# Vulnerabilities published in 2022


- [CVE-2022-32154](https://insights.sbomify.com/CVE-2022-32154/): Risky commands warnings in Splunk Enterprise Dashboards (medium 6.8)
- [CVE-2022-32153](https://insights.sbomify.com/CVE-2022-32153/): Splunk Enterprise lacked TLS host name validation (high 8.1)
- [CVE-2022-32152](https://insights.sbomify.com/CVE-2022-32152/): Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default (high 8.1)
- [CVE-2022-32151](https://insights.sbomify.com/CVE-2022-32151/): Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default (high 7.4)
- [CVE-2022-3215](https://insights.sbomify.com/CVE-2022-3215/): SwiftNIO vulnerable to Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') (high 7.5)
- [CVE-2022-32149](https://insights.sbomify.com/CVE-2022-32149/): Denial of service via crafted Accept-Language header in golang.org/x/text/language (high 7.5)
- [CVE-2022-32148](https://insights.sbomify.com/CVE-2022-32148/): Exposure of client IP addresses in net/http (medium 6.5)
- [CVE-2022-32145](https://insights.sbomify.com/CVE-2022-32145/): Cross-site scripting in Teamcenter Active Workspace V5.2 (medium 6.1)
- [CVE-2022-32144](https://insights.sbomify.com/CVE-2022-32144/): Other in CV81-WDM FW (high 8.6)
- [CVE-2022-32143](https://insights.sbomify.com/CVE-2022-32143/): CODESYS runtime system prone to directory acces (high 8.8)
- [CVE-2022-32142](https://insights.sbomify.com/CVE-2022-32142/): CODESYS runtime system prone to denial of service due to use of out of range pointer (high 8.1)
- [CVE-2022-32141](https://insights.sbomify.com/CVE-2022-32141/): CODESYS runtime system prone to denial of service due to buffer over read (medium 6.5)
- [CVE-2022-32140](https://insights.sbomify.com/CVE-2022-32140/): CODESYS runtime system prone to denial of service due to buffer copy (medium 6.5)
- [CVE-2022-3214](https://insights.sbomify.com/CVE-2022-3214/): Delta Electronics DIAEnergy Use of Hard-coded Credentials (critical 9.8)
- [CVE-2022-32139](https://insights.sbomify.com/CVE-2022-32139/): CODESYS runtime system prone to denial of service due to out of bounds read (medium 6.5)
- [CVE-2022-32138](https://insights.sbomify.com/CVE-2022-32138/): CODESYS runtime system prone to denial of service due to Unexpected Sign Extension (high 8.8)
- [CVE-2022-32137](https://insights.sbomify.com/CVE-2022-32137/): CODESYS Runtime System prone to heap based buffer overflow (high 8.8)
- [CVE-2022-32136](https://insights.sbomify.com/CVE-2022-32136/): Codesys runtime systems: Access of uninitialised pointer lead to denial of service. (medium 6.5)
- [CVE-2022-32131](https://insights.sbomify.com/CVE-2022-32131/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-32130](https://insights.sbomify.com/CVE-2022-32130/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-3213](https://insights.sbomify.com/CVE-2022-3213/): Memory corruption in ImageMagick (medium 5.5)
- [CVE-2022-32129](https://insights.sbomify.com/CVE-2022-32129/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-32128](https://insights.sbomify.com/CVE-2022-32128/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-32127](https://insights.sbomify.com/CVE-2022-32127/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-32126](https://insights.sbomify.com/CVE-2022-32126/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-32125](https://insights.sbomify.com/CVE-2022-32125/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-32124](https://insights.sbomify.com/CVE-2022-32124/): Cross-site scripting in 74cms:74cmsse (medium 6.1)
- [CVE-2022-3212](https://insights.sbomify.com/CVE-2022-3212/): DoS in axum-core due to missing request size limit (high 7.5)
- [CVE-2022-32119](https://insights.sbomify.com/CVE-2022-32119/): File upload in arox:school erp pro (high 8.8)
- [CVE-2022-32118](https://insights.sbomify.com/CVE-2022-32118/): Cross-site scripting in arox:school erp pro (medium 6.1)
- [CVE-2022-32117](https://insights.sbomify.com/CVE-2022-32117/): Memory corruption in jerryscript:jerryscript (high 7.8)
- [CVE-2022-32115](https://insights.sbomify.com/CVE-2022-32115/): Known vulnerable to code execution via SVG file in v1.3.1 (medium 6.1)
- [CVE-2022-32114](https://insights.sbomify.com/CVE-2022-32114/): Strapi 4.1.12 Cross-site Scripting via crafted file (high 8.8)
- [CVE-2022-3211](https://insights.sbomify.com/CVE-2022-3211/): Cross-site Scripting (XSS) - Stored in pimcore/pimcore (medium 5.8)
- [CVE-2022-32101](https://insights.sbomify.com/CVE-2022-32101/): SQL injection in kkcms project:kkcms (critical 9.8)
- [CVE-2022-3210](https://insights.sbomify.com/CVE-2022-3210/): Command injection in DIR-2150 (high 8.8)
- [CVE-2022-32096](https://insights.sbomify.com/CVE-2022-32096/): Memory corruption in rhonabwy project:rhonabwy (high 7.5)
- [CVE-2022-32095](https://insights.sbomify.com/CVE-2022-32095/): SQL injection in hospital management system project:hospital management system (critical 9.8)
- [CVE-2022-32094](https://insights.sbomify.com/CVE-2022-32094/): SQL injection in hospital management system project:hospital management system (critical 9.8)
- [CVE-2022-32093](https://insights.sbomify.com/CVE-2022-32093/): SQL injection in hospital management system project:hospital management system (critical 9.8)
- [CVE-2022-32092](https://insights.sbomify.com/CVE-2022-32092/): Command injection in dlink:dir-645 firmware (critical 9.8)
- [CVE-2022-32091](https://insights.sbomify.com/CVE-2022-32091/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-3209](https://insights.sbomify.com/CVE-2022-3209/): Soledad < 8.2.5 - Reflected Cross-site Scripting (medium 6.1)
- [CVE-2022-32089](https://insights.sbomify.com/CVE-2022-32089/): Null dereference in fedoraproject:fedora (high 7.5)
- [CVE-2022-32088](https://insights.sbomify.com/CVE-2022-32088/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-32087](https://insights.sbomify.com/CVE-2022-32087/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-32086](https://insights.sbomify.com/CVE-2022-32086/): Memory corruption in mariadb:mariadb (high 7.5)
- [CVE-2022-32085](https://insights.sbomify.com/CVE-2022-32085/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-32084](https://insights.sbomify.com/CVE-2022-32084/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-32083](https://insights.sbomify.com/CVE-2022-32083/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-32082](https://insights.sbomify.com/CVE-2022-32082/): Denial of service in fedoraproject:fedora (high 7.5)
- [CVE-2022-32081](https://insights.sbomify.com/CVE-2022-32081/): Use after free in fedoraproject:fedora (high 7.5)
- [CVE-2022-3208](https://insights.sbomify.com/CVE-2022-3208/): Simple File List < 4.4.13 - Page Creation via CSRF (medium 6.5)
- [CVE-2022-32074](https://insights.sbomify.com/CVE-2022-32074/): Cross-site scripting in enhancesoft:osticket (medium 5.4)
- [CVE-2022-32073](https://insights.sbomify.com/CVE-2022-32073/): Integer overflow in wolfssh:wolfssh (critical 9.8)
- [CVE-2022-3207](https://insights.sbomify.com/CVE-2022-3207/): Simple File List < 4.4.12 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-32065](https://insights.sbomify.com/CVE-2022-32065/): RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module (medium 5.4)
- [CVE-2022-32061](https://insights.sbomify.com/CVE-2022-32061/): Snipe-IT 6.0.2 vulnerable to Cross-site Scripting (medium 4.8)
- [CVE-2022-32060](https://insights.sbomify.com/CVE-2022-32060/): Snipe-IT 6.0.2 vulnerable to Cross-site Scripting via arbitrary file upload in Update Branding Settings (medium 4.8)
- [CVE-2022-3206](https://insights.sbomify.com/CVE-2022-3206/): Passster < 3.5.5.5.2 - Insecure Storage of Password (medium 5.9)
- [CVE-2022-32058](https://insights.sbomify.com/CVE-2022-32058/): Denial of service in tp-link:tl-wr741n firmware (high 7.5)
- [CVE-2022-32056](https://insights.sbomify.com/CVE-2022-32056/): SQL injection in online accreditation management system project:online accreditation management system (critical 9.8)
- [CVE-2022-32055](https://insights.sbomify.com/CVE-2022-32055/): SQL injection in nesote:inout homestay (high 7.5)
- [CVE-2022-32054](https://insights.sbomify.com/CVE-2022-32054/): Command injection in tenda:ac10 firmware (critical 9.8)
- [CVE-2022-32053](https://insights.sbomify.com/CVE-2022-32053/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32052](https://insights.sbomify.com/CVE-2022-32052/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32051](https://insights.sbomify.com/CVE-2022-32051/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32050](https://insights.sbomify.com/CVE-2022-32050/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-3205](https://insights.sbomify.com/CVE-2022-3205/): Controller: cross site scripting in automation controller ui (medium 4.6)
- [CVE-2022-32049](https://insights.sbomify.com/CVE-2022-32049/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32048](https://insights.sbomify.com/CVE-2022-32048/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32047](https://insights.sbomify.com/CVE-2022-32047/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32046](https://insights.sbomify.com/CVE-2022-32046/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32045](https://insights.sbomify.com/CVE-2022-32045/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32044](https://insights.sbomify.com/CVE-2022-32044/): Memory corruption in totolink:t6 firmware (high 7.5)
- [CVE-2022-32043](https://insights.sbomify.com/CVE-2022-32043/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32041](https://insights.sbomify.com/CVE-2022-32041/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32040](https://insights.sbomify.com/CVE-2022-32040/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-3204](https://insights.sbomify.com/CVE-2022-3204/): NRDelegation Attack (high 7.5)
- [CVE-2022-32039](https://insights.sbomify.com/CVE-2022-32039/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32037](https://insights.sbomify.com/CVE-2022-32037/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32036](https://insights.sbomify.com/CVE-2022-32036/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32035](https://insights.sbomify.com/CVE-2022-32035/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32034](https://insights.sbomify.com/CVE-2022-32034/): Memory corruption in tenda:m3 firmware (high 7.5)
- [CVE-2022-32033](https://insights.sbomify.com/CVE-2022-32033/): Memory corruption in tenda:ax1806 firmware (high 7.5)
- [CVE-2022-32032](https://insights.sbomify.com/CVE-2022-32032/): Memory corruption in tenda:ax1806 firmware (critical 9.8)
- [CVE-2022-32031](https://insights.sbomify.com/CVE-2022-32031/): Memory corruption in tenda:ax1806 firmware (high 7.5)
- [CVE-2022-32030](https://insights.sbomify.com/CVE-2022-32030/): Memory corruption in tenda:ax1806 firmware (high 7.5)
- [CVE-2022-3203](https://insights.sbomify.com/CVE-2022-3203/): ORing net IAP-420(+) Hidden Functionality (critical 9.8)
- [CVE-2022-32028](https://insights.sbomify.com/CVE-2022-32028/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32027](https://insights.sbomify.com/CVE-2022-32027/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32026](https://insights.sbomify.com/CVE-2022-32026/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32025](https://insights.sbomify.com/CVE-2022-32025/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32024](https://insights.sbomify.com/CVE-2022-32024/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32022](https://insights.sbomify.com/CVE-2022-32022/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32021](https://insights.sbomify.com/CVE-2022-32021/): SQL injection in car rental management system project:car rental management system (high 7.2)
- [CVE-2022-32020](https://insights.sbomify.com/CVE-2022-32020/): Code injection in car rental management system project:car rental management system (critical 9.8)
- [CVE-2022-3202](https://insights.sbomify.com/CVE-2022-3202/): Null dereference in Kernel (high 7.1)
- [CVE-2022-32019](https://insights.sbomify.com/CVE-2022-32019/): File upload in car rental management system project:car rental management system (critical 9.8)
- [CVE-2022-32018](https://insights.sbomify.com/CVE-2022-32018/): SQL injection in complete online job search system project:complete online job search system (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/311/