# Vulnerabilities published in 2022 - [CVE-2022-43381](https://insights.sbomify.com/CVE-2022-43381/): IBM AIX denial of service (medium 6.2) - [CVE-2022-43380](https://insights.sbomify.com/CVE-2022-43380/): IBM AIX denial of service (medium 6.2) - [CVE-2022-4338](https://insights.sbomify.com/CVE-2022-4338/): Integer overflow in openvswitch (critical 9.8) - [CVE-2022-43378](https://insights.sbomify.com/CVE-2022-43378/): Other in NetBotz 4 - 355/450/455/550/570 (medium 6.5) - [CVE-2022-43377](https://insights.sbomify.com/CVE-2022-43377/): Auth bypass in NetBotz 4 - 355/450/455/550/570 (high 7.5) - [CVE-2022-43376](https://insights.sbomify.com/CVE-2022-43376/): Cross-site scripting in NetBotz 4 - 355/450/455/550/570 (high 7.6) - [CVE-2022-43372](https://insights.sbomify.com/CVE-2022-43372/): Cross-site scripting in emlog:emlog (medium 4.8) - [CVE-2022-4337](https://insights.sbomify.com/CVE-2022-4337/): Memory corruption in openvswitch (critical 9.8) - [CVE-2022-43369](https://insights.sbomify.com/CVE-2022-43369/): Cross-site scripting in phpgurukul:auto\/taxi stand management system (medium 6.1) - [CVE-2022-43367](https://insights.sbomify.com/CVE-2022-43367/): Command injection in ip-com:ew9 firmware (critical 9.8) - [CVE-2022-43366](https://insights.sbomify.com/CVE-2022-43366/): Information disclosure in ip-com:ew9 firmware (high 7.5) - [CVE-2022-43365](https://insights.sbomify.com/CVE-2022-43365/): Memory corruption in ip-com:ew9 firmware (high 7.5) - [CVE-2022-43364](https://insights.sbomify.com/CVE-2022-43364/): Missing authorization in ip-com:ew9 firmware (high 7.5) - [CVE-2022-43363](https://insights.sbomify.com/CVE-2022-43363/): Cross-site scripting in telegram:telegram (medium 6.1) - [CVE-2022-43362](https://insights.sbomify.com/CVE-2022-43362/): SQL injection in slims:senayan library management system (high 7.2) - [CVE-2022-43361](https://insights.sbomify.com/CVE-2022-43361/): Cross-site scripting in slims:senayan library management system (medium 4.8) - [CVE-2022-4336](https://insights.sbomify.com/CVE-2022-4336/): Cross-site scripting in Baota (medium 5.4) - [CVE-2022-43359](https://insights.sbomify.com/CVE-2022-43359/): Memory corruption in gifdec project:gifdec (high 7.8) - [CVE-2022-43358](https://insights.sbomify.com/CVE-2022-43358/): Memory corruption in sass-lang:libsass (high 7.5) - [CVE-2022-43357](https://insights.sbomify.com/CVE-2022-43357/): Memory corruption in sass-lang:libsass (high 7.5) - [CVE-2022-43355](https://insights.sbomify.com/CVE-2022-43355/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-43354](https://insights.sbomify.com/CVE-2022-43354/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-43353](https://insights.sbomify.com/CVE-2022-43353/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-43352](https://insights.sbomify.com/CVE-2022-43352/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-43351](https://insights.sbomify.com/CVE-2022-43351/): Path traversal in sanitization management system project:sanitization management system (medium 6.5) - [CVE-2022-43350](https://insights.sbomify.com/CVE-2022-43350/): SQL injection in sanitization management system project:sanitization management system (high 7.2) - [CVE-2022-4335](https://insights.sbomify.com/CVE-2022-4335/): Server-side request forgery in GitLab (medium 4.3) - [CVE-2022-43343](https://insights.sbomify.com/CVE-2022-43343/): Memory corruption in n-prolog project:n-prolog (high 7.5) - [CVE-2022-43342](https://insights.sbomify.com/CVE-2022-43342/): Cross-site scripting in eramba:eramba (medium 5.4) - [CVE-2022-43340](https://insights.sbomify.com/CVE-2022-43340/): Cross-site request forgery in dzzoffice:dzzoffice (high 8.8) - [CVE-2022-43333](https://insights.sbomify.com/CVE-2022-43333/): Code injection in teleniasoftware:tvox (critical 9.8) - [CVE-2022-43332](https://insights.sbomify.com/CVE-2022-43332/): Cross-site scripting in wondercms:wondercms (medium 6.1) - [CVE-2022-43331](https://insights.sbomify.com/CVE-2022-43331/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43330](https://insights.sbomify.com/CVE-2022-43330/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-4333](https://insights.sbomify.com/CVE-2022-4333/): Sprecher: Sprecon maintenance access with hardcoded credentials (critical 9.8) - [CVE-2022-43329](https://insights.sbomify.com/CVE-2022-43329/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43328](https://insights.sbomify.com/CVE-2022-43328/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43326](https://insights.sbomify.com/CVE-2022-43326/): Missing authorization in telosalliance:omnia mpx node firmware (high 7.5) - [CVE-2022-43325](https://insights.sbomify.com/CVE-2022-43325/): Command injection in telosalliance:omnia mpx node firmware (critical 9.8) - [CVE-2022-43323](https://insights.sbomify.com/CVE-2022-43323/): Cross-site request forgery in eyoucms:eyoucms (high 8.8) - [CVE-2022-43321](https://insights.sbomify.com/CVE-2022-43321/): Cross-site scripting in shopwind:shopwind (medium 6.1) - [CVE-2022-43320](https://insights.sbomify.com/CVE-2022-43320/): FeehiCMS is vulnerable to Cross-Site Scripting (XSS) (medium 6.1) - [CVE-2022-4332](https://insights.sbomify.com/CVE-2022-4332/): Sprecher: Vulnerable firmware verification (medium 6.8) - [CVE-2022-43319](https://insights.sbomify.com/CVE-2022-43319/): Path traversal in simple e-learning system project:simple e-learning system (high 7.5) - [CVE-2022-43318](https://insights.sbomify.com/CVE-2022-43318/): SQL injection in oretnom23:human resource management system (high 8.8) - [CVE-2022-43317](https://insights.sbomify.com/CVE-2022-43317/): Cross-site scripting in oretnom23:human resource management system (medium 6.1) - [CVE-2022-43310](https://insights.sbomify.com/CVE-2022-43310/): Privilege escalation in foxitsoftware:foxit reader (high 7.8) - [CVE-2022-4331](https://insights.sbomify.com/CVE-2022-4331/): Auth bypass in GitLab (medium 5.7) - [CVE-2022-43309](https://insights.sbomify.com/CVE-2022-43309/): Misconfiguration in supermicro:h11dsi-nt firmware (medium 5.5) - [CVE-2022-43308](https://insights.sbomify.com/CVE-2022-43308/): Privilege escalation in intelbras:sg 2404 mr firmware (high 7.8) - [CVE-2022-43306](https://insights.sbomify.com/CVE-2022-43306/): Supply chain in democritus:d8s-timer (high 8.8) - [CVE-2022-43305](https://insights.sbomify.com/CVE-2022-43305/): Supply chain in democritus:d8s-python (critical 9.8) - [CVE-2022-43304](https://insights.sbomify.com/CVE-2022-43304/): Supply chain in democritus:d8s-timer (critical 9.8) - [CVE-2022-43303](https://insights.sbomify.com/CVE-2022-43303/): Supply chain in democritus:d8s-strings (critical 9.8) - [CVE-2022-4330](https://insights.sbomify.com/CVE-2022-4330/): WP Attachments < 5.0.6 - Admin+ Stored XSS (medium 4.8) - [CVE-2022-43295](https://insights.sbomify.com/CVE-2022-43295/): Memory corruption in xpdfreader:xpdf (medium 5.5) - [CVE-2022-43294](https://insights.sbomify.com/CVE-2022-43294/): Memory corruption in tasmota project:tasmota (critical 9.8) - [CVE-2022-43293](https://insights.sbomify.com/CVE-2022-43293/): Path traversal in wacom:driver (medium 5.9) - [CVE-2022-43292](https://insights.sbomify.com/CVE-2022-43292/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43291](https://insights.sbomify.com/CVE-2022-43291/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43290](https://insights.sbomify.com/CVE-2022-43290/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-4329](https://insights.sbomify.com/CVE-2022-4329/): Product list Widget for Woocommerce <= 1.0 - Reflected XSS (medium 6.1) - [CVE-2022-43289](https://insights.sbomify.com/CVE-2022-43289/): Memory corruption in entropymine:deark (high 7.8) - [CVE-2022-43288](https://insights.sbomify.com/CVE-2022-43288/): SQL injection in rukovoditel:rukovoditel (high 8.8) - [CVE-2022-43286](https://insights.sbomify.com/CVE-2022-43286/): Use after free in f5:njs (critical 9.8) - [CVE-2022-43285](https://insights.sbomify.com/CVE-2022-43285/): Memory corruption in f5:njs (high 7.5) - [CVE-2022-43284](https://insights.sbomify.com/CVE-2022-43284/): Memory corruption in f5:njs (high 7.5) - [CVE-2022-43283](https://insights.sbomify.com/CVE-2022-43283/): Denial of service in webassembly:wabt (medium 5.5) - [CVE-2022-43282](https://insights.sbomify.com/CVE-2022-43282/): Memory corruption in webassembly:wabt (high 7.1) - [CVE-2022-43281](https://insights.sbomify.com/CVE-2022-43281/): Memory corruption in webassembly:wasm (high 7.8) - [CVE-2022-43280](https://insights.sbomify.com/CVE-2022-43280/): Memory corruption in webassembly:wabt (high 7.1) - [CVE-2022-4328](https://insights.sbomify.com/CVE-2022-4328/): WooCommerce Checkout Field Manager < 18.0 - Unauthenticated Arbitrary File Upload (critical 9.8) - [CVE-2022-43279](https://insights.sbomify.com/CVE-2022-43279/): SQL injection in limesurvey:limesurvey (high 7.2) - [CVE-2022-43278](https://insights.sbomify.com/CVE-2022-43278/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43277](https://insights.sbomify.com/CVE-2022-43277/): File upload in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43276](https://insights.sbomify.com/CVE-2022-43276/): SQL injection in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43275](https://insights.sbomify.com/CVE-2022-43275/): File upload in canteen management system project:canteen management system (high 7.2) - [CVE-2022-43272](https://insights.sbomify.com/CVE-2022-43272/): Denial of service in offis:dcmtk (high 7.5) - [CVE-2022-43271](https://insights.sbomify.com/CVE-2022-43271/): Cross-site scripting in inhabit:move crm (medium 5.4) - [CVE-2022-43265](https://insights.sbomify.com/CVE-2022-43265/): File upload in canteen management system project:canteen management system (critical 9.8) - [CVE-2022-43264](https://insights.sbomify.com/CVE-2022-43264/): Path traversal in guitar-pro:guitar pro (high 7.5) - [CVE-2022-43263](https://insights.sbomify.com/CVE-2022-43263/): Cross-site scripting in guitar-pro:guitar pro (medium 6.1) - [CVE-2022-43262](https://insights.sbomify.com/CVE-2022-43262/): SQL injection in oretnom23:human resource management system (critical 9.8) - [CVE-2022-43260](https://insights.sbomify.com/CVE-2022-43260/): Memory corruption in tenda:ac18 firmware (critical 9.8) - [CVE-2022-4326](https://insights.sbomify.com/CVE-2022-4326/): Trellix xAgent permission bypass vulnerability (medium 5.5) - [CVE-2022-43259](https://insights.sbomify.com/CVE-2022-43259/): Memory corruption in tenda:ac15 firmware (high 7.5) - [CVE-2022-43256](https://insights.sbomify.com/CVE-2022-43256/): SQL injection in seacms:seacms (critical 9.8) - [CVE-2022-43255](https://insights.sbomify.com/CVE-2022-43255/): Denial of service in gpac:gpac (medium 5.5) - [CVE-2022-43254](https://insights.sbomify.com/CVE-2022-43254/): Denial of service in gpac:gpac (medium 5.5) - [CVE-2022-43253](https://insights.sbomify.com/CVE-2022-43253/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43252](https://insights.sbomify.com/CVE-2022-43252/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43250](https://insights.sbomify.com/CVE-2022-43250/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-4325](https://insights.sbomify.com/CVE-2022-4325/): Post Status Notifier Lite < 1.10.1 - Reflected XSS (medium 6.1) - [CVE-2022-43249](https://insights.sbomify.com/CVE-2022-43249/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43248](https://insights.sbomify.com/CVE-2022-43248/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43245](https://insights.sbomify.com/CVE-2022-43245/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43244](https://insights.sbomify.com/CVE-2022-43244/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43243](https://insights.sbomify.com/CVE-2022-43243/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43242](https://insights.sbomify.com/CVE-2022-43242/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-43241](https://insights.sbomify.com/CVE-2022-43241/): Memory corruption in debian:debian linux (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/228/