# Vulnerabilities published in 2022 - [CVE-2022-34632](https://insights.sbomify.com/CVE-2022-34632/): Weak cryptography in linuxfoundation:rocket chip generator (critical 9.1) - [CVE-2022-3463](https://insights.sbomify.com/CVE-2022-3463/): FluentForm < 4.3.13 - CSV Injection (critical 9.8) - [CVE-2022-34625](https://insights.sbomify.com/CVE-2022-34625/): Code injection in mealie project:mealie (high 7.2) - [CVE-2022-34624](https://insights.sbomify.com/CVE-2022-34624/): Auth bypass in mealie:mealie (medium 5.9) - [CVE-2022-34621](https://insights.sbomify.com/CVE-2022-34621/): Missing authorization in mealie:mealie (medium 6.5) - [CVE-2022-3462](https://insights.sbomify.com/CVE-2022-3462/): Highlight Focus <= 1.1 - Admin+ Stored Cross Site Scripting (medium 4.8) - [CVE-2022-34619](https://insights.sbomify.com/CVE-2022-34619/): Cross-site scripting in mealie project:mealie (medium 5.4) - [CVE-2022-34618](https://insights.sbomify.com/CVE-2022-34618/): Cross-site scripting in mealie project:mealie (medium 5.4) - [CVE-2022-34615](https://insights.sbomify.com/CVE-2022-34615/): Weak cryptography in mealie:mealie (critical 9.8) - [CVE-2022-34613](https://insights.sbomify.com/CVE-2022-34613/): File upload in mealie project:mealie (critical 9.8) - [CVE-2022-34612](https://insights.sbomify.com/CVE-2022-34612/): Integer overflow in rizin:rizin (medium 5.5) - [CVE-2022-34611](https://insights.sbomify.com/CVE-2022-34611/): Cross-site scripting in online fire reporting system project:online fire reporting system (medium 5.4) - [CVE-2022-34610](https://insights.sbomify.com/CVE-2022-34610/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-3461](https://insights.sbomify.com/CVE-2022-3461/): Buffer Overflow in PHOENIX CONTACT Automationworx Software Suite (high 7.8) - [CVE-2022-34609](https://insights.sbomify.com/CVE-2022-34609/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34608](https://insights.sbomify.com/CVE-2022-34608/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34607](https://insights.sbomify.com/CVE-2022-34607/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34606](https://insights.sbomify.com/CVE-2022-34606/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34605](https://insights.sbomify.com/CVE-2022-34605/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34604](https://insights.sbomify.com/CVE-2022-34604/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34603](https://insights.sbomify.com/CVE-2022-34603/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34602](https://insights.sbomify.com/CVE-2022-34602/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34601](https://insights.sbomify.com/CVE-2022-34601/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34600](https://insights.sbomify.com/CVE-2022-34600/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-3460](https://insights.sbomify.com/CVE-2022-3460/): Information disclosure in Octopus Server (high 7.5) - [CVE-2022-34599](https://insights.sbomify.com/CVE-2022-34599/): Memory corruption in h3c:magic r200 firmware (critical 9.8) - [CVE-2022-34598](https://insights.sbomify.com/CVE-2022-34598/): Misconfiguration in h3c:magic r100 firmware (critical 9.8) - [CVE-2022-34597](https://insights.sbomify.com/CVE-2022-34597/): Command injection in tenda:ax1806 firmware (critical 9.8) - [CVE-2022-34596](https://insights.sbomify.com/CVE-2022-34596/): Command injection in tenda:ax1803 firmware (critical 9.8) - [CVE-2022-34595](https://insights.sbomify.com/CVE-2022-34595/): Command injection in tenda:ax1803 firmware (critical 9.8) - [CVE-2022-34594](https://insights.sbomify.com/CVE-2022-34594/): Cross-site scripting in advanced school management system project:advanced school management system (medium 4.8) - [CVE-2022-34593](https://insights.sbomify.com/CVE-2022-34593/): Path traversal in dptech:dptech vpn (high 7.5) - [CVE-2022-34592](https://insights.sbomify.com/CVE-2022-34592/): Command injection in wavlink:wl-wn575a3 firmware (critical 9.8) - [CVE-2022-34590](https://insights.sbomify.com/CVE-2022-34590/): SQL injection in hospital management system project:hospital management system (high 7.2) - [CVE-2022-3459](https://insights.sbomify.com/CVE-2022-3459/): WooCommerce Multiple Free Gift <= 1.2.3 - Insufficient Server-Side Validation to Arbitrary Gift Adding (medium 5.3) - [CVE-2022-34588](https://insights.sbomify.com/CVE-2022-34588/): SQL injection in advanced school management system project:advanced school management system (high 8.8) - [CVE-2022-34586](https://insights.sbomify.com/CVE-2022-34586/): SQL injection in advanced school management system project:advanced school management system (high 8.8) - [CVE-2022-34580](https://insights.sbomify.com/CVE-2022-34580/): Cross-site scripting in advanced school management system project:advanced school management system (medium 4.8) - [CVE-2022-3458](https://insights.sbomify.com/CVE-2022-3458/): SourceCodester Human Resource Management System Image File employeeview.php unrestricted upload (medium 6.3) - [CVE-2022-34578](https://insights.sbomify.com/CVE-2022-34578/): File upload in opensourcepos:open source point of sale (high 7.2) - [CVE-2022-34577](https://insights.sbomify.com/CVE-2022-34577/): Command injection in wavlink:wn535g3 firmware (critical 9.8) - [CVE-2022-34576](https://insights.sbomify.com/CVE-2022-34576/): Command injection in wavlink:wn535g3 firmware (high 7.5) - [CVE-2022-34575](https://insights.sbomify.com/CVE-2022-34575/): Missing authorization in wavlink:wifi-repeater firmware (medium 5.7) - [CVE-2022-34574](https://insights.sbomify.com/CVE-2022-34574/): Information disclosure in wavlink:wifi-repeater firmware (medium 5.7) - [CVE-2022-34573](https://insights.sbomify.com/CVE-2022-34573/): Missing authorization in wavlink:wifi-repeater firmware (medium 6.3) - [CVE-2022-34572](https://insights.sbomify.com/CVE-2022-34572/): Information disclosure in wavlink:wifi-repeater firmware (medium 5.7) - [CVE-2022-34571](https://insights.sbomify.com/CVE-2022-34571/): Missing authorization in wavlink:wifi-repeater firmware (high 8.0) - [CVE-2022-34570](https://insights.sbomify.com/CVE-2022-34570/): Information disclosure in wavlink:wl-wn579x3 firmware (high 7.5) - [CVE-2022-3457](https://insights.sbomify.com/CVE-2022-3457/): Origin Validation Error in ikus060/rdiffweb (low 3.7) - [CVE-2022-34568](https://insights.sbomify.com/CVE-2022-34568/): Use after free in libsdl:simple directmedia layer (high 7.5) - [CVE-2022-34567](https://insights.sbomify.com/CVE-2022-34567/): Privilege escalation in uthscsa:multi-image analysis gui (high 8.8) - [CVE-2022-34562](https://insights.sbomify.com/CVE-2022-34562/): Cross-site scripting in phpfox:phpfox (medium 6.1) - [CVE-2022-34561](https://insights.sbomify.com/CVE-2022-34561/): Cross-site scripting in phpfox:phpfox (medium 4.3) - [CVE-2022-34560](https://insights.sbomify.com/CVE-2022-34560/): Cross-site scripting in phpfox:phpfox (high 7.1) - [CVE-2022-3456](https://insights.sbomify.com/CVE-2022-3456/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (medium 5.6) - [CVE-2022-34558](https://insights.sbomify.com/CVE-2022-34558/): WMAgent arbitrary code execution via a crafted dbs-client package (critical 9.8) - [CVE-2022-34557](https://insights.sbomify.com/CVE-2022-34557/): SQL injection in barangay management system project:barangay management system (high 8.8) - [CVE-2022-34556](https://insights.sbomify.com/CVE-2022-34556/): Null dereference in picoc project:picoc (medium 5.5) - [CVE-2022-34555](https://insights.sbomify.com/CVE-2022-34555/): Other in tp-link:tl-r473g firmware (critical 9.8) - [CVE-2022-34551](https://insights.sbomify.com/CVE-2022-34551/): Path traversal in sims project:sims (medium 6.5) - [CVE-2022-34550](https://insights.sbomify.com/CVE-2022-34550/): Cross-site scripting in student information management system project:student information management system (medium 5.4) - [CVE-2022-34549](https://insights.sbomify.com/CVE-2022-34549/): File upload in sims project:sims (high 8.8) - [CVE-2022-34540](https://insights.sbomify.com/CVE-2022-34540/): Command injection in dw:megapix firmware (high 8.8) - [CVE-2022-34539](https://insights.sbomify.com/CVE-2022-34539/): Command injection in dw:megapix firmware (high 8.8) - [CVE-2022-34538](https://insights.sbomify.com/CVE-2022-34538/): Command injection in dw:megapix firmware (high 8.8) - [CVE-2022-34537](https://insights.sbomify.com/CVE-2022-34537/): Cross-site scripting in dw:megapix firmware (medium 5.4) - [CVE-2022-34536](https://insights.sbomify.com/CVE-2022-34536/): Auth bypass in dw:megapix firmware (high 7.5) - [CVE-2022-34535](https://insights.sbomify.com/CVE-2022-34535/): Information disclosure in dw:megapix firmware (high 7.5) - [CVE-2022-34534](https://insights.sbomify.com/CVE-2022-34534/): Information disclosure in dw:spectrum server firmware (high 7.5) - [CVE-2022-34531](https://insights.sbomify.com/CVE-2022-34531/): Code injection in dedecms:dedecms (critical 9.8) - [CVE-2022-34530](https://insights.sbomify.com/CVE-2022-34530/): Information disclosure in backdropcms:backdrop cms (medium 5.3) - [CVE-2022-3453](https://insights.sbomify.com/CVE-2022-3453/): SourceCodester Book Store Management System transcation.php cross site scripting (low 3.5) - [CVE-2022-34529](https://insights.sbomify.com/CVE-2022-34529/): WASM3 segmentation fault (medium 5.5) - [CVE-2022-34528](https://insights.sbomify.com/CVE-2022-34528/): Memory corruption in dlink:dsl-3782 firmware (high 8.8) - [CVE-2022-34527](https://insights.sbomify.com/CVE-2022-34527/): Command injection in dlink:dsl-3782 firmware (high 8.8) - [CVE-2022-34526](https://insights.sbomify.com/CVE-2022-34526/): Memory corruption in debian:debian linux (medium 6.5) - [CVE-2022-34520](https://insights.sbomify.com/CVE-2022-34520/): Null dereference in radare:radare2 (medium 5.5) - [CVE-2022-3452](https://insights.sbomify.com/CVE-2022-3452/): SourceCodester Book Store Management System category.php cross site scripting (low 3.5) - [CVE-2022-3451](https://insights.sbomify.com/CVE-2022-3451/): Product Stock Manager < 1.0.5 - Subscriber+ Unauthorised AJAX Calls (medium 4.3) - [CVE-2022-34509](https://insights.sbomify.com/CVE-2022-34509/): Supply chain in wikifaces project:wikifaces (critical 9.8) - [CVE-2022-34503](https://insights.sbomify.com/CVE-2022-34503/): Memory corruption in qpdf project:qpdf (medium 6.5) - [CVE-2022-34502](https://insights.sbomify.com/CVE-2022-34502/): Memory corruption in radare:radare2 (medium 5.5) - [CVE-2022-34501](https://insights.sbomify.com/CVE-2022-34501/): Supply chain in pypi:pypi (critical 9.8) - [CVE-2022-34500](https://insights.sbomify.com/CVE-2022-34500/): Supply chain in pypi:pypi (critical 9.8) - [CVE-2022-3450](https://insights.sbomify.com/CVE-2022-3450/): Use after free in Chrome (high 8.8) - [CVE-2022-34496](https://insights.sbomify.com/CVE-2022-34496/): File upload in hiby:hiby r3 pro firmware (critical 9.8) - [CVE-2022-34495](https://insights.sbomify.com/CVE-2022-34495/): Memory corruption in linux:linux kernel (medium 5.5) - [CVE-2022-34494](https://insights.sbomify.com/CVE-2022-34494/): Memory corruption in linux:linux kernel (medium 5.5) - [CVE-2022-3449](https://insights.sbomify.com/CVE-2022-3449/): Use after free in Chrome (high 8.8) - [CVE-2022-34488](https://insights.sbomify.com/CVE-2022-34488/): Memory corruption in Intel(R) NUC Laptop Kits (high 7.8) - [CVE-2022-34487](https://insights.sbomify.com/CVE-2022-34487/): WordPress Shortcode Addons plugin <= 3.0.2 - Unauthenticated Arbitrary Option Update vulnerability (critical 9.8) - [CVE-2022-34486](https://insights.sbomify.com/CVE-2022-34486/): Path traversal in PukiWiki (high 7.2) - [CVE-2022-34485](https://insights.sbomify.com/CVE-2022-34485/): Memory corruption in Firefox (critical 9.8) - [CVE-2022-34484](https://insights.sbomify.com/CVE-2022-34484/): Use after free in Firefox (high 8.8) - [CVE-2022-34483](https://insights.sbomify.com/CVE-2022-34483/): File upload in Firefox (high 8.8) - [CVE-2022-34482](https://insights.sbomify.com/CVE-2022-34482/): File upload in Firefox (high 8.8) - [CVE-2022-34481](https://insights.sbomify.com/CVE-2022-34481/): Integer overflow in Firefox (high 8.8) - [CVE-2022-34480](https://insights.sbomify.com/CVE-2022-34480/): Memory corruption in Firefox (high 8.8) - [CVE-2022-3448](https://insights.sbomify.com/CVE-2022-3448/): Use after free in Chrome (high 8.8) - [CVE-2022-34479](https://insights.sbomify.com/CVE-2022-34479/): Other in Firefox (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/293/