# Vulnerabilities published in 2022


- [CVE-2022-34478](https://insights.sbomify.com/CVE-2022-34478/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2022-34477](https://insights.sbomify.com/CVE-2022-34477/): Information disclosure in Firefox (high 7.5)
- [CVE-2022-34476](https://insights.sbomify.com/CVE-2022-34476/): Security feature bypass in Firefox (critical 9.8)
- [CVE-2022-34475](https://insights.sbomify.com/CVE-2022-34475/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2022-34474](https://insights.sbomify.com/CVE-2022-34474/): Security feature bypass in Firefox (medium 6.1)
- [CVE-2022-34473](https://insights.sbomify.com/CVE-2022-34473/): Cross-site scripting in Firefox (medium 6.1)
- [CVE-2022-34472](https://insights.sbomify.com/CVE-2022-34472/): Other in Firefox (medium 4.3)
- [CVE-2022-34471](https://insights.sbomify.com/CVE-2022-34471/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2022-34470](https://insights.sbomify.com/CVE-2022-34470/): Use after free in Firefox (critical 9.8)
- [CVE-2022-3447](https://insights.sbomify.com/CVE-2022-3447/): Other in Chrome (medium 4.3)
- [CVE-2022-34469](https://insights.sbomify.com/CVE-2022-34469/): Security feature bypass in Firefox (high 8.8)
- [CVE-2022-34468](https://insights.sbomify.com/CVE-2022-34468/): Security feature bypass in Firefox (high 8.8)
- [CVE-2022-34467](https://insights.sbomify.com/CVE-2022-34467/): XML external entity in Mendix Excel Importer Module (Mendix 8 compatible) (medium 6.5)
- [CVE-2022-34466](https://insights.sbomify.com/CVE-2022-34466/): Code injection in Mendix Applications using Mendix 9 (medium 6.5)
- [CVE-2022-34465](https://insights.sbomify.com/CVE-2022-34465/): Memory corruption in Parasolid V33.1 (high 7.8)
- [CVE-2022-34464](https://insights.sbomify.com/CVE-2022-34464/): Misconfiguration in SICAM GridEdge (Classic) (medium 5.3)
- [CVE-2022-34462](https://insights.sbomify.com/CVE-2022-34462/): Hardcoded credentials in Secure Connect Gateway (SCG) Policy Manager (high 8.4)
- [CVE-2022-34460](https://insights.sbomify.com/CVE-2022-34460/): Other in BIOS (high 7.5)
- [CVE-2022-3446](https://insights.sbomify.com/CVE-2022-3446/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-34459](https://insights.sbomify.com/CVE-2022-34459/): Security feature bypass in Dell Command Update (DCU) (high 7.8)
- [CVE-2022-34458](https://insights.sbomify.com/CVE-2022-34458/): Information disclosure in Dell Command Update (DCU) (medium 6.6)
- [CVE-2022-34457](https://insights.sbomify.com/CVE-2022-34457/): Misconfiguration in Dell Command Configure (DCC) (high 7.3)
- [CVE-2022-34456](https://insights.sbomify.com/CVE-2022-34456/): Code injection in Metro node (high 8.8)
- [CVE-2022-34454](https://insights.sbomify.com/CVE-2022-34454/): Memory corruption in PowerScale OneFS (medium 6.7)
- [CVE-2022-34453](https://insights.sbomify.com/CVE-2022-34453/): Missing authorization in XtremIO X2 (high 7.6)
- [CVE-2022-34452](https://insights.sbomify.com/CVE-2022-34452/): Information disclosure in PowerPath Management Appliance (low 2.7)
- [CVE-2022-34451](https://insights.sbomify.com/CVE-2022-34451/): Cross-site scripting in PowerPath Management Appliance (medium 4.8)
- [CVE-2022-34450](https://insights.sbomify.com/CVE-2022-34450/): Privilege escalation in PowerPath Management Appliance (medium 6.7)
- [CVE-2022-3445](https://insights.sbomify.com/CVE-2022-3445/): Use after free in Chrome (high 8.8)
- [CVE-2022-34449](https://insights.sbomify.com/CVE-2022-34449/): Hardcoded credentials in PowerPath Management Appliance (medium 6.0)
- [CVE-2022-34448](https://insights.sbomify.com/CVE-2022-34448/): Cross-site request forgery in PowerPath Management Appliance (high 8.8)
- [CVE-2022-34447](https://insights.sbomify.com/CVE-2022-34447/): Command injection in PowerPath Management Appliance (high 7.2)
- [CVE-2022-34446](https://insights.sbomify.com/CVE-2022-34446/): Missing authorization in PowerPath Management Appliance (high 8.8)
- [CVE-2022-34445](https://insights.sbomify.com/CVE-2022-34445/): Weak cryptography in PowerScale OneFS (medium 6.0)
- [CVE-2022-34444](https://insights.sbomify.com/CVE-2022-34444/): Weak cryptography in PowerScale OneFS (medium 5.9)
- [CVE-2022-34443](https://insights.sbomify.com/CVE-2022-34443/): Privilege escalation in Rugged Control Center (RCC) (high 7.8)
- [CVE-2022-34442](https://insights.sbomify.com/CVE-2022-34442/): Hardcoded credentials in Secure Connect Gateway (SCG) Policy Manager (high 8.0)
- [CVE-2022-34441](https://insights.sbomify.com/CVE-2022-34441/): Hardcoded credentials in Secure Connect Gateway (SCG) Policy Manager (high 8.0)
- [CVE-2022-34440](https://insights.sbomify.com/CVE-2022-34440/): Hardcoded credentials in Secure Connect Gateway (SCG) Policy Manager (high 8.4)
- [CVE-2022-3444](https://insights.sbomify.com/CVE-2022-3444/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-34439](https://insights.sbomify.com/CVE-2022-34439/): Denial of service in PowerScale OneFS (medium 5.3)
- [CVE-2022-34438](https://insights.sbomify.com/CVE-2022-34438/): Privilege escalation in PowerScale OneFS (medium 6.7)
- [CVE-2022-34437](https://insights.sbomify.com/CVE-2022-34437/): Command injection in PowerScale OneFS (medium 6.7)
- [CVE-2022-34436](https://insights.sbomify.com/CVE-2022-34436/): Security feature bypass in Integrated Dell Remote Access Controller 8 (low 2.7)
- [CVE-2022-34435](https://insights.sbomify.com/CVE-2022-34435/): Security feature bypass in Integrated Dell Remote Access Controller 9 (low 2.7)
- [CVE-2022-34434](https://insights.sbomify.com/CVE-2022-34434/): Missing authorization in Cloud Mobility for Dell Storage (medium 6.7)
- [CVE-2022-34432](https://insights.sbomify.com/CVE-2022-34432/): Command injection in Dell Hybrid Client (DHC) (high 7.3)
- [CVE-2022-34431](https://insights.sbomify.com/CVE-2022-34431/): Other in Dell Hybrid Client (DHC) (medium 6.5)
- [CVE-2022-34430](https://insights.sbomify.com/CVE-2022-34430/): Path traversal in Dell Hybrid Client (DHC) (high 7.1)
- [CVE-2022-3443](https://insights.sbomify.com/CVE-2022-3443/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-34429](https://insights.sbomify.com/CVE-2022-34429/): Path traversal in Dell Hybrid Client (DHC) (medium 6.5)
- [CVE-2022-34428](https://insights.sbomify.com/CVE-2022-34428/): Denial of service in Dell Hybrid Client (DHC) (medium 5.0)
- [CVE-2022-34427](https://insights.sbomify.com/CVE-2022-34427/): Command injection in Dell Container Storage Modules (high 8.8)
- [CVE-2022-34426](https://insights.sbomify.com/CVE-2022-34426/): Path traversal in Dell Container Storage Modules (high 8.8)
- [CVE-2022-34425](https://insights.sbomify.com/CVE-2022-34425/): Hardcoded credentials in Enterprise SONiC OS (high 7.5)
- [CVE-2022-34424](https://insights.sbomify.com/CVE-2022-34424/): Memory corruption in Dell Networking OS10 (high 7.5)
- [CVE-2022-34423](https://insights.sbomify.com/CVE-2022-34423/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34422](https://insights.sbomify.com/CVE-2022-34422/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34421](https://insights.sbomify.com/CVE-2022-34421/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34420](https://insights.sbomify.com/CVE-2022-34420/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-3442](https://insights.sbomify.com/CVE-2022-3442/): Crealogix EBICS ebics.aspx cross site scripting (low 3.5)
- [CVE-2022-34419](https://insights.sbomify.com/CVE-2022-34419/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34418](https://insights.sbomify.com/CVE-2022-34418/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34417](https://insights.sbomify.com/CVE-2022-34417/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34416](https://insights.sbomify.com/CVE-2022-34416/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34415](https://insights.sbomify.com/CVE-2022-34415/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34414](https://insights.sbomify.com/CVE-2022-34414/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34413](https://insights.sbomify.com/CVE-2022-34413/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34412](https://insights.sbomify.com/CVE-2022-34412/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34411](https://insights.sbomify.com/CVE-2022-34411/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34410](https://insights.sbomify.com/CVE-2022-34410/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-3441](https://insights.sbomify.com/CVE-2022-3441/): Rock Convert < 2.11.0 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-34409](https://insights.sbomify.com/CVE-2022-34409/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34408](https://insights.sbomify.com/CVE-2022-34408/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34407](https://insights.sbomify.com/CVE-2022-34407/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34406](https://insights.sbomify.com/CVE-2022-34406/): Memory corruption in PowerEdge Platform (high 7.5)
- [CVE-2022-34405](https://insights.sbomify.com/CVE-2022-34405/): Privilege escalation in CPG Drivers (high 7.3)
- [CVE-2022-34404](https://insights.sbomify.com/CVE-2022-34404/): Security feature bypass in System Update (medium 6.5)
- [CVE-2022-34403](https://insights.sbomify.com/CVE-2022-34403/): Memory corruption in CPG BIOS (high 7.5)
- [CVE-2022-34402](https://insights.sbomify.com/CVE-2022-34402/): Denial of service in Wyse Proprietary OS (Modern ThinOS) (medium 6.8)
- [CVE-2022-34401](https://insights.sbomify.com/CVE-2022-34401/): Memory corruption in CPG BIOS (high 7.5)
- [CVE-2022-34400](https://insights.sbomify.com/CVE-2022-34400/): Memory corruption in CPG BIOS (high 7.1)
- [CVE-2022-3440](https://insights.sbomify.com/CVE-2022-3440/): Rock Convert < 2.6.0 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-34399](https://insights.sbomify.com/CVE-2022-34399/): Memory corruption in CPG BIOS (medium 5.1)
- [CVE-2022-34398](https://insights.sbomify.com/CVE-2022-34398/): Race condition in CPG BIOS (high 7.5)
- [CVE-2022-34397](https://insights.sbomify.com/CVE-2022-34397/): Missing authorization in Unisphere for PowerMax (medium 6.9)
- [CVE-2022-34396](https://insights.sbomify.com/CVE-2022-34396/): Privilege escalation in OpenManage Server Administrator (OMSA) (high 7.0)
- [CVE-2022-34394](https://insights.sbomify.com/CVE-2022-34394/): Security feature bypass in Dell Networking OS10 (low 3.7)
- [CVE-2022-34393](https://insights.sbomify.com/CVE-2022-34393/): Other in BIOS (high 7.5)
- [CVE-2022-34392](https://insights.sbomify.com/CVE-2022-34392/): Auth bypass in SupportAssist (medium 5.5)
- [CVE-2022-34391](https://insights.sbomify.com/CVE-2022-34391/): Memory corruption in CPG BIOS (high 7.5)
- [CVE-2022-34390](https://insights.sbomify.com/CVE-2022-34390/): Memory corruption in CPG BIOS (high 7.5)
- [CVE-2022-3439](https://insights.sbomify.com/CVE-2022-3439/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (medium 4.5)
- [CVE-2022-34389](https://insights.sbomify.com/CVE-2022-34389/): Security feature bypass in SupportAssist (low 3.7)
- [CVE-2022-34388](https://insights.sbomify.com/CVE-2022-34388/): Information disclosure in SupportAssist (high 7.1)
- [CVE-2022-34387](https://insights.sbomify.com/CVE-2022-34387/): Privilege escalation in SupportAssist (medium 6.4)
- [CVE-2022-34386](https://insights.sbomify.com/CVE-2022-34386/): Hardcoded credentials in SupportAssist Client Consumer (medium 5.5)
- [CVE-2022-34385](https://insights.sbomify.com/CVE-2022-34385/): Weak cryptography in SupportAssist Client Consumer (medium 5.5)
- [CVE-2022-34384](https://insights.sbomify.com/CVE-2022-34384/): Privilege escalation in SupportAssist Client Consumer (high 7.8)
- [CVE-2022-34383](https://insights.sbomify.com/CVE-2022-34383/): Command injection in Edge Gateway 5200 (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/294/
