# Vulnerabilities published in 2022


- [CVE-2022-34737](https://insights.sbomify.com/CVE-2022-34737/): Misconfiguration in EMUI (critical 9.1)
- [CVE-2022-34736](https://insights.sbomify.com/CVE-2022-34736/): Null dereference in EMUI (high 7.5)
- [CVE-2022-34735](https://insights.sbomify.com/CVE-2022-34735/): Null dereference in EMUI (high 7.5)
- [CVE-2022-34734](https://insights.sbomify.com/CVE-2022-34734/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34733](https://insights.sbomify.com/CVE-2022-34733/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34732](https://insights.sbomify.com/CVE-2022-34732/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34731](https://insights.sbomify.com/CVE-2022-34731/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34730](https://insights.sbomify.com/CVE-2022-34730/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-3473](https://insights.sbomify.com/CVE-2022-3473/): SourceCodester Human Resource Management System getstatecity.php sql injection (medium 6.3)
- [CVE-2022-34729](https://insights.sbomify.com/CVE-2022-34729/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34728](https://insights.sbomify.com/CVE-2022-34728/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34727](https://insights.sbomify.com/CVE-2022-34727/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34726](https://insights.sbomify.com/CVE-2022-34726/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34725](https://insights.sbomify.com/CVE-2022-34725/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-34724](https://insights.sbomify.com/CVE-2022-34724/): Windows DNS Server Denial of Service Vulnerability (high 7.5)
- [CVE-2022-34723](https://insights.sbomify.com/CVE-2022-34723/): Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34722](https://insights.sbomify.com/CVE-2022-34722/): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-34721](https://insights.sbomify.com/CVE-2022-34721/): Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-34720](https://insights.sbomify.com/CVE-2022-34720/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2022-3472](https://insights.sbomify.com/CVE-2022-3472/): SourceCodester Human Resource Management System city.php sql injection (medium 6.3)
- [CVE-2022-34719](https://insights.sbomify.com/CVE-2022-34719/): Windows Distributed File System (DFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34718](https://insights.sbomify.com/CVE-2022-34718/): Windows TCP/IP Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-34717](https://insights.sbomify.com/CVE-2022-34717/): Microsoft Office Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-34716](https://insights.sbomify.com/CVE-2022-34716/): .NET Spoofing Vulnerability (medium 5.9)
- [CVE-2022-34715](https://insights.sbomify.com/CVE-2022-34715/): Windows Network File System Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-34714](https://insights.sbomify.com/CVE-2022-34714/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-34713](https://insights.sbomify.com/CVE-2022-34713/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-34712](https://insights.sbomify.com/CVE-2022-34712/): Windows Defender Credential Guard Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34711](https://insights.sbomify.com/CVE-2022-34711/): Windows Defender Credential Guard Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34710](https://insights.sbomify.com/CVE-2022-34710/): Windows Defender Credential Guard Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-3471](https://insights.sbomify.com/CVE-2022-3471/): SourceCodester Human Resource Management System city.php sql injection (medium 6.3)
- [CVE-2022-34709](https://insights.sbomify.com/CVE-2022-34709/): Windows Defender Credential Guard Security Feature Bypass Vulnerability (medium 6.0)
- [CVE-2022-34708](https://insights.sbomify.com/CVE-2022-34708/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34707](https://insights.sbomify.com/CVE-2022-34707/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34706](https://insights.sbomify.com/CVE-2022-34706/): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34705](https://insights.sbomify.com/CVE-2022-34705/): Windows Defender Credential Guard Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34704](https://insights.sbomify.com/CVE-2022-34704/): Windows Defender Credential Guard Information Disclosure Vulnerability (medium 4.7)
- [CVE-2022-34703](https://insights.sbomify.com/CVE-2022-34703/): Windows Partition Management Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34702](https://insights.sbomify.com/CVE-2022-34702/): Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-34701](https://insights.sbomify.com/CVE-2022-34701/): Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability (high 7.5)
- [CVE-2022-34700](https://insights.sbomify.com/CVE-2022-34700/): Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-3470](https://insights.sbomify.com/CVE-2022-3470/): SourceCodester Human Resource Management System getstatecity.php sql injection (medium 6.3)
- [CVE-2022-34699](https://insights.sbomify.com/CVE-2022-34699/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-34696](https://insights.sbomify.com/CVE-2022-34696/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34692](https://insights.sbomify.com/CVE-2022-34692/): Microsoft Exchange Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2022-34691](https://insights.sbomify.com/CVE-2022-34691/): Active Directory Domain Services Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-34690](https://insights.sbomify.com/CVE-2022-34690/): Windows Fax Service Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2022-3469](https://insights.sbomify.com/CVE-2022-3469/): WP Attachments < 5.0.5 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-34689](https://insights.sbomify.com/CVE-2022-34689/): Windows CryptoAPI Spoofing Vulnerability (high 7.5)
- [CVE-2022-34687](https://insights.sbomify.com/CVE-2022-34687/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34686](https://insights.sbomify.com/CVE-2022-34686/): Azure RTOS GUIX Studio Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34685](https://insights.sbomify.com/CVE-2022-34685/): Azure RTOS GUIX Studio Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34684](https://insights.sbomify.com/CVE-2022-34684/): Memory corruption in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 5.3)
- [CVE-2022-34683](https://insights.sbomify.com/CVE-2022-34683/): Null dereference in vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) (medium 5.5)
- [CVE-2022-34682](https://insights.sbomify.com/CVE-2022-34682/): Null dereference in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager),NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 5.5)
- [CVE-2022-34681](https://insights.sbomify.com/CVE-2022-34681/): Denial of service in vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) (medium 5.5)
- [CVE-2022-34680](https://insights.sbomify.com/CVE-2022-34680/): Integer overflow in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 5.5)
- [CVE-2022-34679](https://insights.sbomify.com/CVE-2022-34679/): Null dereference in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 5.5)
- [CVE-2022-34678](https://insights.sbomify.com/CVE-2022-34678/): Null dereference in vGPU software (guest driver) - Windows, Linux and vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 6.5)
- [CVE-2022-34677](https://insights.sbomify.com/CVE-2022-34677/): Integer overflow in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 5.5)
- [CVE-2022-34676](https://insights.sbomify.com/CVE-2022-34676/): Memory corruption in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (high 7.1)
- [CVE-2022-34675](https://insights.sbomify.com/CVE-2022-34675/): Null dereference in vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 5.5)
- [CVE-2022-34674](https://insights.sbomify.com/CVE-2022-34674/): Information disclosure in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 6.8)
- [CVE-2022-34673](https://insights.sbomify.com/CVE-2022-34673/): Memory corruption in NVIDIA GPU Display Driver for Linux (medium 4.4)
- [CVE-2022-34672](https://insights.sbomify.com/CVE-2022-34672/): Privilege escalation in vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) (high 7.8)
- [CVE-2022-34671](https://insights.sbomify.com/CVE-2022-34671/): Memory corruption in NVIDIA GPU Display Driver for Windows (high 8.5)
- [CVE-2022-34670](https://insights.sbomify.com/CVE-2022-34670/): Integer overflow in vGPU software (guest driver) - Linux, vGPU software (Virtual GPU Manager), NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (high 7.8)
- [CVE-2022-3467](https://insights.sbomify.com/CVE-2022-3467/): Jiusi OA hntdCustomDesktopActionContent sql injection (medium 5.5)
- [CVE-2022-34669](https://insights.sbomify.com/CVE-2022-34669/): Other in vGPU software (guest driver) - Windows, NVIDIA Cloud Gaming (guest driver) (high 8.8)
- [CVE-2022-34668](https://insights.sbomify.com/CVE-2022-34668/): NVFLARE unsafe deserialization due to Pickle (critical 9.8)
- [CVE-2022-34667](https://insights.sbomify.com/CVE-2022-34667/): Memory corruption in NVIDIA CUDA Toolkit (medium 4.4)
- [CVE-2022-34666](https://insights.sbomify.com/CVE-2022-34666/): Null dereference in NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 6.5)
- [CVE-2022-34665](https://insights.sbomify.com/CVE-2022-34665/): Null dereference in NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (medium 6.5)
- [CVE-2022-34663](https://insights.sbomify.com/CVE-2022-34663/): Code injection in RUGGEDCOM M2100 (high 8.0)
- [CVE-2022-34662](https://insights.sbomify.com/CVE-2022-34662/): Apache DolphinScheduler prior to 3.0.0 allows path traversal (medium 6.5)
- [CVE-2022-34661](https://insights.sbomify.com/CVE-2022-34661/): Denial of service in Teamcenter V12.4 (medium 6.5)
- [CVE-2022-34660](https://insights.sbomify.com/CVE-2022-34660/): Command injection in Teamcenter V12.4 (medium 6.8)
- [CVE-2022-3466](https://insights.sbomify.com/CVE-2022-3466/): Cri-o: security regression of cve-2022-27652 (medium 4.8)
- [CVE-2022-34659](https://insights.sbomify.com/CVE-2022-34659/): Information disclosure in Simcenter STAR-CCM+ (medium 6.9)
- [CVE-2022-34658](https://insights.sbomify.com/CVE-2022-34658/): Cross-site scripting in Download Manager (WordPress plugin) (medium 5.4)
- [CVE-2022-34657](https://insights.sbomify.com/CVE-2022-34657/): Information disclosure in Intel(R) PCSD BIOS (medium 6.0)
- [CVE-2022-34656](https://insights.sbomify.com/CVE-2022-34656/): Cross-site scripting in Poll, Survey, Questionnaire and Voting system (WordPress plugin) (medium 4.8)
- [CVE-2022-34655](https://insights.sbomify.com/CVE-2022-34655/): TMM vulnerability CVE-2022-34655 (high 7.5)
- [CVE-2022-34654](https://insights.sbomify.com/CVE-2022-34654/): WordPress Manage Notification E-mails Plugin <= 1.8.2 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2022-34652](https://insights.sbomify.com/CVE-2022-34652/): SQL injection in AVideo (high 8.3)
- [CVE-2022-34651](https://insights.sbomify.com/CVE-2022-34651/): BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651 (high 7.5)
- [CVE-2022-34650](https://insights.sbomify.com/CVE-2022-34650/): WordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities (medium 4.1)
- [CVE-2022-3465](https://insights.sbomify.com/CVE-2022-3465/): Mediabridge Medialink index.asp improper authentication (high 7.3)
- [CVE-2022-34648](https://insights.sbomify.com/CVE-2022-34648/): Cross-site scripting in Uploading SVG, WEBP and ICO files (WordPress plugin) (medium 4.8)
- [CVE-2022-34643](https://insights.sbomify.com/CVE-2022-34643/): Other in riscv:spike risc-v isa simulator (medium 5.5)
- [CVE-2022-34642](https://insights.sbomify.com/CVE-2022-34642/): Denial of service in riscv:spike risc-v isa simulator (medium 5.5)
- [CVE-2022-34641](https://insights.sbomify.com/CVE-2022-34641/): Other in boom-core:riscvc-boom (medium 5.5)
- [CVE-2022-34640](https://insights.sbomify.com/CVE-2022-34640/): Other in openhwgroup:cva6 (medium 5.5)
- [CVE-2022-3464](https://insights.sbomify.com/CVE-2022-3464/): puppyCMS settings.php cross site scripting (medium 4.3)
- [CVE-2022-34639](https://insights.sbomify.com/CVE-2022-34639/): Other in openhwgroup:cva6 (medium 5.5)
- [CVE-2022-34637](https://insights.sbomify.com/CVE-2022-34637/): Other in openhwgroup:cva6 (medium 5.5)
- [CVE-2022-34636](https://insights.sbomify.com/CVE-2022-34636/): Other in openhwgroup:cva6 (medium 5.5)
- [CVE-2022-34635](https://insights.sbomify.com/CVE-2022-34635/): Other in openhwgroup:cva6 (critical 9.8)
- [CVE-2022-34634](https://insights.sbomify.com/CVE-2022-34634/): Other in openhwgroup:cva6 (medium 5.5)
- [CVE-2022-34633](https://insights.sbomify.com/CVE-2022-34633/): Other in openhwgroup:cva6 (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/292/