# Vulnerabilities published in 2022


- [CVE-2022-34279](https://insights.sbomify.com/CVE-2022-34279/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34278](https://insights.sbomify.com/CVE-2022-34278/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34277](https://insights.sbomify.com/CVE-2022-34277/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34276](https://insights.sbomify.com/CVE-2022-34276/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34275](https://insights.sbomify.com/CVE-2022-34275/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34274](https://insights.sbomify.com/CVE-2022-34274/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34273](https://insights.sbomify.com/CVE-2022-34273/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34272](https://insights.sbomify.com/CVE-2022-34272/): Memory corruption in PADS Standard/Plus Viewer (high 7.8)
- [CVE-2022-34271](https://insights.sbomify.com/CVE-2022-34271/): Apache Atlas: zip path traversal in import functionality (high 8.8)
- [CVE-2022-34270](https://insights.sbomify.com/CVE-2022-34270/): Privilege escalation in rws:worldserver (critical 9.8)
- [CVE-2022-3427](https://insights.sbomify.com/CVE-2022-3427/): Corner Ad <= 1.0.56 - Cross-Site Request Forgery (high 8.8)
- [CVE-2022-34269](https://insights.sbomify.com/CVE-2022-34269/): Server-side request forgery in rws:worldserver (high 8.8)
- [CVE-2022-34268](https://insights.sbomify.com/CVE-2022-34268/): Deserialization in rws:worldserver (critical 9.8)
- [CVE-2022-34267](https://insights.sbomify.com/CVE-2022-34267/): Auth bypass in rws:worldserver (critical 9.8)
- [CVE-2022-34266](https://insights.sbomify.com/CVE-2022-34266/): Memory corruption in libtiff:libtiff (medium 5.5)
- [CVE-2022-34265](https://insights.sbomify.com/CVE-2022-34265/): Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection (critical 9.8)
- [CVE-2022-34264](https://insights.sbomify.com/CVE-2022-34264/): Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34263](https://insights.sbomify.com/CVE-2022-34263/): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34262](https://insights.sbomify.com/CVE-2022-34262/): Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34261](https://insights.sbomify.com/CVE-2022-34261/): Adobe Illustrator Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34260](https://insights.sbomify.com/CVE-2022-34260/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3426](https://insights.sbomify.com/CVE-2022-3426/): Advanced WP Columns <= 2.0.6 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-34259](https://insights.sbomify.com/CVE-2022-34259/): Adobe Commerce Improper Access Control Security feature bypass (medium 5.3)
- [CVE-2022-34258](https://insights.sbomify.com/CVE-2022-34258/): Adobe Commerce Stored XSS Arbitrary code execution (medium 4.8)
- [CVE-2022-34257](https://insights.sbomify.com/CVE-2022-34257/): Adobe Commerce Stored XSS Arbitrary code execution (medium 6.1)
- [CVE-2022-34256](https://insights.sbomify.com/CVE-2022-34256/): Adobe Commerce Improper Authorization Privilege escalation (high 7.5)
- [CVE-2022-34255](https://insights.sbomify.com/CVE-2022-34255/): Adobe Commerce Improper Access Control Privilege escalation (high 8.8)
- [CVE-2022-34254](https://insights.sbomify.com/CVE-2022-34254/): Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution (high 8.5)
- [CVE-2022-34253](https://insights.sbomify.com/CVE-2022-34253/): Adobe Commerce XML Injection Arbitrary code execution (critical 9.1)
- [CVE-2022-34252](https://insights.sbomify.com/CVE-2022-34252/): Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34251](https://insights.sbomify.com/CVE-2022-34251/): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34250](https://insights.sbomify.com/CVE-2022-34250/): Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3425](https://insights.sbomify.com/CVE-2022-3425/): Google Analyticator < 6.5.6 - Admin+ PHP Object Injection (high 7.2)
- [CVE-2022-34249](https://insights.sbomify.com/CVE-2022-34249/): Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34248](https://insights.sbomify.com/CVE-2022-34248/): Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34247](https://insights.sbomify.com/CVE-2022-34247/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34246](https://insights.sbomify.com/CVE-2022-34246/): Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34245](https://insights.sbomify.com/CVE-2022-34245/): Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34244](https://insights.sbomify.com/CVE-2022-34244/): Adobe Photoshop U3D File Parsing Access of Uninitialized Pointer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34243](https://insights.sbomify.com/CVE-2022-34243/): Adobe Photoshop U3D File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34242](https://insights.sbomify.com/CVE-2022-34242/): Adobe Character Animator SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34241](https://insights.sbomify.com/CVE-2022-34241/): Adobe Character Animator SVG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3424](https://insights.sbomify.com/CVE-2022-3424/): Use after free in kernel (high 7.8)
- [CVE-2022-34239](https://insights.sbomify.com/CVE-2022-34239/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34238](https://insights.sbomify.com/CVE-2022-34238/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34237](https://insights.sbomify.com/CVE-2022-34237/): Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34236](https://insights.sbomify.com/CVE-2022-34236/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34235](https://insights.sbomify.com/CVE-2022-34235/): Adobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation (high 7.8)
- [CVE-2022-34234](https://insights.sbomify.com/CVE-2022-34234/): Adobe Acrobat Reader DC Doc printWithParams Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34233](https://insights.sbomify.com/CVE-2022-34233/): Adobe Acrobat Reader DC Doc print Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34232](https://insights.sbomify.com/CVE-2022-34232/): Adobe Acrobat Reader DC Annotation print Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-34230](https://insights.sbomify.com/CVE-2022-34230/): Adobe Acrobat Reader Use After Free could lead to Arbitrary code execution (high 7.8)
- [CVE-2022-3423](https://insights.sbomify.com/CVE-2022-3423/): Allocation of Resources Without Limits or Throttling in nocodb/nocodb (high 7.3)
- [CVE-2022-34229](https://insights.sbomify.com/CVE-2022-34229/): Adobe Acrobat Reader DC AcroForm rect Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34228](https://insights.sbomify.com/CVE-2022-34228/): Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34227](https://insights.sbomify.com/CVE-2022-34227/): Adobe Acrobat Reader DC AcroForm value Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34226](https://insights.sbomify.com/CVE-2022-34226/): Adobe Acrobat Reader DC PDF Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34225](https://insights.sbomify.com/CVE-2022-34225/): Adobe Acrobat Reader DC AcroForm exportValues Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34224](https://insights.sbomify.com/CVE-2022-34224/): Adobe Acrobat Reader DC AcroForm setItems Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34223](https://insights.sbomify.com/CVE-2022-34223/): Adobe Acrobat Reader DC AcroForm currentValueIndices Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34222](https://insights.sbomify.com/CVE-2022-34222/): Adobe Acrobat Reader DC query Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34221](https://insights.sbomify.com/CVE-2022-34221/): Adobe Acrobat Reader Type Confusion vulnerability could lead to Arbitrary code execution (high 7.8)
- [CVE-2022-34220](https://insights.sbomify.com/CVE-2022-34220/): Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3422](https://insights.sbomify.com/CVE-2022-3422/): Improper Privilege Management in tooljet/tooljet (critical 9.8)
- [CVE-2022-34219](https://insights.sbomify.com/CVE-2022-34219/): Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34218](https://insights.sbomify.com/CVE-2022-34218/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-34217](https://insights.sbomify.com/CVE-2022-34217/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34216](https://insights.sbomify.com/CVE-2022-34216/): Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34215](https://insights.sbomify.com/CVE-2022-34215/): Adobe Acrobat Reader DC Annotation Polygon Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-34213](https://insights.sbomify.com/CVE-2022-34213/): Squash TM Publisher (Squash4Jenkins) Plugin stores passwords stored in plain text (medium 6.5)
- [CVE-2022-34212](https://insights.sbomify.com/CVE-2022-34212/): Missing permission check in Jenkins vRealize Orchestrator Plugin (medium 5.7)
- [CVE-2022-34211](https://insights.sbomify.com/CVE-2022-34211/): Cross-Site Request Forgery in Jenkins vRealize Orchestrator Plugin (medium 6.5)
- [CVE-2022-34210](https://insights.sbomify.com/CVE-2022-34210/): Missing permission check in Jenkins ThreadFix Plugin (medium 6.5)
- [CVE-2022-3421](https://insights.sbomify.com/CVE-2022-3421/): Privilege escalation in Google Drive for Desktop on MacOS (medium 5.6)
- [CVE-2022-34209](https://insights.sbomify.com/CVE-2022-34209/): Cross-Site Request Forgery in Jenkins ThreadFix Plugin (medium 6.5)
- [CVE-2022-34208](https://insights.sbomify.com/CVE-2022-34208/): Jenkins Beaker builder Plugin Missing Authorization vulnerability (medium 4.3)
- [CVE-2022-34207](https://insights.sbomify.com/CVE-2022-34207/): Cross-Site Request Forgery in Jenkins Beaker builder Plugin (medium 6.5)
- [CVE-2022-34206](https://insights.sbomify.com/CVE-2022-34206/): Jenkins Jianliao Notification Plugin Missing Authorization vulnerability (medium 4.3)
- [CVE-2022-34205](https://insights.sbomify.com/CVE-2022-34205/): Cross-Site Request Forgery in Jenkins Jianliao Notification Plugin (medium 6.5)
- [CVE-2022-34204](https://insights.sbomify.com/CVE-2022-34204/): Jenkins EasyQA Plugin Missing Authorization vulnerability (medium 4.3)
- [CVE-2022-34203](https://insights.sbomify.com/CVE-2022-34203/): Cross-Site Request Forgery in Jenkins EasyQA Plugin (high 8.8)
- [CVE-2022-34202](https://insights.sbomify.com/CVE-2022-34202/): User passwords stored in plain text by Jenkins EasyQA Plugin (medium 6.5)
- [CVE-2022-34201](https://insights.sbomify.com/CVE-2022-34201/): Missing permission check in Jenkins Convertigo Mobile Platform Plugin (medium 6.5)
- [CVE-2022-34200](https://insights.sbomify.com/CVE-2022-34200/): Cross-Site Request Forgery in Jenkins Convertigo Mobile Platform Plugin (high 8.8)
- [CVE-2022-3420](https://insights.sbomify.com/CVE-2022-3420/): Official Integration for Billingo < 3.4.0 - ShopManager+ Stored XSS (medium 4.8)
- [CVE-2022-34199](https://insights.sbomify.com/CVE-2022-34199/): Plaintext Storage of a Password in Jenkins Convertigo Mobile Platform Plugin (medium 6.5)
- [CVE-2022-34198](https://insights.sbomify.com/CVE-2022-34198/): Cross-site Scripting in Jenkins Stash Branch Parameter Plugin (medium 5.4)
- [CVE-2022-34197](https://insights.sbomify.com/CVE-2022-34197/): Cross-site Scripting in Jenkins Sauce OnDemand Plugin (medium 5.4)
- [CVE-2022-34196](https://insights.sbomify.com/CVE-2022-34196/): Cross-site Scripting in Jenkins REST List Parameter Plugin (medium 5.4)
- [CVE-2022-34195](https://insights.sbomify.com/CVE-2022-34195/): Cross-site Scripting in Jenkins Repository Connector Plugin (medium 5.4)
- [CVE-2022-34194](https://insights.sbomify.com/CVE-2022-34194/): Cross-site Scripting in Jenkins Readonly Parameter Plugin (medium 5.4)
- [CVE-2022-34193](https://insights.sbomify.com/CVE-2022-34193/): Cross-site Scripting in Jenkins Package Version Plugin (medium 5.4)
- [CVE-2022-34192](https://insights.sbomify.com/CVE-2022-34192/): Cross-site Scripting in Jenkins ontrack Jenkins Plugin (medium 5.4)
- [CVE-2022-34191](https://insights.sbomify.com/CVE-2022-34191/): Cross-site Scripting in Jenkins NS-ND Integration Performance Publisher Plugin (medium 5.4)
- [CVE-2022-34190](https://insights.sbomify.com/CVE-2022-34190/): Cross-site Scripting in Jenkins Maven Metadata Plugin (medium 5.4)
- [CVE-2022-3419](https://insights.sbomify.com/CVE-2022-3419/): Automatic User Roles Switcher < 1.1.2 - Subscriber+ Privilege Escalation (medium 6.5)
- [CVE-2022-34189](https://insights.sbomify.com/CVE-2022-34189/): Cross-site Scripting in Jenkins Image Tag Parameter Plugin (medium 5.4)
- [CVE-2022-34188](https://insights.sbomify.com/CVE-2022-34188/): Cross-site Scripting in Jenkins Hidden Parameter Plugin (medium 5.4)
- [CVE-2022-34187](https://insights.sbomify.com/CVE-2022-34187/): Cross-site Scripting in Jenkins Filesystem List Parameter Plugin (medium 5.4)
- [CVE-2022-34186](https://insights.sbomify.com/CVE-2022-34186/): Cross-site Scripting in Jenkins Dynamic Extended Choice Parameter Plugin (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/296/