# Vulnerabilities published in 2022


- [CVE-2022-30211](https://insights.sbomify.com/CVE-2022-30211/): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-3021](https://insights.sbomify.com/CVE-2022-3021/): Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-30209](https://insights.sbomify.com/CVE-2022-30209/): Windows IIS Server Elevation of Privilege Vulnerability (high 7.4)
- [CVE-2022-30208](https://insights.sbomify.com/CVE-2022-30208/): Windows Security Account Manager (SAM) Denial of Service Vulnerability (medium 6.5)
- [CVE-2022-30206](https://insights.sbomify.com/CVE-2022-30206/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30205](https://insights.sbomify.com/CVE-2022-30205/): Windows Group Policy Elevation of Privilege Vulnerability (medium 6.6)
- [CVE-2022-30203](https://insights.sbomify.com/CVE-2022-30203/): Windows Boot Manager Security Feature Bypass Vulnerability (high 7.4)
- [CVE-2022-30202](https://insights.sbomify.com/CVE-2022-30202/): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-30200](https://insights.sbomify.com/CVE-2022-30200/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30198](https://insights.sbomify.com/CVE-2022-30198/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-30197](https://insights.sbomify.com/CVE-2022-30197/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30196](https://insights.sbomify.com/CVE-2022-30196/): Windows Secure Channel Denial of Service Vulnerability (high 8.2)
- [CVE-2022-30194](https://insights.sbomify.com/CVE-2022-30194/): Windows WebBrowser Control Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30193](https://insights.sbomify.com/CVE-2022-30193/): AV1 Video Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30192](https://insights.sbomify.com/CVE-2022-30192/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-30190](https://insights.sbomify.com/CVE-2022-30190/): Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2022-3019](https://insights.sbomify.com/CVE-2022-3019/): Improper Access Control in tooljet/tooljet (high 7.1)
- [CVE-2022-30189](https://insights.sbomify.com/CVE-2022-30189/): Windows Autopilot Device Management and Enrollment Client Spoofing Vulnerability (medium 6.5)
- [CVE-2022-30188](https://insights.sbomify.com/CVE-2022-30188/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30187](https://insights.sbomify.com/CVE-2022-30187/): Azure Storage Library Information Disclosure Vulnerability (medium 4.7)
- [CVE-2022-30184](https://insights.sbomify.com/CVE-2022-30184/): .NET and Visual Studio Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30181](https://insights.sbomify.com/CVE-2022-30181/): Azure Site Recovery Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2022-30180](https://insights.sbomify.com/CVE-2022-30180/): Azure RTOS GUIX Studio Information Disclosure Vulnerability (high 7.8)
- [CVE-2022-3018](https://insights.sbomify.com/CVE-2022-3018/): Information disclosure in GitLab (medium 6.8)
- [CVE-2022-30179](https://insights.sbomify.com/CVE-2022-30179/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30178](https://insights.sbomify.com/CVE-2022-30178/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30177](https://insights.sbomify.com/CVE-2022-30177/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30176](https://insights.sbomify.com/CVE-2022-30176/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30175](https://insights.sbomify.com/CVE-2022-30175/): Azure RTOS GUIX Studio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30174](https://insights.sbomify.com/CVE-2022-30174/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30173](https://insights.sbomify.com/CVE-2022-30173/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30172](https://insights.sbomify.com/CVE-2022-30172/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30171](https://insights.sbomify.com/CVE-2022-30171/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30170](https://insights.sbomify.com/CVE-2022-30170/): Windows Credential Roaming Service Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2022-3017](https://insights.sbomify.com/CVE-2022-3017/): Cross-Site Request Forgery (CSRF) in froxlor/froxlor (medium 4.3)
- [CVE-2022-30168](https://insights.sbomify.com/CVE-2022-30168/): Microsoft Photos App Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30167](https://insights.sbomify.com/CVE-2022-30167/): AV1 Video Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-30166](https://insights.sbomify.com/CVE-2022-30166/): Local Security Authority Subsystem Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30165](https://insights.sbomify.com/CVE-2022-30165/): Windows Kerberos Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2022-30164](https://insights.sbomify.com/CVE-2022-30164/): Kerberos AppContainer Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2022-30163](https://insights.sbomify.com/CVE-2022-30163/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.5)
- [CVE-2022-30162](https://insights.sbomify.com/CVE-2022-30162/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30161](https://insights.sbomify.com/CVE-2022-30161/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-30160](https://insights.sbomify.com/CVE-2022-30160/): Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-3016](https://insights.sbomify.com/CVE-2022-3016/): Use After Free in vim/vim (high 7.8)
- [CVE-2022-30159](https://insights.sbomify.com/CVE-2022-30159/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30158](https://insights.sbomify.com/CVE-2022-30158/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-30157](https://insights.sbomify.com/CVE-2022-30157/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-30155](https://insights.sbomify.com/CVE-2022-30155/): Windows Kernel Denial of Service Vulnerability (medium 5.5)
- [CVE-2022-30154](https://insights.sbomify.com/CVE-2022-30154/): Microsoft File Server Shadow Copy Agent Service (RVSS) Elevation of Privilege Vulnerability (medium 5.3)
- [CVE-2022-30153](https://insights.sbomify.com/CVE-2022-30153/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-30152](https://insights.sbomify.com/CVE-2022-30152/): Windows Network Address Translation (NAT) Denial of Service Vulnerability (high 7.5)
- [CVE-2022-30151](https://insights.sbomify.com/CVE-2022-30151/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-30150](https://insights.sbomify.com/CVE-2022-30150/): Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2022-3015](https://insights.sbomify.com/CVE-2022-3015/): oretnom23 Fast Food Ordering System cross site scripting (low 3.5)
- [CVE-2022-30149](https://insights.sbomify.com/CVE-2022-30149/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30148](https://insights.sbomify.com/CVE-2022-30148/): Windows Desired State Configuration (DSC) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-30147](https://insights.sbomify.com/CVE-2022-30147/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30146](https://insights.sbomify.com/CVE-2022-30146/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30145](https://insights.sbomify.com/CVE-2022-30145/): Windows Encrypting File System (EFS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30144](https://insights.sbomify.com/CVE-2022-30144/): Windows Bluetooth Service Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30143](https://insights.sbomify.com/CVE-2022-30143/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30142](https://insights.sbomify.com/CVE-2022-30142/): Windows File History Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30141](https://insights.sbomify.com/CVE-2022-30141/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2022-30140](https://insights.sbomify.com/CVE-2022-30140/): Windows iSCSI Discovery Service Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-3014](https://insights.sbomify.com/CVE-2022-3014/): SourceCodester Simple Task Managing System cross site scripting (low 3.5)
- [CVE-2022-30139](https://insights.sbomify.com/CVE-2022-30139/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2022-30138](https://insights.sbomify.com/CVE-2022-30138/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30137](https://insights.sbomify.com/CVE-2022-30137/): Azure Service Fabric Container Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2022-30136](https://insights.sbomify.com/CVE-2022-30136/): Windows Network File System Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-30135](https://insights.sbomify.com/CVE-2022-30135/): Windows Media Center Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30134](https://insights.sbomify.com/CVE-2022-30134/): Microsoft Exchange Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2022-30133](https://insights.sbomify.com/CVE-2022-30133/): Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2022-30132](https://insights.sbomify.com/CVE-2022-30132/): Windows Container Manager Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30131](https://insights.sbomify.com/CVE-2022-30131/): Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-30130](https://insights.sbomify.com/CVE-2022-30130/): .NET Framework Denial of Service Vulnerability (low 3.3)
- [CVE-2022-3013](https://insights.sbomify.com/CVE-2022-3013/): SourceCodester Simple Task Managing System loginVaLidation.php sql injection (medium 6.3)
- [CVE-2022-30129](https://insights.sbomify.com/CVE-2022-30129/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-30128](https://insights.sbomify.com/CVE-2022-30128/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-30127](https://insights.sbomify.com/CVE-2022-30127/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2022-30126](https://insights.sbomify.com/CVE-2022-30126/): Apache Tika Regular Expression Denial of Service in Standards Extractor (medium 5.5)
- [CVE-2022-30124](https://insights.sbomify.com/CVE-2022-30124/): Auth bypass in Rocket.Chat Mobile app (medium 6.8)
- [CVE-2022-30123](https://insights.sbomify.com/CVE-2022-30123/): Possible shell escape sequence injection vulnerability in Rack (critical 10.0)
- [CVE-2022-30122](https://insights.sbomify.com/CVE-2022-30122/): Denial of Service Vulnerability in Rack Multipart Parsing (high 7.5)
- [CVE-2022-30121](https://insights.sbomify.com/CVE-2022-30121/): Privilege escalation in Ivanti Endpoint Manager (medium 6.7)
- [CVE-2022-30120](https://insights.sbomify.com/CVE-2022-30120/): Cross site scripting in Concrete CMS (medium 6.1)
- [CVE-2022-3012](https://insights.sbomify.com/CVE-2022-3012/): oretnom23 Fast Food Ordering System index.php sql injection (medium 6.3)
- [CVE-2022-30119](https://insights.sbomify.com/CVE-2022-30119/): Cross-site scripting in https://github.com/concrete5/concrete5 (medium 6.1)
- [CVE-2022-30118](https://insights.sbomify.com/CVE-2022-30118/): Cross-site scripting in https://github.com/concrete5/concrete5 (medium 6.1)
- [CVE-2022-30117](https://insights.sbomify.com/CVE-2022-30117/): Path traversal in Concrete CMS (critical 9.1)
- [CVE-2022-30115](https://insights.sbomify.com/CVE-2022-30115/): Security feature bypass in https://github.com/curl/curl (medium 4.3)
- [CVE-2022-30114](https://insights.sbomify.com/CVE-2022-30114/): Memory corruption in fastweb:fastgate gpon fga2130fwb firmware (high 7.5)
- [CVE-2022-30113](https://insights.sbomify.com/CVE-2022-30113/): SQL injection in fahou100:electronic mall system (critical 9.8)
- [CVE-2022-30111](https://insights.sbomify.com/CVE-2022-30111/): Weak cryptography in mck smartlock project:mck smartlock (medium 6.8)
- [CVE-2022-30110](https://insights.sbomify.com/CVE-2022-30110/): Cross-site Scripting in Jirafeau (medium 6.1)
- [CVE-2022-30105](https://insights.sbomify.com/CVE-2022-30105/): Command injection in belkin:n300 firmware (critical 9.8)
- [CVE-2022-3010](https://insights.sbomify.com/CVE-2022-3010/): Predictable SSH credentials in Priva TopControl Suite (high 7.5)
- [CVE-2022-30083](https://insights.sbomify.com/CVE-2022-30083/): Code injection in elliegrid:elliegrid (critical 9.8)
- [CVE-2022-3008](https://insights.sbomify.com/CVE-2022-3008/): Command Injection on tinygltf (high 8.1)
- [CVE-2022-30079](https://insights.sbomify.com/CVE-2022-30079/): Command injection in netgear:r6200 (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/327/