# Vulnerabilities published in 2022


- [CVE-2022-3750](https://insights.sbomify.com/CVE-2022-3750/): Ask Me < 6.8.7 - Post Deletion via CSRF (medium 4.7)
- [CVE-2022-3748](https://insights.sbomify.com/CVE-2022-3748/): Improper authorization that can lead to account impersonation (critical 9.8)
- [CVE-2022-3747](https://insights.sbomify.com/CVE-2022-3747/): Becustom <= 1.0.5.2 - Cross-Site Request Forgery (high 8.8)
- [CVE-2022-37462](https://insights.sbomify.com/CVE-2022-37462/): Cross-site scripting in upstreamworks:upstream works on finesse (medium 5.4)
- [CVE-2022-37461](https://insights.sbomify.com/CVE-2022-37461/): Cross-site scripting in canon:medical vitrea view (medium 6.1)
- [CVE-2022-3746](https://insights.sbomify.com/CVE-2022-3746/): Other in Notebook (medium 6.7)
- [CVE-2022-37459](https://insights.sbomify.com/CVE-2022-37459/): Information disclosure in amperecomputing:ampere altra firmware (high 7.8)
- [CVE-2022-37458](https://insights.sbomify.com/CVE-2022-37458/): Business logic in discourse:discourse (high 7.2)
- [CVE-2022-37454](https://insights.sbomify.com/CVE-2022-37454/): Buffer overflow in sponge queue functions (critical 9.8)
- [CVE-2022-37453](https://insights.sbomify.com/CVE-2022-37453/): Memory corruption in softing:edgeaggregator (high 7.5)
- [CVE-2022-37452](https://insights.sbomify.com/CVE-2022-37452/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2022-37451](https://insights.sbomify.com/CVE-2022-37451/): Memory corruption in exim:exim (high 7.5)
- [CVE-2022-37450](https://insights.sbomify.com/CVE-2022-37450/): Go Ethereum allows attackers to use manipulation of time-difference values to achieve replacement of main-chain blocks (medium 5.9)
- [CVE-2022-3745](https://insights.sbomify.com/CVE-2022-3745/): Information disclosure in Notebook (medium 4.4)
- [CVE-2022-3744](https://insights.sbomify.com/CVE-2022-3744/): Hardcoded credentials in Notebook (medium 6.7)
- [CVE-2022-37439](https://insights.sbomify.com/CVE-2022-37439/): Malformed ZIP file crashes Universal Forwarders and Splunk Enterprise through file monitoring input (medium 5.5)
- [CVE-2022-37438](https://insights.sbomify.com/CVE-2022-37438/): Information disclosure via the dashboard drilldown in Splunk Enterprise (low 2.6)
- [CVE-2022-37437](https://insights.sbomify.com/CVE-2022-37437/): Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation (high 7.4)
- [CVE-2022-37436](https://insights.sbomify.com/CVE-2022-37436/): Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splitting (medium 5.3)
- [CVE-2022-37435](https://insights.sbomify.com/CVE-2022-37435/): Apache ShenYu Admin Improper Privilege Management (high 8.8)
- [CVE-2022-37434](https://insights.sbomify.com/CVE-2022-37434/): Memory corruption in apple:ipados (critical 9.8)
- [CVE-2022-37431](https://insights.sbomify.com/CVE-2022-37431/): Cross-site scripting in dotcms:dotcms (medium 6.1)
- [CVE-2022-37430](https://insights.sbomify.com/CVE-2022-37430/): Stored XSS using uppercase characters in HTMLEditor (medium 5.4)
- [CVE-2022-3743](https://insights.sbomify.com/CVE-2022-3743/): Information disclosure in Notebook (medium 4.4)
- [CVE-2022-37429](https://insights.sbomify.com/CVE-2022-37429/): Stored XSS using HTMLEditor (medium 5.4)
- [CVE-2022-37428](https://insights.sbomify.com/CVE-2022-37428/): Denial of service in fedoraproject:fedora (medium 6.5)
- [CVE-2022-37426](https://insights.sbomify.com/CVE-2022-37426/): File upload in opennebula:opennebula (medium 4.3)
- [CVE-2022-37425](https://insights.sbomify.com/CVE-2022-37425/): Command injection in opennebula:opennebula (critical 9.9)
- [CVE-2022-37424](https://insights.sbomify.com/CVE-2022-37424/): Information disclosure in opennebula:opennebula (medium 6.5)
- [CVE-2022-37423](https://insights.sbomify.com/CVE-2022-37423/): Neo4j Graph apoc plugins Partial Path Traversal Vulnerability (high 7.5)
- [CVE-2022-37422](https://insights.sbomify.com/CVE-2022-37422/): Path Traversal in Payara (high 7.5)
- [CVE-2022-37421](https://insights.sbomify.com/CVE-2022-37421/): Silverstipe CMS Stored XSS in custom meta tags (medium 5.4)
- [CVE-2022-3742](https://insights.sbomify.com/CVE-2022-3742/): Memory corruption in Notebook (medium 6.7)
- [CVE-2022-37418](https://insights.sbomify.com/CVE-2022-37418/): Auth bypass in hyundai:hyundai firmware (medium 6.4)
- [CVE-2022-37416](https://insights.sbomify.com/CVE-2022-37416/): Memory corruption in ittiam:libmpeg2 (medium 6.5)
- [CVE-2022-37415](https://insights.sbomify.com/CVE-2022-37415/): Memory corruption in uniwill:sparkio.sys (high 7.8)
- [CVE-2022-37412](https://insights.sbomify.com/CVE-2022-37412/): WordPress Better Delete Revision plugin <= 1.6.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-37411](https://insights.sbomify.com/CVE-2022-37411/): WordPress Captcha Code plugin <= 2.7 - Cross-Site Request Forgery (CSRF) vulnerability (medium 5.4)
- [CVE-2022-37410](https://insights.sbomify.com/CVE-2022-37410/): Privilege escalation in Intel(R) Thunderbolt driver software (high 7.0)
- [CVE-2022-3741](https://insights.sbomify.com/CVE-2022-3741/): Improper Restriction of Excessive Authentication Attempts in chatwoot/chatwoot (critical 9.4)
- [CVE-2022-37409](https://insights.sbomify.com/CVE-2022-37409/): Information disclosure in Intel(R) IPP Cryptography software (medium 4.7)
- [CVE-2022-37407](https://insights.sbomify.com/CVE-2022-37407/): Cross-site scripting in Gallery PhotoBlocks (WordPress plugin) (medium 4.1)
- [CVE-2022-37406](https://insights.sbomify.com/CVE-2022-37406/): Cross-site scripting in Aficio SP 4210N (medium 4.8)
- [CVE-2022-37405](https://insights.sbomify.com/CVE-2022-37405/): WordPress Better Font Awesome plugin <= 2.0.1 - Cross-Site Request Forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2022-37404](https://insights.sbomify.com/CVE-2022-37404/): WordPress add2fav plugin <= 1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-37403](https://insights.sbomify.com/CVE-2022-37403/): WordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-37402](https://insights.sbomify.com/CVE-2022-37402/): WordPress AFS Analytics Plugin <= 4.18 is vulnerable to Cross Site Scripting (XSS) (medium 4.8)
- [CVE-2022-37401](https://insights.sbomify.com/CVE-2022-37401/): Apache OpenOffice Weak Master Keys (high 8.8)
- [CVE-2022-37400](https://insights.sbomify.com/CVE-2022-37400/): Weak cryptography in Apache OpenOffice (high 8.8)
- [CVE-2022-3740](https://insights.sbomify.com/CVE-2022-3740/): Security feature bypass in GitLab (medium 6.5)
- [CVE-2022-37398](https://insights.sbomify.com/CVE-2022-37398/): A stack-based buffer overflow vulnerability was found on ADM (high 7.1)
- [CVE-2022-37397](https://insights.sbomify.com/CVE-2022-37397/): The software is vulnerable when using LDAP-based authentication in YCQL with Microsoft’s Active Directory (high 8.3)
- [CVE-2022-37396](https://insights.sbomify.com/CVE-2022-37396/): Security feature bypass in Rider (medium 4.1)
- [CVE-2022-37395](https://insights.sbomify.com/CVE-2022-37395/): Denial of service in CV81-WDM FW (high 7.5)
- [CVE-2022-37394](https://insights.sbomify.com/CVE-2022-37394/): OpenStack Nova Changing vnic_type breaks compute service restart (low 3.3)
- [CVE-2022-37393](https://insights.sbomify.com/CVE-2022-37393/): Zimbra zmslapd arbitrary module load (high 7.8)
- [CVE-2022-37392](https://insights.sbomify.com/CVE-2022-37392/): Apache Traffic Server: Improperly reading the client requests (medium 5.3)
- [CVE-2022-37391](https://insights.sbomify.com/CVE-2022-37391/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-37390](https://insights.sbomify.com/CVE-2022-37390/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-3739](https://insights.sbomify.com/CVE-2022-3739/): WP Best Quiz <= 1.0 - Author+ Stored XSS (medium 5.4)
- [CVE-2022-37389](https://insights.sbomify.com/CVE-2022-37389/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-37388](https://insights.sbomify.com/CVE-2022-37388/): Memory corruption in PDF Reader (high 7.8)
- [CVE-2022-37387](https://insights.sbomify.com/CVE-2022-37387/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-37386](https://insights.sbomify.com/CVE-2022-37386/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-37385](https://insights.sbomify.com/CVE-2022-37385/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-37384](https://insights.sbomify.com/CVE-2022-37384/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-37383](https://insights.sbomify.com/CVE-2022-37383/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-37382](https://insights.sbomify.com/CVE-2022-37382/): Use after free in PDF Reader (low 3.3)
- [CVE-2022-37381](https://insights.sbomify.com/CVE-2022-37381/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-37380](https://insights.sbomify.com/CVE-2022-37380/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-3738](https://insights.sbomify.com/CVE-2022-3738/): WAGO: Missing authentication for config export functionality in multiple products (medium 5.9)
- [CVE-2022-37379](https://insights.sbomify.com/CVE-2022-37379/): Use after free in PDF Reader (low 3.3)
- [CVE-2022-37378](https://insights.sbomify.com/CVE-2022-37378/): Use after free in PDF Editor (high 7.8)
- [CVE-2022-37377](https://insights.sbomify.com/CVE-2022-37377/): Memory corruption in PDF Editor (high 7.8)
- [CVE-2022-37376](https://insights.sbomify.com/CVE-2022-37376/): Memory corruption in PDF Editor (low 3.3)
- [CVE-2022-37375](https://insights.sbomify.com/CVE-2022-37375/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-37374](https://insights.sbomify.com/CVE-2022-37374/): Use after free in PDF-XChange Editor (high 7.8)
- [CVE-2022-37373](https://insights.sbomify.com/CVE-2022-37373/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-37372](https://insights.sbomify.com/CVE-2022-37372/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37371](https://insights.sbomify.com/CVE-2022-37371/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37370](https://insights.sbomify.com/CVE-2022-37370/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-3737](https://insights.sbomify.com/CVE-2022-3737/): Out-of-bounds Read in PHOENIX CONTACT Automationworx Software Suite (high 7.8)
- [CVE-2022-37369](https://insights.sbomify.com/CVE-2022-37369/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37368](https://insights.sbomify.com/CVE-2022-37368/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-37367](https://insights.sbomify.com/CVE-2022-37367/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37366](https://insights.sbomify.com/CVE-2022-37366/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37365](https://insights.sbomify.com/CVE-2022-37365/): Code injection in PDF-XChange Editor (high 7.8)
- [CVE-2022-37364](https://insights.sbomify.com/CVE-2022-37364/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37363](https://insights.sbomify.com/CVE-2022-37363/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37362](https://insights.sbomify.com/CVE-2022-37362/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37361](https://insights.sbomify.com/CVE-2022-37361/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-37360](https://insights.sbomify.com/CVE-2022-37360/): Memory corruption in PDF-XChange Editor (low 3.3)
- [CVE-2022-3736](https://insights.sbomify.com/CVE-2022-3736/): named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries (high 7.5)
- [CVE-2022-37359](https://insights.sbomify.com/CVE-2022-37359/): Use after free in PDF-XChange Editor (high 7.8)
- [CVE-2022-37358](https://insights.sbomify.com/CVE-2022-37358/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37357](https://insights.sbomify.com/CVE-2022-37357/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37356](https://insights.sbomify.com/CVE-2022-37356/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37355](https://insights.sbomify.com/CVE-2022-37355/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37354](https://insights.sbomify.com/CVE-2022-37354/): Memory corruption in PDF-XChange Editor (high 7.8)
- [CVE-2022-37353](https://insights.sbomify.com/CVE-2022-37353/): Memory corruption in PDF-XChange Editor (low 3.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/270/