# Vulnerabilities published in 2022


- [CVE-2022-43240](https://insights.sbomify.com/CVE-2022-43240/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2022-4324](https://insights.sbomify.com/CVE-2022-4324/): Custom Field Template < 2.5.8 - Admin+ PHP Object Injection (high 7.2)
- [CVE-2022-43239](https://insights.sbomify.com/CVE-2022-43239/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2022-43238](https://insights.sbomify.com/CVE-2022-43238/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2022-43237](https://insights.sbomify.com/CVE-2022-43237/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2022-43236](https://insights.sbomify.com/CVE-2022-43236/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2022-43235](https://insights.sbomify.com/CVE-2022-43235/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2022-43234](https://insights.sbomify.com/CVE-2022-43234/): File upload in hoosk:hoosk (critical 9.8)
- [CVE-2022-43233](https://insights.sbomify.com/CVE-2022-43233/): SQL injection in canteen management system project:canteen management system (high 7.2)
- [CVE-2022-43232](https://insights.sbomify.com/CVE-2022-43232/): SQL injection in canteen management system project:canteen management system (high 7.2)
- [CVE-2022-43231](https://insights.sbomify.com/CVE-2022-43231/): File upload in canteen management system project:canteen management system (high 7.2)
- [CVE-2022-43230](https://insights.sbomify.com/CVE-2022-43230/): SQL injection in simple cold storage management system project:simple cold storage managment system (high 7.2)
- [CVE-2022-4323](https://insights.sbomify.com/CVE-2022-4323/): Google Analyticator < 6.5.6 - Admin+ PHP Object Injection (high 7.2)
- [CVE-2022-43229](https://insights.sbomify.com/CVE-2022-43229/): SQL injection in simple cold storage management system project:simple cold storage managment system (high 7.2)
- [CVE-2022-43228](https://insights.sbomify.com/CVE-2022-43228/): SQL injection in barangay management system project:barangay management system (high 7.2)
- [CVE-2022-43227](https://insights.sbomify.com/CVE-2022-43227/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43226](https://insights.sbomify.com/CVE-2022-43226/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 8.8)
- [CVE-2022-43223](https://insights.sbomify.com/CVE-2022-43223/): Denial of service in open5gs:open5gs (high 7.5)
- [CVE-2022-43222](https://insights.sbomify.com/CVE-2022-43222/): Denial of service in open5gs:open5gs (high 7.5)
- [CVE-2022-43221](https://insights.sbomify.com/CVE-2022-43221/): Denial of service in open5gs:open5gs (high 7.5)
- [CVE-2022-4322](https://insights.sbomify.com/CVE-2022-4322/): maku-boot Scheduled Task AbstractScheduleJob.java doExecute injection (medium 6.3)
- [CVE-2022-43216](https://insights.sbomify.com/CVE-2022-43216/): SQL injection in abrhil:lista de asistencia (critical 9.1)
- [CVE-2022-43215](https://insights.sbomify.com/CVE-2022-43215/): SQL injection in billing system project:billing system (critical 9.8)
- [CVE-2022-43214](https://insights.sbomify.com/CVE-2022-43214/): SQL injection in billing system project:billing system (critical 9.8)
- [CVE-2022-43213](https://insights.sbomify.com/CVE-2022-43213/): SQL injection in billing system project project:billing system project (critical 9.8)
- [CVE-2022-43212](https://insights.sbomify.com/CVE-2022-43212/): SQL injection in billing system project project project:billing system project (critical 9.8)
- [CVE-2022-4321](https://insights.sbomify.com/CVE-2022-4321/): PDF Generator for WordPress < 1.1.2 - Reflected XSS (medium 6.1)
- [CVE-2022-4320](https://insights.sbomify.com/CVE-2022-4320/): WordPress Events Calendar Plugin < 1.4.5 - Multiple Reflected XSS (medium 6.1)
- [CVE-2022-43196](https://insights.sbomify.com/CVE-2022-43196/): Path traversal in dedebiz:dedecmsv6 (critical 9.1)
- [CVE-2022-43192](https://insights.sbomify.com/CVE-2022-43192/): File upload in dedecms:dedecms (medium 6.7)
- [CVE-2022-43185](https://insights.sbomify.com/CVE-2022-43185/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-43184](https://insights.sbomify.com/CVE-2022-43184/): Command injection in dlink:dir-878 firmware (critical 9.8)
- [CVE-2022-43183](https://insights.sbomify.com/CVE-2022-43183/): XXL-JOB vulnerable to Server-Side Request Forgery (SSRF) (high 8.8)
- [CVE-2022-4318](https://insights.sbomify.com/CVE-2022-4318/): Cri-o: /etc/passwd tampering privesc (high 7.8)
- [CVE-2022-43179](https://insights.sbomify.com/CVE-2022-43179/): SQL injection in online leave management system project:online leave management system (high 7.2)
- [CVE-2022-43171](https://insights.sbomify.com/CVE-2022-43171/): LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind (medium 6.5)
- [CVE-2022-43170](https://insights.sbomify.com/CVE-2022-43170/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-4317](https://insights.sbomify.com/CVE-2022-4317/): Open redirect in DAST (medium 5.0)
- [CVE-2022-43169](https://insights.sbomify.com/CVE-2022-43169/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-43168](https://insights.sbomify.com/CVE-2022-43168/): SQL injection in rukovoditel:rukovoditel (critical 9.8)
- [CVE-2022-43167](https://insights.sbomify.com/CVE-2022-43167/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-43166](https://insights.sbomify.com/CVE-2022-43166/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-43165](https://insights.sbomify.com/CVE-2022-43165/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-43164](https://insights.sbomify.com/CVE-2022-43164/): Cross-site scripting in rukovoditel:rukovoditel (medium 5.4)
- [CVE-2022-43163](https://insights.sbomify.com/CVE-2022-43163/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43162](https://insights.sbomify.com/CVE-2022-43162/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43152](https://insights.sbomify.com/CVE-2022-43152/): Memory corruption in tsmuxer project:tsmuxer (medium 5.5)
- [CVE-2022-43151](https://insights.sbomify.com/CVE-2022-43151/): Denial of service in hzeller:timg (medium 5.5)
- [CVE-2022-4315](https://insights.sbomify.com/CVE-2022-4315/): Information disclosure in GitLab (medium 5.0)
- [CVE-2022-43148](https://insights.sbomify.com/CVE-2022-43148/): Memory corruption in rtf2html project:rtf2html (medium 5.5)
- [CVE-2022-43146](https://insights.sbomify.com/CVE-2022-43146/): File upload in canteen management system project:canteen management system (high 7.2)
- [CVE-2022-43144](https://insights.sbomify.com/CVE-2022-43144/): Cross-site scripting in canteen management system project:canteen management system (medium 5.4)
- [CVE-2022-43143](https://insights.sbomify.com/CVE-2022-43143/): Cross-site scripting in beekeeperstudio:beekeeper-studio (critical 9.6)
- [CVE-2022-43142](https://insights.sbomify.com/CVE-2022-43142/): Cross-site scripting in password storage application project:password storage application (medium 6.1)
- [CVE-2022-43140](https://insights.sbomify.com/CVE-2022-43140/): Server-side request forgery in keking:kkfileview (high 7.5)
- [CVE-2022-4314](https://insights.sbomify.com/CVE-2022-4314/): Improper Privilege Management in ikus060/rdiffweb (medium 6.0)
- [CVE-2022-43138](https://insights.sbomify.com/CVE-2022-43138/): Dolibarr vulnerable to privilege escalation (critical 9.8)
- [CVE-2022-43135](https://insights.sbomify.com/CVE-2022-43135/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (critical 9.8)
- [CVE-2022-4313](https://insights.sbomify.com/CVE-2022-4313/): Command injection in Tenable.io, Tenable.sc and Nessus (high 8.8)
- [CVE-2022-43127](https://insights.sbomify.com/CVE-2022-43127/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43126](https://insights.sbomify.com/CVE-2022-43126/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43125](https://insights.sbomify.com/CVE-2022-43125/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43124](https://insights.sbomify.com/CVE-2022-43124/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43121](https://insights.sbomify.com/CVE-2022-43121/): Subrion CMS is vulnerable to Cross-Site Scripting (XSS) (medium 6.1)
- [CVE-2022-43120](https://insights.sbomify.com/CVE-2022-43120/): Subrion CMS is vulnerable to Cross-Site Scripting (XSS) (medium 6.1)
- [CVE-2022-4312](https://insights.sbomify.com/CVE-2022-4312/): Information disclosure in PcVue (medium 5.5)
- [CVE-2022-43119](https://insights.sbomify.com/CVE-2022-43119/): Cross-site scripting in csphere:clansphere (medium 6.1)
- [CVE-2022-43118](https://insights.sbomify.com/CVE-2022-43118/): Cross-site scripting in flatcore:flatcore-cms (medium 6.1)
- [CVE-2022-43117](https://insights.sbomify.com/CVE-2022-43117/): Cross-site scripting in password storage application project:password storage application (medium 5.4)
- [CVE-2022-43110](https://insights.sbomify.com/CVE-2022-43110/): Voltronic Power ViewPower through 1.04-21353 and PowerShield Netguard before 1.04-23292 allows a remote attacker to configure the system via (critical 9.8)
- [CVE-2022-4311](https://insights.sbomify.com/CVE-2022-4311/): Information disclosure in PcVue (medium 4.7)
- [CVE-2022-43109](https://insights.sbomify.com/CVE-2022-43109/): Command injection in dlink:dir-823g firmware (critical 9.8)
- [CVE-2022-43108](https://insights.sbomify.com/CVE-2022-43108/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43107](https://insights.sbomify.com/CVE-2022-43107/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43106](https://insights.sbomify.com/CVE-2022-43106/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43105](https://insights.sbomify.com/CVE-2022-43105/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43104](https://insights.sbomify.com/CVE-2022-43104/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43103](https://insights.sbomify.com/CVE-2022-43103/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43102](https://insights.sbomify.com/CVE-2022-43102/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-43101](https://insights.sbomify.com/CVE-2022-43101/): Memory corruption in tenda:ac23 firmware (critical 9.8)
- [CVE-2022-4310](https://insights.sbomify.com/CVE-2022-4310/): Slimstat Analytics < 4.9.3 - Unauthenticated Stored XSS (medium 6.1)
- [CVE-2022-43097](https://insights.sbomify.com/CVE-2022-43097/): Cross-site scripting in user registration \& user management system project:user registration \& user management system (medium 5.4)
- [CVE-2022-43096](https://insights.sbomify.com/CVE-2022-43096/): Misconfiguration in m5t:mediatrix 4102s firmware (medium 6.8)
- [CVE-2022-4309](https://insights.sbomify.com/CVE-2022-4309/): Subscribe2 < 10.38 - User Deletion via CSRF (low 3.1)
- [CVE-2022-43086](https://insights.sbomify.com/CVE-2022-43086/): SQL injection in codeastro:restaurant pos system (medium 4.9)
- [CVE-2022-43085](https://insights.sbomify.com/CVE-2022-43085/): File upload in codeastro:restaurant pos system (high 7.2)
- [CVE-2022-43084](https://insights.sbomify.com/CVE-2022-43084/): Cross-site scripting in vehicle booking system project:vehicle booking system (medium 4.8)
- [CVE-2022-43083](https://insights.sbomify.com/CVE-2022-43083/): File upload in vehicle booking system project:vehicle booking system (high 7.2)
- [CVE-2022-43082](https://insights.sbomify.com/CVE-2022-43082/): Cross-site scripting in fast food ordering system project:fast food ordering system (medium 6.1)
- [CVE-2022-43081](https://insights.sbomify.com/CVE-2022-43081/): SQL injection in fast food ordering system project:fast food ordering system (high 7.5)
- [CVE-2022-4308](https://insights.sbomify.com/CVE-2022-4308/): Clear-text passwords in configuration files (medium 6.1)
- [CVE-2022-43079](https://insights.sbomify.com/CVE-2022-43079/): Cross-site scripting in train scheduler app project:train scheduler app (medium 6.1)
- [CVE-2022-43078](https://insights.sbomify.com/CVE-2022-43078/): Cross-site scripting in web-based student clearance system project:web-based student clearance system (medium 4.8)
- [CVE-2022-43076](https://insights.sbomify.com/CVE-2022-43076/): Cross-site scripting in web-based student clearance system project:web-based student clearance system (medium 4.8)
- [CVE-2022-43074](https://insights.sbomify.com/CVE-2022-43074/): File upload in ayacms project:ayacms (critical 9.8)
- [CVE-2022-43071](https://insights.sbomify.com/CVE-2022-43071/): Memory corruption in xpdfreader:xpdf (medium 5.5)
- [CVE-2022-4307](https://insights.sbomify.com/CVE-2022-4307/): Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS (medium 6.1)
- [CVE-2022-43068](https://insights.sbomify.com/CVE-2022-43068/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43066](https://insights.sbomify.com/CVE-2022-43066/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)
- [CVE-2022-43063](https://insights.sbomify.com/CVE-2022-43063/): SQL injection in online diagnostic lab management system project:online diagnostic lab management system (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/229/