# Vulnerabilities published in 2022


- [CVE-2022-31612](https://insights.sbomify.com/CVE-2022-31612/): Memory corruption in NVIDIA Cloud Gaming (guest driver) (high 7.1)
- [CVE-2022-31611](https://insights.sbomify.com/CVE-2022-31611/): Other in GeForce Experience (medium 6.8)
- [CVE-2022-31610](https://insights.sbomify.com/CVE-2022-31610/): Memory corruption in NVIDIA Cloud Gaming (guest driver) (high 7.8)
- [CVE-2022-3161](https://insights.sbomify.com/CVE-2022-3161/): Memory corruption in JT2Go (high 7.8)
- [CVE-2022-31609](https://insights.sbomify.com/CVE-2022-31609/): Missing authorization in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming (high 7.8)
- [CVE-2022-31608](https://insights.sbomify.com/CVE-2022-31608/): Misconfiguration in GeForce, Workstation, Compute (high 7.8)
- [CVE-2022-31607](https://insights.sbomify.com/CVE-2022-31607/): Other in NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) (high 7.8)
- [CVE-2022-31606](https://insights.sbomify.com/CVE-2022-31606/): Memory corruption in NVIDIA Cloud Gaming (guest driver) (high 7.8)
- [CVE-2022-31605](https://insights.sbomify.com/CVE-2022-31605/): Unsafe yaml deserialization in NVFlare (critical 9.8)
- [CVE-2022-31604](https://insights.sbomify.com/CVE-2022-31604/): Unsafe deserialisation in the PKI implementation scheme of NVFlare (critical 9.8)
- [CVE-2022-31603](https://insights.sbomify.com/CVE-2022-31603/): Memory corruption in NVIDIA DGX A100 (medium 6.4)
- [CVE-2022-31602](https://insights.sbomify.com/CVE-2022-31602/): Memory corruption in NVIDIA DGX A100 (medium 6.4)
- [CVE-2022-31601](https://insights.sbomify.com/CVE-2022-31601/): Memory corruption in NVIDIA DGX A100 (medium 6.7)
- [CVE-2022-31600](https://insights.sbomify.com/CVE-2022-31600/): Integer overflow in NVIDIA DGX A100 (high 7.5)
- [CVE-2022-3160](https://insights.sbomify.com/CVE-2022-3160/): Memory corruption in JT2Go (high 7.8)
- [CVE-2022-31599](https://insights.sbomify.com/CVE-2022-31599/): Memory corruption in NVIDIA DGX A100 (high 8.2)
- [CVE-2022-31598](https://insights.sbomify.com/CVE-2022-31598/): Other in SAP Business Objects (medium 5.4)
- [CVE-2022-31597](https://insights.sbomify.com/CVE-2022-31597/): Missing authorization in SAP S/4HANA (medium 5.4)
- [CVE-2022-31596](https://insights.sbomify.com/CVE-2022-31596/): Missing authorization in SAP Business Objects Platform (Monitoring DB) (medium 6.0)
- [CVE-2022-31595](https://insights.sbomify.com/CVE-2022-31595/): Missing authorization in SAP Financial Consolidation (high 8.8)
- [CVE-2022-31594](https://insights.sbomify.com/CVE-2022-31594/): Privilege escalation in SAP Adaptive Server Enterprise (ASE) (medium 6.7)
- [CVE-2022-31593](https://insights.sbomify.com/CVE-2022-31593/): Code injection in SAP Business One (high 8.8)
- [CVE-2022-31592](https://insights.sbomify.com/CVE-2022-31592/): Missing authorization in SAP Enterprise Extension Defense Forces & Public Security (EA-DFPS) (medium 4.3)
- [CVE-2022-31591](https://insights.sbomify.com/CVE-2022-31591/): Privilege escalation in SAP BusinessObjects (BW Publisher Service) (high 7.8)
- [CVE-2022-31590](https://insights.sbomify.com/CVE-2022-31590/): Privilege escalation in SAP PowerDesigner Proxy 16.7 (high 7.8)
- [CVE-2022-3159](https://insights.sbomify.com/CVE-2022-3159/): Memory corruption in JT2Go (high 7.8)
- [CVE-2022-31589](https://insights.sbomify.com/CVE-2022-31589/): Missing authorization in SAP ERP, localization for CEE countries. (medium 6.5)
- [CVE-2022-31588](https://insights.sbomify.com/CVE-2022-31588/): Path traversal in testplatform project:testplatform (critical 9.3)
- [CVE-2022-31587](https://insights.sbomify.com/CVE-2022-31587/): Path traversal in kg-fashion-chatbot project:kg-fashion-chatbot (critical 9.3)
- [CVE-2022-31586](https://insights.sbomify.com/CVE-2022-31586/): Path traversal in changepop-back project:changepop-back (critical 9.3)
- [CVE-2022-31585](https://insights.sbomify.com/CVE-2022-31585/): Path traversal in home internet project:home internet (critical 9.3)
- [CVE-2022-31584](https://insights.sbomify.com/CVE-2022-31584/): Path traversal in s3label project:s3label (critical 9.3)
- [CVE-2022-31583](https://insights.sbomify.com/CVE-2022-31583/): Path traversal in automatedquizeval project:automatedquizeval (critical 9.3)
- [CVE-2022-31582](https://insights.sbomify.com/CVE-2022-31582/): Path traversal in videoserver project:videoserver (critical 9.3)
- [CVE-2022-31581](https://insights.sbomify.com/CVE-2022-31581/): Path traversal in scorelab:openmf (critical 9.3)
- [CVE-2022-31580](https://insights.sbomify.com/CVE-2022-31580/): Path traversal in caretakerr-api project:caretakerr-api (critical 9.3)
- [CVE-2022-3158](https://insights.sbomify.com/CVE-2022-3158/): SQL injection in FactoryTalk VantagePoint (high 8.8)
- [CVE-2022-31579](https://insights.sbomify.com/CVE-2022-31579/): Path traversal in iasset project:iasset (critical 9.3)
- [CVE-2022-31578](https://insights.sbomify.com/CVE-2022-31578/): Path traversal in bt lnmp project:bt lnmp (high 7.5)
- [CVE-2022-31577](https://insights.sbomify.com/CVE-2022-31577/): Path traversal in audio aligner app project:audio aligner app (critical 9.3)
- [CVE-2022-31576](https://insights.sbomify.com/CVE-2022-31576/): Path traversal in shackerpanel project:shackerpanel (critical 9.3)
- [CVE-2022-31575](https://insights.sbomify.com/CVE-2022-31575/): Path traversal in livro python project:livro python (critical 9.3)
- [CVE-2022-31574](https://insights.sbomify.com/CVE-2022-31574/): Path traversal in realestate project:realestate (critical 9.3)
- [CVE-2022-31573](https://insights.sbomify.com/CVE-2022-31573/): ChainerRL Visualizer 0.1.1 vulnerable to Path Traversal via unsafe use of send_file function (critical 9.3)
- [CVE-2022-31572](https://insights.sbomify.com/CVE-2022-31572/): Path traversal in cockybook project:cockybook (critical 9.3)
- [CVE-2022-31571](https://insights.sbomify.com/CVE-2022-31571/): Path traversal in python-flask-restful-api project:python-flask-restful-api (critical 9.3)
- [CVE-2022-31570](https://insights.sbomify.com/CVE-2022-31570/): Path traversal in ceneo-web-scrapper project:ceneo-web-scrapper (critical 9.8)
- [CVE-2022-3157](https://insights.sbomify.com/CVE-2022-3157/): Rockwell Automation GuardLogix and ControlLogix controllers Vulnerable to Denial-Of-Service Attack (high 8.6)
- [CVE-2022-31568](https://insights.sbomify.com/CVE-2022-31568/): Path traversal in rexians:rex-web (critical 9.3)
- [CVE-2022-31567](https://insights.sbomify.com/CVE-2022-31567/): Path traversal in data stream algorithm benchmark project:data stream algorithm benchmark (critical 9.3)
- [CVE-2022-31566](https://insights.sbomify.com/CVE-2022-31566/): Path traversal in data stream algorithm benchmark project:data stream algorithm benchmark (high 8.6)
- [CVE-2022-31565](https://insights.sbomify.com/CVE-2022-31565/): Path traversal in syrabond project:syrabond (critical 9.3)
- [CVE-2022-31564](https://insights.sbomify.com/CVE-2022-31564/): Path traversal in munhak:munhak-moa (critical 9.3)
- [CVE-2022-31563](https://insights.sbomify.com/CVE-2022-31563/): Path traversal in vprj project:vprj (critical 9.3)
- [CVE-2022-31562](https://insights.sbomify.com/CVE-2022-31562/): Path traversal in internshipsystem project:internshipsystem (critical 9.3)
- [CVE-2022-31561](https://insights.sbomify.com/CVE-2022-31561/): Path traversal in sphere imagebackend project:sphere imagebackend (critical 9.3)
- [CVE-2022-31560](https://insights.sbomify.com/CVE-2022-31560/): Path traversal in photo tag project:photo tag (critical 9.3)
- [CVE-2022-3156](https://insights.sbomify.com/CVE-2022-3156/): Rockwell Automation Studio 5000 Logix Emulate Vulnerable to a Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-31559](https://insights.sbomify.com/CVE-2022-31559/): Path traversal in flask-yeoman project:flask-yeoman (critical 9.3)
- [CVE-2022-31558](https://insights.sbomify.com/CVE-2022-31558/): Tooxie Shiva 0.10.0 allows absolute path traversal because Flask send_file function used unsafely (critical 9.3)
- [CVE-2022-31557](https://insights.sbomify.com/CVE-2022-31557/): Path traversal in golem project:golem (critical 9.3)
- [CVE-2022-31556](https://insights.sbomify.com/CVE-2022-31556/): Path traversal in trainenergyserver project:trainenergyserver (critical 9.3)
- [CVE-2022-31555](https://insights.sbomify.com/CVE-2022-31555/): Path traversal in nurse quest project:nurse quest (critical 9.3)
- [CVE-2022-31554](https://insights.sbomify.com/CVE-2022-31554/): Path traversal in movie-review-sentiment-analysis project:movie-review-sentiment-analysis (critical 9.3)
- [CVE-2022-31553](https://insights.sbomify.com/CVE-2022-31553/): Path traversal in sleep learner project:sleep learner (critical 9.3)
- [CVE-2022-31552](https://insights.sbomify.com/CVE-2022-31552/): Path traversal in anuvaad-corpus project:anuvaad-corpus (critical 9.3)
- [CVE-2022-31551](https://insights.sbomify.com/CVE-2022-31551/): Path traversal in flask-mongo-skel project:flask-mongo-skel (critical 9.3)
- [CVE-2022-31550](https://insights.sbomify.com/CVE-2022-31550/): Path traversal in python athena stack project:python athena stack (critical 9.3)
- [CVE-2022-3155](https://insights.sbomify.com/CVE-2022-3155/): Security feature bypass in Thunderbird (high 7.8)
- [CVE-2022-31549](https://insights.sbomify.com/CVE-2022-31549/): Path traversal in helm-flask-celery project:helm-flask-celery (critical 9.3)
- [CVE-2022-31548](https://insights.sbomify.com/CVE-2022-31548/): Path traversal in homepage project:homepage (critical 9.3)
- [CVE-2022-31547](https://insights.sbomify.com/CVE-2022-31547/): Path traversal in sphere project:sphere (critical 9.3)
- [CVE-2022-31546](https://insights.sbomify.com/CVE-2022-31546/): Path traversal in glance project:glance (critical 9.3)
- [CVE-2022-31545](https://insights.sbomify.com/CVE-2022-31545/): Path traversal in modelconverter project:modelconverter (critical 9.3)
- [CVE-2022-31544](https://insights.sbomify.com/CVE-2022-31544/): Path traversal in xtomo:robo-tom (critical 9.3)
- [CVE-2022-31543](https://insights.sbomify.com/CVE-2022-31543/): Path traversal in setupbox project:setupbox (critical 9.3)
- [CVE-2022-31542](https://insights.sbomify.com/CVE-2022-31542/): Path traversal in mdweb project:mdweb (critical 9.3)
- [CVE-2022-31541](https://insights.sbomify.com/CVE-2022-31541/): Path traversal in barry voice assistant project:barry voice assistant (critical 9.3)
- [CVE-2022-31540](https://insights.sbomify.com/CVE-2022-31540/): Path traversal in hin-eng-preprocessing project:hin-eng-preprocessing (critical 9.3)
- [CVE-2022-3154](https://insights.sbomify.com/CVE-2022-3154/): Multiple Plugins from Viszt Peter - Multiple CSRF (high 7.1)
- [CVE-2022-31539](https://insights.sbomify.com/CVE-2022-31539/): Path traversal in kotekan project:kotekan (critical 9.3)
- [CVE-2022-31538](https://insights.sbomify.com/CVE-2022-31538/): Path traversal in mp-m08-interface project:mp-m08-interface (critical 9.3)
- [CVE-2022-31537](https://insights.sbomify.com/CVE-2022-31537/): Path traversal in solar-system-simulator project:solar-system-simulator (critical 9.3)
- [CVE-2022-31536](https://insights.sbomify.com/CVE-2022-31536/): Path traversal in ytdl-sync project:ytdl-sync (critical 9.3)
- [CVE-2022-31535](https://insights.sbomify.com/CVE-2022-31535/): Path traversal in fishtank project:fishtank (critical 9.3)
- [CVE-2022-31534](https://insights.sbomify.com/CVE-2022-31534/): Path traversal in pythonweb project:pythonweb (critical 9.3)
- [CVE-2022-31533](https://insights.sbomify.com/CVE-2022-31533/): Path traversal in umbral project:umbral (critical 9.3)
- [CVE-2022-31532](https://insights.sbomify.com/CVE-2022-31532/): Path traversal in travel blahg project:travel blahg (critical 9.3)
- [CVE-2022-31531](https://insights.sbomify.com/CVE-2022-31531/): Path traversal in dainst:cilantro (critical 9.3)
- [CVE-2022-31530](https://insights.sbomify.com/CVE-2022-31530/): Path traversal in csm server project:csm server (critical 9.3)
- [CVE-2022-3153](https://insights.sbomify.com/CVE-2022-3153/): NULL Pointer Dereference in vim/vim (medium 6.1)
- [CVE-2022-31529](https://insights.sbomify.com/CVE-2022-31529/): Path traversal in monorepo project:monorepo (critical 9.3)
- [CVE-2022-31528](https://insights.sbomify.com/CVE-2022-31528/): Path traversal in bonn activity maps annotation tool project:bonn activity maps annotation tool (critical 9.3)
- [CVE-2022-31527](https://insights.sbomify.com/CVE-2022-31527/): Path traversal in flask-file-server project:flask-file-server (critical 9.3)
- [CVE-2022-31526](https://insights.sbomify.com/CVE-2022-31526/): Path traversal in thunderatz:thunderdocs (critical 9.3)
- [CVE-2022-31525](https://insights.sbomify.com/CVE-2022-31525/): Path traversal in deep learning studio project:deep learning studio (critical 9.3)
- [CVE-2022-31524](https://insights.sbomify.com/CVE-2022-31524/): Path traversal in purestorage:pure swagger (critical 9.3)
- [CVE-2022-31523](https://insights.sbomify.com/CVE-2022-31523/): Path traversal in paddlepaddle:anakin (critical 9.3)
- [CVE-2022-31522](https://insights.sbomify.com/CVE-2022-31522/): Path traversal in karaokey project:karaokey (critical 9.3)
- [CVE-2022-31521](https://insights.sbomify.com/CVE-2022-31521/): Path traversal in mosaic project:mosaic (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/315/