# Vulnerabilities published in 2022


- [CVE-2022-26731](https://insights.sbomify.com/CVE-2022-26731/): Business logic in macOS (medium 4.3)
- [CVE-2022-26730](https://insights.sbomify.com/CVE-2022-26730/): Memory corruption in macOS (high 8.8)
- [CVE-2022-2673](https://insights.sbomify.com/CVE-2022-2673/): Rigatur Online Booking and Hotel Management System POST Request login.php sql injection (medium 6.3)
- [CVE-2022-26728](https://insights.sbomify.com/CVE-2022-26728/): Missing authorization in Security Update - Catalina (medium 5.5)
- [CVE-2022-26727](https://insights.sbomify.com/CVE-2022-26727/): Privilege escalation in Security Update - Catalina (medium 5.5)
- [CVE-2022-26726](https://insights.sbomify.com/CVE-2022-26726/): Security feature bypass in watchOS (medium 6.5)
- [CVE-2022-26725](https://insights.sbomify.com/CVE-2022-26725/): Business logic in macOS (medium 5.3)
- [CVE-2022-26724](https://insights.sbomify.com/CVE-2022-26724/): Auth bypass in tvOS (medium 5.5)
- [CVE-2022-26723](https://insights.sbomify.com/CVE-2022-26723/): Memory corruption in macOS (critical 9.8)
- [CVE-2022-26722](https://insights.sbomify.com/CVE-2022-26722/): Memory corruption in Security Update - Catalina (high 7.8)
- [CVE-2022-26721](https://insights.sbomify.com/CVE-2022-26721/): Privilege escalation in Security Update - Catalina (high 7.8)
- [CVE-2022-26720](https://insights.sbomify.com/CVE-2022-26720/): Memory corruption in Security Update - Catalina (high 7.8)
- [CVE-2022-2672](https://insights.sbomify.com/CVE-2022-2672/): SourceCodester Garage Management System createUser.php sql injection (medium 6.3)
- [CVE-2022-26719](https://insights.sbomify.com/CVE-2022-26719/): Memory corruption in macOS (high 8.8)
- [CVE-2022-26718](https://insights.sbomify.com/CVE-2022-26718/): Memory corruption in macOS (high 7.8)
- [CVE-2022-26717](https://insights.sbomify.com/CVE-2022-26717/): Use after free in macOS (high 8.8)
- [CVE-2022-26716](https://insights.sbomify.com/CVE-2022-26716/): Memory corruption in macOS (high 8.8)
- [CVE-2022-26715](https://insights.sbomify.com/CVE-2022-26715/): Memory corruption in Security Update - Catalina (high 7.8)
- [CVE-2022-26714](https://insights.sbomify.com/CVE-2022-26714/): Memory corruption in watchOS (high 7.8)
- [CVE-2022-26712](https://insights.sbomify.com/CVE-2022-26712/): Security feature bypass in macOS (medium 5.5)
- [CVE-2022-26711](https://insights.sbomify.com/CVE-2022-26711/): Integer overflow in watchOS (critical 9.8)
- [CVE-2022-26710](https://insights.sbomify.com/CVE-2022-26710/): Use after free in macOS (high 8.8)
- [CVE-2022-2671](https://insights.sbomify.com/CVE-2022-2671/): SourceCodester Garage Management System removeUser.php sql injection (medium 6.3)
- [CVE-2022-26709](https://insights.sbomify.com/CVE-2022-26709/): Use after free in macOS (high 8.8)
- [CVE-2022-26708](https://insights.sbomify.com/CVE-2022-26708/): Other in macOS (critical 9.8)
- [CVE-2022-26707](https://insights.sbomify.com/CVE-2022-26707/): Information disclosure in macOS (medium 5.5)
- [CVE-2022-26706](https://insights.sbomify.com/CVE-2022-26706/): Security feature bypass in watchOS (medium 5.5)
- [CVE-2022-26704](https://insights.sbomify.com/CVE-2022-26704/): Privilege escalation in macOS (high 7.8)
- [CVE-2022-26703](https://insights.sbomify.com/CVE-2022-26703/): Auth bypass in iOS and iPadOS (low 2.4)
- [CVE-2022-26702](https://insights.sbomify.com/CVE-2022-26702/): Use after free in watchOS (high 7.8)
- [CVE-2022-26701](https://insights.sbomify.com/CVE-2022-26701/): Race condition in tvOS (high 7.5)
- [CVE-2022-26700](https://insights.sbomify.com/CVE-2022-26700/): Memory corruption in macOS (high 8.8)
- [CVE-2022-26699](https://insights.sbomify.com/CVE-2022-26699/): Business logic in macOS (medium 5.5)
- [CVE-2022-26698](https://insights.sbomify.com/CVE-2022-26698/): Memory corruption in Security Update - Catalina (high 7.1)
- [CVE-2022-26697](https://insights.sbomify.com/CVE-2022-26697/): Memory corruption in Security Update - Catalina (high 7.1)
- [CVE-2022-26696](https://insights.sbomify.com/CVE-2022-26696/): Security feature bypass in macOS (high 8.8)
- [CVE-2022-26694](https://insights.sbomify.com/CVE-2022-26694/): Privilege escalation in macOS (critical 9.1)
- [CVE-2022-26693](https://insights.sbomify.com/CVE-2022-26693/): Privilege escalation in macOS (critical 9.1)
- [CVE-2022-26691](https://insights.sbomify.com/CVE-2022-26691/): Privilege escalation in macOS (medium 6.7)
- [CVE-2022-26690](https://insights.sbomify.com/CVE-2022-26690/): Race condition in macOS (medium 4.7)
- [CVE-2022-2669](https://insights.sbomify.com/CVE-2022-2669/): WP Taxonomy Import <= 1.0.4 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-26688](https://insights.sbomify.com/CVE-2022-26688/): Path traversal in macOS (medium 4.4)
- [CVE-2022-2668](https://insights.sbomify.com/CVE-2022-2668/): Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console (high 7.2)
- [CVE-2022-26676](https://insights.sbomify.com/CVE-2022-26676/): aEnrich a+HRD - Broken Access Control (critical 9.8)
- [CVE-2022-26675](https://insights.sbomify.com/CVE-2022-26675/): aEnrich a+HRD - Path Traversal (high 7.5)
- [CVE-2022-26674](https://insights.sbomify.com/CVE-2022-26674/): ASUS RT-AX88U - Format String (critical 9.8)
- [CVE-2022-26673](https://insights.sbomify.com/CVE-2022-26673/): ASUS RT-AX88U - Stored XSS (medium 5.4)
- [CVE-2022-26672](https://insights.sbomify.com/CVE-2022-26672/): ASUS WebStorage - Use of Hard-coded Credentials (high 7.3)
- [CVE-2022-26671](https://insights.sbomify.com/CVE-2022-26671/): TAIWAN SECOM CO., LTD., a xDoor Access Control and Personnel Attendance Management system - Hard-coded Credentials (high 7.3)
- [CVE-2022-26670](https://insights.sbomify.com/CVE-2022-26670/): D-Link DIR-878 - Command Injection (high 8.8)
- [CVE-2022-2667](https://insights.sbomify.com/CVE-2022-2667/): SourceCodester Loan Management System delete_lplan.php sql injection (medium 6.3)
- [CVE-2022-26669](https://insights.sbomify.com/CVE-2022-26669/): ASUS Control Center - SQL Injection (high 8.8)
- [CVE-2022-26668](https://insights.sbomify.com/CVE-2022-26668/): ASUS Control Center - Broken Access Control (high 7.3)
- [CVE-2022-26667](https://insights.sbomify.com/CVE-2022-26667/): Delta Electronics DIAEnergie SQL Injection in GetDemandAnalysisData (critical 9.8)
- [CVE-2022-26666](https://insights.sbomify.com/CVE-2022-26666/): Delta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashx (critical 9.8)
- [CVE-2022-26665](https://insights.sbomify.com/CVE-2022-26665/): Missing authorization in tylertech:odyssey portal (high 7.5)
- [CVE-2022-26662](https://insights.sbomify.com/CVE-2022-26662/): XML Entity Expansion in trytond and proteus (high 7.5)
- [CVE-2022-26661](https://insights.sbomify.com/CVE-2022-26661/): Improper Restriction of XML External Entity Reference in trytond and proteus (medium 6.5)
- [CVE-2022-26660](https://insights.sbomify.com/CVE-2022-26660/): Hardcoded credentials in robotronic:runasspc (high 7.5)
- [CVE-2022-2666](https://insights.sbomify.com/CVE-2022-2666/): SourceCodester Loan Management System login.php sql injection (medium 6.3)
- [CVE-2022-26659](https://insights.sbomify.com/CVE-2022-26659/): Other in docker:docker desktop (high 7.1)
- [CVE-2022-26657](https://insights.sbomify.com/CVE-2022-26657/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2022-26656](https://insights.sbomify.com/CVE-2022-26656/): Denial of service in pexip:pexip infinity (high 8.2)
- [CVE-2022-26655](https://insights.sbomify.com/CVE-2022-26655/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2022-26654](https://insights.sbomify.com/CVE-2022-26654/): Denial of service in pexip:pexip infinity (high 7.5)
- [CVE-2022-26653](https://insights.sbomify.com/CVE-2022-26653/): Missing authorization in zohocorp:manageengine remote access plus (medium 5.3)
- [CVE-2022-26652](https://insights.sbomify.com/CVE-2022-26652/): Arbitrary file write in nats-server (medium 6.5)
- [CVE-2022-26651](https://insights.sbomify.com/CVE-2022-26651/): SQL injection in debian:debian linux (critical 9.8)
- [CVE-2022-26650](https://insights.sbomify.com/CVE-2022-26650/): Apache ShenYu (incubating) Regular expression denial of service (high 7.5)
- [CVE-2022-2665](https://insights.sbomify.com/CVE-2022-2665/): SourceCodester Simple E-Learning System classroom.php sql injection (medium 6.3)
- [CVE-2022-26649](https://insights.sbomify.com/CVE-2022-26649/): Memory corruption in SCALANCE X200-4P IRT (critical 9.6)
- [CVE-2022-26648](https://insights.sbomify.com/CVE-2022-26648/): Memory corruption in SCALANCE X200-4P IRT (high 8.2)
- [CVE-2022-26647](https://insights.sbomify.com/CVE-2022-26647/): Weak cryptography in SCALANCE X200-4P IRT (high 8.8)
- [CVE-2022-26646](https://insights.sbomify.com/CVE-2022-26646/): Path traversal in oretnom23:banking system (critical 9.8)
- [CVE-2022-26645](https://insights.sbomify.com/CVE-2022-26645/): File upload in oretnom23:banking system (critical 9.8)
- [CVE-2022-26644](https://insights.sbomify.com/CVE-2022-26644/): Cross-site scripting in oretnom23:banking system (medium 6.1)
- [CVE-2022-26643](https://insights.sbomify.com/CVE-2022-26643/): Information disclosure in johnsoncontrols:easyio cpt graphics (medium 5.3)
- [CVE-2022-26642](https://insights.sbomify.com/CVE-2022-26642/): Memory corruption in tp-link:tl-wr840n firmware (high 7.2)
- [CVE-2022-26641](https://insights.sbomify.com/CVE-2022-26641/): Memory corruption in tp-link:tl-wr840n firmware (high 7.2)
- [CVE-2022-26640](https://insights.sbomify.com/CVE-2022-26640/): Memory corruption in tp-link:tl-wr840n firmware (high 7.2)
- [CVE-2022-2664](https://insights.sbomify.com/CVE-2022-2664/): Private Cloud Management Platform POST Request global_config_query improper authentication (high 7.3)
- [CVE-2022-26639](https://insights.sbomify.com/CVE-2022-26639/): Memory corruption in tp-link:tl-wr840n firmware (high 7.2)
- [CVE-2022-26635](https://insights.sbomify.com/CVE-2022-26635/): Other in php:memcached (critical 9.8)
- [CVE-2022-26634](https://insights.sbomify.com/CVE-2022-26634/): Privilege escalation in hma:hidemyass (high 7.8)
- [CVE-2022-26633](https://insights.sbomify.com/CVE-2022-26633/): SQL injection in simple student quarterly result\/grade system project:simple student quarterly result\/grade system (critical 9.8)
- [CVE-2022-26632](https://insights.sbomify.com/CVE-2022-26632/): SQL injection in multi-vendor online groceries management system project:multi-vendor online groceries management system (critical 9.8)
- [CVE-2022-26631](https://insights.sbomify.com/CVE-2022-26631/): SQL injection in automatic question paper generator project:automatic question paper generator (critical 9.8)
- [CVE-2022-26630](https://insights.sbomify.com/CVE-2022-26630/): File upload in jellycms:jellycms (high 8.8)
- [CVE-2022-2663](https://insights.sbomify.com/CVE-2022-2663/): Security feature bypass in Linux kernel (medium 5.3)
- [CVE-2022-26629](https://insights.sbomify.com/CVE-2022-26629/): Auth bypass in splus:soroushplus (critical 9.1)
- [CVE-2022-26628](https://insights.sbomify.com/CVE-2022-26628/): SQL injection in matrimony project:matrimony (critical 9.8)
- [CVE-2022-26627](https://insights.sbomify.com/CVE-2022-26627/): File upload in online project time management system project:online project time management system (high 8.8)
- [CVE-2022-26624](https://insights.sbomify.com/CVE-2022-26624/): Cross-site scripting in ecommerce codeigniter bootstrap project:ecommerce codeigniter bootstrap (medium 6.1)
- [CVE-2022-2662](https://insights.sbomify.com/CVE-2022-2662/): Sequi PortBloque S Improper Authentication (critical 9.6)
- [CVE-2022-26619](https://insights.sbomify.com/CVE-2022-26619/): File upload in halo:halo (high 7.5)
- [CVE-2022-26616](https://insights.sbomify.com/CVE-2022-26616/): Cross-site scripting in public knowledge project:open journal systems (medium 6.1)
- [CVE-2022-26615](https://insights.sbomify.com/CVE-2022-26615/): Cross-site scripting in college website content management system project:college website content management system (medium 5.4)
- [CVE-2022-26613](https://insights.sbomify.com/CVE-2022-26613/): SQL injection in php-cms project:php-cms (critical 9.8)
- [CVE-2022-26612](https://insights.sbomify.com/CVE-2022-26612/): Arbitrary file write in FileUtil#unpackEntries on Windows (critical 9.8)
- [CVE-2022-2661](https://insights.sbomify.com/CVE-2022-2661/): Sequi PortBloque S Improper Authorization (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/355/