# Vulnerabilities published in 2022


- [CVE-2022-4247](https://insights.sbomify.com/CVE-2022-4247/): Movie Ticket Booking System booking.php sql injection (medium 6.3)
- [CVE-2022-42469](https://insights.sbomify.com/CVE-2022-42469/): Security feature bypass in FortiOS (medium 4.1)
- [CVE-2022-42468](https://insights.sbomify.com/CVE-2022-42468/): Apache Flume prior to 1.11.0 has an Improper Input Validation (JNDI Injection) in JMSSource (critical 9.8)
- [CVE-2022-42467](https://insights.sbomify.com/CVE-2022-42467/): h2 webconsole (available only in prototype mode) should nevertheless be disabled by default. (medium 5.3)
- [CVE-2022-42466](https://insights.sbomify.com/CVE-2022-42466/): XSS vulnerability, eg for String properties. (medium 6.1)
- [CVE-2022-42465](https://insights.sbomify.com/CVE-2022-42465/): Privilege escalation in Intel(R) OFU software (high 7.2)
- [CVE-2022-42464](https://insights.sbomify.com/CVE-2022-42464/): Privilege escalation in OpenHarmony (medium 6.7)
- [CVE-2022-42463](https://insights.sbomify.com/CVE-2022-42463/): Auth bypass in OpenHarmony (high 8.3)
- [CVE-2022-42462](https://insights.sbomify.com/CVE-2022-42462/): WordPress IP Blacklist Cloud Plugin <= 5.00 is vulnerable to Cross Site Scripting (XSS) (medium 4.8)
- [CVE-2022-42461](https://insights.sbomify.com/CVE-2022-42461/): WordPress miniOrange's Google Authenticator plugin <= 5.6.1 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2022-42460](https://insights.sbomify.com/CVE-2022-42460/): Cross-site scripting in Traffic Manager (WordPress plugin) (medium 6.5)
- [CVE-2022-4246](https://insights.sbomify.com/CVE-2022-4246/): Kakao PotPlayer MID File denial of service (medium 4.3)
- [CVE-2022-42459](https://insights.sbomify.com/CVE-2022-42459/): WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerability (high 7.2)
- [CVE-2022-42458](https://insights.sbomify.com/CVE-2022-42458/): Auth bypass in bingo!CMS (critical 9.8)
- [CVE-2022-42457](https://insights.sbomify.com/CVE-2022-42457/): Command injection in generex:cs141 firmware (critical 9.1)
- [CVE-2022-42455](https://insights.sbomify.com/CVE-2022-42455/): Privilege escalation in asus:armoury crate (high 7.8)
- [CVE-2022-42454](https://insights.sbomify.com/CVE-2022-42454/): HCL BigFix Insights for Vulnerability Remediation (IVR) is vulnerable to improper certificate validation (medium 6.4)
- [CVE-2022-42453](https://insights.sbomify.com/CVE-2022-42453/): HCL BigFix Platform is affected by insufficient warnings (medium 6.9)
- [CVE-2022-42452](https://insights.sbomify.com/CVE-2022-42452/): Cross-site scripting in HCL Launch (medium 4.6)
- [CVE-2022-42451](https://insights.sbomify.com/CVE-2022-42451/): HCL BigFix Patch Management is vulnerable to insecurely stored credentials (medium 4.6)
- [CVE-2022-42450](https://insights.sbomify.com/CVE-2022-42450/): HCL Domino Volt is affected by Cross-site scripting (XSS) (medium 4.6)
- [CVE-2022-4245](https://insights.sbomify.com/CVE-2022-4245/): Codehaus-plexus: xml external entity (xxe) injection (medium 4.3)
- [CVE-2022-42449](https://insights.sbomify.com/CVE-2022-42449/): HCL Domino Volt is affected by an unrestricted upload of a dangerous file type (medium 4.6)
- [CVE-2022-42447](https://insights.sbomify.com/CVE-2022-42447/): Cross-origin resource sharing vulnerability affects HCL Compass (critical 9.6)
- [CVE-2022-42446](https://insights.sbomify.com/CVE-2022-42446/): HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access (medium 6.5)
- [CVE-2022-42445](https://insights.sbomify.com/CVE-2022-42445/): HCL Launch is vulnerable to Insufficiently Protected LDAP Search Credentials (CVE-2022-42445) (medium 4.9)
- [CVE-2022-42444](https://insights.sbomify.com/CVE-2022-42444/): IBM App Connect Enterprise denial of service (medium 4.9)
- [CVE-2022-42443](https://insights.sbomify.com/CVE-2022-42443/): Trusteer for mobile file upload (low 2.2)
- [CVE-2022-42442](https://insights.sbomify.com/CVE-2022-42442/): IBM Robotic Process Automation for Cloud Pak information disclosure (low 3.3)
- [CVE-2022-4244](https://insights.sbomify.com/CVE-2022-4244/): Codehaus-plexus: directory traversal (high 7.5)
- [CVE-2022-42439](https://insights.sbomify.com/CVE-2022-42439/): IBM App Connect Enterprise information disclosure (medium 6.8)
- [CVE-2022-42438](https://insights.sbomify.com/CVE-2022-42438/): IBM Cloud Pak for Multicloud Management Monitoring privilege escalation (high 7.5)
- [CVE-2022-42436](https://insights.sbomify.com/CVE-2022-42436/): IBM MQ information disclosure (medium 4.0)
- [CVE-2022-42435](https://insights.sbomify.com/CVE-2022-42435/): IBM Business Automation Workflow cross-site request forgery (medium 4.3)
- [CVE-2022-42433](https://insights.sbomify.com/CVE-2022-42433/): Command injection in TL-WR841N (medium 6.4)
- [CVE-2022-42432](https://insights.sbomify.com/CVE-2022-42432/): Information disclosure in Kernel (medium 5.1)
- [CVE-2022-42431](https://insights.sbomify.com/CVE-2022-42431/): Memory corruption in Model 3 (high 8.8)
- [CVE-2022-42430](https://insights.sbomify.com/CVE-2022-42430/): Use after free in Model 3 (high 8.8)
- [CVE-2022-4243](https://insights.sbomify.com/CVE-2022-4243/): ImageInject <= 1.17 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-42429](https://insights.sbomify.com/CVE-2022-42429/): SQL injection in Centreon (high 7.2)
- [CVE-2022-42428](https://insights.sbomify.com/CVE-2022-42428/): SQL injection in Centreon (high 7.2)
- [CVE-2022-42427](https://insights.sbomify.com/CVE-2022-42427/): SQL injection in Centreon (high 7.2)
- [CVE-2022-42426](https://insights.sbomify.com/CVE-2022-42426/): SQL injection in Centreon (high 7.2)
- [CVE-2022-42425](https://insights.sbomify.com/CVE-2022-42425/): SQL injection in Centreon (high 7.2)
- [CVE-2022-42424](https://insights.sbomify.com/CVE-2022-42424/): SQL injection in Centreon (high 7.2)
- [CVE-2022-42423](https://insights.sbomify.com/CVE-2022-42423/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42421](https://insights.sbomify.com/CVE-2022-42421/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42420](https://insights.sbomify.com/CVE-2022-42420/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-4242](https://insights.sbomify.com/CVE-2022-4242/): WP Google Review Slider < 11.6 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-42419](https://insights.sbomify.com/CVE-2022-42419/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42418](https://insights.sbomify.com/CVE-2022-42418/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42417](https://insights.sbomify.com/CVE-2022-42417/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42416](https://insights.sbomify.com/CVE-2022-42416/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42415](https://insights.sbomify.com/CVE-2022-42415/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42414](https://insights.sbomify.com/CVE-2022-42414/): Use after free in PDF-XChange Editor (low 3.3)
- [CVE-2022-42413](https://insights.sbomify.com/CVE-2022-42413/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42412](https://insights.sbomify.com/CVE-2022-42412/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42411](https://insights.sbomify.com/CVE-2022-42411/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42410](https://insights.sbomify.com/CVE-2022-42410/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42409](https://insights.sbomify.com/CVE-2022-42409/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42408](https://insights.sbomify.com/CVE-2022-42408/): Use after free in PDF-XChange Editor (low 3.3)
- [CVE-2022-42407](https://insights.sbomify.com/CVE-2022-42407/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42406](https://insights.sbomify.com/CVE-2022-42406/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42405](https://insights.sbomify.com/CVE-2022-42405/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42404](https://insights.sbomify.com/CVE-2022-42404/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42403](https://insights.sbomify.com/CVE-2022-42403/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42402](https://insights.sbomify.com/CVE-2022-42402/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42401](https://insights.sbomify.com/CVE-2022-42401/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42400](https://insights.sbomify.com/CVE-2022-42400/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-4240](https://insights.sbomify.com/CVE-2022-4240/): Unauthenticated API allowing an attacker to obtain the information about network resources (medium 6.5)
- [CVE-2022-42399](https://insights.sbomify.com/CVE-2022-42399/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42398](https://insights.sbomify.com/CVE-2022-42398/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42397](https://insights.sbomify.com/CVE-2022-42397/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42396](https://insights.sbomify.com/CVE-2022-42396/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42395](https://insights.sbomify.com/CVE-2022-42395/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42394](https://insights.sbomify.com/CVE-2022-42394/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42393](https://insights.sbomify.com/CVE-2022-42393/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42392](https://insights.sbomify.com/CVE-2022-42392/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42391](https://insights.sbomify.com/CVE-2022-42391/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42390](https://insights.sbomify.com/CVE-2022-42390/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-4239](https://insights.sbomify.com/CVE-2022-4239/): Workreap < 2.6.4 - Subscriber+ Arbitrary Posts Deletion via IDOR (medium 6.5)
- [CVE-2022-42389](https://insights.sbomify.com/CVE-2022-42389/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42388](https://insights.sbomify.com/CVE-2022-42388/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42387](https://insights.sbomify.com/CVE-2022-42387/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42386](https://insights.sbomify.com/CVE-2022-42386/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42385](https://insights.sbomify.com/CVE-2022-42385/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42384](https://insights.sbomify.com/CVE-2022-42384/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42383](https://insights.sbomify.com/CVE-2022-42383/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42382](https://insights.sbomify.com/CVE-2022-42382/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42381](https://insights.sbomify.com/CVE-2022-42381/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42380](https://insights.sbomify.com/CVE-2022-42380/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42379](https://insights.sbomify.com/CVE-2022-42379/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42378](https://insights.sbomify.com/CVE-2022-42378/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42377](https://insights.sbomify.com/CVE-2022-42377/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42376](https://insights.sbomify.com/CVE-2022-42376/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42375](https://insights.sbomify.com/CVE-2022-42375/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42374](https://insights.sbomify.com/CVE-2022-42374/): Use after free in PDF-XChange Editor (high 7.8)
- [CVE-2022-42373](https://insights.sbomify.com/CVE-2022-42373/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42372](https://insights.sbomify.com/CVE-2022-42372/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-42371](https://insights.sbomify.com/CVE-2022-42371/): Memory corruption in PDF-XChange Editor (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/234/