# Vulnerabilities published in 2022


- [CVE-2022-24082](https://insights.sbomify.com/CVE-2022-24082/): Deserialization in Pega Infinity (critical 9.8)
- [CVE-2022-2408](https://insights.sbomify.com/CVE-2022-2408/): Guest accounts can list all public channels (medium 4.3)
- [CVE-2022-24077](https://insights.sbomify.com/CVE-2022-24077/): Code injection in NAVER Cloud Explorer Beta (high 7.8)
- [CVE-2022-24075](https://insights.sbomify.com/CVE-2022-24075/): Security feature bypass in NAVER Whale browser (medium 6.5)
- [CVE-2022-24074](https://insights.sbomify.com/CVE-2022-24074/): Other in NAVER Whale browser (critical 9.8)
- [CVE-2022-24073](https://insights.sbomify.com/CVE-2022-24073/): Security feature bypass in NAVER Whale browser (high 7.1)
- [CVE-2022-24072](https://insights.sbomify.com/CVE-2022-24072/): Code injection in NAVER Whale browser (medium 6.1)
- [CVE-2022-24071](https://insights.sbomify.com/CVE-2022-24071/): Security feature bypass in NAVER Whale browser (medium 4.3)
- [CVE-2022-24070](https://insights.sbomify.com/CVE-2022-24070/): Apache Subversion mod_dav_svn is vulnerable to memory corruption (high 7.5)
- [CVE-2022-2407](https://insights.sbomify.com/CVE-2022-2407/): WP phpMyAdmin < 5.2.0.4 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-24069](https://insights.sbomify.com/CVE-2022-24069/): Privilege escalation in insyde:insydeh2o (high 8.2)
- [CVE-2022-24066](https://insights.sbomify.com/CVE-2022-24066/): Command Injection (high 8.1)
- [CVE-2022-24065](https://insights.sbomify.com/CVE-2022-24065/): Command Injection (high 8.1)
- [CVE-2022-24064](https://insights.sbomify.com/CVE-2022-24064/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24063](https://insights.sbomify.com/CVE-2022-24063/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24062](https://insights.sbomify.com/CVE-2022-24062/): Use after free in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24061](https://insights.sbomify.com/CVE-2022-24061/): Use after free in DICOM Viewer Pro (low 3.3)
- [CVE-2022-24060](https://insights.sbomify.com/CVE-2022-24060/): Memory corruption in DICOM Viewer Pro (low 3.3)
- [CVE-2022-2406](https://insights.sbomify.com/CVE-2022-2406/): Malicious imports can lead to Denial of Service (medium 4.3)
- [CVE-2022-24059](https://insights.sbomify.com/CVE-2022-24059/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24058](https://insights.sbomify.com/CVE-2022-24058/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24057](https://insights.sbomify.com/CVE-2022-24057/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24056](https://insights.sbomify.com/CVE-2022-24056/): Memory corruption in DICOM Viewer Pro (high 7.8)
- [CVE-2022-24055](https://insights.sbomify.com/CVE-2022-24055/): Memory corruption in DICOM Viewer Pro (low 3.3)
- [CVE-2022-24052](https://insights.sbomify.com/CVE-2022-24052/): Memory corruption in MariaDB (high 7.0)
- [CVE-2022-24051](https://insights.sbomify.com/CVE-2022-24051/): Memory corruption in MariaDB (high 7.0)
- [CVE-2022-24050](https://insights.sbomify.com/CVE-2022-24050/): Use after free in MariaDB (high 7.0)
- [CVE-2022-2405](https://insights.sbomify.com/CVE-2022-2405/): WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion (medium 4.3)
- [CVE-2022-24049](https://insights.sbomify.com/CVE-2022-24049/): Memory corruption in One Speaker (critical 9.8)
- [CVE-2022-24048](https://insights.sbomify.com/CVE-2022-24048/): Memory corruption in MariaDB (high 7.0)
- [CVE-2022-24047](https://insights.sbomify.com/CVE-2022-24047/): Auth bypass in Track-It! (medium 5.3)
- [CVE-2022-24046](https://insights.sbomify.com/CVE-2022-24046/): Integer overflow in One Speaker (critical 9.8)
- [CVE-2022-24045](https://insights.sbomify.com/CVE-2022-24045/): Information disclosure in Desigo DXR2 (medium 6.5)
- [CVE-2022-24044](https://insights.sbomify.com/CVE-2022-24044/): Auth bypass in Desigo DXR2 (high 7.5)
- [CVE-2022-24043](https://insights.sbomify.com/CVE-2022-24043/): Information disclosure in Desigo DXR2 (medium 5.3)
- [CVE-2022-24042](https://insights.sbomify.com/CVE-2022-24042/): Auth bypass in Desigo DXR2 (critical 9.1)
- [CVE-2022-24041](https://insights.sbomify.com/CVE-2022-24041/): Weak cryptography in Desigo DXR2 (medium 6.5)
- [CVE-2022-24040](https://insights.sbomify.com/CVE-2022-24040/): Denial of service in Desigo DXR2 (medium 6.5)
- [CVE-2022-2404](https://insights.sbomify.com/CVE-2022-2404/): WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-24039](https://insights.sbomify.com/CVE-2022-24039/): Code injection in Desigo PXC4 (critical 9.0)
- [CVE-2022-24038](https://insights.sbomify.com/CVE-2022-24038/): Unauthorized modification in Karmasis Informatics Infraskope SIEM+ (medium 6.5)
- [CVE-2022-24037](https://insights.sbomify.com/CVE-2022-24037/): Unauthorized modification in Karmasis Informatics Infraskope SIEM+ (high 8.2)
- [CVE-2022-24036](https://insights.sbomify.com/CVE-2022-24036/): Unauthorized modification in Karmasis Informatics Infraskope SIEM+ (high 8.6)
- [CVE-2022-24035](https://insights.sbomify.com/CVE-2022-24035/): Denial of service in opennetworking:onos (high 7.5)
- [CVE-2022-24032](https://insights.sbomify.com/CVE-2022-24032/): Information disclosure in adenza:axiomsl controllerview (medium 5.3)
- [CVE-2022-24031](https://insights.sbomify.com/CVE-2022-24031/): Memory corruption in insyde:insydeh2o (high 8.2)
- [CVE-2022-24030](https://insights.sbomify.com/CVE-2022-24030/): Memory corruption in insyde:insydeh2o (high 7.5)
- [CVE-2022-2403](https://insights.sbomify.com/CVE-2022-2403/): Information disclosure in Openshift (medium 6.5)
- [CVE-2022-24029](https://insights.sbomify.com/CVE-2022-24029/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24028](https://insights.sbomify.com/CVE-2022-24028/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24027](https://insights.sbomify.com/CVE-2022-24027/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24026](https://insights.sbomify.com/CVE-2022-24026/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24025](https://insights.sbomify.com/CVE-2022-24025/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24024](https://insights.sbomify.com/CVE-2022-24024/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24023](https://insights.sbomify.com/CVE-2022-24023/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24022](https://insights.sbomify.com/CVE-2022-24022/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24021](https://insights.sbomify.com/CVE-2022-24021/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24020](https://insights.sbomify.com/CVE-2022-24020/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-2402](https://insights.sbomify.com/CVE-2022-2402/): Stack Overflow in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows (medium 6.5)
- [CVE-2022-24019](https://insights.sbomify.com/CVE-2022-24019/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24018](https://insights.sbomify.com/CVE-2022-24018/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24017](https://insights.sbomify.com/CVE-2022-24017/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24016](https://insights.sbomify.com/CVE-2022-24016/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24015](https://insights.sbomify.com/CVE-2022-24015/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24014](https://insights.sbomify.com/CVE-2022-24014/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24013](https://insights.sbomify.com/CVE-2022-24013/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24012](https://insights.sbomify.com/CVE-2022-24012/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24011](https://insights.sbomify.com/CVE-2022-24011/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24010](https://insights.sbomify.com/CVE-2022-24010/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-2401](https://insights.sbomify.com/CVE-2022-2401/): Team members could access sensitive information of other users via an API call (medium 6.5)
- [CVE-2022-24009](https://insights.sbomify.com/CVE-2022-24009/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24008](https://insights.sbomify.com/CVE-2022-24008/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24007](https://insights.sbomify.com/CVE-2022-24007/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24006](https://insights.sbomify.com/CVE-2022-24006/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24005](https://insights.sbomify.com/CVE-2022-24005/): Memory corruption in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-24004](https://insights.sbomify.com/CVE-2022-24004/): Cross-site scripting in vanderbilt:redcap (medium 5.4)
- [CVE-2022-24003](https://insights.sbomify.com/CVE-2022-24003/): Information disclosure in Bixby Vision (medium 4.0)
- [CVE-2022-24002](https://insights.sbomify.com/CVE-2022-24002/): Missing authorization in Link sharing (medium 4.0)
- [CVE-2022-24001](https://insights.sbomify.com/CVE-2022-24001/): Information disclosure in Samsung Mobile Devices (low 3.8)
- [CVE-2022-24000](https://insights.sbomify.com/CVE-2022-24000/): Missing authorization in Samsung Mobile Devices (low 3.9)
- [CVE-2022-2400](https://insights.sbomify.com/CVE-2022-2400/): External Control of File Name or Path in dompdf/dompdf (medium 5.3)
- [CVE-2022-23999](https://insights.sbomify.com/CVE-2022-23999/): Missing authorization in Samsung Mobile Devices (low 3.9)
- [CVE-2022-23998](https://insights.sbomify.com/CVE-2022-23998/): Missing authorization in Samsung Camera (medium 6.2)
- [CVE-2022-23997](https://insights.sbomify.com/CVE-2022-23997/): Missing authorization in Samsung Wearable Devices (medium 4.0)
- [CVE-2022-23996](https://insights.sbomify.com/CVE-2022-23996/): Missing authorization in Samsung Wearable Devices (medium 4.0)
- [CVE-2022-23995](https://insights.sbomify.com/CVE-2022-23995/): Missing authorization in Samsung Wearable Devices (medium 4.0)
- [CVE-2022-23994](https://insights.sbomify.com/CVE-2022-23994/): Missing authorization in Samsung Wearable Devices (low 3.3)
- [CVE-2022-23993](https://insights.sbomify.com/CVE-2022-23993/): Cross-site scripting in pfsense:pfsense (medium 6.1)
- [CVE-2022-23992](https://insights.sbomify.com/CVE-2022-23992/): Command injection in XCOM Data Transport for Windows, Linux, and UNIX (critical 9.8)
- [CVE-2022-23990](https://insights.sbomify.com/CVE-2022-23990/): Integer overflow in debian:debian linux (high 7.5)
- [CVE-2022-2399](https://insights.sbomify.com/CVE-2022-2399/): Use after free in Chrome (high 8.8)
- [CVE-2022-23989](https://insights.sbomify.com/CVE-2022-23989/): Denial of service in stormshield:stormshield network security (high 7.5)
- [CVE-2022-23988](https://insights.sbomify.com/CVE-2022-23988/): WS Form < 1.8.176 - Unauthenticated Stored Cross-Site Scripting (medium 6.1)
- [CVE-2022-23987](https://insights.sbomify.com/CVE-2022-23987/): WS Form < 1.8.176 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-23986](https://insights.sbomify.com/CVE-2022-23986/): SQL injection in phpUploader (high 7.5)
- [CVE-2022-23985](https://insights.sbomify.com/CVE-2022-23985/): ICSA-22-055-01 FATEK Automation FvDesigner (high 7.8)
- [CVE-2022-23984](https://insights.sbomify.com/CVE-2022-23984/): WordPress wpDiscuz plugin <= 7.3.11 - Sensitive Information Disclosure (low 3.7)
- [CVE-2022-23983](https://insights.sbomify.com/CVE-2022-23983/): Cross-site request forgery in WP Content Copy Protection & No Right Click (WordPress plugin) (medium 4.3)
- [CVE-2022-23982](https://insights.sbomify.com/CVE-2022-23982/): WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability (medium 4.3)
- [CVE-2022-23981](https://insights.sbomify.com/CVE-2022-23981/): WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/377/