siteserver cms (medium 4.9) - [CVE-2022-44298](https://insights.sbomify.com/CVE-2022-44298/): SQL injection in sscms:siteserver cms (critical 9.8) - [CVE-2022-44297](https://insights.sbomify.com/CVE-2022-44297/): SQL injection in sscms:siteserver cms (critical 9.8) - [CVE-2022-44296](https://insights.sbomify.com/CVE-2022-44296/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44295](https://insights.sbomify.com/CVE-2022-44295/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44294](https://insights.sbomify.com/CVE-2022-44294/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44291](https://insights.sbomify.com/CVE-2022-44291/): SQL injection in webtareas project:webtareas (critical 9.8) - [CVE-2022-44290](https://insights.sbomify.com/CVE-2022-44290/): SQL injection in webtareas project:webtareas (critical 9.8) - [CVE-2022-4429](https://insights.sbomify.com/CVE-2022-4429/): Avira Security for Windows - Denial of Service (medium 5.3) - [CVE-2022-44289](https://insights.sbomify.com/CVE-2022-44289/): Thinkphp has a code logic error (high 8.8) - [CVE-2022-44284](https://insights.sbomify.com/CVE-2022-44284/): Cross-site scripting in dinstar:dag2000-16o firmware (medium 5.4) - [CVE-2022-44283](https://insights.sbomify.com/CVE-2022-44283/): Memory corruption in avs4you:avs audio converter (critical 9.8) - [CVE-2022-44280](https://insights.sbomify.com/CVE-2022-44280/): Path traversal in automotive shop management system project:automotive shop management system (medium 6.5) - [CVE-2022-4428](https://insights.sbomify.com/CVE-2022-4428/): support_uri validation missing in WARP client for Windows (high 8.9) - [CVE-2022-44279](https://insights.sbomify.com/CVE-2022-44279/): Cross-site scripting in garage management system project:garage management system (medium 6.1) - [CVE-2022-44278](https://insights.sbomify.com/CVE-2022-44278/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44277](https://insights.sbomify.com/CVE-2022-44277/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-44276](https://insights.sbomify.com/CVE-2022-44276/): File upload in tecrail:responsive filemanager (critical 9.8) - [CVE-2022-4427](https://insights.sbomify.com/CVE-2022-4427/): SQL Injection via OTRS Search API (medium 6.5) - [CVE-2022-44268](https://insights.sbomify.com/CVE-2022-44268/): Information disclosure in imagemagick:imagemagick (medium 6.5) - [CVE-2022-44267](https://insights.sbomify.com/CVE-2022-44267/): Denial of service in imagemagick:imagemagick (medium 6.5) - [CVE-2022-44264](https://insights.sbomify.com/CVE-2022-44264/): Privilege escalation in dentsplysirona:sidexis (high 7.8) - [CVE-2022-44263](https://insights.sbomify.com/CVE-2022-44263/): Missing authorization in dentsplysirona:sidexis (high 7.8) - [CVE-2022-44262](https://insights.sbomify.com/CVE-2022-44262/): ff4j is vulnerable to Remote Code Execution (RCE) (critical 9.8) - [CVE-2022-44261](https://insights.sbomify.com/CVE-2022-44261/): Cross-site scripting in averydennison:monarch printer m9855 firmware (medium 6.1) - [CVE-2022-44260](https://insights.sbomify.com/CVE-2022-44260/): Memory corruption in totolink:lr350 firmware (high 8.8) - [CVE-2022-4426](https://insights.sbomify.com/CVE-2022-4426/): Mautic Integration For WooCommerce < 1.0.3 - Arbitrary Options Update via CSRF (medium 4.3) - [CVE-2022-44259](https://insights.sbomify.com/CVE-2022-44259/): Memory corruption in totolink:lr350 firmware (high 8.8) - [CVE-2022-44258](https://insights.sbomify.com/CVE-2022-44258/): Memory corruption in totolink:lr350 firmware (high 8.8) - [CVE-2022-44257](https://insights.sbomify.com/CVE-2022-44257/): Memory corruption in totolink:lr350 firmware (high 8.8) - [CVE-2022-44256](https://insights.sbomify.com/CVE-2022-44256/): Memory corruption in totolink:nr1800x firmware (high 8.8) - [CVE-2022-44255](https://insights.sbomify.com/CVE-2022-44255/): Memory corruption in totolink:lr350 firmware (critical 9.8) - [CVE-2022-44254](https://insights.sbomify.com/CVE-2022-44254/): Memory corruption in totolink:lr350 firmware (high 8.8) - [CVE-2022-44253](https://insights.sbomify.com/CVE-2022-44253/): Memory corruption in totolink:lr350 firmware (high 8.8) - [CVE-2022-44252](https://insights.sbomify.com/CVE-2022-44252/): Command injection in totolink:lr350 firmware (critical 9.8) - [CVE-2022-44251](https://insights.sbomify.com/CVE-2022-44251/): Command injection in totolink:lr350 firmware (critical 9.8) - [CVE-2022-44250](https://insights.sbomify.com/CVE-2022-44250/): Command injection in totolink:lr350 firmware (critical 9.8) - [CVE-2022-44249](https://insights.sbomify.com/CVE-2022-44249/): Command injection in totolink:lr350 firmware (critical 9.8) - [CVE-2022-44244](https://insights.sbomify.com/CVE-2022-44244/): Lin CMS vulnerable to Improper Authentication (medium 6.6) - [CVE-2022-44236](https://insights.sbomify.com/CVE-2022-44236/): Weak cryptography in zed-3:voip simplicity asg (critical 9.8) - [CVE-2022-44235](https://insights.sbomify.com/CVE-2022-44235/): Cross-site scripting in zed-3:voip simplicity asg (medium 6.1) - [CVE-2022-44232](https://insights.sbomify.com/CVE-2022-44232/): Memory corruption in libming:libming (high 7.5) - [CVE-2022-4422](https://insights.sbomify.com/CVE-2022-4422/): SQLi in Bulutdesk Callcenter (critical 9.8) - [CVE-2022-44216](https://insights.sbomify.com/CVE-2022-44216/): Auth bypass in sir:gnuboard (high 7.5) - [CVE-2022-44215](https://insights.sbomify.com/CVE-2022-44215/): Open redirect in southrivertech:titan ftp server (medium 6.1) - [CVE-2022-44213](https://insights.sbomify.com/CVE-2022-44213/): Cross-site scripting in zkteco:automatic data master server (medium 4.8) - [CVE-2022-44212](https://insights.sbomify.com/CVE-2022-44212/): Missing authorization in gl-inet:goodcloud (medium 5.9) - [CVE-2022-44211](https://insights.sbomify.com/CVE-2022-44211/): Missing authorization in gl-inet:goodcloud (high 7.4) - [CVE-2022-4421](https://insights.sbomify.com/CVE-2022-4421/): rAthena FluxCP Service Desk Image URL view.php cross site scripting (low 3.5) - [CVE-2022-44204](https://insights.sbomify.com/CVE-2022-44204/): Memory corruption in dlink:dir-3060 firmware (critical 9.8) - [CVE-2022-44202](https://insights.sbomify.com/CVE-2022-44202/): Memory corruption in dlink:dir-878 firmware (critical 9.8) - [CVE-2022-44201](https://insights.sbomify.com/CVE-2022-44201/): Command injection in dlink:dir-823g firmware (critical 9.8) - [CVE-2022-44200](https://insights.sbomify.com/CVE-2022-44200/): Memory corruption in netgear:r7000p firmware (critical 9.8) - [CVE-2022-44199](https://insights.sbomify.com/CVE-2022-44199/): Memory corruption in netgear:r7000p firmware (critical 9.8) - [CVE-2022-44198](https://insights.sbomify.com/CVE-2022-44198/): Memory corruption in netgear:r7000p firmware (critical 9.8) - [CVE-2022-44197](https://insights.sbomify.com/CVE-2022-44197/): Memory corruption in netgear:r7000p firmware (critical 9.8) - [CVE-2022-44196](https://insights.sbomify.com/CVE-2022-44196/): Memory corruption in netgear:r7000p firmware (critical 9.8) - [CVE-2022-44194](https://insights.sbomify.com/CVE-2022-44194/): Memory corruption in netgear:r7000p firmware (critical 9.8) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/221/