# Vulnerabilities published in 2022


- [CVE-2022-42370](https://insights.sbomify.com/CVE-2022-42370/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-4237](https://insights.sbomify.com/CVE-2022-4237/): Welcart e-Commerce < 2.8.6 - Subscriber+ PHAR Deserialisation (high 8.8)
- [CVE-2022-42369](https://insights.sbomify.com/CVE-2022-42369/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-42367](https://insights.sbomify.com/CVE-2022-42367/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42366](https://insights.sbomify.com/CVE-2022-42366/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42365](https://insights.sbomify.com/CVE-2022-42365/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42364](https://insights.sbomify.com/CVE-2022-42364/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42362](https://insights.sbomify.com/CVE-2022-42362/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42360](https://insights.sbomify.com/CVE-2022-42360/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-4236](https://insights.sbomify.com/CVE-2022-4236/): Welcart e-Commerce < 2.8.5 - Subscriber+ Arbitrary File Access (medium 6.5)
- [CVE-2022-42357](https://insights.sbomify.com/CVE-2022-42357/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42356](https://insights.sbomify.com/CVE-2022-42356/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42354](https://insights.sbomify.com/CVE-2022-42354/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42352](https://insights.sbomify.com/CVE-2022-42352/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42351](https://insights.sbomify.com/CVE-2022-42351/): AEM Incorrect Authorization Security feature bypass (medium 4.3)
- [CVE-2022-42350](https://insights.sbomify.com/CVE-2022-42350/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-4235](https://insights.sbomify.com/CVE-2022-4235/): Cross-site scripting in RushBet (medium 5.4)
- [CVE-2022-42349](https://insights.sbomify.com/CVE-2022-42349/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42348](https://insights.sbomify.com/CVE-2022-42348/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42346](https://insights.sbomify.com/CVE-2022-42346/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42345](https://insights.sbomify.com/CVE-2022-42345/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-42344](https://insights.sbomify.com/CVE-2022-42344/): [CVE-2021-36032] Magento IDOR Leads to Account Takeover (high 8.8)
- [CVE-2022-42343](https://insights.sbomify.com/CVE-2022-42343/): Adobe Campaign Classic Server-Side Request Forgery Arbitrary file system read (medium 6.5)
- [CVE-2022-42342](https://insights.sbomify.com/CVE-2022-42342/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-42341](https://insights.sbomify.com/CVE-2022-42341/): Adobe ColdFusion Improper Restriction of XML External Entity Reference Arbitrary file system read (high 7.5)
- [CVE-2022-42340](https://insights.sbomify.com/CVE-2022-42340/): Adobe ColdFusion Improper Input Validation Arbitrary file system read (high 7.5)
- [CVE-2022-4234](https://insights.sbomify.com/CVE-2022-4234/): SourceCodester Canteen Management System brand.php builtin_echo cross site scripting (low 3.5)
- [CVE-2022-42339](https://insights.sbomify.com/CVE-2022-42339/): Adobe Acrobat Reader DC XFA Parsing Stack Overflow Remote Code Execution (high 7.8)
- [CVE-2022-42336](https://insights.sbomify.com/CVE-2022-42336/): Integer overflow in xen (low 3.3)
- [CVE-2022-42335](https://insights.sbomify.com/CVE-2022-42335/): Null dereference in xen (high 7.8)
- [CVE-2022-42334](https://insights.sbomify.com/CVE-2022-42334/): Other in xen (medium 6.5)
- [CVE-2022-42333](https://insights.sbomify.com/CVE-2022-42333/): Other in xen (high 8.6)
- [CVE-2022-42332](https://insights.sbomify.com/CVE-2022-42332/): Use after free in xen (high 7.8)
- [CVE-2022-42331](https://insights.sbomify.com/CVE-2022-42331/): Information disclosure in xen (medium 5.5)
- [CVE-2022-42330](https://insights.sbomify.com/CVE-2022-42330/): Denial of service in xen (high 7.5)
- [CVE-2022-4233](https://insights.sbomify.com/CVE-2022-4233/): SourceCodester Event Registration System cross site scripting (low 2.4)
- [CVE-2022-42329](https://insights.sbomify.com/CVE-2022-42329/): Denial of service in Linux (medium 5.5)
- [CVE-2022-42328](https://insights.sbomify.com/CVE-2022-42328/): Denial of service in Linux (medium 6.2)
- [CVE-2022-42327](https://insights.sbomify.com/CVE-2022-42327/): Security feature bypass in xen (high 7.1)
- [CVE-2022-42326](https://insights.sbomify.com/CVE-2022-42326/): Denial of service in xen (medium 5.5)
- [CVE-2022-42325](https://insights.sbomify.com/CVE-2022-42325/): Denial of service in xen (medium 5.5)
- [CVE-2022-42324](https://insights.sbomify.com/CVE-2022-42324/): Integer overflow in xen (medium 5.5)
- [CVE-2022-42323](https://insights.sbomify.com/CVE-2022-42323/): Denial of service in xen (medium 5.5)
- [CVE-2022-42322](https://insights.sbomify.com/CVE-2022-42322/): Denial of service in xen (medium 5.5)
- [CVE-2022-42321](https://insights.sbomify.com/CVE-2022-42321/): Denial of service in xen (medium 6.5)
- [CVE-2022-42320](https://insights.sbomify.com/CVE-2022-42320/): Race condition in xen (high 7.0)
- [CVE-2022-4232](https://insights.sbomify.com/CVE-2022-4232/): SourceCodester Event Registration System unrestricted upload (medium 4.7)
- [CVE-2022-42319](https://insights.sbomify.com/CVE-2022-42319/): Denial of service in xen (medium 6.5)
- [CVE-2022-42318](https://insights.sbomify.com/CVE-2022-42318/): Denial of service in xen (medium 6.5)
- [CVE-2022-42317](https://insights.sbomify.com/CVE-2022-42317/): Denial of service in xen (medium 6.5)
- [CVE-2022-42316](https://insights.sbomify.com/CVE-2022-42316/): Denial of service in xen (medium 6.5)
- [CVE-2022-42315](https://insights.sbomify.com/CVE-2022-42315/): Denial of service in xen (medium 6.5)
- [CVE-2022-42314](https://insights.sbomify.com/CVE-2022-42314/): Denial of service in xen (medium 6.5)
- [CVE-2022-42313](https://insights.sbomify.com/CVE-2022-42313/): Denial of service in xen (medium 6.5)
- [CVE-2022-42312](https://insights.sbomify.com/CVE-2022-42312/): Denial of service in xen (medium 6.5)
- [CVE-2022-42311](https://insights.sbomify.com/CVE-2022-42311/): Denial of service in xen (medium 6.5)
- [CVE-2022-42310](https://insights.sbomify.com/CVE-2022-42310/): Other in xen (medium 5.5)
- [CVE-2022-4231](https://insights.sbomify.com/CVE-2022-4231/): Tribal Systems Zenario CMS Remember Me session fixiation (medium 4.2)
- [CVE-2022-42309](https://insights.sbomify.com/CVE-2022-42309/): Memory corruption in xen (high 8.8)
- [CVE-2022-42308](https://insights.sbomify.com/CVE-2022-42308/): Path traversal in veritas:netbackup (critical 9.0)
- [CVE-2022-42307](https://insights.sbomify.com/CVE-2022-42307/): XML external entity in veritas:netbackup (medium 5.3)
- [CVE-2022-42306](https://insights.sbomify.com/CVE-2022-42306/): Null dereference in veritas:netbackup (medium 6.5)
- [CVE-2022-42305](https://insights.sbomify.com/CVE-2022-42305/): Path traversal in veritas:netbackup (medium 5.3)
- [CVE-2022-42304](https://insights.sbomify.com/CVE-2022-42304/): SQL injection in veritas:netbackup (high 8.0)
- [CVE-2022-42303](https://insights.sbomify.com/CVE-2022-42303/): SQL injection in veritas:netbackup (high 8.0)
- [CVE-2022-42302](https://insights.sbomify.com/CVE-2022-42302/): SQL injection in veritas:netbackup (critical 9.0)
- [CVE-2022-42301](https://insights.sbomify.com/CVE-2022-42301/): XML external entity in veritas:netbackup (medium 5.4)
- [CVE-2022-42300](https://insights.sbomify.com/CVE-2022-42300/): Denial of service in veritas:netbackup (medium 4.3)
- [CVE-2022-4230](https://insights.sbomify.com/CVE-2022-4230/): WP Statistics < 13.2.9 - Authenticated SQLi (high 8.8)
- [CVE-2022-42299](https://insights.sbomify.com/CVE-2022-42299/): Denial of service in veritas:netbackup (medium 5.3)
- [CVE-2022-42292](https://insights.sbomify.com/CVE-2022-42292/): Privilege escalation in GeForce Experience (medium 5.0)
- [CVE-2022-42291](https://insights.sbomify.com/CVE-2022-42291/): Other in GeForce Experience (high 8.2)
- [CVE-2022-42290](https://insights.sbomify.com/CVE-2022-42290/): Command injection in NVIDIA DGX servers (high 7.2)
- [CVE-2022-4229](https://insights.sbomify.com/CVE-2022-4229/): SourceCodester Book Store Management System index.php access control (high 7.3)
- [CVE-2022-42289](https://insights.sbomify.com/CVE-2022-42289/): Command injection in NVIDIA DGX servers (high 7.2)
- [CVE-2022-42288](https://insights.sbomify.com/CVE-2022-42288/): Information disclosure in NVIDIA DGX servers (medium 5.3)
- [CVE-2022-42287](https://insights.sbomify.com/CVE-2022-42287/): File upload in NVIDIA DGX servers (medium 6.0)
- [CVE-2022-42286](https://insights.sbomify.com/CVE-2022-42286/): Memory corruption in NVIDIA DGX servers (medium 6.0)
- [CVE-2022-42285](https://insights.sbomify.com/CVE-2022-42285/): Security feature bypass in NVIDIA DGX servers (medium 6.0)
- [CVE-2022-42284](https://insights.sbomify.com/CVE-2022-42284/): Information disclosure in NVIDIA DGX servers (medium 6.2)
- [CVE-2022-42283](https://insights.sbomify.com/CVE-2022-42283/): Memory corruption in NVIDIA DGX servers (medium 6.4)
- [CVE-2022-42282](https://insights.sbomify.com/CVE-2022-42282/): Path traversal in NVIDIA DGX servers (medium 6.5)
- [CVE-2022-42281](https://insights.sbomify.com/CVE-2022-42281/): Memory corruption in NVIDIA DGX servers (medium 6.7)
- [CVE-2022-42280](https://insights.sbomify.com/CVE-2022-42280/): Path traversal in NVIDIA DGX servers (high 7.1)
- [CVE-2022-4228](https://insights.sbomify.com/CVE-2022-4228/): SourceCodester Book Store Management System information disclosure (medium 5.3)
- [CVE-2022-42279](https://insights.sbomify.com/CVE-2022-42279/): Command injection in NVIDIA DGX servers (high 7.2)
- [CVE-2022-42278](https://insights.sbomify.com/CVE-2022-42278/): Memory corruption in NVIDIA DGX servers (high 7.2)
- [CVE-2022-42277](https://insights.sbomify.com/CVE-2022-42277/): Missing authorization in NVIDIA DGX servers (high 7.5)
- [CVE-2022-42276](https://insights.sbomify.com/CVE-2022-42276/): Missing authorization in NVIDIA DGX servers (high 7.5)
- [CVE-2022-42275](https://insights.sbomify.com/CVE-2022-42275/): Auth bypass in NVIDIA DGX servers (high 7.7)
- [CVE-2022-42274](https://insights.sbomify.com/CVE-2022-42274/): Memory corruption in NVIDIA DGX servers (high 7.8)
- [CVE-2022-42273](https://insights.sbomify.com/CVE-2022-42273/): Memory corruption in NVIDIA DGX servers (high 8.1)
- [CVE-2022-42272](https://insights.sbomify.com/CVE-2022-42272/): Memory corruption in NVIDIA DGX servers (high 8.1)
- [CVE-2022-42271](https://insights.sbomify.com/CVE-2022-42271/): Memory corruption in NVIDIA DGX Servers (high 8.4)
- [CVE-2022-42270](https://insights.sbomify.com/CVE-2022-42270/): Memory corruption in NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson AGX Orin Series (high 7.8)
- [CVE-2022-4227](https://insights.sbomify.com/CVE-2022-4227/): Booster for WooCommerce - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-42269](https://insights.sbomify.com/CVE-2022-42269/): Other in Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX1, Jetson TX2 series, Jetson TX2 NX (high 7.9)
- [CVE-2022-42268](https://insights.sbomify.com/CVE-2022-42268/): Code injection in NVIDIA Isaac Sim (high 7.8)
- [CVE-2022-42267](https://insights.sbomify.com/CVE-2022-42267/): Memory corruption in NVIDIA GPU Display Driver for Windows (high 7.0)
- [CVE-2022-42266](https://insights.sbomify.com/CVE-2022-42266/): Information disclosure in vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/235/