# Vulnerabilities published in 2022


- [CVE-2022-41650](https://insights.sbomify.com/CVE-2022-41650/): WordPress Custom Content by Country plugin <= 3.1.2 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2022-4165](https://insights.sbomify.com/CVE-2022-4165/): Contest Gallery < 19.1.5 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41649](https://insights.sbomify.com/CVE-2022-41649/): Memory corruption in OpenImageIO (high 7.5)
- [CVE-2022-41648](https://insights.sbomify.com/CVE-2022-41648/): Auth bypass in HEIDENHAIN Controller TNC 640 NC Software (critical 9.2)
- [CVE-2022-41646](https://insights.sbomify.com/CVE-2022-41646/): Information disclosure in Intel(R) IPP Cryptography software (medium 4.7)
- [CVE-2022-41645](https://insights.sbomify.com/CVE-2022-41645/): Memory corruption in V-Server (high 7.8)
- [CVE-2022-41644](https://insights.sbomify.com/CVE-2022-41644/): Missing authorization in InfraSuite Device Master (high 8.8)
- [CVE-2022-41643](https://insights.sbomify.com/CVE-2022-41643/): WordPress Accessibility plugin <= 1.0.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-41642](https://insights.sbomify.com/CVE-2022-41642/): Nadesiko3 OS Command Injection vulnerability (critical 9.8)
- [CVE-2022-41640](https://insights.sbomify.com/CVE-2022-41640/): WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS) (medium 6.5)
- [CVE-2022-4164](https://insights.sbomify.com/CVE-2022-4164/): Contest Gallery < 19.1.5 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41639](https://insights.sbomify.com/CVE-2022-41639/): Memory corruption in OpenImageIO (critical 9.8)
- [CVE-2022-41638](https://insights.sbomify.com/CVE-2022-41638/): WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (medium 5.4)
- [CVE-2022-41636](https://insights.sbomify.com/CVE-2022-41636/): Information disclosure in Haas CNC Controller (critical 9.1)
- [CVE-2022-41635](https://insights.sbomify.com/CVE-2022-41635/): WordPress Advanced Shipment Tracking for WooCommerce Plugin <= 3.5.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2022-41634](https://insights.sbomify.com/CVE-2022-41634/): WordPress Media Library Folders plugin <= 7.1.1 - Cross-Site Request Forgery (CSRF) vulnerability (medium 5.4)
- [CVE-2022-41633](https://insights.sbomify.com/CVE-2022-41633/): WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-4163](https://insights.sbomify.com/CVE-2022-4163/): Contest Gallery < 19.1.5 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41629](https://insights.sbomify.com/CVE-2022-41629/): Missing authorization in InfraSuite Device Master (high 7.5)
- [CVE-2022-41628](https://insights.sbomify.com/CVE-2022-41628/): Privilege escalation in Intel(R) NUC P14E Laptop Element software for Windows 10 (medium 6.7)
- [CVE-2022-41627](https://insights.sbomify.com/CVE-2022-41627/): Weak cryptography in KardiaMobile (medium 4.8)
- [CVE-2022-41624](https://insights.sbomify.com/CVE-2022-41624/): BIG-IP iRules vulnerability CVE-2022-41624 (high 7.5)
- [CVE-2022-41623](https://insights.sbomify.com/CVE-2022-41623/): Information disclosure in ALD - AliExpress Dropshipping and Fulfillment for WooCommerce (WordPress plugin) (high 7.5)
- [CVE-2022-41622](https://insights.sbomify.com/CVE-2022-41622/): iControl SOAP vulnerability (high 8.8)
- [CVE-2022-41621](https://insights.sbomify.com/CVE-2022-41621/): Missing authorization in Intel(R) QAT drivers for Windows (low 3.3)
- [CVE-2022-41620](https://insights.sbomify.com/CVE-2022-41620/): WordPress SeoSamba for WordPress Webmasters Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-4162](https://insights.sbomify.com/CVE-2022-4162/): Contest Gallery < 19.1.5 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41619](https://insights.sbomify.com/CVE-2022-41619/): WordPress Image Zoom Plugin <= 1.8.8 is vulnerable to Broken Access Control (medium 5.4)
- [CVE-2022-41618](https://insights.sbomify.com/CVE-2022-41618/): WordPress Media Library Assistant plugin <= 3.00 - Unauthenticated Error Log Disclosure vulnerability (low 3.7)
- [CVE-2022-41617](https://insights.sbomify.com/CVE-2022-41617/): BIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2022-41617 (high 7.2)
- [CVE-2022-41616](https://insights.sbomify.com/CVE-2022-41616/): WordPress Export Users Data CSV Plugin <= 2.1 is vulnerable to CSV Injection (high 7.6)
- [CVE-2022-41615](https://insights.sbomify.com/CVE-2022-41615/): Cross-site request forgery in Store Locator WordPress (WordPress plugin) (medium 6.1)
- [CVE-2022-41614](https://insights.sbomify.com/CVE-2022-41614/): Information disclosure in Intel(R) ON Event Series Android application (medium 5.5)
- [CVE-2022-41613](https://insights.sbomify.com/CVE-2022-41613/): Memory corruption in MicroStation Connect (high 7.8)
- [CVE-2022-41612](https://insights.sbomify.com/CVE-2022-41612/): WordPress Similar Posts Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS) (medium 5.9)
- [CVE-2022-41611](https://insights.sbomify.com/CVE-2022-41611/): Potential XSS on sidebar navigation (low 2.3)
- [CVE-2022-41610](https://insights.sbomify.com/CVE-2022-41610/): Missing authorization in Intel(R) EMA Configuration Tool (medium 5.0)
- [CVE-2022-4161](https://insights.sbomify.com/CVE-2022-4161/): Contest Gallery < 19.1.5 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41609](https://insights.sbomify.com/CVE-2022-41609/): WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerability (medium 6.4)
- [CVE-2022-41608](https://insights.sbomify.com/CVE-2022-41608/): WordPress Asgaros Forum Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-41607](https://insights.sbomify.com/CVE-2022-41607/): ETIC Telecom Remote Access Server Path Traversal (medium 6.2)
- [CVE-2022-41606](https://insights.sbomify.com/CVE-2022-41606/): Nomad Panics On Job Submission With Bad Artifact Stanza Source URL (medium 6.5)
- [CVE-2022-41604](https://insights.sbomify.com/CVE-2022-41604/): Privilege escalation in checkpoint:zonealarm (high 8.8)
- [CVE-2022-41603](https://insights.sbomify.com/CVE-2022-41603/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41602](https://insights.sbomify.com/CVE-2022-41602/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41601](https://insights.sbomify.com/CVE-2022-41601/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41600](https://insights.sbomify.com/CVE-2022-41600/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-4160](https://insights.sbomify.com/CVE-2022-4160/): Contest Gallery < 19.1.5 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41599](https://insights.sbomify.com/CVE-2022-41599/): Other in EMUI (high 7.5)
- [CVE-2022-41598](https://insights.sbomify.com/CVE-2022-41598/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41597](https://insights.sbomify.com/CVE-2022-41597/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41596](https://insights.sbomify.com/CVE-2022-41596/): Deserialization in EMUI (high 7.5)
- [CVE-2022-41595](https://insights.sbomify.com/CVE-2022-41595/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41594](https://insights.sbomify.com/CVE-2022-41594/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41593](https://insights.sbomify.com/CVE-2022-41593/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41592](https://insights.sbomify.com/CVE-2022-41592/): Memory corruption in EMUI (low 3.4)
- [CVE-2022-41591](https://insights.sbomify.com/CVE-2022-41591/): Path traversal in EMUI (high 7.5)
- [CVE-2022-41590](https://insights.sbomify.com/CVE-2022-41590/): Auth bypass in HarmonyOS (medium 5.5)
- [CVE-2022-4159](https://insights.sbomify.com/CVE-2022-4159/): Contest Gallery < 19.1.5.1 - Author+ SQL Injection (medium 6.5)
- [CVE-2022-41589](https://insights.sbomify.com/CVE-2022-41589/): Other in EMUI (high 7.5)
- [CVE-2022-41588](https://insights.sbomify.com/CVE-2022-41588/): Other in EMUI (high 7.5)
- [CVE-2022-41587](https://insights.sbomify.com/CVE-2022-41587/): Other in EMUI (medium 5.3)
- [CVE-2022-41586](https://insights.sbomify.com/CVE-2022-41586/): Information disclosure in EMUI (high 7.5)
- [CVE-2022-41585](https://insights.sbomify.com/CVE-2022-41585/): Memory corruption in EMUI (high 7.8)
- [CVE-2022-41584](https://insights.sbomify.com/CVE-2022-41584/): Memory corruption in EMUI (high 7.8)
- [CVE-2022-41583](https://insights.sbomify.com/CVE-2022-41583/): Memory corruption in EMUI (high 7.5)
- [CVE-2022-41582](https://insights.sbomify.com/CVE-2022-41582/): Misconfiguration in EMUI (high 7.5)
- [CVE-2022-41581](https://insights.sbomify.com/CVE-2022-41581/): Memory corruption in EMUI (critical 9.1)
- [CVE-2022-41580](https://insights.sbomify.com/CVE-2022-41580/): Memory corruption in EMUI (critical 9.8)
- [CVE-2022-4158](https://insights.sbomify.com/CVE-2022-4158/): Contest Gallery < 19.1.5 - Unauthenticated SQL Injection (high 7.5)
- [CVE-2022-41579](https://insights.sbomify.com/CVE-2022-41579/): Auth bypass in HOTA-Fara-B19 (medium 6.5)
- [CVE-2022-41578](https://insights.sbomify.com/CVE-2022-41578/): Memory corruption in EMUI (critical 9.8)
- [CVE-2022-41577](https://insights.sbomify.com/CVE-2022-41577/): Memory corruption in EMUI (high 7.1)
- [CVE-2022-41576](https://insights.sbomify.com/CVE-2022-41576/): Code injection in EMUI (high 7.8)
- [CVE-2022-41575](https://insights.sbomify.com/CVE-2022-41575/): Information disclosure in gradle:enterprise (high 7.5)
- [CVE-2022-41574](https://insights.sbomify.com/CVE-2022-41574/): Missing authorization in gradle:enterprise (high 7.5)
- [CVE-2022-41573](https://insights.sbomify.com/CVE-2022-41573/): An issue was discovered in Ovidentia 8.3. (critical 9.8)
- [CVE-2022-41572](https://insights.sbomify.com/CVE-2022-41572/): Privilege escalation in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2022-41571](https://insights.sbomify.com/CVE-2022-41571/): Path traversal in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2022-41570](https://insights.sbomify.com/CVE-2022-41570/): SQL injection in eyesofnetwork:eyesofnetwork (critical 9.8)
- [CVE-2022-4157](https://insights.sbomify.com/CVE-2022-4157/): Contest Gallery < 19.1.5 - Admin+ SQL Injection (medium 4.9)
- [CVE-2022-41568](https://insights.sbomify.com/CVE-2022-41568/): Denial of service in LINE client for iOS (high 7.5)
- [CVE-2022-41567](https://insights.sbomify.com/CVE-2022-41567/): TIBCO BusinessConnect Stored XSS Vulnerability (high 7.3)
- [CVE-2022-41566](https://insights.sbomify.com/CVE-2022-41566/): TIBCO EBX Add-ons Cross Site Scripting (XSS) Vulnerability (high 8.7)
- [CVE-2022-41565](https://insights.sbomify.com/CVE-2022-41565/): TIBCO EBX Cross Site Scripting (XSS) Vulnerability (high 8.7)
- [CVE-2022-41564](https://insights.sbomify.com/CVE-2022-41564/): TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability (medium 6.8)
- [CVE-2022-41563](https://insights.sbomify.com/CVE-2022-41563/): TIBCO JasperReports Server Stored XSS Vulnerability (critical 9.0)
- [CVE-2022-41562](https://insights.sbomify.com/CVE-2022-41562/): TIBCO JasperReports Server XSS Issue on Roles (high 8.4)
- [CVE-2022-41561](https://insights.sbomify.com/CVE-2022-41561/): TIBCO JasperReports Server RCE Vulnerability (critical 9.1)
- [CVE-2022-41560](https://insights.sbomify.com/CVE-2022-41560/): TIBCO Nimbus Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-4156](https://insights.sbomify.com/CVE-2022-4156/): Contest Gallery < 19.1.5.1 - Unauthenticated SQL Injection (high 7.5)
- [CVE-2022-41559](https://insights.sbomify.com/CVE-2022-41559/): TIBCO Nimbus Open Redirect Vulnerability (critical 9.3)
- [CVE-2022-41558](https://insights.sbomify.com/CVE-2022-41558/): TIBCO Spotfire Stored Cross Site Scripting (XSS) Vulnerability (critical 9.0)
- [CVE-2022-41556](https://insights.sbomify.com/CVE-2022-41556/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2022-41555](https://insights.sbomify.com/CVE-2022-41555/): Delta Electronics DIAEnergie (high 8.7)
- [CVE-2022-41554](https://insights.sbomify.com/CVE-2022-41554/): WordPress Slideshow SE Plugin <= 2.5.5 is vulnerable to Cross Site Scripting (XSS) (medium 4.8)
- [CVE-2022-41553](https://insights.sbomify.com/CVE-2022-41553/): Information Exposure Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer (medium 6.5)
- [CVE-2022-41552](https://insights.sbomify.com/CVE-2022-41552/): Server-Side Request Forgery Vulnerability in Hitachi Infrastructure Analytics Advisor, Hitachi Ops Center Analyzer (critical 9.8)
- [CVE-2022-41551](https://insights.sbomify.com/CVE-2022-41551/): SQL injection in garage management system project:garage management system (high 7.2)
- [CVE-2022-41550](https://insights.sbomify.com/CVE-2022-41550/): Integer overflow in gnu:osip (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/241/