# Vulnerabilities published in 2022


- [CVE-2022-27796](https://insights.sbomify.com/CVE-2022-27796/): Adobe Acrobat Reader DC AcroForm isBoxChecked Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27795](https://insights.sbomify.com/CVE-2022-27795/): Adobe Acrobat Reader DC AcroForm isDefaultChecked Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27794](https://insights.sbomify.com/CVE-2022-27794/): Adobe Acrobat Reader DC Font Parsing Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27793](https://insights.sbomify.com/CVE-2022-27793/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27792](https://insights.sbomify.com/CVE-2022-27792/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27791](https://insights.sbomify.com/CVE-2022-27791/): Adobe Acrobat Reader DC Font Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27790](https://insights.sbomify.com/CVE-2022-27790/): Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-2779](https://insights.sbomify.com/CVE-2022-2779/): SourceCodester Gas Agency Management System oneWord.php unrestricted upload (medium 6.3)
- [CVE-2022-27789](https://insights.sbomify.com/CVE-2022-27789/): Adobe Acrobat Reader DC AcroForm Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27788](https://insights.sbomify.com/CVE-2022-27788/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27787](https://insights.sbomify.com/CVE-2022-27787/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27786](https://insights.sbomify.com/CVE-2022-27786/): Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27785](https://insights.sbomify.com/CVE-2022-27785/): Adobe Acrobat Reader DC Font Parsing Use-After-Free Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-27784](https://insights.sbomify.com/CVE-2022-27784/): Adobe After Effects Stack Buffer Overflow Could Lead To RCE (high 7.8)
- [CVE-2022-27783](https://insights.sbomify.com/CVE-2022-27783/): Adobe After Effects Stack Buffer Overflow Could Lead To RCE (high 7.8)
- [CVE-2022-27782](https://insights.sbomify.com/CVE-2022-27782/): Security feature bypass in https://github.com/curl/curl (high 7.5)
- [CVE-2022-27781](https://insights.sbomify.com/CVE-2022-27781/): Denial of service in https://github.com/curl/curl (high 7.5)
- [CVE-2022-27780](https://insights.sbomify.com/CVE-2022-27780/): Security feature bypass in https://github.com/curl/curl (medium 5.3)
- [CVE-2022-2778](https://insights.sbomify.com/CVE-2022-2778/): Security feature bypass in Octopus Server (critical 9.8)
- [CVE-2022-27779](https://insights.sbomify.com/CVE-2022-27779/): Information disclosure in https://github.com/curl/curl (medium 5.3)
- [CVE-2022-27778](https://insights.sbomify.com/CVE-2022-27778/): Other in https://github.com/curl/curl (high 8.1)
- [CVE-2022-27777](https://insights.sbomify.com/CVE-2022-27777/): XSS Vulnerability in Action View tag helpers (medium 6.1)
- [CVE-2022-27776](https://insights.sbomify.com/CVE-2022-27776/): Information disclosure in https://github.com/curl/curl (medium 6.5)
- [CVE-2022-27775](https://insights.sbomify.com/CVE-2022-27775/): Information disclosure in https://github.com/curl/curl (high 7.5)
- [CVE-2022-27774](https://insights.sbomify.com/CVE-2022-27774/): Information disclosure in https://github.com/curl/curl (medium 5.7)
- [CVE-2022-27773](https://insights.sbomify.com/CVE-2022-27773/): Privilege escalation in Ivanti Endpoint Manger (critical 9.8)
- [CVE-2022-27772](https://insights.sbomify.com/CVE-2022-27772/): Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot (high 7.8)
- [CVE-2022-2777](https://insights.sbomify.com/CVE-2022-2777/): Cross-site Scripting (XSS) - Stored in microweber/microweber (medium 6.6)
- [CVE-2022-2776](https://insights.sbomify.com/CVE-2022-2776/): SourceCodester Gym Management System delete_user.php denial of service (medium 5.4)
- [CVE-2022-2775](https://insights.sbomify.com/CVE-2022-2775/): Fast Flow < 1.2.13 - Admin+ Stored Cross-Site Scripting (medium 5.5)
- [CVE-2022-2774](https://insights.sbomify.com/CVE-2022-2774/): SourceCodester Library Management System student.php sql injection (medium 6.3)
- [CVE-2022-2773](https://insights.sbomify.com/CVE-2022-2773/): SourceCodester Apartment Visitor Management System profile.php cross site scripting (low 3.5)
- [CVE-2022-2772](https://insights.sbomify.com/CVE-2022-2772/): SourceCodester Apartment Visitor Management System action-visitor.php sql injection (medium 6.3)
- [CVE-2022-2771](https://insights.sbomify.com/CVE-2022-2771/): SourceCodester Simple Online Book Store System bookPerPub.php sql injection (medium 6.3)
- [CVE-2022-2770](https://insights.sbomify.com/CVE-2022-2770/): SourceCodester Simple Online Book Store System book.php sql injection (medium 6.3)
- [CVE-2022-2769](https://insights.sbomify.com/CVE-2022-2769/): SourceCodester Company Website CMS contact cross site scripting (low 3.5)
- [CVE-2022-2768](https://insights.sbomify.com/CVE-2022-2768/): SourceCodester Library Management System cross site scripting (low 3.5)
- [CVE-2022-27677](https://insights.sbomify.com/CVE-2022-27677/): Privilege escalation in Ryzen™ Master (high 7.8)
- [CVE-2022-27674](https://insights.sbomify.com/CVE-2022-27674/): Memory corruption in AMD μProf (high 7.5)
- [CVE-2022-27673](https://insights.sbomify.com/CVE-2022-27673/): Missing authorization in AMD Link Android (high 7.5)
- [CVE-2022-27672](https://insights.sbomify.com/CVE-2022-27672/): Information disclosure in 1st Gen AMD EPYC™ Processors (medium 4.7)
- [CVE-2022-27671](https://insights.sbomify.com/CVE-2022-27671/): Information disclosure in SAP BusinessObjects Business Intelligence Platform (medium 6.5)
- [CVE-2022-27670](https://insights.sbomify.com/CVE-2022-27670/): Denial of service in SAP SQL Anywhere Server (medium 6.5)
- [CVE-2022-2767](https://insights.sbomify.com/CVE-2022-2767/): SourceCodester Online Admission System index.php cross site scripting (low 3.5)
- [CVE-2022-27669](https://insights.sbomify.com/CVE-2022-27669/): Missing authorization in SAP NetWeaver Application Server for Java (high 7.5)
- [CVE-2022-27668](https://insights.sbomify.com/CVE-2022-27668/): Missing authorization in SAP NetWeaver and ABAP Platform (critical 9.8)
- [CVE-2022-27667](https://insights.sbomify.com/CVE-2022-27667/): Information disclosure in SAP BusinessObjects Business Intelligence Platform (high 7.5)
- [CVE-2022-27666](https://insights.sbomify.com/CVE-2022-27666/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2022-27665](https://insights.sbomify.com/CVE-2022-27665/): Cross-site scripting in progress:ws ftp server (medium 6.1)
- [CVE-2022-27664](https://insights.sbomify.com/CVE-2022-27664/): golang.org/x/net/http2 Denial of Service vulnerability (high 7.5)
- [CVE-2022-27662](https://insights.sbomify.com/CVE-2022-27662/): Code injection in Traffix SDC (medium 4.8)
- [CVE-2022-27661](https://insights.sbomify.com/CVE-2022-27661/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2022-27660](https://insights.sbomify.com/CVE-2022-27660/): Denial of service in LinkHub Mesh Wifi (critical 9.3)
- [CVE-2022-2766](https://insights.sbomify.com/CVE-2022-2766/): SourceCodester Loan Management System index.php sql injection (high 7.3)
- [CVE-2022-27659](https://insights.sbomify.com/CVE-2022-27659/): Missing authorization in BIG-IP (medium 4.3)
- [CVE-2022-27658](https://insights.sbomify.com/CVE-2022-27658/): Missing authorization in SAP Innovation management (high 7.5)
- [CVE-2022-27657](https://insights.sbomify.com/CVE-2022-27657/): Path traversal in SAP Focused Run (Simple Diagnostics Agent) (low 2.7)
- [CVE-2022-27656](https://insights.sbomify.com/CVE-2022-27656/): Cross-site scripting in SAP NetWeaver AS for ABAP and Java (ICM Administration UI) (medium 6.1)
- [CVE-2022-27655](https://insights.sbomify.com/CVE-2022-27655/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 6.5)
- [CVE-2022-27654](https://insights.sbomify.com/CVE-2022-27654/): Denial of service in SAP 3D Visual Enterprise Viewer (medium 6.5)
- [CVE-2022-27653](https://insights.sbomify.com/CVE-2022-27653/): Memory corruption in Simcenter Femap (high 7.8)
- [CVE-2022-27652](https://insights.sbomify.com/CVE-2022-27652/): Incorrect Default Permissions in CRI-O (medium 5.3)
- [CVE-2022-27651](https://insights.sbomify.com/CVE-2022-27651/): Non-empty default inheritable capabilities for linux container in Buildah (medium 6.8)
- [CVE-2022-27650](https://insights.sbomify.com/CVE-2022-27650/): Privilege escalation in crun (high 7.5)
- [CVE-2022-2765](https://insights.sbomify.com/CVE-2022-2765/): SourceCodester Company Website CMS settings improper authentication (medium 6.3)
- [CVE-2022-27649](https://insights.sbomify.com/CVE-2022-27649/): Podman's default inheritable capabilities for linux container not empty (high 7.5)
- [CVE-2022-27648](https://insights.sbomify.com/CVE-2022-27648/): Memory corruption in Screen Creator (high 7.8)
- [CVE-2022-27647](https://insights.sbomify.com/CVE-2022-27647/): Command injection in R6700v3 (high 8.0)
- [CVE-2022-27646](https://insights.sbomify.com/CVE-2022-27646/): Memory corruption in R6700v3 (high 8.0)
- [CVE-2022-27645](https://insights.sbomify.com/CVE-2022-27645/): Auth bypass in R6700v3 (high 8.8)
- [CVE-2022-27644](https://insights.sbomify.com/CVE-2022-27644/): Security feature bypass in R6700v3 (medium 5.0)
- [CVE-2022-27643](https://insights.sbomify.com/CVE-2022-27643/): Memory corruption in R6700v3 (high 8.8)
- [CVE-2022-27642](https://insights.sbomify.com/CVE-2022-27642/): Auth bypass in R6700v3 (medium 6.3)
- [CVE-2022-27641](https://insights.sbomify.com/CVE-2022-27641/): Integer overflow in R6700v3 (high 8.8)
- [CVE-2022-27640](https://insights.sbomify.com/CVE-2022-27640/): Denial of service in SIMATIC CP 442-1 RNA (medium 6.5)
- [CVE-2022-2764](https://insights.sbomify.com/CVE-2022-2764/): Denial of service in undertow (medium 4.9)
- [CVE-2022-27639](https://insights.sbomify.com/CVE-2022-27639/): Privilege escalation in Intel(R) XMM(TM) 7560 Modem software (medium 5.4)
- [CVE-2022-27638](https://insights.sbomify.com/CVE-2022-27638/): Privilege escalation in Intel(R) Advanced Link Analyzer Pro and Standard edition (medium 6.7)
- [CVE-2022-27637](https://insights.sbomify.com/CVE-2022-27637/): Cross-site scripting in PukiWiki (medium 6.1)
- [CVE-2022-27636](https://insights.sbomify.com/CVE-2022-27636/): Information disclosure in BIG-IP APM (medium 5.5)
- [CVE-2022-27635](https://insights.sbomify.com/CVE-2022-27635/): Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software (high 8.2)
- [CVE-2022-27634](https://insights.sbomify.com/CVE-2022-27634/): Privilege escalation in BIG-IP APM (medium 6.5)
- [CVE-2022-27633](https://insights.sbomify.com/CVE-2022-27633/): Information disclosure in LinkHub Mesh Wifi (medium 6.5)
- [CVE-2022-27632](https://insights.sbomify.com/CVE-2022-27632/): Cross-site request forgery in Rebooter, PoE Rebooter, Scheduler, and Contact Converter (high 8.8)
- [CVE-2022-27631](https://insights.sbomify.com/CVE-2022-27631/): Memory corruption in DD-WRT (medium 5.3)
- [CVE-2022-27630](https://insights.sbomify.com/CVE-2022-27630/): Information disclosure in LinkHub Mesh Wifi (medium 6.5)
- [CVE-2022-2763](https://insights.sbomify.com/CVE-2022-2763/): WP Socializer < 7.3 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-27629](https://insights.sbomify.com/CVE-2022-27629/): Cross-site request forgery in MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership (high 8.8)
- [CVE-2022-27628](https://insights.sbomify.com/CVE-2022-27628/): WordPress WZone – Lite Version Plugin <= 3.1 Lite is vulnerable to Cross Site Request Forgery (CSRF) (medium 4.7)
- [CVE-2022-27627](https://insights.sbomify.com/CVE-2022-27627/): Cross-site scripting in Cybozu Garoon (medium 6.1)
- [CVE-2022-27626](https://insights.sbomify.com/CVE-2022-27626/): Race condition in DiskStation Manager (DSM) (critical 10.0)
- [CVE-2022-27625](https://insights.sbomify.com/CVE-2022-27625/): Memory corruption in DiskStation Manager (DSM) (critical 10.0)
- [CVE-2022-27624](https://insights.sbomify.com/CVE-2022-27624/): Memory corruption in DiskStation Manager (DSM) (critical 10.0)
- [CVE-2022-27623](https://insights.sbomify.com/CVE-2022-27623/): Missing authorization in DiskStation Manager (DSM) (high 7.4)
- [CVE-2022-27622](https://insights.sbomify.com/CVE-2022-27622/): Server-side request forgery in DiskStation Manager (DSM) (medium 4.1)
- [CVE-2022-27621](https://insights.sbomify.com/CVE-2022-27621/): Path traversal in USB Copy (medium 5.5)
- [CVE-2022-27620](https://insights.sbomify.com/CVE-2022-27620/): Path traversal in SSO Server (medium 6.8)
- [CVE-2022-2762](https://insights.sbomify.com/CVE-2022-2762/): AdminPad < 2.2 - Note Update via CSRF (medium 6.5)
- [CVE-2022-27619](https://insights.sbomify.com/CVE-2022-27619/): Information disclosure in Synology Note Station Client (medium 6.8)
- [CVE-2022-27618](https://insights.sbomify.com/CVE-2022-27618/): Path traversal in Storage Analyzer (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/347/