# Vulnerabilities published in 2022


- [CVE-2022-26461](https://insights.sbomify.com/CVE-2022-26461/): Privilege escalation in MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26460](https://insights.sbomify.com/CVE-2022-26460/): Memory corruption in MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797 (medium 6.7)
- [CVE-2022-2646](https://insights.sbomify.com/CVE-2022-2646/): SourceCodester Online Admission System index.php cross site scripting (low 3.5)
- [CVE-2022-26459](https://insights.sbomify.com/CVE-2022-26459/): Integer overflow in MT6833, MT6853, MT6855, MT6873, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8791, MT8797 (medium 4.4)
- [CVE-2022-26458](https://insights.sbomify.com/CVE-2022-26458/): Memory corruption in MT6853, MT6855, MT6873, MT6877, MT6883, MT6885, MT6893, MT6895, MT6983, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26457](https://insights.sbomify.com/CVE-2022-26457/): Memory corruption in MT6769, MT6781, MT6785, MT6833, MT6855, MT6877, MT6879, MT6893, MT6983, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26456](https://insights.sbomify.com/CVE-2022-26456/): Information disclosure in MT6769, MT6781, MT6785, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893, MT6983, MT8185, MT8789, MT8791, MT8797 (medium 4.4)
- [CVE-2022-26455](https://insights.sbomify.com/CVE-2022-26455/): Memory corruption in MT6789, MT6855, MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-26454](https://insights.sbomify.com/CVE-2022-26454/): Integer overflow in MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6875, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983 (medium 6.7)
- [CVE-2022-26453](https://insights.sbomify.com/CVE-2022-26453/): Use after free in MT6761, MT6765, MT6768, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6875, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983 (medium 6.7)
- [CVE-2022-26452](https://insights.sbomify.com/CVE-2022-26452/): Use after free in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-26451](https://insights.sbomify.com/CVE-2022-26451/): Use after free in MT6789, MT6855, MT6879, MT6895, MT6983, MT8168, MT8365 (medium 6.7)
- [CVE-2022-26450](https://insights.sbomify.com/CVE-2022-26450/): Use after free in MT6879, MT6895, MT6983 (medium 6.4)
- [CVE-2022-2645](https://insights.sbomify.com/CVE-2022-2645/): SourceCodester Garage Management System edituser.php cross site scripting (low 3.5)
- [CVE-2022-26449](https://insights.sbomify.com/CVE-2022-26449/): Memory corruption in MT6879, MT6895, MT6983 (medium 6.7)
- [CVE-2022-26448](https://insights.sbomify.com/CVE-2022-26448/): Memory corruption in MT6853T, MT6873, MT6875, MT6877, MT6883, MT6885, MT6889, MT6891, MT6893 (medium 6.7)
- [CVE-2022-26447](https://insights.sbomify.com/CVE-2022-26447/): Memory corruption in MT6580, MT6735, MT6737, MT6739, MT6750S, MT6753, MT6755S, MT6757, MT6757C, MT6757CD, MT6757CH, MT6763, MT6771, MT8163, MT8167, MT8167S, MT8173, MT8183, MT8321, MT8362A, MT8385, MT8518, MT8532, MT8765, MT8788 (critical 9.8)
- [CVE-2022-26446](https://insights.sbomify.com/CVE-2022-26446/): Denial of service in MT2731, MT2735, MT6297, MT6725, MT6739, MT6761, MT6762, MT6762D, MT6762M, MT6763, MT6765, MT6765T, MT6767, MT6768, MT6769, MT6769T, MT6769Z, MT6771, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6789, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT6895, MT6983, MT8385, MT8666, MT8667, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (high 7.5)
- [CVE-2022-26445](https://insights.sbomify.com/CVE-2022-26445/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26444](https://insights.sbomify.com/CVE-2022-26444/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26443](https://insights.sbomify.com/CVE-2022-26443/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26442](https://insights.sbomify.com/CVE-2022-26442/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26441](https://insights.sbomify.com/CVE-2022-26441/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26440](https://insights.sbomify.com/CVE-2022-26440/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-2644](https://insights.sbomify.com/CVE-2022-2644/): SourceCodester Online Admission System GET Parameter sql injection (medium 5.5)
- [CVE-2022-26439](https://insights.sbomify.com/CVE-2022-26439/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26438](https://insights.sbomify.com/CVE-2022-26438/): Memory corruption in MT7603, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, MT7915, MT7916, MT7986, MT8981 (medium 6.7)
- [CVE-2022-26437](https://insights.sbomify.com/CVE-2022-26437/): Memory corruption in MT2621, MT2625 (critical 9.8)
- [CVE-2022-26436](https://insights.sbomify.com/CVE-2022-26436/): Memory corruption in MT6855, MT6879, MT6895, MT6983 (medium 4.4)
- [CVE-2022-26435](https://insights.sbomify.com/CVE-2022-26435/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26434](https://insights.sbomify.com/CVE-2022-26434/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26433](https://insights.sbomify.com/CVE-2022-26433/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8167, MT8167S, MT8168, MT8173, MT8175, MT8185, MT8321, MT8362A, MT8365, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26432](https://insights.sbomify.com/CVE-2022-26432/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26431](https://insights.sbomify.com/CVE-2022-26431/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26430](https://insights.sbomify.com/CVE-2022-26430/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6879, MT6885, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8532, MT8666, MT8675, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-2643](https://insights.sbomify.com/CVE-2022-2643/): SourceCodester Online Admission System POST Parameter sql injection (medium 6.3)
- [CVE-2022-26429](https://insights.sbomify.com/CVE-2022-26429/): Missing authorization in MT6580, MT6735, MT6739, MT6757, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6833, MT6853, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6893, MT6895, MT6983, MT8168, MT8173, MT8185, MT8321, MT8365, MT8385, MT8765, MT8766, MT8768, MT8786, MT8788, MT8789, MT8791, MT8797 (high 7.8)
- [CVE-2022-26428](https://insights.sbomify.com/CVE-2022-26428/): Race condition in MT6739, MT6761, MT6765, MT6771, MT8163, MT8167, MT8173, MT8183, MT8362A, MT8385, MT8695 (medium 6.4)
- [CVE-2022-26427](https://insights.sbomify.com/CVE-2022-26427/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6893 (medium 6.7)
- [CVE-2022-26426](https://insights.sbomify.com/CVE-2022-26426/): Memory corruption in MT6833, MT6853, MT6873, MT6877, MT6893, MT8167, MT8167S, MT8168, MT8175, MT8185, MT8362A, MT8365, MT8385, MT8666, MT8675, MT8765, MT8786, MT8788, MT8789, MT8791, MT8797 (medium 6.7)
- [CVE-2022-26425](https://insights.sbomify.com/CVE-2022-26425/): Privilege escalation in Intel(R) oneAPI Collective Communications Library (oneCCL) for Intel(R) oneAPI Base Toolkit (medium 6.7)
- [CVE-2022-26423](https://insights.sbomify.com/CVE-2022-26423/): MISSING AUTHORIZATION CWE-862 (high 8.2)
- [CVE-2022-26421](https://insights.sbomify.com/CVE-2022-26421/): Privilege escalation in Intel(R) oneAPI DPC++/C++ Compiler Runtime (medium 6.7)
- [CVE-2022-26420](https://insights.sbomify.com/CVE-2022-26420/): Command injection in InRouter302 (critical 9.9)
- [CVE-2022-2642](https://insights.sbomify.com/CVE-2022-2642/): Information disclosure in Remote Compact Controller (RCC) 972 (high 7.5)
- [CVE-2022-26419](https://insights.sbomify.com/CVE-2022-26419/): Rockwell Automation Studio 5000 Logix Designer Code Injection (high 7.8)
- [CVE-2022-26417](https://insights.sbomify.com/CVE-2022-26417/): Rockwell Automation Studio 5000 Logix Designer Use After Free (high 7.8)
- [CVE-2022-26415](https://insights.sbomify.com/CVE-2022-26415/): Command injection in BIG-IP (high 7.7)
- [CVE-2022-26414](https://insights.sbomify.com/CVE-2022-26414/): Memory corruption in VMG3312-T20A firmware (medium 6.0)
- [CVE-2022-26413](https://insights.sbomify.com/CVE-2022-26413/): Command injection in VMG3312-T20A firmware (high 8.0)
- [CVE-2022-2641](https://insights.sbomify.com/CVE-2022-2641/): Hardcoded credentials in Remote Compact Controller (RCC) 972 (critical 9.8)
- [CVE-2022-2640](https://insights.sbomify.com/CVE-2022-2640/): Weak cryptography in Remote Compact Controller (RCC) 972 (high 7.5)
- [CVE-2022-26394](https://insights.sbomify.com/CVE-2022-26394/): Unauthenticated network reconfiguration via TCP/UDP (medium 5.5)
- [CVE-2022-26393](https://insights.sbomify.com/CVE-2022-26393/): Format String vulnerability (medium 5.0)
- [CVE-2022-26392](https://insights.sbomify.com/CVE-2022-26392/): Format String vulnerability (low 3.1)
- [CVE-2022-26390](https://insights.sbomify.com/CVE-2022-26390/): Unencrypted internal storage of security credentials (medium 4.2)
- [CVE-2022-2639](https://insights.sbomify.com/CVE-2022-2639/): Integer overflow in kernel (high 7.8)
- [CVE-2022-26389](https://insights.sbomify.com/CVE-2022-26389/): Improper Access Control Vulnerability in ELI Electrocardiograph Devices (high 7.7)
- [CVE-2022-26388](https://insights.sbomify.com/CVE-2022-26388/): Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices (medium 6.4)
- [CVE-2022-26387](https://insights.sbomify.com/CVE-2022-26387/): Race condition in Firefox (high 7.5)
- [CVE-2022-26386](https://insights.sbomify.com/CVE-2022-26386/): Information disclosure in Firefox ESR (medium 6.5)
- [CVE-2022-26385](https://insights.sbomify.com/CVE-2022-26385/): Use after free in Firefox (medium 6.5)
- [CVE-2022-26384](https://insights.sbomify.com/CVE-2022-26384/): Security feature bypass in Firefox (critical 9.6)
- [CVE-2022-26383](https://insights.sbomify.com/CVE-2022-26383/): Other in Firefox (medium 4.3)
- [CVE-2022-26382](https://insights.sbomify.com/CVE-2022-26382/): Information disclosure in Firefox (medium 4.3)
- [CVE-2022-26381](https://insights.sbomify.com/CVE-2022-26381/): Use after free in Firefox (high 8.8)
- [CVE-2022-26380](https://insights.sbomify.com/CVE-2022-26380/): Memory corruption in SCALANCE X302-7 EEC (230V) (high 7.5)
- [CVE-2022-2638](https://insights.sbomify.com/CVE-2022-2638/): Export All URLs < 4.4 - Admin+ Arbitrary System File Removal (medium 6.5)
- [CVE-2022-26377](https://insights.sbomify.com/CVE-2022-26377/): mod_proxy_ajp: Possible request smuggling (high 7.5)
- [CVE-2022-26376](https://insights.sbomify.com/CVE-2022-26376/): Memory corruption in Asuswrt-Merlin New Gen (medium 5.3)
- [CVE-2022-26375](https://insights.sbomify.com/CVE-2022-26375/): WordPress AB Press Optimizer plugin <= 1.1.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-26374](https://insights.sbomify.com/CVE-2022-26374/): Privilege escalation in version (high 7.8)
- [CVE-2022-26373](https://insights.sbomify.com/CVE-2022-26373/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-26372](https://insights.sbomify.com/CVE-2022-26372/): Denial of service in BIG-IP (high 7.5)
- [CVE-2022-26370](https://insights.sbomify.com/CVE-2022-26370/): Denial of service in BIG-IP (medium 5.9)
- [CVE-2022-2637](https://insights.sbomify.com/CVE-2022-2637/): Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter (medium 5.4)
- [CVE-2022-26369](https://insights.sbomify.com/CVE-2022-26369/): Memory corruption in Intel(R) XMM(TM) 7560 Modem software (medium 6.2)
- [CVE-2022-26368](https://insights.sbomify.com/CVE-2022-26368/): Missing authorization in Cybozu Garoon (medium 5.4)
- [CVE-2022-26367](https://insights.sbomify.com/CVE-2022-26367/): Memory corruption in Intel(R) XMM(TM) 7560 Modem software (medium 6.0)
- [CVE-2022-26366](https://insights.sbomify.com/CVE-2022-26366/): WordPress AdRotate Banner Manager Plugin <= 5.9 is vulnerable to Cross Site Request Forgery (CSRF) (medium 5.4)
- [CVE-2022-26365](https://insights.sbomify.com/CVE-2022-26365/): Information disclosure in Linux (high 7.1)
- [CVE-2022-26364](https://insights.sbomify.com/CVE-2022-26364/): Other in xen (medium 6.7)
- [CVE-2022-26363](https://insights.sbomify.com/CVE-2022-26363/): Other in xen (medium 6.7)
- [CVE-2022-26362](https://insights.sbomify.com/CVE-2022-26362/): Race condition in xen (medium 6.4)
- [CVE-2022-26361](https://insights.sbomify.com/CVE-2022-26361/): Memory corruption in xen (high 7.8)
- [CVE-2022-26360](https://insights.sbomify.com/CVE-2022-26360/): Memory corruption in xen (high 7.8)
- [CVE-2022-2636](https://insights.sbomify.com/CVE-2022-2636/): Code Injection in hestiacp/hestiacp (high 8.5)
- [CVE-2022-26359](https://insights.sbomify.com/CVE-2022-26359/): Memory corruption in xen (high 7.8)
- [CVE-2022-26358](https://insights.sbomify.com/CVE-2022-26358/): Memory corruption in xen (high 7.8)
- [CVE-2022-26357](https://insights.sbomify.com/CVE-2022-26357/): Race condition in xen (high 7.0)
- [CVE-2022-26356](https://insights.sbomify.com/CVE-2022-26356/): Race condition in xen (medium 5.6)
- [CVE-2022-26355](https://insights.sbomify.com/CVE-2022-26355/): Citrix Federated Authentication Service (FAS) (medium 4.4)
- [CVE-2022-26354](https://insights.sbomify.com/CVE-2022-26354/): Denial of service in qemu-kvm (low 3.2)
- [CVE-2022-26353](https://insights.sbomify.com/CVE-2022-26353/): Denial of service in qemu-kvm (high 7.5)
- [CVE-2022-26352](https://insights.sbomify.com/CVE-2022-26352/): dotCMS Unrestricted Upload of File (critical 9.8, exploited in the wild)
- [CVE-2022-2635](https://insights.sbomify.com/CVE-2022-2635/): Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting (medium 4.8)
- [CVE-2022-26349](https://insights.sbomify.com/CVE-2022-26349/): Delta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashx (critical 9.8)
- [CVE-2022-26348](https://insights.sbomify.com/CVE-2022-26348/): SQL injection in Command Centre (high 8.2)
- [CVE-2022-26346](https://insights.sbomify.com/CVE-2022-26346/): Denial of service in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-26345](https://insights.sbomify.com/CVE-2022-26345/): Privilege escalation in Intel(R) oneAPI Toolkit OpenMP (medium 6.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/357/