# Vulnerabilities published in 2022


- [CVE-2022-30945](https://insights.sbomify.com/CVE-2022-30945/): Sandbox bypass vulnerability through implicitly allowlisted platform Groovy files in Jenkins Pipeline: Groovy Plugin (high 8.5)
- [CVE-2022-30944](https://insights.sbomify.com/CVE-2022-30944/): Information disclosure in Intel(R) AMT and Intel(R) Standard Manageability (medium 5.5)
- [CVE-2022-30943](https://insights.sbomify.com/CVE-2022-30943/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2022-3094](https://insights.sbomify.com/CVE-2022-3094/): An UPDATE message flood may cause named to exhaust all available memory (high 7.5)
- [CVE-2022-30938](https://insights.sbomify.com/CVE-2022-30938/): Memory corruption in EN100 Ethernet module DNP3 IP variant (high 7.5)
- [CVE-2022-30937](https://insights.sbomify.com/CVE-2022-30937/): Memory corruption in EN100 Ethernet module DNP3 IP variant (high 7.5)
- [CVE-2022-30935](https://insights.sbomify.com/CVE-2022-30935/): Weak cryptography in b2evolution:b2evolution (critical 9.1)
- [CVE-2022-30931](https://insights.sbomify.com/CVE-2022-30931/): Cross-site request forgery in employee leaves management system project:employee leaves management system (medium 6.5)
- [CVE-2022-30930](https://insights.sbomify.com/CVE-2022-30930/): Cross-site request forgery in phpgurukul:tourism management system (medium 4.3)
- [CVE-2022-3093](https://insights.sbomify.com/CVE-2022-3093/): Race condition in Model 3 (high 7.6)
- [CVE-2022-30929](https://insights.sbomify.com/CVE-2022-30929/): Misconfiguration in mini tmall project:mini tmall (high 8.8)
- [CVE-2022-30927](https://insights.sbomify.com/CVE-2022-30927/): SQL injection in simple task scheduling system project:simple task scheduling system (critical 9.8)
- [CVE-2022-30926](https://insights.sbomify.com/CVE-2022-30926/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30925](https://insights.sbomify.com/CVE-2022-30925/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30924](https://insights.sbomify.com/CVE-2022-30924/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30923](https://insights.sbomify.com/CVE-2022-30923/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30922](https://insights.sbomify.com/CVE-2022-30922/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30921](https://insights.sbomify.com/CVE-2022-30921/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30920](https://insights.sbomify.com/CVE-2022-30920/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-3092](https://insights.sbomify.com/CVE-2022-3092/): GE CIMPLICITY Out-of-bounds Write (high 7.8)
- [CVE-2022-30919](https://insights.sbomify.com/CVE-2022-30919/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30918](https://insights.sbomify.com/CVE-2022-30918/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30917](https://insights.sbomify.com/CVE-2022-30917/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30916](https://insights.sbomify.com/CVE-2022-30916/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30915](https://insights.sbomify.com/CVE-2022-30915/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30914](https://insights.sbomify.com/CVE-2022-30914/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30913](https://insights.sbomify.com/CVE-2022-30913/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30912](https://insights.sbomify.com/CVE-2022-30912/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30910](https://insights.sbomify.com/CVE-2022-30910/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-3091](https://insights.sbomify.com/CVE-2022-3091/): Information disclosure in Equipment Predictive Maintenance Solution (high 7.5)
- [CVE-2022-30909](https://insights.sbomify.com/CVE-2022-30909/): Memory corruption in h3c:magic r100 firmware (critical 9.8)
- [CVE-2022-30904](https://insights.sbomify.com/CVE-2022-30904/): Memory corruption in bestechnic:bluetooth mesh software development kit (high 8.2)
- [CVE-2022-30903](https://insights.sbomify.com/CVE-2022-30903/): Cross-site scripting in nokia:g-2425g-a firmware (medium 4.8)
- [CVE-2022-3090](https://insights.sbomify.com/CVE-2022-3090/): Path traversal in Crimson 3.0 (high 7.5)
- [CVE-2022-30899](https://insights.sbomify.com/CVE-2022-30899/): Cross-site scripting in partkeepr:partkeepr (medium 4.8)
- [CVE-2022-30898](https://insights.sbomify.com/CVE-2022-30898/): Cross-site request forgery in chshcms:cscms (medium 6.5)
- [CVE-2022-3089](https://insights.sbomify.com/CVE-2022-3089/): EnOcean SmartServer Hard-coded credentials (medium 6.3)
- [CVE-2022-30887](https://insights.sbomify.com/CVE-2022-30887/): File upload in pharmacy management system project:pharmacy management system (critical 9.8)
- [CVE-2022-30886](https://insights.sbomify.com/CVE-2022-30886/): SQL injection in school dormitory management system project:school dormitory management system (critical 9.8)
- [CVE-2022-30885](https://insights.sbomify.com/CVE-2022-30885/): Supply chain in esa:pyesasky (critical 9.8)
- [CVE-2022-30882](https://insights.sbomify.com/CVE-2022-30882/): Supply chain in pyanxdns project:pyanxdns (critical 9.8)
- [CVE-2022-3088](https://insights.sbomify.com/CVE-2022-3088/): Privilege escalation in AIG-300 System Image (high 7.8)
- [CVE-2022-30877](https://insights.sbomify.com/CVE-2022-30877/): Supply chain in keep project:keep (critical 9.8)
- [CVE-2022-30875](https://insights.sbomify.com/CVE-2022-30875/): Cross-site Scripting in Dolibarr (medium 6.1)
- [CVE-2022-30874](https://insights.sbomify.com/CVE-2022-30874/): Cross-site Scripting in NukeViet CMS (medium 5.4)
- [CVE-2022-3087](https://insights.sbomify.com/CVE-2022-3087/): Memory corruption in Tellus Lite V-Simulator (high 7.8)
- [CVE-2022-30863](https://insights.sbomify.com/CVE-2022-30863/): Cross-site scripting in fudforum:fudforum (medium 4.8)
- [CVE-2022-30861](https://insights.sbomify.com/CVE-2022-30861/): Cross-site scripting in fudforum:fudforum (medium 4.8)
- [CVE-2022-30860](https://insights.sbomify.com/CVE-2022-30860/): File upload in fudforum:fudforum (high 7.2)
- [CVE-2022-3086](https://insights.sbomify.com/CVE-2022-3086/): Cradlepoint IBR600 Command Injection (high 7.1)
- [CVE-2022-30858](https://insights.sbomify.com/CVE-2022-30858/): Denial of service in miniupnp project:ngiflib (medium 6.5)
- [CVE-2022-30852](https://insights.sbomify.com/CVE-2022-30852/): Known v1.3.1 contains Insecure Direct Object Reference (medium 4.3)
- [CVE-2022-3085](https://insights.sbomify.com/CVE-2022-3085/): Memory corruption in Tellus Lite V-Simulator (high 7.8)
- [CVE-2022-30843](https://insights.sbomify.com/CVE-2022-30843/): SQL injection in room rent portal site project:room rent portal site (high 8.8)
- [CVE-2022-30842](https://insights.sbomify.com/CVE-2022-30842/): Cross-site scripting in covid 19 travel pass management system project:covid 19 travel pass management system (medium 5.4)
- [CVE-2022-3084](https://insights.sbomify.com/CVE-2022-3084/): GE CIMPLICITY Access of Uninitialized Pointer (high 7.8)
- [CVE-2022-30839](https://insights.sbomify.com/CVE-2022-30839/): Cross-site scripting in room rent portal site project:room rent portal site (medium 6.1)
- [CVE-2022-30838](https://insights.sbomify.com/CVE-2022-30838/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (critical 9.8)
- [CVE-2022-30837](https://insights.sbomify.com/CVE-2022-30837/): Cross-site scripting in oretnom23:toll tax management system (medium 5.4)
- [CVE-2022-30836](https://insights.sbomify.com/CVE-2022-30836/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30835](https://insights.sbomify.com/CVE-2022-30835/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30834](https://insights.sbomify.com/CVE-2022-30834/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30833](https://insights.sbomify.com/CVE-2022-30833/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30832](https://insights.sbomify.com/CVE-2022-30832/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30831](https://insights.sbomify.com/CVE-2022-30831/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30830](https://insights.sbomify.com/CVE-2022-30830/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-3083](https://insights.sbomify.com/CVE-2022-3083/): Auth bypass in E850 (ZMQ200) (low 3.9)
- [CVE-2022-30829](https://insights.sbomify.com/CVE-2022-30829/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30828](https://insights.sbomify.com/CVE-2022-30828/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30827](https://insights.sbomify.com/CVE-2022-30827/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30826](https://insights.sbomify.com/CVE-2022-30826/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30825](https://insights.sbomify.com/CVE-2022-30825/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30823](https://insights.sbomify.com/CVE-2022-30823/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30822](https://insights.sbomify.com/CVE-2022-30822/): File upload in wedding management system project:wedding management system (high 8.8)
- [CVE-2022-30821](https://insights.sbomify.com/CVE-2022-30821/): File upload in wedding management system project:wedding management system (high 8.8)
- [CVE-2022-30820](https://insights.sbomify.com/CVE-2022-30820/): File upload in wedding management system project:wedding management system (high 8.8)
- [CVE-2022-3082](https://insights.sbomify.com/CVE-2022-3082/): miniOrange Discord Integration < 2.1.6 - Subscriber+ App Disabling (medium 6.5)
- [CVE-2022-30819](https://insights.sbomify.com/CVE-2022-30819/): File upload in wedding management system project:wedding management system (high 8.8)
- [CVE-2022-30818](https://insights.sbomify.com/CVE-2022-30818/): SQL injection in wedding management system project:wedding management system (high 7.2)
- [CVE-2022-30817](https://insights.sbomify.com/CVE-2022-30817/): SQL injection in simple bus ticket booking system project:simple bus ticket booking system (critical 9.8)
- [CVE-2022-30816](https://insights.sbomify.com/CVE-2022-30816/): SQL injection in elitecms:elite cms (critical 9.8)
- [CVE-2022-30815](https://insights.sbomify.com/CVE-2022-30815/): SQL injection in elitecms:elite cms (critical 9.8)
- [CVE-2022-30814](https://insights.sbomify.com/CVE-2022-30814/): SQL injection in elitecms:elite cms (critical 9.8)
- [CVE-2022-30813](https://insights.sbomify.com/CVE-2022-30813/): SQL injection in elitecms:elite cms (critical 9.8)
- [CVE-2022-30810](https://insights.sbomify.com/CVE-2022-30810/): SQL injection in elitecms:elite cms (critical 9.8)
- [CVE-2022-30809](https://insights.sbomify.com/CVE-2022-30809/): SQL injection in elitecms:elite cms (critical 9.8)
- [CVE-2022-30808](https://insights.sbomify.com/CVE-2022-30808/): File upload in elitecms:elite cms (critical 9.8)
- [CVE-2022-30804](https://insights.sbomify.com/CVE-2022-30804/): Path traversal in elitecms:elite cms (medium 6.5)
- [CVE-2022-3080](https://insights.sbomify.com/CVE-2022-3080/): BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly (high 7.5)
- [CVE-2022-30799](https://insights.sbomify.com/CVE-2022-30799/): SQL injection in online ordering system project:online ordering system (high 7.2)
- [CVE-2022-30798](https://insights.sbomify.com/CVE-2022-30798/): SQL injection in online ordering system project:online ordering system (high 7.2)
- [CVE-2022-30797](https://insights.sbomify.com/CVE-2022-30797/): SQL injection in online ordering system project:online ordering system (critical 9.8)
- [CVE-2022-30795](https://insights.sbomify.com/CVE-2022-30795/): SQL injection in online ordering system project:online ordering system (high 7.2)
- [CVE-2022-30794](https://insights.sbomify.com/CVE-2022-30794/): SQL injection in online ordering system project:online ordering system (high 7.2)
- [CVE-2022-30792](https://insights.sbomify.com/CVE-2022-30792/): Denial of service in CODESYS Control RTE (SL) (high 7.5)
- [CVE-2022-30791](https://insights.sbomify.com/CVE-2022-30791/): CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections (high 7.5)
- [CVE-2022-30790](https://insights.sbomify.com/CVE-2022-30790/): Memory corruption in denx:u-boot (high 7.8)
- [CVE-2022-3079](https://insights.sbomify.com/CVE-2022-3079/): Festo: CPX-CEC-C1 and CMXX, Missing Authentication for Critical Webpage Function (high 7.5)
- [CVE-2022-30789](https://insights.sbomify.com/CVE-2022-30789/): Memory corruption in debian:debian linux (medium 6.7)
- [CVE-2022-30788](https://insights.sbomify.com/CVE-2022-30788/): Memory corruption in debian:debian linux (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/321/