# Vulnerabilities published in 2022


- [CVE-2022-3611](https://insights.sbomify.com/CVE-2022-3611/): Information disclosure in App Store (high 7.6)
- [CVE-2022-36109](https://insights.sbomify.com/CVE-2022-36109/): Moby vulnerability relating to supplementary group permissions (medium 5.3)
- [CVE-2022-36108](https://insights.sbomify.com/CVE-2022-36108/): Cross-Site Scripting in typo3/cms-core (medium 6.5)
- [CVE-2022-36107](https://insights.sbomify.com/CVE-2022-36107/): Stored Cross-Site Scripting via FileDumpController (medium 6.5)
- [CVE-2022-36106](https://insights.sbomify.com/CVE-2022-36106/): Missing check for expiration time of password reset token in TYPO3 (medium 5.4)
- [CVE-2022-36105](https://insights.sbomify.com/CVE-2022-36105/): User Enumeration via Response Timing in TYPO3 (medium 5.3)
- [CVE-2022-36104](https://insights.sbomify.com/CVE-2022-36104/): Denial of Service via Page Error Handling in TYPO3/cms (medium 5.9)
- [CVE-2022-36103](https://insights.sbomify.com/CVE-2022-36103/): Talos worker join token can be used to get elevated access level to the Talos API (high 7.2)
- [CVE-2022-36102](https://insights.sbomify.com/CVE-2022-36102/): Acess control list bypassed via crafted specific URLs (medium 6.3)
- [CVE-2022-36101](https://insights.sbomify.com/CVE-2022-36101/): Sensitive data in backend customer module (medium 5.4)
- [CVE-2022-36100](https://insights.sbomify.com/CVE-2022-36100/): XWiki Platform Applications Tag and XWiki Platform Tag UI vulnerable to Eval Injection (critical 9.9)
- [CVE-2022-3610](https://insights.sbomify.com/CVE-2022-3610/): Jeeng Push Notifications < 2.0.4 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-36099](https://insights.sbomify.com/CVE-2022-36099/): XWiki Platform Wiki UI Main Wiki Eval Injection vulnerability (critical 9.9)
- [CVE-2022-36098](https://insights.sbomify.com/CVE-2022-36098/): XWiki Platform Mentions UI vulnerable to Cross-site Scripting (high 8.9)
- [CVE-2022-36097](https://insights.sbomify.com/CVE-2022-36097/): XWiki Platform Attachment UI vulnerable to cross-site scripting in the move attachment form (high 8.9)
- [CVE-2022-36096](https://insights.sbomify.com/CVE-2022-36096/): XWiki Platform vulnerable to Cross-site Scripting in the deleted attachments list (high 8.9)
- [CVE-2022-36095](https://insights.sbomify.com/CVE-2022-36095/): XWiki Cross-Site Request Forgery (CSRF) for actions on tags (medium 4.3)
- [CVE-2022-36094](https://insights.sbomify.com/CVE-2022-36094/): XWiki Platform Web Parent POM vulnerable to XSS in the attachment history (high 8.9)
- [CVE-2022-36093](https://insights.sbomify.com/CVE-2022-36093/): XWiki Platform Web Templates vulnerable to Unauthorized User Registration Through the Distribution Wizard (high 8.5)
- [CVE-2022-36092](https://insights.sbomify.com/CVE-2022-36092/): XWiki Platform Old Core vulnerable to Authentication Bypass Using the Login Action (high 7.5)
- [CVE-2022-36091](https://insights.sbomify.com/CVE-2022-36091/): XWiki Platform Web Templates vulnerable to Missing Authorization, Exposure of Private Personal Information to Unauthorized Actor (high 7.5)
- [CVE-2022-36090](https://insights.sbomify.com/CVE-2022-36090/): org.xwiki.platform:xwiki-platform-oldcore Improper Authorization check for inactive users (high 8.1)
- [CVE-2022-3609](https://insights.sbomify.com/CVE-2022-3609/): GetYourGuide Ticketing < 1.0.4 - Admin+ Stored XSS (medium 4.8)
- [CVE-2022-36089](https://insights.sbomify.com/CVE-2022-36089/): VelaUX APIServer vulnerable to Authentication Bypass by Capture-replay (high 8.2)
- [CVE-2022-36088](https://insights.sbomify.com/CVE-2022-36088/): GoCD Windows installations outside default location inadequately restrict installation file permissions (medium 5.0)
- [CVE-2022-36087](https://insights.sbomify.com/CVE-2022-36087/): OAuthLib vulnerable DoS when attacker provides malicious IPV6 URI (medium 5.7)
- [CVE-2022-36086](https://insights.sbomify.com/CVE-2022-36086/): linked_list_allocator vulnerable to out-of-bound writes on `Heap` initialization and `Heap::extend` (high 8.4)
- [CVE-2022-36085](https://insights.sbomify.com/CVE-2022-36085/): OPA Compiler: Bypass of WithUnsafeBuiltins using `with` keyword to mock functions (high 7.4)
- [CVE-2022-36084](https://insights.sbomify.com/CVE-2022-36084/): cruddl vulnerable to AQL injection through flexSearch (critical 9.9)
- [CVE-2022-36083](https://insights.sbomify.com/CVE-2022-36083/): JOSE vulnerable to resource exhaustion via specifically crafted JWE (medium 5.3)
- [CVE-2022-36082](https://insights.sbomify.com/CVE-2022-36082/): mangadex-downloader vulnerable to unauthorized file reading (medium 5.3)
- [CVE-2022-36081](https://insights.sbomify.com/CVE-2022-36081/): Wikmd vulnerable to Local File Enumeration when accessing /list (high 7.5)
- [CVE-2022-36080](https://insights.sbomify.com/CVE-2022-36080/): Wikmd Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2022-3608](https://insights.sbomify.com/CVE-2022-3608/): Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq (high 7.2)
- [CVE-2022-36079](https://insights.sbomify.com/CVE-2022-36079/): Parse Server vulnerable to brute force guessing of user sensitive data via search patterns (high 8.6)
- [CVE-2022-36078](https://insights.sbomify.com/CVE-2022-36078/): Slice Memory Allocation with Excessive Size Value in binary (high 8.8)
- [CVE-2022-36077](https://insights.sbomify.com/CVE-2022-36077/): Electron subject to Exfiltration of hashed SMB credentials on Windows via file:// redirect (high 7.2)
- [CVE-2022-36076](https://insights.sbomify.com/CVE-2022-36076/): Account takeover via SSO plugins in NodeBB (high 8.8)
- [CVE-2022-36075](https://insights.sbomify.com/CVE-2022-36075/): File list exposure in Nextcloud Files Access Control (low 2.6)
- [CVE-2022-36074](https://insights.sbomify.com/CVE-2022-36074/): Authentication headers exposed on by Nextcloud Server (medium 6.4)
- [CVE-2022-36073](https://insights.sbomify.com/CVE-2022-36073/): RubyGems allows creation of users with arbitrary unverified emails (high 8.3)
- [CVE-2022-36072](https://insights.sbomify.com/CVE-2022-36072/): SilverwareGames.io used == for hashing instead of === (medium 5.9)
- [CVE-2022-36071](https://insights.sbomify.com/CVE-2022-36071/): Recovery codes abuse in SFTPGo (high 8.3)
- [CVE-2022-36070](https://insights.sbomify.com/CVE-2022-36070/): Poetry's Untrusted Search Path can lead to Local Code Execution on Windows (high 7.3)
- [CVE-2022-3607](https://insights.sbomify.com/CVE-2022-3607/): Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in octoprint/octoprint (medium 6.0)
- [CVE-2022-36069](https://insights.sbomify.com/CVE-2022-36069/): Poetry Argument Injection vulnerability can lead to local Code Execution (high 7.3)
- [CVE-2022-36068](https://insights.sbomify.com/CVE-2022-36068/): Discourse moderators can edit themes via the API (high 7.2)
- [CVE-2022-36067](https://insights.sbomify.com/CVE-2022-36067/): vm2 vulnerable to Sandbox Escape before v3.9.11 (critical 10.0)
- [CVE-2022-36066](https://insights.sbomify.com/CVE-2022-36066/): Discourse vulnerable to RCE via admins uploading maliciously zipped file (critical 9.1)
- [CVE-2022-36065](https://insights.sbomify.com/CVE-2022-36065/): GrowthBook account creation and file upload vulnerability in self-hosted configurations (high 7.5)
- [CVE-2022-36064](https://insights.sbomify.com/CVE-2022-36064/): Shescape Inefficient Regular Expression Complexity vulnerability (medium 5.9)
- [CVE-2022-36063](https://insights.sbomify.com/CVE-2022-36063/): USBX Host CDC ECM integer underflow with buffer overflow (high 7.6)
- [CVE-2022-36062](https://insights.sbomify.com/CVE-2022-36062/): Grafana folders admin only permission privilege escalation (high 7.6)
- [CVE-2022-36061](https://insights.sbomify.com/CVE-2022-36061/): Elrond go can execute on same context checks in VM (medium 6.5)
- [CVE-2022-36060](https://insights.sbomify.com/CVE-2022-36060/): Prototype pollution in matrix-react-sdk (high 8.2)
- [CVE-2022-3606](https://insights.sbomify.com/CVE-2022-3606/): Linux Kernel BPF libbpf.c find_prog_by_sec_insn null pointer dereference (low 3.5)
- [CVE-2022-36059](https://insights.sbomify.com/CVE-2022-36059/): Prototype pollution in matrix-js-sdk (high 8.2)
- [CVE-2022-36058](https://insights.sbomify.com/CVE-2022-36058/): elrond-go MultiESDTNFTTransfer call on a SC address with missing function name (high 7.5)
- [CVE-2022-36057](https://insights.sbomify.com/CVE-2022-36057/): Discourse-Chat Cross-Site Scripting issue for channel names and descriptions (medium 5.4)
- [CVE-2022-36056](https://insights.sbomify.com/CVE-2022-36056/): Vulnerabilities with blob verification in sigstore cosign (medium 5.5)
- [CVE-2022-36055](https://insights.sbomify.com/CVE-2022-36055/): Denial of service in Helm (medium 6.5)
- [CVE-2022-36054](https://insights.sbomify.com/CVE-2022-36054/): Out-of-bounds write when decompressing 6LoWPAN payload in Contiki-NG (medium 6.8)
- [CVE-2022-36053](https://insights.sbomify.com/CVE-2022-36053/): Out-of-bounds read in the uIP buffer module (medium 5.9)
- [CVE-2022-36052](https://insights.sbomify.com/CVE-2022-36052/): Out-of-bounds read when decompressing UDP header (medium 5.9)
- [CVE-2022-36051](https://insights.sbomify.com/CVE-2022-36051/): Broken Authorization in ZITADEL Actions (high 8.7)
- [CVE-2022-3605](https://insights.sbomify.com/CVE-2022-3605/): WP CSV Exporter < 1.3.7 - CSV Injection (high 7.8)
- [CVE-2022-36049](https://insights.sbomify.com/CVE-2022-36049/): Flux2 Helm Controller denial of service (high 7.7)
- [CVE-2022-36048](https://insights.sbomify.com/CVE-2022-36048/): IP address leak via image proxy bypass in Zulip Server (medium 4.3)
- [CVE-2022-36046](https://insights.sbomify.com/CVE-2022-36046/): Unexpected server crash in Next.js version 12.2.3 (medium 5.3)
- [CVE-2022-36045](https://insights.sbomify.com/CVE-2022-36045/): Account takeover via cryptographically weak PRNG in NodeBB Forum (critical 9.0)
- [CVE-2022-36044](https://insights.sbomify.com/CVE-2022-36044/): Rizin Out-of-bounds Write vulnerability in Lua binary plugin (high 7.8)
- [CVE-2022-36043](https://insights.sbomify.com/CVE-2022-36043/): Rizin Double Free in bobj.c when using qnx binary plugin (high 7.8)
- [CVE-2022-36042](https://insights.sbomify.com/CVE-2022-36042/): Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin (high 7.8)
- [CVE-2022-36041](https://insights.sbomify.com/CVE-2022-36041/): Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin (high 7.8)
- [CVE-2022-36040](https://insights.sbomify.com/CVE-2022-36040/): Rizin Out-of-bounds Write vulnerability in pyc/marshal.c (high 7.8)
- [CVE-2022-3604](https://insights.sbomify.com/CVE-2022-3604/): Contact Form Entries < 1.3.0 - CSV Injection (high 7.8)
- [CVE-2022-36039](https://insights.sbomify.com/CVE-2022-36039/): Out-of-bounds write when parsing DEX files in Rizin (high 7.8)
- [CVE-2022-36038](https://insights.sbomify.com/CVE-2022-36038/): CircuitVerse potential RCE vulnerability via Oj.load (high 8.8)
- [CVE-2022-36037](https://insights.sbomify.com/CVE-2022-36037/): Cross-site scripting (XSS) from dynamic options in the multiselect field in Kirby (medium 5.9)
- [CVE-2022-36036](https://insights.sbomify.com/CVE-2022-36036/): Improper Control of Generation of Code ('Code Injection') in mdx-mermaid (low 3.6)
- [CVE-2022-36035](https://insights.sbomify.com/CVE-2022-36035/): Flux CLI Workload Injection (high 7.7)
- [CVE-2022-36034](https://insights.sbomify.com/CVE-2022-36034/): Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js (high 7.5)
- [CVE-2022-36033](https://insights.sbomify.com/CVE-2022-36033/): jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled (medium 6.1)
- [CVE-2022-36032](https://insights.sbomify.com/CVE-2022-36032/): ReactPHP's HTTP server parses encoded cookie names so malicious `__Host-` and `__Secure-` cookies can be sent (medium 5.3)
- [CVE-2022-36031](https://insights.sbomify.com/CVE-2022-36031/): Unhandled exception on illegal filename_disk value (medium 6.5)
- [CVE-2022-36030](https://insights.sbomify.com/CVE-2022-36030/): SQL Injection in Project-nexus (critical 9.8)
- [CVE-2022-3603](https://insights.sbomify.com/CVE-2022-3603/): Export customers list CSV for WooCommerce < 2.0.69 - CSV Injection (critical 9.8)
- [CVE-2022-36029](https://insights.sbomify.com/CVE-2022-36029/): BigBlueButton Greenlight Open Redirect vulnerability (critical 9.1)
- [CVE-2022-36028](https://insights.sbomify.com/CVE-2022-36028/): BigBlueButton Greenlight Open Redirect vulnerability (critical 9.1)
- [CVE-2022-36027](https://insights.sbomify.com/CVE-2022-36027/): Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow (medium 5.9)
- [CVE-2022-36026](https://insights.sbomify.com/CVE-2022-36026/): `CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlow (medium 5.9)
- [CVE-2022-36025](https://insights.sbomify.com/CVE-2022-36025/): Incorrect Conversion between Numeric Types in Besu Ethereum Client (critical 9.1)
- [CVE-2022-36024](https://insights.sbomify.com/CVE-2022-36024/): Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution (high 7.5)
- [CVE-2022-36023](https://insights.sbomify.com/CVE-2022-36023/): Remote denial of service in Hyperledger Fabric Gateway (high 7.0)
- [CVE-2022-36022](https://insights.sbomify.com/CVE-2022-36022/): Some Deeplearning4J packages use unclaimed s3 bucket in tests and examples (medium 5.3)
- [CVE-2022-36021](https://insights.sbomify.com/CVE-2022-36021/): Redis string pattern matching can be abused to achieve Denial of Service (medium 5.5)
- [CVE-2022-36020](https://insights.sbomify.com/CVE-2022-36020/): Bypass of Cross-Site Scripting Protection in typo3/html-sanitizer (medium 6.1)
- [CVE-2022-3602](https://insights.sbomify.com/CVE-2022-3602/): X.509 Email Address 4-byte Buffer Overflow (high 7.5)
- [CVE-2022-36019](https://insights.sbomify.com/CVE-2022-36019/): `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow (medium 5.9)
- [CVE-2022-36018](https://insights.sbomify.com/CVE-2022-36018/): `CHECK` fail in `RaggedTensorToVariant` in TensorFlow (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/281/