# Vulnerabilities published in 2022


- [CVE-2022-23429](https://insights.sbomify.com/CVE-2022-23429/): Memory corruption in Samsung Mobile Devices (medium 5.3)
- [CVE-2022-23428](https://insights.sbomify.com/CVE-2022-23428/): Memory corruption in Samsung Mobile Devices with Exynos chipsets (high 8.4)
- [CVE-2022-23427](https://insights.sbomify.com/CVE-2022-23427/): Missing authorization in Samsung Mobile Devices (low 3.9)
- [CVE-2022-23426](https://insights.sbomify.com/CVE-2022-23426/): Privilege escalation in Samsung Mobile Devices (medium 4.4)
- [CVE-2022-23425](https://insights.sbomify.com/CVE-2022-23425/): Other in Samsung Mobile Devices (high 8.6)
- [CVE-2022-2342](https://insights.sbomify.com/CVE-2022-2342/): Cross-site Scripting (XSS) - Stored in outline/outline (high 7.3)
- [CVE-2022-23410](https://insights.sbomify.com/CVE-2022-23410/): Code injection in AXIS IP Utility (high 7.8)
- [CVE-2022-2341](https://insights.sbomify.com/CVE-2022-2341/): Simple Page Transition <= 1.4.1 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-23409](https://insights.sbomify.com/CVE-2022-23409/): Path traversal in ethercreative:logs (medium 4.9)
- [CVE-2022-23408](https://insights.sbomify.com/CVE-2022-23408/): Weak cryptography in wolfssl:wolfssl (critical 9.1)
- [CVE-2022-23403](https://insights.sbomify.com/CVE-2022-23403/): Denial of service in Intel(R) Data Center Manager software (medium 5.5)
- [CVE-2022-23402](https://insights.sbomify.com/CVE-2022-23402/): Hardcoded credentials in CENTUM VP (critical 9.8)
- [CVE-2022-23401](https://insights.sbomify.com/CVE-2022-23401/): Other in CENTUM CS 3000 (high 7.8)
- [CVE-2022-23400](https://insights.sbomify.com/CVE-2022-23400/): Memory corruption in ImageGear (high 7.1)
- [CVE-2022-2340](https://insights.sbomify.com/CVE-2022-2340/): W-DALIL <= 2.0 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-23399](https://insights.sbomify.com/CVE-2022-23399/): Memory corruption in LinkHub Mesh Wifi (high 8.8)
- [CVE-2022-23397](https://insights.sbomify.com/CVE-2022-23397/): Cross-site scripting in cedargate:ez-net portal (medium 6.1)
- [CVE-2022-23395](https://insights.sbomify.com/CVE-2022-23395/): Prototype Pollution in jquery.cookie (medium 6.1)
- [CVE-2022-23391](https://insights.sbomify.com/CVE-2022-23391/): Cross-site scripting in pybbs project:pybbs (medium 6.1)
- [CVE-2022-23390](https://insights.sbomify.com/CVE-2022-23390/): File upload in diyhi:bbs forum (critical 9.8)
- [CVE-2022-2339](https://insights.sbomify.com/CVE-2022-2339/): Server-Side Request Forgery (SSRF) in nocodb/nocodb (critical 9.1)
- [CVE-2022-23389](https://insights.sbomify.com/CVE-2022-23389/): Command injection in publiccms:publiccms (critical 9.8)
- [CVE-2022-23387](https://insights.sbomify.com/CVE-2022-23387/): SQL injection in taocms:taocms (high 7.5)
- [CVE-2022-23384](https://insights.sbomify.com/CVE-2022-23384/): Cross-site request forgery in yzmcms:yzmcms (high 8.8)
- [CVE-2022-23383](https://insights.sbomify.com/CVE-2022-23383/): Auth bypass in yzmcms:yzmcms (critical 9.1)
- [CVE-2022-23382](https://insights.sbomify.com/CVE-2022-23382/): Denial of service in hichip:shenzhen hichip vision technology firmware (high 8.1)
- [CVE-2022-23380](https://insights.sbomify.com/CVE-2022-23380/): SQL injection in taogogo:taocms (high 8.8)
- [CVE-2022-2338](https://insights.sbomify.com/CVE-2022-2338/): Softing Secure Integration Server Cleartext Transmission of Sensitive Information (medium 5.7)
- [CVE-2022-23379](https://insights.sbomify.com/CVE-2022-23379/): SQL injection in emlog:emlog (critical 9.8)
- [CVE-2022-23378](https://insights.sbomify.com/CVE-2022-23378/): Cross-site scripting in tastyigniter:tastyigniter (medium 5.4)
- [CVE-2022-23377](https://insights.sbomify.com/CVE-2022-23377/): Path traversal in keep:archeevo (high 7.5)
- [CVE-2022-23376](https://insights.sbomify.com/CVE-2022-23376/): Cross-site scripting in wikidocs:wikidocs (medium 6.1)
- [CVE-2022-23375](https://insights.sbomify.com/CVE-2022-23375/): File upload in wikidocs:wikidocs (high 8.8)
- [CVE-2022-2337](https://insights.sbomify.com/CVE-2022-2337/): Softing Secure Integration Server NULL Pointer Dereference (high 7.5)
- [CVE-2022-23367](https://insights.sbomify.com/CVE-2022-23367/): Cross-site scripting in fulusso project:fulusso (medium 6.1)
- [CVE-2022-23366](https://insights.sbomify.com/CVE-2022-23366/): SQL injection in hms project:hms (critical 9.8)
- [CVE-2022-23365](https://insights.sbomify.com/CVE-2022-23365/): SQL injection in hms project:hms (critical 9.8)
- [CVE-2022-23364](https://insights.sbomify.com/CVE-2022-23364/): SQL injection in hms project:hms (critical 9.8)
- [CVE-2022-23363](https://insights.sbomify.com/CVE-2022-23363/): SQL injection in online banking system project:online banking system (critical 9.8)
- [CVE-2022-2336](https://insights.sbomify.com/CVE-2022-2336/): Softing Secure Integration Server Improper Authentication (critical 9.8)
- [CVE-2022-23358](https://insights.sbomify.com/CVE-2022-23358/): SQL injection in easycms:easycms (critical 9.8)
- [CVE-2022-23357](https://insights.sbomify.com/CVE-2022-23357/): Path traversal in mozilo:mozilocms (critical 9.1)
- [CVE-2022-23352](https://insights.sbomify.com/CVE-2022-23352/): Denial of service in bigantsoft:bigant server (high 7.5)
- [CVE-2022-23350](https://insights.sbomify.com/CVE-2022-23350/): Cross-site scripting in bigantsoft:bigant server (medium 5.4)
- [CVE-2022-2335](https://insights.sbomify.com/CVE-2022-2335/): Softing Secure Integration Server Integer Underflow (high 7.5)
- [CVE-2022-23349](https://insights.sbomify.com/CVE-2022-23349/): Cross-site request forgery in bigantsoft:bigant server (high 8.8)
- [CVE-2022-23348](https://insights.sbomify.com/CVE-2022-23348/): Weak cryptography in bigantsoft:bigant server (medium 5.3)
- [CVE-2022-23347](https://insights.sbomify.com/CVE-2022-23347/): Path traversal in bigantsoft:bigant server (high 7.5)
- [CVE-2022-23346](https://insights.sbomify.com/CVE-2022-23346/): Missing authorization in bigantsoft:bigant server (high 8.8)
- [CVE-2022-23345](https://insights.sbomify.com/CVE-2022-23345/): Missing authorization in bigantsoft:bigant server (high 7.5)
- [CVE-2022-23342](https://insights.sbomify.com/CVE-2022-23342/): Information disclosure in hyland:onbase (medium 5.3)
- [CVE-2022-23340](https://insights.sbomify.com/CVE-2022-23340/): Joplin Vulnerable to Code Injection (critical 9.8)
- [CVE-2022-2334](https://insights.sbomify.com/CVE-2022-2334/): Softing Secure Integration Server Uncontrolled Search Path Element (high 7.2)
- [CVE-2022-23337](https://insights.sbomify.com/CVE-2022-23337/): SQL injection in dedecms:dedecms (critical 9.8)
- [CVE-2022-23336](https://insights.sbomify.com/CVE-2022-23336/): SQL injection in s-cms:s-cms (critical 9.8)
- [CVE-2022-23335](https://insights.sbomify.com/CVE-2022-23335/): SQL injection in metinfo:metinfo (critical 9.8)
- [CVE-2022-23334](https://insights.sbomify.com/CVE-2022-23334/): Security feature bypass in ip-label:newtest (critical 9.8)
- [CVE-2022-23332](https://insights.sbomify.com/CVE-2022-23332/): Command injection in ejointech:acom508 firmware (high 8.8)
- [CVE-2022-23331](https://insights.sbomify.com/CVE-2022-23331/): Missing authorization in dataease:dataease (high 8.8)
- [CVE-2022-23330](https://insights.sbomify.com/CVE-2022-23330/): Code injection in jpress:jpress (high 8.8)
- [CVE-2022-2333](https://insights.sbomify.com/CVE-2022-2333/): Honeywell SoftMaster Uncontrolled Search Path Element (high 8.8)
- [CVE-2022-23329](https://insights.sbomify.com/CVE-2022-23329/): Code injection in ujcms:jspxcms (critical 9.8)
- [CVE-2022-23328](https://insights.sbomify.com/CVE-2022-23328/): Denial of Service in Go-Ethereum (high 7.5)
- [CVE-2022-23327](https://insights.sbomify.com/CVE-2022-23327/): Denial of Service in Go-Ethereum (high 7.5)
- [CVE-2022-23321](https://insights.sbomify.com/CVE-2022-23321/): Cross-site scripting in xerox:xmpie ustore (medium 4.8)
- [CVE-2022-23320](https://insights.sbomify.com/CVE-2022-23320/): Hardcoded credentials in xerox:xmpie ustore (high 7.5)
- [CVE-2022-2332](https://insights.sbomify.com/CVE-2022-2332/): Honeywell SoftMaster Incorrect Permission Assignment for Critical Resource (medium 6.2)
- [CVE-2022-23319](https://insights.sbomify.com/CVE-2022-23319/): Memory corruption in pcf2bdf project:pcf2bdf (medium 5.5)
- [CVE-2022-23318](https://insights.sbomify.com/CVE-2022-23318/): Memory corruption in pcf2bdf project:pcf2bdf (high 7.1)
- [CVE-2022-23317](https://insights.sbomify.com/CVE-2022-23317/): Auth bypass in helpsystems:cobalt strike (high 7.5)
- [CVE-2022-23316](https://insights.sbomify.com/CVE-2022-23316/): Path traversal in taogogo:taocms (medium 4.9)
- [CVE-2022-23315](https://insights.sbomify.com/CVE-2022-23315/): Arbitrary file upload in Mingsoft MCMS (critical 9.8)
- [CVE-2022-23314](https://insights.sbomify.com/CVE-2022-23314/): SQL injection in mingsoft:mcms (critical 9.8)
- [CVE-2022-23312](https://insights.sbomify.com/CVE-2022-23312/): Cross-site scripting in Spectrum Power 4 (medium 6.1)
- [CVE-2022-23308](https://insights.sbomify.com/CVE-2022-23308/): Use after free in apple:ipados (high 7.5)
- [CVE-2022-23307](https://insights.sbomify.com/CVE-2022-23307/): A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. (high 8.8)
- [CVE-2022-23305](https://insights.sbomify.com/CVE-2022-23305/): SQL injection in JDBC Appender in Apache Log4j V1 (critical 9.8)
- [CVE-2022-23304](https://insights.sbomify.com/CVE-2022-23304/): Information disclosure in fedoraproject:fedora (critical 9.8)
- [CVE-2022-23303](https://insights.sbomify.com/CVE-2022-23303/): Information disclosure in fedoraproject:fedora (critical 9.8)
- [CVE-2022-23302](https://insights.sbomify.com/CVE-2022-23302/): Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (high 8.8)
- [CVE-2022-23301](https://insights.sbomify.com/CVE-2022-23301/): HEVC Video Extensions Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-23300](https://insights.sbomify.com/CVE-2022-23300/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-2330](https://insights.sbomify.com/CVE-2022-2330/): XXE vulnerability in DLP Endpoint for Windows (medium 6.5)
- [CVE-2022-23299](https://insights.sbomify.com/CVE-2022-23299/): Windows PDEV Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-23298](https://insights.sbomify.com/CVE-2022-23298/): Windows NT OS Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-23297](https://insights.sbomify.com/CVE-2022-23297/): Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2022-23296](https://insights.sbomify.com/CVE-2022-23296/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-23295](https://insights.sbomify.com/CVE-2022-23295/): Raw Image Extension Remote Code Execution Vulnerability (high 7.8)
- [CVE-2022-23294](https://insights.sbomify.com/CVE-2022-23294/): Windows Event Tracing Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-23293](https://insights.sbomify.com/CVE-2022-23293/): Windows Fast FAT File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-23292](https://insights.sbomify.com/CVE-2022-23292/): Microsoft Power BI Spoofing Vulnerability (low 3.7)
- [CVE-2022-23291](https://insights.sbomify.com/CVE-2022-23291/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-23290](https://insights.sbomify.com/CVE-2022-23290/): Windows Inking COM Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2022-2329](https://insights.sbomify.com/CVE-2022-2329/): Integer overflow in IGSS Data Server (IGSSdataServer.exe) (critical 9.8)
- [CVE-2022-23288](https://insights.sbomify.com/CVE-2022-23288/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-23287](https://insights.sbomify.com/CVE-2022-23287/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-23286](https://insights.sbomify.com/CVE-2022-23286/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2022-23285](https://insights.sbomify.com/CVE-2022-23285/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2022-23284](https://insights.sbomify.com/CVE-2022-23284/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.2)
- [CVE-2022-23283](https://insights.sbomify.com/CVE-2022-23283/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/383/