# Vulnerabilities published in 2022 - [CVE-2022-42821](https://insights.sbomify.com/CVE-2022-42821/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-42820](https://insights.sbomify.com/CVE-2022-42820/): Memory corruption in macOS (high 7.8) - [CVE-2022-4282](https://insights.sbomify.com/CVE-2022-4282/): SpringBootCMS Template Management injection (medium 4.7) - [CVE-2022-42819](https://insights.sbomify.com/CVE-2022-42819/): Information disclosure in macOS (medium 5.5) - [CVE-2022-42818](https://insights.sbomify.com/CVE-2022-42818/): Information disclosure in macOS (medium 5.9) - [CVE-2022-42817](https://insights.sbomify.com/CVE-2022-42817/): Information disclosure in iOS and iPadOS (medium 6.5) - [CVE-2022-42816](https://insights.sbomify.com/CVE-2022-42816/): Business logic in macOS (medium 5.5) - [CVE-2022-42815](https://insights.sbomify.com/CVE-2022-42815/): Information disclosure in macOS (medium 5.5) - [CVE-2022-42814](https://insights.sbomify.com/CVE-2022-42814/): Business logic in macOS (medium 5.5) - [CVE-2022-42813](https://insights.sbomify.com/CVE-2022-42813/): Security feature bypass in macOS (critical 9.8) - [CVE-2022-42811](https://insights.sbomify.com/CVE-2022-42811/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-42810](https://insights.sbomify.com/CVE-2022-42810/): Information disclosure in macOS (medium 5.5) - [CVE-2022-4281](https://insights.sbomify.com/CVE-2022-4281/): Facepay camera.php authorization (medium 6.3) - [CVE-2022-42809](https://insights.sbomify.com/CVE-2022-42809/): Memory corruption in macOS (high 7.8) - [CVE-2022-42808](https://insights.sbomify.com/CVE-2022-42808/): Memory corruption in macOS (critical 9.8) - [CVE-2022-42807](https://insights.sbomify.com/CVE-2022-42807/): Business logic in macOS (medium 4.3) - [CVE-2022-42806](https://insights.sbomify.com/CVE-2022-42806/): Race condition in macOS (high 7.0) - [CVE-2022-42805](https://insights.sbomify.com/CVE-2022-42805/): Integer overflow in macOS (high 7.8) - [CVE-2022-42803](https://insights.sbomify.com/CVE-2022-42803/): Race condition in macOS (high 7.0) - [CVE-2022-42801](https://insights.sbomify.com/CVE-2022-42801/): Security feature bypass in macOS (high 7.8) - [CVE-2022-42800](https://insights.sbomify.com/CVE-2022-42800/): Other in macOS (high 7.8) - [CVE-2022-4280](https://insights.sbomify.com/CVE-2022-4280/): Dot Tech Smart Campus System findUser information disclosure (medium 4.3) - [CVE-2022-42799](https://insights.sbomify.com/CVE-2022-42799/): Other in macOS (medium 6.1) - [CVE-2022-42798](https://insights.sbomify.com/CVE-2022-42798/): Memory corruption in macOS (medium 5.5) - [CVE-2022-42797](https://insights.sbomify.com/CVE-2022-42797/): Code injection in Xcode (high 7.8) - [CVE-2022-42796](https://insights.sbomify.com/CVE-2022-42796/): Privilege escalation in macOS (high 7.8) - [CVE-2022-42795](https://insights.sbomify.com/CVE-2022-42795/): Memory corruption in macOS (high 8.8) - [CVE-2022-42793](https://insights.sbomify.com/CVE-2022-42793/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-42792](https://insights.sbomify.com/CVE-2022-42792/): Information disclosure in iOS and iPadOS (medium 5.5) - [CVE-2022-42791](https://insights.sbomify.com/CVE-2022-42791/): Race condition in macOS (high 7.0) - [CVE-2022-42790](https://insights.sbomify.com/CVE-2022-42790/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-4279](https://insights.sbomify.com/CVE-2022-4279/): SourceCodester Human Resource Management System employeeview.php cross site scripting (low 3.5) - [CVE-2022-42789](https://insights.sbomify.com/CVE-2022-42789/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-42788](https://insights.sbomify.com/CVE-2022-42788/): Missing authorization in macOS (medium 5.5) - [CVE-2022-42787](https://insights.sbomify.com/CVE-2022-42787/): Wiesemann & Theis: Small number space for allocating session id in Com-Server family (high 8.8) - [CVE-2022-42786](https://insights.sbomify.com/CVE-2022-42786/): Wiesemann & Theis: XSS vulnerability in web interface of the Com-Server family (medium 5.4) - [CVE-2022-42785](https://insights.sbomify.com/CVE-2022-42785/): Wiesemann & Theis: Authentication bypass in Com-Server family (critical 9.8) - [CVE-2022-42784](https://insights.sbomify.com/CVE-2022-42784/): Security feature bypass in LOGO! 12/24RCE (high 7.6) - [CVE-2022-42783](https://insights.sbomify.com/CVE-2022-42783/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.4) - [CVE-2022-42782](https://insights.sbomify.com/CVE-2022-42782/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8007 (medium 5.5) - [CVE-2022-42781](https://insights.sbomify.com/CVE-2022-42781/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8006 (medium 5.5) - [CVE-2022-42780](https://insights.sbomify.com/CVE-2022-42780/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8005 (medium 5.5) - [CVE-2022-4278](https://insights.sbomify.com/CVE-2022-4278/): SourceCodester Human Resource Management System employeeadd.php sql injection (medium 4.7) - [CVE-2022-42779](https://insights.sbomify.com/CVE-2022-42779/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8003 (medium 5.5) - [CVE-2022-42778](https://insights.sbomify.com/CVE-2022-42778/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-42777](https://insights.sbomify.com/CVE-2022-42777/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-42776](https://insights.sbomify.com/CVE-2022-42776/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8) - [CVE-2022-42775](https://insights.sbomify.com/CVE-2022-42775/): Race condition in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-42774](https://insights.sbomify.com/CVE-2022-42774/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8002 (medium 5.5) - [CVE-2022-42773](https://insights.sbomify.com/CVE-2022-42773/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8001 (medium 5.5) - [CVE-2022-42772](https://insights.sbomify.com/CVE-2022-42772/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8021 (medium 5.5) - [CVE-2022-42771](https://insights.sbomify.com/CVE-2022-42771/): Race condition in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8020 (medium 4.7) - [CVE-2022-42770](https://insights.sbomify.com/CVE-2022-42770/): Race condition in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8019 (medium 4.7) - [CVE-2022-4277](https://insights.sbomify.com/CVE-2022-4277/): Shaoxing Background Management System Bd sql injection (medium 6.3) - [CVE-2022-42769](https://insights.sbomify.com/CVE-2022-42769/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8014 (low 3.3) - [CVE-2022-42768](https://insights.sbomify.com/CVE-2022-42768/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8013 (medium 4.3) - [CVE-2022-42767](https://insights.sbomify.com/CVE-2022-42767/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8012 (medium 6.6) - [CVE-2022-42766](https://insights.sbomify.com/CVE-2022-42766/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8011 (medium 6.6) - [CVE-2022-42765](https://insights.sbomify.com/CVE-2022-42765/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8010 (medium 6.6) - [CVE-2022-42764](https://insights.sbomify.com/CVE-2022-42764/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8009 (medium 5.5) - [CVE-2022-42763](https://insights.sbomify.com/CVE-2022-42763/): Integer overflow in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8008 (medium 5.5) - [CVE-2022-42762](https://insights.sbomify.com/CVE-2022-42762/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8004 (medium 5.5) - [CVE-2022-42761](https://insights.sbomify.com/CVE-2022-42761/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-42760](https://insights.sbomify.com/CVE-2022-42760/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8018 (medium 5.5) - [CVE-2022-4276](https://insights.sbomify.com/CVE-2022-4276/): House Rental System POST Request tenant-engine.php unrestricted upload (medium 6.3) - [CVE-2022-42759](https://insights.sbomify.com/CVE-2022-42759/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8017 (medium 5.5) - [CVE-2022-42758](https://insights.sbomify.com/CVE-2022-42758/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8016 (low 3.3) - [CVE-2022-42757](https://insights.sbomify.com/CVE-2022-42757/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8015 (low 3.3) - [CVE-2022-42756](https://insights.sbomify.com/CVE-2022-42756/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.7) - [CVE-2022-42755](https://insights.sbomify.com/CVE-2022-42755/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8023 (medium 5.5) - [CVE-2022-42754](https://insights.sbomify.com/CVE-2022-42754/): Use after free in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5) - [CVE-2022-42753](https://insights.sbomify.com/CVE-2022-42753/): Cross-site scripting in SalonERP (medium 6.1) - [CVE-2022-42751](https://insights.sbomify.com/CVE-2022-42751/): Cross-site request forgery in CandidATS (high 8.8) - [CVE-2022-42750](https://insights.sbomify.com/CVE-2022-42750/): Cross-site scripting in CandidATS (high 8.8) - [CVE-2022-4275](https://insights.sbomify.com/CVE-2022-4275/): House Rental System POST Request search-property.php sql injection (medium 6.3) - [CVE-2022-42749](https://insights.sbomify.com/CVE-2022-42749/): Cross-site scripting in CandidATS (medium 6.1) - [CVE-2022-42748](https://insights.sbomify.com/CVE-2022-42748/): Cross-site scripting in CandidATS (medium 6.1) - [CVE-2022-42747](https://insights.sbomify.com/CVE-2022-42747/): Cross-site scripting in CandidATS (medium 6.1) - [CVE-2022-42746](https://insights.sbomify.com/CVE-2022-42746/): Cross-site scripting in CandidATS (medium 6.1) - [CVE-2022-42745](https://insights.sbomify.com/CVE-2022-42745/): XML external entity in CandidATS (high 7.5) - [CVE-2022-42744](https://insights.sbomify.com/CVE-2022-42744/): SQL injection in CandidATS (critical 9.8) - [CVE-2022-42743](https://insights.sbomify.com/CVE-2022-42743/): deep-parse-json 1.0.2 - Prototype Pollution (medium 5.3) - [CVE-2022-4274](https://insights.sbomify.com/CVE-2022-4274/): House Rental System view-property.php sql injection (medium 6.3) - [CVE-2022-42735](https://insights.sbomify.com/CVE-2022-42735/): Apache ShenYu Admin ultra vires (high 8.8) - [CVE-2022-42734](https://insights.sbomify.com/CVE-2022-42734/): Missing authorization in syngo Dynamics (high 7.5) - [CVE-2022-42733](https://insights.sbomify.com/CVE-2022-42733/): Missing authorization in syngo Dynamics (high 7.5) - [CVE-2022-42732](https://insights.sbomify.com/CVE-2022-42732/): Missing authorization in syngo Dynamics (high 7.5) - [CVE-2022-42731](https://insights.sbomify.com/CVE-2022-42731/): django-mfa2 vulnerable to MFA Replay attack (high 7.5) - [CVE-2022-4273](https://insights.sbomify.com/CVE-2022-4273/): SourceCodester Human Resource Management System Content-Type employee.php unrestricted upload (high 7.3) - [CVE-2022-42725](https://insights.sbomify.com/CVE-2022-42725/): Path traversal in linuxmint:warpinator (high 7.5) - [CVE-2022-42724](https://insights.sbomify.com/CVE-2022-42724/): Missing authorization in misp-project:misp (medium 4.3) - [CVE-2022-42722](https://insights.sbomify.com/CVE-2022-42722/): Null dereference in debian:debian linux (medium 5.5) - [CVE-2022-42721](https://insights.sbomify.com/CVE-2022-42721/): Memory corruption in debian:debian linux (medium 5.5) - [CVE-2022-42720](https://insights.sbomify.com/CVE-2022-42720/): Use after free in debian:debian linux (high 7.8) - [CVE-2022-4272](https://insights.sbomify.com/CVE-2022-4272/): FeMiner wms unrestricted upload (medium 6.3) - [CVE-2022-42719](https://insights.sbomify.com/CVE-2022-42719/): Use after free in debian:debian linux (high 8.8) - [CVE-2022-42718](https://insights.sbomify.com/CVE-2022-42718/): Misconfiguration in ni:labview command line interface (high 7.8) - [CVE-2022-42717](https://insights.sbomify.com/CVE-2022-42717/): Misconfiguration in hashicorp:vagrant (high 7.8) - [CVE-2022-42716](https://insights.sbomify.com/CVE-2022-42716/): Use after free in arm:valhall gpu kernel driver (high 8.8) - [CVE-2022-42715](https://insights.sbomify.com/CVE-2022-42715/): Cross-site scripting in vanderbilt:redcap (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/232/