# Vulnerabilities published in 2022


- [CVE-2022-31861](https://insights.sbomify.com/CVE-2022-31861/): Cross-site scripting in thingsboard:thingsboard (medium 5.4)
- [CVE-2022-31860](https://insights.sbomify.com/CVE-2022-31860/): Code injection in openremote:openremote (critical 9.8)
- [CVE-2022-3186](https://insights.sbomify.com/CVE-2022-3186/): Missing authorization in iBoot-PDU FW (high 8.6)
- [CVE-2022-31856](https://insights.sbomify.com/CVE-2022-31856/): SQL injection in newsletter module project:newsletter module (critical 9.8)
- [CVE-2022-31854](https://insights.sbomify.com/CVE-2022-31854/): File upload in codologic:codoforum (high 7.2)
- [CVE-2022-3185](https://insights.sbomify.com/CVE-2022-3185/): Information disclosure in iBoot-PDU FW (medium 5.3)
- [CVE-2022-31849](https://insights.sbomify.com/CVE-2022-31849/): Code injection in mercurycom:mipc451-4 firmware (high 8.8)
- [CVE-2022-31847](https://insights.sbomify.com/CVE-2022-31847/): Information disclosure in wavlink:wn579x3 firmware (high 7.5)
- [CVE-2022-31846](https://insights.sbomify.com/CVE-2022-31846/): Information disclosure in wavlink:wn535g3 firmware (high 7.5)
- [CVE-2022-31845](https://insights.sbomify.com/CVE-2022-31845/): Information disclosure in wavlink:wn535g3 firmware (high 7.5)
- [CVE-2022-3184](https://insights.sbomify.com/CVE-2022-3184/): Path traversal in iBoot-PDU FW (critical 9.8)
- [CVE-2022-31836](https://insights.sbomify.com/CVE-2022-31836/): Path Traversal in Beego (critical 9.8)
- [CVE-2022-31830](https://insights.sbomify.com/CVE-2022-31830/): Server-Side Request Forgery in kityminder (critical 9.1)
- [CVE-2022-3183](https://insights.sbomify.com/CVE-2022-3183/): Command injection in iBoot-PDU FW (critical 9.8)
- [CVE-2022-31827](https://insights.sbomify.com/CVE-2022-31827/): Server-side request forgery in monstaftp:monstaftp (critical 9.1)
- [CVE-2022-3182](https://insights.sbomify.com/CVE-2022-3182/): Security feature bypass in Remote Desktop Manager (high 7.0)
- [CVE-2022-31814](https://insights.sbomify.com/CVE-2022-31814/): Command injection in netgate:pfblockerng (critical 9.8)
- [CVE-2022-31813](https://insights.sbomify.com/CVE-2022-31813/): mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (critical 9.8)
- [CVE-2022-31812](https://insights.sbomify.com/CVE-2022-31812/): Memory corruption in SiPass integrated (high 8.7)
- [CVE-2022-31810](https://insights.sbomify.com/CVE-2022-31810/): Memory corruption in SiPass integrated (high 7.5)
- [CVE-2022-3181](https://insights.sbomify.com/CVE-2022-3181/): Denial of service in VTScada (high 7.5)
- [CVE-2022-31808](https://insights.sbomify.com/CVE-2022-31808/): Command injection in SiPass integrated AC5102 (ACC-G2) (high 7.8)
- [CVE-2022-31807](https://insights.sbomify.com/CVE-2022-31807/): Security feature bypass in Building X - Security Manager Edge Controller (ACC-AP) (medium 5.9)
- [CVE-2022-31806](https://insights.sbomify.com/CVE-2022-31806/): Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT (critical 9.8)
- [CVE-2022-31805](https://insights.sbomify.com/CVE-2022-31805/): Insecure transmission of credentials (high 7.5)
- [CVE-2022-31804](https://insights.sbomify.com/CVE-2022-31804/): CODESYS Gateway server prone to denial of service attack due to excessive memory allocation (high 7.5)
- [CVE-2022-31803](https://insights.sbomify.com/CVE-2022-31803/): CODESYS Gateway Server V2 prone to Denial of Service Attack (medium 5.3)
- [CVE-2022-31802](https://insights.sbomify.com/CVE-2022-31802/): Partial string comparison in CODESYS gateway server (critical 9.8)
- [CVE-2022-31801](https://insights.sbomify.com/CVE-2022-31801/): Insufficient Verification of Data Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool (critical 9.8)
- [CVE-2022-31800](https://insights.sbomify.com/CVE-2022-31800/): Insufficient Verification of Data Vulnerability in PHOENIX CONTACT classic line industrial controllers (critical 9.8)
- [CVE-2022-3180](https://insights.sbomify.com/CVE-2022-3180/): WPGateway <= 3.5 - Unauthenticated Privilege Escalation (critical 9.8)
- [CVE-2022-31799](https://insights.sbomify.com/CVE-2022-31799/): Denial of service in bottle (critical 9.8)
- [CVE-2022-31798](https://insights.sbomify.com/CVE-2022-31798/): Auth bypass in nortekcontrol:emerge e3 firmware (medium 6.1)
- [CVE-2022-31796](https://insights.sbomify.com/CVE-2022-31796/): Memory corruption in jpeg:libjpeg (medium 6.5)
- [CVE-2022-31795](https://insights.sbomify.com/CVE-2022-31795/): Command injection in fujitsu:eternus cs8000 firmware (critical 9.8)
- [CVE-2022-31794](https://insights.sbomify.com/CVE-2022-31794/): Command injection in fujitsu:eternus cs8000 firmware (critical 9.8)
- [CVE-2022-31793](https://insights.sbomify.com/CVE-2022-31793/): Path traversal in arris:bgw210 firmware (high 7.5)
- [CVE-2022-31792](https://insights.sbomify.com/CVE-2022-31792/): Cross-site scripting in watchguard:fireware (medium 5.4)
- [CVE-2022-31791](https://insights.sbomify.com/CVE-2022-31791/): Privilege escalation in watchguard:fireware (high 7.8)
- [CVE-2022-31790](https://insights.sbomify.com/CVE-2022-31790/): Information disclosure in watchguard:fireware (high 7.5)
- [CVE-2022-3179](https://insights.sbomify.com/CVE-2022-3179/): Weak Password Requirements in ikus060/rdiffweb (high 7.1)
- [CVE-2022-31789](https://insights.sbomify.com/CVE-2022-31789/): Integer overflow in watchguard:fireware (critical 9.8)
- [CVE-2022-31788](https://insights.sbomify.com/CVE-2022-31788/): SQL injection in ideaco:idealms (critical 9.8)
- [CVE-2022-31787](https://insights.sbomify.com/CVE-2022-31787/): SQL injection in ideaco:ideatms (critical 9.8)
- [CVE-2022-31786](https://insights.sbomify.com/CVE-2022-31786/): Cross-site scripting in ideaco:idealms (medium 6.1)
- [CVE-2022-31784](https://insights.sbomify.com/CVE-2022-31784/): Memory corruption in mitel:mivoice business (critical 9.8)
- [CVE-2022-31783](https://insights.sbomify.com/CVE-2022-31783/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2022-31782](https://insights.sbomify.com/CVE-2022-31782/): Memory corruption in freedesktop:freetype demo programs (high 7.8)
- [CVE-2022-31781](https://insights.sbomify.com/CVE-2022-31781/): Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022) (high 7.5)
- [CVE-2022-31780](https://insights.sbomify.com/CVE-2022-31780/): HTTP/2 framing vulnerabilities (high 7.5)
- [CVE-2022-3178](https://insights.sbomify.com/CVE-2022-3178/): Buffer Over-read in gpac/gpac (high 7.8)
- [CVE-2022-31779](https://insights.sbomify.com/CVE-2022-31779/): Improper HTTP/2 scheme and method validation (high 7.5)
- [CVE-2022-31778](https://insights.sbomify.com/CVE-2022-31778/): Transfer-Encoding not treated as hop-by-hop (high 7.5)
- [CVE-2022-31777](https://insights.sbomify.com/CVE-2022-31777/): Apache Spark XSS vulnerability in log viewer UI Javascript (medium 5.4)
- [CVE-2022-31776](https://insights.sbomify.com/CVE-2022-31776/): Server-side request forgery in DataPower Gateway (medium 6.5)
- [CVE-2022-31775](https://insights.sbomify.com/CVE-2022-31775/): XML external entity in DataPower Gateway (medium 5.5)
- [CVE-2022-31774](https://insights.sbomify.com/CVE-2022-31774/): Cross-site scripting in DataPower Gateway (medium 5.4)
- [CVE-2022-31773](https://insights.sbomify.com/CVE-2022-31773/): Cross-site request forgery in DataPower Gateway (high 8.8)
- [CVE-2022-31772](https://insights.sbomify.com/CVE-2022-31772/): IBM MQ denial of service (medium 5.3)
- [CVE-2022-31770](https://insights.sbomify.com/CVE-2022-31770/): Denial of service in App Connect Enterprise Certified Container (medium 4.9)
- [CVE-2022-31769](https://insights.sbomify.com/CVE-2022-31769/): Information disclosure in Spectrum Copy Data Management (medium 5.3)
- [CVE-2022-31768](https://insights.sbomify.com/CVE-2022-31768/): SQL injection in InfoSphere Information Server (medium 5.3)
- [CVE-2022-31767](https://insights.sbomify.com/CVE-2022-31767/): Command injection in CICS TX Advanced (critical 9.8)
- [CVE-2022-31766](https://insights.sbomify.com/CVE-2022-31766/): Other in RUGGEDCOM RM1224 LTE(4G) EU (high 8.6)
- [CVE-2022-31765](https://insights.sbomify.com/CVE-2022-31765/): Missing authorization in RUGGEDCOM RM1224 LTE(4G) EU (high 8.8)
- [CVE-2022-31764](https://insights.sbomify.com/CVE-2022-31764/): Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC (high 8.5)
- [CVE-2022-31763](https://insights.sbomify.com/CVE-2022-31763/): Null dereference in EMUI (medium 5.5)
- [CVE-2022-31762](https://insights.sbomify.com/CVE-2022-31762/): Privilege escalation in EMUI (high 7.8)
- [CVE-2022-31761](https://insights.sbomify.com/CVE-2022-31761/): Misconfiguration in EMUI (high 7.5)
- [CVE-2022-31760](https://insights.sbomify.com/CVE-2022-31760/): Security feature bypass in EMUI (critical 9.1)
- [CVE-2022-3176](https://insights.sbomify.com/CVE-2022-3176/): Use-after-free in io_uring in Linux Kernel (high 7.8)
- [CVE-2022-31759](https://insights.sbomify.com/CVE-2022-31759/): Memory corruption in EMUI (medium 5.5)
- [CVE-2022-31758](https://insights.sbomify.com/CVE-2022-31758/): Race condition in EMUI (medium 4.7)
- [CVE-2022-31757](https://insights.sbomify.com/CVE-2022-31757/): Other in EMUI (high 7.5)
- [CVE-2022-31756](https://insights.sbomify.com/CVE-2022-31756/): Other in EMUI (medium 5.5)
- [CVE-2022-31755](https://insights.sbomify.com/CVE-2022-31755/): Other in EMUI (medium 5.5)
- [CVE-2022-31754](https://insights.sbomify.com/CVE-2022-31754/): Other in EMUI (high 7.5)
- [CVE-2022-31753](https://insights.sbomify.com/CVE-2022-31753/): Memory corruption in EMUI (high 7.5)
- [CVE-2022-31752](https://insights.sbomify.com/CVE-2022-31752/): Missing authorization in EMUI (medium 5.5)
- [CVE-2022-31751](https://insights.sbomify.com/CVE-2022-31751/): Race condition in EMUI (medium 5.5)
- [CVE-2022-3175](https://insights.sbomify.com/CVE-2022-3175/): Missing Custom Error Page in ikus060/rdiffweb (medium 5.3)
- [CVE-2022-31749](https://insights.sbomify.com/CVE-2022-31749/): Authenticated arbitrary file read/write in WatchGuard Fireware OS (medium 6.5)
- [CVE-2022-31748](https://insights.sbomify.com/CVE-2022-31748/): Memory corruption in Firefox (critical 9.8)
- [CVE-2022-31747](https://insights.sbomify.com/CVE-2022-31747/): Memory corruption in Firefox (critical 9.8)
- [CVE-2022-31746](https://insights.sbomify.com/CVE-2022-31746/): Information disclosure in Firefox for iOS (medium 6.5)
- [CVE-2022-31745](https://insights.sbomify.com/CVE-2022-31745/): Memory corruption in Firefox (medium 4.3)
- [CVE-2022-31744](https://insights.sbomify.com/CVE-2022-31744/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2022-31743](https://insights.sbomify.com/CVE-2022-31743/): Cross-site scripting in Firefox (medium 6.5)
- [CVE-2022-31742](https://insights.sbomify.com/CVE-2022-31742/): Information disclosure in Firefox (medium 6.5)
- [CVE-2022-31741](https://insights.sbomify.com/CVE-2022-31741/): Memory corruption in Firefox (high 8.8)
- [CVE-2022-31740](https://insights.sbomify.com/CVE-2022-31740/): Memory corruption in Firefox (high 8.8)
- [CVE-2022-3174](https://insights.sbomify.com/CVE-2022-3174/): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb (high 7.5)
- [CVE-2022-31739](https://insights.sbomify.com/CVE-2022-31739/): Path traversal in Firefox (high 8.8)
- [CVE-2022-31738](https://insights.sbomify.com/CVE-2022-31738/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2022-31737](https://insights.sbomify.com/CVE-2022-31737/): Memory corruption in Firefox (critical 9.8)
- [CVE-2022-31736](https://insights.sbomify.com/CVE-2022-31736/): Information disclosure in Firefox (critical 9.8)
- [CVE-2022-31735](https://insights.sbomify.com/CVE-2022-31735/): Open redirect in OpenAM (OpenAM Consortium Edition) (medium 6.1)
- [CVE-2022-31734](https://insights.sbomify.com/CVE-2022-31734/): Cross-site scripting in Cisco Catalyst 2940 Series Switches (medium 6.1)
- [CVE-2022-31733](https://insights.sbomify.com/CVE-2022-31733/): Security feature bypass in Cloud Foundry Diego and CF Deployment (critical 9.1)
- [CVE-2022-3173](https://insights.sbomify.com/CVE-2022-3173/): Improper Authentication in snipe/snipe-it (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/313/