# Vulnerabilities published in 2022 - [CVE-2022-30469](https://insights.sbomify.com/CVE-2022-30469/): SQL injection in afian:filerun (high 8.8) - [CVE-2022-30467](https://insights.sbomify.com/CVE-2022-30467/): Denial of service in joyebike:wolf 2022 firmware (medium 6.8) - [CVE-2022-30466](https://insights.sbomify.com/CVE-2022-30466/): Auth bypass in joybike:wolf firmware (medium 6.5) - [CVE-2022-30464](https://insights.sbomify.com/CVE-2022-30464/): Cross-site scripting in chatbot app with suggestion project:chatbot app with suggestion (medium 5.4) - [CVE-2022-30463](https://insights.sbomify.com/CVE-2022-30463/): SQL injection in automotive shop management system project:automotive shop management system (high 8.8) - [CVE-2022-30462](https://insights.sbomify.com/CVE-2022-30462/): Cross-site scripting in water billing system project:water billing system (medium 5.4) - [CVE-2022-30461](https://insights.sbomify.com/CVE-2022-30461/): SQL injection in water billing system project:water billing system (critical 9.8) - [CVE-2022-30460](https://insights.sbomify.com/CVE-2022-30460/): Cross-site scripting in simple social networking site project:simple social networking site (medium 5.4) - [CVE-2022-3046](https://insights.sbomify.com/CVE-2022-3046/): Use after free in Chrome (high 8.8) - [CVE-2022-30459](https://insights.sbomify.com/CVE-2022-30459/): SQL injection in chatbot app with suggestion project:chatbot app with suggestion (high 8.8) - [CVE-2022-30458](https://insights.sbomify.com/CVE-2022-30458/): Cross-site scripting in automotive shop management system project:automotive shop management system (medium 5.4) - [CVE-2022-30456](https://insights.sbomify.com/CVE-2022-30456/): Cross-site scripting in badminton center management system project:badminton center management system (medium 5.4) - [CVE-2022-30455](https://insights.sbomify.com/CVE-2022-30455/): SQL injection in badminton center management system project:badminton center management system (critical 9.8) - [CVE-2022-30454](https://insights.sbomify.com/CVE-2022-30454/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30453](https://insights.sbomify.com/CVE-2022-30453/): Code injection in shopwind:shopwind (critical 9.8) - [CVE-2022-30452](https://insights.sbomify.com/CVE-2022-30452/): SQL injection in shopwind:shopwind (high 7.2) - [CVE-2022-30451](https://insights.sbomify.com/CVE-2022-30451/): SQL injection in waimairencms project:waimairencms (high 8.8) - [CVE-2022-30450](https://insights.sbomify.com/CVE-2022-30450/): Code injection in waimairencms project:waimairencms (critical 9.8) - [CVE-2022-3045](https://insights.sbomify.com/CVE-2022-3045/): Memory corruption in Chrome (high 8.8) - [CVE-2022-30449](https://insights.sbomify.com/CVE-2022-30449/): SQL injection in hospital management system project:hospital management system (critical 9.8) - [CVE-2022-30448](https://insights.sbomify.com/CVE-2022-30448/): File upload in hospital management system project:hospital management system (critical 9.8) - [CVE-2022-3044](https://insights.sbomify.com/CVE-2022-3044/): Security feature bypass in Chrome (medium 6.5) - [CVE-2022-3043](https://insights.sbomify.com/CVE-2022-3043/): Memory corruption in Chrome (high 8.8) - [CVE-2022-30429](https://insights.sbomify.com/CVE-2022-30429/): Neos CMS vulnerable to XSS in various backend modules (medium 5.4) - [CVE-2022-30428](https://insights.sbomify.com/CVE-2022-30428/): Arbitrary file read in ginadmin (high 7.5) - [CVE-2022-30427](https://insights.sbomify.com/CVE-2022-30427/): Path traversal in ginadmin (high 7.5) - [CVE-2022-30426](https://insights.sbomify.com/CVE-2022-30426/): Memory corruption in acer:altos t110 f3 firmware (high 7.8) - [CVE-2022-30425](https://insights.sbomify.com/CVE-2022-30425/): Command injection in tenda:hg6 firmware (high 8.8) - [CVE-2022-30423](https://insights.sbomify.com/CVE-2022-30423/): File upload in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30422](https://insights.sbomify.com/CVE-2022-30422/): Hardcoded credentials in proietti:planet time enterprise (critical 9.8) - [CVE-2022-30421](https://insights.sbomify.com/CVE-2022-30421/): Auth bypass in toshiba:storage security software (high 7.8) - [CVE-2022-3042](https://insights.sbomify.com/CVE-2022-3042/): Use after free in Chrome (high 8.8) - [CVE-2022-30417](https://insights.sbomify.com/CVE-2022-30417/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (high 7.2) - [CVE-2022-30415](https://insights.sbomify.com/CVE-2022-30415/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (high 7.2) - [CVE-2022-30414](https://insights.sbomify.com/CVE-2022-30414/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (high 7.2) - [CVE-2022-30413](https://insights.sbomify.com/CVE-2022-30413/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (critical 9.8) - [CVE-2022-30412](https://insights.sbomify.com/CVE-2022-30412/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (high 7.2) - [CVE-2022-30411](https://insights.sbomify.com/CVE-2022-30411/): SQL injection in covid 19 travel pass management system project:covid 19 travel pass management system (high 7.2) - [CVE-2022-3041](https://insights.sbomify.com/CVE-2022-3041/): Use after free in Chrome (high 8.8) - [CVE-2022-30408](https://insights.sbomify.com/CVE-2022-30408/): Path traversal in covid 19 travel pass management system project:covid 19 travel pass management system (medium 6.5) - [CVE-2022-30407](https://insights.sbomify.com/CVE-2022-30407/): SQL injection in pharmacy sales and inventory system project:pharmacy sales and inventory system (critical 9.8) - [CVE-2022-30404](https://insights.sbomify.com/CVE-2022-30404/): SQL injection in college management system project:college management system (high 7.2) - [CVE-2022-30403](https://insights.sbomify.com/CVE-2022-30403/): SQL injection in merchandise online store product:merchandise online store (high 7.2) - [CVE-2022-30402](https://insights.sbomify.com/CVE-2022-30402/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-30401](https://insights.sbomify.com/CVE-2022-30401/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-30400](https://insights.sbomify.com/CVE-2022-30400/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-3040](https://insights.sbomify.com/CVE-2022-3040/): Use after free in Chrome (high 8.8) - [CVE-2022-30399](https://insights.sbomify.com/CVE-2022-30399/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-30398](https://insights.sbomify.com/CVE-2022-30398/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-30396](https://insights.sbomify.com/CVE-2022-30396/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-30395](https://insights.sbomify.com/CVE-2022-30395/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30393](https://insights.sbomify.com/CVE-2022-30393/): SQL injection in merchandise online store project:merchandise online store (high 7.2) - [CVE-2022-30392](https://insights.sbomify.com/CVE-2022-30392/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30391](https://insights.sbomify.com/CVE-2022-30391/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-3039](https://insights.sbomify.com/CVE-2022-3039/): Use after free in Chrome (high 8.8) - [CVE-2022-30387](https://insights.sbomify.com/CVE-2022-30387/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30386](https://insights.sbomify.com/CVE-2022-30386/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30385](https://insights.sbomify.com/CVE-2022-30385/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30384](https://insights.sbomify.com/CVE-2022-30384/): SQL injection in merchandise online store project:merchandise online store (critical 9.8) - [CVE-2022-30381](https://insights.sbomify.com/CVE-2022-30381/): Path traversal in merchandise online store project:merchandise online store (medium 6.5) - [CVE-2022-3038](https://insights.sbomify.com/CVE-2022-3038/): Google Chromium Network Service Use-After-Free (high 8.8, exploited in the wild) - [CVE-2022-30379](https://insights.sbomify.com/CVE-2022-30379/): SQL injection in simple social networking site project:simple social networking site (high 7.2) - [CVE-2022-30378](https://insights.sbomify.com/CVE-2022-30378/): SQL injection in simple social networking site project:simple social networking site (high 7.2) - [CVE-2022-30376](https://insights.sbomify.com/CVE-2022-30376/): SQL injection in simple social networking site project:simple social networking site (high 7.2) - [CVE-2022-30375](https://insights.sbomify.com/CVE-2022-30375/): Missing authorization in simple social networking site project:simple social networking site (medium 6.5) - [CVE-2022-30374](https://insights.sbomify.com/CVE-2022-30374/): SQL injection in air cargo management system project:air cargo management system (high 7.2) - [CVE-2022-30373](https://insights.sbomify.com/CVE-2022-30373/): SQL injection in air cargo management system project:air cargo management system (high 7.2) - [CVE-2022-30372](https://insights.sbomify.com/CVE-2022-30372/): SQL injection in air cargo management system project:air cargo management system (high 7.2) - [CVE-2022-30371](https://insights.sbomify.com/CVE-2022-30371/): SQL injection in air cargo management system project:air cargo management system (high 7.2) - [CVE-2022-30370](https://insights.sbomify.com/CVE-2022-30370/): SQL injection in air cargo management system project:air cargo management system (critical 9.8) - [CVE-2022-3037](https://insights.sbomify.com/CVE-2022-3037/): Use After Free in vim/vim (high 7.8) - [CVE-2022-30367](https://insights.sbomify.com/CVE-2022-30367/): Missing authorization in air cargo management system project:air cargo management system (medium 6.5) - [CVE-2022-30361](https://insights.sbomify.com/CVE-2022-30361/): Missing authorization in ovaledge:ovaledge (medium 4.3) - [CVE-2022-30360](https://insights.sbomify.com/CVE-2022-30360/): Cross-site scripting in ovaledge:ovaledge (medium 5.4) - [CVE-2022-3036](https://insights.sbomify.com/CVE-2022-3036/): Gettext override translations < 2.0.0 - Admin+ Stored Cross-Site Scripting (medium 4.8) - [CVE-2022-30359](https://insights.sbomify.com/CVE-2022-30359/): Information disclosure in ovaledge:ovaledge (medium 5.4) - [CVE-2022-30358](https://insights.sbomify.com/CVE-2022-30358/): Missing authorization in ovaledge:ovaledge (high 8.8) - [CVE-2022-30357](https://insights.sbomify.com/CVE-2022-30357/): Cross-site request forgery in ovaledge:ovaledge (critical 9.8) - [CVE-2022-30356](https://insights.sbomify.com/CVE-2022-30356/): Privilege escalation in ovaledge:ovaledge (high 8.8) - [CVE-2022-30355](https://insights.sbomify.com/CVE-2022-30355/): Business logic in ovaledge:ovaledge (critical 9.8) - [CVE-2022-30354](https://insights.sbomify.com/CVE-2022-30354/): Information disclosure in ovaledge:ovaledge (high 7.5) - [CVE-2022-30352](https://insights.sbomify.com/CVE-2022-30352/): SQL injection in phpabook project:phpabook (critical 9.8) - [CVE-2022-30351](https://insights.sbomify.com/CVE-2022-30351/): Information disclosure in pdfzorro:pdfzorro (high 7.5) - [CVE-2022-30350](https://insights.sbomify.com/CVE-2022-30350/): Information disclosure in avanquest:pdfescape (high 7.5) - [CVE-2022-3035](https://insights.sbomify.com/CVE-2022-3035/): Cross-site Scripting (XSS) - Stored in snipe/snipe-it (medium 5.9) - [CVE-2022-30349](https://insights.sbomify.com/CVE-2022-30349/): Cross site scripting in SSCMS (medium 6.1) - [CVE-2022-3034](https://insights.sbomify.com/CVE-2022-3034/): Information disclosure in Thunderbird (medium 4.3) - [CVE-2022-30339](https://insights.sbomify.com/CVE-2022-30339/): Memory corruption in Intel(R) Integrated Sensor Solution (medium 6.0) - [CVE-2022-30338](https://insights.sbomify.com/CVE-2022-30338/): Misconfiguration in Intel(R) VROC software (medium 6.7) - [CVE-2022-30337](https://insights.sbomify.com/CVE-2022-30337/): WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability (medium 5.4) - [CVE-2022-30335](https://insights.sbomify.com/CVE-2022-30335/): SQL injection in wealth:bonanza wealth management system (critical 9.8) - [CVE-2022-30334](https://insights.sbomify.com/CVE-2022-30334/): Information disclosure in brave:brave (medium 5.3) - [CVE-2022-30333](https://insights.sbomify.com/CVE-2022-30333/): RARLAB UnRAR Directory Traversal (critical 9.8, exploited in the wild) - [CVE-2022-30332](https://insights.sbomify.com/CVE-2022-30332/): Information disclosure in talend:administration center (medium 5.3) - [CVE-2022-30331](https://insights.sbomify.com/CVE-2022-30331/): Code injection in tigergraph:tigergraph (high 8.8) - [CVE-2022-30330](https://insights.sbomify.com/CVE-2022-30330/): Security feature bypass in keepkey:keepkey firmware (medium 6.6) - [CVE-2022-3033](https://insights.sbomify.com/CVE-2022-3033/): Cross-site scripting in Thunderbird (high 8.1) - [CVE-2022-30329](https://insights.sbomify.com/CVE-2022-30329/): Command injection in trendnet:tew-831dr firmware (critical 9.8) - [CVE-2022-30328](https://insights.sbomify.com/CVE-2022-30328/): Auth bypass in trendnet:tew-831dr firmware (medium 6.5) - [CVE-2022-30327](https://insights.sbomify.com/CVE-2022-30327/): Cross-site request forgery in trendnet:tew-831dr firmware (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/325/