# Vulnerabilities published in 2022


- [CVE-2022-39903](https://insights.sbomify.com/CVE-2022-39903/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39902](https://insights.sbomify.com/CVE-2022-39902/): Missing authorization in Samsung Mobile Devices (medium 6.5)
- [CVE-2022-39901](https://insights.sbomify.com/CVE-2022-39901/): Auth bypass in Samsung Mobile Devices (medium 6.5)
- [CVE-2022-39900](https://insights.sbomify.com/CVE-2022-39900/): Missing authorization in Samsung Mobile Devices (medium 4.6)
- [CVE-2022-3990](https://insights.sbomify.com/CVE-2022-3990/): Privilege escalation in HPSFViewer (high 7.8)
- [CVE-2022-39899](https://insights.sbomify.com/CVE-2022-39899/): Auth bypass in Samsung Mobile Devices (medium 5.7)
- [CVE-2022-39898](https://insights.sbomify.com/CVE-2022-39898/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39897](https://insights.sbomify.com/CVE-2022-39897/): Information disclosure in Samsung Mobile Devices (medium 4.4)
- [CVE-2022-39896](https://insights.sbomify.com/CVE-2022-39896/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39895](https://insights.sbomify.com/CVE-2022-39895/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39894](https://insights.sbomify.com/CVE-2022-39894/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39893](https://insights.sbomify.com/CVE-2022-39893/): Information disclosure in Galaxy Buds Pro Manager (low 3.3)
- [CVE-2022-39892](https://insights.sbomify.com/CVE-2022-39892/): Auth bypass in Samsung Pass (low 3.6)
- [CVE-2022-39891](https://insights.sbomify.com/CVE-2022-39891/): Memory corruption in Editor Lite (medium 4.3)
- [CVE-2022-39890](https://insights.sbomify.com/CVE-2022-39890/): Missing authorization in Samsung Billing (medium 6.2)
- [CVE-2022-3989](https://insights.sbomify.com/CVE-2022-3989/): Motors - Car Dealer, Classifieds & Listing < 1.4.4 - Arbitrary File Upload (high 8.8)
- [CVE-2022-39889](https://insights.sbomify.com/CVE-2022-39889/): Missing authorization in GalaxyWatch4Plugin (medium 4.0)
- [CVE-2022-39888](https://insights.sbomify.com/CVE-2022-39888/): Missing authorization in Samsung Mobile Devices (medium 4.3)
- [CVE-2022-39887](https://insights.sbomify.com/CVE-2022-39887/): Missing authorization in Samsung Mobile Devices (medium 4.3)
- [CVE-2022-39886](https://insights.sbomify.com/CVE-2022-39886/): Missing authorization in Samsung Mobile Devices (medium 5.9)
- [CVE-2022-39885](https://insights.sbomify.com/CVE-2022-39885/): Missing authorization in Samsung Mobile Devices (medium 5.9)
- [CVE-2022-39884](https://insights.sbomify.com/CVE-2022-39884/): Missing authorization in Samsung Mobile Devices (medium 4.3)
- [CVE-2022-39883](https://insights.sbomify.com/CVE-2022-39883/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39882](https://insights.sbomify.com/CVE-2022-39882/): Memory corruption in Samsung Mobile Devices (high 8.0)
- [CVE-2022-39881](https://insights.sbomify.com/CVE-2022-39881/): Memory corruption in Samsung Mobile Devices (medium 5.3)
- [CVE-2022-39880](https://insights.sbomify.com/CVE-2022-39880/): Other in Samsung Mobile Devices (high 7.1)
- [CVE-2022-3988](https://insights.sbomify.com/CVE-2022-3988/): Frappe Search navbar_search.html cross site scripting (low 3.5)
- [CVE-2022-39879](https://insights.sbomify.com/CVE-2022-39879/): Missing authorization in Samsung Mobile Devices (medium 5.9)
- [CVE-2022-39878](https://insights.sbomify.com/CVE-2022-39878/): Missing authorization in Samsung Checkout (medium 4.0)
- [CVE-2022-39877](https://insights.sbomify.com/CVE-2022-39877/): Missing authorization in Group Sharing (medium 4.0)
- [CVE-2022-39876](https://insights.sbomify.com/CVE-2022-39876/): Information disclosure in Reminder (medium 5.9)
- [CVE-2022-39875](https://insights.sbomify.com/CVE-2022-39875/): Missing authorization in Samsung Account (medium 5.1)
- [CVE-2022-39874](https://insights.sbomify.com/CVE-2022-39874/): Information disclosure in Samsung Account (medium 4.0)
- [CVE-2022-39873](https://insights.sbomify.com/CVE-2022-39873/): Missing authorization in Samsung Internet (medium 4.3)
- [CVE-2022-39872](https://insights.sbomify.com/CVE-2022-39872/): Information disclosure in ShareLive (medium 5.9)
- [CVE-2022-39871](https://insights.sbomify.com/CVE-2022-39871/): Information disclosure in SmartThings (medium 4.0)
- [CVE-2022-39870](https://insights.sbomify.com/CVE-2022-39870/): Missing authorization in SmartThings (medium 4.0)
- [CVE-2022-3987](https://insights.sbomify.com/CVE-2022-3987/): Responsive Lightbox2 < 1.0.4 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-39869](https://insights.sbomify.com/CVE-2022-39869/): Missing authorization in SmartThings (medium 4.0)
- [CVE-2022-39868](https://insights.sbomify.com/CVE-2022-39868/): Missing authorization in SmartThings (medium 4.0)
- [CVE-2022-39867](https://insights.sbomify.com/CVE-2022-39867/): Missing authorization in SmartThings (medium 4.0)
- [CVE-2022-39866](https://insights.sbomify.com/CVE-2022-39866/): Missing authorization in SmartThings (medium 4.0)
- [CVE-2022-39865](https://insights.sbomify.com/CVE-2022-39865/): Missing authorization in SmartThings (medium 4.0)
- [CVE-2022-39864](https://insights.sbomify.com/CVE-2022-39864/): Missing authorization in SmartThings (low 3.3)
- [CVE-2022-39863](https://insights.sbomify.com/CVE-2022-39863/): Missing authorization in Samsung Account (low 3.6)
- [CVE-2022-39862](https://insights.sbomify.com/CVE-2022-39862/): Missing authorization in Samsung Mobile Devices (medium 5.3)
- [CVE-2022-39861](https://insights.sbomify.com/CVE-2022-39861/): Missing authorization in FactoryCamera (medium 5.9)
- [CVE-2022-39860](https://insights.sbomify.com/CVE-2022-39860/): Missing authorization in QuickShare (medium 4.4)
- [CVE-2022-3986](https://insights.sbomify.com/CVE-2022-3986/): WP Stripe Checkout < 1.2.2.21 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-39859](https://insights.sbomify.com/CVE-2022-39859/): Information disclosure in UPHelper (medium 4.0)
- [CVE-2022-39858](https://insights.sbomify.com/CVE-2022-39858/): Path traversal in FactoryCamera (high 7.3)
- [CVE-2022-39857](https://insights.sbomify.com/CVE-2022-39857/): Missing authorization in FactoryCameraFB (high 7.3)
- [CVE-2022-39856](https://insights.sbomify.com/CVE-2022-39856/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39855](https://insights.sbomify.com/CVE-2022-39855/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2022-39854](https://insights.sbomify.com/CVE-2022-39854/): Security feature bypass in Samsung Mobile Devices (medium 6.4)
- [CVE-2022-39853](https://insights.sbomify.com/CVE-2022-39853/): Use after free in Samsung Mobile Devices (medium 4.4)
- [CVE-2022-39852](https://insights.sbomify.com/CVE-2022-39852/): Memory corruption in Samsung Mobile Devices (high 8.0)
- [CVE-2022-39851](https://insights.sbomify.com/CVE-2022-39851/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39850](https://insights.sbomify.com/CVE-2022-39850/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-3985](https://insights.sbomify.com/CVE-2022-3985/): Videojs HTML5 Player < 1.1.9 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-39849](https://insights.sbomify.com/CVE-2022-39849/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-39848](https://insights.sbomify.com/CVE-2022-39848/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-39847](https://insights.sbomify.com/CVE-2022-39847/): Use after free in Samsung Mobile Devices (medium 4.9)
- [CVE-2022-39846](https://insights.sbomify.com/CVE-2022-39846/): Other in Smart Switch PC (medium 6.2)
- [CVE-2022-39845](https://insights.sbomify.com/CVE-2022-39845/): Path traversal in Samsung Kies (medium 5.5)
- [CVE-2022-39844](https://insights.sbomify.com/CVE-2022-39844/): Path traversal in Smart Switch PC (medium 5.5)
- [CVE-2022-39843](https://insights.sbomify.com/CVE-2022-39843/): Memory corruption in lotus 1-2-3 project:lotus 1-2-3 (high 7.8)
- [CVE-2022-39842](https://insights.sbomify.com/CVE-2022-39842/): Integer overflow in debian:debian linux (medium 6.1)
- [CVE-2022-39840](https://insights.sbomify.com/CVE-2022-39840/): Cross-site scripting in cotonti:cotonti siena (medium 4.8)
- [CVE-2022-3984](https://insights.sbomify.com/CVE-2022-3984/): Flowplayer Video Player < 1.0.5 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-39839](https://insights.sbomify.com/CVE-2022-39839/): Cross-site scripting in cotonti:cotonti siena (medium 4.8)
- [CVE-2022-39838](https://insights.sbomify.com/CVE-2022-39838/): Path traversal in systematicalpha:systematic fix adapter firmware (high 8.6)
- [CVE-2022-39837](https://insights.sbomify.com/CVE-2022-39837/): Null dereference in genivi:diagnostic log and trace (medium 5.5)
- [CVE-2022-39836](https://insights.sbomify.com/CVE-2022-39836/): Memory corruption in genivi:diagnostic log and trace (medium 5.5)
- [CVE-2022-39835](https://insights.sbomify.com/CVE-2022-39835/): Missing authorization in gajim:gajim (medium 5.3)
- [CVE-2022-39834](https://insights.sbomify.com/CVE-2022-39834/): Cross-site scripting in keyfactor:primekey ejbca (medium 5.4)
- [CVE-2022-39833](https://insights.sbomify.com/CVE-2022-39833/): Code injection in filecloud:filecloud (high 7.2)
- [CVE-2022-39832](https://insights.sbomify.com/CVE-2022-39832/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2022-39831](https://insights.sbomify.com/CVE-2022-39831/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2022-39830](https://insights.sbomify.com/CVE-2022-39830/): Denial of service in samsung:mtower (high 7.5)
- [CVE-2022-3983](https://insights.sbomify.com/CVE-2022-3983/): Checkout for PayPal < 1.0.14 - Contributor+ Stored XSS (medium 5.4)
- [CVE-2022-39829](https://insights.sbomify.com/CVE-2022-39829/): Null dereference in samsung:mtower (high 7.5)
- [CVE-2022-39828](https://insights.sbomify.com/CVE-2022-39828/): Denial of service in samsung:mtower (high 7.5)
- [CVE-2022-39824](https://insights.sbomify.com/CVE-2022-39824/): Cross-site scripting in appsmith:appsmith (high 8.9)
- [CVE-2022-39823](https://insights.sbomify.com/CVE-2022-39823/): Use after free in softing:opc (high 7.5)
- [CVE-2022-39822](https://insights.sbomify.com/CVE-2022-39822/): SQL injection in nokia:network functions manager for transport (high 8.8)
- [CVE-2022-39821](https://insights.sbomify.com/CVE-2022-39821/): Information disclosure in nokia:1350 optical management system (high 7.5)
- [CVE-2022-39820](https://insights.sbomify.com/CVE-2022-39820/): Information disclosure in nokia:network functions manager for transport (medium 6.5)
- [CVE-2022-3982](https://insights.sbomify.com/CVE-2022-3982/): Booking Calendar < 3.2.2 - Unauthenticated Arbitrary File Upload (critical 9.8)
- [CVE-2022-39819](https://insights.sbomify.com/CVE-2022-39819/): Command injection in nokia:1350 optical management system (high 8.8)
- [CVE-2022-39818](https://insights.sbomify.com/CVE-2022-39818/): Command injection in nokia:network functions manager for transport (high 8.8)
- [CVE-2022-39817](https://insights.sbomify.com/CVE-2022-39817/): SQL injection in nokia:1350 optical management system (high 8.8)
- [CVE-2022-39816](https://insights.sbomify.com/CVE-2022-39816/): Information disclosure in nokia:1350 optical management system (medium 6.5)
- [CVE-2022-39815](https://insights.sbomify.com/CVE-2022-39815/): Command injection in nokia:1350 optical management system (critical 9.8)
- [CVE-2022-39814](https://insights.sbomify.com/CVE-2022-39814/): Open redirect in nokia:1350 optical management system (medium 6.1)
- [CVE-2022-39813](https://insights.sbomify.com/CVE-2022-39813/): Cross-site scripting in italtel:netmatch-s ci (medium 6.1)
- [CVE-2022-39812](https://insights.sbomify.com/CVE-2022-39812/): Path traversal in italtel:netmatch-s ci (high 7.5)
- [CVE-2022-39811](https://insights.sbomify.com/CVE-2022-39811/): Missing authorization in italtel:netmatch-s ci (critical 9.1)
- [CVE-2022-39810](https://insights.sbomify.com/CVE-2022-39810/): Cross-site scripting in wso2:enterprise integrator (medium 6.1)
- [CVE-2022-3981](https://insights.sbomify.com/CVE-2022-3981/): Icegram Express < 5.5.1 - Subscriber+ SQLi (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/254/