# Vulnerabilities published in 2022


- [CVE-2022-36719](https://insights.sbomify.com/CVE-2022-36719/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36716](https://insights.sbomify.com/CVE-2022-36716/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36715](https://insights.sbomify.com/CVE-2022-36715/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36714](https://insights.sbomify.com/CVE-2022-36714/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36713](https://insights.sbomify.com/CVE-2022-36713/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36712](https://insights.sbomify.com/CVE-2022-36712/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36711](https://insights.sbomify.com/CVE-2022-36711/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-3671](https://insights.sbomify.com/CVE-2022-3671/): SourceCodester eLearning System manage.php sql injection (medium 6.3)
- [CVE-2022-36709](https://insights.sbomify.com/CVE-2022-36709/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36708](https://insights.sbomify.com/CVE-2022-36708/): SQL injection in library management system project:library management system (critical 9.8)
- [CVE-2022-36706](https://insights.sbomify.com/CVE-2022-36706/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36705](https://insights.sbomify.com/CVE-2022-36705/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36704](https://insights.sbomify.com/CVE-2022-36704/): SQL injection in library management system project:library management system (high 8.8)
- [CVE-2022-36703](https://insights.sbomify.com/CVE-2022-36703/): SQL injection in ingredients stock management system project:ingredients stock management system (high 8.8)
- [CVE-2022-36701](https://insights.sbomify.com/CVE-2022-36701/): SQL injection in ingredients stock management system project:ingredients stock management system (high 8.8)
- [CVE-2022-36700](https://insights.sbomify.com/CVE-2022-36700/): SQL injection in ingredients stock management system project:ingredients stock management system (high 8.8)
- [CVE-2022-3670](https://insights.sbomify.com/CVE-2022-3670/): Axiomatic Bento4 mp42hevc WriteSample heap-based overflow (high 7.3)
- [CVE-2022-36699](https://insights.sbomify.com/CVE-2022-36699/): SQL injection in ingredients stock management system project:ingredients stock management system (high 8.8)
- [CVE-2022-36698](https://insights.sbomify.com/CVE-2022-36698/): SQL injection in ingredients stock management system project:ingredients stock management system (high 8.8)
- [CVE-2022-36697](https://insights.sbomify.com/CVE-2022-36697/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36696](https://insights.sbomify.com/CVE-2022-36696/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36695](https://insights.sbomify.com/CVE-2022-36695/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36693](https://insights.sbomify.com/CVE-2022-36693/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36692](https://insights.sbomify.com/CVE-2022-36692/): SQL injection in ingredients stock management system project:ingredients stock management system (critical 9.8)
- [CVE-2022-36690](https://insights.sbomify.com/CVE-2022-36690/): SQL injection in ingredient stock management system project:ingredient stock management system (high 8.8)
- [CVE-2022-3669](https://insights.sbomify.com/CVE-2022-3669/): Axiomatic Bento4 mp4edit Create memory leak (medium 5.3)
- [CVE-2022-36689](https://insights.sbomify.com/CVE-2022-36689/): SQL injection in ingredient stock management system project:ingredient stock management system (high 8.8)
- [CVE-2022-36688](https://insights.sbomify.com/CVE-2022-36688/): SQL injection in ingredient stock management system project:ingredient stock management system (high 8.8)
- [CVE-2022-36687](https://insights.sbomify.com/CVE-2022-36687/): Path traversal in ingredient stock management system project:ingredient stock management system (medium 6.5)
- [CVE-2022-36686](https://insights.sbomify.com/CVE-2022-36686/): SQL injection in ingredient stock management system project:ingredient stock management system (high 8.8)
- [CVE-2022-36683](https://insights.sbomify.com/CVE-2022-36683/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-36682](https://insights.sbomify.com/CVE-2022-36682/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-36681](https://insights.sbomify.com/CVE-2022-36681/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-36680](https://insights.sbomify.com/CVE-2022-36680/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-3668](https://insights.sbomify.com/CVE-2022-3668/): Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak (medium 5.3)
- [CVE-2022-36679](https://insights.sbomify.com/CVE-2022-36679/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-36678](https://insights.sbomify.com/CVE-2022-36678/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-36677](https://insights.sbomify.com/CVE-2022-36677/): Cross-site scripting in lynchjames:obsidian mind map (medium 6.1)
- [CVE-2022-36676](https://insights.sbomify.com/CVE-2022-36676/): SQL injection in simple task scheduling system project:simple task scheduling system (high 7.2)
- [CVE-2022-36675](https://insights.sbomify.com/CVE-2022-36675/): SQL injection in simple task scheduling system project:simple task scheduling system (high 7.2)
- [CVE-2022-36674](https://insights.sbomify.com/CVE-2022-36674/): SQL injection in simple task scheduling system project:simple task scheduling system (high 7.2)
- [CVE-2022-36672](https://insights.sbomify.com/CVE-2022-36672/): Hardcoded credentials in xxyopen:novel-plus (critical 9.8)
- [CVE-2022-36671](https://insights.sbomify.com/CVE-2022-36671/): Path traversal in xxyopen:novel-plus (high 7.5)
- [CVE-2022-36670](https://insights.sbomify.com/CVE-2022-36670/): Privilege escalation in pcprotect:endpoint (medium 6.7)
- [CVE-2022-3667](https://insights.sbomify.com/CVE-2022-3667/): Axiomatic Bento4 mp42aac Ap4ByteStream.cpp WritePartial heap-based overflow (high 7.3)
- [CVE-2022-36669](https://insights.sbomify.com/CVE-2022-36669/): SQL injection in hospital information system project:hospital information system (critical 9.8)
- [CVE-2022-36668](https://insights.sbomify.com/CVE-2022-36668/): Cross-site scripting in garage management system project:garage management system (medium 5.4)
- [CVE-2022-36667](https://insights.sbomify.com/CVE-2022-36667/): File upload in garage management system project:garage management system (high 8.8)
- [CVE-2022-36664](https://insights.sbomify.com/CVE-2022-36664/): Cross-site scripting in adiscon:password manager for iis (medium 6.1)
- [CVE-2022-36663](https://insights.sbomify.com/CVE-2022-36663/): Gluu Oxauth before v4.4.1 vulnerable to Server-Side Request Forgery attacks via a crafted request_uri parameter (critical 9.8)
- [CVE-2022-36661](https://insights.sbomify.com/CVE-2022-36661/): Null dereference in xhyve project:xhyve (medium 6.5)
- [CVE-2022-36660](https://insights.sbomify.com/CVE-2022-36660/): Memory corruption in xhyve project:xhyve (critical 9.8)
- [CVE-2022-3666](https://insights.sbomify.com/CVE-2022-3666/): Axiomatic Bento4 mp42ts Ap4LinearReader.cpp Advance use after free (high 7.3)
- [CVE-2022-36659](https://insights.sbomify.com/CVE-2022-36659/): Null dereference in xhyve project:xhyve (medium 6.5)
- [CVE-2022-36657](https://insights.sbomify.com/CVE-2022-36657/): Cross-site scripting in library management system project:library management system (medium 4.8)
- [CVE-2022-3665](https://insights.sbomify.com/CVE-2022-3665/): Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow (high 7.3)
- [CVE-2022-36648](https://insights.sbomify.com/CVE-2022-36648/): Null dereference in qemu:qemu (critical 10.0)
- [CVE-2022-36647](https://insights.sbomify.com/CVE-2022-36647/): Memory corruption in davs2 project:davs2 (medium 5.5)
- [CVE-2022-36642](https://insights.sbomify.com/CVE-2022-36642/): Information disclosure in telosalliance:omnia mpx node firmware (critical 9.8)
- [CVE-2022-36640](https://insights.sbomify.com/CVE-2022-36640/): Missing authorization in influxdata:influxdb (critical 9.8)
- [CVE-2022-3664](https://insights.sbomify.com/CVE-2022-3664/): Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow (high 7.3)
- [CVE-2022-36639](https://insights.sbomify.com/CVE-2022-36639/): Cross-site scripting in garage management system project:garage management system (medium 5.4)
- [CVE-2022-36638](https://insights.sbomify.com/CVE-2022-36638/): Missing authorization in garage management system project:garage management system (medium 5.3)
- [CVE-2022-36637](https://insights.sbomify.com/CVE-2022-36637/): Cross-site scripting in garage management system project:garage management system (medium 5.4)
- [CVE-2022-36636](https://insights.sbomify.com/CVE-2022-36636/): SQL injection in garage management system project:garage management system (high 8.8)
- [CVE-2022-36635](https://insights.sbomify.com/CVE-2022-36635/): SQL injection in zkteco:zkbiosecurity v5000 (high 8.8)
- [CVE-2022-36634](https://insights.sbomify.com/CVE-2022-36634/): Missing authorization in zkteco:zkbiosecurity v5000 (high 8.8)
- [CVE-2022-36633](https://insights.sbomify.com/CVE-2022-36633/): Improper token validation leading to code execution in Teleport (high 8.8)
- [CVE-2022-3663](https://insights.sbomify.com/CVE-2022-3663/): Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference (medium 5.3)
- [CVE-2022-36622](https://insights.sbomify.com/CVE-2022-36622/): Null dereference in samsung:mtower (high 7.5)
- [CVE-2022-36621](https://insights.sbomify.com/CVE-2022-36621/): Null dereference in samsung:mtower (high 7.5)
- [CVE-2022-36620](https://insights.sbomify.com/CVE-2022-36620/): Memory corruption in dlink:dir-816 firmware (high 7.5)
- [CVE-2022-3662](https://insights.sbomify.com/CVE-2022-3662/): Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free (high 7.3)
- [CVE-2022-36619](https://insights.sbomify.com/CVE-2022-36619/): Missing authorization in dlink:dir-816 firmware (high 7.5)
- [CVE-2022-36617](https://insights.sbomify.com/CVE-2022-36617/): Weak cryptography in haystacksoftware:arq backup (medium 4.9)
- [CVE-2022-36616](https://insights.sbomify.com/CVE-2022-36616/): Hardcoded credentials in totolink:a810r firmware (high 7.8)
- [CVE-2022-36615](https://insights.sbomify.com/CVE-2022-36615/): Hardcoded credentials in totolink:a3000ru firmware (high 7.8)
- [CVE-2022-36614](https://insights.sbomify.com/CVE-2022-36614/): Hardcoded credentials in totolink:a860r firmware (high 7.8)
- [CVE-2022-36613](https://insights.sbomify.com/CVE-2022-36613/): Hardcoded credentials in totolink:n600r firmware (high 7.8)
- [CVE-2022-36612](https://insights.sbomify.com/CVE-2022-36612/): Hardcoded credentials in totolink:a950rg firmware (high 7.8)
- [CVE-2022-36611](https://insights.sbomify.com/CVE-2022-36611/): Hardcoded credentials in totolink:a800r firmware (high 7.8)
- [CVE-2022-36610](https://insights.sbomify.com/CVE-2022-36610/): Hardcoded credentials in totolink:a720r firmware (high 7.8)
- [CVE-2022-3661](https://insights.sbomify.com/CVE-2022-3661/): Information disclosure in Chrome (medium 4.3)
- [CVE-2022-36609](https://insights.sbomify.com/CVE-2022-36609/): SQL injection in oretnom23:clinic\'s patient management system (critical 9.8)
- [CVE-2022-36606](https://insights.sbomify.com/CVE-2022-36606/): SQL injection in yimihome:ywoa (critical 9.8)
- [CVE-2022-36605](https://insights.sbomify.com/CVE-2022-36605/): SQL injection in yimihome:ywoa (critical 9.8)
- [CVE-2022-36604](https://insights.sbomify.com/CVE-2022-36604/): Missing authorization in canaan:avalon asic miner firmware (high 7.5)
- [CVE-2022-36603](https://insights.sbomify.com/CVE-2022-36603/): Code injection in innosilicon:t3t\+ firmware (high 8.8)
- [CVE-2022-36602](https://insights.sbomify.com/CVE-2022-36602/): Code injection in innosilicon:a10 firmware (high 8.8)
- [CVE-2022-36601](https://insights.sbomify.com/CVE-2022-36601/): Misconfiguration in jinglemining:jasminer x4 server firmware (critical 9.8)
- [CVE-2022-36600](https://insights.sbomify.com/CVE-2022-36600/): Cross-site scripting in blogengine:blogengine.net (medium 4.8)
- [CVE-2022-3660](https://insights.sbomify.com/CVE-2022-3660/): Other in Chrome (medium 4.3)
- [CVE-2022-36599](https://insights.sbomify.com/CVE-2022-36599/): Mingsoft MCMS SQL injection vulnerability in /mdiy/model/delete URI via models List (critical 9.8)
- [CVE-2022-36594](https://insights.sbomify.com/CVE-2022-36594/): SQL injection in mybatis:mapper (critical 9.8)
- [CVE-2022-36593](https://insights.sbomify.com/CVE-2022-36593/): Path traversal in keking:kkfileview (medium 6.5)
- [CVE-2022-3659](https://insights.sbomify.com/CVE-2022-3659/): Use after free in Chrome (high 8.8)
- [CVE-2022-36588](https://insights.sbomify.com/CVE-2022-36588/): Memory corruption in dlink:dap-1650 firmware (critical 9.8)
- [CVE-2022-36587](https://insights.sbomify.com/CVE-2022-36587/): Memory corruption in tenda:g3 firmware (critical 9.8)
- [CVE-2022-36586](https://insights.sbomify.com/CVE-2022-36586/): Memory corruption in tenda:g3 firmware (critical 9.8)
- [CVE-2022-36585](https://insights.sbomify.com/CVE-2022-36585/): Memory corruption in tenda:g3 firmware (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/276/