# Vulnerabilities published in 2022


- [CVE-2022-33917](https://insights.sbomify.com/CVE-2022-33917/): Use after free in arm:valhall gpu kernel driver (medium 5.5)
- [CVE-2022-33916](https://insights.sbomify.com/CVE-2022-33916/): Exposure of Sensitive Information in OPCFoundation.NetStandard.Opc.Ua.Server (high 7.5)
- [CVE-2022-33915](https://insights.sbomify.com/CVE-2022-33915/): Race condition in amazon:hotpatch (high 7.0)
- [CVE-2022-33913](https://insights.sbomify.com/CVE-2022-33913/): Missing authorization in mahara:mahara (high 7.5)
- [CVE-2022-33912](https://insights.sbomify.com/CVE-2022-33912/): Privilege escalation in checkmk:checkmk (high 7.8)
- [CVE-2022-33911](https://insights.sbomify.com/CVE-2022-33911/): Information disclosure in couchbase:couchbase server (medium 5.3)
- [CVE-2022-33910](https://insights.sbomify.com/CVE-2022-33910/): MantisBT XSS through crafted SVG documents in file_download.php (medium 5.4)
- [CVE-2022-3391](https://insights.sbomify.com/CVE-2022-3391/): Retain Live Chat <= 0.1 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-33909](https://insights.sbomify.com/CVE-2022-33909/): Race condition in insyde:kernel (high 7.0)
- [CVE-2022-33908](https://insights.sbomify.com/CVE-2022-33908/): Race condition in insyde:kernel (high 7.0)
- [CVE-2022-33907](https://insights.sbomify.com/CVE-2022-33907/): Race condition in insyde:kernel (medium 6.4)
- [CVE-2022-33906](https://insights.sbomify.com/CVE-2022-33906/): Race condition in insyde:kernel (medium 6.4)
- [CVE-2022-33905](https://insights.sbomify.com/CVE-2022-33905/): Race condition in insyde:kernel (high 7.0)
- [CVE-2022-33903](https://insights.sbomify.com/CVE-2022-33903/): Denial of service in torproject:tor (high 7.5)
- [CVE-2022-33902](https://insights.sbomify.com/CVE-2022-33902/): Privilege escalation in Intel(R) Quartus Prime Pro and Standard edition software (high 7.3)
- [CVE-2022-33901](https://insights.sbomify.com/CVE-2022-33901/): WordPress MultiSafepay plugin for WooCommerce plugin <= 4.13.1 - Unauthenticated Arbitrary File Read vulnerability (medium 5.3)
- [CVE-2022-33900](https://insights.sbomify.com/CVE-2022-33900/): WordPress Easy Digital Downloads plugin <= 3.0.1 - PHP Object Injection vulnerability (medium 4.1)
- [CVE-2022-33898](https://insights.sbomify.com/CVE-2022-33898/): Misconfiguration in Intel(R) NUC Watchdog Timer installation software (medium 6.7)
- [CVE-2022-33897](https://insights.sbomify.com/CVE-2022-33897/): Path traversal in R1510 (medium 4.9)
- [CVE-2022-33896](https://insights.sbomify.com/CVE-2022-33896/): Memory corruption in Hancom Office 2020 (high 7.8)
- [CVE-2022-33894](https://insights.sbomify.com/CVE-2022-33894/): Privilege escalation in Intel(R) Processors (high 7.5)
- [CVE-2022-33892](https://insights.sbomify.com/CVE-2022-33892/): Path traversal in Intel(R) Quartus Prime Pro and Standard edition software (high 7.3)
- [CVE-2022-33891](https://insights.sbomify.com/CVE-2022-33891/): Apache Spark Command Injection (high 8.8, exploited in the wild)
- [CVE-2022-33890](https://insights.sbomify.com/CVE-2022-33890/): Memory corruption in Autodesk® Design Review, (high 7.8)
- [CVE-2022-3389](https://insights.sbomify.com/CVE-2022-3389/): Path Traversal in ikus060/rdiffweb (high 8.2)
- [CVE-2022-33889](https://insights.sbomify.com/CVE-2022-33889/): Memory corruption in Autodesk® Design Review, Autodesk® Advance Steel, Autodesk® Civil 3D® (high 7.8)
- [CVE-2022-33888](https://insights.sbomify.com/CVE-2022-33888/): Memory corruption in utodesk® AutoCAD®, Advance Steel and Civil 3D® (high 7.8)
- [CVE-2022-33887](https://insights.sbomify.com/CVE-2022-33887/): Memory corruption in utodesk® AutoCAD®, Advance Steel and Civil 3D® (high 7.8)
- [CVE-2022-33886](https://insights.sbomify.com/CVE-2022-33886/): Memory corruption in Autodesk Maya (high 7.8)
- [CVE-2022-33885](https://insights.sbomify.com/CVE-2022-33885/): Memory corruption in utodesk® AutoCAD®, Advance Steel and Civil 3D® (high 7.8)
- [CVE-2022-33884](https://insights.sbomify.com/CVE-2022-33884/): Memory corruption in utodesk® AutoCAD®, Advance Steel and Civil 3D® (high 7.5)
- [CVE-2022-33883](https://insights.sbomify.com/CVE-2022-33883/): Memory corruption in Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material (high 7.8)
- [CVE-2022-33882](https://insights.sbomify.com/CVE-2022-33882/): Privilege escalation in Autodesk desktop app (critical 9.8)
- [CVE-2022-33881](https://insights.sbomify.com/CVE-2022-33881/): Memory corruption in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D (high 7.8)
- [CVE-2022-33880](https://insights.sbomify.com/CVE-2022-33880/): SQL injection in hospital management system mini-project project:hospital management system mini-project (critical 9.8)
- [CVE-2022-3388](https://insights.sbomify.com/CVE-2022-3388/): Input Validation Vulnerability in Hitachi Energy’s MicroSCADA Pro/X SYS600 Products (high 8.8)
- [CVE-2022-33879](https://insights.sbomify.com/CVE-2022-33879/): Incomplete fix and new regex DoS in StandardsExtractingContentHandler (low 3.3)
- [CVE-2022-33878](https://insights.sbomify.com/CVE-2022-33878/): Information disclosure in Fortinet FortiClientMac (low 2.2)
- [CVE-2022-33877](https://insights.sbomify.com/CVE-2022-33877/): Misconfiguration in FortiClientWindows (medium 6.8)
- [CVE-2022-33876](https://insights.sbomify.com/CVE-2022-33876/): Path traversal in FortiADC (medium 5.1)
- [CVE-2022-33875](https://insights.sbomify.com/CVE-2022-33875/): SQL injection in FortiADC (medium 5.1)
- [CVE-2022-33874](https://insights.sbomify.com/CVE-2022-33874/): Command injection in Fortinet FortiTester (critical 9.8)
- [CVE-2022-33873](https://insights.sbomify.com/CVE-2022-33873/): Command injection in Fortinet FortiTester (medium 6.8)
- [CVE-2022-33872](https://insights.sbomify.com/CVE-2022-33872/): Command injection in Fortinet FortiTester (critical 9.8)
- [CVE-2022-33871](https://insights.sbomify.com/CVE-2022-33871/): Memory corruption in FortiWeb (medium 6.3)
- [CVE-2022-33870](https://insights.sbomify.com/CVE-2022-33870/): Command injection in Fortinet FortiTester (high 7.8)
- [CVE-2022-3387](https://insights.sbomify.com/CVE-2022-3387/): Path traversal in R-SeeNet (medium 6.5)
- [CVE-2022-33869](https://insights.sbomify.com/CVE-2022-33869/): Command injection in FortiWAN (high 8.0)
- [CVE-2022-33862](https://insights.sbomify.com/CVE-2022-33862/): Improper access control mechanism in IPP (medium 6.7)
- [CVE-2022-33861](https://insights.sbomify.com/CVE-2022-33861/): Insufficient verification of authenticity in IPP (medium 5.1)
- [CVE-2022-3386](https://insights.sbomify.com/CVE-2022-3386/): Memory corruption in R-SeeNet (critical 9.8)
- [CVE-2022-33859](https://insights.sbomify.com/CVE-2022-33859/): Unrestricted file upload in Eaton Foreseer EPMS (high 8.1)
- [CVE-2022-3385](https://insights.sbomify.com/CVE-2022-3385/): Memory corruption in R-SeeNet (critical 9.8)
- [CVE-2022-3384](https://insights.sbomify.com/CVE-2022-3384/): Code injection in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (high 7.2)
- [CVE-2022-3383](https://insights.sbomify.com/CVE-2022-3383/): Code injection in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin (high 7.2)
- [CVE-2022-3382](https://insights.sbomify.com/CVE-2022-3382/): Denial of service in HIWIN Robot System Software (high 7.5)
- [CVE-2022-3381](https://insights.sbomify.com/CVE-2022-3381/): Open redirect in GitLab (medium 4.3)
- [CVE-2022-3380](https://insights.sbomify.com/CVE-2022-3380/): Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection (high 7.2)
- [CVE-2022-3379](https://insights.sbomify.com/CVE-2022-3379/): Memory corruption in Cscape (high 7.8)
- [CVE-2022-3378](https://insights.sbomify.com/CVE-2022-3378/): Memory corruption in Cscape (high 7.8)
- [CVE-2022-3377](https://insights.sbomify.com/CVE-2022-3377/): Memory corruption in Cscape (high 7.8)
- [CVE-2022-3376](https://insights.sbomify.com/CVE-2022-3376/): Weak Password Requirements in ikus060/rdiffweb (low 3.5)
- [CVE-2022-33757](https://insights.sbomify.com/CVE-2022-33757/): Missing authorization in Tenable Nessus (medium 6.5)
- [CVE-2022-33756](https://insights.sbomify.com/CVE-2022-33756/): Weak cryptography in CA Automic Automation (high 7.5)
- [CVE-2022-33755](https://insights.sbomify.com/CVE-2022-33755/): Information disclosure in CA Automic Automation (medium 5.3)
- [CVE-2022-33754](https://insights.sbomify.com/CVE-2022-33754/): Other in CA Automic Automation (critical 9.8)
- [CVE-2022-33753](https://insights.sbomify.com/CVE-2022-33753/): Privilege escalation in CA Automic Automation (high 8.8)
- [CVE-2022-33752](https://insights.sbomify.com/CVE-2022-33752/): Other in CA Automic Automation (critical 9.8)
- [CVE-2022-33751](https://insights.sbomify.com/CVE-2022-33751/): Information disclosure in CA Automic Automation (high 7.5)
- [CVE-2022-33750](https://insights.sbomify.com/CVE-2022-33750/): Auth bypass in CA Automic Automation (critical 9.8)
- [CVE-2022-3375](https://insights.sbomify.com/CVE-2022-3375/): Information disclosure in GitLab (low 3.1)
- [CVE-2022-33749](https://insights.sbomify.com/CVE-2022-33749/): Denial of service in Xapi (medium 5.3)
- [CVE-2022-33748](https://insights.sbomify.com/CVE-2022-33748/): Race condition in xen (medium 5.6)
- [CVE-2022-33747](https://insights.sbomify.com/CVE-2022-33747/): Denial of service in xen (low 3.8)
- [CVE-2022-33746](https://insights.sbomify.com/CVE-2022-33746/): Denial of service in xen (medium 6.5)
- [CVE-2022-33745](https://insights.sbomify.com/CVE-2022-33745/): Other in xen (high 8.8)
- [CVE-2022-33744](https://insights.sbomify.com/CVE-2022-33744/): Race condition in Linux (medium 4.7)
- [CVE-2022-33743](https://insights.sbomify.com/CVE-2022-33743/): Use after free in Linux (high 7.8)
- [CVE-2022-33742](https://insights.sbomify.com/CVE-2022-33742/): Information disclosure in Linux (high 7.1)
- [CVE-2022-33741](https://insights.sbomify.com/CVE-2022-33741/): Information disclosure in Linux (high 7.1)
- [CVE-2022-33740](https://insights.sbomify.com/CVE-2022-33740/): Information disclosure in Linux (high 7.1)
- [CVE-2022-3374](https://insights.sbomify.com/CVE-2022-3374/): Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection (high 7.2)
- [CVE-2022-33739](https://insights.sbomify.com/CVE-2022-33739/): XML external entity in CA Clarity (high 7.5)
- [CVE-2022-33738](https://insights.sbomify.com/CVE-2022-33738/): Weak cryptography in OpenVPN Access Server (high 7.5)
- [CVE-2022-33737](https://insights.sbomify.com/CVE-2022-33737/): Information disclosure in OpenVPN Access Server (high 7.5)
- [CVE-2022-33736](https://insights.sbomify.com/CVE-2022-33736/): Auth bypass in Opcenter Quality V13.1 (high 7.5)
- [CVE-2022-33735](https://insights.sbomify.com/CVE-2022-33735/): Auth bypass in WS7200-10 (medium 6.5)
- [CVE-2022-33734](https://insights.sbomify.com/CVE-2022-33734/): Information disclosure in Charm by Samsung (medium 6.2)
- [CVE-2022-33733](https://insights.sbomify.com/CVE-2022-33733/): Information disclosure in Charm by Samsung (medium 6.2)
- [CVE-2022-33732](https://insights.sbomify.com/CVE-2022-33732/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-33731](https://insights.sbomify.com/CVE-2022-33731/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2022-33730](https://insights.sbomify.com/CVE-2022-33730/): Memory corruption in Samsung Mobile Devices (medium 6.8)
- [CVE-2022-3373](https://insights.sbomify.com/CVE-2022-3373/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-33729](https://insights.sbomify.com/CVE-2022-33729/): Information disclosure in Samsung Mobile Devices (medium 5.9)
- [CVE-2022-33728](https://insights.sbomify.com/CVE-2022-33728/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33727](https://insights.sbomify.com/CVE-2022-33727/): Other in Samsung Mobile Devices (medium 4.8)
- [CVE-2022-33726](https://insights.sbomify.com/CVE-2022-33726/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33725](https://insights.sbomify.com/CVE-2022-33725/): Privilege escalation in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-33724](https://insights.sbomify.com/CVE-2022-33724/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-33723](https://insights.sbomify.com/CVE-2022-33723/): Other in Samsung Mobile Devices (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/299/