# Vulnerabilities published in 2022


- [CVE-2022-32787](https://insights.sbomify.com/CVE-2022-32787/): Memory corruption in macOS (high 8.8)
- [CVE-2022-32786](https://insights.sbomify.com/CVE-2022-32786/): Security feature bypass in macOS (medium 5.5)
- [CVE-2022-32785](https://insights.sbomify.com/CVE-2022-32785/): Null dereference in macOS (medium 5.5)
- [CVE-2022-32784](https://insights.sbomify.com/CVE-2022-32784/): Information disclosure in Safari (medium 6.5)
- [CVE-2022-32783](https://insights.sbomify.com/CVE-2022-32783/): Business logic in macOS (medium 5.5)
- [CVE-2022-32782](https://insights.sbomify.com/CVE-2022-32782/): Privilege escalation in macOS (medium 4.4)
- [CVE-2022-32781](https://insights.sbomify.com/CVE-2022-32781/): Privilege escalation in macOS (medium 4.4)
- [CVE-2022-3278](https://insights.sbomify.com/CVE-2022-3278/): NULL Pointer Dereference in vim/vim (medium 6.8)
- [CVE-2022-32778](https://insights.sbomify.com/CVE-2022-32778/): Information disclosure in AVideo (high 7.5)
- [CVE-2022-32777](https://insights.sbomify.com/CVE-2022-32777/): Misconfiguration in AVideo (high 7.5)
- [CVE-2022-32776](https://insights.sbomify.com/CVE-2022-32776/): WordPress Advanced Ads – Ad Manager & AdSense plugin <= 1.31.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-32775](https://insights.sbomify.com/CVE-2022-32775/): Integer overflow in iota All-In-One Security Kit (critical 9.0)
- [CVE-2022-32774](https://insights.sbomify.com/CVE-2022-32774/): Use after free in Foxit Reader (high 8.8)
- [CVE-2022-32773](https://insights.sbomify.com/CVE-2022-32773/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-32772](https://insights.sbomify.com/CVE-2022-32772/): Cross-site scripting in AVideo (critical 9.6)
- [CVE-2022-32771](https://insights.sbomify.com/CVE-2022-32771/): Cross-site scripting in AVideo (critical 9.6)
- [CVE-2022-32770](https://insights.sbomify.com/CVE-2022-32770/): Cross-site scripting in AVideo (critical 9.6)
- [CVE-2022-3277](https://insights.sbomify.com/CVE-2022-3277/): openstack-neutron uncontrolled resource consumption flaw (medium 6.5)
- [CVE-2022-32769](https://insights.sbomify.com/CVE-2022-32769/): Auth bypass in AVideo (medium 4.8)
- [CVE-2022-32768](https://insights.sbomify.com/CVE-2022-32768/): Auth bypass in AVideo (medium 4.8)
- [CVE-2022-32766](https://insights.sbomify.com/CVE-2022-32766/): Privilege escalation in Intel(R) BIOS firmware (high 7.2)
- [CVE-2022-32765](https://insights.sbomify.com/CVE-2022-32765/): Command injection in R1510 (critical 9.1)
- [CVE-2022-32764](https://insights.sbomify.com/CVE-2022-32764/): Race condition in Intel(R) DSA software (high 7.5)
- [CVE-2022-32763](https://insights.sbomify.com/CVE-2022-32763/): Cross-site scripting in lansweeper (critical 9.1)
- [CVE-2022-32761](https://insights.sbomify.com/CVE-2022-32761/): Path traversal in AVideo (medium 6.5)
- [CVE-2022-32760](https://insights.sbomify.com/CVE-2022-32760/): Denial of service in iota All-In-One Security Kit (high 8.6)
- [CVE-2022-3276](https://insights.sbomify.com/CVE-2022-3276/): Puppetlabs-mysql Command Injection (high 8.4)
- [CVE-2022-32759](https://insights.sbomify.com/CVE-2022-32759/): IBM Security Directory Server information disclosure (medium 5.3)
- [CVE-2022-32757](https://insights.sbomify.com/CVE-2022-32757/): IBM Security Directory Suite VA information disclosure (high 7.5)
- [CVE-2022-32756](https://insights.sbomify.com/CVE-2022-32756/): IBM Security Verify Directory information disclosure (low 2.7)
- [CVE-2022-32755](https://insights.sbomify.com/CVE-2022-32755/): IBM Security Directory Server external entity injection (medium 5.5)
- [CVE-2022-32754](https://insights.sbomify.com/CVE-2022-32754/): IBM Security Verify Directory cross-site scripting (medium 4.8)
- [CVE-2022-32753](https://insights.sbomify.com/CVE-2022-32753/): IBM Security Verify Directory information disclosure (medium 4.5)
- [CVE-2022-32752](https://insights.sbomify.com/CVE-2022-32752/): IBM Security Directory Suite VA command execution (high 7.2)
- [CVE-2022-32751](https://insights.sbomify.com/CVE-2022-32751/): IBM Security Verify Directory information disclosure (medium 5.3)
- [CVE-2022-32750](https://insights.sbomify.com/CVE-2022-32750/): Cross-site scripting in DataPower Gateway (medium 5.4)
- [CVE-2022-3275](https://insights.sbomify.com/CVE-2022-3275/): Puppetlabs-apt Command Injection (high 8.4)
- [CVE-2022-32749](https://insights.sbomify.com/CVE-2022-32749/): Apache Traffic Server: Improperly handled requests can cause crashes in specific plugins (high 7.5)
- [CVE-2022-32748](https://insights.sbomify.com/CVE-2022-32748/): Weak cryptography in EcoStruxure™ Cybersecurity Admin Expert (CAE) (high 7.9)
- [CVE-2022-32747](https://insights.sbomify.com/CVE-2022-32747/): Auth bypass in EcoStruxure™ Cybersecurity Admin Expert (CAE) (high 8.0)
- [CVE-2022-32746](https://insights.sbomify.com/CVE-2022-32746/): Use after free in samba (medium 5.4)
- [CVE-2022-32745](https://insights.sbomify.com/CVE-2022-32745/): Memory corruption in samba (high 8.1)
- [CVE-2022-32744](https://insights.sbomify.com/CVE-2022-32744/): Auth bypass in samba (high 8.8)
- [CVE-2022-32743](https://insights.sbomify.com/CVE-2022-32743/): Missing authorization in samba (high 7.5)
- [CVE-2022-32742](https://insights.sbomify.com/CVE-2022-32742/): Information disclosure in samba (medium 4.3)
- [CVE-2022-32741](https://insights.sbomify.com/CVE-2022-32741/): Information disclosure in Request New Password feature (medium 5.3)
- [CVE-2022-32740](https://insights.sbomify.com/CVE-2022-32740/): Information disclosure in the External Interface (low 3.5)
- [CVE-2022-3274](https://insights.sbomify.com/CVE-2022-3274/): rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed (high 7.0)
- [CVE-2022-32739](https://insights.sbomify.com/CVE-2022-32739/): OTRS version number is always in the exported ICS files (low 3.5)
- [CVE-2022-3273](https://insights.sbomify.com/CVE-2022-3273/): Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb (low 3.6)
- [CVE-2022-3272](https://insights.sbomify.com/CVE-2022-3272/): Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb (medium 5.3)
- [CVE-2022-3270](https://insights.sbomify.com/CVE-2022-3270/): Incomplete Documentation of remote functions in FESTO products. (critical 9.8)
- [CVE-2022-3269](https://insights.sbomify.com/CVE-2022-3269/): Session Fixation in ikus060/rdiffweb (medium 6.4)
- [CVE-2022-3268](https://insights.sbomify.com/CVE-2022-3268/): Weak Password Requirements in ikus060/minarca (critical 9.8)
- [CVE-2022-3267](https://insights.sbomify.com/CVE-2022-3267/): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (medium 6.8)
- [CVE-2022-32666](https://insights.sbomify.com/CVE-2022-32666/): Denial of service in MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8365 (high 7.5)
- [CVE-2022-32665](https://insights.sbomify.com/CVE-2022-32665/): Command injection in EN7528, EN7580 (critical 9.8)
- [CVE-2022-32664](https://insights.sbomify.com/CVE-2022-32664/): Command injection in EN7516, EN7528, EN7529, EN7561, EN7562, EN7580 (high 8.8)
- [CVE-2022-32663](https://insights.sbomify.com/CVE-2022-32663/): Null dereference in MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7668, MT7902, MT7915, MT7916, MT7921, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8788 (high 7.5)
- [CVE-2022-3266](https://insights.sbomify.com/CVE-2022-3266/): Memory corruption in Firefox (medium 5.5)
- [CVE-2022-32659](https://insights.sbomify.com/CVE-2022-32659/): Privilege escalation in MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986, MT8518S, MT8532 (medium 6.7)
- [CVE-2022-32658](https://insights.sbomify.com/CVE-2022-32658/): Privilege escalation in MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986 (medium 6.7)
- [CVE-2022-32657](https://insights.sbomify.com/CVE-2022-32657/): Privilege escalation in MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915, MT7916, MT7981, MT7986 (medium 6.7)
- [CVE-2022-32656](https://insights.sbomify.com/CVE-2022-32656/): Privilege escalation in MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8695, MT8696, MT8788 (medium 6.7)
- [CVE-2022-32655](https://insights.sbomify.com/CVE-2022-32655/): Privilege escalation in MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8695, MT8696, MT8788 (medium 6.7)
- [CVE-2022-32654](https://insights.sbomify.com/CVE-2022-32654/): Privilege escalation in MT5221, MT7603, MT7613, MT7615, MT7622, MT7628, MT7629, MT7663, MT7668, MT7682, MT7686, MT7687, MT7697, MT7902, MT7915, MT7916, MT7921, MT7933, MT7981, MT7986, MT8167S, MT8175, MT8362A, MT8365, MT8385, MT8518S, MT8532, MT8695, MT8696, MT8788 (medium 6.7)
- [CVE-2022-32653](https://insights.sbomify.com/CVE-2022-32653/): Use after free in MT6789, MT6855, MT6879, MT6983, MT8781 (medium 6.7)
- [CVE-2022-32652](https://insights.sbomify.com/CVE-2022-32652/): Use after free in MT6833, MT6853, MT6877, MT6893, MT8791 (medium 6.7)
- [CVE-2022-32651](https://insights.sbomify.com/CVE-2022-32651/): Use after free in MT6879, MT6983 (medium 6.7)
- [CVE-2022-32650](https://insights.sbomify.com/CVE-2022-32650/): Use after free in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-3265](https://insights.sbomify.com/CVE-2022-3265/): Cross-site scripting in GitLab (high 7.3)
- [CVE-2022-32649](https://insights.sbomify.com/CVE-2022-32649/): Use after free in MT6895, MT6983 (medium 6.7)
- [CVE-2022-32648](https://insights.sbomify.com/CVE-2022-32648/): Use after free in MT6735, MT6737, MT6739, MT6753, MT6757, MT6761, MT6763, MT6765, MT6768, MT6771, MT6779, MT6785, MT6789 (medium 6.4)
- [CVE-2022-32647](https://insights.sbomify.com/CVE-2022-32647/): Memory corruption in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-32646](https://insights.sbomify.com/CVE-2022-32646/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8675, MT8766, MT8781, MT8791 (medium 6.7)
- [CVE-2022-32645](https://insights.sbomify.com/CVE-2022-32645/): Race condition in MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797 (medium 4.1)
- [CVE-2022-32644](https://insights.sbomify.com/CVE-2022-32644/): Use after free in MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6891, MT6893, MT6895, MT6983, MT8781, MT8791, MT8791T, MT8797 (medium 6.4)
- [CVE-2022-32643](https://insights.sbomify.com/CVE-2022-32643/): Use after free in MT6879, MT6895, MT6983 (medium 6.4)
- [CVE-2022-32642](https://insights.sbomify.com/CVE-2022-32642/): Race condition in MT6879, MT6895, MT6983 (medium 6.4)
- [CVE-2022-32641](https://insights.sbomify.com/CVE-2022-32641/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8167, MT8168, MT8173, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 (medium 6.7)
- [CVE-2022-32640](https://insights.sbomify.com/CVE-2022-32640/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8167, MT8168, MT8173, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 (medium 6.7)
- [CVE-2022-32639](https://insights.sbomify.com/CVE-2022-32639/): Memory corruption in MT6739, MT6768, MT6771, MT6781, MT6785, MT6833, MT6853, MT6873, MT6877, MT8167, MT8167S, MT8362A, MT8385, MT8518S, MT8532, MT8765, MT8786, MT8791 (medium 4.4)
- [CVE-2022-32638](https://insights.sbomify.com/CVE-2022-32638/): Race condition in MT6781, MT6833, MT6853, MT6855, MT6873, MT6877, MT6885, MT6893, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 (medium 6.4)
- [CVE-2022-32637](https://insights.sbomify.com/CVE-2022-32637/): Memory corruption in MT6781, MT6785, MT6833, MT6853, MT6853T, MT6873, MT6883, MT6885, MT6889, MT8185, MT8789 (medium 6.7)
- [CVE-2022-32636](https://insights.sbomify.com/CVE-2022-32636/): Integer overflow in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 (medium 6.7)
- [CVE-2022-32635](https://insights.sbomify.com/CVE-2022-32635/): Memory corruption in MT6580, MT6735, MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6891, MT6893, MT6895, MT6983, MT8167, MT8168, MT8173, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 (high 7.8)
- [CVE-2022-32634](https://insights.sbomify.com/CVE-2022-32634/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32633](https://insights.sbomify.com/CVE-2022-32633/): Memory corruption in MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT7902, MT7921, MT8167S, MT8168, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8518, MT8532, MT8675, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32632](https://insights.sbomify.com/CVE-2022-32632/): Memory corruption in MT6580, MT6735, MT6765, MT6768, MT6771, MT6779, MT6785, MT6833, MT6853, MT6873, MT6877, MT6885, MT6983, MT7663, MT7668, MT7902, MT7921, MT7933, MT8168, MT8365, MT8518, MT8532, MT8666, MT8667, MT8675, MT8695, MT8696, MT8766, MT8768, MT8786, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32631](https://insights.sbomify.com/CVE-2022-32631/): Memory corruption in MT6580, MT6739, MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6873, MT6877, MT6879, MT6883, MT6895, MT6983, MT8168, MT8365, MT8385, MT8666, MT8667, MT8675, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32630](https://insights.sbomify.com/CVE-2022-32630/): Memory corruption in MT6789, MT6855, MT6895, MT6983, MT8781 (medium 6.7)
- [CVE-2022-3263](https://insights.sbomify.com/CVE-2022-3263/): Measuresoft ScadaPro Server Improper Access Control (high 7.8)
- [CVE-2022-32629](https://insights.sbomify.com/CVE-2022-32629/): Memory corruption in MT6833, MT6853, MT6855, MT6873, MT6877, MT6893, MT8791 (medium 6.7)
- [CVE-2022-32628](https://insights.sbomify.com/CVE-2022-32628/): Memory corruption in MT6833, MT6853, MT6855, MT6873, MT6877, MT6893, MT8791 (medium 6.7)
- [CVE-2022-32626](https://insights.sbomify.com/CVE-2022-32626/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365, MT8766, MT8781, MT8791 (medium 6.7)
- [CVE-2022-32625](https://insights.sbomify.com/CVE-2022-32625/): Memory corruption in MT6761, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8365, MT8675, MT8766, MT8781, MT8791 (medium 6.7)
- [CVE-2022-32624](https://insights.sbomify.com/CVE-2022-32624/): Memory corruption in MT6789, MT6855, MT6895, MT6983, MT8168, MT8365, MT8781 (medium 6.7)
- [CVE-2022-32623](https://insights.sbomify.com/CVE-2022-32623/): Memory corruption in MT6789, MT6855, MT6879, MT6895, MT6983, MT8168, MT8365, MT8781 (medium 6.7)
- [CVE-2022-32622](https://insights.sbomify.com/CVE-2022-32622/): Memory corruption in MT6789, MT6855, MT6879, MT6895, MT6983, MT8781 (medium 6.7)
- [CVE-2022-32621](https://insights.sbomify.com/CVE-2022-32621/): Race condition in MT6895, MT6983 (medium 6.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/306/