# Vulnerabilities published in 2022


- [CVE-2022-2886](https://insights.sbomify.com/CVE-2022-2886/): Laravel deserialization (medium 5.0)
- [CVE-2022-28859](https://insights.sbomify.com/CVE-2022-28859/): Information disclosure in BIG-IP (medium 6.5)
- [CVE-2022-28858](https://insights.sbomify.com/CVE-2022-28858/): Memory corruption in Intel(R) NUC Laptop Kits (high 7.8)
- [CVE-2022-28857](https://insights.sbomify.com/CVE-2022-28857/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-28856](https://insights.sbomify.com/CVE-2022-28856/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-28855](https://insights.sbomify.com/CVE-2022-28855/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-28854](https://insights.sbomify.com/CVE-2022-28854/): Adobe InDesign 2022 Out-of-Bound Read Memory leak (medium 5.5)
- [CVE-2022-28853](https://insights.sbomify.com/CVE-2022-28853/): Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution (high 7.8)
- [CVE-2022-28852](https://insights.sbomify.com/CVE-2022-28852/): Adobe InDesign 2022 Out-of-Bound Write Arbitrary code execution (high 7.8)
- [CVE-2022-28851](https://insights.sbomify.com/CVE-2022-28851/): AEM Reflected XSS Arbitrary code execution (medium 5.4)
- [CVE-2022-28850](https://insights.sbomify.com/CVE-2022-28850/): Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-2885](https://insights.sbomify.com/CVE-2022-2885/): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (medium 6.7)
- [CVE-2022-28849](https://insights.sbomify.com/CVE-2022-28849/): Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28848](https://insights.sbomify.com/CVE-2022-28848/): Adobe Bridge PCX Out-of-bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28847](https://insights.sbomify.com/CVE-2022-28847/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28846](https://insights.sbomify.com/CVE-2022-28846/): Adobe Bridge SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28845](https://insights.sbomify.com/CVE-2022-28845/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28844](https://insights.sbomify.com/CVE-2022-28844/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28843](https://insights.sbomify.com/CVE-2022-28843/): Adobe Bridge Font Out-of-bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28842](https://insights.sbomify.com/CVE-2022-28842/): Adobe Bridge Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28841](https://insights.sbomify.com/CVE-2022-28841/): Adobe Bridge Font Out-of-bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28840](https://insights.sbomify.com/CVE-2022-28840/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-2884](https://insights.sbomify.com/CVE-2022-2884/): Command injection in GitLab (critical 9.9)
- [CVE-2022-28839](https://insights.sbomify.com/CVE-2022-28839/): Adobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28838](https://insights.sbomify.com/CVE-2022-28838/): Adobe Acrobat Pro DC Doc flattenPages Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28837](https://insights.sbomify.com/CVE-2022-28837/): Adobe Acrobat Pro DC Doc buttonSetIcon Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28836](https://insights.sbomify.com/CVE-2022-28836/): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28835](https://insights.sbomify.com/CVE-2022-28835/): Adobe InCopy Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28834](https://insights.sbomify.com/CVE-2022-28834/): Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28833](https://insights.sbomify.com/CVE-2022-28833/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28832](https://insights.sbomify.com/CVE-2022-28832/): Adobe InDesign Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28831](https://insights.sbomify.com/CVE-2022-28831/): Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28830](https://insights.sbomify.com/CVE-2022-28830/): Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-2883](https://insights.sbomify.com/CVE-2022-2883/): Denial of service in Octopus Server (high 7.5)
- [CVE-2022-28829](https://insights.sbomify.com/CVE-2022-28829/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28828](https://insights.sbomify.com/CVE-2022-28828/): Adobe FrameMaker PDF File Parsing Out-Of-Bounds Write Code Execution Vulnerability (high 7.8)
- [CVE-2022-28827](https://insights.sbomify.com/CVE-2022-28827/): Adobe FrameMaker SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28826](https://insights.sbomify.com/CVE-2022-28826/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28825](https://insights.sbomify.com/CVE-2022-28825/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28824](https://insights.sbomify.com/CVE-2022-28824/): Adobe FrameMaker Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28823](https://insights.sbomify.com/CVE-2022-28823/): Adobe FrameMaker Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28822](https://insights.sbomify.com/CVE-2022-28822/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28821](https://insights.sbomify.com/CVE-2022-28821/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28820](https://insights.sbomify.com/CVE-2022-28820/): Adobe Consulting Services Reflected Cross-Site Scripting Arbitrary Code Execution (medium 6.1)
- [CVE-2022-2882](https://insights.sbomify.com/CVE-2022-2882/): Information disclosure in GitLab (medium 5.5)
- [CVE-2022-28819](https://insights.sbomify.com/CVE-2022-28819/): Adobe Character Animator SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28818](https://insights.sbomify.com/CVE-2022-28818/): ColdFusion Reflected Cross-Site Scripting could lead to Arbitrary Code Execution (medium 6.1)
- [CVE-2022-28816](https://insights.sbomify.com/CVE-2022-28816/): Reflected XSS in Carlo Gavazzi UWP 3.0 (medium 6.1)
- [CVE-2022-28815](https://insights.sbomify.com/CVE-2022-28815/): SQL-Injection in Carlo Gavazzi UWP 3.0 Sentilo Proxy (low 2.7)
- [CVE-2022-28814](https://insights.sbomify.com/CVE-2022-28814/): Path traversal in Carlo Gavazzi UWP 3.0 could lead to full device access (critical 9.8)
- [CVE-2022-28813](https://insights.sbomify.com/CVE-2022-28813/): SQL-injection in Car Park Server 3.0 allows for full database access. (high 7.5)
- [CVE-2022-28812](https://insights.sbomify.com/CVE-2022-28812/): Use of Hard-coded Credentials in UWP3.0 allows SuperUser authentication bypass in Car Park Server. (critical 9.8)
- [CVE-2022-28811](https://insights.sbomify.com/CVE-2022-28811/): Possible command injection in Car Park Server in Carlo Gavazzi UWP3.0 (critical 9.8)
- [CVE-2022-28810](https://insights.sbomify.com/CVE-2022-28810/): Zoho ManageEngine ADSelfService Plus Remote Code Execution (medium 6.8, exploited in the wild)
- [CVE-2022-2881](https://insights.sbomify.com/CVE-2022-2881/): Buffer overread in statistics channel code (medium 5.5)
- [CVE-2022-28809](https://insights.sbomify.com/CVE-2022-28809/): Memory corruption in opendesign:drawings sdk (high 7.8)
- [CVE-2022-28808](https://insights.sbomify.com/CVE-2022-28808/): Memory corruption in opendesign:drawings sdk (high 7.8)
- [CVE-2022-28807](https://insights.sbomify.com/CVE-2022-28807/): Memory corruption in opendesign:drawings sdk (high 7.8)
- [CVE-2022-28806](https://insights.sbomify.com/CVE-2022-28806/): Memory corruption in fujitsu:lifebook a3510 firmware (high 7.8)
- [CVE-2022-28805](https://insights.sbomify.com/CVE-2022-28805/): Memory corruption in fedoraproject:fedora (critical 9.1)
- [CVE-2022-28803](https://insights.sbomify.com/CVE-2022-28803/): Stored XSS in link tags added via XHR in SilverStripe Framework (medium 5.4)
- [CVE-2022-28802](https://insights.sbomify.com/CVE-2022-28802/): Privilege escalation in zapier:code by zapier (high 8.8)
- [CVE-2022-2880](https://insights.sbomify.com/CVE-2022-2880/): Incorrect sanitization of forwarded query parameters in net/http/httputil (high 7.5)
- [CVE-2022-28799](https://insights.sbomify.com/CVE-2022-28799/): Other in tiktok:tiktok (high 8.8)
- [CVE-2022-28796](https://insights.sbomify.com/CVE-2022-28796/): Use after free in fedoraproject:fedora (high 7.0)
- [CVE-2022-28795](https://insights.sbomify.com/CVE-2022-28795/): Information disclosure in Avira Password Manager – Browser Extensions (medium 6.5)
- [CVE-2022-28794](https://insights.sbomify.com/CVE-2022-28794/): Information disclosure in Samsung Mobile Devices (low 2.2)
- [CVE-2022-28793](https://insights.sbomify.com/CVE-2022-28793/): Security feature bypass in Samsung Mobile Devices (medium 4.4)
- [CVE-2022-28792](https://insights.sbomify.com/CVE-2022-28792/): Other in Gear IconX PC Manager (medium 6.2)
- [CVE-2022-28791](https://insights.sbomify.com/CVE-2022-28791/): Other in Galaxy Store (medium 6.2)
- [CVE-2022-28790](https://insights.sbomify.com/CVE-2022-28790/): Auth bypass in Link to Windows Service (medium 4.0)
- [CVE-2022-2879](https://insights.sbomify.com/CVE-2022-2879/): Unbounded memory consumption when reading headers in archive/tar (high 7.5)
- [CVE-2022-28789](https://insights.sbomify.com/CVE-2022-28789/): Missing authorization in Voice Note (medium 6.2)
- [CVE-2022-28788](https://insights.sbomify.com/CVE-2022-28788/): Memory corruption in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-28787](https://insights.sbomify.com/CVE-2022-28787/): Memory corruption in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-28786](https://insights.sbomify.com/CVE-2022-28786/): Memory corruption in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-28785](https://insights.sbomify.com/CVE-2022-28785/): Memory corruption in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-28784](https://insights.sbomify.com/CVE-2022-28784/): Path traversal in Samsung Mobile Devices (medium 4.0)
- [CVE-2022-28783](https://insights.sbomify.com/CVE-2022-28783/): Missing authorization in Samsung Mobile Devices (medium 6.2)
- [CVE-2022-28782](https://insights.sbomify.com/CVE-2022-28782/): Security feature bypass in Samsung Mobile Devices (medium 4.6)
- [CVE-2022-28781](https://insights.sbomify.com/CVE-2022-28781/): Privilege escalation in Samsung Mobile Devices (high 7.7)
- [CVE-2022-28780](https://insights.sbomify.com/CVE-2022-28780/): Missing authorization in Samsung Mobile Devices (medium 5.0)
- [CVE-2022-28779](https://insights.sbomify.com/CVE-2022-28779/): Other in Samsung Android USB Driver windows installer (medium 5.3)
- [CVE-2022-28778](https://insights.sbomify.com/CVE-2022-28778/): Missing authorization in Samsung Security Supporter (medium 4.4)
- [CVE-2022-28777](https://insights.sbomify.com/CVE-2022-28777/): Missing authorization in Samsung Members (medium 4.3)
- [CVE-2022-28776](https://insights.sbomify.com/CVE-2022-28776/): Missing authorization in Galaxy Store (medium 5.9)
- [CVE-2022-28775](https://insights.sbomify.com/CVE-2022-28775/): Missing authorization in Samsung Flow (medium 5.1)
- [CVE-2022-28774](https://insights.sbomify.com/CVE-2022-28774/): Information disclosure in SAP Host Agent (medium 5.5)
- [CVE-2022-28773](https://insights.sbomify.com/CVE-2022-28773/): Denial of service in SAP NetWeaver (Internet Communication Manager) (high 7.5)
- [CVE-2022-28772](https://insights.sbomify.com/CVE-2022-28772/): Memory corruption in SAP NetWeaver (Internet Communication Manager) (high 7.5)
- [CVE-2022-28771](https://insights.sbomify.com/CVE-2022-28771/): Missing authorization in SAP Business One License service API (high 7.5)
- [CVE-2022-28770](https://insights.sbomify.com/CVE-2022-28770/): Cross-site scripting in SAPUI5 (vbm library) (medium 6.1)
- [CVE-2022-2877](https://insights.sbomify.com/CVE-2022-2877/): Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing (medium 5.3)
- [CVE-2022-28768](https://insights.sbomify.com/CVE-2022-28768/): Local Privilege Escalation in Zoom Client Installer for macOS (high 8.8)
- [CVE-2022-28766](https://insights.sbomify.com/CVE-2022-28766/): DLL injection in Zoom Windows Clients (low 3.3)
- [CVE-2022-28764](https://insights.sbomify.com/CVE-2022-28764/): Local information exposure in Zoom Clients (low 3.3)
- [CVE-2022-28763](https://insights.sbomify.com/CVE-2022-28763/): Improper URL parsing in Zoom Clients (high 8.8)
- [CVE-2022-28762](https://insights.sbomify.com/CVE-2022-28762/): Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS (high 7.3)
- [CVE-2022-28761](https://insights.sbomify.com/CVE-2022-28761/): Zoom On-Premise Deployments: Improper Access Control (medium 6.5)
- [CVE-2022-28760](https://insights.sbomify.com/CVE-2022-28760/): Zoom On-Premise Deployments: Improper Access Control (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/338/