# Vulnerabilities published in 2022 - [CVE-2022-36584](https://insights.sbomify.com/CVE-2022-36584/): Memory corruption in tenda:g3 firmware (critical 9.8) - [CVE-2022-36583](https://insights.sbomify.com/CVE-2022-36583/): Cross-site scripting in dedecms:dedecms (medium 6.1) - [CVE-2022-36582](https://insights.sbomify.com/CVE-2022-36582/): File upload in garage management system project:garage management system (high 7.2) - [CVE-2022-36581](https://insights.sbomify.com/CVE-2022-36581/): SQL injection in online ordering system project:online ordering system (high 7.5) - [CVE-2022-36580](https://insights.sbomify.com/CVE-2022-36580/): File upload in online ordering system project:online ordering system (high 7.2) - [CVE-2022-3658](https://insights.sbomify.com/CVE-2022-3658/): Use after free in Chrome (high 8.8) - [CVE-2022-36579](https://insights.sbomify.com/CVE-2022-36579/): Cross-site request forgery in wellcms:wellcms (high 8.8) - [CVE-2022-36578](https://insights.sbomify.com/CVE-2022-36578/): SQL injection in jizhicms:jizhicms (critical 9.8) - [CVE-2022-36577](https://insights.sbomify.com/CVE-2022-36577/): Cross-site request forgery in jizhicms:jizhicms (high 8.8) - [CVE-2022-36573](https://insights.sbomify.com/CVE-2022-36573/): Pagekit CMS cross-site scripting in Markdown text box where articles are edited (medium 6.1) - [CVE-2022-36572](https://insights.sbomify.com/CVE-2022-36572/): File upload in sinsiu:enterprise website system (critical 9.8) - [CVE-2022-36571](https://insights.sbomify.com/CVE-2022-36571/): Memory corruption in tenda:ac9 firmware (high 7.2) - [CVE-2022-36570](https://insights.sbomify.com/CVE-2022-36570/): Memory corruption in tenda:ac9 firmware (high 7.2) - [CVE-2022-3657](https://insights.sbomify.com/CVE-2022-3657/): Use after free in Chrome (high 8.8) - [CVE-2022-36569](https://insights.sbomify.com/CVE-2022-36569/): Memory corruption in tenda:ac9 firmware (high 8.8) - [CVE-2022-36568](https://insights.sbomify.com/CVE-2022-36568/): Memory corruption in tenda:ac9 firmware (high 8.8) - [CVE-2022-36566](https://insights.sbomify.com/CVE-2022-36566/): Command injection in yogeshojha:rengine (critical 9.8) - [CVE-2022-36565](https://insights.sbomify.com/CVE-2022-36565/): Misconfiguration in wampserver:wampserver (high 8.8) - [CVE-2022-36564](https://insights.sbomify.com/CVE-2022-36564/): Misconfiguration in strawberryperl:strawberryperl (high 8.8) - [CVE-2022-36563](https://insights.sbomify.com/CVE-2022-36563/): Misconfiguration in rubyinstaller:rubyinstaller2 (high 8.8) - [CVE-2022-36562](https://insights.sbomify.com/CVE-2022-36562/): Misconfiguration in rubyinstaller:rubyinstaller2 (high 8.8) - [CVE-2022-36561](https://insights.sbomify.com/CVE-2022-36561/): Memory corruption in xpdfreader:xpdf (medium 5.5) - [CVE-2022-36560](https://insights.sbomify.com/CVE-2022-36560/): Hardcoded credentials in seiko-sol:skybridge mb-a200 firmware (critical 9.8) - [CVE-2022-3656](https://insights.sbomify.com/CVE-2022-3656/): Security feature bypass in Chrome (high 8.8) - [CVE-2022-36559](https://insights.sbomify.com/CVE-2022-36559/): Command injection in seiko-sol:skybridge mb-a200 firmware (critical 9.8) - [CVE-2022-36558](https://insights.sbomify.com/CVE-2022-36558/): Hardcoded credentials in seiko-sol:skybridge mb-a100 firmware (critical 9.8) - [CVE-2022-36557](https://insights.sbomify.com/CVE-2022-36557/): File upload in seiko-sol:skybridge mb-a100 firmware (critical 9.8) - [CVE-2022-36556](https://insights.sbomify.com/CVE-2022-36556/): Command injection in seiko-sol:skybridge mb-a100 firmware (critical 9.8) - [CVE-2022-36555](https://insights.sbomify.com/CVE-2022-36555/): Weak cryptography in hytec:hwl-2511-ss firmware (critical 9.8) - [CVE-2022-36554](https://insights.sbomify.com/CVE-2022-36554/): Command injection in hytec:hwl-2511-ss firmware (critical 9.8) - [CVE-2022-36553](https://insights.sbomify.com/CVE-2022-36553/): Command injection in hytec:hwl-2511-ss firmware (critical 9.8) - [CVE-2022-36552](https://insights.sbomify.com/CVE-2022-36552/): Information disclosure in tendacn:ac6 firmware (high 7.5) - [CVE-2022-36551](https://insights.sbomify.com/CVE-2022-36551/): Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module (medium 6.5) - [CVE-2022-3655](https://insights.sbomify.com/CVE-2022-3655/): Memory corruption in Chrome (high 8.8) - [CVE-2022-36548](https://insights.sbomify.com/CVE-2022-36548/): Cross-site scripting in hashenudara:edoc-doctor-appointment-system (medium 5.4) - [CVE-2022-36547](https://insights.sbomify.com/CVE-2022-36547/): Cross-site scripting in hashenudara:edoc-doctor-appointment-system (medium 6.1) - [CVE-2022-36546](https://insights.sbomify.com/CVE-2022-36546/): Cross-site request forgery in hashenudara:edoc-doctor-appointment-system (high 8.8) - [CVE-2022-36545](https://insights.sbomify.com/CVE-2022-36545/): SQL injection in hashenudara:edoc-doctor-appointment-system (critical 9.8) - [CVE-2022-36544](https://insights.sbomify.com/CVE-2022-36544/): SQL injection in hashenudara:edoc-doctor-appointment-system (critical 9.8) - [CVE-2022-36543](https://insights.sbomify.com/CVE-2022-36543/): SQL injection in hashenudara:edoc-doctor-appointment-system (critical 9.8) - [CVE-2022-36542](https://insights.sbomify.com/CVE-2022-36542/): Missing authorization in hashenudara:edoc-doctor-appointment-system (medium 6.5) - [CVE-2022-3654](https://insights.sbomify.com/CVE-2022-3654/): Use after free in Chrome (high 8.8) - [CVE-2022-36539](https://insights.sbomify.com/CVE-2022-36539/): Missing authorization in eigen\&wijzer ouderapp project:eigen\&wijzer ouderapp (high 7.5) - [CVE-2022-36537](https://insights.sbomify.com/CVE-2022-36537/): ZK Framework AuUploader Unspecified (high 7.5, exploited in the wild) - [CVE-2022-36536](https://insights.sbomify.com/CVE-2022-36536/): Weak cryptography in syncovery:syncovery (critical 9.8) - [CVE-2022-36534](https://insights.sbomify.com/CVE-2022-36534/): Code injection in syncovery:syncovery (high 8.8) - [CVE-2022-36533](https://insights.sbomify.com/CVE-2022-36533/): Cross-site scripting in syncovery:syncovery (medium 5.4) - [CVE-2022-36532](https://insights.sbomify.com/CVE-2022-36532/): File upload in bolt:bolt cms (high 8.8) - [CVE-2022-36530](https://insights.sbomify.com/CVE-2022-36530/): Cross-site scripting in rageframe:rageframe (medium 6.1) - [CVE-2022-3653](https://insights.sbomify.com/CVE-2022-3653/): Memory corruption in Chrome (high 8.8) - [CVE-2022-36529](https://insights.sbomify.com/CVE-2022-36529/): SQL injection in kensite cms project:kensite cms (high 8.8) - [CVE-2022-36527](https://insights.sbomify.com/CVE-2022-36527/): Jfinal Cross-site Scripting vulnerability (medium 5.4) - [CVE-2022-36526](https://insights.sbomify.com/CVE-2022-36526/): Auth bypass in dlink:go-rt-ac750 firmware (high 7.5) - [CVE-2022-36525](https://insights.sbomify.com/CVE-2022-36525/): Memory corruption in dlink:go-rt-ac750 firmware (critical 9.8) - [CVE-2022-36524](https://insights.sbomify.com/CVE-2022-36524/): Hardcoded credentials in dlink:go-rt-ac750 firmware (high 7.5) - [CVE-2022-36523](https://insights.sbomify.com/CVE-2022-36523/): Command injection in dlink:go-rt-ac750 firmware (critical 9.8) - [CVE-2022-36522](https://insights.sbomify.com/CVE-2022-36522/): Denial of service in mikrotik:routeros (medium 6.5) - [CVE-2022-36521](https://insights.sbomify.com/CVE-2022-36521/): Missing authorization in cskefu:cskefu (high 7.5) - [CVE-2022-36520](https://insights.sbomify.com/CVE-2022-36520/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-3652](https://insights.sbomify.com/CVE-2022-3652/): Memory corruption in Chrome (high 8.8) - [CVE-2022-36519](https://insights.sbomify.com/CVE-2022-36519/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36518](https://insights.sbomify.com/CVE-2022-36518/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36517](https://insights.sbomify.com/CVE-2022-36517/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36516](https://insights.sbomify.com/CVE-2022-36516/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36515](https://insights.sbomify.com/CVE-2022-36515/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36514](https://insights.sbomify.com/CVE-2022-36514/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36513](https://insights.sbomify.com/CVE-2022-36513/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36511](https://insights.sbomify.com/CVE-2022-36511/): Memory corruption in h3c:gr-1200w firmware (critical 9.8) - [CVE-2022-36510](https://insights.sbomify.com/CVE-2022-36510/): Command injection in h3c:gr2200 firmware (high 7.8) - [CVE-2022-36509](https://insights.sbomify.com/CVE-2022-36509/): Command injection in h3c:gr3200 firmware (high 7.8) - [CVE-2022-36508](https://insights.sbomify.com/CVE-2022-36508/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36507](https://insights.sbomify.com/CVE-2022-36507/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36506](https://insights.sbomify.com/CVE-2022-36506/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36505](https://insights.sbomify.com/CVE-2022-36505/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36504](https://insights.sbomify.com/CVE-2022-36504/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36503](https://insights.sbomify.com/CVE-2022-36503/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36502](https://insights.sbomify.com/CVE-2022-36502/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36501](https://insights.sbomify.com/CVE-2022-36501/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36500](https://insights.sbomify.com/CVE-2022-36500/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-3650](https://insights.sbomify.com/CVE-2022-3650/): Privilege escalation in Ceph (high 7.8) - [CVE-2022-36499](https://insights.sbomify.com/CVE-2022-36499/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36498](https://insights.sbomify.com/CVE-2022-36498/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36497](https://insights.sbomify.com/CVE-2022-36497/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36496](https://insights.sbomify.com/CVE-2022-36496/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36495](https://insights.sbomify.com/CVE-2022-36495/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36494](https://insights.sbomify.com/CVE-2022-36494/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36493](https://insights.sbomify.com/CVE-2022-36493/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36492](https://insights.sbomify.com/CVE-2022-36492/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36491](https://insights.sbomify.com/CVE-2022-36491/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36490](https://insights.sbomify.com/CVE-2022-36490/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-3649](https://insights.sbomify.com/CVE-2022-3649/): Linux Kernel BPF inode.c nilfs_new_inode use after free (low 3.1) - [CVE-2022-36489](https://insights.sbomify.com/CVE-2022-36489/): Memory corruption in h3c:magic nx18 plus firmware (high 7.8) - [CVE-2022-36488](https://insights.sbomify.com/CVE-2022-36488/): Memory corruption in totolink:n350rt firmware (high 7.8) - [CVE-2022-36487](https://insights.sbomify.com/CVE-2022-36487/): Command injection in totolink:n350rt firmware (high 7.8) - [CVE-2022-36486](https://insights.sbomify.com/CVE-2022-36486/): Command injection in totolink:n350rt firmware (high 7.8) - [CVE-2022-36485](https://insights.sbomify.com/CVE-2022-36485/): Command injection in totolink:n350rt firmware (high 7.8) - [CVE-2022-36484](https://insights.sbomify.com/CVE-2022-36484/): Memory corruption in totolink:n350rt firmware (high 7.8) - [CVE-2022-36483](https://insights.sbomify.com/CVE-2022-36483/): Memory corruption in totolink:n350rt firmware (high 7.8) - [CVE-2022-36482](https://insights.sbomify.com/CVE-2022-36482/): Command injection in totolink:n350rt firmware (high 7.8) - [CVE-2022-36481](https://insights.sbomify.com/CVE-2022-36481/): Command injection in totolink:n350rt firmware (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/277/