# Vulnerabilities published in 2022


- [CVE-2022-39181](https://insights.sbomify.com/CVE-2022-39181/): GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS) (medium 6.1)
- [CVE-2022-39180](https://insights.sbomify.com/CVE-2022-39180/): College Management System v1.0 - SQL Injection (SQLi) (critical 9.8)
- [CVE-2022-3918](https://insights.sbomify.com/CVE-2022-3918/): Other in Swift Foundation (high 8.8)
- [CVE-2022-39179](https://insights.sbomify.com/CVE-2022-39179/): College Management System v1.0 - Authenticated remote code execution (high 7.2)
- [CVE-2022-39178](https://insights.sbomify.com/CVE-2022-39178/): Webvendome - webvendome Internal Server IP Disclosure (medium 5.3)
- [CVE-2022-39177](https://insights.sbomify.com/CVE-2022-39177/): Denial of service in bluez:bluez (high 8.8)
- [CVE-2022-39176](https://insights.sbomify.com/CVE-2022-39176/): Information disclosure in bluez:bluez (high 8.8)
- [CVE-2022-39173](https://insights.sbomify.com/CVE-2022-39173/): Memory corruption in wolfssl:wolfssl (high 7.5)
- [CVE-2022-39172](https://insights.sbomify.com/CVE-2022-39172/): Cross-site scripting in viva-project:openviva (medium 5.4)
- [CVE-2022-39170](https://insights.sbomify.com/CVE-2022-39170/): Memory corruption in fedoraproject:fedora (high 8.8)
- [CVE-2022-3917](https://insights.sbomify.com/CVE-2022-3917/): Information disclosure in Moto e20 (medium 4.6)
- [CVE-2022-39168](https://insights.sbomify.com/CVE-2022-39168/): Information disclosure in Robotic Process Automation (medium 4.6)
- [CVE-2022-39167](https://insights.sbomify.com/CVE-2022-39167/): IBM Spectrum Virtualize information disclosure (medium 5.9)
- [CVE-2022-39166](https://insights.sbomify.com/CVE-2022-39166/): IBM Security Guardium information disclosure (medium 4.4)
- [CVE-2022-39165](https://insights.sbomify.com/CVE-2022-39165/): IBM AIX denial of service (medium 6.2)
- [CVE-2022-39164](https://insights.sbomify.com/CVE-2022-39164/): IBM AIX denial of service (medium 6.2)
- [CVE-2022-39163](https://insights.sbomify.com/CVE-2022-39163/): IBM Cognos Controller HTTP response smuggling (medium 4.7)
- [CVE-2022-39161](https://insights.sbomify.com/CVE-2022-39161/): IBM WebSphere Application Server information disclosure (medium 4.8)
- [CVE-2022-39160](https://insights.sbomify.com/CVE-2022-39160/): IBM Cognos Analytics cross-site scripting (medium 6.1)
- [CVE-2022-3916](https://insights.sbomify.com/CVE-2022-3916/): Keycloak: session takeover with oidc offline refreshtokens (medium 6.8)
- [CVE-2022-39158](https://insights.sbomify.com/CVE-2022-39158/): Denial of service in RUGGEDCOM M2100 (medium 5.3)
- [CVE-2022-39157](https://insights.sbomify.com/CVE-2022-39157/): Memory corruption in Parasolid V34.0 (high 7.8)
- [CVE-2022-39156](https://insights.sbomify.com/CVE-2022-39156/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39155](https://insights.sbomify.com/CVE-2022-39155/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39154](https://insights.sbomify.com/CVE-2022-39154/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39153](https://insights.sbomify.com/CVE-2022-39153/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39152](https://insights.sbomify.com/CVE-2022-39152/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39151](https://insights.sbomify.com/CVE-2022-39151/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39150](https://insights.sbomify.com/CVE-2022-39150/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-3915](https://insights.sbomify.com/CVE-2022-3915/): Dokan < 3.7.6 - Unauthenticated SQLi (critical 9.8)
- [CVE-2022-39149](https://insights.sbomify.com/CVE-2022-39149/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39148](https://insights.sbomify.com/CVE-2022-39148/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39147](https://insights.sbomify.com/CVE-2022-39147/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39146](https://insights.sbomify.com/CVE-2022-39146/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39145](https://insights.sbomify.com/CVE-2022-39145/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39144](https://insights.sbomify.com/CVE-2022-39144/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39143](https://insights.sbomify.com/CVE-2022-39143/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39142](https://insights.sbomify.com/CVE-2022-39142/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39141](https://insights.sbomify.com/CVE-2022-39141/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39140](https://insights.sbomify.com/CVE-2022-39140/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39139](https://insights.sbomify.com/CVE-2022-39139/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39138](https://insights.sbomify.com/CVE-2022-39138/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39137](https://insights.sbomify.com/CVE-2022-39137/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-39136](https://insights.sbomify.com/CVE-2022-39136/): Memory corruption in JT2Go (high 7.8)
- [CVE-2022-39135](https://insights.sbomify.com/CVE-2022-39135/): Apache Calcite: potential XEE attacks (critical 9.8)
- [CVE-2022-39134](https://insights.sbomify.com/CVE-2022-39134/): Use after free in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.7)
- [CVE-2022-39133](https://insights.sbomify.com/CVE-2022-39133/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8022 (medium 5.5)
- [CVE-2022-39132](https://insights.sbomify.com/CVE-2022-39132/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39131](https://insights.sbomify.com/CVE-2022-39131/): Race condition in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39130](https://insights.sbomify.com/CVE-2022-39130/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-3913](https://insights.sbomify.com/CVE-2022-3913/): Rapid7 Nexpose Certificate Validation Issue (medium 5.3)
- [CVE-2022-39129](https://insights.sbomify.com/CVE-2022-39129/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39128](https://insights.sbomify.com/CVE-2022-39128/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39127](https://insights.sbomify.com/CVE-2022-39127/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39126](https://insights.sbomify.com/CVE-2022-39126/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39125](https://insights.sbomify.com/CVE-2022-39125/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39124](https://insights.sbomify.com/CVE-2022-39124/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39123](https://insights.sbomify.com/CVE-2022-39123/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39122](https://insights.sbomify.com/CVE-2022-39122/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39121](https://insights.sbomify.com/CVE-2022-39121/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39120](https://insights.sbomify.com/CVE-2022-39120/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-3912](https://insights.sbomify.com/CVE-2022-3912/): User Registration < 2.2.4.1 - Subscriber+ Arbitrary File Upload (high 7.5)
- [CVE-2022-39119](https://insights.sbomify.com/CVE-2022-39119/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39118](https://insights.sbomify.com/CVE-2022-39118/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39117](https://insights.sbomify.com/CVE-2022-39117/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 8.1)
- [CVE-2022-39116](https://insights.sbomify.com/CVE-2022-39116/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39115](https://insights.sbomify.com/CVE-2022-39115/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39114](https://insights.sbomify.com/CVE-2022-39114/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39113](https://insights.sbomify.com/CVE-2022-39113/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39112](https://insights.sbomify.com/CVE-2022-39112/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39111](https://insights.sbomify.com/CVE-2022-39111/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39110](https://insights.sbomify.com/CVE-2022-39110/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-3911](https://insights.sbomify.com/CVE-2022-3911/): iubenda < 3.3.3 - Subscriber+ Privileges Escalation to Admin (high 8.8)
- [CVE-2022-39109](https://insights.sbomify.com/CVE-2022-39109/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39108](https://insights.sbomify.com/CVE-2022-39108/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39107](https://insights.sbomify.com/CVE-2022-39107/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39106](https://insights.sbomify.com/CVE-2022-39106/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39105](https://insights.sbomify.com/CVE-2022-39105/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39104](https://insights.sbomify.com/CVE-2022-39104/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39103](https://insights.sbomify.com/CVE-2022-39103/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 5.5)
- [CVE-2022-39102](https://insights.sbomify.com/CVE-2022-39102/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39101](https://insights.sbomify.com/CVE-2022-39101/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39100](https://insights.sbomify.com/CVE-2022-39100/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-3910](https://insights.sbomify.com/CVE-2022-3910/): Use after free in IO_uring in the Linux Kernel (high 7.8)
- [CVE-2022-39099](https://insights.sbomify.com/CVE-2022-39099/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39098](https://insights.sbomify.com/CVE-2022-39098/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39097](https://insights.sbomify.com/CVE-2022-39097/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39096](https://insights.sbomify.com/CVE-2022-39096/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39095](https://insights.sbomify.com/CVE-2022-39095/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39094](https://insights.sbomify.com/CVE-2022-39094/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39093](https://insights.sbomify.com/CVE-2022-39093/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39092](https://insights.sbomify.com/CVE-2022-39092/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39091](https://insights.sbomify.com/CVE-2022-39091/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-39090](https://insights.sbomify.com/CVE-2022-39090/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (high 7.8)
- [CVE-2022-3909](https://insights.sbomify.com/CVE-2022-3909/): Add Comments <= 1.0.1 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-39089](https://insights.sbomify.com/CVE-2022-39089/): Memory corruption in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 4.4)
- [CVE-2022-39088](https://insights.sbomify.com/CVE-2022-39088/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2022-39087](https://insights.sbomify.com/CVE-2022-39087/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2022-39086](https://insights.sbomify.com/CVE-2022-39086/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)
- [CVE-2022-39085](https://insights.sbomify.com/CVE-2022-39085/): Missing authorization in SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/258/