# Vulnerabilities published in 2022


- [CVE-2022-28372](https://insights.sbomify.com/CVE-2022-28372/): File upload in verizon:lvskihp indoorunit firmware (high 7.5)
- [CVE-2022-28371](https://insights.sbomify.com/CVE-2022-28371/): Hardcoded credentials in verizon:lvskihp indoorunit firmware (high 7.5)
- [CVE-2022-28370](https://insights.sbomify.com/CVE-2022-28370/): Security feature bypass in verizon:lvskihp outdoorunit firmware (high 7.5)
- [CVE-2022-2837](https://insights.sbomify.com/CVE-2022-2837/): coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints (medium 6.1)
- [CVE-2022-28369](https://insights.sbomify.com/CVE-2022-28369/): Command injection in verizon:lvskihp indoorunit firmware (critical 9.8)
- [CVE-2022-28368](https://insights.sbomify.com/CVE-2022-28368/): Remote code injection in dompdf/dompdf (critical 9.8)
- [CVE-2022-28367](https://insights.sbomify.com/CVE-2022-28367/): Cross-site Scripting in OWASP AntiSamy (medium 6.1)
- [CVE-2022-28366](https://insights.sbomify.com/CVE-2022-28366/): Denial of service in HtmlUnit-Neko (high 7.5)
- [CVE-2022-28365](https://insights.sbomify.com/CVE-2022-28365/): Information disclosure in reprisesoftware:reprise license manager (medium 5.3)
- [CVE-2022-28364](https://insights.sbomify.com/CVE-2022-28364/): Cross-site scripting in reprisesoftware:reprise license manager (medium 5.4)
- [CVE-2022-28363](https://insights.sbomify.com/CVE-2022-28363/): Cross-site scripting in reprisesoftware:reprise license manager (medium 6.1)
- [CVE-2022-28357](https://insights.sbomify.com/CVE-2022-28357/): NATS nats-server allows directory traversal via unintended path to a management action (critical 9.8)
- [CVE-2022-28356](https://insights.sbomify.com/CVE-2022-28356/): Denial of service in debian:debian linux (medium 5.5)
- [CVE-2022-28355](https://insights.sbomify.com/CVE-2022-28355/): Weak cryptography in scala-js:scala.js (high 7.5)
- [CVE-2022-28354](https://insights.sbomify.com/CVE-2022-28354/): Cross-site scripting in mybb:active threads (medium 6.1)
- [CVE-2022-28353](https://insights.sbomify.com/CVE-2022-28353/): Cross-site scripting in external redirect warning project:external redirect warning (medium 6.1)
- [CVE-2022-28352](https://insights.sbomify.com/CVE-2022-28352/): Security feature bypass in weechat:weechat (medium 4.3)
- [CVE-2022-28350](https://insights.sbomify.com/CVE-2022-28350/): Use after free in arm:valhall gpu kernel driver (critical 9.8)
- [CVE-2022-2835](https://insights.sbomify.com/CVE-2022-2835/): coreDNS vulnerable to Improper Restriction of Communication Channel to Intended Endpoints (medium 4.4)
- [CVE-2022-28349](https://insights.sbomify.com/CVE-2022-28349/): Use after free in arm:bifrost gpu kernel driver (critical 9.8)
- [CVE-2022-28348](https://insights.sbomify.com/CVE-2022-28348/): Use after free in arm:bifrost gpu kernel driver (critical 9.8)
- [CVE-2022-28347](https://insights.sbomify.com/CVE-2022-28347/): SQL Injection in Django (critical 9.8)
- [CVE-2022-28346](https://insights.sbomify.com/CVE-2022-28346/): SQL Injection in Django (critical 9.8)
- [CVE-2022-28345](https://insights.sbomify.com/CVE-2022-28345/): Other in signal:signal (high 7.5)
- [CVE-2022-2834](https://insights.sbomify.com/CVE-2022-2834/): Helpful < 4.5.26 - Information Disclosure (medium 5.3)
- [CVE-2022-28339](https://insights.sbomify.com/CVE-2022-28339/): Privilege escalation in Trend Micro HouseCall for Home Networks (high 7.3)
- [CVE-2022-28331](https://insights.sbomify.com/CVE-2022-28331/): Apache Portable Runtime (APR): Windows out-of-bounds write in apr_socket_sendv function (critical 9.8)
- [CVE-2022-28330](https://insights.sbomify.com/CVE-2022-28330/): read beyond bounds in mod_isapi (medium 5.3)
- [CVE-2022-2833](https://insights.sbomify.com/CVE-2022-2833/): Denial of service in Blender (high 7.5)
- [CVE-2022-28329](https://insights.sbomify.com/CVE-2022-28329/): Denial of service in SCALANCE W1788-1 M12 (medium 6.5)
- [CVE-2022-28328](https://insights.sbomify.com/CVE-2022-28328/): Denial of service in SCALANCE W1788-1 M12 (high 7.5)
- [CVE-2022-28327](https://insights.sbomify.com/CVE-2022-28327/): Denial of service in fedoraproject:extra packages for enterprise linux (high 7.5)
- [CVE-2022-28323](https://insights.sbomify.com/CVE-2022-28323/): Information disclosure in mediawiki:mediawiki (high 7.5)
- [CVE-2022-28321](https://insights.sbomify.com/CVE-2022-28321/): Auth bypass in linux-pam:linux-pam (critical 9.8)
- [CVE-2022-28320](https://insights.sbomify.com/CVE-2022-28320/): Memory corruption in View (high 7.8)
- [CVE-2022-2832](https://insights.sbomify.com/CVE-2022-2832/): Null dereference in Blender (high 7.5)
- [CVE-2022-28319](https://insights.sbomify.com/CVE-2022-28319/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28318](https://insights.sbomify.com/CVE-2022-28318/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28317](https://insights.sbomify.com/CVE-2022-28317/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28316](https://insights.sbomify.com/CVE-2022-28316/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28315](https://insights.sbomify.com/CVE-2022-28315/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28314](https://insights.sbomify.com/CVE-2022-28314/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28313](https://insights.sbomify.com/CVE-2022-28313/): Memory corruption in MicroStation CONNECT (low 3.3)
- [CVE-2022-28312](https://insights.sbomify.com/CVE-2022-28312/): Memory corruption in MicroStation CONNECT (low 3.3)
- [CVE-2022-28311](https://insights.sbomify.com/CVE-2022-28311/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28310](https://insights.sbomify.com/CVE-2022-28310/): Use after free in MicroStation CONNECT (high 7.8)
- [CVE-2022-2831](https://insights.sbomify.com/CVE-2022-2831/): Integer overflow in Blender (high 7.5)
- [CVE-2022-28309](https://insights.sbomify.com/CVE-2022-28309/): Memory corruption in View (low 3.3)
- [CVE-2022-28308](https://insights.sbomify.com/CVE-2022-28308/): Memory corruption in View (low 3.3)
- [CVE-2022-28307](https://insights.sbomify.com/CVE-2022-28307/): Memory corruption in View (high 7.8)
- [CVE-2022-28306](https://insights.sbomify.com/CVE-2022-28306/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28305](https://insights.sbomify.com/CVE-2022-28305/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28304](https://insights.sbomify.com/CVE-2022-28304/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28303](https://insights.sbomify.com/CVE-2022-28303/): Use after free in View (high 7.8)
- [CVE-2022-28302](https://insights.sbomify.com/CVE-2022-28302/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28301](https://insights.sbomify.com/CVE-2022-28301/): Memory corruption in MicroStation CONNECT (high 7.8)
- [CVE-2022-28300](https://insights.sbomify.com/CVE-2022-28300/): Memory corruption in MicroStation (high 7.8)
- [CVE-2022-2830](https://insights.sbomify.com/CVE-2022-2830/): Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573) (high 8.8)
- [CVE-2022-28291](https://insights.sbomify.com/CVE-2022-28291/): Information disclosure in Nessus Professional (medium 6.5)
- [CVE-2022-28290](https://insights.sbomify.com/CVE-2022-28290/): Cross-site scripting in WordPress Country Selector Plugin (medium 6.1)
- [CVE-2022-2829](https://insights.sbomify.com/CVE-2022-2829/): Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm (high 8.8)
- [CVE-2022-28289](https://insights.sbomify.com/CVE-2022-28289/): Memory corruption in Firefox (high 8.8)
- [CVE-2022-28288](https://insights.sbomify.com/CVE-2022-28288/): Memory corruption in Firefox (high 8.8)
- [CVE-2022-28287](https://insights.sbomify.com/CVE-2022-28287/): Denial of service in Firefox (medium 6.5)
- [CVE-2022-28286](https://insights.sbomify.com/CVE-2022-28286/): Other in Firefox (medium 5.4)
- [CVE-2022-28285](https://insights.sbomify.com/CVE-2022-28285/): Memory corruption in Firefox (medium 6.5)
- [CVE-2022-28284](https://insights.sbomify.com/CVE-2022-28284/): Security feature bypass in Firefox (high 8.8)
- [CVE-2022-28283](https://insights.sbomify.com/CVE-2022-28283/): Security feature bypass in Firefox (medium 6.5)
- [CVE-2022-28282](https://insights.sbomify.com/CVE-2022-28282/): Use after free in Firefox (medium 6.5)
- [CVE-2022-28281](https://insights.sbomify.com/CVE-2022-28281/): Memory corruption in Firefox (high 8.8)
- [CVE-2022-2828](https://insights.sbomify.com/CVE-2022-2828/): Missing authorization in Octopus Server (medium 6.5)
- [CVE-2022-28279](https://insights.sbomify.com/CVE-2022-28279/): Adobe Photoshop Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28278](https://insights.sbomify.com/CVE-2022-28278/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28277](https://insights.sbomify.com/CVE-2022-28277/): Adobe Photoshop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28276](https://insights.sbomify.com/CVE-2022-28276/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28275](https://insights.sbomify.com/CVE-2022-28275/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28274](https://insights.sbomify.com/CVE-2022-28274/): Adobe Photoshop Font Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28273](https://insights.sbomify.com/CVE-2022-28273/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28272](https://insights.sbomify.com/CVE-2022-28272/): Adobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28271](https://insights.sbomify.com/CVE-2022-28271/): Adobe Photoshop PDF File Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28270](https://insights.sbomify.com/CVE-2022-28270/): Adobe Photoshop SVG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-2827](https://insights.sbomify.com/CVE-2022-2827/): AMI MegaRAC User Enumeration Vulnerability (high 7.5)
- [CVE-2022-28269](https://insights.sbomify.com/CVE-2022-28269/): Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-28268](https://insights.sbomify.com/CVE-2022-28268/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-28267](https://insights.sbomify.com/CVE-2022-28267/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28266](https://insights.sbomify.com/CVE-2022-28266/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28265](https://insights.sbomify.com/CVE-2022-28265/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28264](https://insights.sbomify.com/CVE-2022-28264/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28263](https://insights.sbomify.com/CVE-2022-28263/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28262](https://insights.sbomify.com/CVE-2022-28262/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28261](https://insights.sbomify.com/CVE-2022-28261/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28260](https://insights.sbomify.com/CVE-2022-28260/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-2826](https://insights.sbomify.com/CVE-2022-2826/): Cross-site scripting in GitLab (low 2.7)
- [CVE-2022-28259](https://insights.sbomify.com/CVE-2022-28259/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28258](https://insights.sbomify.com/CVE-2022-28258/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28257](https://insights.sbomify.com/CVE-2022-28257/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28256](https://insights.sbomify.com/CVE-2022-28256/): Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28255](https://insights.sbomify.com/CVE-2022-28255/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28254](https://insights.sbomify.com/CVE-2022-28254/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28253](https://insights.sbomify.com/CVE-2022-28253/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/342/