# Vulnerabilities published in 2022


- [CVE-2022-43697](https://insights.sbomify.com/CVE-2022-43697/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2022-43696](https://insights.sbomify.com/CVE-2022-43696/): Cross-site scripting in open-xchange:ox app suite (medium 6.1)
- [CVE-2022-43695](https://insights.sbomify.com/CVE-2022-43695/): Concrete CMS Cross-site Scripting vulnerability (medium 4.8)
- [CVE-2022-43694](https://insights.sbomify.com/CVE-2022-43694/): Concrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation library (medium 6.1)
- [CVE-2022-43693](https://insights.sbomify.com/CVE-2022-43693/): Concrete CMS vulnerable to Cross-site Request Forgery (high 8.8)
- [CVE-2022-43692](https://insights.sbomify.com/CVE-2022-43692/): Concrete CMS vulnerable to Reflected Cross-site Scripting (medium 6.1)
- [CVE-2022-43691](https://insights.sbomify.com/CVE-2022-43691/): Concrete CMS vulnerable to Cleartext Transmission of Sensitive Information (medium 5.3)
- [CVE-2022-43690](https://insights.sbomify.com/CVE-2022-43690/): Concrete CMS vulnerable to Improper Authentication (medium 6.3)
- [CVE-2022-4369](https://insights.sbomify.com/CVE-2022-4369/): WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS (medium 6.1)
- [CVE-2022-43689](https://insights.sbomify.com/CVE-2022-43689/): Concrete CMS vulnerable to XML External Entity (medium 5.3)
- [CVE-2022-43688](https://insights.sbomify.com/CVE-2022-43688/): Concrete CMS vulnerable to Cross-site Scripting (medium 4.8)
- [CVE-2022-43687](https://insights.sbomify.com/CVE-2022-43687/): Concrete CMS vulnerable to Session Fixation (medium 5.4)
- [CVE-2022-43686](https://insights.sbomify.com/CVE-2022-43686/): Concrete CMS vulnerable to Uncontrolled Resource Consumption leading to DoS (medium 6.5)
- [CVE-2022-43685](https://insights.sbomify.com/CVE-2022-43685/): CKAN contains Improper Authentication leading to account takeover (high 8.8)
- [CVE-2022-43684](https://insights.sbomify.com/CVE-2022-43684/): ACL bypass in Reporting functionality (critical 9.9)
- [CVE-2022-43681](https://insights.sbomify.com/CVE-2022-43681/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2022-43680](https://insights.sbomify.com/CVE-2022-43680/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-4368](https://insights.sbomify.com/CVE-2022-4368/): WP CSV <= 1.8.0.0 - Reflected XSS via CSV Import (medium 6.1)
- [CVE-2022-43679](https://insights.sbomify.com/CVE-2022-43679/): Misconfiguration in owncloud:owncloud (medium 4.2)
- [CVE-2022-43677](https://insights.sbomify.com/CVE-2022-43677/): free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders (medium 5.5)
- [CVE-2022-43675](https://insights.sbomify.com/CVE-2022-43675/): Cross-site scripting in nokia:network functions manager for transport (medium 6.1)
- [CVE-2022-43673](https://insights.sbomify.com/CVE-2022-43673/): Information disclosure in wire:wire (medium 4.7)
- [CVE-2022-43672](https://insights.sbomify.com/CVE-2022-43672/): SQL injection in zohocorp:manageengine access manager plus (critical 9.8)
- [CVE-2022-43671](https://insights.sbomify.com/CVE-2022-43671/): SQL injection in zohocorp:manageengine access manager plus (critical 9.8)
- [CVE-2022-43670](https://insights.sbomify.com/CVE-2022-43670/): XSS in Sling CMS Reference App Taxonomy Path (medium 5.4)
- [CVE-2022-43668](https://insights.sbomify.com/CVE-2022-43668/): Cross-site scripting in Typora (medium 6.1)
- [CVE-2022-43667](https://insights.sbomify.com/CVE-2022-43667/): Memory corruption in CX-Programmer (high 7.8)
- [CVE-2022-43666](https://insights.sbomify.com/CVE-2022-43666/): Information disclosure in Intel Unison software (low 3.3)
- [CVE-2022-43665](https://insights.sbomify.com/CVE-2022-43665/): Denial of service in Alyac (medium 5.0)
- [CVE-2022-43664](https://insights.sbomify.com/CVE-2022-43664/): Use after free in Ichitaro (high 7.8)
- [CVE-2022-43663](https://insights.sbomify.com/CVE-2022-43663/): Integer overflow in KingHistorian (high 8.1)
- [CVE-2022-43662](https://insights.sbomify.com/CVE-2022-43662/): Kernel subsystem in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. (medium 4.0)
- [CVE-2022-43660](https://insights.sbomify.com/CVE-2022-43660/): Code injection in Movable Type (high 7.2)
- [CVE-2022-4366](https://insights.sbomify.com/CVE-2022-4366/): Missing Authorization in lirantal/daloradius (medium 5.3)
- [CVE-2022-43656](https://insights.sbomify.com/CVE-2022-43656/): Bentley View FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-43655](https://insights.sbomify.com/CVE-2022-43655/): Bentley View FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-43654](https://insights.sbomify.com/CVE-2022-43654/): NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-43653](https://insights.sbomify.com/CVE-2022-43653/): Bentley View SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-43652](https://insights.sbomify.com/CVE-2022-43652/): Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-43651](https://insights.sbomify.com/CVE-2022-43651/): Bentley View SKP File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-43650](https://insights.sbomify.com/CVE-2022-43650/): Memory corruption in WinRAR (low 2.5)
- [CVE-2022-4365](https://insights.sbomify.com/CVE-2022-4365/): Information disclosure in GitLab (medium 5.5)
- [CVE-2022-43649](https://insights.sbomify.com/CVE-2022-43649/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-43648](https://insights.sbomify.com/CVE-2022-43648/): Memory corruption in DIR-3040 (high 8.8)
- [CVE-2022-43647](https://insights.sbomify.com/CVE-2022-43647/): Command injection in DIR-825 (high 8.8)
- [CVE-2022-43646](https://insights.sbomify.com/CVE-2022-43646/): Command injection in DIR-825 (high 8.8)
- [CVE-2022-43645](https://insights.sbomify.com/CVE-2022-43645/): Command injection in DIR-825 (high 8.8)
- [CVE-2022-43644](https://insights.sbomify.com/CVE-2022-43644/): Command injection in DIR-825 (high 8.8)
- [CVE-2022-43643](https://insights.sbomify.com/CVE-2022-43643/): Command injection in DIR-825 (high 8.8)
- [CVE-2022-43642](https://insights.sbomify.com/CVE-2022-43642/): Command injection in DIR-825 (high 8.8)
- [CVE-2022-43641](https://insights.sbomify.com/CVE-2022-43641/): Use after free in PDF Reader (low 3.3)
- [CVE-2022-43640](https://insights.sbomify.com/CVE-2022-43640/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-4364](https://insights.sbomify.com/CVE-2022-4364/): Teledyne FLIR AX8 Web Service palette.php command injection (medium 6.9)
- [CVE-2022-43639](https://insights.sbomify.com/CVE-2022-43639/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-43638](https://insights.sbomify.com/CVE-2022-43638/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-43637](https://insights.sbomify.com/CVE-2022-43637/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-43636](https://insights.sbomify.com/CVE-2022-43636/): Weak cryptography in TL-WR940N (high 7.5)
- [CVE-2022-43635](https://insights.sbomify.com/CVE-2022-43635/): Auth bypass in TL-WR940N (medium 6.5)
- [CVE-2022-43634](https://insights.sbomify.com/CVE-2022-43634/): Memory corruption in Netatalk (critical 9.8)
- [CVE-2022-43633](https://insights.sbomify.com/CVE-2022-43633/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43632](https://insights.sbomify.com/CVE-2022-43632/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43631](https://insights.sbomify.com/CVE-2022-43631/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43630](https://insights.sbomify.com/CVE-2022-43630/): Memory corruption in DIR-1935 (high 8.8)
- [CVE-2022-4363](https://insights.sbomify.com/CVE-2022-4363/): Wholesale Market <= 2.2.2 - Settings Update via CSRF (medium 6.5)
- [CVE-2022-43629](https://insights.sbomify.com/CVE-2022-43629/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43628](https://insights.sbomify.com/CVE-2022-43628/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43627](https://insights.sbomify.com/CVE-2022-43627/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43626](https://insights.sbomify.com/CVE-2022-43626/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43625](https://insights.sbomify.com/CVE-2022-43625/): Memory corruption in DIR-1935 (medium 6.8)
- [CVE-2022-43624](https://insights.sbomify.com/CVE-2022-43624/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43623](https://insights.sbomify.com/CVE-2022-43623/): Command injection in DIR-1935 (medium 6.8)
- [CVE-2022-43622](https://insights.sbomify.com/CVE-2022-43622/): Memory corruption in DIR-1935 (high 8.8)
- [CVE-2022-43621](https://insights.sbomify.com/CVE-2022-43621/): Auth bypass in DIR-1935 (high 8.8)
- [CVE-2022-43620](https://insights.sbomify.com/CVE-2022-43620/): Auth bypass in DIR-1935 (high 8.8)
- [CVE-2022-4362](https://insights.sbomify.com/CVE-2022-4362/): Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode (medium 5.4)
- [CVE-2022-43619](https://insights.sbomify.com/CVE-2022-43619/): Memory corruption in DIR-1935 (medium 6.8)
- [CVE-2022-43618](https://insights.sbomify.com/CVE-2022-43618/): Memory corruption in CorelDRAW Graphics Suite (high 7.8)
- [CVE-2022-43617](https://insights.sbomify.com/CVE-2022-43617/): Memory corruption in CorelDRAW Graphics Suite (high 7.8)
- [CVE-2022-43616](https://insights.sbomify.com/CVE-2022-43616/): Memory corruption in CorelDRAW Graphics Suite (high 7.8)
- [CVE-2022-43615](https://insights.sbomify.com/CVE-2022-43615/): Memory corruption in CorelDRAW Graphics Suite (low 3.3)
- [CVE-2022-43614](https://insights.sbomify.com/CVE-2022-43614/): Memory corruption in CorelDRAW Graphics Suite (high 7.8)
- [CVE-2022-43613](https://insights.sbomify.com/CVE-2022-43613/): Memory corruption in CorelDRAW Graphics Suite (high 7.8)
- [CVE-2022-43612](https://insights.sbomify.com/CVE-2022-43612/): Memory corruption in CorelDRAW Graphics Suite (low 3.3)
- [CVE-2022-43611](https://insights.sbomify.com/CVE-2022-43611/): Memory corruption in CorelDRAW Graphics Suite (low 3.3)
- [CVE-2022-43610](https://insights.sbomify.com/CVE-2022-43610/): Memory corruption in CorelDRAW Graphics Suite (low 3.3)
- [CVE-2022-4361](https://insights.sbomify.com/CVE-2022-4361/): Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC (critical 10.0)
- [CVE-2022-43609](https://insights.sbomify.com/CVE-2022-43609/): Memory corruption in IronCAD (high 7.8)
- [CVE-2022-43608](https://insights.sbomify.com/CVE-2022-43608/): Integer overflow in imageCLASS MF644Cdw (high 8.8)
- [CVE-2022-43607](https://insights.sbomify.com/CVE-2022-43607/): Open Babel has out-of-bounds write in MOL2 attribute/value parser (high 8.1)
- [CVE-2022-43606](https://insights.sbomify.com/CVE-2022-43606/): Null dereference in OpENer (high 7.5)
- [CVE-2022-43605](https://insights.sbomify.com/CVE-2022-43605/): Memory corruption in OpENer (critical 10.0)
- [CVE-2022-43604](https://insights.sbomify.com/CVE-2022-43604/): Memory corruption in OpENer (critical 10.0)
- [CVE-2022-43603](https://insights.sbomify.com/CVE-2022-43603/): Null dereference in OpenImageIO (medium 5.9)
- [CVE-2022-43602](https://insights.sbomify.com/CVE-2022-43602/): Memory corruption in OpenImageIO (high 8.1)
- [CVE-2022-43601](https://insights.sbomify.com/CVE-2022-43601/): Memory corruption in OpenImageIO (high 8.1)
- [CVE-2022-43600](https://insights.sbomify.com/CVE-2022-43600/): Memory corruption in OpenImageIO (high 8.1)
- [CVE-2022-4360](https://insights.sbomify.com/CVE-2022-4360/): WP RSS By Publishers <= 0.1 - Admin+ SQLi (high 7.2)
- [CVE-2022-43599](https://insights.sbomify.com/CVE-2022-43599/): Memory corruption in OpenImageIO (high 8.1)
- [CVE-2022-43598](https://insights.sbomify.com/CVE-2022-43598/): Memory corruption in OpenImageIO (high 8.1)
- [CVE-2022-43597](https://insights.sbomify.com/CVE-2022-43597/): Memory corruption in OpenImageIO (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/225/