# Vulnerabilities published in 2022


- [CVE-2022-32620](https://insights.sbomify.com/CVE-2022-32620/): Memory corruption in MT6781, MT6789, MT6833, MT6853, MT6873, MT6877, MT8781, MT8791 (medium 6.7)
- [CVE-2022-3262](https://insights.sbomify.com/CVE-2022-3262/): Misconfiguration in openshift (high 8.1)
- [CVE-2022-32619](https://insights.sbomify.com/CVE-2022-32619/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797 (medium 6.7)
- [CVE-2022-32618](https://insights.sbomify.com/CVE-2022-32618/): Memory corruption in MT6833, MT6873, MT6893, MT8798 (medium 6.8)
- [CVE-2022-32617](https://insights.sbomify.com/CVE-2022-32617/): Memory corruption in MT6789, MT6855, MT6895, MT6983, MT8798 (medium 6.8)
- [CVE-2022-32616](https://insights.sbomify.com/CVE-2022-32616/): Memory corruption in MT6983, MT8871, MT8891 (medium 6.7)
- [CVE-2022-32615](https://insights.sbomify.com/CVE-2022-32615/): Memory corruption in MT6983, MT8871, MT8891 (medium 6.7)
- [CVE-2022-32614](https://insights.sbomify.com/CVE-2022-32614/): Memory corruption in MT6789, MT6855, MT6879, MT6893, MT6983, MT8168, MT8365, MT8797, MT8798 (medium 6.7)
- [CVE-2022-32613](https://insights.sbomify.com/CVE-2022-32613/): Race condition in MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798 (medium 6.4)
- [CVE-2022-32612](https://insights.sbomify.com/CVE-2022-32612/): Use after free in MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798 (medium 6.4)
- [CVE-2022-32611](https://insights.sbomify.com/CVE-2022-32611/): Memory corruption in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-32610](https://insights.sbomify.com/CVE-2022-32610/): Use after free in MT6762, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798 (medium 6.4)
- [CVE-2022-3261](https://insights.sbomify.com/CVE-2022-3261/): Plain-text passwords saved in /var/log/messages (medium 4.4)
- [CVE-2022-32609](https://insights.sbomify.com/CVE-2022-32609/): Use after free in MT6762, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8168, MT8185, MT8365, MT8696, MT8768, MT8786, MT8789, MT8791, MT8797, MT8798 (medium 6.4)
- [CVE-2022-32608](https://insights.sbomify.com/CVE-2022-32608/): Use after free in MT6893, MT6895 (medium 6.4)
- [CVE-2022-32607](https://insights.sbomify.com/CVE-2022-32607/): Use after free in MT6580, MT6739, MT6761, MT6762, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8696, MT8765, MT8766, MT8768, MT8786, MT8788, MT8791, MT8791T, MT8795T, MT8797, MT8871, MT8891 (medium 6.7)
- [CVE-2022-32605](https://insights.sbomify.com/CVE-2022-32605/): Memory corruption in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-32603](https://insights.sbomify.com/CVE-2022-32603/): Memory corruption in MT6879, MT6893, MT6895, MT6985, MT8795T, MT8798 (medium 6.7)
- [CVE-2022-32602](https://insights.sbomify.com/CVE-2022-32602/): Memory corruption in MT6833, MT6883, MT6983, MT8183, MT8185, MT8321, MT8385, MT8675, MT8765, MT8766, MT8768, MT8786, MT8789, MT8791, MT8791T, MT8797 (medium 5.5)
- [CVE-2022-32601](https://insights.sbomify.com/CVE-2022-32601/): Privilege escalation in MT6739, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8795T, MT8797, MT8798 (high 7.8)
- [CVE-2022-3260](https://insights.sbomify.com/CVE-2022-3260/): Security feature bypass in Openshift (medium 4.8)
- [CVE-2022-32599](https://insights.sbomify.com/CVE-2022-32599/): Memory corruption in MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8789 (medium 6.7)
- [CVE-2022-32598](https://insights.sbomify.com/CVE-2022-32598/): Memory corruption in MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32597](https://insights.sbomify.com/CVE-2022-32597/): Memory corruption in MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32596](https://insights.sbomify.com/CVE-2022-32596/): Memory corruption in MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32595](https://insights.sbomify.com/CVE-2022-32595/): Memory corruption in MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 4.4)
- [CVE-2022-32594](https://insights.sbomify.com/CVE-2022-32594/): Memory corruption in MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8385, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-32593](https://insights.sbomify.com/CVE-2022-32593/): Memory corruption in MT6983 (medium 6.7)
- [CVE-2022-32592](https://insights.sbomify.com/CVE-2022-32592/): Memory corruption in MT6855, MT6879, MT6895, MT6983, MT8185, MT8321, MT8385, MT8518, MT8666, MT8675, MT8765, MT8768, MT8786, MT8788, MT8789 (medium 6.7)
- [CVE-2022-32591](https://insights.sbomify.com/CVE-2022-32591/): Denial of service in MT6580, MT6739, MT6753, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8321, MT8385, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (high 7.5)
- [CVE-2022-32590](https://insights.sbomify.com/CVE-2022-32590/): Use after free in MT6761, MT6762, MT6765, MT6768, MT6769, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT7663, MT7668, MT7902, MT7921, MT8167S, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8512A, MT8518, MT8532, MT8667, MT8695, MT8696, MT8766, MT8768, MT8786, MT8788, MT8789 (medium 6.7)
- [CVE-2022-3259](https://insights.sbomify.com/CVE-2022-3259/): Misconfiguration in OpenShift (high 7.4)
- [CVE-2022-32589](https://insights.sbomify.com/CVE-2022-32589/): Denial of service in MT6761, MT6762, MT6765, MT6768, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT7663, MT7668, MT7902, MT7921, MT8167S, MT8175, MT8183, MT8185, MT8362A, MT8365, MT8385, MT8512A, MT8518, MT8532, MT8667, MT8766, MT8768, MT8786, MT8788, MT8789 (high 7.5)
- [CVE-2022-32588](https://insights.sbomify.com/CVE-2022-32588/): Memory corruption in ImageGear (critical 9.8)
- [CVE-2022-32587](https://insights.sbomify.com/CVE-2022-32587/): WordPress WP Page Widget plugin <= 3.9 - Cross-Site Request Forgery (CSRF) vulnerability (medium 5.4)
- [CVE-2022-32586](https://insights.sbomify.com/CVE-2022-32586/): Command injection in iota All-In-One Security Kit (high 8.0)
- [CVE-2022-32585](https://insights.sbomify.com/CVE-2022-32585/): Command injection in R1510 (critical 9.1)
- [CVE-2022-32583](https://insights.sbomify.com/CVE-2022-32583/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2022-32582](https://insights.sbomify.com/CVE-2022-32582/): Missing authorization in Intel(R) NUC Boards, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Pro Compute Element (medium 5.3)
- [CVE-2022-3258](https://insights.sbomify.com/CVE-2022-3258/): Misconfiguration in Workforce Access (low 3.7)
- [CVE-2022-32579](https://insights.sbomify.com/CVE-2022-32579/): Privilege escalation in Intel(R) NUC Laptop Kits (medium 6.9)
- [CVE-2022-32578](https://insights.sbomify.com/CVE-2022-32578/): Privilege escalation in Intel(R) NUC Pro Software Suite (medium 6.7)
- [CVE-2022-32577](https://insights.sbomify.com/CVE-2022-32577/): Other in Intel(R) NUC Kits (low 3.4)
- [CVE-2022-32576](https://insights.sbomify.com/CVE-2022-32576/): Privilege escalation in Intel(R) Unite(R) Plugin SDK (medium 6.7)
- [CVE-2022-32575](https://insights.sbomify.com/CVE-2022-32575/): Memory corruption in Intel(R) Trace Analyzer and Collector software (medium 4.8)
- [CVE-2022-32574](https://insights.sbomify.com/CVE-2022-32574/): Memory corruption in iota All-In-One Security Kit (high 7.5)
- [CVE-2022-32573](https://insights.sbomify.com/CVE-2022-32573/): Path traversal in lansweeper (critical 9.9)
- [CVE-2022-32572](https://insights.sbomify.com/CVE-2022-32572/): Command injection in AVideo (critical 9.9)
- [CVE-2022-32570](https://insights.sbomify.com/CVE-2022-32570/): Auth bypass in Intel(R) Quartus Prime Pro and Standard edition software (medium 6.7)
- [CVE-2022-3257](https://insights.sbomify.com/CVE-2022-3257/): Server-side Denial of Service while processing a specifically crafted GIF file (low 3.1)
- [CVE-2022-32569](https://insights.sbomify.com/CVE-2022-32569/): Memory corruption in Intel(R) NUC M15 Laptop Kits (high 7.5)
- [CVE-2022-32567](https://insights.sbomify.com/CVE-2022-32567/): Cross-site scripting in appfire:jira misc custom fields (medium 5.4)
- [CVE-2022-32565](https://insights.sbomify.com/CVE-2022-32565/): Information disclosure in couchbase:couchbase server (high 7.5)
- [CVE-2022-32564](https://insights.sbomify.com/CVE-2022-32564/): Information disclosure in couchbase:couchbase server (high 7.5)
- [CVE-2022-32563](https://insights.sbomify.com/CVE-2022-32563/): Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication (critical 9.8)
- [CVE-2022-32562](https://insights.sbomify.com/CVE-2022-32562/): Missing authorization in couchbase:couchbase server (high 8.8)
- [CVE-2022-32561](https://insights.sbomify.com/CVE-2022-32561/): Information disclosure in couchbase:couchbase server (medium 4.9)
- [CVE-2022-32560](https://insights.sbomify.com/CVE-2022-32560/): Missing authorization in couchbase:couchbase server (high 7.5)
- [CVE-2022-3256](https://insights.sbomify.com/CVE-2022-3256/): Use After Free in vim/vim (high 7.8)
- [CVE-2022-32559](https://insights.sbomify.com/CVE-2022-32559/): Information disclosure in couchbase:couchbase server (critical 9.1)
- [CVE-2022-32558](https://insights.sbomify.com/CVE-2022-32558/): Information disclosure in couchbase:couchbase server (high 7.5)
- [CVE-2022-32557](https://insights.sbomify.com/CVE-2022-32557/): Missing authorization in couchbase:couchbase server (high 7.5)
- [CVE-2022-32556](https://insights.sbomify.com/CVE-2022-32556/): Information disclosure in couchbase:couchbase server (high 7.5)
- [CVE-2022-32555](https://insights.sbomify.com/CVE-2022-32555/): Cross-site request forgery in unisys:data exchange management studio (high 8.8)
- [CVE-2022-32554](https://insights.sbomify.com/CVE-2022-32554/): Hardcoded credentials in purestorage:purity\/\/fa (critical 9.8)
- [CVE-2022-32553](https://insights.sbomify.com/CVE-2022-32553/): Privilege escalation in purestorage:purity\/\/fa (high 8.8)
- [CVE-2022-32552](https://insights.sbomify.com/CVE-2022-32552/): Privilege escalation in purestorage:purity\/\/fa (high 8.8)
- [CVE-2022-32551](https://insights.sbomify.com/CVE-2022-32551/): Path traversal in zohocorp:manageengine servicedesk plus msp (high 7.5)
- [CVE-2022-32550](https://insights.sbomify.com/CVE-2022-32550/): Security feature bypass in 1password:1password (medium 4.8)
- [CVE-2022-3255](https://insights.sbomify.com/CVE-2022-3255/): Cross-site Scripting (XSS) - Reflected in pimcore/pimcore (medium 6.8)
- [CVE-2022-32549](https://insights.sbomify.com/CVE-2022-32549/): log injection in Sling logging (medium 5.3)
- [CVE-2022-32548](https://insights.sbomify.com/CVE-2022-32548/): Memory corruption in draytek:vigor1000b firmware (critical 10.0)
- [CVE-2022-32547](https://insights.sbomify.com/CVE-2022-32547/): Memory corruption in ImageMagick (high 7.8)
- [CVE-2022-32546](https://insights.sbomify.com/CVE-2022-32546/): Integer overflow in ImageMagick (high 7.8)
- [CVE-2022-32545](https://insights.sbomify.com/CVE-2022-32545/): Integer overflow in ImageMagick (high 7.8)
- [CVE-2022-32544](https://insights.sbomify.com/CVE-2022-32544/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2022-32543](https://insights.sbomify.com/CVE-2022-32543/): Integer overflow in Alyac (high 7.3)
- [CVE-2022-32540](https://insights.sbomify.com/CVE-2022-32540/): Information disclosure in BVMS (high 7.4)
- [CVE-2022-3254](https://insights.sbomify.com/CVE-2022-3254/): AWP Classifieds Plugin < 4.3 - Unauthenticated SQLi (critical 9.8)
- [CVE-2022-32537](https://insights.sbomify.com/CVE-2022-32537/): Medtronic MiniMed 600 Series Pump System Communication Issue (medium 4.8)
- [CVE-2022-32536](https://insights.sbomify.com/CVE-2022-32536/): Privilege Escalation (high 8.8)
- [CVE-2022-32535](https://insights.sbomify.com/CVE-2022-32535/): Web server runs as root (medium 4.8)
- [CVE-2022-32534](https://insights.sbomify.com/CVE-2022-32534/): OS Command Injection (high 8.8)
- [CVE-2022-32533](https://insights.sbomify.com/CVE-2022-32533/): Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues (critical 9.8)
- [CVE-2022-32532](https://insights.sbomify.com/CVE-2022-32532/): Authentication Bypass Vulnerability (critical 9.8)
- [CVE-2022-32531](https://insights.sbomify.com/CVE-2022-32531/): Apache BookKeeper: Java Client Uses Connection to Host that Failed Hostname Verification (medium 5.9)
- [CVE-2022-32530](https://insights.sbomify.com/CVE-2022-32530/): Other in Geo SCADA Mobile (medium 4.8)
- [CVE-2022-32529](https://insights.sbomify.com/CVE-2022-32529/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32528](https://insights.sbomify.com/CVE-2022-32528/): Missing authorization in IGSS Data Server (IGSSdataServer.exe) (high 8.6)
- [CVE-2022-32527](https://insights.sbomify.com/CVE-2022-32527/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32526](https://insights.sbomify.com/CVE-2022-32526/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32525](https://insights.sbomify.com/CVE-2022-32525/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32524](https://insights.sbomify.com/CVE-2022-32524/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32523](https://insights.sbomify.com/CVE-2022-32523/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32522](https://insights.sbomify.com/CVE-2022-32522/): Memory corruption in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-32521](https://insights.sbomify.com/CVE-2022-32521/): Deserialization in Data Center Expert (high 7.1)
- [CVE-2022-32520](https://insights.sbomify.com/CVE-2022-32520/): Information disclosure in Data Center Expert (high 8.0)
- [CVE-2022-3252](https://insights.sbomify.com/CVE-2022-3252/): SwiftNIO Extras vulnerable to improper detection of complete HTTP body decompression (high 7.5)
- [CVE-2022-32519](https://insights.sbomify.com/CVE-2022-32519/): Weak cryptography in Data Center Expert (high 8.0)
- [CVE-2022-32518](https://insights.sbomify.com/CVE-2022-32518/): Information disclosure in Data Center Expert (high 8.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/307/