# Vulnerabilities published in 2022


- [CVE-2022-3069](https://insights.sbomify.com/CVE-2022-3069/): Wordlift < 3.37.2 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-30689](https://insights.sbomify.com/CVE-2022-30689/): HashiCorp Vault improper configuration of multi factor authentication (medium 5.3)
- [CVE-2022-30688](https://insights.sbomify.com/CVE-2022-30688/): Privilege escalation in debian:debian linux (high 7.8)
- [CVE-2022-30687](https://insights.sbomify.com/CVE-2022-30687/): Path traversal in Trend Micro Maximum Security (high 7.1)
- [CVE-2022-30686](https://insights.sbomify.com/CVE-2022-30686/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30685](https://insights.sbomify.com/CVE-2022-30685/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30684](https://insights.sbomify.com/CVE-2022-30684/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30683](https://insights.sbomify.com/CVE-2022-30683/): AEM Violation of Secure Design Principles Security feature bypass (medium 5.3)
- [CVE-2022-30682](https://insights.sbomify.com/CVE-2022-30682/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30681](https://insights.sbomify.com/CVE-2022-30681/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30680](https://insights.sbomify.com/CVE-2022-30680/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-3068](https://insights.sbomify.com/CVE-2022-3068/): Improper Privilege Management in octoprint/octoprint (medium 5.3)
- [CVE-2022-30679](https://insights.sbomify.com/CVE-2022-30679/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30678](https://insights.sbomify.com/CVE-2022-30678/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30677](https://insights.sbomify.com/CVE-2022-30677/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-30676](https://insights.sbomify.com/CVE-2022-30676/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-30675](https://insights.sbomify.com/CVE-2022-30675/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-30674](https://insights.sbomify.com/CVE-2022-30674/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-30673](https://insights.sbomify.com/CVE-2022-30673/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-30672](https://insights.sbomify.com/CVE-2022-30672/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-30671](https://insights.sbomify.com/CVE-2022-30671/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-30670](https://insights.sbomify.com/CVE-2022-30670/): Escalate Privileges to Server Admin - Robohelp Server (high 8.8)
- [CVE-2022-3067](https://insights.sbomify.com/CVE-2022-3067/): Missing authorization in GitLab (medium 6.5)
- [CVE-2022-30669](https://insights.sbomify.com/CVE-2022-30669/): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (medium 5.5)
- [CVE-2022-30668](https://insights.sbomify.com/CVE-2022-30668/): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (medium 5.5)
- [CVE-2022-30667](https://insights.sbomify.com/CVE-2022-30667/): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (medium 5.5)
- [CVE-2022-30666](https://insights.sbomify.com/CVE-2022-30666/): Adobe Illustrator Out-of-bounds Read Vulnerability could lead to Memory Leak (medium 5.5)
- [CVE-2022-30665](https://insights.sbomify.com/CVE-2022-30665/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30664](https://insights.sbomify.com/CVE-2022-30664/): Adobe Animate SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30663](https://insights.sbomify.com/CVE-2022-30663/): Adobe InDesign SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30662](https://insights.sbomify.com/CVE-2022-30662/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30661](https://insights.sbomify.com/CVE-2022-30661/): Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30660](https://insights.sbomify.com/CVE-2022-30660/): Adobe InDesign PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3066](https://insights.sbomify.com/CVE-2022-3066/): Missing authorization in GitLab (medium 5.4)
- [CVE-2022-30659](https://insights.sbomify.com/CVE-2022-30659/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30658](https://insights.sbomify.com/CVE-2022-30658/): Adobe InDesign Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30657](https://insights.sbomify.com/CVE-2022-30657/): Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30656](https://insights.sbomify.com/CVE-2022-30656/): Adobe InCopy PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30655](https://insights.sbomify.com/CVE-2022-30655/): Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30654](https://insights.sbomify.com/CVE-2022-30654/): Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30653](https://insights.sbomify.com/CVE-2022-30653/): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30652](https://insights.sbomify.com/CVE-2022-30652/): Adobe InCopy SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30651](https://insights.sbomify.com/CVE-2022-30651/): Adobe InCopy Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30650](https://insights.sbomify.com/CVE-2022-30650/): Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3065](https://insights.sbomify.com/CVE-2022-3065/): Improper Access Control in jgraph/drawio (medium 5.3)
- [CVE-2022-30649](https://insights.sbomify.com/CVE-2022-30649/): Adobe Illustrator Out-of-bounds Write could lead to Arbitrary code execution (high 7.8)
- [CVE-2022-30648](https://insights.sbomify.com/CVE-2022-30648/): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30647](https://insights.sbomify.com/CVE-2022-30647/): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30646](https://insights.sbomify.com/CVE-2022-30646/): Adobe Illustrator Font Parsing Out-of-bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30645](https://insights.sbomify.com/CVE-2022-30645/): Adobe Illustrator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30644](https://insights.sbomify.com/CVE-2022-30644/): Adobe Illustrator Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30643](https://insights.sbomify.com/CVE-2022-30643/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30642](https://insights.sbomify.com/CVE-2022-30642/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30641](https://insights.sbomify.com/CVE-2022-30641/): Adobe Illustrator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30640](https://insights.sbomify.com/CVE-2022-30640/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-3064](https://insights.sbomify.com/CVE-2022-3064/): Excessive resource consumption in gopkg.in/yaml.v2 (high 7.5)
- [CVE-2022-30639](https://insights.sbomify.com/CVE-2022-30639/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30638](https://insights.sbomify.com/CVE-2022-30638/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30637](https://insights.sbomify.com/CVE-2022-30637/): Adobe Illustrator Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30636](https://insights.sbomify.com/CVE-2022-30636/): Limited directory traversal vulnerability on Windows in golang.org/x/crypto (high 7.5)
- [CVE-2022-30635](https://insights.sbomify.com/CVE-2022-30635/): Stack exhaustion when decoding certain messages in encoding/gob (high 7.5)
- [CVE-2022-30634](https://insights.sbomify.com/CVE-2022-30634/): Indefinite hang with large buffers on Windows in crypto/rand (high 7.5)
- [CVE-2022-30633](https://insights.sbomify.com/CVE-2022-30633/): Stack exhaustion when unmarshaling certain documents in encoding/xml (high 7.5)
- [CVE-2022-30632](https://insights.sbomify.com/CVE-2022-30632/): Stack exhaustion on crafted paths in path/filepath (high 7.5)
- [CVE-2022-30631](https://insights.sbomify.com/CVE-2022-30631/): Stack exhaustion when reading certain archives in compress/gzip (high 7.5)
- [CVE-2022-30630](https://insights.sbomify.com/CVE-2022-30630/): Stack exhaustion in Glob on certain paths in io/fs (high 7.5)
- [CVE-2022-30629](https://insights.sbomify.com/CVE-2022-30629/): Session tickets lack random ticket_age_add in crypto/tls (low 3.1)
- [CVE-2022-30628](https://insights.sbomify.com/CVE-2022-30628/): Supersmart.me – Walk Through access to business information without authentication (medium 4.8)
- [CVE-2022-30627](https://insights.sbomify.com/CVE-2022-30627/): Chcnav - P5E GNSS Information disclosure hard coded credentials. (medium 5.7)
- [CVE-2022-30626](https://insights.sbomify.com/CVE-2022-30626/): Chcnav - P5E GNSS API not secure (medium 6.3)
- [CVE-2022-30625](https://insights.sbomify.com/CVE-2022-30625/): Chcnav - P5E GNSS Directory listing (medium 5.7)
- [CVE-2022-30624](https://insights.sbomify.com/CVE-2022-30624/): Chcnav - P5E GNSS Authentication bypass admin password reset (medium 6.8)
- [CVE-2022-30623](https://insights.sbomify.com/CVE-2022-30623/): Chcnav - P5E GNSS Authentication bypass (medium 5.9)
- [CVE-2022-30622](https://insights.sbomify.com/CVE-2022-30622/): Chcnav - P5E GNSS Information disclosure (medium 5.3)
- [CVE-2022-30621](https://insights.sbomify.com/CVE-2022-30621/): Cellinx NVT – IP PTZ Camera local file inclusion (high 7.6)
- [CVE-2022-30620](https://insights.sbomify.com/CVE-2022-30620/): Cellinx NVT – IP PTZ Camera Privilege Escalation (high 8.2)
- [CVE-2022-3062](https://insights.sbomify.com/CVE-2022-3062/): Simple File List < 4.4.12 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-30619](https://insights.sbomify.com/CVE-2022-30619/): Agile Point - Agile Point NX SQL injection (SQLi) (medium 5.9)
- [CVE-2022-30618](https://insights.sbomify.com/CVE-2022-30618/): Improper Removal of Sensitive Information Before Storage or Transfer in Strapi (high 7.5)
- [CVE-2022-30617](https://insights.sbomify.com/CVE-2022-30617/): Improper Removal of Sensitive Information Before Storage or Transfer in Strapi (high 8.8)
- [CVE-2022-30616](https://insights.sbomify.com/CVE-2022-30616/): Privilege escalation in Robotic Process Automation (high 8.0)
- [CVE-2022-30615](https://insights.sbomify.com/CVE-2022-30615/): Cross-site scripting in IBM InfoSphere Information Server (medium 5.4)
- [CVE-2022-30614](https://insights.sbomify.com/CVE-2022-30614/): Denial of service in Cognos Analytics (medium 6.5)
- [CVE-2022-30613](https://insights.sbomify.com/CVE-2022-30613/): Information disclosure in QRadar SIEM (medium 4.4)
- [CVE-2022-30611](https://insights.sbomify.com/CVE-2022-30611/): Cross-site scripting in Spectrum Copy Data Management (medium 5.4)
- [CVE-2022-30610](https://insights.sbomify.com/CVE-2022-30610/): Other in Spectrum Copy Data Management (medium 4.4)
- [CVE-2022-3061](https://insights.sbomify.com/CVE-2022-3061/): Denial of service in Kernel (medium 5.5)
- [CVE-2022-30608](https://insights.sbomify.com/CVE-2022-30608/): Cross-site request forgery in IBM InfoSphere Information Server (high 8.8)
- [CVE-2022-30607](https://insights.sbomify.com/CVE-2022-30607/): Information disclosure in Robotic Process Automation (low 2.7)
- [CVE-2022-30605](https://insights.sbomify.com/CVE-2022-30605/): Privilege escalation in AVideo (high 8.8)
- [CVE-2022-30604](https://insights.sbomify.com/CVE-2022-30604/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2022-30603](https://insights.sbomify.com/CVE-2022-30603/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-30602](https://insights.sbomify.com/CVE-2022-30602/): Missing authorization in Cybozu Garoon (high 8.1)
- [CVE-2022-30601](https://insights.sbomify.com/CVE-2022-30601/): Information disclosure in Intel(R) AMT and Intel(R) Standard Manageability (critical 9.8)
- [CVE-2022-30600](https://insights.sbomify.com/CVE-2022-30600/): Incorrect Calculation in moodle (critical 9.8)
- [CVE-2022-3060](https://insights.sbomify.com/CVE-2022-3060/): Path traversal in GitLab (high 7.3)
- [CVE-2022-30599](https://insights.sbomify.com/CVE-2022-30599/): SQL injection in moodle (critical 9.8)
- [CVE-2022-30598](https://insights.sbomify.com/CVE-2022-30598/): Exposure of Sensitive Information in moodle (medium 4.3)
- [CVE-2022-30597](https://insights.sbomify.com/CVE-2022-30597/): External Control of Assumed-Immutable Web Parameter in moodle (medium 5.3)
- [CVE-2022-30596](https://insights.sbomify.com/CVE-2022-30596/): Cross-site Scripting in moodle (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/323/