# Vulnerabilities published in 2022 - [CVE-2022-29709](https://insights.sbomify.com/CVE-2022-29709/): SQL injection in communilink:clink office (high 7.5) - [CVE-2022-29704](https://insights.sbomify.com/CVE-2022-29704/): SQL injection in browsbox:brows box (critical 9.8) - [CVE-2022-29701](https://insights.sbomify.com/CVE-2022-29701/): Denial of service in zammad:zammad (high 7.5) - [CVE-2022-29700](https://insights.sbomify.com/CVE-2022-29700/): Denial of service in zammad:zammad (high 7.5) - [CVE-2022-2970](https://insights.sbomify.com/CVE-2022-2970/): MZ Automation libIEC61850 Stack-Based Buffer Overflow (critical 10.0) - [CVE-2022-29695](https://insights.sbomify.com/CVE-2022-29695/): Denial of service in unicorn-engine:unicorn engine (high 7.5) - [CVE-2022-29694](https://insights.sbomify.com/CVE-2022-29694/): Null dereference in unicorn-engine:unicorn engine (high 7.5) - [CVE-2022-29693](https://insights.sbomify.com/CVE-2022-29693/): Denial of service in unicorn-engine:unicorn engine (high 7.5) - [CVE-2022-29692](https://insights.sbomify.com/CVE-2022-29692/): Use after free in unicorn-engine:unicorn engine (high 7.8) - [CVE-2022-2969](https://insights.sbomify.com/CVE-2022-2969/): ICSA-22-307-03 Delta Industrial Automation DIALink Path traversal (high 8.1) - [CVE-2022-29689](https://insights.sbomify.com/CVE-2022-29689/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29688](https://insights.sbomify.com/CVE-2022-29688/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29687](https://insights.sbomify.com/CVE-2022-29687/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29686](https://insights.sbomify.com/CVE-2022-29686/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29685](https://insights.sbomify.com/CVE-2022-29685/): SQL injection in chshcms:cscms music portal system (high 8.8) - [CVE-2022-29684](https://insights.sbomify.com/CVE-2022-29684/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29683](https://insights.sbomify.com/CVE-2022-29683/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29682](https://insights.sbomify.com/CVE-2022-29682/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29681](https://insights.sbomify.com/CVE-2022-29681/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29680](https://insights.sbomify.com/CVE-2022-29680/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29676](https://insights.sbomify.com/CVE-2022-29676/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29670](https://insights.sbomify.com/CVE-2022-29670/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-2967](https://insights.sbomify.com/CVE-2022-2967/): Information disclosure in UA Modbus Server (medium 6.5) - [CVE-2022-29669](https://insights.sbomify.com/CVE-2022-29669/): SQL injection in chshcms:cscms music portal system (high 8.8) - [CVE-2022-29667](https://insights.sbomify.com/CVE-2022-29667/): SQL injection in chshcms:cscms music portal system (high 8.8) - [CVE-2022-29666](https://insights.sbomify.com/CVE-2022-29666/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29665](https://insights.sbomify.com/CVE-2022-29665/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29664](https://insights.sbomify.com/CVE-2022-29664/): SQL injection in chshcms:cscms music portal system (high 8.8) - [CVE-2022-29663](https://insights.sbomify.com/CVE-2022-29663/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29662](https://insights.sbomify.com/CVE-2022-29662/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29661](https://insights.sbomify.com/CVE-2022-29661/): SQL injection in chshcms:cscms music portal system (high 7.2) - [CVE-2022-29660](https://insights.sbomify.com/CVE-2022-29660/): SQL injection in chshcms:cscms music portal system (critical 9.8) - [CVE-2022-2966](https://insights.sbomify.com/CVE-2022-2966/): Delta Electronics DOPSoft Out-of-bounds Read (low 3.3) - [CVE-2022-29659](https://insights.sbomify.com/CVE-2022-29659/): SQL injection in responsive online blog project:responsive online blog (critical 9.8) - [CVE-2022-29656](https://insights.sbomify.com/CVE-2022-29656/): SQL injection in wedding management system project:wedding management system (critical 9.8) - [CVE-2022-29655](https://insights.sbomify.com/CVE-2022-29655/): File upload in wedding management system project:wedding management system (high 7.2) - [CVE-2022-29654](https://insights.sbomify.com/CVE-2022-29654/): Memory corruption in nasm:netwide assembler (medium 5.5) - [CVE-2022-29653](https://insights.sbomify.com/CVE-2022-29653/): Cross-site scripting in ofcms project:ofcms (medium 6.1) - [CVE-2022-29652](https://insights.sbomify.com/CVE-2022-29652/): SQL injection in online sports complex booking system project:online sports complex booking system (medium 6.1) - [CVE-2022-29651](https://insights.sbomify.com/CVE-2022-29651/): File upload in oretnom23:online food ordering system (high 7.2) - [CVE-2022-29650](https://insights.sbomify.com/CVE-2022-29650/): SQL injection in oretnom23:online food ordering system (critical 9.8) - [CVE-2022-2965](https://insights.sbomify.com/CVE-2022-2965/): Improper Restriction of Rendered UI Layers or Frames in notrinos/notrinoserp (medium 6.4) - [CVE-2022-29649](https://insights.sbomify.com/CVE-2022-29649/): Cross-site scripting in qsmart next project:qsmart next (medium 6.1) - [CVE-2022-29648](https://insights.sbomify.com/CVE-2022-29648/): Cross site scripting in Jfinal (medium 5.4) - [CVE-2022-29647](https://insights.sbomify.com/CVE-2022-29647/): Cross Site Request Forgery in Mingsoft MCMS (high 8.8) - [CVE-2022-29646](https://insights.sbomify.com/CVE-2022-29646/): Information disclosure in totolink:a3100r firmware (medium 5.3) - [CVE-2022-29645](https://insights.sbomify.com/CVE-2022-29645/): Hardcoded credentials in totolink:a3100r firmware (critical 9.8) - [CVE-2022-29644](https://insights.sbomify.com/CVE-2022-29644/): Hardcoded credentials in totolink:a3100r firmware (critical 9.8) - [CVE-2022-29643](https://insights.sbomify.com/CVE-2022-29643/): Memory corruption in totolink:a3100r firmware (high 7.5) - [CVE-2022-29642](https://insights.sbomify.com/CVE-2022-29642/): Memory corruption in totolink:a3100r firmware (high 7.5) - [CVE-2022-29641](https://insights.sbomify.com/CVE-2022-29641/): Memory corruption in totolink:a3100r firmware (high 7.5) - [CVE-2022-29640](https://insights.sbomify.com/CVE-2022-29640/): Memory corruption in totolink:a3100r firmware (high 7.5) - [CVE-2022-2964](https://insights.sbomify.com/CVE-2022-2964/): Memory corruption in kernel (high 7.8) - [CVE-2022-29639](https://insights.sbomify.com/CVE-2022-29639/): Command injection in totolink:a3100r firmware (high 8.1) - [CVE-2022-29638](https://insights.sbomify.com/CVE-2022-29638/): Memory corruption in totolink:a3100r firmware (high 7.5) - [CVE-2022-29637](https://insights.sbomify.com/CVE-2022-29637/): Arbitrary command execution in Minidoc (high 7.8) - [CVE-2022-29633](https://insights.sbomify.com/CVE-2022-29633/): Auth bypass in linglong project:linglong (critical 9.8) - [CVE-2022-29632](https://insights.sbomify.com/CVE-2022-29632/): File upload in roncoo:roncoo-education (critical 9.8) - [CVE-2022-29631](https://insights.sbomify.com/CVE-2022-29631/): Server-Side Request Forgery in Jodd HTTP (high 7.5) - [CVE-2022-2963](https://insights.sbomify.com/CVE-2022-2963/): Denial of service in jasper (high 7.5) - [CVE-2022-29628](https://insights.sbomify.com/CVE-2022-29628/): Cross-site scripting in online market place site project:online market place site (medium 5.4) - [CVE-2022-29627](https://insights.sbomify.com/CVE-2022-29627/): Missing authorization in online market place site project:online market place site (medium 4.3) - [CVE-2022-29624](https://insights.sbomify.com/CVE-2022-29624/): File upload in tpcms project:tpcms (high 8.8) - [CVE-2022-29623](https://insights.sbomify.com/CVE-2022-29623/): Connect-Multiparty allows arbitrary file upload (high 7.8) - [CVE-2022-29622](https://insights.sbomify.com/CVE-2022-29622/): File upload in formidable project:formidable (critical 9.8) - [CVE-2022-29620](https://insights.sbomify.com/CVE-2022-29620/): Information disclosure in filezilla-project:filezilla client (medium 6.5) - [CVE-2022-2962](https://insights.sbomify.com/CVE-2022-2962/): Memory corruption in QEMU (high 7.8) - [CVE-2022-29619](https://insights.sbomify.com/CVE-2022-29619/): Missing authorization in SAP BusinessObjects Business Intelligence Platform (medium 6.5) - [CVE-2022-29618](https://insights.sbomify.com/CVE-2022-29618/): Cross-site scripting in SAP NetWeaver Development Infrastructure (Design Time Repository) (medium 6.1) - [CVE-2022-29617](https://insights.sbomify.com/CVE-2022-29617/): Denial of service in CLA Assistant (medium 6.5) - [CVE-2022-29616](https://insights.sbomify.com/CVE-2022-29616/): Memory corruption in SAP Host Agent (high 7.5) - [CVE-2022-29615](https://insights.sbomify.com/CVE-2022-29615/): Deserialization in SAP NetWeaver Developer Studio (NWDS) (low 3.4) - [CVE-2022-29614](https://insights.sbomify.com/CVE-2022-29614/): Privilege escalation in SAP NetWeaver AS ABAP, AS Java, ABAP Platform and HANA Database (medium 5.0) - [CVE-2022-29613](https://insights.sbomify.com/CVE-2022-29613/): Missing authorization in SAP Employee Self Service (Fiori My Leave Request) (medium 4.3) - [CVE-2022-29612](https://insights.sbomify.com/CVE-2022-29612/): Server-side request forgery in SAP NetWeaver, ABAP Platform and SAP Host Agent (medium 4.3) - [CVE-2022-29611](https://insights.sbomify.com/CVE-2022-29611/): Missing authorization in SAP NetWeaver Application Server for ABAP and ABAP Platform (high 8.8) - [CVE-2022-29610](https://insights.sbomify.com/CVE-2022-29610/): Cross-site scripting in SAP NetWeaver Application Server ABAP (medium 5.4) - [CVE-2022-2961](https://insights.sbomify.com/CVE-2022-2961/): Use after free in Kernel (high 7.0) - [CVE-2022-29609](https://insights.sbomify.com/CVE-2022-29609/): Other in opennetworking:onos (medium 5.3) - [CVE-2022-29608](https://insights.sbomify.com/CVE-2022-29608/): Denial of service in opennetworking:onos (high 7.5) - [CVE-2022-29607](https://insights.sbomify.com/CVE-2022-29607/): Business logic in opennetworking:onos (high 7.5) - [CVE-2022-29606](https://insights.sbomify.com/CVE-2022-29606/): Other in opennetworking:onos (critical 9.8) - [CVE-2022-29605](https://insights.sbomify.com/CVE-2022-29605/): Other in opennetworking:onos (high 7.5) - [CVE-2022-29604](https://insights.sbomify.com/CVE-2022-29604/): Business logic in opennetworking:onos (critical 9.8) - [CVE-2022-29603](https://insights.sbomify.com/CVE-2022-29603/): SQL injection in universis:universis-api (high 8.1) - [CVE-2022-29602](https://insights.sbomify.com/CVE-2022-29602/): Cross-site scripting in grid elements project:grid elements (medium 5.4) - [CVE-2022-29601](https://insights.sbomify.com/CVE-2022-29601/): SQL injection in oliverklee:seminars (critical 9.8) - [CVE-2022-29600](https://insights.sbomify.com/CVE-2022-29600/): SQL injection in oliverklee:oelib (critical 9.8) - [CVE-2022-29599](https://insights.sbomify.com/CVE-2022-29599/): Commandline class shell injection vulnerabilities (critical 9.8) - [CVE-2022-29598](https://insights.sbomify.com/CVE-2022-29598/): Cross-site scripting in solutions-atlantic:regulatory reporting system (medium 6.1) - [CVE-2022-29597](https://insights.sbomify.com/CVE-2022-29597/): Path traversal in solutions-atlantic:regulatory reporting system (medium 6.5) - [CVE-2022-29596](https://insights.sbomify.com/CVE-2022-29596/): Path traversal in microstrategy:enterprise manager (critical 9.8) - [CVE-2022-29594](https://insights.sbomify.com/CVE-2022-29594/): Privilege escalation in eginnovations:eg agent (high 7.8) - [CVE-2022-29593](https://insights.sbomify.com/CVE-2022-29593/): Auth bypass in dingtian-tech:dt-r004 firmware (medium 5.9) - [CVE-2022-29592](https://insights.sbomify.com/CVE-2022-29592/): Command injection in tenda:tx9 pro firmware (critical 9.8) - [CVE-2022-29591](https://insights.sbomify.com/CVE-2022-29591/): Memory corruption in tenda:tx9 pro firmware (critical 9.8) - [CVE-2022-2959](https://insights.sbomify.com/CVE-2022-2959/): Race condition in kernel (high 7.0) - [CVE-2022-29589](https://insights.sbomify.com/CVE-2022-29589/): Cross-site scripting in crypt-server project:crypt-server (medium 6.1) - [CVE-2022-29588](https://insights.sbomify.com/CVE-2022-29588/): Information disclosure in konicaminolta:bizhub 226i firmware (high 7.5) - [CVE-2022-29587](https://insights.sbomify.com/CVE-2022-29587/): Privilege escalation in konicaminolta:bizhub 226i firmware (medium 4.0) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/331/