# Vulnerabilities published in 2022


- [CVE-2022-28252](https://insights.sbomify.com/CVE-2022-28252/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (low 3.3)
- [CVE-2022-28251](https://insights.sbomify.com/CVE-2022-28251/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28250](https://insights.sbomify.com/CVE-2022-28250/): Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-2825](https://insights.sbomify.com/CVE-2022-2825/): Memory corruption in KEPServerEX (critical 9.8)
- [CVE-2022-28249](https://insights.sbomify.com/CVE-2022-28249/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28248](https://insights.sbomify.com/CVE-2022-28248/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28247](https://insights.sbomify.com/CVE-2022-28247/): Adobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution (medium 6.7)
- [CVE-2022-28246](https://insights.sbomify.com/CVE-2022-28246/): Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28245](https://insights.sbomify.com/CVE-2022-28245/): Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-28244](https://insights.sbomify.com/CVE-2022-28244/): Adobe Acrobat Reader DC CSP Bypass Leads To Privilege Escalation (medium 6.3)
- [CVE-2022-28243](https://insights.sbomify.com/CVE-2022-28243/): Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28242](https://insights.sbomify.com/CVE-2022-28242/): Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28241](https://insights.sbomify.com/CVE-2022-28241/): Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28240](https://insights.sbomify.com/CVE-2022-28240/): Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-2824](https://insights.sbomify.com/CVE-2022-2824/): Authorization Bypass Through User-Controlled Key in openemr/openemr (high 8.8)
- [CVE-2022-28239](https://insights.sbomify.com/CVE-2022-28239/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28238](https://insights.sbomify.com/CVE-2022-28238/): Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28237](https://insights.sbomify.com/CVE-2022-28237/): Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28236](https://insights.sbomify.com/CVE-2022-28236/): Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28235](https://insights.sbomify.com/CVE-2022-28235/): Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28234](https://insights.sbomify.com/CVE-2022-28234/): Adobe Acrobat Reader DC Heap Overflow Could Lead to RCE (high 7.8)
- [CVE-2022-28233](https://insights.sbomify.com/CVE-2022-28233/): Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-28232](https://insights.sbomify.com/CVE-2022-28232/): Adobe Acrobat Reader DC Collab Object Use-After-Free Information Disclosure Vulnerability (high 7.8)
- [CVE-2022-28231](https://insights.sbomify.com/CVE-2022-28231/): Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability (high 7.8)
- [CVE-2022-28230](https://insights.sbomify.com/CVE-2022-28230/): Adobe Acrobat Reader DC AcroForm calculateNow Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-2823](https://insights.sbomify.com/CVE-2022-2823/): Slider, Gallery, and Carousel by MetaSlider < 3.27.9 - Admin+ Stored Cross Site Scripting (medium 4.8)
- [CVE-2022-28229](https://insights.sbomify.com/CVE-2022-28229/): Denial of service in userver (high 7.5)
- [CVE-2022-28228](https://insights.sbomify.com/CVE-2022-28228/): Memory corruption in YDB (critical 9.1)
- [CVE-2022-28226](https://insights.sbomify.com/CVE-2022-28226/): Privilege escalation in Yandex Browser (Desktop) (high 7.8)
- [CVE-2022-28225](https://insights.sbomify.com/CVE-2022-28225/): Privilege escalation in Yandex Browser (Desktop) (high 7.8)
- [CVE-2022-28224](https://insights.sbomify.com/CVE-2022-28224/): Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature (medium 5.5)
- [CVE-2022-28223](https://insights.sbomify.com/CVE-2022-28223/): Privilege escalation in tekon:kio-1m firmware (critical 9.1)
- [CVE-2022-28222](https://insights.sbomify.com/CVE-2022-28222/): CleanTalk AntiSpam <= 5.173 Reflected XSS (medium 6.1)
- [CVE-2022-28221](https://insights.sbomify.com/CVE-2022-28221/): CleanTalk AntiSpam <= 5.173 Reflected XSS (medium 6.1)
- [CVE-2022-28220](https://insights.sbomify.com/CVE-2022-28220/): STARTTLS command injection in Apache JAMES (high 7.5)
- [CVE-2022-2822](https://insights.sbomify.com/CVE-2022-2822/): Authentication Bypass by Primary Weakness in octoprint/octoprint (low 3.7)
- [CVE-2022-28219](https://insights.sbomify.com/CVE-2022-28219/): XML external entity in zohocorp:manageengine adaudit plus (critical 9.8)
- [CVE-2022-28218](https://insights.sbomify.com/CVE-2022-28218/): Misconfiguration in ciphermail:webmail messenger (medium 5.5)
- [CVE-2022-28217](https://insights.sbomify.com/CVE-2022-28217/): XML external entity in SAP NetWeaver (EP Web Page Composer) (medium 6.5)
- [CVE-2022-28216](https://insights.sbomify.com/CVE-2022-28216/): Cross-site scripting in SAP BusinessObjects Business Intelligence Platform (BI Workspace) (medium 6.1)
- [CVE-2022-28215](https://insights.sbomify.com/CVE-2022-28215/): Open redirect in SAP NetWeaver ABAP Server and ABAP Platform (medium 4.7)
- [CVE-2022-28214](https://insights.sbomify.com/CVE-2022-28214/): Information disclosure in SAP BusinessObjects Enterprise (Central Management Server) (high 7.8)
- [CVE-2022-28213](https://insights.sbomify.com/CVE-2022-28213/): XML external entity in SAP BusinessObjects Business Intelligence Platform (high 8.1)
- [CVE-2022-2821](https://insights.sbomify.com/CVE-2022-2821/): Missing Critical Step in Authentication in namelessmc/nameless (critical 9.8)
- [CVE-2022-28209](https://insights.sbomify.com/CVE-2022-28209/): Security feature bypass in mediawiki:mediawiki (critical 9.8)
- [CVE-2022-28206](https://insights.sbomify.com/CVE-2022-28206/): Missing authorization in mediawiki:mediawiki (critical 9.8)
- [CVE-2022-28205](https://insights.sbomify.com/CVE-2022-28205/): Other in mediawiki:mediawiki (critical 9.8)
- [CVE-2022-28204](https://insights.sbomify.com/CVE-2022-28204/): Denial of service in mediawiki:mediawiki (high 7.5)
- [CVE-2022-28203](https://insights.sbomify.com/CVE-2022-28203/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-28202](https://insights.sbomify.com/CVE-2022-28202/): Cross-site scripting in debian:debian linux (medium 6.1)
- [CVE-2022-28201](https://insights.sbomify.com/CVE-2022-28201/): Denial of service in debian:debian linux (medium 4.4)
- [CVE-2022-28200](https://insights.sbomify.com/CVE-2022-28200/): Memory corruption in NVIDIA DGX A100 (high 8.2)
- [CVE-2022-2820](https://insights.sbomify.com/CVE-2022-2820/): Session Fixation in namelessmc/nameless (high 7.0)
- [CVE-2022-28199](https://insights.sbomify.com/CVE-2022-28199/): Denial of service in NVIDIA FLARE (medium 6.5)
- [CVE-2022-28198](https://insights.sbomify.com/CVE-2022-28198/): Other in NVIDIA Omniverse Cache (medium 6.6)
- [CVE-2022-28197](https://insights.sbomify.com/CVE-2022-28197/): Integer overflow in Jetson AGX Xavier series, Jetson Xavier NX (medium 5.0)
- [CVE-2022-28196](https://insights.sbomify.com/CVE-2022-28196/): Memory corruption in Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 NX, Jetson TX2 series (medium 4.6)
- [CVE-2022-28195](https://insights.sbomify.com/CVE-2022-28195/): Integer overflow in Jetson AGX Xavier series, Jetson Xavier NX (medium 5.7)
- [CVE-2022-28194](https://insights.sbomify.com/CVE-2022-28194/): Memory corruption in Jetson AGX Xavier series, Jetson Xavier NX (high 7.3)
- [CVE-2022-28193](https://insights.sbomify.com/CVE-2022-28193/): Memory corruption in Jetson AGX Xavier series, Jetson Xavier NX (medium 5.6)
- [CVE-2022-28192](https://insights.sbomify.com/CVE-2022-28192/): Use after free in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming (medium 4.1)
- [CVE-2022-28191](https://insights.sbomify.com/CVE-2022-28191/): Denial of service in NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming (medium 5.5)
- [CVE-2022-28190](https://insights.sbomify.com/CVE-2022-28190/): Denial of service in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2022-2819](https://insights.sbomify.com/CVE-2022-2819/): Heap-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-28189](https://insights.sbomify.com/CVE-2022-28189/): Null dereference in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2022-28188](https://insights.sbomify.com/CVE-2022-28188/): Denial of service in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2022-28187](https://insights.sbomify.com/CVE-2022-28187/): Denial of service in NVIDIA GPU Display Driver (medium 5.5)
- [CVE-2022-28186](https://insights.sbomify.com/CVE-2022-28186/): Other in NVIDIA GPU Display Driver (medium 6.1)
- [CVE-2022-28185](https://insights.sbomify.com/CVE-2022-28185/): Memory corruption in NVIDIA GPU Display Driver (medium 6.8)
- [CVE-2022-28184](https://insights.sbomify.com/CVE-2022-28184/): Privilege escalation in NVIDIA GPU Display Driver (high 7.1)
- [CVE-2022-28183](https://insights.sbomify.com/CVE-2022-28183/): Memory corruption in NVIDIA GPU Display Driver (high 7.7)
- [CVE-2022-28182](https://insights.sbomify.com/CVE-2022-28182/): Memory corruption in NVIDIA GPU Display Driver (high 8.5)
- [CVE-2022-28181](https://insights.sbomify.com/CVE-2022-28181/): Memory corruption in NVIDIA GPU Display Driver (high 8.5)
- [CVE-2022-2818](https://insights.sbomify.com/CVE-2022-2818/): Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit (critical 9.8)
- [CVE-2022-28173](https://insights.sbomify.com/CVE-2022-28173/): Missing authorization in DS-3WF01C-2N/O (critical 9.1)
- [CVE-2022-28172](https://insights.sbomify.com/CVE-2022-28172/): Cross-site scripting in DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D (medium 6.5)
- [CVE-2022-28171](https://insights.sbomify.com/CVE-2022-28171/): Command injection in DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D (high 7.5)
- [CVE-2022-28170](https://insights.sbomify.com/CVE-2022-28170/): Information disclosure in Brocade Fabric OS (medium 6.5)
- [CVE-2022-2817](https://insights.sbomify.com/CVE-2022-2817/): Use After Free in vim/vim (high 7.8)
- [CVE-2022-28169](https://insights.sbomify.com/CVE-2022-28169/): Privilege escalation in Brocade Fabric OS (high 8.8)
- [CVE-2022-28168](https://insights.sbomify.com/CVE-2022-28168/): Weak cryptography in Brocade SANnav (high 7.5)
- [CVE-2022-28167](https://insights.sbomify.com/CVE-2022-28167/): Information disclosure in Brocade SANnav (medium 6.5)
- [CVE-2022-28166](https://insights.sbomify.com/CVE-2022-28166/): Weak cryptography in Brocade SANnav (high 7.5)
- [CVE-2022-28165](https://insights.sbomify.com/CVE-2022-28165/): Missing authorization in Brocade SANNav (high 8.8)
- [CVE-2022-28164](https://insights.sbomify.com/CVE-2022-28164/): Weak cryptography in Brocade SANNav (medium 6.5)
- [CVE-2022-28163](https://insights.sbomify.com/CVE-2022-28163/): SQL injection in Brocade SANNav (critical 9.8)
- [CVE-2022-28162](https://insights.sbomify.com/CVE-2022-28162/): Information disclosure in Brocade SANNav (low 3.3)
- [CVE-2022-28161](https://insights.sbomify.com/CVE-2022-28161/): Information disclosure in Brocade SANNav (medium 5.5)
- [CVE-2022-28160](https://insights.sbomify.com/CVE-2022-28160/): Arbitrary file read vulnerability in Jenkins Tests Selector Plugin (medium 6.5)
- [CVE-2022-2816](https://insights.sbomify.com/CVE-2022-2816/): Out-of-bounds Read in vim/vim (high 7.8)
- [CVE-2022-28159](https://insights.sbomify.com/CVE-2022-28159/): Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin (medium 5.4)
- [CVE-2022-28158](https://insights.sbomify.com/CVE-2022-28158/): Missing permission Jenkins Pipeline Phoenix AutoTest Plugin (medium 6.5)
- [CVE-2022-28157](https://insights.sbomify.com/CVE-2022-28157/): Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin (medium 6.5)
- [CVE-2022-28156](https://insights.sbomify.com/CVE-2022-28156/): Path traversal in Jenkins Phoenix AutoTest Plugin (medium 6.5)
- [CVE-2022-28155](https://insights.sbomify.com/CVE-2022-28155/): XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin (high 8.1)
- [CVE-2022-28154](https://insights.sbomify.com/CVE-2022-28154/): enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability (high 8.1)
- [CVE-2022-28153](https://insights.sbomify.com/CVE-2022-28153/): Cross-site Scripting in Jenkins SiteMonitor Plugin (medium 5.4)
- [CVE-2022-28152](https://insights.sbomify.com/CVE-2022-28152/): CSRF vulnerability in Jenkins Job and Node ownership Plugin (medium 4.3)
- [CVE-2022-28151](https://insights.sbomify.com/CVE-2022-28151/): Missing permission check in Jenkins Job and Node ownership Plugin (medium 4.3)
- [CVE-2022-28150](https://insights.sbomify.com/CVE-2022-28150/): Cross site request forgery in Jenkins Job and Node ownership Plugin (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/343/