# Vulnerabilities published in 2022


- [CVE-2022-32999](https://insights.sbomify.com/CVE-2022-32999/): Supply chain in pypi:cloudlabeling (critical 9.8)
- [CVE-2022-32998](https://insights.sbomify.com/CVE-2022-32998/): Supply chain in pypi:cryptoasset-data-downloader (critical 9.8)
- [CVE-2022-32997](https://insights.sbomify.com/CVE-2022-32997/): Supply chain in pypi:rootinteractive (critical 9.8)
- [CVE-2022-32996](https://insights.sbomify.com/CVE-2022-32996/): Supply chain in pypi:django-navbar-client (critical 9.8)
- [CVE-2022-32995](https://insights.sbomify.com/CVE-2022-32995/): Server-side request forgery in halo:halo (critical 9.8)
- [CVE-2022-32994](https://insights.sbomify.com/CVE-2022-32994/): File upload in halo:halo (critical 9.8)
- [CVE-2022-32993](https://insights.sbomify.com/CVE-2022-32993/): Missing authorization in totolink:a7000r firmware (critical 9.8)
- [CVE-2022-32992](https://insights.sbomify.com/CVE-2022-32992/): SQL injection in online tours and travels management system project:online tours and travels management system (high 7.2)
- [CVE-2022-32991](https://insights.sbomify.com/CVE-2022-32991/): SQL injection in web based quiz system project:web based quiz system (high 8.8)
- [CVE-2022-32990](https://insights.sbomify.com/CVE-2022-32990/): Denial of service in gimp:gimp (medium 5.5)
- [CVE-2022-3299](https://insights.sbomify.com/CVE-2022-3299/): Open5GS AMF client.c denial of service (medium 4.3)
- [CVE-2022-32988](https://insights.sbomify.com/CVE-2022-32988/): Cross-site scripting in asus:dsl-n14u-b1 firmware (medium 5.4)
- [CVE-2022-32987](https://insights.sbomify.com/CVE-2022-32987/): Cross-site scripting in simple bakery shop management system project:simple bakery shop management system (medium 4.8)
- [CVE-2022-32985](https://insights.sbomify.com/CVE-2022-32985/): Hardcoded credentials in nexans:gigaswitch 641 desk v5 sfp-vi firmware (critical 9.8)
- [CVE-2022-32984](https://insights.sbomify.com/CVE-2022-32984/): Information disclosure in btcpayserver:btcpay server (high 7.5)
- [CVE-2022-32983](https://insights.sbomify.com/CVE-2022-32983/): Security feature bypass in nic:knot resolver (medium 5.3)
- [CVE-2022-32981](https://insights.sbomify.com/CVE-2022-32981/): Memory corruption in linux:linux kernel (high 7.8)
- [CVE-2022-3298](https://insights.sbomify.com/CVE-2022-3298/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (medium 5.3)
- [CVE-2022-32978](https://insights.sbomify.com/CVE-2022-32978/): Denial of service in jpeg:libjpeg (medium 6.5)
- [CVE-2022-32974](https://insights.sbomify.com/CVE-2022-32974/): Path traversal in Nessus (medium 6.5)
- [CVE-2022-32973](https://insights.sbomify.com/CVE-2022-32973/): Command injection in Nessus (high 8.8)
- [CVE-2022-32972](https://insights.sbomify.com/CVE-2022-32972/): Privilege escalation in infoblox:bloxone endpoint (high 7.8)
- [CVE-2022-32971](https://insights.sbomify.com/CVE-2022-32971/): Auth bypass in Intel(R) SUR software (low 3.1)
- [CVE-2022-32970](https://insights.sbomify.com/CVE-2022-32970/): WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS) (medium 4.1)
- [CVE-2022-3297](https://insights.sbomify.com/CVE-2022-3297/): Use After Free in vim/vim (high 7.8)
- [CVE-2022-32969](https://insights.sbomify.com/CVE-2022-32969/): Information disclosure in metamask:metamask (medium 5.9)
- [CVE-2022-32967](https://insights.sbomify.com/CVE-2022-32967/): Realtek RTL8111EP-CG/RTL8111FP-CG - Use of Hard-coded Credentials (low 2.1)
- [CVE-2022-32966](https://insights.sbomify.com/CVE-2022-32966/): Realtek RTL8111FP-CG - Missing Authorization (medium 6.5)
- [CVE-2022-32965](https://insights.sbomify.com/CVE-2022-32965/): ITPison OMICARD EDM - Use of Hard-coded Credentials (critical 9.8)
- [CVE-2022-32964](https://insights.sbomify.com/CVE-2022-32964/): ITPison OMICARD EDM - SQL Injection (critical 9.8)
- [CVE-2022-32963](https://insights.sbomify.com/CVE-2022-32963/): ITPison OMICARD EDM - Path Traversal-1 (high 7.5)
- [CVE-2022-32962](https://insights.sbomify.com/CVE-2022-32962/): HiCOS’ client-side citizen digital certificate - Double Free (medium 6.8)
- [CVE-2022-32961](https://insights.sbomify.com/CVE-2022-32961/): HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow (medium 6.8)
- [CVE-2022-32960](https://insights.sbomify.com/CVE-2022-32960/): HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow (medium 6.8)
- [CVE-2022-3296](https://insights.sbomify.com/CVE-2022-3296/): Stack-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-32959](https://insights.sbomify.com/CVE-2022-32959/): HiCOS’ client-side citizen digital certificate - Stack Buffer Overflow (medium 6.8)
- [CVE-2022-32958](https://insights.sbomify.com/CVE-2022-32958/): TEAMPLUS TECHNOLOGY INC. Teamplus Pro - Allocation of Resources Without Limits or Throttling (high 7.7)
- [CVE-2022-32955](https://insights.sbomify.com/CVE-2022-32955/): Race condition in insyde:insydeh2o (high 7.0)
- [CVE-2022-32954](https://insights.sbomify.com/CVE-2022-32954/): Race condition in insyde:insydeh2o (high 7.0)
- [CVE-2022-32953](https://insights.sbomify.com/CVE-2022-32953/): Race condition in insyde:insydeh2o (high 7.0)
- [CVE-2022-3295](https://insights.sbomify.com/CVE-2022-3295/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (medium 5.3)
- [CVE-2022-32949](https://insights.sbomify.com/CVE-2022-32949/): Privilege escalation in iOS and iPadOS (high 7.8)
- [CVE-2022-32948](https://insights.sbomify.com/CVE-2022-32948/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32947](https://insights.sbomify.com/CVE-2022-32947/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32946](https://insights.sbomify.com/CVE-2022-32946/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2022-32945](https://insights.sbomify.com/CVE-2022-32945/): Security feature bypass in macOS (medium 5.4)
- [CVE-2022-32944](https://insights.sbomify.com/CVE-2022-32944/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32943](https://insights.sbomify.com/CVE-2022-32943/): Security feature bypass in macOS (medium 5.3)
- [CVE-2022-32942](https://insights.sbomify.com/CVE-2022-32942/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32941](https://insights.sbomify.com/CVE-2022-32941/): Memory corruption in macOS (critical 9.8)
- [CVE-2022-32940](https://insights.sbomify.com/CVE-2022-32940/): Memory corruption in macOS (high 7.8)
- [CVE-2022-3294](https://insights.sbomify.com/CVE-2022-3294/): Node address isn't always verified when proxying (medium 6.6)
- [CVE-2022-32939](https://insights.sbomify.com/CVE-2022-32939/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2022-32938](https://insights.sbomify.com/CVE-2022-32938/): Path traversal in macOS (medium 5.3)
- [CVE-2022-32936](https://insights.sbomify.com/CVE-2022-32936/): Memory corruption in macOS (medium 5.5)
- [CVE-2022-32935](https://insights.sbomify.com/CVE-2022-32935/): Auth bypass in macOS (medium 4.6)
- [CVE-2022-32934](https://insights.sbomify.com/CVE-2022-32934/): Memory corruption in macOS (high 8.8)
- [CVE-2022-32933](https://insights.sbomify.com/CVE-2022-32933/): Information disclosure in macOS (medium 5.3)
- [CVE-2022-32932](https://insights.sbomify.com/CVE-2022-32932/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2022-32931](https://insights.sbomify.com/CVE-2022-32931/): Information disclosure in macOS (medium 5.5)
- [CVE-2022-3293](https://insights.sbomify.com/CVE-2022-3293/): Information disclosure in GitLab (low 3.5)
- [CVE-2022-32929](https://insights.sbomify.com/CVE-2022-32929/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2022-32928](https://insights.sbomify.com/CVE-2022-32928/): Auth bypass in macOS (medium 5.3)
- [CVE-2022-32927](https://insights.sbomify.com/CVE-2022-32927/): Denial of service in iOS and iPadOS (high 7.5)
- [CVE-2022-32926](https://insights.sbomify.com/CVE-2022-32926/): Memory corruption in macOS (medium 6.7)
- [CVE-2022-32925](https://insights.sbomify.com/CVE-2022-32925/): Memory corruption in iOS (high 7.1)
- [CVE-2022-32924](https://insights.sbomify.com/CVE-2022-32924/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32923](https://insights.sbomify.com/CVE-2022-32923/): Information disclosure in macOS (medium 6.5)
- [CVE-2022-32922](https://insights.sbomify.com/CVE-2022-32922/): Use after free in macOS (high 8.8)
- [CVE-2022-32920](https://insights.sbomify.com/CVE-2022-32920/): Information disclosure in Xcode (medium 5.5)
- [CVE-2022-3292](https://insights.sbomify.com/CVE-2022-3292/): Use of Cache Containing Sensitive Information in ikus060/rdiffweb (medium 4.3)
- [CVE-2022-32919](https://insights.sbomify.com/CVE-2022-32919/): Other in iOS and iPadOS (medium 4.7)
- [CVE-2022-32918](https://insights.sbomify.com/CVE-2022-32918/): Security feature bypass in macOS (medium 5.5)
- [CVE-2022-32917](https://insights.sbomify.com/CVE-2022-32917/): Apple iOS, iPadOS, and macOS Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-32916](https://insights.sbomify.com/CVE-2022-32916/): Memory corruption in iOS (medium 5.5)
- [CVE-2022-32915](https://insights.sbomify.com/CVE-2022-32915/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32914](https://insights.sbomify.com/CVE-2022-32914/): Use after free in macOS (high 7.8)
- [CVE-2022-32913](https://insights.sbomify.com/CVE-2022-32913/): Information disclosure in macOS (low 3.3)
- [CVE-2022-32912](https://insights.sbomify.com/CVE-2022-32912/): Memory corruption in Safari (high 8.8)
- [CVE-2022-32911](https://insights.sbomify.com/CVE-2022-32911/): Memory corruption in iOS (high 7.8)
- [CVE-2022-32910](https://insights.sbomify.com/CVE-2022-32910/): Security feature bypass in macOS (high 7.5)
- [CVE-2022-3291](https://insights.sbomify.com/CVE-2022-3291/): Information disclosure in GitLab (medium 6.5)
- [CVE-2022-32909](https://insights.sbomify.com/CVE-2022-32909/): Information disclosure in iOS (medium 5.5)
- [CVE-2022-32908](https://insights.sbomify.com/CVE-2022-32908/): Memory corruption in iOS (high 7.8)
- [CVE-2022-32907](https://insights.sbomify.com/CVE-2022-32907/): Privilege escalation in iOS (high 7.8)
- [CVE-2022-32906](https://insights.sbomify.com/CVE-2022-32906/): Weak cryptography in Apple Music for Android (medium 5.3)
- [CVE-2022-32905](https://insights.sbomify.com/CVE-2022-32905/): Path traversal in macOS (high 7.8)
- [CVE-2022-32904](https://insights.sbomify.com/CVE-2022-32904/): Security feature bypass in macOS (medium 5.5)
- [CVE-2022-32903](https://insights.sbomify.com/CVE-2022-32903/): Use after free in iOS (high 7.8)
- [CVE-2022-32902](https://insights.sbomify.com/CVE-2022-32902/): Security feature bypass in macOS (medium 5.5)
- [CVE-2022-32900](https://insights.sbomify.com/CVE-2022-32900/): Privilege escalation in macOS (high 7.8)
- [CVE-2022-3290](https://insights.sbomify.com/CVE-2022-3290/): Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb (medium 5.7)
- [CVE-2022-32899](https://insights.sbomify.com/CVE-2022-32899/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32898](https://insights.sbomify.com/CVE-2022-32898/): Memory corruption in macOS (high 7.8)
- [CVE-2022-32897](https://insights.sbomify.com/CVE-2022-32897/): Memory corruption in macOS (high 8.1)
- [CVE-2022-32896](https://insights.sbomify.com/CVE-2022-32896/): Information disclosure in macOS (medium 5.5)
- [CVE-2022-32895](https://insights.sbomify.com/CVE-2022-32895/): Race condition in macOS (medium 4.7)
- [CVE-2022-32894](https://insights.sbomify.com/CVE-2022-32894/): Apple iOS and macOS Out-of-Bounds Write (high 7.8, exploited in the wild)
- [CVE-2022-32893](https://insights.sbomify.com/CVE-2022-32893/): Apple iOS and macOS Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2022-32892](https://insights.sbomify.com/CVE-2022-32892/): Security feature bypass in macOS (medium 4.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/304/