# Vulnerabilities published in 2022 - [CVE-2022-34382](https://insights.sbomify.com/CVE-2022-34382/): Privilege escalation in Dell Command Update (DCU) (high 7.8) - [CVE-2022-34381](https://insights.sbomify.com/CVE-2022-34381/): Supply chain in Dell BSAFE Crypto-J (critical 9.1) - [CVE-2022-34380](https://insights.sbomify.com/CVE-2022-34380/): Auth bypass in CloudLink (critical 9.3) - [CVE-2022-3438](https://insights.sbomify.com/CVE-2022-3438/): Open Redirect in ikus060/rdiffweb (medium 5.7) - [CVE-2022-34379](https://insights.sbomify.com/CVE-2022-34379/): Auth bypass in CloudLink (critical 9.4) - [CVE-2022-34378](https://insights.sbomify.com/CVE-2022-34378/): Path traversal in PowerScale OneFS (medium 5.5) - [CVE-2022-34377](https://insights.sbomify.com/CVE-2022-34377/): Memory corruption in PowerEdge Platform (low 1.9) - [CVE-2022-34376](https://insights.sbomify.com/CVE-2022-34376/): Memory corruption in PowerEdge Platform (low 3.9) - [CVE-2022-34375](https://insights.sbomify.com/CVE-2022-34375/): Path traversal in Dell Container Storage Modules (high 8.8) - [CVE-2022-34374](https://insights.sbomify.com/CVE-2022-34374/): Command injection in Dell Container Storage Modules (high 8.8) - [CVE-2022-34373](https://insights.sbomify.com/CVE-2022-34373/): Path traversal in CPG SW (high 7.3) - [CVE-2022-34372](https://insights.sbomify.com/CVE-2022-34372/): Auth bypass in Cyber Recovery (critical 9.8) - [CVE-2022-34371](https://insights.sbomify.com/CVE-2022-34371/): Information disclosure in PowerScale OneFS (high 8.1) - [CVE-2022-3437](https://insights.sbomify.com/CVE-2022-3437/): Memory corruption in samba (medium 4.3) - [CVE-2022-34369](https://insights.sbomify.com/CVE-2022-34369/): Information disclosure in PowerScale OneFS (high 8.1) - [CVE-2022-34368](https://insights.sbomify.com/CVE-2022-34368/): Missing authorization in NetWorker Management Console (medium 6.1) - [CVE-2022-34367](https://insights.sbomify.com/CVE-2022-34367/): Cross-site request forgery in Data Protection Central (medium 5.4) - [CVE-2022-34366](https://insights.sbomify.com/CVE-2022-34366/): Misconfiguration in SupportAssist Client Consumer (medium 6.5) - [CVE-2022-34365](https://insights.sbomify.com/CVE-2022-34365/): Path traversal in Wyse Management Suite (medium 6.5) - [CVE-2022-34364](https://insights.sbomify.com/CVE-2022-34364/): Information disclosure in BSAFE SSL-J (medium 4.4) - [CVE-2022-34363](https://insights.sbomify.com/CVE-2022-34363/): Missing authorization in Unisphere 360 (medium 6.5) - [CVE-2022-34362](https://insights.sbomify.com/CVE-2022-34362/): IBM Sterling Secure Proxy HOST header injection (medium 4.6) - [CVE-2022-34361](https://insights.sbomify.com/CVE-2022-34361/): IBM Sterling Secure Proxy information disclosure (medium 5.9) - [CVE-2022-3436](https://insights.sbomify.com/CVE-2022-3436/): SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload (medium 6.3) - [CVE-2022-34358](https://insights.sbomify.com/CVE-2022-34358/): Cross-site scripting in i (medium 5.4) - [CVE-2022-34357](https://insights.sbomify.com/CVE-2022-34357/): IBM Cognos Analytics Mobile Server denial of service (medium 6.5) - [CVE-2022-34356](https://insights.sbomify.com/CVE-2022-34356/): Privilege escalation in AIX (high 8.4) - [CVE-2022-34355](https://insights.sbomify.com/CVE-2022-34355/): IBM Jazz Foundation information disclosure (medium 4.0) - [CVE-2022-34354](https://insights.sbomify.com/CVE-2022-34354/): IBM Sterling Partner Engagement Manager information disclosure (medium 4.0) - [CVE-2022-34352](https://insights.sbomify.com/CVE-2022-34352/): IBM QRadar information disclosure (medium 6.5) - [CVE-2022-34351](https://insights.sbomify.com/CVE-2022-34351/): IBM QRadar SIEM information disclosure (medium 5.9) - [CVE-2022-34350](https://insights.sbomify.com/CVE-2022-34350/): IBM API Connect security bypass (medium 5.3) - [CVE-2022-3435](https://insights.sbomify.com/CVE-2022-3435/): Linux Kernel IPv4 fib_semantics.c fib_nh_match out-of-bounds (medium 4.3) - [CVE-2022-34348](https://insights.sbomify.com/CVE-2022-34348/): XML external entity in Partner Engagement Manager (high 7.1) - [CVE-2022-34347](https://insights.sbomify.com/CVE-2022-34347/): WordPress Download Manager plugin <= 3.2.48 - Cross-Site Request Forgery (CSRF) vulnerability (medium 4.2) - [CVE-2022-34346](https://insights.sbomify.com/CVE-2022-34346/): Memory corruption in Intel(R) Media SDK software (medium 4.8) - [CVE-2022-34345](https://insights.sbomify.com/CVE-2022-34345/): Other in Intel(R) NUC Laptop Kits (medium 6.2) - [CVE-2022-34344](https://insights.sbomify.com/CVE-2022-34344/): WordPress Wholesale Suite Plugin <= 2.1.5 is vulnerable to Broken Access Control (medium 5.4) - [CVE-2022-3434](https://insights.sbomify.com/CVE-2022-3434/): SourceCodester Web-Based Student Clearance System add-student.php prepare cross site scripting (low 3.5) - [CVE-2022-34339](https://insights.sbomify.com/CVE-2022-34339/): Information disclosure in IBM Cognos Analytics (medium 6.5) - [CVE-2022-34338](https://insights.sbomify.com/CVE-2022-34338/): Information disclosure in Robotic Process Automation (medium 5.8) - [CVE-2022-34336](https://insights.sbomify.com/CVE-2022-34336/): Cross-site scripting in WebSphere Application Server (medium 5.4) - [CVE-2022-34335](https://insights.sbomify.com/CVE-2022-34335/): IBM Sterling Partner Engagement Manager denial of service (medium 6.5) - [CVE-2022-34334](https://insights.sbomify.com/CVE-2022-34334/): Auth bypass in Sterling Partner Engagement Manager (medium 6.3) - [CVE-2022-34333](https://insights.sbomify.com/CVE-2022-34333/): IBM Sterling Order Management information disclosure (medium 5.9) - [CVE-2022-34331](https://insights.sbomify.com/CVE-2022-34331/): IBM Power FW security bypass (medium 5.5) - [CVE-2022-34330](https://insights.sbomify.com/CVE-2022-34330/): IBM Sterling B2B Integrator cross-site scripting (medium 6.1) - [CVE-2022-3433](https://insights.sbomify.com/CVE-2022-3433/): Denial of service in aeson (medium 6.5) - [CVE-2022-34329](https://insights.sbomify.com/CVE-2022-34329/): IBM CICS TX information disclosure (medium 5.3) - [CVE-2022-34328](https://insights.sbomify.com/CVE-2022-34328/): Cross-site scripting in sigb:pmb (medium 6.1) - [CVE-2022-34326](https://insights.sbomify.com/CVE-2022-34326/): Denial of service in realtek:rtl8195am firmware (high 7.5) - [CVE-2022-34325](https://insights.sbomify.com/CVE-2022-34325/): Race condition in insyde:insydeh2o (high 7.8) - [CVE-2022-34324](https://insights.sbomify.com/CVE-2022-34324/): SQL injection in sage:sage xrt business exchange (high 8.8) - [CVE-2022-34323](https://insights.sbomify.com/CVE-2022-34323/): Cross-site scripting in sage:sage xrt business exchange (medium 5.4) - [CVE-2022-34322](https://insights.sbomify.com/CVE-2022-34322/): Cross-site scripting in sage:sage enterprise intelligence (critical 9.0) - [CVE-2022-34321](https://insights.sbomify.com/CVE-2022-34321/): Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint (high 8.2) - [CVE-2022-34320](https://insights.sbomify.com/CVE-2022-34320/): IBM CICS TX information disclosure (medium 5.9) - [CVE-2022-3432](https://insights.sbomify.com/CVE-2022-3432/): Security feature bypass in BIOS (medium 6.7) - [CVE-2022-34319](https://insights.sbomify.com/CVE-2022-34319/): IBM CICS TX information disclosure (medium 5.9) - [CVE-2022-34318](https://insights.sbomify.com/CVE-2022-34318/): IBM CICS TX clickjacking (medium 5.4) - [CVE-2022-34317](https://insights.sbomify.com/CVE-2022-34317/): IBM CICS TX cross-site scripting (medium 5.4) - [CVE-2022-34316](https://insights.sbomify.com/CVE-2022-34316/): IBM CICS TX information disclosure (low 3.7) - [CVE-2022-34315](https://insights.sbomify.com/CVE-2022-34315/): IBM CICS TX cross-site scripting (medium 5.4) - [CVE-2022-34314](https://insights.sbomify.com/CVE-2022-34314/): Information disclosure in CICS TX (medium 4.0) - [CVE-2022-34313](https://insights.sbomify.com/CVE-2022-34313/): IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies (medium 4.3) - [CVE-2022-34312](https://insights.sbomify.com/CVE-2022-34312/): IBM CICS TX information disclosure (medium 4.0) - [CVE-2022-34311](https://insights.sbomify.com/CVE-2022-34311/): IBM CICS TX session fixation (medium 4.3) - [CVE-2022-34310](https://insights.sbomify.com/CVE-2022-34310/): IBM CICS TX information disclosure (medium 5.9) - [CVE-2022-3431](https://insights.sbomify.com/CVE-2022-3431/): Security feature bypass in BIOS (medium 6.7) - [CVE-2022-34309](https://insights.sbomify.com/CVE-2022-34309/): IBM CICS TX information disclosure (medium 5.9) - [CVE-2022-34308](https://insights.sbomify.com/CVE-2022-34308/): Denial of service in CICS TX Advanced (medium 6.2) - [CVE-2022-34307](https://insights.sbomify.com/CVE-2022-34307/): Information disclosure in CICS TX Advanced (medium 4.3) - [CVE-2022-34306](https://insights.sbomify.com/CVE-2022-34306/): Cross-site scripting in CICS TX Advanced (medium 5.4) - [CVE-2022-34305](https://insights.sbomify.com/CVE-2022-34305/): XSS in examples web application (medium 6.1) - [CVE-2022-34303](https://insights.sbomify.com/CVE-2022-34303/): Security feature bypass in eurosoft-uk:uefi bootloader (medium 6.7) - [CVE-2022-34302](https://insights.sbomify.com/CVE-2022-34302/): Security feature bypass in horizondatasys:uefi bootloader (medium 6.7) - [CVE-2022-34301](https://insights.sbomify.com/CVE-2022-34301/): Security feature bypass in kidan:cryptopro securedisk for bitlocker (medium 6.7) - [CVE-2022-34300](https://insights.sbomify.com/CVE-2022-34300/): Memory corruption in tinyexr project:tinyexr (high 8.8) - [CVE-2022-3430](https://insights.sbomify.com/CVE-2022-3430/): Misconfiguration in BIOS (medium 6.7) - [CVE-2022-34299](https://insights.sbomify.com/CVE-2022-34299/): Memory corruption in libdwarf project:libdwarf (high 8.1) - [CVE-2022-34298](https://insights.sbomify.com/CVE-2022-34298/): NT auth module vulnerability in OpenAM (medium 5.3) - [CVE-2022-34297](https://insights.sbomify.com/CVE-2022-34297/): Yii2 Gii Cross-site Scripting vulnerability (medium 5.4) - [CVE-2022-34296](https://insights.sbomify.com/CVE-2022-34296/): Query predicate bypass in Zalando Skipper (high 7.5) - [CVE-2022-34295](https://insights.sbomify.com/CVE-2022-34295/): Weak cryptography in totd project:totd (medium 6.5) - [CVE-2022-34294](https://insights.sbomify.com/CVE-2022-34294/): Weak cryptography in totd project:totd (critical 9.8) - [CVE-2022-34293](https://insights.sbomify.com/CVE-2022-34293/): Denial of service in wolfssl:wolfssl (high 7.5) - [CVE-2022-34292](https://insights.sbomify.com/CVE-2022-34292/): Path traversal in docker:desktop (high 7.1) - [CVE-2022-34291](https://insights.sbomify.com/CVE-2022-34291/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-34290](https://insights.sbomify.com/CVE-2022-34290/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-3429](https://insights.sbomify.com/CVE-2022-3429/): Denial of service in Printer G263DNS (medium 6.5) - [CVE-2022-34289](https://insights.sbomify.com/CVE-2022-34289/): Memory corruption in PADS Standard/Plus Viewer (high 7.8) - [CVE-2022-34288](https://insights.sbomify.com/CVE-2022-34288/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-34287](https://insights.sbomify.com/CVE-2022-34287/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-34286](https://insights.sbomify.com/CVE-2022-34286/): Memory corruption in PADS Standard/Plus Viewer (high 7.8) - [CVE-2022-34285](https://insights.sbomify.com/CVE-2022-34285/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-34284](https://insights.sbomify.com/CVE-2022-34284/): Memory corruption in PADS Standard/Plus Viewer (high 7.8) - [CVE-2022-34283](https://insights.sbomify.com/CVE-2022-34283/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-34282](https://insights.sbomify.com/CVE-2022-34282/): Memory corruption in PADS Standard/Plus Viewer (medium 5.5) - [CVE-2022-34281](https://insights.sbomify.com/CVE-2022-34281/): Memory corruption in PADS Standard/Plus Viewer (high 7.8) - [CVE-2022-34280](https://insights.sbomify.com/CVE-2022-34280/): Memory corruption in PADS Standard/Plus Viewer (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/295/