# Vulnerabilities published in 2022 - [CVE-2022-42939](https://insights.sbomify.com/CVE-2022-42939/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42938](https://insights.sbomify.com/CVE-2022-42938/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42937](https://insights.sbomify.com/CVE-2022-42937/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42936](https://insights.sbomify.com/CVE-2022-42936/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42935](https://insights.sbomify.com/CVE-2022-42935/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42934](https://insights.sbomify.com/CVE-2022-42934/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42933](https://insights.sbomify.com/CVE-2022-42933/): Memory corruption in Autodesk Design Review (high 7.8) - [CVE-2022-42932](https://insights.sbomify.com/CVE-2022-42932/): Memory corruption in Firefox (high 8.8) - [CVE-2022-42931](https://insights.sbomify.com/CVE-2022-42931/): Information disclosure in Firefox (low 3.3) - [CVE-2022-42930](https://insights.sbomify.com/CVE-2022-42930/): Race condition in Firefox (high 7.1) - [CVE-2022-4293](https://insights.sbomify.com/CVE-2022-4293/): Floating Point Comparison with Incorrect Operator in vim/vim (medium 6.8) - [CVE-2022-42929](https://insights.sbomify.com/CVE-2022-42929/): Denial of service in Firefox (medium 6.5) - [CVE-2022-42928](https://insights.sbomify.com/CVE-2022-42928/): Memory corruption in Firefox (high 8.8) - [CVE-2022-42927](https://insights.sbomify.com/CVE-2022-42927/): Security feature bypass in Firefox (high 8.1) - [CVE-2022-42925](https://insights.sbomify.com/CVE-2022-42925/): Unrestricted Upload of File with Dangerous Type in Forma LMS (critical 9.9) - [CVE-2022-42924](https://insights.sbomify.com/CVE-2022-42924/): SQL injection in Forma LMS (high 7.6) - [CVE-2022-42923](https://insights.sbomify.com/CVE-2022-42923/): SQL injection in Forma LMS (high 8.3) - [CVE-2022-42920](https://insights.sbomify.com/CVE-2022-42920/): Apache Commons BCEL prior to 6.6.0 allows producing arbitrary bytecode via out-of-bounds writing (critical 9.8) - [CVE-2022-4292](https://insights.sbomify.com/CVE-2022-4292/): Use After Free in vim/vim (high 7.8) - [CVE-2022-42919](https://insights.sbomify.com/CVE-2022-42919/): Deserialization in fedoraproject:fedora (high 7.8) - [CVE-2022-42917](https://insights.sbomify.com/CVE-2022-42917/): Race condition in FRRouting (medium 6.7) - [CVE-2022-42916](https://insights.sbomify.com/CVE-2022-42916/): Security feature bypass in apple:macos (high 7.5) - [CVE-2022-42915](https://insights.sbomify.com/CVE-2022-42915/): Memory corruption in apple:macos (high 8.1) - [CVE-2022-4291](https://insights.sbomify.com/CVE-2022-4291/): Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption (high 7.7) - [CVE-2022-42909](https://insights.sbomify.com/CVE-2022-42909/): Missing authorization in Wepa Print Away (medium 6.5) - [CVE-2022-42908](https://insights.sbomify.com/CVE-2022-42908/): Cross-site scripting in Wepa Print Away (medium 6.3) - [CVE-2022-42906](https://insights.sbomify.com/CVE-2022-42906/): Powerline Gitstatus vulnerable to arbitrary code execution (high 7.8) - [CVE-2022-42905](https://insights.sbomify.com/CVE-2022-42905/): Memory corruption in wolfssl:wolfssl (critical 9.1) - [CVE-2022-42904](https://insights.sbomify.com/CVE-2022-42904/): Command injection in zohocorp:manageengine admanager plus (high 7.2) - [CVE-2022-42903](https://insights.sbomify.com/CVE-2022-42903/): Missing authorization in zohocorp:manageengine supportcenter plus (low 3.3) - [CVE-2022-42902](https://insights.sbomify.com/CVE-2022-42902/): Code injection in debian:debian linux (high 8.8) - [CVE-2022-42901](https://insights.sbomify.com/CVE-2022-42901/): Memory corruption in bentley:microstation (high 7.8) - [CVE-2022-42900](https://insights.sbomify.com/CVE-2022-42900/): Memory corruption in bentley:microstation (high 7.8) - [CVE-2022-4290](https://insights.sbomify.com/CVE-2022-4290/): Cyr to Lat <= 3.5 - Authenticated SQL Injection (high 8.8) - [CVE-2022-42899](https://insights.sbomify.com/CVE-2022-42899/): Memory corruption in bentley:microstation (high 7.8) - [CVE-2022-42898](https://insights.sbomify.com/CVE-2022-42898/): Integer overflow in heimdal project:heimdal (high 8.8) - [CVE-2022-42897](https://insights.sbomify.com/CVE-2022-42897/): Command injection in arraynetworks:arrayos ag (critical 9.8) - [CVE-2022-42896](https://insights.sbomify.com/CVE-2022-42896/): Info Leak in l2cap_core in the Linux Kernel (high 8.0) - [CVE-2022-42895](https://insights.sbomify.com/CVE-2022-42895/): Info Leak in l2cap_core in the Linux Kernel (medium 5.1) - [CVE-2022-42894](https://insights.sbomify.com/CVE-2022-42894/): Server-side request forgery in syngo Dynamics (high 7.5) - [CVE-2022-42893](https://insights.sbomify.com/CVE-2022-42893/): Missing authorization in syngo Dynamics (high 7.5) - [CVE-2022-42892](https://insights.sbomify.com/CVE-2022-42892/): Path traversal in syngo Dynamics (medium 5.3) - [CVE-2022-42891](https://insights.sbomify.com/CVE-2022-42891/): Missing authorization in syngo Dynamics (high 7.5) - [CVE-2022-42890](https://insights.sbomify.com/CVE-2022-42890/): Apache Batik prior to 1.16 allows RCE via scripting (high 7.5) - [CVE-2022-4289](https://insights.sbomify.com/CVE-2022-4289/): Information disclosure in GitLab (medium 6.4) - [CVE-2022-42889](https://insights.sbomify.com/CVE-2022-42889/): Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults (critical 9.8) - [CVE-2022-42888](https://insights.sbomify.com/CVE-2022-42888/): WordPress ARMember Plugin <= 5.5.1 is vulnerable to Privilege Escalation (critical 9.8) - [CVE-2022-42885](https://insights.sbomify.com/CVE-2022-42885/): Open Babel has uninitialized pointer dereference in GRO residue parser (critical 9.8) - [CVE-2022-42884](https://insights.sbomify.com/CVE-2022-42884/): WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control (medium 5.4) - [CVE-2022-42883](https://insights.sbomify.com/CVE-2022-42883/): WordPress Quiz And Survey Master plugin <= 7.3.10 - Sensitive Information Disclosure vulnerability (medium 5.3) - [CVE-2022-42882](https://insights.sbomify.com/CVE-2022-42882/): WordPress Simple CSV/XLS Exporter Plugin <= 1.5.8 is vulnerable to CSV Injection (medium 5.8) - [CVE-2022-42880](https://insights.sbomify.com/CVE-2022-42880/): WordPress Auto Upload Images Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 6.1) - [CVE-2022-42879](https://insights.sbomify.com/CVE-2022-42879/): Null dereference in Intel(R) Arc(TM) Control software (medium 6.1) - [CVE-2022-42878](https://insights.sbomify.com/CVE-2022-42878/): Null dereference in Intel(R) Trace Analyzer and Collector software (low 2.8) - [CVE-2022-4287](https://insights.sbomify.com/CVE-2022-4287/): Auth bypass in Remote Desktop Manager (high 8.8) - [CVE-2022-42867](https://insights.sbomify.com/CVE-2022-42867/): Use after free in tvOS (high 8.8) - [CVE-2022-42866](https://insights.sbomify.com/CVE-2022-42866/): Information disclosure in tvOS (medium 5.5) - [CVE-2022-42865](https://insights.sbomify.com/CVE-2022-42865/): Security feature bypass in tvOS (medium 5.5) - [CVE-2022-42864](https://insights.sbomify.com/CVE-2022-42864/): Race condition in macOS (high 7.0) - [CVE-2022-42863](https://insights.sbomify.com/CVE-2022-42863/): Memory corruption in tvOS (high 8.8) - [CVE-2022-42862](https://insights.sbomify.com/CVE-2022-42862/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-42861](https://insights.sbomify.com/CVE-2022-42861/): Security feature bypass in macOS (high 8.8) - [CVE-2022-42860](https://insights.sbomify.com/CVE-2022-42860/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-4286](https://insights.sbomify.com/CVE-2022-4286/): Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime (medium 6.1) - [CVE-2022-42859](https://insights.sbomify.com/CVE-2022-42859/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-42858](https://insights.sbomify.com/CVE-2022-42858/): Memory corruption in macOS (high 7.8) - [CVE-2022-42856](https://insights.sbomify.com/CVE-2022-42856/): Apple iOS Type Confusion (high 8.8, exploited in the wild) - [CVE-2022-42855](https://insights.sbomify.com/CVE-2022-42855/): Privilege escalation in tvOS (high 7.1) - [CVE-2022-42854](https://insights.sbomify.com/CVE-2022-42854/): Information disclosure in macOS (medium 5.5) - [CVE-2022-42853](https://insights.sbomify.com/CVE-2022-42853/): Missing authorization in macOS (medium 5.5) - [CVE-2022-42852](https://insights.sbomify.com/CVE-2022-42852/): Information disclosure in tvOS (medium 6.5) - [CVE-2022-42851](https://insights.sbomify.com/CVE-2022-42851/): Memory corruption in tvOS (medium 5.5) - [CVE-2022-42850](https://insights.sbomify.com/CVE-2022-42850/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-4285](https://insights.sbomify.com/CVE-2022-4285/): Memory corruption in binutils (medium 5.5) - [CVE-2022-42849](https://insights.sbomify.com/CVE-2022-42849/): Privilege escalation in tvOS (high 7.8) - [CVE-2022-42848](https://insights.sbomify.com/CVE-2022-42848/): Security feature bypass in tvOS (high 7.8) - [CVE-2022-42847](https://insights.sbomify.com/CVE-2022-42847/): Memory corruption in macOS (high 7.8) - [CVE-2022-42846](https://insights.sbomify.com/CVE-2022-42846/): Memory corruption in iOS and iPadOS (medium 5.5) - [CVE-2022-42845](https://insights.sbomify.com/CVE-2022-42845/): Memory corruption in macOS (high 7.2) - [CVE-2022-42844](https://insights.sbomify.com/CVE-2022-42844/): Memory corruption in iOS and iPadOS (high 8.6) - [CVE-2022-42843](https://insights.sbomify.com/CVE-2022-42843/): Information disclosure in tvOS (high 8.6) - [CVE-2022-42842](https://insights.sbomify.com/CVE-2022-42842/): Memory corruption in macOS (critical 9.8) - [CVE-2022-42841](https://insights.sbomify.com/CVE-2022-42841/): Memory corruption in macOS (high 7.8) - [CVE-2022-42840](https://insights.sbomify.com/CVE-2022-42840/): Memory corruption in macOS (high 7.8) - [CVE-2022-42839](https://insights.sbomify.com/CVE-2022-42839/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2022-42838](https://insights.sbomify.com/CVE-2022-42838/): Security feature bypass in macOS (low 3.3) - [CVE-2022-42837](https://insights.sbomify.com/CVE-2022-42837/): Memory corruption in macOS (critical 9.8) - [CVE-2022-42834](https://insights.sbomify.com/CVE-2022-42834/): Information disclosure in macOS (low 3.3) - [CVE-2022-42833](https://insights.sbomify.com/CVE-2022-42833/): Memory corruption in macOS (high 7.8) - [CVE-2022-42832](https://insights.sbomify.com/CVE-2022-42832/): Race condition in macOS (medium 6.4) - [CVE-2022-42831](https://insights.sbomify.com/CVE-2022-42831/): Race condition in macOS (medium 6.4) - [CVE-2022-42830](https://insights.sbomify.com/CVE-2022-42830/): Memory corruption in macOS (medium 6.7) - [CVE-2022-4283](https://insights.sbomify.com/CVE-2022-4283/): Use after free in xorg-x11-server (high 7.8) - [CVE-2022-42829](https://insights.sbomify.com/CVE-2022-42829/): Use after free in macOS (medium 6.7) - [CVE-2022-42828](https://insights.sbomify.com/CVE-2022-42828/): Memory corruption in macOS (high 8.8) - [CVE-2022-42827](https://insights.sbomify.com/CVE-2022-42827/): Apple iOS and iPadOS Out-of-Bounds Write (high 7.8, exploited in the wild) - [CVE-2022-42826](https://insights.sbomify.com/CVE-2022-42826/): Use after free in macOS (high 8.8) - [CVE-2022-42825](https://insights.sbomify.com/CVE-2022-42825/): Privilege escalation in macOS (medium 5.5) - [CVE-2022-42824](https://insights.sbomify.com/CVE-2022-42824/): Information disclosure in macOS (medium 5.5) - [CVE-2022-42823](https://insights.sbomify.com/CVE-2022-42823/): Memory corruption in macOS (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/231/