# Vulnerabilities published in 2022


- [CVE-2022-22176](https://insights.sbomify.com/CVE-2022-22176/): Denial of service in Junos OS (high 7.4)
- [CVE-2022-22175](https://insights.sbomify.com/CVE-2022-22175/): Denial of service in Junos OS (high 7.5)
- [CVE-2022-22174](https://insights.sbomify.com/CVE-2022-22174/): Denial of service in Junos OS (high 7.5)
- [CVE-2022-22173](https://insights.sbomify.com/CVE-2022-22173/): Junos OS: CRL failing to download causes a memory leak and ultimately a DoS (high 7.5)
- [CVE-2022-22172](https://insights.sbomify.com/CVE-2022-22172/): Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS (medium 6.5)
- [CVE-2022-22171](https://insights.sbomify.com/CVE-2022-22171/): Junos OS: Specific packets over VXLAN cause FPC reset (high 7.5)
- [CVE-2022-22170](https://insights.sbomify.com/CVE-2022-22170/): Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset (high 7.5)
- [CVE-2022-2217](https://insights.sbomify.com/CVE-2022-2217/): Cross-site Scripting (XSS) - Generic in ionicabizau/parse-url (critical 9.1)
- [CVE-2022-22169](https://insights.sbomify.com/CVE-2022-22169/): Denial of service in Junos OS (medium 5.9)
- [CVE-2022-22168](https://insights.sbomify.com/CVE-2022-22168/): Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot (medium 6.5)
- [CVE-2022-22167](https://insights.sbomify.com/CVE-2022-22167/): Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy (high 7.2)
- [CVE-2022-22166](https://insights.sbomify.com/CVE-2022-22166/): Denial of service in Junos OS (medium 6.5)
- [CVE-2022-22164](https://insights.sbomify.com/CVE-2022-22164/): Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled. (medium 6.5)
- [CVE-2022-22163](https://insights.sbomify.com/CVE-2022-22163/): Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet (high 7.4)
- [CVE-2022-22162](https://insights.sbomify.com/CVE-2022-22162/): Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in (high 7.3)
- [CVE-2022-22161](https://insights.sbomify.com/CVE-2022-22161/): Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic (high 7.5)
- [CVE-2022-22160](https://insights.sbomify.com/CVE-2022-22160/): Denial of service in Junos OS (medium 6.5)
- [CVE-2022-2216](https://insights.sbomify.com/CVE-2022-2216/): Server-Side Request Forgery (SSRF) in ionicabizau/parse-url (critical 9.4)
- [CVE-2022-22159](https://insights.sbomify.com/CVE-2022-22159/): Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS). (high 7.5)
- [CVE-2022-22157](https://insights.sbomify.com/CVE-2022-22157/): Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled (high 7.2)
- [CVE-2022-22156](https://insights.sbomify.com/CVE-2022-22156/): Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL (medium 6.5)
- [CVE-2022-22155](https://insights.sbomify.com/CVE-2022-22155/): Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps (medium 6.5)
- [CVE-2022-22154](https://insights.sbomify.com/CVE-2022-22154/): Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS (medium 6.8)
- [CVE-2022-22153](https://insights.sbomify.com/CVE-2022-22153/): SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops (high 7.5)
- [CVE-2022-22152](https://insights.sbomify.com/CVE-2022-22152/): Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface (high 7.7)
- [CVE-2022-22151](https://insights.sbomify.com/CVE-2022-22151/): Other in CENTUM CS 3000 (high 8.1)
- [CVE-2022-22150](https://insights.sbomify.com/CVE-2022-22150/): Memory corruption in Foxit (high 8.8)
- [CVE-2022-2215](https://insights.sbomify.com/CVE-2022-2215/): GiveWP < 2.21.3 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-22149](https://insights.sbomify.com/CVE-2022-22149/): SQL injection in lansweeper (critical 9.1)
- [CVE-2022-22148](https://insights.sbomify.com/CVE-2022-22148/): Misconfiguration in CENTUM CS 3000 (high 7.8)
- [CVE-2022-22146](https://insights.sbomify.com/CVE-2022-22146/): Cross-site scripting in TransmitMail (medium 6.1)
- [CVE-2022-22145](https://insights.sbomify.com/CVE-2022-22145/): Denial of service in CENTUM CS 3000 (high 8.1)
- [CVE-2022-22144](https://insights.sbomify.com/CVE-2022-22144/): Hardcoded credentials in LinkHub Mesh Wifi (high 7.5)
- [CVE-2022-22143](https://insights.sbomify.com/CVE-2022-22143/): Prototype Pollution (high 7.5)
- [CVE-2022-22142](https://insights.sbomify.com/CVE-2022-22142/): Cross-site scripting in php mailform (medium 6.1)
- [CVE-2022-22141](https://insights.sbomify.com/CVE-2022-22141/): Misconfiguration in CENTUM CS 3000 (high 7.8)
- [CVE-2022-22140](https://insights.sbomify.com/CVE-2022-22140/): Command injection in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-2214](https://insights.sbomify.com/CVE-2022-2214/): SourceCodester Library Management System bookdetails.php sql injection (medium 6.3)
- [CVE-2022-22139](https://insights.sbomify.com/CVE-2022-22139/): Privilege escalation in Intel(R) XTU software (high 7.3)
- [CVE-2022-22138](https://insights.sbomify.com/CVE-2022-22138/): Denial of Service (DoS) (high 7.5)
- [CVE-2022-22137](https://insights.sbomify.com/CVE-2022-22137/): Memory corruption in ImageGear (critical 9.8)
- [CVE-2022-2213](https://insights.sbomify.com/CVE-2022-2213/): SourceCodester Library Management System cross site scripting (low 3.5)
- [CVE-2022-22128](https://insights.sbomify.com/CVE-2022-22128/): Path traversal in Tableau Server (critical 9.8)
- [CVE-2022-22127](https://insights.sbomify.com/CVE-2022-22127/): Missing authorization in Tableau Server (high 7.2)
- [CVE-2022-22126](https://insights.sbomify.com/CVE-2022-22126/): Openmct XSS via the “Web Page” element (medium 6.1)
- [CVE-2022-22125](https://insights.sbomify.com/CVE-2022-22125/): Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag (medium 4.8)
- [CVE-2022-22124](https://insights.sbomify.com/CVE-2022-22124/): Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image (medium 5.4)
- [CVE-2022-22123](https://insights.sbomify.com/CVE-2022-22123/): Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Title (medium 5.4)
- [CVE-2022-22121](https://insights.sbomify.com/CVE-2022-22121/): NocoDB - CSV Injection in User Management (high 8.0)
- [CVE-2022-22120](https://insights.sbomify.com/CVE-2022-22120/): NocoDB - Observable Discrepancy in the password-reset feature (medium 5.3)
- [CVE-2022-2212](https://insights.sbomify.com/CVE-2022-2212/): SourceCodester Library Management System /card/index.php unrestricted upload (medium 6.3)
- [CVE-2022-22117](https://insights.sbomify.com/CVE-2022-22117/): Directus - Stored Cross-Site Scripting (XSS) in Profile Avatar Image (medium 5.4)
- [CVE-2022-22116](https://insights.sbomify.com/CVE-2022-22116/): Directus - Stored Cross-Site Scripting (XSS) via SVG File Upload (medium 5.4)
- [CVE-2022-22115](https://insights.sbomify.com/CVE-2022-22115/): Teedy - Stored Cross-Site Scripting (XSS) in Tag Name (critical 9.0)
- [CVE-2022-22114](https://insights.sbomify.com/CVE-2022-22114/): Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality (critical 9.6)
- [CVE-2022-22113](https://insights.sbomify.com/CVE-2022-22113/): DayByDay CRM - Insufficient Session Expiration after Password Change (high 8.8)
- [CVE-2022-22112](https://insights.sbomify.com/CVE-2022-22112/): DayByDay CRM - Application-Wide Client-Side Template Injection (CSTI) (medium 5.4)
- [CVE-2022-22111](https://insights.sbomify.com/CVE-2022-22111/): DayByDay CRM - Missing Authorization when Changing Password (high 8.8)
- [CVE-2022-22110](https://insights.sbomify.com/CVE-2022-22110/): DayByDay CRM - Weak Password Requirements in Update User (high 7.5)
- [CVE-2022-2211](https://insights.sbomify.com/CVE-2022-2211/): Memory corruption in libguestfs (medium 6.5)
- [CVE-2022-22109](https://insights.sbomify.com/CVE-2022-22109/): DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title (medium 5.4)
- [CVE-2022-22108](https://insights.sbomify.com/CVE-2022-22108/): DayByDay CRM - Missing Authorization when Viewing Absences (medium 4.3)
- [CVE-2022-22107](https://insights.sbomify.com/CVE-2022-22107/): DayByDay CRM - Missing Authorization when Viewing Appointments (medium 4.3)
- [CVE-2022-22106](https://insights.sbomify.com/CVE-2022-22106/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-22105](https://insights.sbomify.com/CVE-2022-22105/): Integer overflow in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Voice & Music (critical 9.4)
- [CVE-2022-22104](https://insights.sbomify.com/CVE-2022-22104/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-22103](https://insights.sbomify.com/CVE-2022-22103/): Memory corruption in Snapdragon Auto (high 7.8)
- [CVE-2022-22102](https://insights.sbomify.com/CVE-2022-22102/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-22101](https://insights.sbomify.com/CVE-2022-22101/): Denial of service in Snapdragon Auto (medium 6.2)
- [CVE-2022-22100](https://insights.sbomify.com/CVE-2022-22100/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-2210](https://insights.sbomify.com/CVE-2022-2210/): Out-of-bounds Write in vim/vim (high 7.8)
- [CVE-2022-22099](https://insights.sbomify.com/CVE-2022-22099/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-22098](https://insights.sbomify.com/CVE-2022-22098/): Memory corruption in Snapdragon Auto (high 8.4)
- [CVE-2022-22097](https://insights.sbomify.com/CVE-2022-22097/): Use after free in Snapdragon Consumer IOT (high 8.4)
- [CVE-2022-22096](https://insights.sbomify.com/CVE-2022-22096/): Memory corruption in Snapdragon Connectivity, Snapdragon Mobile (critical 9.8)
- [CVE-2022-22095](https://insights.sbomify.com/CVE-2022-22095/): Use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 8.4)
- [CVE-2022-22094](https://insights.sbomify.com/CVE-2022-22094/): Race condition in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2022-22093](https://insights.sbomify.com/CVE-2022-22093/): Race condition in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2022-22092](https://insights.sbomify.com/CVE-2022-22092/): Use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile (high 7.8)
- [CVE-2022-22091](https://insights.sbomify.com/CVE-2022-22091/): Denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (high 7.5)
- [CVE-2022-22090](https://insights.sbomify.com/CVE-2022-22090/): Use after free in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile (high 8.4)
- [CVE-2022-22089](https://insights.sbomify.com/CVE-2022-22089/): Memory corruption in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-22088](https://insights.sbomify.com/CVE-2022-22088/): Integer Overflow to Buffer Overflow in Bluetooth HOST (critical 9.8)
- [CVE-2022-22087](https://insights.sbomify.com/CVE-2022-22087/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-22086](https://insights.sbomify.com/CVE-2022-22086/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.3)
- [CVE-2022-22085](https://insights.sbomify.com/CVE-2022-22085/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22084](https://insights.sbomify.com/CVE-2022-22084/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22083](https://insights.sbomify.com/CVE-2022-22083/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 7.5)
- [CVE-2022-22082](https://insights.sbomify.com/CVE-2022-22082/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22081](https://insights.sbomify.com/CVE-2022-22081/): Integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables (high 8.4)
- [CVE-2022-22080](https://insights.sbomify.com/CVE-2022-22080/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 8.4)
- [CVE-2022-2208](https://insights.sbomify.com/CVE-2022-2208/): NULL Pointer Dereference in vim/vim (high 7.8)
- [CVE-2022-22079](https://insights.sbomify.com/CVE-2022-22079/): Buffer Over-read in BOOT (medium 4.6)
- [CVE-2022-22078](https://insights.sbomify.com/CVE-2022-22078/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables (medium 4.6)
- [CVE-2022-22077](https://insights.sbomify.com/CVE-2022-22077/): Use after free in Snapdragon Mobile (high 8.4)
- [CVE-2022-22076](https://insights.sbomify.com/CVE-2022-22076/): Cryptographic issue in Core (high 7.1)
- [CVE-2022-22075](https://insights.sbomify.com/CVE-2022-22075/): Information Exposure in Graphics (medium 6.2)
- [CVE-2022-22074](https://insights.sbomify.com/CVE-2022-22074/): Integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables (high 8.4)
- [CVE-2022-22072](https://insights.sbomify.com/CVE-2022-22072/): Memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music (high 7.8)
- [CVE-2022-22071](https://insights.sbomify.com/CVE-2022-22071/): Qualcomm Multiple Chipsets Use-After-Free (high 8.4, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/394/