# Vulnerabilities published in 2022


- [CVE-2022-34964](https://insights.sbomify.com/CVE-2022-34964/): Cross-site scripting in openteknik:open source social network (medium 4.8)
- [CVE-2022-34963](https://insights.sbomify.com/CVE-2022-34963/): Cross-site scripting in openteknik:open source social network (medium 5.4)
- [CVE-2022-34962](https://insights.sbomify.com/CVE-2022-34962/): Cross-site scripting in openteknik:open source social network (medium 5.4)
- [CVE-2022-34961](https://insights.sbomify.com/CVE-2022-34961/): Cross-site scripting in openteknik:open source social network (medium 5.4)
- [CVE-2022-34960](https://insights.sbomify.com/CVE-2022-34960/): Path traversal in mikrotik:routeros (critical 9.8)
- [CVE-2022-3496](https://insights.sbomify.com/CVE-2022-3496/): SourceCodester Human Resource Management System Admin Panel employeeadd.php access control (medium 6.3)
- [CVE-2022-34956](https://insights.sbomify.com/CVE-2022-34956/): SQL injection in pligg:pligg cms (critical 9.8)
- [CVE-2022-34955](https://insights.sbomify.com/CVE-2022-34955/): SQL injection in pligg:pligg cms (critical 9.8)
- [CVE-2022-34954](https://insights.sbomify.com/CVE-2022-34954/): SQL injection in phptpoint:pharmacy management system (critical 9.8)
- [CVE-2022-34953](https://insights.sbomify.com/CVE-2022-34953/): SQL injection in phptpoint:pharmacy management system (critical 9.8)
- [CVE-2022-34952](https://insights.sbomify.com/CVE-2022-34952/): SQL injection in phptpoint:pharmacy management system (critical 9.8)
- [CVE-2022-34951](https://insights.sbomify.com/CVE-2022-34951/): SQL injection in phptpoint:pharmacy management system (critical 9.8)
- [CVE-2022-34950](https://insights.sbomify.com/CVE-2022-34950/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-3495](https://insights.sbomify.com/CVE-2022-3495/): SourceCodester Simple Online Public Access Catalog Admin Login sql injection (high 7.3)
- [CVE-2022-34949](https://insights.sbomify.com/CVE-2022-34949/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-34948](https://insights.sbomify.com/CVE-2022-34948/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-34947](https://insights.sbomify.com/CVE-2022-34947/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-34946](https://insights.sbomify.com/CVE-2022-34946/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-34945](https://insights.sbomify.com/CVE-2022-34945/): SQL injection in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-3494](https://insights.sbomify.com/CVE-2022-3494/): Complianz (Free < 6.3.4, Premium < 6.3.6) - Translator SQLi (high 8.8)
- [CVE-2022-34937](https://insights.sbomify.com/CVE-2022-34937/): Cross-site request forgery in yuba:u5cms (high 8.8)
- [CVE-2022-3493](https://insights.sbomify.com/CVE-2022-3493/): SourceCodester Human Resource Management System Add Employee cross site scripting (low 3.5)
- [CVE-2022-34928](https://insights.sbomify.com/CVE-2022-34928/): SQL injection in jflyfox:jfinal cms (high 8.8)
- [CVE-2022-34927](https://insights.sbomify.com/CVE-2022-34927/): Memory corruption in milkytracker project:milkytracker (high 7.8)
- [CVE-2022-34924](https://insights.sbomify.com/CVE-2022-34924/): Path traversal in landray:landray office automation (high 7.5)
- [CVE-2022-3492](https://insights.sbomify.com/CVE-2022-3492/): SourceCodester Human Resource Management System Profile Photo os command injection (medium 6.3)
- [CVE-2022-34919](https://insights.sbomify.com/CVE-2022-34919/): File upload in zengenti:contensis (critical 9.8)
- [CVE-2022-34918](https://insights.sbomify.com/CVE-2022-34918/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2022-34917](https://insights.sbomify.com/CVE-2022-34917/): Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers (high 7.5)
- [CVE-2022-34916](https://insights.sbomify.com/CVE-2022-34916/): Improper Input Validation (JNDI Injection) in JMSMessageConsumer (critical 9.8)
- [CVE-2022-34914](https://insights.sbomify.com/CVE-2022-34914/): Command injection in webswing:webswing (critical 9.8)
- [CVE-2022-34913](https://insights.sbomify.com/CVE-2022-34913/): Memory corruption in md2roff project:md2roff (critical 9.8)
- [CVE-2022-34912](https://insights.sbomify.com/CVE-2022-34912/): Cross-site scripting in fedoraproject:fedora (medium 6.1)
- [CVE-2022-34911](https://insights.sbomify.com/CVE-2022-34911/): Cross-site scripting in fedoraproject:fedora (medium 6.1)
- [CVE-2022-34910](https://insights.sbomify.com/CVE-2022-34910/): Information disclosure in aremis:aremis 4 nomads (medium 4.1)
- [CVE-2022-3491](https://insights.sbomify.com/CVE-2022-3491/): Heap-based Buffer Overflow in vim/vim (medium 4.0)
- [CVE-2022-34909](https://insights.sbomify.com/CVE-2022-34909/): SQL injection in aremis:aremis 4 nomads (high 7.7)
- [CVE-2022-34908](https://insights.sbomify.com/CVE-2022-34908/): Auth bypass in aremis:aremis 4 nomads (high 8.2)
- [CVE-2022-34907](https://insights.sbomify.com/CVE-2022-34907/): Hardcoded credentials in filewave:filewave (critical 9.8)
- [CVE-2022-34906](https://insights.sbomify.com/CVE-2022-34906/): Hardcoded credentials in filewave:filewave (high 7.5)
- [CVE-2022-34903](https://insights.sbomify.com/CVE-2022-34903/): Security feature bypass in debian:debian linux (medium 6.5)
- [CVE-2022-34902](https://insights.sbomify.com/CVE-2022-34902/): Privilege escalation in Access (high 7.8)
- [CVE-2022-34901](https://insights.sbomify.com/CVE-2022-34901/): Privilege escalation in Access (high 7.8)
- [CVE-2022-34900](https://insights.sbomify.com/CVE-2022-34900/): Privilege escalation in Access (high 7.8)
- [CVE-2022-3490](https://insights.sbomify.com/CVE-2022-3490/): Checkout Field Editor for WooCommerce < 1.8.0 - Admin+ PHP Object Injection (high 7.2)
- [CVE-2022-34899](https://insights.sbomify.com/CVE-2022-34899/): Race condition in Access (high 7.0)
- [CVE-2022-34894](https://insights.sbomify.com/CVE-2022-34894/): Missing authorization in Hub (low 3.5)
- [CVE-2022-34893](https://insights.sbomify.com/CVE-2022-34893/): Privilege escalation in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2022-34892](https://insights.sbomify.com/CVE-2022-34892/): Race condition in Desktop (high 7.8)
- [CVE-2022-34891](https://insights.sbomify.com/CVE-2022-34891/): Privilege escalation in Desktop (high 7.8)
- [CVE-2022-34890](https://insights.sbomify.com/CVE-2022-34890/): Memory corruption in Desktop (high 7.3)
- [CVE-2022-3489](https://insights.sbomify.com/CVE-2022-3489/): WP Hide <= 0.0.2 - Unauthenticated Settings Update (medium 5.3)
- [CVE-2022-34889](https://insights.sbomify.com/CVE-2022-34889/): Memory corruption in Desktop (high 8.2)
- [CVE-2022-34888](https://insights.sbomify.com/CVE-2022-34888/): Server-side request forgery in Lenovo XClarity Controller (low 2.7)
- [CVE-2022-34887](https://insights.sbomify.com/CVE-2022-34887/): Auth bypass in Printer G263DNS (medium 4.3)
- [CVE-2022-34886](https://insights.sbomify.com/CVE-2022-34886/): Memory corruption in Printer G263DNS (high 8.8)
- [CVE-2022-34885](https://insights.sbomify.com/CVE-2022-34885/): Code injection in MR2600 Router (high 7.2)
- [CVE-2022-34884](https://insights.sbomify.com/CVE-2022-34884/): Memory corruption in Lenovo XClarity Controller (high 7.2)
- [CVE-2022-34883](https://insights.sbomify.com/CVE-2022-34883/): OS Command Injection Vulnerability in RAID Manager Storage Replication Adapter (high 7.2)
- [CVE-2022-34882](https://insights.sbomify.com/CVE-2022-34882/): Information Exposure Vulnerability in RAID Manager Storage Replication Adapter (critical 9.0)
- [CVE-2022-34881](https://insights.sbomify.com/CVE-2022-34881/): Information Exposure Vulnerability in JP1/Automatic Operation (low 3.3)
- [CVE-2022-3488](https://insights.sbomify.com/CVE-2022-3488/): named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries (high 7.5)
- [CVE-2022-34879](https://insights.sbomify.com/CVE-2022-34879/): Cross-site scripting in VICIdial (medium 6.5)
- [CVE-2022-34878](https://insights.sbomify.com/CVE-2022-34878/): VICIDial 2.14b0.5 SVN 3550 was discovered to contain a SQL injection vulnerability at /vicidial/user_stats.php. (medium 5.5)
- [CVE-2022-34877](https://insights.sbomify.com/CVE-2022-34877/): SQL injection in VICIdial (medium 6.4)
- [CVE-2022-34876](https://insights.sbomify.com/CVE-2022-34876/): VICIDial 2.14b0.5 SVN 3550 was discovered to contain multiple SQL injection vulnerability at /vicidial/admin.php. (medium 5.5)
- [CVE-2022-34875](https://insights.sbomify.com/CVE-2022-34875/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-34874](https://insights.sbomify.com/CVE-2022-34874/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-34873](https://insights.sbomify.com/CVE-2022-34873/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-34872](https://insights.sbomify.com/CVE-2022-34872/): SQL injection in Centreon (medium 6.5)
- [CVE-2022-34871](https://insights.sbomify.com/CVE-2022-34871/): SQL injection in Centreon (high 7.2)
- [CVE-2022-34870](https://insights.sbomify.com/CVE-2022-34870/): Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application (medium 5.4)
- [CVE-2022-34869](https://insights.sbomify.com/CVE-2022-34869/): Command injection in CentreCOM AR260S V2 (high 8.8)
- [CVE-2022-34868](https://insights.sbomify.com/CVE-2022-34868/): WordPress ЮKassa для WooCommerce plugin <= 2.3.0 - Authenticated Arbitrary Settings Update vulnerability (high 8.8)
- [CVE-2022-34867](https://insights.sbomify.com/CVE-2022-34867/): WordPress WP Libre Form 2 plugin <= 2.0.8 - Unauthenticated Sensitive Information Disclosure vulnerability (high 7.3)
- [CVE-2022-34866](https://insights.sbomify.com/CVE-2022-34866/): Command injection in Passage Drive (high 7.8)
- [CVE-2022-34865](https://insights.sbomify.com/CVE-2022-34865/): Traffic intelligence feeds vulnerability CVE-2022-34865 (medium 4.8)
- [CVE-2022-34864](https://insights.sbomify.com/CVE-2022-34864/): Memory corruption in Intel(R) Trace Analyzer and Collector software (medium 4.2)
- [CVE-2022-34862](https://insights.sbomify.com/CVE-2022-34862/): TMM vulnerability CVE-2022-34862 (high 7.5)
- [CVE-2022-3486](https://insights.sbomify.com/CVE-2022-3486/): Open redirect in GitLab (medium 4.7)
- [CVE-2022-34858](https://insights.sbomify.com/CVE-2022-34858/): WordPress OAuth 2.0 client for SSO plugin <= 1.11.3 - Authentication Bypass vulnerability (critical 9.8)
- [CVE-2022-34857](https://insights.sbomify.com/CVE-2022-34857/): WordPress SP Project & Document Manager plugin <= 4.59 - Reflected Cross-Site Scripting (XSS) vulnerability (medium 6.1)
- [CVE-2022-34855](https://insights.sbomify.com/CVE-2022-34855/): Path traversal in Intel(R) NUC Pro Software Suite (medium 6.7)
- [CVE-2022-34854](https://insights.sbomify.com/CVE-2022-34854/): Privilege escalation in Intel(R) SUR software (medium 6.7)
- [CVE-2022-34853](https://insights.sbomify.com/CVE-2022-34853/): WordPress Team plugin <= 1.2.6 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities (medium 4.1)
- [CVE-2022-34851](https://insights.sbomify.com/CVE-2022-34851/): BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851 (medium 4.3)
- [CVE-2022-34850](https://insights.sbomify.com/CVE-2022-34850/): Command injection in R1510 (critical 9.1)
- [CVE-2022-3485](https://insights.sbomify.com/CVE-2022-3485/): Weak Password Recovery in ifm moneo appliance (critical 9.8)
- [CVE-2022-34849](https://insights.sbomify.com/CVE-2022-34849/): Denial of service in Intel(R) Iris(R) Xe MAX drivers for Windows (medium 4.4)
- [CVE-2022-34848](https://insights.sbomify.com/CVE-2022-34848/): Privilege escalation in Intel(R) NUC Pro Software Suite (medium 6.7)
- [CVE-2022-34845](https://insights.sbomify.com/CVE-2022-34845/): Security feature bypass in R1510 (medium 6.7)
- [CVE-2022-34844](https://insights.sbomify.com/CVE-2022-34844/): BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844 (medium 5.9)
- [CVE-2022-34843](https://insights.sbomify.com/CVE-2022-34843/): Integer overflow in Intel(R) Trace Analyzer and Collector software (medium 4.8)
- [CVE-2022-34841](https://insights.sbomify.com/CVE-2022-34841/): Memory corruption in Intel(R) Media SDK software (medium 5.7)
- [CVE-2022-34840](https://insights.sbomify.com/CVE-2022-34840/): Hardcoded credentials in Buffalo network devices (medium 6.5)
- [CVE-2022-3484](https://insights.sbomify.com/CVE-2022-3484/): WPB Show Core - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-34839](https://insights.sbomify.com/CVE-2022-34839/): WordPress WP OAuth2 Server plugin <= 1.0.1 - Authentication Bypass vulnerability (medium 5.9)
- [CVE-2022-34838](https://insights.sbomify.com/CVE-2022-34838/): ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control (high 8.1)
- [CVE-2022-34837](https://insights.sbomify.com/CVE-2022-34837/): ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control (medium 6.2)
- [CVE-2022-34836](https://insights.sbomify.com/CVE-2022-34836/): ABB Ability TM Operations Data Management Zenon Zenon Log Server file access control (medium 5.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/290/