# Vulnerabilities published in 2022


- [CVE-2022-2608](https://insights.sbomify.com/CVE-2022-2608/): Use after free in Chrome (high 8.8)
- [CVE-2022-26079](https://insights.sbomify.com/CVE-2022-26079/): Privilege escalation in Intel(R) XMM(TM) 7560 Modem software (medium 6.0)
- [CVE-2022-26078](https://insights.sbomify.com/CVE-2022-26078/): Denial of service in Gallagher Controller 6000 (high 7.5)
- [CVE-2022-26077](https://insights.sbomify.com/CVE-2022-26077/): Information disclosure in OAS Platform (high 7.5)
- [CVE-2022-26076](https://insights.sbomify.com/CVE-2022-26076/): Privilege escalation in Intel(R) oneAPI Deep Neural Network (oneDNN) (medium 6.7)
- [CVE-2022-26075](https://insights.sbomify.com/CVE-2022-26075/): Command injection in InRouter302 (critical 9.9)
- [CVE-2022-26074](https://insights.sbomify.com/CVE-2022-26074/): Other in Intel(R) SPS (medium 4.4)
- [CVE-2022-26073](https://insights.sbomify.com/CVE-2022-26073/): Integer overflow in Eufy Homebase 2 (high 7.4)
- [CVE-2022-26071](https://insights.sbomify.com/CVE-2022-26071/): Security feature bypass in BIG-IP (high 7.4)
- [CVE-2022-26070](https://insights.sbomify.com/CVE-2022-26070/): Error message discloses internal path (medium 4.3)
- [CVE-2022-2607](https://insights.sbomify.com/CVE-2022-2607/): Use after free in Chrome (high 8.8)
- [CVE-2022-26069](https://insights.sbomify.com/CVE-2022-26069/): Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx (critical 9.8)
- [CVE-2022-26068](https://insights.sbomify.com/CVE-2022-26068/): Path Traversal (medium 6.5)
- [CVE-2022-26067](https://insights.sbomify.com/CVE-2022-26067/): Missing authorization in OAS Platform (medium 4.9)
- [CVE-2022-26065](https://insights.sbomify.com/CVE-2022-26065/): Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData (critical 9.8)
- [CVE-2022-26062](https://insights.sbomify.com/CVE-2022-26062/): Privilege escalation in Intel(R) Trace Analyzer and Collector for Intel(R) oneAPI HPC Toolkit (medium 6.7)
- [CVE-2022-26061](https://insights.sbomify.com/CVE-2022-26061/): Memory corruption in libhdf5 (high 7.8)
- [CVE-2022-2606](https://insights.sbomify.com/CVE-2022-2606/): Use after free in Chrome (high 8.8)
- [CVE-2022-26059](https://insights.sbomify.com/CVE-2022-26059/): Delta Electronics DIAEnergie SQL Injection in GetQueryData (critical 9.8)
- [CVE-2022-26057](https://insights.sbomify.com/CVE-2022-26057/): Mint WorkBench Link Following Local Privilege Escalation Vulnerability (medium 6.7)
- [CVE-2022-26054](https://insights.sbomify.com/CVE-2022-26054/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2022-26052](https://insights.sbomify.com/CVE-2022-26052/): Privilege escalation in Intel(R) MPI Library for Intel(R) oneAPI HPC Toolkit (medium 6.7)
- [CVE-2022-26051](https://insights.sbomify.com/CVE-2022-26051/): Missing authorization in Cybozu Garoon (medium 4.3)
- [CVE-2022-2605](https://insights.sbomify.com/CVE-2022-2605/): Memory corruption in Chrome (medium 6.5)
- [CVE-2022-26049](https://insights.sbomify.com/CVE-2022-26049/): Arbitrary File Write via Archive Extraction (Zip Slip) (medium 5.3)
- [CVE-2022-26047](https://insights.sbomify.com/CVE-2022-26047/): Denial of service in Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products (medium 4.3)
- [CVE-2022-26045](https://insights.sbomify.com/CVE-2022-26045/): Memory corruption in Intel(R) XMM(TM) 7560 Modem software (low 3.3)
- [CVE-2022-26043](https://insights.sbomify.com/CVE-2022-26043/): Missing authorization in OAS Platform (high 7.5)
- [CVE-2022-26042](https://insights.sbomify.com/CVE-2022-26042/): Command injection in InRouter302 (critical 9.9)
- [CVE-2022-26041](https://insights.sbomify.com/CVE-2022-26041/): Path traversal in RCCMD (medium 6.5)
- [CVE-2022-2604](https://insights.sbomify.com/CVE-2022-2604/): Use after free in Chrome (high 8.8)
- [CVE-2022-26034](https://insights.sbomify.com/CVE-2022-26034/): Auth bypass in CENTUM VP series with VP6E5000(AD Suite Engineering ServerFunction) installed and B/M9000 VP (critical 9.1)
- [CVE-2022-26032](https://insights.sbomify.com/CVE-2022-26032/): Privilege escalation in Intel(R) Distribution for Python programming language for Intel(R) oneAPI Toolkits (medium 6.7)
- [CVE-2022-2603](https://insights.sbomify.com/CVE-2022-2603/): Use after free in Chrome (high 8.8)
- [CVE-2022-26028](https://insights.sbomify.com/CVE-2022-26028/): Privilege escalation in Intel(R) VTune(TM) Profiler software (medium 6.7)
- [CVE-2022-26026](https://insights.sbomify.com/CVE-2022-26026/): Denial of service in OAS Platform (high 7.5)
- [CVE-2022-26024](https://insights.sbomify.com/CVE-2022-26024/): Privilege escalation in Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN (medium 6.7)
- [CVE-2022-26023](https://insights.sbomify.com/CVE-2022-26023/): Security feature bypass in InRouter302 (medium 6.5)
- [CVE-2022-26022](https://insights.sbomify.com/CVE-2022-26022/): Rockwell Automation Studio 5000 Logix Designer Out-of-Bounds Write (high 7.8)
- [CVE-2022-26020](https://insights.sbomify.com/CVE-2022-26020/): Hardcoded credentials in InRouter302 (medium 6.3)
- [CVE-2022-2602](https://insights.sbomify.com/CVE-2022-2602/): Use after free in linux (medium 5.3)
- [CVE-2022-26019](https://insights.sbomify.com/CVE-2022-26019/): Path traversal in pfSense CE and pfSense Plus (high 8.8)
- [CVE-2022-26017](https://insights.sbomify.com/CVE-2022-26017/): Privilege escalation in Intel(R) DSA software for (high 8.0)
- [CVE-2022-26013](https://insights.sbomify.com/CVE-2022-26013/): Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx (critical 9.8)
- [CVE-2022-2601](https://insights.sbomify.com/CVE-2022-2601/): Memory corruption in grub2 (high 8.6)
- [CVE-2022-26009](https://insights.sbomify.com/CVE-2022-26009/): Memory corruption in LinkHub Mesh Wifi (high 8.8)
- [CVE-2022-26007](https://insights.sbomify.com/CVE-2022-26007/): Command injection in InRouter302 (critical 9.1)
- [CVE-2022-26006](https://insights.sbomify.com/CVE-2022-26006/): Privilege escalation in Intel(R) Processors (high 8.2)
- [CVE-2022-26002](https://insights.sbomify.com/CVE-2022-26002/): Memory corruption in InRouter302 (critical 9.1)
- [CVE-2022-2600](https://insights.sbomify.com/CVE-2022-2600/): Auto-hyperlink URLs <= 5.4.1 - Tab Nabbing (medium 5.4)
- [CVE-2022-25999](https://insights.sbomify.com/CVE-2022-25999/): Privilege escalation in version (high 7.8)
- [CVE-2022-25996](https://insights.sbomify.com/CVE-2022-25996/): Memory corruption in LinkHub Mesh Wifi (high 8.8)
- [CVE-2022-25995](https://insights.sbomify.com/CVE-2022-25995/): Command injection in InRouter302 (critical 9.9)
- [CVE-2022-25992](https://insights.sbomify.com/CVE-2022-25992/): Privilege escalation in Intel(R) oneAPI Toolkits oneapi-cli (high 7.5)
- [CVE-2022-25990](https://insights.sbomify.com/CVE-2022-25990/): Misconfiguration in F5OS-A (medium 5.3)
- [CVE-2022-2599](https://insights.sbomify.com/CVE-2022-2599/): Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-25989](https://insights.sbomify.com/CVE-2022-25989/): Auth bypass in Eufy Homebase 2 (high 7.1)
- [CVE-2022-25987](https://insights.sbomify.com/CVE-2022-25987/): Other in Intel(R) C++ Compiler Classic (high 8.3)
- [CVE-2022-25986](https://insights.sbomify.com/CVE-2022-25986/): Missing authorization in Cybozu Office (medium 4.3)
- [CVE-2022-25980](https://insights.sbomify.com/CVE-2022-25980/): Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx (critical 9.8)
- [CVE-2022-2598](https://insights.sbomify.com/CVE-2022-2598/): Out-of-bounds Write to API in vim/vim (medium 6.5)
- [CVE-2022-25979](https://insights.sbomify.com/CVE-2022-25979/): jSuites subect to Cross-site Scripting (medium 5.4)
- [CVE-2022-25978](https://insights.sbomify.com/CVE-2022-25978/): Cross Site Scripting in usememos/memos (medium 5.4)
- [CVE-2022-25976](https://insights.sbomify.com/CVE-2022-25976/): Denial of service in Intel(R) VROC software (medium 5.5)
- [CVE-2022-25973](https://insights.sbomify.com/CVE-2022-25973/): Arbitrary Command Execution (high 7.8)
- [CVE-2022-25972](https://insights.sbomify.com/CVE-2022-25972/): Memory corruption in libhdf5 (high 7.8)
- [CVE-2022-2597](https://insights.sbomify.com/CVE-2022-2597/): Visual Portfolio < 2.19.0 - Contributor+ CSS Injection (medium 5.4)
- [CVE-2022-25969](https://insights.sbomify.com/CVE-2022-25969/): Other in The installer of WPS Office (high 7.8)
- [CVE-2022-25967](https://insights.sbomify.com/CVE-2022-25967/): Eta vulnerable to Code Injection via templates rendered with user-defined data (high 8.1)
- [CVE-2022-25966](https://insights.sbomify.com/CVE-2022-25966/): Privilege escalation in Intel(R) Edge Insights for Industrial software (high 7.8)
- [CVE-2022-25962](https://insights.sbomify.com/CVE-2022-25962/): Command injection in vagrant.js (high 7.4)
- [CVE-2022-2596](https://insights.sbomify.com/CVE-2022-2596/): Inefficient Regular Expression Complexity in node-fetch/node-fetch (medium 5.9)
- [CVE-2022-25959](https://insights.sbomify.com/CVE-2022-25959/): Rockwell Automation Studio 5000 Logix Designer Improper Restriction of Operations within the Bounds of a Memory Buffer (high 7.8)
- [CVE-2022-25952](https://insights.sbomify.com/CVE-2022-25952/): WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2022-2595](https://insights.sbomify.com/CVE-2022-2595/): Improper Authorization in kromitgmbh/titra (critical 9.8)
- [CVE-2022-25949](https://insights.sbomify.com/CVE-2022-25949/): Memory corruption in KINGSOFT Internet Security 9 Plus (high 7.8)
- [CVE-2022-25948](https://insights.sbomify.com/CVE-2022-25948/): Information Exposure (medium 5.3)
- [CVE-2022-25946](https://insights.sbomify.com/CVE-2022-25946/): Security feature bypass in BIG-IP (Advanced WAF, APM, ASM) (high 8.7)
- [CVE-2022-25943](https://insights.sbomify.com/CVE-2022-25943/): Misconfiguration in WPS Office for Windows (high 7.8)
- [CVE-2022-25942](https://insights.sbomify.com/CVE-2022-25942/): Memory corruption in libhdf5 (high 7.8)
- [CVE-2022-25940](https://insights.sbomify.com/CVE-2022-25940/): Denial of Service (DoS) (high 7.5)
- [CVE-2022-2594](https://insights.sbomify.com/CVE-2022-2594/): Advanced Custom Fields 5.0-5.12.2 - Unauthenticated File Upload (high 8.8)
- [CVE-2022-25937](https://insights.sbomify.com/CVE-2022-25937/): Path traversal vulnerability in glance (medium 6.5)
- [CVE-2022-25936](https://insights.sbomify.com/CVE-2022-25936/): Servst vulnerable to Path Traversal (high 7.5)
- [CVE-2022-25932](https://insights.sbomify.com/CVE-2022-25932/): Privilege escalation in InRouter302 (high 7.4)
- [CVE-2022-25931](https://insights.sbomify.com/CVE-2022-25931/): Directory Traversal (high 7.5)
- [CVE-2022-2593](https://insights.sbomify.com/CVE-2022-2593/): Better Search and Replace < 1.4.1 - Admin+ SQLi (high 7.2)
- [CVE-2022-25929](https://insights.sbomify.com/CVE-2022-25929/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2022-25927](https://insights.sbomify.com/CVE-2022-25927/): ReDoS Vulnerability in ua-parser-js version (medium 5.3)
- [CVE-2022-25926](https://insights.sbomify.com/CVE-2022-25926/): window-control vulnerable to Command Injection due to improper input sanitization (high 7.4)
- [CVE-2022-25923](https://insights.sbomify.com/CVE-2022-25923/): exec-local-bin vulnerable to Command Injection (high 7.4)
- [CVE-2022-25922](https://insights.sbomify.com/CVE-2022-25922/): ICSA-22-063-01 Missing Authentication for Critical Function in Trailer Power Line Communications (PLC) J2497 (medium 6.1)
- [CVE-2022-25921](https://insights.sbomify.com/CVE-2022-25921/): Arbitrary Code Execution (high 8.1)
- [CVE-2022-2592](https://insights.sbomify.com/CVE-2022-2592/): Denial of service in GitLab (medium 6.5)
- [CVE-2022-25918](https://insights.sbomify.com/CVE-2022-25918/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2022-25917](https://insights.sbomify.com/CVE-2022-25917/): Denial of service in Intel(R) Server Board M50CYP Family (medium 6.0)
- [CVE-2022-25916](https://insights.sbomify.com/CVE-2022-25916/): mt7688-wiscan is vulnerable to Command Injection due to improper input sanitization (high 7.4)
- [CVE-2022-25915](https://insights.sbomify.com/CVE-2022-25915/): Auth bypass in ELECOM LAN routers (high 8.8)
- [CVE-2022-25914](https://insights.sbomify.com/CVE-2022-25914/): Remote Code Execution (RCE) (medium 5.6)
- [CVE-2022-25912](https://insights.sbomify.com/CVE-2022-25912/): Remote Code Execution (RCE) (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/360/