# Vulnerabilities published in 2022


- [CVE-2022-4118](https://insights.sbomify.com/CVE-2022-4118/): Bitcoin / AltCoin Payment Gateway <= 1.7.1 - Unauthenticated SQLi (critical 9.8)
- [CVE-2022-41179](https://insights.sbomify.com/CVE-2022-41179/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-41178](https://insights.sbomify.com/CVE-2022-41178/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-41177](https://insights.sbomify.com/CVE-2022-41177/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-41176](https://insights.sbomify.com/CVE-2022-41176/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-41175](https://insights.sbomify.com/CVE-2022-41175/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-41174](https://insights.sbomify.com/CVE-2022-41174/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-41173](https://insights.sbomify.com/CVE-2022-41173/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-41172](https://insights.sbomify.com/CVE-2022-41172/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-41171](https://insights.sbomify.com/CVE-2022-41171/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-41170](https://insights.sbomify.com/CVE-2022-41170/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-4117](https://insights.sbomify.com/CVE-2022-4117/): IWS - Geo Form Fields <= 1.0 - Unauthenticated SQLi (critical 9.8)
- [CVE-2022-41169](https://insights.sbomify.com/CVE-2022-41169/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-41168](https://insights.sbomify.com/CVE-2022-41168/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-41167](https://insights.sbomify.com/CVE-2022-41167/): Memory corruption in SAP 3D Visual Enterprise Author (high 7.8)
- [CVE-2022-41166](https://insights.sbomify.com/CVE-2022-41166/): Memory corruption in SAP 3D Visual Enterprise Author (medium 5.5)
- [CVE-2022-4116](https://insights.sbomify.com/CVE-2022-4116/): Code injection in quarkus dev ui config editor (critical 9.8)
- [CVE-2022-41158](https://insights.sbomify.com/CVE-2022-41158/): eyoom builder Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-41157](https://insights.sbomify.com/CVE-2022-41157/): ERP solution Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-41156](https://insights.sbomify.com/CVE-2022-41156/): OndiskPlayer Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41155](https://insights.sbomify.com/CVE-2022-41155/): WordPress iQ Block Country plugin <= 1.2.18 - Block BYPASS vulnerability (medium 5.3)
- [CVE-2022-41154](https://insights.sbomify.com/CVE-2022-41154/): Path traversal in QUARTZ-GOLD (high 8.2)
- [CVE-2022-41153](https://insights.sbomify.com/CVE-2022-41153/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-41152](https://insights.sbomify.com/CVE-2022-41152/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41151](https://insights.sbomify.com/CVE-2022-41151/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41150](https://insights.sbomify.com/CVE-2022-41150/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-4115](https://insights.sbomify.com/CVE-2022-4115/): Editorial Calendar < 3.8.3 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-41149](https://insights.sbomify.com/CVE-2022-41149/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41148](https://insights.sbomify.com/CVE-2022-41148/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41147](https://insights.sbomify.com/CVE-2022-41147/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41146](https://insights.sbomify.com/CVE-2022-41146/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-41145](https://insights.sbomify.com/CVE-2022-41145/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-41144](https://insights.sbomify.com/CVE-2022-41144/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41143](https://insights.sbomify.com/CVE-2022-41143/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-41142](https://insights.sbomify.com/CVE-2022-41142/): SQL injection in Centreon (high 7.2)
- [CVE-2022-41141](https://insights.sbomify.com/CVE-2022-41141/): Privilege escalation in Windscribe (high 7.8)
- [CVE-2022-41140](https://insights.sbomify.com/CVE-2022-41140/): Memory corruption in Multiple Routers (high 8.8)
- [CVE-2022-4114](https://insights.sbomify.com/CVE-2022-4114/): Superio - Job Board < 1.2.33 - Subscriber+ Stored Cross-Site Scripting (medium 5.4)
- [CVE-2022-41139](https://insights.sbomify.com/CVE-2022-41139/): Cross-site scripting in mitre:caldera (medium 5.4)
- [CVE-2022-41138](https://insights.sbomify.com/CVE-2022-41138/): Code injection in zutty project:zutty (critical 9.8)
- [CVE-2022-41137](https://insights.sbomify.com/CVE-2022-41137/): Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore (high 8.3)
- [CVE-2022-41136](https://insights.sbomify.com/CVE-2022-41136/): WordPress Shortcodes Ultimate plugin <= 5.12.0 - CSRF vulnerability leading to Stored XSS (medium 6.1)
- [CVE-2022-41135](https://insights.sbomify.com/CVE-2022-41135/): WordPress Modula plugin <= 2.6.9 - Unauth. Plugin Settings Change vulnerability (medium 6.5)
- [CVE-2022-41134](https://insights.sbomify.com/CVE-2022-41134/): WordPress Optinly Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-41133](https://insights.sbomify.com/CVE-2022-41133/): Delta Electronics DIAEnergie (high 8.8)
- [CVE-2022-41132](https://insights.sbomify.com/CVE-2022-41132/): WordPress Ezoic plugin <= 2.8.8 - Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability (medium 6.1)
- [CVE-2022-41131](https://insights.sbomify.com/CVE-2022-41131/): Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection) (high 7.8)
- [CVE-2022-41128](https://insights.sbomify.com/CVE-2022-41128/): Microsoft Windows Scripting Languages Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2022-41127](https://insights.sbomify.com/CVE-2022-41127/): Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability (high 8.5)
- [CVE-2022-41125](https://insights.sbomify.com/CVE-2022-41125/): Microsoft Windows CNG Key Isolation Service Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-41123](https://insights.sbomify.com/CVE-2022-41123/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41122](https://insights.sbomify.com/CVE-2022-41122/): Microsoft SharePoint Server Spoofing Vulnerability (medium 6.5)
- [CVE-2022-41121](https://insights.sbomify.com/CVE-2022-41121/): Windows Graphics Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41120](https://insights.sbomify.com/CVE-2022-41120/): Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-4112](https://insights.sbomify.com/CVE-2022-4112/): Quizlord <= 2.0 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-41119](https://insights.sbomify.com/CVE-2022-41119/): Visual Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41118](https://insights.sbomify.com/CVE-2022-41118/): Windows Scripting Languages Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-41116](https://insights.sbomify.com/CVE-2022-41116/): Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability (medium 5.9)
- [CVE-2022-41115](https://insights.sbomify.com/CVE-2022-41115/): Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2022-41114](https://insights.sbomify.com/CVE-2022-41114/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-41113](https://insights.sbomify.com/CVE-2022-41113/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-4111](https://insights.sbomify.com/CVE-2022-4111/): Improper Validation of Specified Quantity in Input in tooljet/tooljet (medium 6.5)
- [CVE-2022-41109](https://insights.sbomify.com/CVE-2022-41109/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41107](https://insights.sbomify.com/CVE-2022-41107/): Microsoft Office Graphics Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41106](https://insights.sbomify.com/CVE-2022-41106/): Microsoft Excel Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-41105](https://insights.sbomify.com/CVE-2022-41105/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-41104](https://insights.sbomify.com/CVE-2022-41104/): Microsoft Excel Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2022-41103](https://insights.sbomify.com/CVE-2022-41103/): Microsoft Word Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-41102](https://insights.sbomify.com/CVE-2022-41102/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41101](https://insights.sbomify.com/CVE-2022-41101/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41100](https://insights.sbomify.com/CVE-2022-41100/): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-4110](https://insights.sbomify.com/CVE-2022-4110/): Eventify <= 2.1 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-41099](https://insights.sbomify.com/CVE-2022-41099/): BitLocker Security Feature Bypass Vulnerability (medium 4.6)
- [CVE-2022-41098](https://insights.sbomify.com/CVE-2022-41098/): Windows GDI+ Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-41097](https://insights.sbomify.com/CVE-2022-41097/): Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-41096](https://insights.sbomify.com/CVE-2022-41096/): Microsoft DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41095](https://insights.sbomify.com/CVE-2022-41095/): Windows Digital Media Receiver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41094](https://insights.sbomify.com/CVE-2022-41094/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41093](https://insights.sbomify.com/CVE-2022-41093/): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41092](https://insights.sbomify.com/CVE-2022-41092/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41091](https://insights.sbomify.com/CVE-2022-41091/): Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass (medium 5.4, exploited in the wild)
- [CVE-2022-41090](https://insights.sbomify.com/CVE-2022-41090/): Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability (medium 5.9)
- [CVE-2022-4109](https://insights.sbomify.com/CVE-2022-4109/): Wholesale Market for WooCommerce < 2.0.0 - Admin+ Arbitrary Log Download (low 2.7)
- [CVE-2022-41089](https://insights.sbomify.com/CVE-2022-41089/): .NET Framework Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-41088](https://insights.sbomify.com/CVE-2022-41088/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-41086](https://insights.sbomify.com/CVE-2022-41086/): Windows Group Policy Elevation of Privilege Vulnerability (medium 6.4)
- [CVE-2022-41085](https://insights.sbomify.com/CVE-2022-41085/): Azure CycleCloud Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2022-41083](https://insights.sbomify.com/CVE-2022-41083/): Visual Studio Code Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41082](https://insights.sbomify.com/CVE-2022-41082/): Microsoft Exchange Server Remote Code Execution (high 8.0, exploited in the wild)
- [CVE-2022-41081](https://insights.sbomify.com/CVE-2022-41081/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-41080](https://insights.sbomify.com/CVE-2022-41080/): Microsoft Exchange Server Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-4108](https://insights.sbomify.com/CVE-2022-4108/): Wholesale Market for WooCommerce < 1.0.8 - Admin+ Arbitrary File Download (medium 4.9)
- [CVE-2022-41079](https://insights.sbomify.com/CVE-2022-41079/): Microsoft Exchange Server Spoofing Vulnerability (high 8.0)
- [CVE-2022-41078](https://insights.sbomify.com/CVE-2022-41078/): Microsoft Exchange Server Spoofing Vulnerability (high 8.0)
- [CVE-2022-41077](https://insights.sbomify.com/CVE-2022-41077/): Windows Fax Compose Form Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-41076](https://insights.sbomify.com/CVE-2022-41076/): PowerShell Remote Code Execution Vulnerability (high 8.5)
- [CVE-2022-41074](https://insights.sbomify.com/CVE-2022-41074/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-41073](https://insights.sbomify.com/CVE-2022-41073/): Microsoft Windows Print Spooler Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-4107](https://insights.sbomify.com/CVE-2022-4107/): SMSA Shipping for WooCommerce < 1.0.5 - Subscriber+ Arbitrary File Download (medium 6.5)
- [CVE-2022-41066](https://insights.sbomify.com/CVE-2022-41066/): Microsoft Dynamics Business Central Information Disclosure Vulnerability (medium 4.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/245/