# Vulnerabilities published in 2022 - [CVE-2022-2271](https://insights.sbomify.com/CVE-2022-2271/): WP Database Backup < 5.9 - Admin+ Stored Cross-Site Scripting (medium 4.8) - [CVE-2022-22709](https://insights.sbomify.com/CVE-2022-22709/): VP9 Video Extensions Remote Code Execution Vulnerability (high 7.8) - [CVE-2022-22707](https://insights.sbomify.com/CVE-2022-22707/): Memory corruption in debian:debian linux (medium 5.9) - [CVE-2022-22706](https://insights.sbomify.com/CVE-2022-22706/): Arm Mali GPU Kernel Driver Unspecified (high 7.8, exploited in the wild) - [CVE-2022-22704](https://insights.sbomify.com/CVE-2022-22704/): Privilege escalation in zabbix:zabbix-agent2 (critical 9.8) - [CVE-2022-22703](https://insights.sbomify.com/CVE-2022-22703/): Information disclosure in stormshield:network security (medium 5.5) - [CVE-2022-22702](https://insights.sbomify.com/CVE-2022-22702/): Server-side request forgery in PartKeepr (medium 4.3) - [CVE-2022-22701](https://insights.sbomify.com/CVE-2022-22701/): Path traversal in PartKeepr (medium 6.5) - [CVE-2022-22700](https://insights.sbomify.com/CVE-2022-22700/): Information disclosure in CyberArk Identity (medium 5.3) - [CVE-2022-2270](https://insights.sbomify.com/CVE-2022-2270/): Information disclosure in GitLab (low 3.5) - [CVE-2022-22691](https://insights.sbomify.com/CVE-2022-22691/): Umbraco Password Reset URL Poison (medium 6.8) - [CVE-2022-22690](https://insights.sbomify.com/CVE-2022-22690/): Umbraco Remote ApplicationURL Overwrite (high 8.6) - [CVE-2022-2269](https://insights.sbomify.com/CVE-2022-2269/): Website File Changes Monitor < 1.8.3 - Admin+ SQLi (critical 9.8) - [CVE-2022-22689](https://insights.sbomify.com/CVE-2022-22689/): Code injection in CA Harvest Software Change Manager (high 8.8) - [CVE-2022-22688](https://insights.sbomify.com/CVE-2022-22688/): Command injection in DiskStation Manager (DSM) (high 8.8) - [CVE-2022-22687](https://insights.sbomify.com/CVE-2022-22687/): Memory corruption in DiskStation Manager (DSM) (critical 9.8) - [CVE-2022-22686](https://insights.sbomify.com/CVE-2022-22686/): Cross-site request forgery in Synology Calendar (medium 6.5) - [CVE-2022-22685](https://insights.sbomify.com/CVE-2022-22685/): Path traversal in WebDAV Server (high 8.7) - [CVE-2022-22684](https://insights.sbomify.com/CVE-2022-22684/): Command injection in DiskStation Manager (DSM) (high 7.2) - [CVE-2022-22683](https://insights.sbomify.com/CVE-2022-22683/): Memory corruption in Media Server (critical 10.0) - [CVE-2022-22682](https://insights.sbomify.com/CVE-2022-22682/): Cross-site scripting in Synology Calendar (medium 6.5) - [CVE-2022-22681](https://insights.sbomify.com/CVE-2022-22681/): Auth bypass in Photo Station (high 8.1) - [CVE-2022-22680](https://insights.sbomify.com/CVE-2022-22680/): Information disclosure in DiskStation Manager (DSM) (medium 5.3) - [CVE-2022-2268](https://insights.sbomify.com/CVE-2022-2268/): WP All Import < 3.6.8 - Admin+ Arbitrary File Upload (high 7.2) - [CVE-2022-22679](https://insights.sbomify.com/CVE-2022-22679/): Path traversal in DiskStation Manager (DSM) (medium 6.5) - [CVE-2022-22677](https://insights.sbomify.com/CVE-2022-22677/): Business logic in macOS (medium 4.3) - [CVE-2022-22676](https://insights.sbomify.com/CVE-2022-22676/): Missing authorization in macOS (medium 5.5) - [CVE-2022-22675](https://insights.sbomify.com/CVE-2022-22675/): Apple macOS Out-of-Bounds Write (high 7.8, exploited in the wild) - [CVE-2022-22674](https://insights.sbomify.com/CVE-2022-22674/): Apple macOS Out-of-Bounds Read (medium 5.5, exploited in the wild) - [CVE-2022-22673](https://insights.sbomify.com/CVE-2022-22673/): Denial of service in iOS and iPadOS (high 7.5) - [CVE-2022-22672](https://insights.sbomify.com/CVE-2022-22672/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22671](https://insights.sbomify.com/CVE-2022-22671/): Auth bypass in iOS and iPadOS (medium 4.6) - [CVE-2022-22670](https://insights.sbomify.com/CVE-2022-22670/): Information disclosure in iOS and iPadOS (low 3.3) - [CVE-2022-2267](https://insights.sbomify.com/CVE-2022-2267/): MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRF (medium 4.3) - [CVE-2022-22669](https://insights.sbomify.com/CVE-2022-22669/): Use after free in macOS (high 7.8) - [CVE-2022-22668](https://insights.sbomify.com/CVE-2022-22668/): Information disclosure in macOS (medium 5.5) - [CVE-2022-22667](https://insights.sbomify.com/CVE-2022-22667/): Use after free in iOS and iPadOS (high 7.8) - [CVE-2022-22666](https://insights.sbomify.com/CVE-2022-22666/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22665](https://insights.sbomify.com/CVE-2022-22665/): Privilege escalation in macOS (high 7.8) - [CVE-2022-22664](https://insights.sbomify.com/CVE-2022-22664/): Memory corruption in macOS (high 7.8) - [CVE-2022-22663](https://insights.sbomify.com/CVE-2022-22663/): Security feature bypass in iOS and iPadOS (medium 5.5) - [CVE-2022-22662](https://insights.sbomify.com/CVE-2022-22662/): Information disclosure in macOS (medium 6.5) - [CVE-2022-22661](https://insights.sbomify.com/CVE-2022-22661/): Memory corruption in macOS (high 7.8) - [CVE-2022-22660](https://insights.sbomify.com/CVE-2022-22660/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-2266](https://insights.sbomify.com/CVE-2022-2266/): Reflected XSS University Library Automation System (medium 6.1) - [CVE-2022-22659](https://insights.sbomify.com/CVE-2022-22659/): Business logic in iOS and iPadOS (medium 6.5) - [CVE-2022-22658](https://insights.sbomify.com/CVE-2022-22658/): Denial of service in iOS (medium 6.5) - [CVE-2022-22657](https://insights.sbomify.com/CVE-2022-22657/): Memory corruption in macOS (high 7.8) - [CVE-2022-22656](https://insights.sbomify.com/CVE-2022-22656/): Auth bypass in macOS (low 3.3) - [CVE-2022-22655](https://insights.sbomify.com/CVE-2022-22655/): Security feature bypass in iOS and iPadOS (medium 5.5) - [CVE-2022-22654](https://insights.sbomify.com/CVE-2022-22654/): Other in Safari (medium 4.3) - [CVE-2022-22653](https://insights.sbomify.com/CVE-2022-22653/): Business logic in iOS and iPadOS (high 7.5) - [CVE-2022-22652](https://insights.sbomify.com/CVE-2022-22652/): Auth bypass in iOS and iPadOS (medium 6.1) - [CVE-2022-22651](https://insights.sbomify.com/CVE-2022-22651/): Memory corruption in macOS (high 7.5) - [CVE-2022-22650](https://insights.sbomify.com/CVE-2022-22650/): Privilege escalation in macOS (medium 5.5) - [CVE-2022-2265](https://insights.sbomify.com/CVE-2022-2265/): Path traversal in Identity and Directory Management System (high 7.5) - [CVE-2022-22648](https://insights.sbomify.com/CVE-2022-22648/): Information disclosure in macOS (medium 5.5) - [CVE-2022-22647](https://insights.sbomify.com/CVE-2022-22647/): Auth bypass in macOS (medium 4.6) - [CVE-2022-22646](https://insights.sbomify.com/CVE-2022-22646/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-22644](https://insights.sbomify.com/CVE-2022-22644/): Information disclosure in macOS (medium 5.5) - [CVE-2022-22643](https://insights.sbomify.com/CVE-2022-22643/): Security feature bypass in iOS and iPadOS (high 7.5) - [CVE-2022-22642](https://insights.sbomify.com/CVE-2022-22642/): Security feature bypass in iOS and iPadOS (critical 9.8) - [CVE-2022-22641](https://insights.sbomify.com/CVE-2022-22641/): Use after free in iOS and iPadOS (critical 9.8) - [CVE-2022-22640](https://insights.sbomify.com/CVE-2022-22640/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-2264](https://insights.sbomify.com/CVE-2022-2264/): Heap-based Buffer Overflow in vim/vim (high 7.8) - [CVE-2022-22639](https://insights.sbomify.com/CVE-2022-22639/): Privilege escalation in iOS and iPadOS (high 7.8) - [CVE-2022-22638](https://insights.sbomify.com/CVE-2022-22638/): Null dereference in iOS and iPadOS (medium 6.5) - [CVE-2022-22637](https://insights.sbomify.com/CVE-2022-22637/): Security feature bypass in Safari (high 8.8) - [CVE-2022-22636](https://insights.sbomify.com/CVE-2022-22636/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22635](https://insights.sbomify.com/CVE-2022-22635/): Memory corruption in iOS and iPadOS (critical 9.8) - [CVE-2022-22634](https://insights.sbomify.com/CVE-2022-22634/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22633](https://insights.sbomify.com/CVE-2022-22633/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22632](https://insights.sbomify.com/CVE-2022-22632/): Privilege escalation in iOS and iPadOS (critical 9.8) - [CVE-2022-22631](https://insights.sbomify.com/CVE-2022-22631/): Memory corruption in macOS (high 7.8) - [CVE-2022-22630](https://insights.sbomify.com/CVE-2022-22630/): Use after free in macOS (critical 9.8) - [CVE-2022-2263](https://insights.sbomify.com/CVE-2022-2263/): Online Hotel Booking System Room edit_room_cat.php sql injection (medium 4.7) - [CVE-2022-22629](https://insights.sbomify.com/CVE-2022-22629/): Memory corruption in Safari (high 8.8) - [CVE-2022-22628](https://insights.sbomify.com/CVE-2022-22628/): Use after free in Safari (high 8.8) - [CVE-2022-22627](https://insights.sbomify.com/CVE-2022-22627/): Memory corruption in macOS (high 7.1) - [CVE-2022-22626](https://insights.sbomify.com/CVE-2022-22626/): Memory corruption in macOS (high 7.1) - [CVE-2022-22625](https://insights.sbomify.com/CVE-2022-22625/): Memory corruption in macOS (high 7.1) - [CVE-2022-22624](https://insights.sbomify.com/CVE-2022-22624/): Use after free in Safari (high 8.8) - [CVE-2022-22622](https://insights.sbomify.com/CVE-2022-22622/): Information disclosure in iOS and iPadOS (medium 4.6) - [CVE-2022-22621](https://insights.sbomify.com/CVE-2022-22621/): Information disclosure in iOS and iPadOS (medium 4.6) - [CVE-2022-22620](https://insights.sbomify.com/CVE-2022-22620/): Apple iOS, iPadOS, and macOS Webkit Use-After-Free (high 8.8, exploited in the wild) - [CVE-2022-2262](https://insights.sbomify.com/CVE-2022-2262/): Online Hotel Booking System Room edit_all_room.php sql injection (medium 4.7) - [CVE-2022-22618](https://insights.sbomify.com/CVE-2022-22618/): Security feature bypass in iOS and iPadOS (high 7.8) - [CVE-2022-22617](https://insights.sbomify.com/CVE-2022-22617/): Privilege escalation in macOS (high 7.8) - [CVE-2022-22616](https://insights.sbomify.com/CVE-2022-22616/): Security feature bypass in macOS (medium 5.5) - [CVE-2022-22615](https://insights.sbomify.com/CVE-2022-22615/): Use after free in iOS and iPadOS (high 7.8) - [CVE-2022-22614](https://insights.sbomify.com/CVE-2022-22614/): Use after free in iOS and iPadOS (high 7.8) - [CVE-2022-22613](https://insights.sbomify.com/CVE-2022-22613/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22612](https://insights.sbomify.com/CVE-2022-22612/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22611](https://insights.sbomify.com/CVE-2022-22611/): Memory corruption in iOS and iPadOS (high 7.8) - [CVE-2022-22610](https://insights.sbomify.com/CVE-2022-22610/): Memory corruption in Safari (high 8.8) - [CVE-2022-2261](https://insights.sbomify.com/CVE-2022-2261/): WPide < 3.0 - Admin+ Local File Inclusion (high 7.2) - [CVE-2022-22609](https://insights.sbomify.com/CVE-2022-22609/): Missing authorization in iOS and iPadOS (high 7.5) - [CVE-2022-22608](https://insights.sbomify.com/CVE-2022-22608/): Memory corruption in Xcode (high 7.8) - [CVE-2022-22607](https://insights.sbomify.com/CVE-2022-22607/): Memory corruption in Xcode (high 7.8) - [CVE-2022-22606](https://insights.sbomify.com/CVE-2022-22606/): Memory corruption in Xcode (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2022/page/389/