# Vulnerabilities published in 2022


- [CVE-2022-30787](https://insights.sbomify.com/CVE-2022-30787/): Integer overflow in debian:debian linux (medium 6.7)
- [CVE-2022-30786](https://insights.sbomify.com/CVE-2022-30786/): Memory corruption in debian:debian linux (medium 6.7)
- [CVE-2022-30785](https://insights.sbomify.com/CVE-2022-30785/): Memory corruption in debian:debian linux (medium 6.7)
- [CVE-2022-30784](https://insights.sbomify.com/CVE-2022-30784/): Denial of service in debian:debian linux (medium 6.7)
- [CVE-2022-30783](https://insights.sbomify.com/CVE-2022-30783/): Security feature bypass in debian:debian linux (medium 6.7)
- [CVE-2022-30782](https://insights.sbomify.com/CVE-2022-30782/): Weak cryptography in openmoney api project:openmoney api (high 7.5)
- [CVE-2022-30781](https://insights.sbomify.com/CVE-2022-30781/): Shell command injection in gitea (high 7.5)
- [CVE-2022-30780](https://insights.sbomify.com/CVE-2022-30780/): Denial of service in lighttpd:lighttpd (high 7.5)
- [CVE-2022-3078](https://insights.sbomify.com/CVE-2022-3078/): Memory corruption in Kernel (medium 5.5)
- [CVE-2022-30777](https://insights.sbomify.com/CVE-2022-30777/): Cross-site scripting in parallels:h-sphere (medium 6.1)
- [CVE-2022-30776](https://insights.sbomify.com/CVE-2022-30776/): Cross-site scripting in atmail:atmail (medium 6.1)
- [CVE-2022-30775](https://insights.sbomify.com/CVE-2022-30775/): Denial of service in xpdfreader:xpdf (medium 5.5)
- [CVE-2022-30774](https://insights.sbomify.com/CVE-2022-30774/): Race condition in insyde:kernel (medium 6.4)
- [CVE-2022-30773](https://insights.sbomify.com/CVE-2022-30773/): Race condition in insyde:kernel (medium 6.4)
- [CVE-2022-30772](https://insights.sbomify.com/CVE-2022-30772/): Memory corruption in insyde:kernel (high 8.2)
- [CVE-2022-30771](https://insights.sbomify.com/CVE-2022-30771/): Memory corruption in insyde:kernel (high 8.2)
- [CVE-2022-30770](https://insights.sbomify.com/CVE-2022-30770/): Cross-site scripting in terminalfour:terminalfour (medium 6.1)
- [CVE-2022-3077](https://insights.sbomify.com/CVE-2022-3077/): Memory corruption in kernel (medium 5.5)
- [CVE-2022-30769](https://insights.sbomify.com/CVE-2022-30769/): Auth bypass in zoneminder:zoneminder (medium 4.6)
- [CVE-2022-30768](https://insights.sbomify.com/CVE-2022-30768/): Cross-site scripting in zoneminder:zoneminder (medium 5.4)
- [CVE-2022-30767](https://insights.sbomify.com/CVE-2022-30767/): Memory corruption in denx:u-boot (critical 9.8)
- [CVE-2022-30765](https://insights.sbomify.com/CVE-2022-30765/): SQL injection in calibreweb (critical 9.8)
- [CVE-2022-30763](https://insights.sbomify.com/CVE-2022-30763/): Janet before 1.22.0 mishandles arrays. (high 7.5)
- [CVE-2022-30760](https://insights.sbomify.com/CVE-2022-30760/): Missing authorization in ihb-eg:fn2web (medium 4.3)
- [CVE-2022-3076](https://insights.sbomify.com/CVE-2022-3076/): CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload (high 7.2)
- [CVE-2022-30759](https://insights.sbomify.com/CVE-2022-30759/): Privilege escalation in nokia:one-nds (high 8.8)
- [CVE-2022-30758](https://insights.sbomify.com/CVE-2022-30758/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30757](https://insights.sbomify.com/CVE-2022-30757/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30756](https://insights.sbomify.com/CVE-2022-30756/): Privilege escalation in Samsung Mobile Devices (high 8.5)
- [CVE-2022-30755](https://insights.sbomify.com/CVE-2022-30755/): Auth bypass in Samsung Mobile Devices (high 7.3)
- [CVE-2022-30754](https://insights.sbomify.com/CVE-2022-30754/): Privilege escalation in Samsung Mobile Devices (high 8.5)
- [CVE-2022-30753](https://insights.sbomify.com/CVE-2022-30753/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-30752](https://insights.sbomify.com/CVE-2022-30752/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-30751](https://insights.sbomify.com/CVE-2022-30751/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-30750](https://insights.sbomify.com/CVE-2022-30750/): Missing authorization in Samsung Mobile Devices (low 3.3)
- [CVE-2022-3075](https://insights.sbomify.com/CVE-2022-3075/): Google Chromium Mojo Insufficient Data Validation (critical 9.6, exploited in the wild)
- [CVE-2022-30749](https://insights.sbomify.com/CVE-2022-30749/): Auth bypass in Smart Things (low 3.3)
- [CVE-2022-30748](https://insights.sbomify.com/CVE-2022-30748/): Missing authorization in Samsung Members (medium 4.0)
- [CVE-2022-30747](https://insights.sbomify.com/CVE-2022-30747/): Privilege escalation in Smart Things (medium 5.5)
- [CVE-2022-30746](https://insights.sbomify.com/CVE-2022-30746/): Missing authorization in Smart Things (high 7.5)
- [CVE-2022-30745](https://insights.sbomify.com/CVE-2022-30745/): Missing authorization in Quick Share (medium 4.0)
- [CVE-2022-30744](https://insights.sbomify.com/CVE-2022-30744/): Other in Samsung Kies (medium 6.2)
- [CVE-2022-30743](https://insights.sbomify.com/CVE-2022-30743/): Missing authorization in Samsung Account (medium 5.3)
- [CVE-2022-30742](https://insights.sbomify.com/CVE-2022-30742/): Information disclosure in Find My Mobile (low 3.3)
- [CVE-2022-30741](https://insights.sbomify.com/CVE-2022-30741/): Information disclosure in Find My Mobile (low 3.3)
- [CVE-2022-30740](https://insights.sbomify.com/CVE-2022-30740/): Information disclosure in Samsung Internet (medium 4.1)
- [CVE-2022-3074](https://insights.sbomify.com/CVE-2022-3074/): Slider Hero < 8.4.4 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-30739](https://insights.sbomify.com/CVE-2022-30739/): Privilege escalation in Samsung Account (medium 4.0)
- [CVE-2022-30738](https://insights.sbomify.com/CVE-2022-30738/): Other in Samsung Internet (medium 4.3)
- [CVE-2022-30737](https://insights.sbomify.com/CVE-2022-30737/): Information disclosure in Samsung Account (medium 4.0)
- [CVE-2022-30736](https://insights.sbomify.com/CVE-2022-30736/): Missing authorization in Samsung Account (medium 5.3)
- [CVE-2022-30735](https://insights.sbomify.com/CVE-2022-30735/): Missing authorization in Samsung Account (medium 5.9)
- [CVE-2022-30734](https://insights.sbomify.com/CVE-2022-30734/): Information disclosure in Samsung Account (medium 4.0)
- [CVE-2022-30733](https://insights.sbomify.com/CVE-2022-30733/): Information disclosure in Samsung Account (medium 4.0)
- [CVE-2022-30732](https://insights.sbomify.com/CVE-2022-30732/): Information disclosure in Samsung Account (medium 5.5)
- [CVE-2022-30731](https://insights.sbomify.com/CVE-2022-30731/): Missing authorization in My Files (medium 5.1)
- [CVE-2022-30730](https://insights.sbomify.com/CVE-2022-30730/): Missing authorization in Samsung Pass (medium 4.6)
- [CVE-2022-3073](https://insights.sbomify.com/CVE-2022-3073/): Quaonos Schema ST4 example templates prone to XSS (medium 6.1)
- [CVE-2022-30729](https://insights.sbomify.com/CVE-2022-30729/): Information disclosure in Samsung Mobile Devices (low 3.3)
- [CVE-2022-30728](https://insights.sbomify.com/CVE-2022-30728/): Information disclosure in Samsung Mobile Devices (low 1.9)
- [CVE-2022-30727](https://insights.sbomify.com/CVE-2022-30727/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-30726](https://insights.sbomify.com/CVE-2022-30726/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-30725](https://insights.sbomify.com/CVE-2022-30725/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30724](https://insights.sbomify.com/CVE-2022-30724/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30723](https://insights.sbomify.com/CVE-2022-30723/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30722](https://insights.sbomify.com/CVE-2022-30722/): Security feature bypass in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-30721](https://insights.sbomify.com/CVE-2022-30721/): Denial of service in Samsung Mobile Devices (low 2.5)
- [CVE-2022-30720](https://insights.sbomify.com/CVE-2022-30720/): Denial of service in Samsung Mobile Devices (low 2.5)
- [CVE-2022-3072](https://insights.sbomify.com/CVE-2022-3072/): Cross-site Scripting (XSS) - Stored in francoisjacquet/rosariosis (high 8.0)
- [CVE-2022-30719](https://insights.sbomify.com/CVE-2022-30719/): Denial of service in Samsung Mobile Devices (low 2.5)
- [CVE-2022-30717](https://insights.sbomify.com/CVE-2022-30717/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30716](https://insights.sbomify.com/CVE-2022-30716/): Information disclosure in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30715](https://insights.sbomify.com/CVE-2022-30715/): Missing authorization in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-30714](https://insights.sbomify.com/CVE-2022-30714/): Information disclosure in Samsung Mobile Devices (low 1.9)
- [CVE-2022-30713](https://insights.sbomify.com/CVE-2022-30713/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2022-30712](https://insights.sbomify.com/CVE-2022-30712/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2022-30711](https://insights.sbomify.com/CVE-2022-30711/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2022-30710](https://insights.sbomify.com/CVE-2022-30710/): Other in Samsung Mobile Devices (high 8.5)
- [CVE-2022-3071](https://insights.sbomify.com/CVE-2022-3071/): Use after free in Chrome (high 8.8)
- [CVE-2022-30709](https://insights.sbomify.com/CVE-2022-30709/): Denial of service in Samsung Mobile Devices (low 2.5)
- [CVE-2022-30708](https://insights.sbomify.com/CVE-2022-30708/): Code injection in webmin:webmin (high 8.8)
- [CVE-2022-30707](https://insights.sbomify.com/CVE-2022-30707/): Information disclosure in CAMS for HIS (high 8.8)
- [CVE-2022-30706](https://insights.sbomify.com/CVE-2022-30706/): Open redirect in Booked (medium 6.1)
- [CVE-2022-30705](https://insights.sbomify.com/CVE-2022-30705/): WordPress WordPress Ping Optimizer Plugin <= 2.35.1.2.3 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-30704](https://insights.sbomify.com/CVE-2022-30704/): Privilege escalation in Intel(R) Processors (high 7.2)
- [CVE-2022-30703](https://insights.sbomify.com/CVE-2022-30703/): Information disclosure in Trend Micro Security (Consumer) (high 7.8)
- [CVE-2022-30702](https://insights.sbomify.com/CVE-2022-30702/): Information disclosure in Trend Micro Security (Consumer) (medium 5.5)
- [CVE-2022-30701](https://insights.sbomify.com/CVE-2022-30701/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2022-30700](https://insights.sbomify.com/CVE-2022-30700/): Privilege escalation in Trend Micro Apex One (high 7.8)
- [CVE-2022-3070](https://insights.sbomify.com/CVE-2022-3070/): Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-30699](https://insights.sbomify.com/CVE-2022-30699/): Novel "ghost domain names" attack by updating almost expired delegation information (medium 6.5)
- [CVE-2022-30698](https://insights.sbomify.com/CVE-2022-30698/): Novel "ghost domain names" attack by introducing subdomain delegations (medium 6.5)
- [CVE-2022-30697](https://insights.sbomify.com/CVE-2022-30697/): Local privilege escalation due to insecure folder permissions (high 7.8)
- [CVE-2022-30696](https://insights.sbomify.com/CVE-2022-30696/): Local privilege escalation due to a DLL hijacking vulnerability (high 7.8)
- [CVE-2022-30695](https://insights.sbomify.com/CVE-2022-30695/): Local privilege escalation due to excessive permissions assigned to child processes (high 7.8)
- [CVE-2022-30694](https://insights.sbomify.com/CVE-2022-30694/): Cross-site request forgery in SIMATIC Drive Controller CPU 1504D TF (medium 6.5)
- [CVE-2022-30693](https://insights.sbomify.com/CVE-2022-30693/): Information disclosure in Cybozu Office (medium 5.3)
- [CVE-2022-30692](https://insights.sbomify.com/CVE-2022-30692/): Denial of service in Intel(R) SUR software (medium 5.9)
- [CVE-2022-30691](https://insights.sbomify.com/CVE-2022-30691/): Denial of service in Intel(R) Support Android application (medium 5.9)
- [CVE-2022-30690](https://insights.sbomify.com/CVE-2022-30690/): Cross-site scripting in AVideo (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/322/