# Vulnerabilities published in 2022


- [CVE-2022-33158](https://insights.sbomify.com/CVE-2022-33158/): Privilege escalation in Trend Micro VPN Proxy One Pro (Consumer) (high 7.8)
- [CVE-2022-33157](https://insights.sbomify.com/CVE-2022-33157/): libconnect Extension for Typo3 Vulnerable to XSS (medium 6.1)
- [CVE-2022-33156](https://insights.sbomify.com/CVE-2022-33156/): brotkrueml/typo3-matomo-integration vulnerable to Cross-Site Scripting (medium 6.1)
- [CVE-2022-33155](https://insights.sbomify.com/CVE-2022-33155/): Cross site scripting in ameos_tarteaucitron (medium 5.4)
- [CVE-2022-33154](https://insights.sbomify.com/CVE-2022-33154/): brotkrueml/schema fails to properly encode user input for output in HTML context, leading to XSS (medium 5.4)
- [CVE-2022-33151](https://insights.sbomify.com/CVE-2022-33151/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2022-33150](https://insights.sbomify.com/CVE-2022-33150/): Command injection in R1510 (critical 9.1)
- [CVE-2022-3315](https://insights.sbomify.com/CVE-2022-3315/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-33149](https://insights.sbomify.com/CVE-2022-33149/): SQL injection in AVideo (high 8.3)
- [CVE-2022-33148](https://insights.sbomify.com/CVE-2022-33148/): SQL injection in AVideo (high 8.3)
- [CVE-2022-33147](https://insights.sbomify.com/CVE-2022-33147/): SQL injection in AVideo (high 8.3)
- [CVE-2022-33146](https://insights.sbomify.com/CVE-2022-33146/): Open redirect in web2py (medium 6.1)
- [CVE-2022-33142](https://insights.sbomify.com/CVE-2022-33142/): WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability (high 7.7)
- [CVE-2022-33140](https://insights.sbomify.com/CVE-2022-33140/): Improper Neutralization of Command Elements in Shell User Group Provider (high 8.8)
- [CVE-2022-3314](https://insights.sbomify.com/CVE-2022-3314/): Use after free in Chrome (medium 6.5)
- [CVE-2022-33139](https://insights.sbomify.com/CVE-2022-33139/): Auth bypass in Cerberus DMS (critical 9.8)
- [CVE-2022-33138](https://insights.sbomify.com/CVE-2022-33138/): Missing authorization in SIMATIC MV540 H (high 7.5)
- [CVE-2022-33137](https://insights.sbomify.com/CVE-2022-33137/): Auth bypass in SIMATIC MV540 H (high 8.0)
- [CVE-2022-3313](https://insights.sbomify.com/CVE-2022-3313/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-33128](https://insights.sbomify.com/CVE-2022-33128/): SQL injection in ruijienetworks:rg-eg350 firmware (critical 9.1)
- [CVE-2022-33127](https://insights.sbomify.com/CVE-2022-33127/): Improper handling of double quotes in file name in Diffy in Windows environment (critical 9.8)
- [CVE-2022-33124](https://insights.sbomify.com/CVE-2022-33124/): Denial of service in aiohttp:aiohttp (medium 5.5)
- [CVE-2022-33122](https://insights.sbomify.com/CVE-2022-33122/): Cross-site scripting in eyoucms:eyoucms (medium 4.8)
- [CVE-2022-33121](https://insights.sbomify.com/CVE-2022-33121/): Cross-site request forgery in 1234n:minicms (high 8.1)
- [CVE-2022-3312](https://insights.sbomify.com/CVE-2022-3312/): Security feature bypass in Chrome (medium 4.6)
- [CVE-2022-33119](https://insights.sbomify.com/CVE-2022-33119/): Cross-site scripting in nuuo:nvrsolo firmware (medium 6.1)
- [CVE-2022-33116](https://insights.sbomify.com/CVE-2022-33116/): Path traversal in openeclass:openeclass (medium 6.5)
- [CVE-2022-33114](https://insights.sbomify.com/CVE-2022-33114/): SQL injection in jflyfox:jfinal cms (high 7.2)
- [CVE-2022-33113](https://insights.sbomify.com/CVE-2022-33113/): Cross-site Scripting in Jfinal CMS (medium 5.4)
- [CVE-2022-3311](https://insights.sbomify.com/CVE-2022-3311/): Use after free in Chrome (medium 6.5)
- [CVE-2022-33108](https://insights.sbomify.com/CVE-2022-33108/): Memory corruption in xpdfreader:xpdf (high 7.8)
- [CVE-2022-33107](https://insights.sbomify.com/CVE-2022-33107/): Deserialization of Untrusted Data in topthink/framework (critical 9.8)
- [CVE-2022-33106](https://insights.sbomify.com/CVE-2022-33106/): Auth bypass in wijungle:u250 firmware (critical 9.8)
- [CVE-2022-33105](https://insights.sbomify.com/CVE-2022-33105/): Denial of service in redis:redis (high 7.5)
- [CVE-2022-33103](https://insights.sbomify.com/CVE-2022-33103/): Memory corruption in denx:u-boot (high 7.8)
- [CVE-2022-3310](https://insights.sbomify.com/CVE-2022-3310/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-33099](https://insights.sbomify.com/CVE-2022-33099/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2022-33098](https://insights.sbomify.com/CVE-2022-33098/): Cross-site scripting in magnolia-cms:magnolia cms (medium 6.1)
- [CVE-2022-33097](https://insights.sbomify.com/CVE-2022-33097/): SQL injection in 74cms:74cmsse (high 7.5)
- [CVE-2022-33096](https://insights.sbomify.com/CVE-2022-33096/): SQL injection in 74cms:74cmsse (high 7.5)
- [CVE-2022-33095](https://insights.sbomify.com/CVE-2022-33095/): SQL injection in 74cms:74cmsse (high 7.5)
- [CVE-2022-33094](https://insights.sbomify.com/CVE-2022-33094/): SQL injection in 74cms:74cmsse (high 7.5)
- [CVE-2022-33093](https://insights.sbomify.com/CVE-2022-33093/): SQL injection in 74cms:74cmsse (high 7.5)
- [CVE-2022-33092](https://insights.sbomify.com/CVE-2022-33092/): SQL injection in 74cms:74cmsse (high 7.5)
- [CVE-2022-3309](https://insights.sbomify.com/CVE-2022-3309/): Use after free in Chrome (medium 6.5)
- [CVE-2022-33087](https://insights.sbomify.com/CVE-2022-33087/): Memory corruption in tp-link:archer a5 firmware (high 7.5)
- [CVE-2022-33085](https://insights.sbomify.com/CVE-2022-33085/): Code injection in ecisp:espcms-p8 (high 7.2)
- [CVE-2022-33082](https://insights.sbomify.com/CVE-2022-33082/): Denial of service in Open Policy Agent (high 7.5)
- [CVE-2022-3308](https://insights.sbomify.com/CVE-2022-3308/): Security feature bypass in Chrome (high 7.4)
- [CVE-2022-33077](https://insights.sbomify.com/CVE-2022-33077/): Missing authorization in nopcommerce:nopcommerce (high 7.5)
- [CVE-2022-33075](https://insights.sbomify.com/CVE-2022-33075/): Cross-site scripting in phpgurukul:zoo management system (medium 5.4)
- [CVE-2022-33070](https://insights.sbomify.com/CVE-2022-33070/): Denial of service in fedoraproject:fedora (medium 5.5)
- [CVE-2022-3307](https://insights.sbomify.com/CVE-2022-3307/): Use after free in Chrome (high 8.8)
- [CVE-2022-33069](https://insights.sbomify.com/CVE-2022-33069/): Denial of service in soliditylang:solidity (medium 5.5)
- [CVE-2022-33068](https://insights.sbomify.com/CVE-2022-33068/): Integer overflow in fedoraproject:fedora (medium 5.5)
- [CVE-2022-33067](https://insights.sbomify.com/CVE-2022-33067/): Denial of service in long range zip project:long range zip (medium 5.5)
- [CVE-2022-33065](https://insights.sbomify.com/CVE-2022-33065/): Integer overflow in libsndfile project:libsndfile (high 7.8)
- [CVE-2022-33064](https://insights.sbomify.com/CVE-2022-33064/): Memory corruption in libsndfile project:libsndfile (high 7.8)
- [CVE-2022-33061](https://insights.sbomify.com/CVE-2022-33061/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33060](https://insights.sbomify.com/CVE-2022-33060/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-3306](https://insights.sbomify.com/CVE-2022-3306/): Use after free in Chrome (high 8.8)
- [CVE-2022-33059](https://insights.sbomify.com/CVE-2022-33059/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33058](https://insights.sbomify.com/CVE-2022-33058/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33057](https://insights.sbomify.com/CVE-2022-33057/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33056](https://insights.sbomify.com/CVE-2022-33056/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33055](https://insights.sbomify.com/CVE-2022-33055/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-3305](https://insights.sbomify.com/CVE-2022-3305/): Use after free in Chrome (high 8.8)
- [CVE-2022-33049](https://insights.sbomify.com/CVE-2022-33049/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33048](https://insights.sbomify.com/CVE-2022-33048/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-33047](https://insights.sbomify.com/CVE-2022-33047/): Memory corruption in otfcc project:otfcc (critical 9.8)
- [CVE-2022-33043](https://insights.sbomify.com/CVE-2022-33043/): Cross-site scripting in urtracker:urtracker (medium 5.4)
- [CVE-2022-33042](https://insights.sbomify.com/CVE-2022-33042/): SQL injection in online railway reservation system project:online railway reservation system (high 7.2)
- [CVE-2022-3304](https://insights.sbomify.com/CVE-2022-3304/): Use after free in Chrome (high 8.8)
- [CVE-2022-33037](https://insights.sbomify.com/CVE-2022-33037/): Other in orwell-dev-cpp project:orwell-dev-cpp (high 7.8)
- [CVE-2022-33036](https://insights.sbomify.com/CVE-2022-33036/): Other in embarcadero:dev-c\+\+ (high 7.8)
- [CVE-2022-33035](https://insights.sbomify.com/CVE-2022-33035/): Privilege escalation in netsarang:xlpd (high 7.8)
- [CVE-2022-33034](https://insights.sbomify.com/CVE-2022-33034/): Memory corruption in gnu:libredwg (high 7.8)
- [CVE-2022-33033](https://insights.sbomify.com/CVE-2022-33033/): Memory corruption in gnu:libredwg (high 7.8)
- [CVE-2022-33032](https://insights.sbomify.com/CVE-2022-33032/): Memory corruption in gnu:libredwg (high 7.8)
- [CVE-2022-3303](https://insights.sbomify.com/CVE-2022-3303/): Race condition in Linux kernel (medium 4.7)
- [CVE-2022-33028](https://insights.sbomify.com/CVE-2022-33028/): Memory corruption in gnu:libredwg (high 7.8)
- [CVE-2022-33027](https://insights.sbomify.com/CVE-2022-33027/): Use after free in gnu:libredwg (high 7.8)
- [CVE-2022-33026](https://insights.sbomify.com/CVE-2022-33026/): Memory corruption in gnu:libredwg (high 7.8)
- [CVE-2022-33025](https://insights.sbomify.com/CVE-2022-33025/): Use after free in gnu:libredwg (high 7.8)
- [CVE-2022-33024](https://insights.sbomify.com/CVE-2022-33024/): Denial of service in gnu:libredwg (high 7.5)
- [CVE-2022-33023](https://insights.sbomify.com/CVE-2022-33023/): Other in openhwgroup:cva6 (high 7.5)
- [CVE-2022-33021](https://insights.sbomify.com/CVE-2022-33021/): Memory corruption in openhwgroup:cva6 (high 7.5)
- [CVE-2022-3302](https://insights.sbomify.com/CVE-2022-3302/): Anti-Spam by CleanTalk < 5.185.1 - Admin+ SQLi (high 7.2)
- [CVE-2022-33012](https://insights.sbomify.com/CVE-2022-33012/): Account Takeover Through Password Reset Poisoning (high 8.8)
- [CVE-2022-33011](https://insights.sbomify.com/CVE-2022-33011/): Known vulnerable to account takeover via host header injection attack in v1.3.1 (high 8.8)
- [CVE-2022-3301](https://insights.sbomify.com/CVE-2022-3301/): Improper Cleanup on Thrown Exception in ikus060/rdiffweb (medium 4.3)
- [CVE-2022-33009](https://insights.sbomify.com/CVE-2022-33009/): Cross-site scripting in lightcms project:lightcms (medium 4.8)
- [CVE-2022-33007](https://insights.sbomify.com/CVE-2022-33007/): Memory corruption in trendnet:tew-751dr firmware (high 8.8)
- [CVE-2022-33005](https://insights.sbomify.com/CVE-2022-33005/): Cross-site scripting in deltaww:diaenergie (medium 6.1)
- [CVE-2022-33004](https://insights.sbomify.com/CVE-2022-33004/): Supply chain in pypi:beginner (critical 9.8)
- [CVE-2022-33003](https://insights.sbomify.com/CVE-2022-33003/): Supply chain in pypi:watools (critical 9.8)
- [CVE-2022-33002](https://insights.sbomify.com/CVE-2022-33002/): Supply chain in pypi:explore (critical 9.8)
- [CVE-2022-33001](https://insights.sbomify.com/CVE-2022-33001/): Supply chain in pypi:aamiles (critical 9.8)
- [CVE-2022-33000](https://insights.sbomify.com/CVE-2022-33000/): Supply chain in pypi:ml-scanner (critical 9.8)
- [CVE-2022-3300](https://insights.sbomify.com/CVE-2022-3300/): Form Maker by 10Web < 1.15.6 - Admin+ SQLI (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/303/