# Vulnerabilities published in 2022


- [CVE-2022-30595](https://insights.sbomify.com/CVE-2022-30595/): Buffer over-flow in Pillow (critical 9.8)
- [CVE-2022-30594](https://insights.sbomify.com/CVE-2022-30594/): Security feature bypass in debian:debian linux (high 7.8)
- [CVE-2022-30592](https://insights.sbomify.com/CVE-2022-30592/): Null dereference in litespeedtech:lsquic (critical 9.8)
- [CVE-2022-30591](https://insights.sbomify.com/CVE-2022-30591/): Denial of service in quic-go project:quic-go (high 7.5)
- [CVE-2022-3059](https://insights.sbomify.com/CVE-2022-3059/): SQL injection in Schoolbox version 21.0.2, by Schoolbox Pty Ltd (high 8.6)
- [CVE-2022-30587](https://insights.sbomify.com/CVE-2022-30587/): Information disclosure in gradle:gradle enterprise (high 7.5)
- [CVE-2022-30586](https://insights.sbomify.com/CVE-2022-30586/): Missing authorization in gradle:gradle (high 7.2)
- [CVE-2022-30585](https://insights.sbomify.com/CVE-2022-30585/): Missing authorization in rsa:archer (medium 6.5)
- [CVE-2022-30584](https://insights.sbomify.com/CVE-2022-30584/): Missing authorization in rsa:archer (critical 9.6)
- [CVE-2022-30580](https://insights.sbomify.com/CVE-2022-30580/): Empty Cmd.Path can trigger unintended binary in os/exec on Windows (high 7.8)
- [CVE-2022-3058](https://insights.sbomify.com/CVE-2022-3058/): Use after free in Chrome (high 8.8)
- [CVE-2022-30579](https://insights.sbomify.com/CVE-2022-30579/): TIBCO Spotfire Server Blind SSRF vulnerability (high 7.1)
- [CVE-2022-30578](https://insights.sbomify.com/CVE-2022-30578/): TIBCO EBX Add-ons Stored XSS vulnerability (high 8.0)
- [CVE-2022-30577](https://insights.sbomify.com/CVE-2022-30577/): TIBCO EBX Stored XSS vulnerability (high 8.0)
- [CVE-2022-30576](https://insights.sbomify.com/CVE-2022-30576/): TIBCO Statistica Stored Cross Site Scripting (XSS) Vulnerability (high 8.7)
- [CVE-2022-30575](https://insights.sbomify.com/CVE-2022-30575/): TIBCO Statistica Reflected Cross Site Scripting (XSS) Vulnerability (high 7.3)
- [CVE-2022-30574](https://insights.sbomify.com/CVE-2022-30574/): TIBCO eFTL Secret Jacking (medium 4.6)
- [CVE-2022-30573](https://insights.sbomify.com/CVE-2022-30573/): TIBCO FTL Privilege Escalation (medium 6.7)
- [CVE-2022-30572](https://insights.sbomify.com/CVE-2022-30572/): TIBCO iWay Service Manager Directory Traversal Vulnerability (medium 6.5)
- [CVE-2022-30571](https://insights.sbomify.com/CVE-2022-30571/): TIBCO iWay Service Manager Reflected Cross Site Scripting (XSS) Vulnerability (high 8.1)
- [CVE-2022-30570](https://insights.sbomify.com/CVE-2022-30570/): TIBCO Data Virtualization Access Control Vulnerability (medium 6.5)
- [CVE-2022-3057](https://insights.sbomify.com/CVE-2022-3057/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-30564](https://insights.sbomify.com/CVE-2022-30564/): Missing authorization in IPC-HX5XXX,IPC-HX7XXX,SD5A,SD22,SD59,NVR5XXX-I,NVR5XXX-I/L,NVR4XXX-I,NVR2XXX-I,XVRXXXX-I2,XVRXXXX-X (medium 5.3)
- [CVE-2022-30563](https://insights.sbomify.com/CVE-2022-30563/): Auth bypass in IPCHDBW2XXX[IPCHFW2XXX[ASI7XXXX (high 7.4)
- [CVE-2022-30562](https://insights.sbomify.com/CVE-2022-30562/): Open redirect in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX (medium 4.7)
- [CVE-2022-30561](https://insights.sbomify.com/CVE-2022-30561/): Auth bypass in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX (medium 5.9)
- [CVE-2022-30560](https://insights.sbomify.com/CVE-2022-30560/): Denial of service in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX (high 7.4)
- [CVE-2022-3056](https://insights.sbomify.com/CVE-2022-3056/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-30557](https://insights.sbomify.com/CVE-2022-30557/): Memory corruption in foxit:pdf editor (high 7.5)
- [CVE-2022-30556](https://insights.sbomify.com/CVE-2022-30556/): Information Disclosure in mod_lua with websockets (high 7.5)
- [CVE-2022-30552](https://insights.sbomify.com/CVE-2022-30552/): Memory corruption in denx:u-boot (medium 5.5)
- [CVE-2022-30551](https://insights.sbomify.com/CVE-2022-30551/): Denial of service in opcfoundation:ua-java (high 7.5)
- [CVE-2022-30550](https://insights.sbomify.com/CVE-2022-30550/): Misconfiguration in debian:debian linux (high 8.8)
- [CVE-2022-3055](https://insights.sbomify.com/CVE-2022-3055/): Use after free in Chrome (high 8.8)
- [CVE-2022-30549](https://insights.sbomify.com/CVE-2022-30549/): Memory corruption in V-Server and V-Server Lite (high 7.8)
- [CVE-2022-30548](https://insights.sbomify.com/CVE-2022-30548/): Privilege escalation in Intel(R) Glorp software (medium 6.7)
- [CVE-2022-30547](https://insights.sbomify.com/CVE-2022-30547/): Path traversal in AVideo (critical 9.9)
- [CVE-2022-30546](https://insights.sbomify.com/CVE-2022-30546/): Memory corruption in V-SFT (high 7.8)
- [CVE-2022-30545](https://insights.sbomify.com/CVE-2022-30545/): WordPress 5 Anker Connect plugin <= 1.2.6 - Reflected Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-30544](https://insights.sbomify.com/CVE-2022-30544/): WordPress OSM – OpenStreetMap Plugin <= 6.0.1 is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.3)
- [CVE-2022-30543](https://insights.sbomify.com/CVE-2022-30543/): Other in InRouter302 (medium 4.3)
- [CVE-2022-30542](https://insights.sbomify.com/CVE-2022-30542/): Privilege escalation in Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families (high 8.2)
- [CVE-2022-30541](https://insights.sbomify.com/CVE-2022-30541/): Command injection in iota All-In-One Security Kit (critical 10.0)
- [CVE-2022-30540](https://insights.sbomify.com/CVE-2022-30540/): Horner Automation Cscape Csfont (high 7.8)
- [CVE-2022-3054](https://insights.sbomify.com/CVE-2022-3054/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-30539](https://insights.sbomify.com/CVE-2022-30539/): Use after free in Intel(R) Processors (high 7.5)
- [CVE-2022-30538](https://insights.sbomify.com/CVE-2022-30538/): Memory corruption in V-SFT (high 7.8)
- [CVE-2022-30536](https://insights.sbomify.com/CVE-2022-30536/): WordPress WP Maintenance plugin <= 6.0.7 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (low 3.4)
- [CVE-2022-30535](https://insights.sbomify.com/CVE-2022-30535/): NGINX Ingress Controller vulnerability CVE-2022-30535 (medium 6.5)
- [CVE-2022-30534](https://insights.sbomify.com/CVE-2022-30534/): Command injection in AVideo (critical 9.9)
- [CVE-2022-30533](https://insights.sbomify.com/CVE-2022-30533/): Cross-site scripting in Modern Events Calendar Lite (medium 5.4)
- [CVE-2022-30532](https://insights.sbomify.com/CVE-2022-30532/): Other in Octopus Server (medium 5.3)
- [CVE-2022-30531](https://insights.sbomify.com/CVE-2022-30531/): Memory corruption in Intel(R) Iris(R) Xe MAX drivers for Windows (medium 4.4)
- [CVE-2022-30530](https://insights.sbomify.com/CVE-2022-30530/): Privilege escalation in Intel(R) DSA software (high 7.8)
- [CVE-2022-3053](https://insights.sbomify.com/CVE-2022-3053/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-30529](https://insights.sbomify.com/CVE-2022-30529/): File upload in isic.lk project:isic.lk (high 7.2)
- [CVE-2022-30528](https://insights.sbomify.com/CVE-2022-30528/): SQL injection in isic.lk project:isic.lk (critical 9.8)
- [CVE-2022-30527](https://insights.sbomify.com/CVE-2022-30527/): Misconfiguration in SINEC NMS (high 7.8)
- [CVE-2022-30526](https://insights.sbomify.com/CVE-2022-30526/): Privilege escalation in ATP series firmware (high 7.8)
- [CVE-2022-30525](https://insights.sbomify.com/CVE-2022-30525/): Zyxel Multiple Firewalls OS Command Injection (critical 9.8, exploited in the wild)
- [CVE-2022-30524](https://insights.sbomify.com/CVE-2022-30524/): Memory corruption in xpdfreader:xpdf (high 7.8)
- [CVE-2022-30523](https://insights.sbomify.com/CVE-2022-30523/): Privilege escalation in Trend Micro Password Manager (high 7.8)
- [CVE-2022-30522](https://insights.sbomify.com/CVE-2022-30522/): mod_sed denial of service (high 7.5)
- [CVE-2022-30521](https://insights.sbomify.com/CVE-2022-30521/): Memory corruption in dlink:dir-890l firmware (critical 9.8)
- [CVE-2022-3052](https://insights.sbomify.com/CVE-2022-3052/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-30519](https://insights.sbomify.com/CVE-2022-30519/): Cross-site scripting in reprisesoftware:reprise license manager (medium 6.1)
- [CVE-2022-30518](https://insights.sbomify.com/CVE-2022-30518/): SQL injection in chatbot application with a suggestion feature project:chatbot application with a suggestion feature (critical 9.8)
- [CVE-2022-30517](https://insights.sbomify.com/CVE-2022-30517/): Cross-site scripting in mogublog project:mogublog (medium 6.1)
- [CVE-2022-30516](https://insights.sbomify.com/CVE-2022-30516/): SQL injection in hospital management system project:hospital management system (critical 9.8)
- [CVE-2022-30515](https://insights.sbomify.com/CVE-2022-30515/): Missing authorization in zkteco:biotime (medium 5.3)
- [CVE-2022-30514](https://insights.sbomify.com/CVE-2022-30514/): Cross-site scripting in school dormitory management system project:school dormitory management system (medium 6.1)
- [CVE-2022-30513](https://insights.sbomify.com/CVE-2022-30513/): Cross-site scripting in school dormitory management system project:school dormitory management system (medium 6.1)
- [CVE-2022-30512](https://insights.sbomify.com/CVE-2022-30512/): SQL injection in school dormitory management system project:school dormitory management system (critical 9.8)
- [CVE-2022-30511](https://insights.sbomify.com/CVE-2022-30511/): SQL injection in school dormitory management system project:school dormitory management system (critical 9.8)
- [CVE-2022-30510](https://insights.sbomify.com/CVE-2022-30510/): SQL injection in school dormitory management system project:school dormitory management system (critical 9.8)
- [CVE-2022-3051](https://insights.sbomify.com/CVE-2022-3051/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-30508](https://insights.sbomify.com/CVE-2022-30508/): Path traversal in dedecms:dedecms (medium 6.5)
- [CVE-2022-30506](https://insights.sbomify.com/CVE-2022-30506/): Code injection in MCMS (critical 9.8)
- [CVE-2022-30503](https://insights.sbomify.com/CVE-2022-30503/): Memory corruption in nginx:njs (medium 5.5)
- [CVE-2022-30500](https://insights.sbomify.com/CVE-2022-30500/): SQL injection in jflyfox jfinal (critical 9.8)
- [CVE-2022-3050](https://insights.sbomify.com/CVE-2022-3050/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-30496](https://insights.sbomify.com/CVE-2022-30496/): SQL injection in mv:idce (high 7.5)
- [CVE-2022-30495](https://insights.sbomify.com/CVE-2022-30495/): Missing authorization in automotive shop management system project:automotive shop management system (critical 9.8)
- [CVE-2022-30494](https://insights.sbomify.com/CVE-2022-30494/): Cross-site scripting in automotive shop management system project:automotive shop management system (medium 5.4)
- [CVE-2022-30493](https://insights.sbomify.com/CVE-2022-30493/): SQL injection in automotive shop management system project:automotive shop management system (critical 9.8)
- [CVE-2022-30490](https://insights.sbomify.com/CVE-2022-30490/): SQL injection in badminton center management system project:badminton center management system (critical 9.8)
- [CVE-2022-3049](https://insights.sbomify.com/CVE-2022-3049/): Use after free in Chrome (high 8.8)
- [CVE-2022-30489](https://insights.sbomify.com/CVE-2022-30489/): Cross-site scripting in wavlink:wn535g3 firmware (medium 6.1)
- [CVE-2022-30482](https://insights.sbomify.com/CVE-2022-30482/): Cross-site scripting in ecommerce-project-with-php-and-mysqli-fruits-bazar project:ecommerce-project-with-php-and-mysqli-fruits-bazar (medium 4.8)
- [CVE-2022-30481](https://insights.sbomify.com/CVE-2022-30481/): SQL injection in food-order-and-table-reservation-system project:food-order-and-table-reservation-system (critical 9.8)
- [CVE-2022-3048](https://insights.sbomify.com/CVE-2022-3048/): Security feature bypass in Chrome (medium 6.8)
- [CVE-2022-30478](https://insights.sbomify.com/CVE-2022-30478/): SQL injection in ecommerce-project-with-php-and-mysqli-fruits-bazar project:ecommerce-project-with-php-and-mysqli-fruits-bazar (critical 9.8)
- [CVE-2022-30477](https://insights.sbomify.com/CVE-2022-30477/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-30476](https://insights.sbomify.com/CVE-2022-30476/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-30475](https://insights.sbomify.com/CVE-2022-30475/): Memory corruption in tenda:ac18 firmware (high 7.5)
- [CVE-2022-30474](https://insights.sbomify.com/CVE-2022-30474/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-30473](https://insights.sbomify.com/CVE-2022-30473/): Memory corruption in tenda:ac18 firmware (high 7.5)
- [CVE-2022-30472](https://insights.sbomify.com/CVE-2022-30472/): Memory corruption in tenda:ac18 firmware (critical 9.8)
- [CVE-2022-30470](https://insights.sbomify.com/CVE-2022-30470/): Code injection in afian:filerun (critical 9.8)
- [CVE-2022-3047](https://insights.sbomify.com/CVE-2022-3047/): Security feature bypass in Chrome (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/324/