# Vulnerabilities published in 2022


- [CVE-2022-35819](https://insights.sbomify.com/CVE-2022-35819/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35818](https://insights.sbomify.com/CVE-2022-35818/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35817](https://insights.sbomify.com/CVE-2022-35817/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35816](https://insights.sbomify.com/CVE-2022-35816/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35815](https://insights.sbomify.com/CVE-2022-35815/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35814](https://insights.sbomify.com/CVE-2022-35814/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35813](https://insights.sbomify.com/CVE-2022-35813/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35812](https://insights.sbomify.com/CVE-2022-35812/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-35811](https://insights.sbomify.com/CVE-2022-35811/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35810](https://insights.sbomify.com/CVE-2022-35810/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-3581](https://insights.sbomify.com/CVE-2022-3581/): SourceCodester Cashier Queuing System Cashiers Tab cross site scripting (low 2.4)
- [CVE-2022-35809](https://insights.sbomify.com/CVE-2022-35809/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35808](https://insights.sbomify.com/CVE-2022-35808/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35807](https://insights.sbomify.com/CVE-2022-35807/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35806](https://insights.sbomify.com/CVE-2022-35806/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-35805](https://insights.sbomify.com/CVE-2022-35805/): Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-35804](https://insights.sbomify.com/CVE-2022-35804/): SMB Client and Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-35803](https://insights.sbomify.com/CVE-2022-35803/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35802](https://insights.sbomify.com/CVE-2022-35802/): Azure Site Recovery Elevation of Privilege Vulnerability (high 8.1)
- [CVE-2022-35801](https://insights.sbomify.com/CVE-2022-35801/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35800](https://insights.sbomify.com/CVE-2022-35800/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-3580](https://insights.sbomify.com/CVE-2022-3580/): SourceCodester Cashier Queuing System User Creation cross site scripting (low 2.4)
- [CVE-2022-35799](https://insights.sbomify.com/CVE-2022-35799/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35798](https://insights.sbomify.com/CVE-2022-35798/): Azure Arc Jumpstart Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-35797](https://insights.sbomify.com/CVE-2022-35797/): Windows Hello Security Feature Bypass Vulnerability (medium 6.1)
- [CVE-2022-35796](https://insights.sbomify.com/CVE-2022-35796/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2022-35795](https://insights.sbomify.com/CVE-2022-35795/): Windows Error Reporting Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35794](https://insights.sbomify.com/CVE-2022-35794/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-35793](https://insights.sbomify.com/CVE-2022-35793/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2022-35792](https://insights.sbomify.com/CVE-2022-35792/): Storage Spaces Direct Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35791](https://insights.sbomify.com/CVE-2022-35791/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35790](https://insights.sbomify.com/CVE-2022-35790/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-3579](https://insights.sbomify.com/CVE-2022-3579/): SourceCodester Cashier Queuing System Login Page login.php sql injection (medium 6.3)
- [CVE-2022-35789](https://insights.sbomify.com/CVE-2022-35789/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35788](https://insights.sbomify.com/CVE-2022-35788/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35787](https://insights.sbomify.com/CVE-2022-35787/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-35786](https://insights.sbomify.com/CVE-2022-35786/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35785](https://insights.sbomify.com/CVE-2022-35785/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35784](https://insights.sbomify.com/CVE-2022-35784/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35783](https://insights.sbomify.com/CVE-2022-35783/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.4)
- [CVE-2022-35782](https://insights.sbomify.com/CVE-2022-35782/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35781](https://insights.sbomify.com/CVE-2022-35781/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35780](https://insights.sbomify.com/CVE-2022-35780/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-3578](https://insights.sbomify.com/CVE-2022-3578/): ProfileGrid < 5.1.1 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-35779](https://insights.sbomify.com/CVE-2022-35779/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-35777](https://insights.sbomify.com/CVE-2022-35777/): Visual Studio Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-35776](https://insights.sbomify.com/CVE-2022-35776/): Azure Site Recovery Denial of Service Vulnerability (medium 6.2)
- [CVE-2022-35775](https://insights.sbomify.com/CVE-2022-35775/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-35774](https://insights.sbomify.com/CVE-2022-35774/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 4.9)
- [CVE-2022-35773](https://insights.sbomify.com/CVE-2022-35773/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-35772](https://insights.sbomify.com/CVE-2022-35772/): Azure Site Recovery Remote Code Execution Vulnerability (high 7.2)
- [CVE-2022-35771](https://insights.sbomify.com/CVE-2022-35771/): Windows Defender Credential Guard Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35770](https://insights.sbomify.com/CVE-2022-35770/): Windows NTLM Spoofing Vulnerability (medium 6.5)
- [CVE-2022-3577](https://insights.sbomify.com/CVE-2022-3577/): Memory corruption in Kernel (high 7.8)
- [CVE-2022-35769](https://insights.sbomify.com/CVE-2022-35769/): Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability (high 7.5)
- [CVE-2022-35768](https://insights.sbomify.com/CVE-2022-35768/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35767](https://insights.sbomify.com/CVE-2022-35767/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-35766](https://insights.sbomify.com/CVE-2022-35766/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-35765](https://insights.sbomify.com/CVE-2022-35765/): Storage Spaces Direct Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35764](https://insights.sbomify.com/CVE-2022-35764/): Storage Spaces Direct Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35763](https://insights.sbomify.com/CVE-2022-35763/): Storage Spaces Direct Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35762](https://insights.sbomify.com/CVE-2022-35762/): Storage Spaces Direct Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35761](https://insights.sbomify.com/CVE-2022-35761/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35760](https://insights.sbomify.com/CVE-2022-35760/): Microsoft ATA Port Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3576](https://insights.sbomify.com/CVE-2022-3576/): Memory corruption in DiskStation Manager (DSM) (medium 5.3)
- [CVE-2022-35759](https://insights.sbomify.com/CVE-2022-35759/): Windows Local Security Authority (LSA) Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-35758](https://insights.sbomify.com/CVE-2022-35758/): Windows Kernel Memory Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-35757](https://insights.sbomify.com/CVE-2022-35757/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2022-35756](https://insights.sbomify.com/CVE-2022-35756/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35755](https://insights.sbomify.com/CVE-2022-35755/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2022-35754](https://insights.sbomify.com/CVE-2022-35754/): Unified Write Filter Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2022-35753](https://insights.sbomify.com/CVE-2022-35753/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-35752](https://insights.sbomify.com/CVE-2022-35752/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-35751](https://insights.sbomify.com/CVE-2022-35751/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35750](https://insights.sbomify.com/CVE-2022-35750/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3575](https://insights.sbomify.com/CVE-2022-3575/): Frauscher Sensortechnik Diagnostic System FDS102 for FAdC R2 and FAdCi R2 configuration upload vulnerability (critical 9.8)
- [CVE-2022-35749](https://insights.sbomify.com/CVE-2022-35749/): Windows Digital Media Receiver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35748](https://insights.sbomify.com/CVE-2022-35748/): HTTP.sys Denial of Service Vulnerability (high 7.5)
- [CVE-2022-35747](https://insights.sbomify.com/CVE-2022-35747/): Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability (medium 5.9)
- [CVE-2022-35746](https://insights.sbomify.com/CVE-2022-35746/): Windows Digital Media Receiver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-35745](https://insights.sbomify.com/CVE-2022-35745/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-35744](https://insights.sbomify.com/CVE-2022-35744/): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-35743](https://insights.sbomify.com/CVE-2022-35743/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-35742](https://insights.sbomify.com/CVE-2022-35742/): Microsoft Outlook Denial of Service Vulnerability (high 7.5)
- [CVE-2022-35741](https://insights.sbomify.com/CVE-2022-35741/): Apache CloudStack SAML Single Sign-On XXE (critical 9.8)
- [CVE-2022-35740](https://insights.sbomify.com/CVE-2022-35740/): Security feature bypass in dotcms:dotcms (medium 6.1)
- [CVE-2022-3574](https://insights.sbomify.com/CVE-2022-3574/): WPForms Pro < 1.7.7 - CSV Injection (critical 9.8)
- [CVE-2022-35739](https://insights.sbomify.com/CVE-2022-35739/): Cross-site scripting in paessler:prtg network monitor (medium 5.3)
- [CVE-2022-35737](https://insights.sbomify.com/CVE-2022-35737/): `libsqlite3-sys` via C SQLite improperly validates array index (high 7.5)
- [CVE-2022-35735](https://insights.sbomify.com/CVE-2022-35735/): BIG-IP monitor configuration vulnerability CVE-2022-35735 (high 7.2)
- [CVE-2022-35734](https://insights.sbomify.com/CVE-2022-35734/): Hardcoded credentials in 'Hulu / フールー' App for Android (high 7.5)
- [CVE-2022-35733](https://insights.sbomify.com/CVE-2022-35733/): Auth bypass in UNIMO Technology digital video recorders UDR-JA1004/JA1008/JA1016 and UDR-JA1016 (critical 9.8)
- [CVE-2022-35730](https://insights.sbomify.com/CVE-2022-35730/): WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2022-3573](https://insights.sbomify.com/CVE-2022-3573/): Cross-site scripting in GitLab (medium 5.4)
- [CVE-2022-35729](https://insights.sbomify.com/CVE-2022-35729/): Memory corruption in OpenBMC (high 7.5)
- [CVE-2022-35728](https://insights.sbomify.com/CVE-2022-35728/): iControl REST vulnerability CVE-2022-35728 (high 8.1)
- [CVE-2022-35726](https://insights.sbomify.com/CVE-2022-35726/): WordPress Video Gallery plugin <= 1.3.4.5 - Broken Authentication vulnerability (medium 4.3)
- [CVE-2022-35725](https://insights.sbomify.com/CVE-2022-35725/): WordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-35724](https://insights.sbomify.com/CVE-2022-35724/): Denial of service while reading data in Avro Rust SDK (high 7.5)
- [CVE-2022-35722](https://insights.sbomify.com/CVE-2022-35722/): Cross-site scripting in Jazz for Service Management (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/284/