# Vulnerabilities published in 2022


- [CVE-2022-35223](https://insights.sbomify.com/CVE-2022-35223/): EasyUse MailHunter Ultimate - Deserialization of Untrusted Data (critical 9.8)
- [CVE-2022-35222](https://insights.sbomify.com/CVE-2022-35222/): HiCOS Citizen verification component - Stack Buffer Overflow (medium 6.8)
- [CVE-2022-35221](https://insights.sbomify.com/CVE-2022-35221/): TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-2 (medium 5.4)
- [CVE-2022-35220](https://insights.sbomify.com/CVE-2022-35220/): TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling-1 (high 7.7)
- [CVE-2022-35219](https://insights.sbomify.com/CVE-2022-35219/): NHI card’s web service component - Stack-based Buffer Overflow-2 (medium 5.5)
- [CVE-2022-35218](https://insights.sbomify.com/CVE-2022-35218/): NHI card’s web service component - Heap-based Buffer Overflow (medium 5.5)
- [CVE-2022-35217](https://insights.sbomify.com/CVE-2022-35217/): NHI card’s web service component - Stack-based Buffer Overflow-1 (high 7.8)
- [CVE-2022-35216](https://insights.sbomify.com/CVE-2022-35216/): ITPison OMICARD EDM - Use of Hard-coded Credentials (high 7.5)
- [CVE-2022-35213](https://insights.sbomify.com/CVE-2022-35213/): Cross-site scripting in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap (medium 6.1)
- [CVE-2022-35212](https://insights.sbomify.com/CVE-2022-35212/): Cross-site scripting in oscommerce:oscommerce (medium 6.1)
- [CVE-2022-3521](https://insights.sbomify.com/CVE-2022-3521/): Linux Kernel kcm kcmsock.c kcm_tx_work race condition (low 2.6)
- [CVE-2022-35206](https://insights.sbomify.com/CVE-2022-35206/): Null dereference in gnu:binutils (medium 5.5)
- [CVE-2022-35205](https://insights.sbomify.com/CVE-2022-35205/): Denial of service in gnu:binutils (medium 5.5)
- [CVE-2022-35204](https://insights.sbomify.com/CVE-2022-35204/): Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service (medium 4.3)
- [CVE-2022-35203](https://insights.sbomify.com/CVE-2022-35203/): Auth bypass in trendnet:tv-ip572pi firmware (high 7.2)
- [CVE-2022-35202](https://insights.sbomify.com/CVE-2022-35202/): A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the (medium 5.1)
- [CVE-2022-35201](https://insights.sbomify.com/CVE-2022-35201/): Command injection in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-3520](https://insights.sbomify.com/CVE-2022-3520/): Heap-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-35198](https://insights.sbomify.com/CVE-2022-35198/): Hardcoded credentials in contract management system project:contract managment system (high 7.5)
- [CVE-2022-35196](https://insights.sbomify.com/CVE-2022-35196/): Cross-site request forgery in testlink:testlink (high 8.8)
- [CVE-2022-35195](https://insights.sbomify.com/CVE-2022-35195/): Missing authorization in testlink:testlink (high 7.2)
- [CVE-2022-35194](https://insights.sbomify.com/CVE-2022-35194/): Cross-site scripting in testlink:testlink (medium 5.4)
- [CVE-2022-35193](https://insights.sbomify.com/CVE-2022-35193/): SQL injection in testlink:testlink (high 7.2)
- [CVE-2022-35192](https://insights.sbomify.com/CVE-2022-35192/): Memory corruption in dlink:dsl-3782 firmware (high 7.5)
- [CVE-2022-35191](https://insights.sbomify.com/CVE-2022-35191/): Denial of service in dlink:dsl-3782 firmware (medium 6.5)
- [CVE-2022-3519](https://insights.sbomify.com/CVE-2022-3519/): SourceCodester Sanitization Management System Quote Requests Tab cross site scripting (low 2.4)
- [CVE-2022-3518](https://insights.sbomify.com/CVE-2022-3518/): SourceCodester Sanitization Management System User Creation cross site scripting (low 2.4)
- [CVE-2022-35175](https://insights.sbomify.com/CVE-2022-35175/): SQL injection in barangay management system project:barangay management system (critical 9.8)
- [CVE-2022-35174](https://insights.sbomify.com/CVE-2022-35174/): Cross site scripting in getkirby/starterkit (medium 5.4)
- [CVE-2022-35173](https://insights.sbomify.com/CVE-2022-35173/): Memory corruption in nginx:njs (high 7.5)
- [CVE-2022-35172](https://insights.sbomify.com/CVE-2022-35172/): Cross-site scripting in SAP NetWeaver Enterprise Portal (medium 6.1)
- [CVE-2022-35171](https://insights.sbomify.com/CVE-2022-35171/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 5.5)
- [CVE-2022-35170](https://insights.sbomify.com/CVE-2022-35170/): Cross-site scripting in SAP NetWeaver Enterprise Portal (medium 6.1)
- [CVE-2022-3517](https://insights.sbomify.com/CVE-2022-3517/): minimatch ReDoS vulnerability (high 7.5)
- [CVE-2022-35169](https://insights.sbomify.com/CVE-2022-35169/): Information disclosure in SAP BusinessObjects Business Intelligence Platform (LCM) (medium 6.0)
- [CVE-2022-35168](https://insights.sbomify.com/CVE-2022-35168/): XML external entity in SAP Business one (high 7.5)
- [CVE-2022-35167](https://insights.sbomify.com/CVE-2022-35167/): Misconfiguration in prinitix:cloud print management (high 8.8)
- [CVE-2022-35166](https://insights.sbomify.com/CVE-2022-35166/): Denial of service in jpeg:libjpeg (medium 5.5)
- [CVE-2022-35165](https://insights.sbomify.com/CVE-2022-35165/): Denial of service in axiosys:bento4 (medium 5.5)
- [CVE-2022-35164](https://insights.sbomify.com/CVE-2022-35164/): Use after free in gnu:libredwg (critical 9.8)
- [CVE-2022-35163](https://insights.sbomify.com/CVE-2022-35163/): Cross-site scripting in complete online job search system project:complete online job search system (medium 4.8)
- [CVE-2022-35162](https://insights.sbomify.com/CVE-2022-35162/): Cross-site scripting in complete online job search system project:complete online job search system (medium 4.8)
- [CVE-2022-35161](https://insights.sbomify.com/CVE-2022-35161/): Memory corruption in generalized electric vehicle reverse engineering tool project:generalized electric vehicle reverse engineering tool (critical 9.8)
- [CVE-2022-3516](https://insights.sbomify.com/CVE-2022-3516/): Cross-site Scripting (XSS) - Stored in librenms/librenms (medium 5.7)
- [CVE-2022-35158](https://insights.sbomify.com/CVE-2022-35158/): Denial of service in tencent:tscancode (high 7.5)
- [CVE-2022-35156](https://insights.sbomify.com/CVE-2022-35156/): SQL injection in phpgurukul:bus pass management system (critical 9.8)
- [CVE-2022-35155](https://insights.sbomify.com/CVE-2022-35155/): Cross-site scripting in phpgurukul:bus pass management system (medium 6.1)
- [CVE-2022-35154](https://insights.sbomify.com/CVE-2022-35154/): SQL injection in shopro:mall system (critical 9.8)
- [CVE-2022-35153](https://insights.sbomify.com/CVE-2022-35153/): Command injection in fusionpbx:fusionpbx (critical 9.8)
- [CVE-2022-35151](https://insights.sbomify.com/CVE-2022-35151/): Cross-site scripting in keking:kkfileview (medium 6.1)
- [CVE-2022-35150](https://insights.sbomify.com/CVE-2022-35150/): File upload in baijiacms project:baijiacms (critical 9.8)
- [CVE-2022-3515](https://insights.sbomify.com/CVE-2022-3515/): Integer overflow in libksba (critical 9.8)
- [CVE-2022-35148](https://insights.sbomify.com/CVE-2022-35148/): SQL injection in maccms:maccms (medium 6.5)
- [CVE-2022-35147](https://insights.sbomify.com/CVE-2022-35147/): Auth bypass in html-js:doracms (critical 9.8)
- [CVE-2022-35144](https://insights.sbomify.com/CVE-2022-35144/): Raneto vulnerable to Cross-site Scripting (medium 4.8)
- [CVE-2022-35143](https://insights.sbomify.com/CVE-2022-35143/): Raneto v0.17.0 employs weak password complexity requirements (critical 9.8)
- [CVE-2022-35142](https://insights.sbomify.com/CVE-2022-35142/): Raneto Denial of Service via crafted payload injected into `Search` parameter (high 7.5)
- [CVE-2022-3514](https://insights.sbomify.com/CVE-2022-3514/): Denial of service in GitLab (medium 4.3)
- [CVE-2022-35137](https://insights.sbomify.com/CVE-2022-35137/): Cross-site scripting in dgiotcloud:dgiot (medium 5.4)
- [CVE-2022-35136](https://insights.sbomify.com/CVE-2022-35136/): Missing authorization in boodskap:iot platform (medium 6.5)
- [CVE-2022-35135](https://insights.sbomify.com/CVE-2022-35135/): Auth bypass in boodskap:iot platform (high 8.8)
- [CVE-2022-35134](https://insights.sbomify.com/CVE-2022-35134/): Cross-site scripting in boodskap:iot platform (medium 5.4)
- [CVE-2022-35133](https://insights.sbomify.com/CVE-2022-35133/): Cross-site scripting in cherrytree project:cherrytree (medium 6.1)
- [CVE-2022-35132](https://insights.sbomify.com/CVE-2022-35132/): Command injection in webmin:usermin (high 8.8)
- [CVE-2022-35131](https://insights.sbomify.com/CVE-2022-35131/): Joplin is vulnerable to arbitrary code execution (critical 9.0)
- [CVE-2022-3513](https://insights.sbomify.com/CVE-2022-3513/): Cross-site scripting in GitLab (medium 6.1)
- [CVE-2022-35122](https://insights.sbomify.com/CVE-2022-35122/): Missing authorization in ecowitt:gw1100 firmware (critical 9.1)
- [CVE-2022-35121](https://insights.sbomify.com/CVE-2022-35121/): SQL injection in xxyopen:novel-plus (critical 9.8)
- [CVE-2022-35120](https://insights.sbomify.com/CVE-2022-35120/): Missing authorization in ixpdata:easyinstall (high 8.8)
- [CVE-2022-3512](https://insights.sbomify.com/CVE-2022-3512/): Lock WARP switch bypass using warp-cli 'add-trusted-ssid' command (medium 6.7)
- [CVE-2022-35118](https://insights.sbomify.com/CVE-2022-35118/): Cross-site scripting in pyrocms:pyrocms (medium 6.1)
- [CVE-2022-35117](https://insights.sbomify.com/CVE-2022-35117/): Cross-site scripting in oretnom23:clinic\'s patient management system (medium 4.8)
- [CVE-2022-35115](https://insights.sbomify.com/CVE-2022-35115/): SQL injection in icewarp:webclient dc2 (critical 9.8)
- [CVE-2022-35114](https://insights.sbomify.com/CVE-2022-35114/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35113](https://insights.sbomify.com/CVE-2022-35113/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35111](https://insights.sbomify.com/CVE-2022-35111/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35110](https://insights.sbomify.com/CVE-2022-35110/): Denial of service in swftools:swftools (medium 5.5)
- [CVE-2022-3511](https://insights.sbomify.com/CVE-2022-3511/): Awesome Support < 6.1.2 - Subscriber+ Arbitrary Exported Tickets Download (medium 6.5)
- [CVE-2022-35109](https://insights.sbomify.com/CVE-2022-35109/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35108](https://insights.sbomify.com/CVE-2022-35108/): Null dereference in swftools:swftools (medium 5.5)
- [CVE-2022-35107](https://insights.sbomify.com/CVE-2022-35107/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35106](https://insights.sbomify.com/CVE-2022-35106/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35105](https://insights.sbomify.com/CVE-2022-35105/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35104](https://insights.sbomify.com/CVE-2022-35104/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35101](https://insights.sbomify.com/CVE-2022-35101/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35100](https://insights.sbomify.com/CVE-2022-35100/): Memory corruption in swftools:swftools (medium 6.5)
- [CVE-2022-3510](https://insights.sbomify.com/CVE-2022-3510/): Parsing issue in protobuf message-type extension (high 7.5)
- [CVE-2022-35099](https://insights.sbomify.com/CVE-2022-35099/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35098](https://insights.sbomify.com/CVE-2022-35098/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35097](https://insights.sbomify.com/CVE-2022-35097/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35096](https://insights.sbomify.com/CVE-2022-35096/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35095](https://insights.sbomify.com/CVE-2022-35095/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35094](https://insights.sbomify.com/CVE-2022-35094/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35093](https://insights.sbomify.com/CVE-2022-35093/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35092](https://insights.sbomify.com/CVE-2022-35092/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35091](https://insights.sbomify.com/CVE-2022-35091/): Denial of service in swftools:swftools (medium 5.5)
- [CVE-2022-35090](https://insights.sbomify.com/CVE-2022-35090/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-3509](https://insights.sbomify.com/CVE-2022-3509/): Parsing issue in protobuf textformat (high 7.5)
- [CVE-2022-35089](https://insights.sbomify.com/CVE-2022-35089/): Memory corruption in swftools:swftools (medium 5.5)
- [CVE-2022-35088](https://insights.sbomify.com/CVE-2022-35088/): Memory corruption in swftools:swftools (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/288/