# Vulnerabilities published in 2022


- [CVE-2022-33259](https://insights.sbomify.com/CVE-2022-33259/): Buffer copy without checking the size of input in Modem (critical 9.8)
- [CVE-2022-33258](https://insights.sbomify.com/CVE-2022-33258/): Buffer over-read in Modem (high 8.2)
- [CVE-2022-33257](https://insights.sbomify.com/CVE-2022-33257/): Time-of-check time-of-use race condition in Core (critical 9.3)
- [CVE-2022-33256](https://insights.sbomify.com/CVE-2022-33256/): Improper validation of array index in Multi-mode call processor (critical 9.8)
- [CVE-2022-33255](https://insights.sbomify.com/CVE-2022-33255/): Buffer over-read in Bluetooth HOST (high 8.2)
- [CVE-2022-33254](https://insights.sbomify.com/CVE-2022-33254/): Reachable assertion in Modem (high 7.5)
- [CVE-2022-33253](https://insights.sbomify.com/CVE-2022-33253/): Buffer over-read in WLAN (high 7.5)
- [CVE-2022-33252](https://insights.sbomify.com/CVE-2022-33252/): Buffer over-read in WLAN (high 8.2)
- [CVE-2022-33251](https://insights.sbomify.com/CVE-2022-33251/): Reachable assertion in Modem (high 7.5)
- [CVE-2022-33250](https://insights.sbomify.com/CVE-2022-33250/): Reachable assertion in Modem (high 7.5)
- [CVE-2022-3325](https://insights.sbomify.com/CVE-2022-3325/): Missing authorization in GitLab (low 2.7)
- [CVE-2022-33248](https://insights.sbomify.com/CVE-2022-33248/): Integer overflow to buffer overflow in User Identity Module (high 7.8)
- [CVE-2022-33246](https://insights.sbomify.com/CVE-2022-33246/): Use of out-of-range pointer offset in Audio (medium 6.7)
- [CVE-2022-33245](https://insights.sbomify.com/CVE-2022-33245/): Use after free in WLAN (medium 6.7)
- [CVE-2022-33244](https://insights.sbomify.com/CVE-2022-33244/): Reachable assertion in Modem (high 7.5)
- [CVE-2022-33243](https://insights.sbomify.com/CVE-2022-33243/): Improper access control in Qualcomm IPC (high 8.4)
- [CVE-2022-33242](https://insights.sbomify.com/CVE-2022-33242/): Improper authentication in Qualcomm IPC (high 7.8)
- [CVE-2022-33240](https://insights.sbomify.com/CVE-2022-33240/): Incorrect type conversion or cast in Audio (medium 6.7)
- [CVE-2022-3324](https://insights.sbomify.com/CVE-2022-3324/): Stack-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-33239](https://insights.sbomify.com/CVE-2022-33239/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2022-33238](https://insights.sbomify.com/CVE-2022-33238/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2022-33237](https://insights.sbomify.com/CVE-2022-33237/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2022-33236](https://insights.sbomify.com/CVE-2022-33236/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2022-33235](https://insights.sbomify.com/CVE-2022-33235/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (high 8.2)
- [CVE-2022-33234](https://insights.sbomify.com/CVE-2022-33234/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.3)
- [CVE-2022-33233](https://insights.sbomify.com/CVE-2022-33233/): Configuration weakness in modem (high 7.8)
- [CVE-2022-33232](https://insights.sbomify.com/CVE-2022-33232/): Buffer copy without checking size of input in Hypervisor (critical 9.3)
- [CVE-2022-33231](https://insights.sbomify.com/CVE-2022-33231/): Double free in Core (critical 9.3)
- [CVE-2022-33230](https://insights.sbomify.com/CVE-2022-33230/): Buffer copy without checking the size of input in FM Host (medium 6.7)
- [CVE-2022-3323](https://insights.sbomify.com/CVE-2022-3323/): SQL injection in Advantech iView (high 7.5)
- [CVE-2022-33229](https://insights.sbomify.com/CVE-2022-33229/): Buffer over-read in Modem (high 8.2)
- [CVE-2022-33228](https://insights.sbomify.com/CVE-2022-33228/): Buffer over-read in Modem (high 8.2)
- [CVE-2022-33227](https://insights.sbomify.com/CVE-2022-33227/): Double free in Linux-Android (medium 6.7)
- [CVE-2022-33226](https://insights.sbomify.com/CVE-2022-33226/): Buffer copy without checking the size of input in Core (medium 6.7)
- [CVE-2022-33225](https://insights.sbomify.com/CVE-2022-33225/): Use after free in Trusted Application Environment (medium 6.7)
- [CVE-2022-33224](https://insights.sbomify.com/CVE-2022-33224/): Buffer copy without checking the size of input in Core (medium 6.7)
- [CVE-2022-33223](https://insights.sbomify.com/CVE-2022-33223/): Null pointer dereference in Modem (high 7.5)
- [CVE-2022-33222](https://insights.sbomify.com/CVE-2022-33222/): Buffer over-read in Modem (high 8.2)
- [CVE-2022-33221](https://insights.sbomify.com/CVE-2022-33221/): Buffer over-read in Trusted Execution Environment (medium 6.8)
- [CVE-2022-33220](https://insights.sbomify.com/CVE-2022-33220/): Buffer over-read in Automotive multimedia (medium 5.1)
- [CVE-2022-3322](https://insights.sbomify.com/CVE-2022-3322/): Lock WARP switch bypass on WARP mobile client using iOS quick action (medium 6.7)
- [CVE-2022-33219](https://insights.sbomify.com/CVE-2022-33219/): Integer Overflow to Buffer Overflow in Automotive (critical 9.3)
- [CVE-2022-33218](https://insights.sbomify.com/CVE-2022-33218/): Improper Input Validation in Automotive (high 8.2)
- [CVE-2022-33217](https://insights.sbomify.com/CVE-2022-33217/): Memory corruption in Snapdragon Mobile (high 7.8)
- [CVE-2022-33216](https://insights.sbomify.com/CVE-2022-33216/): Improper Input Validation in Automotive (medium 6.0)
- [CVE-2022-33214](https://insights.sbomify.com/CVE-2022-33214/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-33213](https://insights.sbomify.com/CVE-2022-33213/): Memory Corruption in MODEM (high 7.5)
- [CVE-2022-33211](https://insights.sbomify.com/CVE-2022-33211/): Improper Input Validation in MODEM (critical 9.8)
- [CVE-2022-33210](https://insights.sbomify.com/CVE-2022-33210/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-3321](https://insights.sbomify.com/CVE-2022-3321/): Lock WARP switch feature bypass on WARP mobile client for iOS (medium 6.7)
- [CVE-2022-33209](https://insights.sbomify.com/CVE-2022-33209/): Privilege escalation in Intel(R) NUC Laptop Kits (high 7.8)
- [CVE-2022-33208](https://insights.sbomify.com/CVE-2022-33208/): Auth bypass in Machine automation controller NJ series, Machine automation controller NX series, Automation software 'Sysmac Studio', and Programmable Terminal (PT) NA series (high 8.1)
- [CVE-2022-33207](https://insights.sbomify.com/CVE-2022-33207/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33206](https://insights.sbomify.com/CVE-2022-33206/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33205](https://insights.sbomify.com/CVE-2022-33205/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33204](https://insights.sbomify.com/CVE-2022-33204/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33203](https://insights.sbomify.com/CVE-2022-33203/): BIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203 (high 7.5)
- [CVE-2022-33202](https://insights.sbomify.com/CVE-2022-33202/): Auth bypass in L2Blocker (high 8.1)
- [CVE-2022-33201](https://insights.sbomify.com/CVE-2022-33201/): WordPress MailerLite – Signup forms (official) plugin <= 1.5.7 - Cross-Site Request Forgery (CSRF) vulnerability (medium 6.3)
- [CVE-2022-3320](https://insights.sbomify.com/CVE-2022-3320/): Bypassing Cloudflare Zero Trust policies using warp-cli set-custom-endpoint command (medium 6.7)
- [CVE-2022-33198](https://insights.sbomify.com/CVE-2022-33198/): WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerability (critical 9.8)
- [CVE-2022-33196](https://insights.sbomify.com/CVE-2022-33196/): Misconfiguration in Intel(R) Xeon(R) Processors with Intel® Software Guard Extensions (SGX) (high 7.2)
- [CVE-2022-33195](https://insights.sbomify.com/CVE-2022-33195/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33194](https://insights.sbomify.com/CVE-2022-33194/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33193](https://insights.sbomify.com/CVE-2022-33193/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33192](https://insights.sbomify.com/CVE-2022-33192/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33191](https://insights.sbomify.com/CVE-2022-33191/): WordPress Testimonials plugin <= 3.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 4.1)
- [CVE-2022-33190](https://insights.sbomify.com/CVE-2022-33190/): Privilege escalation in Intel(R) SUR software (high 7.1)
- [CVE-2022-33189](https://insights.sbomify.com/CVE-2022-33189/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-33187](https://insights.sbomify.com/CVE-2022-33187/): Brocade SANnav before v2.2.1 logs usernames and encoded passwords in debug-enabled logs (medium 5.5)
- [CVE-2022-33186](https://insights.sbomify.com/CVE-2022-33186/): Command injection in Brocade Fabric OS (critical 9.8)
- [CVE-2022-33185](https://insights.sbomify.com/CVE-2022-33185/): Memory corruption in Brocade Fabric OS (high 7.8)
- [CVE-2022-33184](https://insights.sbomify.com/CVE-2022-33184/): Memory corruption in Brocade Fabric OS (high 7.8)
- [CVE-2022-33183](https://insights.sbomify.com/CVE-2022-33183/): Memory corruption in Brocade Fabric OS (high 8.8)
- [CVE-2022-33182](https://insights.sbomify.com/CVE-2022-33182/): Privilege escalation in Brocade Fabric OS (high 7.8)
- [CVE-2022-33181](https://insights.sbomify.com/CVE-2022-33181/): Information disclosure in Brocade Fabric OS (medium 5.5)
- [CVE-2022-33180](https://insights.sbomify.com/CVE-2022-33180/): Information disclosure in Brocade Fabric OS (medium 5.5)
- [CVE-2022-3318](https://insights.sbomify.com/CVE-2022-3318/): Use after free in Chrome (medium 4.3)
- [CVE-2022-33179](https://insights.sbomify.com/CVE-2022-33179/): Privilege escalation in Brocade Fabric OS (high 8.8)
- [CVE-2022-33178](https://insights.sbomify.com/CVE-2022-33178/): Code injection in Brocade Fabric OS (high 7.2)
- [CVE-2022-33177](https://insights.sbomify.com/CVE-2022-33177/): WordPress Booking Calendar plugin <= 9.2.1 - Cross-Site Request Forgery (CSRF) vulnerabiulity (medium 5.4)
- [CVE-2022-33176](https://insights.sbomify.com/CVE-2022-33176/): Privilege escalation in Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs (high 8.2)
- [CVE-2022-33175](https://insights.sbomify.com/CVE-2022-33175/): Information disclosure in powertekpdus:basic pdu firmware (critical 9.8)
- [CVE-2022-33174](https://insights.sbomify.com/CVE-2022-33174/): Auth bypass in powertekpdus:basic pdu firmware (critical 9.8)
- [CVE-2022-33173](https://insights.sbomify.com/CVE-2022-33173/): Weak cryptography in couchbase:couchbase server (high 7.5)
- [CVE-2022-33172](https://insights.sbomify.com/CVE-2022-33172/): Security feature bypass in bund:de.fac2 (medium 5.5)
- [CVE-2022-33171](https://insights.sbomify.com/CVE-2022-33171/): SQL injection in typeORM (critical 9.8)
- [CVE-2022-3317](https://insights.sbomify.com/CVE-2022-3317/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-33169](https://insights.sbomify.com/CVE-2022-33169/): Information disclosure in Robotic Process Automation (medium 5.3)
- [CVE-2022-33168](https://insights.sbomify.com/CVE-2022-33168/): IBM Security Directory Suite VA denial of service (high 7.5)
- [CVE-2022-33167](https://insights.sbomify.com/CVE-2022-33167/): IBM Security Directory Integrator information disclosure (low 3.7)
- [CVE-2022-33166](https://insights.sbomify.com/CVE-2022-33166/): IBM Security Directory Suite VA file upload (high 7.2)
- [CVE-2022-33165](https://insights.sbomify.com/CVE-2022-33165/): IBM Security Directory Server information disclosure (medium 6.8)
- [CVE-2022-33164](https://insights.sbomify.com/CVE-2022-33164/): IBM Security Directory Server path traversal (high 8.7)
- [CVE-2022-33163](https://insights.sbomify.com/CVE-2022-33163/): IBM Security Directory Suite VA information disclosure (medium 5.3)
- [CVE-2022-33162](https://insights.sbomify.com/CVE-2022-33162/): IBM Directory Server buffer overflow (high 7.3)
- [CVE-2022-33161](https://insights.sbomify.com/CVE-2022-33161/): IBM Security Directory Server information disclosure (medium 5.3)
- [CVE-2022-33160](https://insights.sbomify.com/CVE-2022-33160/): IBM Security Directory Suite information disclosure (low 3.7)
- [CVE-2022-3316](https://insights.sbomify.com/CVE-2022-3316/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-33159](https://insights.sbomify.com/CVE-2022-33159/): IBM Security Directory Suite VA information disclosure (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/302/