# Vulnerabilities published in 2022


- [CVE-2022-25706](https://insights.sbomify.com/CVE-2022-25706/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.2)
- [CVE-2022-25705](https://insights.sbomify.com/CVE-2022-25705/): Integer Overflow to Buffer Overflow in Modem (high 7.8)
- [CVE-2022-25702](https://insights.sbomify.com/CVE-2022-25702/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.5)
- [CVE-2022-25698](https://insights.sbomify.com/CVE-2022-25698/): Memory corruption in Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-25697](https://insights.sbomify.com/CVE-2022-25697/): Memory corruption in Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-25696](https://insights.sbomify.com/CVE-2022-25696/): Race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-25695](https://insights.sbomify.com/CVE-2022-25695/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-25694](https://insights.sbomify.com/CVE-2022-25694/): Use of Out-of-range Pointer Offset in MODEM (high 8.4)
- [CVE-2022-25693](https://insights.sbomify.com/CVE-2022-25693/): Use after free in Snapdragon Connectivity, Snapdragon Mobile (high 8.4)
- [CVE-2022-25692](https://insights.sbomify.com/CVE-2022-25692/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.5)
- [CVE-2022-25691](https://insights.sbomify.com/CVE-2022-25691/): Denial of service in Snapdragon Mobile (high 7.5)
- [CVE-2022-25690](https://insights.sbomify.com/CVE-2022-25690/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.5)
- [CVE-2022-2569](https://insights.sbomify.com/CVE-2022-2569/): ARC Informatique PcVue (medium 5.5)
- [CVE-2022-25689](https://insights.sbomify.com/CVE-2022-25689/): Denial of service in Snapdragon Mobile (high 7.5)
- [CVE-2022-25688](https://insights.sbomify.com/CVE-2022-25688/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-25687](https://insights.sbomify.com/CVE-2022-25687/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-25686](https://insights.sbomify.com/CVE-2022-25686/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.3)
- [CVE-2022-25685](https://insights.sbomify.com/CVE-2022-25685/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.5)
- [CVE-2022-25682](https://insights.sbomify.com/CVE-2022-25682/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-25681](https://insights.sbomify.com/CVE-2022-25681/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2022-25680](https://insights.sbomify.com/CVE-2022-25680/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-2568](https://insights.sbomify.com/CVE-2022-2568/): Privilege escalation in Red Hat Ansible Automation Platform (medium 6.5)
- [CVE-2022-25679](https://insights.sbomify.com/CVE-2022-25679/): Missing authorization in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 6.2)
- [CVE-2022-25678](https://insights.sbomify.com/CVE-2022-25678/): Buffer Copy Without Checking Size of Input in MODEM (critical 9.8)
- [CVE-2022-25677](https://insights.sbomify.com/CVE-2022-25677/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2022-25676](https://insights.sbomify.com/CVE-2022-25676/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 6.8)
- [CVE-2022-25675](https://insights.sbomify.com/CVE-2022-25675/): Denial of service in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile (medium 5.5)
- [CVE-2022-25674](https://insights.sbomify.com/CVE-2022-25674/): Weak cryptography in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music (medium 6.5)
- [CVE-2022-25673](https://insights.sbomify.com/CVE-2022-25673/): Denial of service in Snapdragon Mobile (high 7.5)
- [CVE-2022-25672](https://insights.sbomify.com/CVE-2022-25672/): Denial of service in Snapdragon Mobile (high 7.5)
- [CVE-2022-25671](https://insights.sbomify.com/CVE-2022-25671/): Denial of service in Snapdragon Mobile (high 7.5)
- [CVE-2022-25670](https://insights.sbomify.com/CVE-2022-25670/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2022-2567](https://insights.sbomify.com/CVE-2022-2567/): Form Builder CP < 1.2.32 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-25669](https://insights.sbomify.com/CVE-2022-25669/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2022-25668](https://insights.sbomify.com/CVE-2022-25668/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-25667](https://insights.sbomify.com/CVE-2022-25667/): Information disclosure in Snapdragon Wired Infrastructure and Networking (high 7.5)
- [CVE-2022-25666](https://insights.sbomify.com/CVE-2022-25666/): Use after free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking (medium 6.7)
- [CVE-2022-25665](https://insights.sbomify.com/CVE-2022-25665/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile (medium 6.8)
- [CVE-2022-25664](https://insights.sbomify.com/CVE-2022-25664/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 6.2)
- [CVE-2022-25663](https://insights.sbomify.com/CVE-2022-25663/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity (medium 5.5)
- [CVE-2022-25662](https://insights.sbomify.com/CVE-2022-25662/): Information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 5.3)
- [CVE-2022-25661](https://insights.sbomify.com/CVE-2022-25661/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2022-25660](https://insights.sbomify.com/CVE-2022-25660/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2022-2566](https://insights.sbomify.com/CVE-2022-2566/): Heap-memory write in FFMPEG (critical 9.0)
- [CVE-2022-25659](https://insights.sbomify.com/CVE-2022-25659/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-25658](https://insights.sbomify.com/CVE-2022-25658/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-25657](https://insights.sbomify.com/CVE-2022-25657/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.3)
- [CVE-2022-25656](https://insights.sbomify.com/CVE-2022-25656/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-25655](https://insights.sbomify.com/CVE-2022-25655/): Buffer copy without checking the size of input in WLAN HAL. (high 8.4)
- [CVE-2022-25654](https://insights.sbomify.com/CVE-2022-25654/): Memory corruption in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables (medium 6.7)
- [CVE-2022-25653](https://insights.sbomify.com/CVE-2022-25653/): Memory corruption in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 6.8)
- [CVE-2022-25652](https://insights.sbomify.com/CVE-2022-25652/): Weak cryptography in Snapdragon Wired Infrastructure and Networking (critical 9.0)
- [CVE-2022-25651](https://insights.sbomify.com/CVE-2022-25651/): Integer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (critical 9.8)
- [CVE-2022-25650](https://insights.sbomify.com/CVE-2022-25650/): Information disclosure in Mendix Applications using Mendix 7 (medium 6.5)
- [CVE-2022-2565](https://insights.sbomify.com/CVE-2022-2565/): Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting (high 7.2)
- [CVE-2022-25649](https://insights.sbomify.com/CVE-2022-25649/): WordPress Affiliate For WooCommerce premium plugin <= 4.7.0 - Multiple Improper Access Control vulnerabilities (medium 5.0)
- [CVE-2022-25648](https://insights.sbomify.com/CVE-2022-25648/): Command Injection (high 8.1)
- [CVE-2022-25647](https://insights.sbomify.com/CVE-2022-25647/): Deserialization of Untrusted Data (high 7.7)
- [CVE-2022-25646](https://insights.sbomify.com/CVE-2022-25646/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2022-25645](https://insights.sbomify.com/CVE-2022-25645/): Prototype Pollution (medium 6.5)
- [CVE-2022-25644](https://insights.sbomify.com/CVE-2022-25644/): Arbitrary Code Execution (critical 9.8)
- [CVE-2022-25643](https://insights.sbomify.com/CVE-2022-25643/): Privilege escalation in seatd project:seatd (critical 9.8)
- [CVE-2022-25642](https://insights.sbomify.com/CVE-2022-25642/): Cross-site scripting in obyte:obyte (medium 6.1)
- [CVE-2022-25641](https://insights.sbomify.com/CVE-2022-25641/): Security feature bypass in foxit:pdf editor (medium 5.5)
- [CVE-2022-25640](https://insights.sbomify.com/CVE-2022-25640/): Security feature bypass in wolfssl:wolfssl (high 7.5)
- [CVE-2022-2564](https://insights.sbomify.com/CVE-2022-2564/): Prototype Pollution in automattic/mongoose (high 7.0)
- [CVE-2022-25638](https://insights.sbomify.com/CVE-2022-25638/): Security feature bypass in wolfssl:wolfssl (medium 6.5)
- [CVE-2022-25636](https://insights.sbomify.com/CVE-2022-25636/): Memory corruption in debian:debian linux (high 7.8)
- [CVE-2022-25635](https://insights.sbomify.com/CVE-2022-25635/): Realtek Linux/Android Bluetooth Mesh SDK - Buffer Overflow (medium 6.5)
- [CVE-2022-25634](https://insights.sbomify.com/CVE-2022-25634/): Other in qt:qt (high 7.5)
- [CVE-2022-25631](https://insights.sbomify.com/CVE-2022-25631/): Privilege escalation in Symantec Endpoint Protection (high 7.8)
- [CVE-2022-25630](https://insights.sbomify.com/CVE-2022-25630/): Cross-site scripting in Symantec Messaging Gateway (medium 5.4)
- [CVE-2022-2563](https://insights.sbomify.com/CVE-2022-2563/): Tutor LMS < 2.0.10 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-25629](https://insights.sbomify.com/CVE-2022-25629/): Cross-site scripting in Symantec Messaging Gateway (medium 5.4)
- [CVE-2022-25628](https://insights.sbomify.com/CVE-2022-25628/): XML external entity in Symantec Identity Governance and Administration (high 8.8)
- [CVE-2022-25627](https://insights.sbomify.com/CVE-2022-25627/): Command injection in Symantec Identity Governance and Administration (medium 6.7)
- [CVE-2022-25626](https://insights.sbomify.com/CVE-2022-25626/): Missing authorization in Symantec Identity Governance and Administration (medium 5.3)
- [CVE-2022-25625](https://insights.sbomify.com/CVE-2022-25625/): Missing authorization in Symantec Privileged Access Management (PAM) (high 8.8)
- [CVE-2022-25623](https://insights.sbomify.com/CVE-2022-25623/): Privilege escalation in Symantec Management Agent (high 7.8)
- [CVE-2022-25622](https://insights.sbomify.com/CVE-2022-25622/): Denial of service in SIMATIC CFU DIQ (medium 5.3)
- [CVE-2022-25621](https://insights.sbomify.com/CVE-2022-25621/): Command injection in UNIVERGE DT (critical 9.8)
- [CVE-2022-25620](https://insights.sbomify.com/CVE-2022-25620/): Stored Cross-Site Scripting (XSS) (low 3.8)
- [CVE-2022-25619](https://insights.sbomify.com/CVE-2022-25619/): Authenticated Command Injection to RCE (low 3.8)
- [CVE-2022-25618](https://insights.sbomify.com/CVE-2022-25618/): WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability (low 3.4)
- [CVE-2022-25617](https://insights.sbomify.com/CVE-2022-25617/): WordPress Code Snippets plugin <= 2.14.3 - Reflected Cross-Site Scripting (XSS) vulnerability (medium 4.7)
- [CVE-2022-25615](https://insights.sbomify.com/CVE-2022-25615/): WordPress eRoom plugin <= 1.3.8 - Cross-Site Request Forgery (CSRF) vulnerability leading to Cache Deletion (medium 4.3)
- [CVE-2022-25614](https://insights.sbomify.com/CVE-2022-25614/): WordPress eRoom plugin <= 1.3.7 - Cross-Site Request Forgery (CSRF) leading to Sync with Zoom Meetings vulnerability (medium 4.3)
- [CVE-2022-25613](https://insights.sbomify.com/CVE-2022-25613/): Cross-site scripting in FV Flowplayer Video Player (WordPress plugin) (medium 4.1)
- [CVE-2022-25612](https://insights.sbomify.com/CVE-2022-25612/): Cross-site scripting in Simple Event Planner (WordPress plugin) (medium 4.1)
- [CVE-2022-25611](https://insights.sbomify.com/CVE-2022-25611/): WordPress Simple Event Planner plugin <= 1.5.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 4.1)
- [CVE-2022-25610](https://insights.sbomify.com/CVE-2022-25610/): WordPress Simple Ajax Chat plugin <= 20220115 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability (low 3.4)
- [CVE-2022-2561](https://insights.sbomify.com/CVE-2022-2561/): Deserialization in QuickOPC (high 7.8)
- [CVE-2022-25609](https://insights.sbomify.com/CVE-2022-25609/): WordPress Yoo Slider plugin <= 2.0.0 - Stored Cross-Site Scripting (XSS) vulnerability (medium 5.4)
- [CVE-2022-25608](https://insights.sbomify.com/CVE-2022-25608/): Cross-site request forgery in Yoo Slider – Image Slider & Video Slider (WordPress plugin) (medium 5.4)
- [CVE-2022-25607](https://insights.sbomify.com/CVE-2022-25607/): WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability (medium 6.6)
- [CVE-2022-25606](https://insights.sbomify.com/CVE-2022-25606/): Cross-site scripting in WP-DownloadManager (WordPress) (medium 4.8)
- [CVE-2022-25605](https://insights.sbomify.com/CVE-2022-25605/): Cross-site scripting in WP-DownloadManager (WordPress) (medium 4.8)
- [CVE-2022-25604](https://insights.sbomify.com/CVE-2022-25604/): WordPress Price Table plugin <= 0.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability (medium 4.1)
- [CVE-2022-25603](https://insights.sbomify.com/CVE-2022-25603/): WordPress MaxGalleria plugin <= 6.2.5 - Stored Cross-Site Scripting (XSS) vulnerability (medium 4.8)
- [CVE-2022-25602](https://insights.sbomify.com/CVE-2022-25602/): Information disclosure in Responsive Menu (WordPress plugin) (high 8.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/363/