# Vulnerabilities published in 2022


- [CVE-2022-37056](https://insights.sbomify.com/CVE-2022-37056/): Command injection in dlink:go-rt-ac750 firmware (critical 9.8)
- [CVE-2022-37055](https://insights.sbomify.com/CVE-2022-37055/): D-Link Routers Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2022-37053](https://insights.sbomify.com/CVE-2022-37053/): Command injection in trendnet:tew733gr firmware (critical 9.8)
- [CVE-2022-37052](https://insights.sbomify.com/CVE-2022-37052/): Denial of service in freedesktop:poppler (medium 6.5)
- [CVE-2022-37051](https://insights.sbomify.com/CVE-2022-37051/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2022-37050](https://insights.sbomify.com/CVE-2022-37050/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2022-3705](https://insights.sbomify.com/CVE-2022-3705/): vim autocmd quickfix.c qf_update_buffer use after free (medium 5.0)
- [CVE-2022-37049](https://insights.sbomify.com/CVE-2022-37049/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2022-37048](https://insights.sbomify.com/CVE-2022-37048/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2022-37047](https://insights.sbomify.com/CVE-2022-37047/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2022-37044](https://insights.sbomify.com/CVE-2022-37044/): Cross-site scripting in zimbra:collaboration (medium 6.1)
- [CVE-2022-37043](https://insights.sbomify.com/CVE-2022-37043/): Cross-site request forgery in zimbra:collaboration (medium 5.7)
- [CVE-2022-37042](https://insights.sbomify.com/CVE-2022-37042/): Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2022-37041](https://insights.sbomify.com/CVE-2022-37041/): Server-side request forgery in zimbra:collaboration (high 7.5)
- [CVE-2022-3704](https://insights.sbomify.com/CVE-2022-3704/): Ruby on Rails _table.html.erb cross site scripting (low 3.5)
- [CVE-2022-37035](https://insights.sbomify.com/CVE-2022-37035/): Use after free in frrouting:frrouting (high 8.1)
- [CVE-2022-37034](https://insights.sbomify.com/CVE-2022-37034/): Denial of service in dotcms:dotcms (medium 5.3)
- [CVE-2022-37033](https://insights.sbomify.com/CVE-2022-37033/): Server-side request forgery in dotcms:dotcms (medium 6.5)
- [CVE-2022-37032](https://insights.sbomify.com/CVE-2022-37032/): Memory corruption in debian:debian linux (critical 9.1)
- [CVE-2022-37030](https://insights.sbomify.com/CVE-2022-37030/): Misconfiguration in grommunio:gromox (high 7.8)
- [CVE-2022-3703](https://insights.sbomify.com/CVE-2022-3703/): ETIC Telecom Remote Access Server Insufficient Verification of Data Authenticity (high 7.6)
- [CVE-2022-37028](https://insights.sbomify.com/CVE-2022-37028/): Cross-site scripting in iris:isams (medium 5.4)
- [CVE-2022-37027](https://insights.sbomify.com/CVE-2022-37027/): Command injection in ahsay:cloud backup suite (high 7.2)
- [CVE-2022-37026](https://insights.sbomify.com/CVE-2022-37026/): Auth bypass in erlang:erlang\/otp (critical 9.8)
- [CVE-2022-37025](https://insights.sbomify.com/CVE-2022-37025/): Privilege escalation in mcafee:security scan plus (high 7.8)
- [CVE-2022-37024](https://insights.sbomify.com/CVE-2022-37024/): Code injection in zohocorp:manageengine firewall analyzer (high 8.8)
- [CVE-2022-37023](https://insights.sbomify.com/CVE-2022-37023/): Apache Geode deserialization of untrusted data flaw when using REST API on Java 8 or Java 11 (medium 6.5)
- [CVE-2022-37022](https://insights.sbomify.com/CVE-2022-37022/): Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 11 (high 8.8)
- [CVE-2022-37021](https://insights.sbomify.com/CVE-2022-37021/): Apache Geode deserialization of untrusted data flaw when using JMX over RMI on Java 8. (critical 9.8)
- [CVE-2022-37020](https://insights.sbomify.com/CVE-2022-37020/): HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows (medium 6.8)
- [CVE-2022-3702](https://insights.sbomify.com/CVE-2022-3702/): Race condition in Vantage HardwareScan Plugin (medium 6.1)
- [CVE-2022-37019](https://insights.sbomify.com/CVE-2022-37019/): HP PC BIOS May 2024 Security Updates for Potential Stack Buffer Overflows (medium 6.8)
- [CVE-2022-37018](https://insights.sbomify.com/CVE-2022-37018/): Privilege escalation in HP PC BIOS (high 8.4)
- [CVE-2022-37017](https://insights.sbomify.com/CVE-2022-37017/): Security feature bypass in Symantec Endpoint Protection (high 7.5)
- [CVE-2022-37016](https://insights.sbomify.com/CVE-2022-37016/): Privilege escalation in Symantec Endpoint Protection (critical 9.8)
- [CVE-2022-37015](https://insights.sbomify.com/CVE-2022-37015/): Privilege escalation in Symantec Endpoint Detection and Response (critical 9.8)
- [CVE-2022-37013](https://insights.sbomify.com/CVE-2022-37013/): Denial of service in OPC UA C++ Demo Server (high 7.5)
- [CVE-2022-37012](https://insights.sbomify.com/CVE-2022-37012/): Denial of service in OPC UA C++ Demo Server (high 7.5)
- [CVE-2022-37011](https://insights.sbomify.com/CVE-2022-37011/): Auth bypass in Mendix SAML (Mendix 7 compatible) (critical 9.8)
- [CVE-2022-37010](https://insights.sbomify.com/CVE-2022-37010/): Other in IntelliJ IDEA (low 3.6)
- [CVE-2022-3701](https://insights.sbomify.com/CVE-2022-3701/): Privilege escalation in Vantage SystemUpdate Plugin (high 7.8)
- [CVE-2022-37009](https://insights.sbomify.com/CVE-2022-37009/): Code injection in IntelliJ IDEA (low 3.9)
- [CVE-2022-37008](https://insights.sbomify.com/CVE-2022-37008/): Security feature bypass in EMUI (high 7.5)
- [CVE-2022-37007](https://insights.sbomify.com/CVE-2022-37007/): Memory corruption in EMUI (high 7.5)
- [CVE-2022-37006](https://insights.sbomify.com/CVE-2022-37006/): Missing authorization in HarmonyOS;EMUI (high 7.5)
- [CVE-2022-37005](https://insights.sbomify.com/CVE-2022-37005/): Command injection in EMUI (high 7.5)
- [CVE-2022-37004](https://insights.sbomify.com/CVE-2022-37004/): Security feature bypass in EMUI (high 7.5)
- [CVE-2022-37003](https://insights.sbomify.com/CVE-2022-37003/): Privilege escalation in EMUI (medium 6.5)
- [CVE-2022-37002](https://insights.sbomify.com/CVE-2022-37002/): Privilege escalation in EMUI (high 7.4)
- [CVE-2022-37001](https://insights.sbomify.com/CVE-2022-37001/): Denial of service in HarmonyOS (high 7.5)
- [CVE-2022-37000](https://insights.sbomify.com/CVE-2022-37000/): Information disclosure in veritas:flex appliance (medium 6.5)
- [CVE-2022-3700](https://insights.sbomify.com/CVE-2022-3700/): Race condition in Vantage SystemUpdate Plugin (medium 6.1)
- [CVE-2022-36999](https://insights.sbomify.com/CVE-2022-36999/): Information disclosure in veritas:flex appliance (medium 6.5)
- [CVE-2022-36998](https://insights.sbomify.com/CVE-2022-36998/): Memory corruption in veritas:flex appliance (medium 6.3)
- [CVE-2022-36997](https://insights.sbomify.com/CVE-2022-36997/): Server-side request forgery in veritas:flex appliance (high 7.1)
- [CVE-2022-36996](https://insights.sbomify.com/CVE-2022-36996/): Information disclosure in veritas:flex appliance (medium 4.3)
- [CVE-2022-36995](https://insights.sbomify.com/CVE-2022-36995/): Path traversal in veritas:flex appliance (medium 4.3)
- [CVE-2022-36994](https://insights.sbomify.com/CVE-2022-36994/): Path traversal in veritas:flex appliance (medium 6.3)
- [CVE-2022-36993](https://insights.sbomify.com/CVE-2022-36993/): Command injection in veritas:flex appliance (high 8.8)
- [CVE-2022-36992](https://insights.sbomify.com/CVE-2022-36992/): Command injection in veritas:flex appliance (critical 9.9)
- [CVE-2022-36991](https://insights.sbomify.com/CVE-2022-36991/): Path traversal in veritas:flex appliance (high 8.1)
- [CVE-2022-36990](https://insights.sbomify.com/CVE-2022-36990/): Path traversal in veritas:flex appliance (critical 9.6)
- [CVE-2022-3699](https://insights.sbomify.com/CVE-2022-3699/): Memory corruption in Diagnostics (high 7.8)
- [CVE-2022-36989](https://insights.sbomify.com/CVE-2022-36989/): Command injection in veritas:flex appliance (high 8.8)
- [CVE-2022-36988](https://insights.sbomify.com/CVE-2022-36988/): Command injection in veritas:flex appliance (high 8.0)
- [CVE-2022-36987](https://insights.sbomify.com/CVE-2022-36987/): Path traversal in veritas:flex appliance (high 8.5)
- [CVE-2022-36986](https://insights.sbomify.com/CVE-2022-36986/): Command injection in veritas:flex appliance (high 8.6)
- [CVE-2022-36985](https://insights.sbomify.com/CVE-2022-36985/): Privilege escalation in veritas:flex appliance (high 7.8)
- [CVE-2022-36984](https://insights.sbomify.com/CVE-2022-36984/): Denial of service in veritas:flex appliance (high 7.7)
- [CVE-2022-36983](https://insights.sbomify.com/CVE-2022-36983/): Auth bypass in Avalanche (high 7.5)
- [CVE-2022-36982](https://insights.sbomify.com/CVE-2022-36982/): Path traversal in Avalanche (medium 6.5)
- [CVE-2022-36981](https://insights.sbomify.com/CVE-2022-36981/): Path traversal in Avalanche (high 8.8)
- [CVE-2022-36980](https://insights.sbomify.com/CVE-2022-36980/): Race condition in Avalanche (critical 9.4)
- [CVE-2022-3698](https://insights.sbomify.com/CVE-2022-3698/): Denial of service in Diagnostics (medium 4.4)
- [CVE-2022-36979](https://insights.sbomify.com/CVE-2022-36979/): SQL injection in Avalanche (high 7.5)
- [CVE-2022-36978](https://insights.sbomify.com/CVE-2022-36978/): Deserialization in Avalanche (critical 9.8)
- [CVE-2022-36977](https://insights.sbomify.com/CVE-2022-36977/): Deserialization in Avalanche (critical 9.8)
- [CVE-2022-36976](https://insights.sbomify.com/CVE-2022-36976/): SQL injection in Avalanche (critical 9.1)
- [CVE-2022-36975](https://insights.sbomify.com/CVE-2022-36975/): SQL injection in Avalanche (critical 9.1)
- [CVE-2022-36974](https://insights.sbomify.com/CVE-2022-36974/): Deserialization in Avalanche (critical 9.8)
- [CVE-2022-36973](https://insights.sbomify.com/CVE-2022-36973/): SQL injection in Avalanche (critical 9.1)
- [CVE-2022-36972](https://insights.sbomify.com/CVE-2022-36972/): SQL injection in Avalanche (critical 9.1)
- [CVE-2022-36971](https://insights.sbomify.com/CVE-2022-36971/): Deserialization in Avalanche (critical 9.8)
- [CVE-2022-36970](https://insights.sbomify.com/CVE-2022-36970/): Code injection in Edge (high 7.8)
- [CVE-2022-3697](https://insights.sbomify.com/CVE-2022-3697/): Ansible leaks password to logs (high 7.5)
- [CVE-2022-36969](https://insights.sbomify.com/CVE-2022-36969/): XML external entity in Edge (medium 5.5)
- [CVE-2022-36968](https://insights.sbomify.com/CVE-2022-36968/): Cross-site request forgery in progress:ipswitch ws ftp server (medium 4.3)
- [CVE-2022-36967](https://insights.sbomify.com/CVE-2022-36967/): Cross-site scripting in progress:ipswitch ws ftp server (medium 6.1)
- [CVE-2022-36966](https://insights.sbomify.com/CVE-2022-36966/): Insecure Direct Object Reference Vulnerability: Orion Platform 2020.2.6 (medium 5.4)
- [CVE-2022-36965](https://insights.sbomify.com/CVE-2022-36965/): Stored and DOM XSS in QoE Applications: Orion Platform (medium 6.1)
- [CVE-2022-36964](https://insights.sbomify.com/CVE-2022-36964/): SolarWinds Platform Deserialization of Untrusted Data (high 8.8)
- [CVE-2022-36963](https://insights.sbomify.com/CVE-2022-36963/): SolarWinds Platform Deserialization of Untrusted Data Vulnerability (high 7.2)
- [CVE-2022-36962](https://insights.sbomify.com/CVE-2022-36962/): SolarWinds Platform Command Injection (high 7.2)
- [CVE-2022-36961](https://insights.sbomify.com/CVE-2022-36961/): Orion Platform SQL Injection Privilege Escalation Vulnerability (high 8.8)
- [CVE-2022-36960](https://insights.sbomify.com/CVE-2022-36960/): SolarWinds Platform Improper Input Validation (high 8.8)
- [CVE-2022-3696](https://insights.sbomify.com/CVE-2022-3696/): Code injection in Sophos Firewall (high 7.2)
- [CVE-2022-36958](https://insights.sbomify.com/CVE-2022-36958/): SolarWinds Platform Deserialization of Untrusted Data (high 8.8)
- [CVE-2022-36957](https://insights.sbomify.com/CVE-2022-36957/): SolarWinds Platform Deserialization of Untrusted Data (high 7.2)
- [CVE-2022-36956](https://insights.sbomify.com/CVE-2022-36956/): Command injection in veritas:netbackup (critical 9.0)
- [CVE-2022-36955](https://insights.sbomify.com/CVE-2022-36955/): Privilege escalation in veritas:netbackup (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/273/