# Vulnerabilities published in 2022


- [CVE-2022-32384](https://insights.sbomify.com/CVE-2022-32384/): Memory corruption in tendacn:ac23 ac2100 firmware (high 8.8)
- [CVE-2022-32383](https://insights.sbomify.com/CVE-2022-32383/): Memory corruption in tendacn:ac23 ac2100 firmware (critical 9.8)
- [CVE-2022-32381](https://insights.sbomify.com/CVE-2022-32381/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32380](https://insights.sbomify.com/CVE-2022-32380/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-3238](https://insights.sbomify.com/CVE-2022-3238/): Memory corruption in Kernel (high 7.8)
- [CVE-2022-32379](https://insights.sbomify.com/CVE-2022-32379/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32378](https://insights.sbomify.com/CVE-2022-32378/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32377](https://insights.sbomify.com/CVE-2022-32377/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32376](https://insights.sbomify.com/CVE-2022-32376/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32375](https://insights.sbomify.com/CVE-2022-32375/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32374](https://insights.sbomify.com/CVE-2022-32374/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32373](https://insights.sbomify.com/CVE-2022-32373/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32372](https://insights.sbomify.com/CVE-2022-32372/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32371](https://insights.sbomify.com/CVE-2022-32371/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32370](https://insights.sbomify.com/CVE-2022-32370/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-3237](https://insights.sbomify.com/CVE-2022-3237/): WP Contact Slider < 2.4.8 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-32368](https://insights.sbomify.com/CVE-2022-32368/): SQL injection in advanced school management system project:advanced school management system (high 7.2)
- [CVE-2022-32367](https://insights.sbomify.com/CVE-2022-32367/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32366](https://insights.sbomify.com/CVE-2022-32366/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32365](https://insights.sbomify.com/CVE-2022-32365/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32364](https://insights.sbomify.com/CVE-2022-32364/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32363](https://insights.sbomify.com/CVE-2022-32363/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32362](https://insights.sbomify.com/CVE-2022-32362/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-3236](https://insights.sbomify.com/CVE-2022-3236/): Sophos Firewall Code Injection (critical 9.8, exploited in the wild)
- [CVE-2022-32359](https://insights.sbomify.com/CVE-2022-32359/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32358](https://insights.sbomify.com/CVE-2022-32358/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32355](https://insights.sbomify.com/CVE-2022-32355/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32354](https://insights.sbomify.com/CVE-2022-32354/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32353](https://insights.sbomify.com/CVE-2022-32353/): SQL injection in product show room site project:product show room site (high 7.2)
- [CVE-2022-32352](https://insights.sbomify.com/CVE-2022-32352/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (critical 9.8)
- [CVE-2022-32351](https://insights.sbomify.com/CVE-2022-32351/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32350](https://insights.sbomify.com/CVE-2022-32350/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-3235](https://insights.sbomify.com/CVE-2022-3235/): Use After Free in vim/vim (high 7.8)
- [CVE-2022-32349](https://insights.sbomify.com/CVE-2022-32349/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32348](https://insights.sbomify.com/CVE-2022-32348/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32347](https://insights.sbomify.com/CVE-2022-32347/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32346](https://insights.sbomify.com/CVE-2022-32346/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32345](https://insights.sbomify.com/CVE-2022-32345/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32344](https://insights.sbomify.com/CVE-2022-32344/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32343](https://insights.sbomify.com/CVE-2022-32343/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32342](https://insights.sbomify.com/CVE-2022-32342/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32341](https://insights.sbomify.com/CVE-2022-32341/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32340](https://insights.sbomify.com/CVE-2022-32340/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-3234](https://insights.sbomify.com/CVE-2022-3234/): Heap-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-32339](https://insights.sbomify.com/CVE-2022-32339/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32338](https://insights.sbomify.com/CVE-2022-32338/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (high 7.2)
- [CVE-2022-32337](https://insights.sbomify.com/CVE-2022-32337/): SQL injection in hospital\'s patient records management system project:hospital\'s patient records management system (critical 9.8)
- [CVE-2022-32336](https://insights.sbomify.com/CVE-2022-32336/): SQL injection in fast food ordering system project:fast food ordering system (critical 9.8)
- [CVE-2022-32335](https://insights.sbomify.com/CVE-2022-32335/): SQL injection in fast food ordering system project:fast food ordering system (high 7.2)
- [CVE-2022-32334](https://insights.sbomify.com/CVE-2022-32334/): SQL injection in fast food ordering system project:fast food ordering system (high 7.2)
- [CVE-2022-32333](https://insights.sbomify.com/CVE-2022-32333/): SQL injection in fast food ordering system project:fast food ordering system (high 7.2)
- [CVE-2022-32332](https://insights.sbomify.com/CVE-2022-32332/): SQL injection in fast food ordering system project:fast food ordering system (high 7.2)
- [CVE-2022-32331](https://insights.sbomify.com/CVE-2022-32331/): SQL injection in fast food ordering system project:fast food ordering system (high 7.2)
- [CVE-2022-32330](https://insights.sbomify.com/CVE-2022-32330/): SQL injection in fast food ordering system project:fast food ordering system (high 7.2)
- [CVE-2022-3233](https://insights.sbomify.com/CVE-2022-3233/): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (medium 4.3)
- [CVE-2022-32328](https://insights.sbomify.com/CVE-2022-32328/): Path traversal in fast food ordering system project:fast food ordering system (critical 9.1)
- [CVE-2022-32325](https://insights.sbomify.com/CVE-2022-32325/): Memory corruption in fedoraproject:fedora (medium 6.5)
- [CVE-2022-32324](https://insights.sbomify.com/CVE-2022-32324/): Memory corruption in pdfalto project:pdfalto (critical 9.8)
- [CVE-2022-32323](https://insights.sbomify.com/CVE-2022-32323/): Memory corruption in autotrace project:autotrace (high 7.3)
- [CVE-2022-32320](https://insights.sbomify.com/CVE-2022-32320/): Cross-site request forgery in ferdium:ferdium (high 8.8)
- [CVE-2022-3232](https://insights.sbomify.com/CVE-2022-3232/): Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb (medium 6.5)
- [CVE-2022-32318](https://insights.sbomify.com/CVE-2022-32318/): Cross-site scripting in fast food ordering system project:fast food ordering system (medium 5.4)
- [CVE-2022-32317](https://insights.sbomify.com/CVE-2022-32317/): Use after free in mplayerhq:mplayer (medium 5.5)
- [CVE-2022-32311](https://insights.sbomify.com/CVE-2022-32311/): SQL injection in ingredient stock management system project:ingredient stock management system (critical 9.8)
- [CVE-2022-32310](https://insights.sbomify.com/CVE-2022-32310/): Missing authorization in ingredient stock management system project:ingredient stock management system (critical 9.8)
- [CVE-2022-3231](https://insights.sbomify.com/CVE-2022-3231/): Cross-site Scripting (XSS) - Stored in librenms/librenms (medium 5.6)
- [CVE-2022-32308](https://insights.sbomify.com/CVE-2022-32308/): Cross-site scripting in ublock origin project:ublock origin (medium 6.1)
- [CVE-2022-32302](https://insights.sbomify.com/CVE-2022-32302/): SQL injection in theme park ticketing system project:theme park ticketing system (high 8.8)
- [CVE-2022-32301](https://insights.sbomify.com/CVE-2022-32301/): SQL injection in youdiancms:youdiancms (critical 9.8)
- [CVE-2022-32300](https://insights.sbomify.com/CVE-2022-32300/): SQL injection in youdiancms:youdiancms (high 8.8)
- [CVE-2022-32299](https://insights.sbomify.com/CVE-2022-32299/): SQL injection in youdiancms:youdiancms (high 8.8)
- [CVE-2022-32298](https://insights.sbomify.com/CVE-2022-32298/): Null dereference in toybox project:toybox (high 7.5)
- [CVE-2022-32297](https://insights.sbomify.com/CVE-2022-32297/): SQL injection in piwigo:piwigo (high 7.5)
- [CVE-2022-32296](https://insights.sbomify.com/CVE-2022-32296/): Weak cryptography in linux:linux kernel (low 3.3)
- [CVE-2022-32295](https://insights.sbomify.com/CVE-2022-32295/): Security feature bypass in amperecomputing:ampere altra firmware (critical 9.8)
- [CVE-2022-32294](https://insights.sbomify.com/CVE-2022-32294/): Information disclosure in zimbra:collaboration (critical 9.8)
- [CVE-2022-32293](https://insights.sbomify.com/CVE-2022-32293/): Use after free in debian:debian linux (high 8.1)
- [CVE-2022-32292](https://insights.sbomify.com/CVE-2022-32292/): Memory corruption in debian:debian linux (critical 9.8)
- [CVE-2022-32291](https://insights.sbomify.com/CVE-2022-32291/): Code injection in realnetworks:realplayer (high 8.8)
- [CVE-2022-32290](https://insights.sbomify.com/CVE-2022-32290/): Missing authorization in northern.tech:mender (medium 4.3)
- [CVE-2022-3229](https://insights.sbomify.com/CVE-2022-3229/): Missing authorization in Unified Remote (critical 9.8)
- [CVE-2022-32289](https://insights.sbomify.com/CVE-2022-32289/): Cross-site request forgery in Popup Builder (WordPress plugin) (medium 5.4)
- [CVE-2022-32287](https://insights.sbomify.com/CVE-2022-32287/): Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives (high 7.5)
- [CVE-2022-32286](https://insights.sbomify.com/CVE-2022-32286/): Cross-site scripting in Mendix SAML Module (Mendix 7 compatible) (medium 6.1)
- [CVE-2022-32285](https://insights.sbomify.com/CVE-2022-32285/): XML external entity in Mendix SAML Module (Mendix 7 compatible) (high 7.5)
- [CVE-2022-32284](https://insights.sbomify.com/CVE-2022-32284/): Weak cryptography in Communication Module for Wide Area Communication Router (for AW810D) VI461 (high 7.5)
- [CVE-2022-32283](https://insights.sbomify.com/CVE-2022-32283/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2022-32282](https://insights.sbomify.com/CVE-2022-32282/): Auth bypass in AVideo (high 7.2)
- [CVE-2022-32280](https://insights.sbomify.com/CVE-2022-32280/): WordPress XO Slider plugin <= 3.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 5.4)
- [CVE-2022-3228](https://insights.sbomify.com/CVE-2022-3228/): Memory corruption in H0-ECOM100 Communications Module (medium 6.5)
- [CVE-2022-32278](https://insights.sbomify.com/CVE-2022-32278/): Code injection in debian:debian linux (high 8.8)
- [CVE-2022-32277](https://insights.sbomify.com/CVE-2022-32277/): Missing authorization in squiz:matrix (medium 5.3)
- [CVE-2022-32276](https://insights.sbomify.com/CVE-2022-32276/): Auth bypass in grafana:grafana (high 7.5)
- [CVE-2022-32275](https://insights.sbomify.com/CVE-2022-32275/): Path traversal in grafana:grafana (high 7.5)
- [CVE-2022-32274](https://insights.sbomify.com/CVE-2022-32274/): Cross-site scripting in ttpsc:the scheduler (medium 5.4)
- [CVE-2022-32273](https://insights.sbomify.com/CVE-2022-32273/): Information disclosure in opswat:metadefender (medium 4.3)
- [CVE-2022-32272](https://insights.sbomify.com/CVE-2022-32272/): Privilege escalation in opswat:metadefender (critical 9.8)
- [CVE-2022-32271](https://insights.sbomify.com/CVE-2022-32271/): Code injection in realnetworks:realplayer (critical 9.6)
- [CVE-2022-32270](https://insights.sbomify.com/CVE-2022-32270/): Path traversal in realnetworks:realplayer (critical 9.8)
- [CVE-2022-32269](https://insights.sbomify.com/CVE-2022-32269/): Cross-site scripting in realnetworks:realplayer (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/309/