# Vulnerabilities published in 2022


- [CVE-2022-44193](https://insights.sbomify.com/CVE-2022-44193/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44191](https://insights.sbomify.com/CVE-2022-44191/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44190](https://insights.sbomify.com/CVE-2022-44190/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44188](https://insights.sbomify.com/CVE-2022-44188/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44187](https://insights.sbomify.com/CVE-2022-44187/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44186](https://insights.sbomify.com/CVE-2022-44186/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44184](https://insights.sbomify.com/CVE-2022-44184/): Memory corruption in netgear:r7000p firmware (critical 9.8)
- [CVE-2022-44183](https://insights.sbomify.com/CVE-2022-44183/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44180](https://insights.sbomify.com/CVE-2022-44180/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-4418](https://insights.sbomify.com/CVE-2022-4418/): Privilege escalation in Acronis Cyber Protect Home Office (high 7.8)
- [CVE-2022-44178](https://insights.sbomify.com/CVE-2022-44178/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44177](https://insights.sbomify.com/CVE-2022-44177/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44176](https://insights.sbomify.com/CVE-2022-44176/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44175](https://insights.sbomify.com/CVE-2022-44175/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44174](https://insights.sbomify.com/CVE-2022-44174/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44172](https://insights.sbomify.com/CVE-2022-44172/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-44171](https://insights.sbomify.com/CVE-2022-44171/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-4417](https://insights.sbomify.com/CVE-2022-4417/): WP Cerber < 9.3.3 - User Enumeration Bypass via Rest API (medium 5.3)
- [CVE-2022-44169](https://insights.sbomify.com/CVE-2022-44169/): Memory corruption in tenda:ac15 firmware (high 7.5)
- [CVE-2022-44168](https://insights.sbomify.com/CVE-2022-44168/): Memory corruption in tenda:ac15 firmware (high 7.5)
- [CVE-2022-44167](https://insights.sbomify.com/CVE-2022-44167/): Memory corruption in tenda:ac15 firmware (high 7.5)
- [CVE-2022-44163](https://insights.sbomify.com/CVE-2022-44163/): Memory corruption in tenda:ac21 firmware (high 7.5)
- [CVE-2022-4416](https://insights.sbomify.com/CVE-2022-4416/): RainyGao DocSys getReposAllUsers.do getReposAllUsers sql injection (medium 6.3)
- [CVE-2022-44158](https://insights.sbomify.com/CVE-2022-44158/): Memory corruption in tenda:ac21 firmware (high 7.5)
- [CVE-2022-44156](https://insights.sbomify.com/CVE-2022-44156/): Memory corruption in tenda:ac15 firmware (high 7.5)
- [CVE-2022-44153](https://insights.sbomify.com/CVE-2022-44153/): Cross-site scripting in rapidscada:rapid scada (medium 6.1)
- [CVE-2022-44151](https://insights.sbomify.com/CVE-2022-44151/): SQL injection in sanitization management system project:sanitization management system (critical 9.8)
- [CVE-2022-4415](https://insights.sbomify.com/CVE-2022-4415/): Information disclosure in systemd (medium 5.5)
- [CVE-2022-44149](https://insights.sbomify.com/CVE-2022-44149/): Command injection in nexxtsolutions:amp300 firmware (high 8.8)
- [CVE-2022-44140](https://insights.sbomify.com/CVE-2022-44140/): SQL injection in jizhicms:jizhicms (high 8.8)
- [CVE-2022-4414](https://insights.sbomify.com/CVE-2022-4414/): Cross-site Scripting (XSS) - DOM in nuxt/framework (medium 6.1)
- [CVE-2022-44139](https://insights.sbomify.com/CVE-2022-44139/): SQL injection in apartment visitors management system project:apartment visitors management system (critical 9.8)
- [CVE-2022-44137](https://insights.sbomify.com/CVE-2022-44137/): SQL injection in sanitization management system project:sanitization management system (high 7.2)
- [CVE-2022-44136](https://insights.sbomify.com/CVE-2022-44136/): Zenario CMS is vulnerable to Remote Code Execution (RCE). (critical 9.8)
- [CVE-2022-4413](https://insights.sbomify.com/CVE-2022-4413/): Cross-site Scripting (XSS) - Reflected in nuxt/framework (medium 6.1)
- [CVE-2022-44120](https://insights.sbomify.com/CVE-2022-44120/): SQL injection in dedebiz:dedecmsv6 (critical 9.8)
- [CVE-2022-44118](https://insights.sbomify.com/CVE-2022-44118/): Code injection in dedebiz:dedecmsv6 (critical 9.8)
- [CVE-2022-44117](https://insights.sbomify.com/CVE-2022-44117/): SQL injection in boa:boa (critical 9.8)
- [CVE-2022-44109](https://insights.sbomify.com/CVE-2022-44109/): Memory corruption in pdftojson project:pdftojson (critical 9.8)
- [CVE-2022-44108](https://insights.sbomify.com/CVE-2022-44108/): Memory corruption in pdftojson project:pdftojson (critical 9.8)
- [CVE-2022-4410](https://insights.sbomify.com/CVE-2022-4410/): Permalink Manager Lite <= 2.2.20.3 - Authenticated Stored Cross-Site Scripting (medium 6.4)
- [CVE-2022-44097](https://insights.sbomify.com/CVE-2022-44097/): Hardcoded credentials in book store management system project:book store management system (critical 9.8)
- [CVE-2022-44096](https://insights.sbomify.com/CVE-2022-44096/): Hardcoded credentials in sanitization management system project:sanitization management system (critical 9.8)
- [CVE-2022-4409](https://insights.sbomify.com/CVE-2022-4409/): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaq (medium 6.3)
- [CVE-2022-44089](https://insights.sbomify.com/CVE-2022-44089/): Code injection in ecisp:espcms (critical 9.8)
- [CVE-2022-44088](https://insights.sbomify.com/CVE-2022-44088/): Code injection in ecisp:espcms (critical 9.8)
- [CVE-2022-44087](https://insights.sbomify.com/CVE-2022-44087/): Code injection in ecisp:espcms (critical 9.8)
- [CVE-2022-44081](https://insights.sbomify.com/CVE-2022-44081/): Memory corruption in lodev:lodepng (medium 5.5)
- [CVE-2022-4408](https://insights.sbomify.com/CVE-2022-4408/): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (medium 4.3)
- [CVE-2022-44079](https://insights.sbomify.com/CVE-2022-44079/): Memory corruption in pycdc project:pycdc (medium 5.5)
- [CVE-2022-44073](https://insights.sbomify.com/CVE-2022-44073/): Cross-site Scripting in Zenario (medium 5.4)
- [CVE-2022-44071](https://insights.sbomify.com/CVE-2022-44071/): Cross-site Scripting in Zenario (medium 5.4)
- [CVE-2022-44070](https://insights.sbomify.com/CVE-2022-44070/): Cross-site Scripting in Zenario (medium 5.4)
- [CVE-2022-4407](https://insights.sbomify.com/CVE-2022-4407/): Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq (critical 9.8)
- [CVE-2022-44069](https://insights.sbomify.com/CVE-2022-44069/): Cross-site Scripting in Zenario (medium 5.4)
- [CVE-2022-44054](https://insights.sbomify.com/CVE-2022-44054/): Supply chain in democritus:d8s-xml (critical 9.8)
- [CVE-2022-44053](https://insights.sbomify.com/CVE-2022-44053/): Supply chain in democritus:d8s-networking (critical 9.8)
- [CVE-2022-44052](https://insights.sbomify.com/CVE-2022-44052/): Supply chain in democritus:d8s-dates (critical 9.8)
- [CVE-2022-44051](https://insights.sbomify.com/CVE-2022-44051/): Supply chain in democritus:d8s-stats (critical 9.8)
- [CVE-2022-44050](https://insights.sbomify.com/CVE-2022-44050/): Supply chain in democritus:d8s-networking (critical 9.8)
- [CVE-2022-44049](https://insights.sbomify.com/CVE-2022-44049/): Supply chain in democritus:d8s-python (critical 9.8)
- [CVE-2022-44048](https://insights.sbomify.com/CVE-2022-44048/): Supply chain in democritus:d8s-urls (critical 9.8)
- [CVE-2022-44039](https://insights.sbomify.com/CVE-2022-44039/): Other in franklinfueling:colibri firmware (critical 9.8)
- [CVE-2022-44038](https://insights.sbomify.com/CVE-2022-44038/): Code injection in russound:xsourceplayer 777d firmware (critical 9.8)
- [CVE-2022-44037](https://insights.sbomify.com/CVE-2022-44037/): Missing authorization in apsystems:ecu-c firmware (high 8.8)
- [CVE-2022-44036](https://insights.sbomify.com/CVE-2022-44036/): File upload in b2evolution:b2evolution cms (high 7.2)
- [CVE-2022-44034](https://insights.sbomify.com/CVE-2022-44034/): Use after free in linux:linux kernel (medium 6.4)
- [CVE-2022-44033](https://insights.sbomify.com/CVE-2022-44033/): Use after free in linux:linux kernel (medium 6.4)
- [CVE-2022-44032](https://insights.sbomify.com/CVE-2022-44032/): Use after free in linux:linux kernel (medium 6.4)
- [CVE-2022-44031](https://insights.sbomify.com/CVE-2022-44031/): Cross-site scripting in redmine:redmine (medium 6.1)
- [CVE-2022-44030](https://insights.sbomify.com/CVE-2022-44030/): Missing authorization in redmine:redmine (high 7.5)
- [CVE-2022-4403](https://insights.sbomify.com/CVE-2022-4403/): SourceCodester Canteen Management System ajax_represent.php sql injection (medium 6.3)
- [CVE-2022-44029](https://insights.sbomify.com/CVE-2022-44029/): Cross-site scripting in netscout:ngeniusone (medium 6.1)
- [CVE-2022-44028](https://insights.sbomify.com/CVE-2022-44028/): Cross-site scripting in netscout:ngeniusone (medium 6.1)
- [CVE-2022-44027](https://insights.sbomify.com/CVE-2022-44027/): Cross-site scripting in netscout:ngeniusone (medium 6.1)
- [CVE-2022-44026](https://insights.sbomify.com/CVE-2022-44026/): Cross-site scripting in netscout:ngeniusone (high 7.1)
- [CVE-2022-44025](https://insights.sbomify.com/CVE-2022-44025/): Cross-site scripting in netscout:ngeniusone (medium 6.1)
- [CVE-2022-44024](https://insights.sbomify.com/CVE-2022-44024/): Cross-site scripting in netscout:ngeniusone (medium 6.1)
- [CVE-2022-44023](https://insights.sbomify.com/CVE-2022-44023/): Information disclosure in pwndoc project:pwndoc (medium 5.3)
- [CVE-2022-44022](https://insights.sbomify.com/CVE-2022-44022/): Information disclosure in pwndoc project:pwndoc (medium 5.3)
- [CVE-2022-44020](https://insights.sbomify.com/CVE-2022-44020/): OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions (medium 5.5)
- [CVE-2022-4402](https://insights.sbomify.com/CVE-2022-4402/): RainyGao DocSys ZIP File Decompression path traversal (medium 4.7)
- [CVE-2022-44019](https://insights.sbomify.com/CVE-2022-44019/): Command injection in totaljs:total.js (high 8.8)
- [CVE-2022-44018](https://insights.sbomify.com/CVE-2022-44018/): Null dereference in softing:uatoolkit embedded (high 7.5)
- [CVE-2022-44017](https://insights.sbomify.com/CVE-2022-44017/): Auth bypass in simmeth:lieferantenmanager (high 7.5)
- [CVE-2022-44016](https://insights.sbomify.com/CVE-2022-44016/): Path traversal in simmeth:lieferantenmanager (high 7.5)
- [CVE-2022-44015](https://insights.sbomify.com/CVE-2022-44015/): SQL injection in simmeth:lieferantenmanager (critical 9.8)
- [CVE-2022-44014](https://insights.sbomify.com/CVE-2022-44014/): Missing authorization in simmeth:lieferantenmanager (medium 6.5)
- [CVE-2022-44013](https://insights.sbomify.com/CVE-2022-44013/): Auth bypass in simmeth:lieferantenmanager (critical 9.1)
- [CVE-2022-44012](https://insights.sbomify.com/CVE-2022-44012/): Cross-site scripting in simmeth:lieferantenmanager (medium 5.4)
- [CVE-2022-44011](https://insights.sbomify.com/CVE-2022-44011/): Memory corruption in clickhouse:clickhouse (medium 6.5)
- [CVE-2022-44010](https://insights.sbomify.com/CVE-2022-44010/): Memory corruption in clickhouse:clickhouse (high 7.5)
- [CVE-2022-4401](https://insights.sbomify.com/CVE-2022-4401/): pallidlight online-course-selection-system cross site scripting (low 3.5)
- [CVE-2022-44009](https://insights.sbomify.com/CVE-2022-44009/): Missing authorization in stackstorm:stackstorm (high 7.5)
- [CVE-2022-44008](https://insights.sbomify.com/CVE-2022-44008/): Path traversal in backclick:backclick (medium 6.5)
- [CVE-2022-44007](https://insights.sbomify.com/CVE-2022-44007/): Auth bypass in backclick:backclick (high 8.8)
- [CVE-2022-44006](https://insights.sbomify.com/CVE-2022-44006/): Path traversal in backclick:backclick (critical 9.8)
- [CVE-2022-44005](https://insights.sbomify.com/CVE-2022-44005/): Business logic in backclick:backclick (medium 5.3)
- [CVE-2022-44004](https://insights.sbomify.com/CVE-2022-44004/): Auth bypass in backclick:backclick (critical 9.8)
- [CVE-2022-44003](https://insights.sbomify.com/CVE-2022-44003/): SQL injection in backclick:backclick (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/222/