# Vulnerabilities published in 2022


- [CVE-2022-27494](https://insights.sbomify.com/CVE-2022-27494/): CROSS-SITE SCRIPTING CWE-79 (high 8.2)
- [CVE-2022-27493](https://insights.sbomify.com/CVE-2022-27493/): Privilege escalation in Intel(R) NUC Laptop Kits (high 7.8)
- [CVE-2022-27492](https://insights.sbomify.com/CVE-2022-27492/): Integer overflow in WhatsApp Business for Android (high 7.8)
- [CVE-2022-27491](https://insights.sbomify.com/CVE-2022-27491/): Other in Fortinet FortiOS (medium 6.8)
- [CVE-2022-27490](https://insights.sbomify.com/CVE-2022-27490/): Information disclosure in FortiAnalyzer (medium 5.1)
- [CVE-2022-2749](https://insights.sbomify.com/CVE-2022-2749/): SourceCodester Gym Management System unrestricted upload (medium 4.7)
- [CVE-2022-27489](https://insights.sbomify.com/CVE-2022-27489/): Command injection in FortiExtender (high 7.0)
- [CVE-2022-27488](https://insights.sbomify.com/CVE-2022-27488/): Cross-site request forgery in FortiMail (high 7.5)
- [CVE-2022-27487](https://insights.sbomify.com/CVE-2022-27487/): Privilege escalation in FortiDeceptor (high 8.3)
- [CVE-2022-27486](https://insights.sbomify.com/CVE-2022-27486/): Command injection in FortiDDoS (medium 5.9)
- [CVE-2022-27485](https://insights.sbomify.com/CVE-2022-27485/): SQL injection in FortiSandbox (medium 6.2)
- [CVE-2022-27484](https://insights.sbomify.com/CVE-2022-27484/): Auth bypass in Fortinet FortiADC (medium 5.4)
- [CVE-2022-27483](https://insights.sbomify.com/CVE-2022-27483/): Command injection in Fortinet FortiManager, FortiAnalyzer (high 7.2)
- [CVE-2022-27482](https://insights.sbomify.com/CVE-2022-27482/): Command injection in FortiADC (high 7.4)
- [CVE-2022-27481](https://insights.sbomify.com/CVE-2022-27481/): Race condition in SCALANCE W1788-1 M12 (medium 5.3)
- [CVE-2022-27480](https://insights.sbomify.com/CVE-2022-27480/): Missing authorization in SICAM A8000 CP-8031 (high 7.5)
- [CVE-2022-2748](https://insights.sbomify.com/CVE-2022-2748/): SourceCodester Simple Online Book Store System edit.php cross site scripting (low 3.5)
- [CVE-2022-27479](https://insights.sbomify.com/CVE-2022-27479/): SQL injection vulnerability in chart data API (critical 9.8)
- [CVE-2022-27478](https://insights.sbomify.com/CVE-2022-27478/): File upload in victor cms project:victor cms (high 8.8)
- [CVE-2022-27477](https://insights.sbomify.com/CVE-2022-27477/): File upload in newbee-mall project:newbee-mall (critical 9.8)
- [CVE-2022-27476](https://insights.sbomify.com/CVE-2022-27476/): Cross-site scripting in newbee-mall project:newbee-mall (medium 6.1)
- [CVE-2022-27475](https://insights.sbomify.com/CVE-2022-27475/): Cross-site scripting in hotel management system project:hotel management system (medium 6.1)
- [CVE-2022-27474](https://insights.sbomify.com/CVE-2022-27474/): Code injection in salesagility:suitecrm (high 7.2)
- [CVE-2022-27473](https://insights.sbomify.com/CVE-2022-27473/): SQL injection in roothub project:roothub (critical 9.8)
- [CVE-2022-27472](https://insights.sbomify.com/CVE-2022-27472/): SQL injection in roothub project:roothub (critical 9.8)
- [CVE-2022-27470](https://insights.sbomify.com/CVE-2022-27470/): Memory corruption in fedoraproject:fedora (high 7.8)
- [CVE-2022-2747](https://insights.sbomify.com/CVE-2022-2747/): SourceCodester Simple Online Book Store book.php sql injection (medium 6.3)
- [CVE-2022-27469](https://insights.sbomify.com/CVE-2022-27469/): Server-side request forgery in monstaftp:monsta ftp (critical 9.8)
- [CVE-2022-27468](https://insights.sbomify.com/CVE-2022-27468/): File upload in monstaftp:monsta ftp (critical 9.8)
- [CVE-2022-27466](https://insights.sbomify.com/CVE-2022-27466/): SQL injection in mingsoft:mcms (critical 9.8)
- [CVE-2022-27463](https://insights.sbomify.com/CVE-2022-27463/): Open redirect in wwbn/avideo (medium 6.1)
- [CVE-2022-27462](https://insights.sbomify.com/CVE-2022-27462/): Cross-site scripting in wwbn:avideo (medium 6.1)
- [CVE-2022-27461](https://insights.sbomify.com/CVE-2022-27461/): Open redirect in nopcommerce:nopcommerce (medium 6.1)
- [CVE-2022-2746](https://insights.sbomify.com/CVE-2022-2746/): SourceCodester Simple Online Book Store System Admin_ add.php unrestricted upload (medium 6.3)
- [CVE-2022-27457](https://insights.sbomify.com/CVE-2022-27457/): Use after free in mariadb:mariadb (high 7.5)
- [CVE-2022-27456](https://insights.sbomify.com/CVE-2022-27456/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-27455](https://insights.sbomify.com/CVE-2022-27455/): Use after free in mariadb:mariadb (high 7.5)
- [CVE-2022-27452](https://insights.sbomify.com/CVE-2022-27452/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-27451](https://insights.sbomify.com/CVE-2022-27451/): Memory corruption in mariadb:mariadb (high 7.5)
- [CVE-2022-2745](https://insights.sbomify.com/CVE-2022-2745/): SourceCodester Gym Management System Add New Trainer add_trainers.php sql injection (medium 6.3)
- [CVE-2022-27449](https://insights.sbomify.com/CVE-2022-27449/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-27448](https://insights.sbomify.com/CVE-2022-27448/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-27447](https://insights.sbomify.com/CVE-2022-27447/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-27446](https://insights.sbomify.com/CVE-2022-27446/): Memory corruption in mariadb:mariadb (high 7.5)
- [CVE-2022-27445](https://insights.sbomify.com/CVE-2022-27445/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-27444](https://insights.sbomify.com/CVE-2022-27444/): Memory corruption in mariadb:mariadb (high 7.5)
- [CVE-2022-27442](https://insights.sbomify.com/CVE-2022-27442/): Information disclosure in tpcms project:tpcms (high 7.5)
- [CVE-2022-27441](https://insights.sbomify.com/CVE-2022-27441/): Cross-site scripting in tpcms project:tpcms (medium 4.8)
- [CVE-2022-2744](https://insights.sbomify.com/CVE-2022-2744/): SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload (medium 6.3)
- [CVE-2022-27438](https://insights.sbomify.com/CVE-2022-27438/): Code injection in 3cx:call flow designer (high 8.1)
- [CVE-2022-27436](https://insights.sbomify.com/CVE-2022-27436/): Cross-site scripting in ecommerce-website project:ecommerce-website (medium 4.8)
- [CVE-2022-27435](https://insights.sbomify.com/CVE-2022-27435/): File upload in ecommerce-website project:ecommerce-website (high 8.8)
- [CVE-2022-27434](https://insights.sbomify.com/CVE-2022-27434/): SQL injection in unit4:teta (critical 9.8)
- [CVE-2022-27432](https://insights.sbomify.com/CVE-2022-27432/): Cross-site request forgery in pluck-cms:pluck (high 8.8)
- [CVE-2022-27431](https://insights.sbomify.com/CVE-2022-27431/): SQL injection in wuzhicms:wuzhicms (critical 9.8)
- [CVE-2022-2743](https://insights.sbomify.com/CVE-2022-2743/): Integer overflow in Chrome (high 8.8)
- [CVE-2022-27429](https://insights.sbomify.com/CVE-2022-27429/): Server-side request forgery in jizhicms:jizhicms (critical 9.8)
- [CVE-2022-27428](https://insights.sbomify.com/CVE-2022-27428/): Cross-site scripting in gallerycms project:gallerycms (medium 5.4)
- [CVE-2022-27426](https://insights.sbomify.com/CVE-2022-27426/): Server-side request forgery in chamilo:chamilo lms (high 8.8)
- [CVE-2022-27425](https://insights.sbomify.com/CVE-2022-27425/): Cross-site scripting in chamilo:chamilo (medium 6.1)
- [CVE-2022-27423](https://insights.sbomify.com/CVE-2022-27423/): SQL injection in chamilo:chamilo lms (critical 9.8)
- [CVE-2022-27422](https://insights.sbomify.com/CVE-2022-27422/): Cross-site scripting in chamilo:chamilo lms (medium 6.1)
- [CVE-2022-27421](https://insights.sbomify.com/CVE-2022-27421/): Privilege escalation in chamilo:chamilo lms (high 7.2)
- [CVE-2022-27420](https://insights.sbomify.com/CVE-2022-27420/): SQL injection in hospital management system project:hospital management system (critical 9.8)
- [CVE-2022-2742](https://insights.sbomify.com/CVE-2022-2742/): Use after free in Chrome (high 8.8)
- [CVE-2022-27419](https://insights.sbomify.com/CVE-2022-27419/): Memory corruption in rtl 433 project:rtl 433 (medium 5.5)
- [CVE-2022-27418](https://insights.sbomify.com/CVE-2022-27418/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2022-27416](https://insights.sbomify.com/CVE-2022-27416/): Memory corruption in broadcom:tcpreplay (high 7.8)
- [CVE-2022-27413](https://insights.sbomify.com/CVE-2022-27413/): SQL injection in hospital management system project:hospital management system (critical 9.8)
- [CVE-2022-27412](https://insights.sbomify.com/CVE-2022-27412/): SQL injection in exploreit:explore cms (critical 9.8)
- [CVE-2022-27411](https://insights.sbomify.com/CVE-2022-27411/): Command injection in totolink:n600r firmware (critical 9.8)
- [CVE-2022-2741](https://insights.sbomify.com/CVE-2022-2741/): can: denial-of-service can be triggered by a crafted CAN frame (high 8.2)
- [CVE-2022-27406](https://insights.sbomify.com/CVE-2022-27406/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2022-27405](https://insights.sbomify.com/CVE-2022-27405/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2022-27404](https://insights.sbomify.com/CVE-2022-27404/): Memory corruption in fedoraproject:fedora (critical 9.8)
- [CVE-2022-2740](https://insights.sbomify.com/CVE-2022-2740/): SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload (medium 6.3)
- [CVE-2022-2739](https://insights.sbomify.com/CVE-2022-2739/): Information disclosure in podman (medium 5.3)
- [CVE-2022-27387](https://insights.sbomify.com/CVE-2022-27387/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-27386](https://insights.sbomify.com/CVE-2022-27386/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2022-27385](https://insights.sbomify.com/CVE-2022-27385/): Denial of service in mariadb:mariadb (high 7.5)
- [CVE-2022-27384](https://insights.sbomify.com/CVE-2022-27384/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-27383](https://insights.sbomify.com/CVE-2022-27383/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-27382](https://insights.sbomify.com/CVE-2022-27382/): Denial of service in mariadb:mariadb (high 7.5)
- [CVE-2022-27381](https://insights.sbomify.com/CVE-2022-27381/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-27380](https://insights.sbomify.com/CVE-2022-27380/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-2738](https://insights.sbomify.com/CVE-2022-2738/): Use after free in podman (high 7.5)
- [CVE-2022-27379](https://insights.sbomify.com/CVE-2022-27379/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-27378](https://insights.sbomify.com/CVE-2022-27378/): Denial of service in debian:debian linux (high 7.5)
- [CVE-2022-27377](https://insights.sbomify.com/CVE-2022-27377/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-27376](https://insights.sbomify.com/CVE-2022-27376/): Use after free in debian:debian linux (high 7.5)
- [CVE-2022-27375](https://insights.sbomify.com/CVE-2022-27375/): Cross-site request forgery in tenda:ax12 firmware (medium 6.5)
- [CVE-2022-27374](https://insights.sbomify.com/CVE-2022-27374/): Cross-site request forgery in tenda:ax12 firmware (medium 6.5)
- [CVE-2022-27373](https://insights.sbomify.com/CVE-2022-27373/): Command injection in phicomm:fir303b firmware (high 8.8)
- [CVE-2022-2737](https://insights.sbomify.com/CVE-2022-2737/): WP STAGING < 2.9.18 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-27369](https://insights.sbomify.com/CVE-2022-27369/): SQL injection in chshcms:cscms (high 7.2)
- [CVE-2022-27368](https://insights.sbomify.com/CVE-2022-27368/): SQL injection in chshcms:cscms (high 7.2)
- [CVE-2022-27367](https://insights.sbomify.com/CVE-2022-27367/): SQL injection in chshcms:cscms (high 7.2)
- [CVE-2022-27366](https://insights.sbomify.com/CVE-2022-27366/): SQL injection in chshcms:cscms (high 7.2)
- [CVE-2022-27365](https://insights.sbomify.com/CVE-2022-27365/): SQL injection in chshcms:cscms (high 7.2)
- [CVE-2022-27360](https://insights.sbomify.com/CVE-2022-27360/): SQL injection in bladex:springblade (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/349/