# Vulnerabilities published in 2022


- [CVE-2022-2876](https://insights.sbomify.com/CVE-2022-2876/): SourceCodester Student Management System index.php sql injection (medium 6.3)
- [CVE-2022-28759](https://insights.sbomify.com/CVE-2022-28759/): Zoom On-Premise Deployments: Improper Access Control (high 8.2)
- [CVE-2022-28758](https://insights.sbomify.com/CVE-2022-28758/): Zoom On-Premise Deployments: Improper Access Control (high 8.2)
- [CVE-2022-28757](https://insights.sbomify.com/CVE-2022-28757/): Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS (high 8.8)
- [CVE-2022-28756](https://insights.sbomify.com/CVE-2022-28756/): Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS (high 8.8)
- [CVE-2022-28755](https://insights.sbomify.com/CVE-2022-28755/): Improper URL parsing in Zoom Clients (critical 9.6)
- [CVE-2022-28754](https://insights.sbomify.com/CVE-2022-28754/): Zoom On-Premise Deployments: Improper Access Control Vulnerability (high 7.1)
- [CVE-2022-28753](https://insights.sbomify.com/CVE-2022-28753/): Zoom On-Premise Deployments: Improper Access Control Vulnerability (high 7.1)
- [CVE-2022-28752](https://insights.sbomify.com/CVE-2022-28752/): Local Privilege Escalation in the Zoom Rooms for Windows Client (high 8.8)
- [CVE-2022-28751](https://insights.sbomify.com/CVE-2022-28751/): Local Privilege Escalation in Zoom Client for Meetings for MacOS (high 8.8)
- [CVE-2022-28750](https://insights.sbomify.com/CVE-2022-28750/): Zoom On-Premise Deployments: Stack Buffer Overflow in Meeting Connector (high 7.5)
- [CVE-2022-28749](https://insights.sbomify.com/CVE-2022-28749/): Insufficient Authorization Check During Meeting Join (medium 6.5)
- [CVE-2022-28747](https://insights.sbomify.com/CVE-2022-28747/): Deserialization in gosecure:titan inbox detection \& response (critical 9.8)
- [CVE-2022-28743](https://insights.sbomify.com/CVE-2022-28743/): Race condition in foscam:r2c application firmware (critical 9.1)
- [CVE-2022-28742](https://insights.sbomify.com/CVE-2022-28742/): Auth bypass in aenrich:a\+hrd (high 7.5)
- [CVE-2022-28741](https://insights.sbomify.com/CVE-2022-28741/): Path traversal in aenrich:a\+hrd (high 8.1)
- [CVE-2022-28740](https://insights.sbomify.com/CVE-2022-28740/): Information disclosure in aenrich:a\+hrd (high 7.5)
- [CVE-2022-2874](https://insights.sbomify.com/CVE-2022-2874/): NULL Pointer Dereference in vim/vim (medium 6.6)
- [CVE-2022-28739](https://insights.sbomify.com/CVE-2022-28739/): Memory corruption in apple:macos (high 7.5)
- [CVE-2022-28738](https://insights.sbomify.com/CVE-2022-28738/): Memory corruption in ruby-lang:ruby (critical 9.8)
- [CVE-2022-28737](https://insights.sbomify.com/CVE-2022-28737/): There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables (medium 6.5)
- [CVE-2022-28736](https://insights.sbomify.com/CVE-2022-28736/): There's a use-after-free vulnerability in grub_cmd_chainloader() function (medium 6.4)
- [CVE-2022-28735](https://insights.sbomify.com/CVE-2022-28735/): Security feature bypass in GNU GRUB (medium 6.7)
- [CVE-2022-28734](https://insights.sbomify.com/CVE-2022-28734/): Out-of-bounds write when handling split HTTP headers (high 8.1)
- [CVE-2022-28733](https://insights.sbomify.com/CVE-2022-28733/): Integer underflow in grub_net_recv_ip4_packets (high 8.1)
- [CVE-2022-28732](https://insights.sbomify.com/CVE-2022-28732/): Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin (medium 6.1)
- [CVE-2022-28731](https://insights.sbomify.com/CVE-2022-28731/): Apache JSPWiki CSRF in UserPreferences.jsp (medium 6.5)
- [CVE-2022-28730](https://insights.sbomify.com/CVE-2022-28730/): Apache JSPWiki Cross-site scripting vulnerability on AJAXPreview.jsp (medium 6.1)
- [CVE-2022-2873](https://insights.sbomify.com/CVE-2022-2873/): Memory corruption in Kernel (medium 5.5)
- [CVE-2022-28722](https://insights.sbomify.com/CVE-2022-28722/): Memory corruption in Certain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printers (critical 9.8)
- [CVE-2022-28721](https://insights.sbomify.com/CVE-2022-28721/): Other in Certain HP inkjet printers, HP LaserJet Pro printers, HP PageWide Pro printers. (critical 9.8)
- [CVE-2022-2872](https://insights.sbomify.com/CVE-2022-2872/): Unrestricted Upload of File with Dangerous Type in octoprint/octoprint (low 3.7)
- [CVE-2022-28719](https://insights.sbomify.com/CVE-2022-28719/): Missing authorization in AssetView (critical 9.8)
- [CVE-2022-28718](https://insights.sbomify.com/CVE-2022-28718/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2022-28717](https://insights.sbomify.com/CVE-2022-28717/): Cross-site scripting in Rebooter, PoE Rebooter, Scheduler, and Contact Converter (medium 4.8)
- [CVE-2022-28716](https://insights.sbomify.com/CVE-2022-28716/): Cross-site scripting in BIG-IP (high 7.5)
- [CVE-2022-28715](https://insights.sbomify.com/CVE-2022-28715/): Cross-site scripting in Cybozu Office (medium 6.1)
- [CVE-2022-28714](https://insights.sbomify.com/CVE-2022-28714/): Other in BIG-IP APM (high 7.3)
- [CVE-2022-28713](https://insights.sbomify.com/CVE-2022-28713/): Auth bypass in Cybozu Garoon (medium 5.3)
- [CVE-2022-28712](https://insights.sbomify.com/CVE-2022-28712/): Cross-site scripting in AVideo (critical 9.0)
- [CVE-2022-28711](https://insights.sbomify.com/CVE-2022-28711/): Memory corruption in APWeb (medium 5.3)
- [CVE-2022-28710](https://insights.sbomify.com/CVE-2022-28710/): Path traversal in AVideo (medium 6.5)
- [CVE-2022-2871](https://insights.sbomify.com/CVE-2022-2871/): Cross-site Scripting (XSS) - Stored in notrinos/notrinoserp (medium 4.6)
- [CVE-2022-28709](https://insights.sbomify.com/CVE-2022-28709/): Missing authorization in Intel(R) E810 Ethernet Controllers (medium 4.4)
- [CVE-2022-28708](https://insights.sbomify.com/CVE-2022-28708/): Denial of service in BIG-IP (medium 5.9)
- [CVE-2022-28707](https://insights.sbomify.com/CVE-2022-28707/): Cross-site scripting in BIG-IP (high 8.0)
- [CVE-2022-28706](https://insights.sbomify.com/CVE-2022-28706/): Denial of service in BIG-IP (medium 5.9)
- [CVE-2022-28705](https://insights.sbomify.com/CVE-2022-28705/): Integer overflow in BIG-IP (high 7.5)
- [CVE-2022-28704](https://insights.sbomify.com/CVE-2022-28704/): Hardcoded credentials in Rakuten Casa (high 7.2)
- [CVE-2022-28703](https://insights.sbomify.com/CVE-2022-28703/): Cross-site scripting in lansweeper (critical 9.1)
- [CVE-2022-28702](https://insights.sbomify.com/CVE-2022-28702/): e-Design - Multiple vulnerabilities (medium 6.1)
- [CVE-2022-28701](https://insights.sbomify.com/CVE-2022-28701/): Denial of service in BIG-IP (high 7.5)
- [CVE-2022-28700](https://insights.sbomify.com/CVE-2022-28700/): WordPress GiveWP plugin <= 2.20.2 - Authenticated Arbitrary File Creation via Export function vulnerability (critical 9.1)
- [CVE-2022-2870](https://insights.sbomify.com/CVE-2022-2870/): laravel deserialization (medium 4.1)
- [CVE-2022-28699](https://insights.sbomify.com/CVE-2022-28699/): Privilege escalation in Intel(R) NUC BIOS firmware (high 7.5)
- [CVE-2022-28697](https://insights.sbomify.com/CVE-2022-28697/): Missing authorization in Intel(R) AMT and Intel(R) Standard Manageability (medium 6.8)
- [CVE-2022-28696](https://insights.sbomify.com/CVE-2022-28696/): Privilege escalation in Intel(R) Distribution for Python (high 7.8)
- [CVE-2022-28695](https://insights.sbomify.com/CVE-2022-28695/): File upload in BIG-IP AFM (high 7.2)
- [CVE-2022-28693](https://insights.sbomify.com/CVE-2022-28693/): Information disclosure in Intel(R) Processors (medium 4.7)
- [CVE-2022-28692](https://insights.sbomify.com/CVE-2022-28692/): Other in Cybozu Garoon (medium 4.3)
- [CVE-2022-28691](https://insights.sbomify.com/CVE-2022-28691/): Denial of service in BIG-IP (high 7.5)
- [CVE-2022-28690](https://insights.sbomify.com/CVE-2022-28690/): Horner Automation Cscape Csfont (high 7.8)
- [CVE-2022-2869](https://insights.sbomify.com/CVE-2022-2869/): Integer overflow in libtiff (medium 5.5)
- [CVE-2022-28689](https://insights.sbomify.com/CVE-2022-28689/): Command injection in InRouter302 (medium 6.5)
- [CVE-2022-28688](https://insights.sbomify.com/CVE-2022-28688/): Code injection in Edge (high 7.8)
- [CVE-2022-28687](https://insights.sbomify.com/CVE-2022-28687/): Code injection in Edge (high 7.8)
- [CVE-2022-28686](https://insights.sbomify.com/CVE-2022-28686/): Code injection in Edge (high 7.8)
- [CVE-2022-28685](https://insights.sbomify.com/CVE-2022-28685/): Deserialization in Edge (high 7.8)
- [CVE-2022-28684](https://insights.sbomify.com/CVE-2022-28684/): Deserialization in DevExpress (high 8.8)
- [CVE-2022-28683](https://insights.sbomify.com/CVE-2022-28683/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28682](https://insights.sbomify.com/CVE-2022-28682/): Memory corruption in PDF Reader (high 7.8)
- [CVE-2022-28681](https://insights.sbomify.com/CVE-2022-28681/): Memory corruption in PDF Reader (low 2.5)
- [CVE-2022-28680](https://insights.sbomify.com/CVE-2022-28680/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-2868](https://insights.sbomify.com/CVE-2022-2868/): Memory corruption in libtiff (medium 5.5)
- [CVE-2022-28679](https://insights.sbomify.com/CVE-2022-28679/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28678](https://insights.sbomify.com/CVE-2022-28678/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28677](https://insights.sbomify.com/CVE-2022-28677/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28676](https://insights.sbomify.com/CVE-2022-28676/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28675](https://insights.sbomify.com/CVE-2022-28675/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28674](https://insights.sbomify.com/CVE-2022-28674/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28673](https://insights.sbomify.com/CVE-2022-28673/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28672](https://insights.sbomify.com/CVE-2022-28672/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28671](https://insights.sbomify.com/CVE-2022-28671/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28670](https://insights.sbomify.com/CVE-2022-28670/): Memory corruption in PDF Reader (low 3.3)
- [CVE-2022-2867](https://insights.sbomify.com/CVE-2022-2867/): Integer overflow in libtiff (medium 5.5)
- [CVE-2022-28669](https://insights.sbomify.com/CVE-2022-28669/): Use after free in PDF Reader (high 7.8)
- [CVE-2022-28668](https://insights.sbomify.com/CVE-2022-28668/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-28667](https://insights.sbomify.com/CVE-2022-28667/): Memory corruption in Intel(R) PROSet/Wireless WiFi software (medium 6.5)
- [CVE-2022-28666](https://insights.sbomify.com/CVE-2022-28666/): WordPress Custom Product Tabs for WooCommerce plugin <= 1.7.7 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2022-28665](https://insights.sbomify.com/CVE-2022-28665/): Memory corruption in FreshTomato (medium 5.3)
- [CVE-2022-28664](https://insights.sbomify.com/CVE-2022-28664/): Memory corruption in FreshTomato (medium 5.3)
- [CVE-2022-28663](https://insights.sbomify.com/CVE-2022-28663/): Memory corruption in Simcenter Femap (high 7.8)
- [CVE-2022-28662](https://insights.sbomify.com/CVE-2022-28662/): Memory corruption in Simcenter Femap (medium 6.5)
- [CVE-2022-28661](https://insights.sbomify.com/CVE-2022-28661/): Memory corruption in Simcenter Femap (high 8.8)
- [CVE-2022-28660](https://insights.sbomify.com/CVE-2022-28660/): Missing authorization in grafana:grafana (critical 9.8)
- [CVE-2022-2866](https://insights.sbomify.com/CVE-2022-2866/): FATEK Automation FvDesigner Out-of-bounds Write (high 7.8)
- [CVE-2022-28658](https://insights.sbomify.com/CVE-2022-28658/): Other in Apport (medium 5.5)
- [CVE-2022-28657](https://insights.sbomify.com/CVE-2022-28657/): Other in Apport (high 7.8)
- [CVE-2022-28656](https://insights.sbomify.com/CVE-2022-28656/): Denial of service in Apport (medium 5.5)
- [CVE-2022-28655](https://insights.sbomify.com/CVE-2022-28655/): Security feature bypass in Apport (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/339/