# Vulnerabilities published in 2022


- [CVE-2022-2120](https://insights.sbomify.com/CVE-2022-2120/): OFFIS DCMTK Path Traversal (high 7.5)
- [CVE-2022-21199](https://insights.sbomify.com/CVE-2022-21199/): Hardcoded credentials in reolink:rlc-410w firmware (high 7.5)
- [CVE-2022-21198](https://insights.sbomify.com/CVE-2022-21198/): Race condition in Intel(R) Processors (high 7.9)
- [CVE-2022-21197](https://insights.sbomify.com/CVE-2022-21197/): Denial of service in Intel(R) PROSet/Wireless WiFi products (high 7.5)
- [CVE-2022-21196](https://insights.sbomify.com/CVE-2022-21196/): Airspan Networks Mimosa Improper Authorization (critical 10.0)
- [CVE-2022-21195](https://insights.sbomify.com/CVE-2022-21195/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2022-21194](https://insights.sbomify.com/CVE-2022-21194/): Hardcoded credentials in CENTUM VP (critical 9.8)
- [CVE-2022-21193](https://insights.sbomify.com/CVE-2022-21193/): Path traversal in TransmitMail (high 7.5)
- [CVE-2022-21192](https://insights.sbomify.com/CVE-2022-21192/): Directory Traversal vulnerability in serve-lite (high 7.5)
- [CVE-2022-21191](https://insights.sbomify.com/CVE-2022-21191/): global-modules-path Command Injection vulnerability (high 7.4)
- [CVE-2022-21190](https://insights.sbomify.com/CVE-2022-21190/): Prototype Pollution (high 7.5)
- [CVE-2022-2119](https://insights.sbomify.com/CVE-2022-2119/): OFFIS DCMTK Path Traversal (high 7.5)
- [CVE-2022-21189](https://insights.sbomify.com/CVE-2022-21189/): Prototype Pollution (high 7.3)
- [CVE-2022-21187](https://insights.sbomify.com/CVE-2022-21187/): Command Injection (high 8.1)
- [CVE-2022-21186](https://insights.sbomify.com/CVE-2022-21186/): Arbitrary Command Injection (critical 9.8)
- [CVE-2022-21184](https://insights.sbomify.com/CVE-2022-21184/): Information disclosure in Atvise (medium 5.9)
- [CVE-2022-21182](https://insights.sbomify.com/CVE-2022-21182/): Privilege escalation in InRouter302 (high 7.4)
- [CVE-2022-21181](https://insights.sbomify.com/CVE-2022-21181/): Privilege escalation in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products (high 7.8)
- [CVE-2022-21180](https://insights.sbomify.com/CVE-2022-21180/): Denial of service in Intel(R) Processors (medium 5.5)
- [CVE-2022-2118](https://insights.sbomify.com/CVE-2022-2118/): 404s < 3.5.1 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-21179](https://insights.sbomify.com/CVE-2022-21179/): Cross-site request forgery in EC-CUBE plugin 'Mail Magazine Management Plugin' (medium 4.3)
- [CVE-2022-21178](https://insights.sbomify.com/CVE-2022-21178/): Command injection in LinkHub Mesh Wifi (critical 9.6)
- [CVE-2022-21177](https://insights.sbomify.com/CVE-2022-21177/): Path traversal in CENTUM CS 3000 (high 8.1)
- [CVE-2022-21176](https://insights.sbomify.com/CVE-2022-21176/): Airspan Networks Mimosa SQL Injection (high 8.6)
- [CVE-2022-21174](https://insights.sbomify.com/CVE-2022-21174/): Privilege escalation in Intel(R) Quartus(R) Prime Pro Edition (high 7.8)
- [CVE-2022-21173](https://insights.sbomify.com/CVE-2022-21173/): Command injection in ELECOM LAN routers (high 8.8)
- [CVE-2022-21172](https://insights.sbomify.com/CVE-2022-21172/): Memory corruption in Intel(R) PROSet/Wireless WiFi products (medium 6.7)
- [CVE-2022-21170](https://insights.sbomify.com/CVE-2022-21170/): Security feature bypass in i-FILTER, i-FILTER Browser & Cloud MultiAgent for Windows, and D-SPA using i-FILTER (low 3.7)
- [CVE-2022-2117](https://insights.sbomify.com/CVE-2022-2117/): GiveWP – Donation Plugin and Fundraising Platform <= 2.20.2 - Sensitive Information Disclosure (medium 5.3)
- [CVE-2022-21169](https://insights.sbomify.com/CVE-2022-21169/): Prototype Pollution (high 7.3)
- [CVE-2022-21168](https://insights.sbomify.com/CVE-2022-21168/): ICSA-22-090-03 Fuji Electric Alpha5 (low 3.3)
- [CVE-2022-21167](https://insights.sbomify.com/CVE-2022-21167/): Arbitrary Code Execution (high 7.5)
- [CVE-2022-21166](https://insights.sbomify.com/CVE-2022-21166/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-21165](https://insights.sbomify.com/CVE-2022-21165/): Arbitrary Command Injection (critical 9.8)
- [CVE-2022-21164](https://insights.sbomify.com/CVE-2022-21164/): Denial of Service (DoS) (low 3.7)
- [CVE-2022-21163](https://insights.sbomify.com/CVE-2022-21163/): Missing authorization in Crypto API Toolkit for Intel(R) SGX (high 8.4)
- [CVE-2022-21162](https://insights.sbomify.com/CVE-2022-21162/): Privilege escalation in Intel(R) HDMI Firmware Update tool for NUC (medium 6.7)
- [CVE-2022-21160](https://insights.sbomify.com/CVE-2022-21160/): Memory corruption in Intel(R) PROSet/Wireless WiFi products (high 7.5)
- [CVE-2022-2116](https://insights.sbomify.com/CVE-2022-2116/): Elementor Contact Form DB < 1.8.0 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-21159](https://insights.sbomify.com/CVE-2022-21159/): Denial of service in libiec61850 (high 7.5)
- [CVE-2022-21158](https://insights.sbomify.com/CVE-2022-21158/): Cross-site scripting in MarkText (medium 5.4)
- [CVE-2022-21157](https://insights.sbomify.com/CVE-2022-21157/): Missing authorization in Intel(R) Smart Campus Android application (medium 5.5)
- [CVE-2022-21156](https://insights.sbomify.com/CVE-2022-21156/): Memory corruption in Intel(R) Trace Analyzer and Collector (medium 5.5)
- [CVE-2022-21155](https://insights.sbomify.com/CVE-2022-21155/): Fernhill SCADA Uncontrolled Resource Consumption (high 7.5)
- [CVE-2022-21154](https://insights.sbomify.com/CVE-2022-21154/): Integer overflow in Leadtools (high 8.8)
- [CVE-2022-21153](https://insights.sbomify.com/CVE-2022-21153/): Missing authorization in Intel(R) Capital Global Summit Android application (medium 5.5)
- [CVE-2022-21152](https://insights.sbomify.com/CVE-2022-21152/): Missing authorization in Intel(R) Edge Insights for Industrial software (medium 5.5)
- [CVE-2022-21151](https://insights.sbomify.com/CVE-2022-21151/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-2115](https://insights.sbomify.com/CVE-2022-2115/): Popup Anything < 2.1.7 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2022-21149](https://insights.sbomify.com/CVE-2022-21149/): Cross-site Scripting (XSS) (medium 5.4)
- [CVE-2022-21148](https://insights.sbomify.com/CVE-2022-21148/): Privilege escalation in Intel(R) Edge Insights for Industrial software (high 7.8)
- [CVE-2022-21147](https://insights.sbomify.com/CVE-2022-21147/): Memory corruption in Alyac (medium 5.0)
- [CVE-2022-21146](https://insights.sbomify.com/CVE-2022-21146/): ICSA-22-062-01 IPCOMM ipDIO (medium 6.3)
- [CVE-2022-21145](https://insights.sbomify.com/CVE-2022-21145/): Cross-site scripting in lansweeper (critical 9.1)
- [CVE-2022-21144](https://insights.sbomify.com/CVE-2022-21144/): Denial of Service (DoS) (high 7.5)
- [CVE-2022-21143](https://insights.sbomify.com/CVE-2022-21143/): Airspan Networks Mimosa OS Command Injection (high 7.5)
- [CVE-2022-21142](https://insights.sbomify.com/CVE-2022-21142/): Auth bypass in a-blog cms (critical 9.8)
- [CVE-2022-21141](https://insights.sbomify.com/CVE-2022-21141/): Airspan Networks Mimosa Incorrect Authorization (critical 10.0)
- [CVE-2022-21140](https://insights.sbomify.com/CVE-2022-21140/): Missing authorization in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products (medium 5.5)
- [CVE-2022-2114](https://insights.sbomify.com/CVE-2022-2114/): Data Tables Generator by Supsystic < 1.10.20 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-21139](https://insights.sbomify.com/CVE-2022-21139/): Weak cryptography in Intel(R) PROSet/Wireless WiFi products (high 8.8)
- [CVE-2022-21137](https://insights.sbomify.com/CVE-2022-21137/): Omron CX-One (high 7.8)
- [CVE-2022-21136](https://insights.sbomify.com/CVE-2022-21136/): Denial of service in Intel(R) Xeon(R) Processors (medium 5.5)
- [CVE-2022-21134](https://insights.sbomify.com/CVE-2022-21134/): Security feature bypass in reolink:rlc-410w firmware (high 8.3)
- [CVE-2022-21133](https://insights.sbomify.com/CVE-2022-21133/): Memory corruption in Intel(R) Trace Analyzer and Collector (medium 5.5)
- [CVE-2022-21132](https://insights.sbomify.com/CVE-2022-21132/): Path traversal in pfSense-pkg-WireGuard (medium 6.5)
- [CVE-2022-21131](https://insights.sbomify.com/CVE-2022-21131/): Missing authorization in Intel(R) Xeon(R) Processors (medium 5.5)
- [CVE-2022-2113](https://insights.sbomify.com/CVE-2022-2113/): Cross-site Scripting (XSS) - Stored in inventree/inventree (high 8.4)
- [CVE-2022-21129](https://insights.sbomify.com/CVE-2022-21129/): nemo-appium vulnerable to OS Command Injection (high 7.4)
- [CVE-2022-21128](https://insights.sbomify.com/CVE-2022-21128/): Privilege escalation in Intel(R) Advisor software (high 7.8)
- [CVE-2022-21127](https://insights.sbomify.com/CVE-2022-21127/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-21126](https://insights.sbomify.com/CVE-2022-21126/): Creation of Temporary File in Directory with Insecure Permissions (high 7.3)
- [CVE-2022-21125](https://insights.sbomify.com/CVE-2022-21125/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-21124](https://insights.sbomify.com/CVE-2022-21124/): Memory corruption in CX-Programmer (high 7.8)
- [CVE-2022-21123](https://insights.sbomify.com/CVE-2022-21123/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-21122](https://insights.sbomify.com/CVE-2022-21122/): Arbitrary Code Execution (critical 9.0)
- [CVE-2022-2112](https://insights.sbomify.com/CVE-2022-2112/): Improper Neutralization of Formula Elements in a CSV File in inventree/inventree (critical 9.0)
- [CVE-2022-2111](https://insights.sbomify.com/CVE-2022-2111/): Unrestricted Upload of File with Dangerous Type in inventree/inventree (critical 9.0)
- [CVE-2022-2108](https://insights.sbomify.com/CVE-2022-2108/): Wbcom Designs – BuddyPress Group Reviews <= 2.8.3 - Unauthorized AJAX Actions due to Nonce Bypass (medium 6.5)
- [CVE-2022-2107](https://insights.sbomify.com/CVE-2022-2107/): ICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials (critical 9.8)
- [CVE-2022-2106](https://insights.sbomify.com/CVE-2022-2106/): Elcomplus SmartICS Path Traversal (low 3.8)
- [CVE-2022-2105](https://insights.sbomify.com/CVE-2022-2105/): Secheron SEPCOS Control and Protection Relay (critical 9.4)
- [CVE-2022-2104](https://insights.sbomify.com/CVE-2022-2104/): Secheron SEPCOS Control and Protection Relay (critical 9.9)
- [CVE-2022-2103](https://insights.sbomify.com/CVE-2022-2103/): Secheron SEPCOS Control and Protection Relay (critical 9.8)
- [CVE-2022-2102](https://insights.sbomify.com/CVE-2022-2102/): Secheron SEPCOS Control and Protection Relay (critical 9.4)
- [CVE-2022-2101](https://insights.sbomify.com/CVE-2022-2101/): Download Manager <= 3.2.46 - Contributor+ Cross-Site Scripting (medium 6.4)
- [CVE-2022-2100](https://insights.sbomify.com/CVE-2022-2100/): Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2022-2099](https://insights.sbomify.com/CVE-2022-2099/): WooCommerce < 6.6.0 - Admin+ Stored HTML Injection (medium 4.8)
- [CVE-2022-2098](https://insights.sbomify.com/CVE-2022-2098/): Weak Password Requirements in kromitgmbh/titra (high 7.1)
- [CVE-2022-2097](https://insights.sbomify.com/CVE-2022-2097/): AES OCB fails to encrypt some bytes (medium 5.3)
- [CVE-2022-20969](https://insights.sbomify.com/CVE-2022-20969/): Cross-site scripting in Cisco Umbrella Dashboard (medium 4.8)
- [CVE-2022-20968](https://insights.sbomify.com/CVE-2022-20968/): Memory corruption in Cisco Session Initiation Protocol (SIP) Software (high 8.1)
- [CVE-2022-20967](https://insights.sbomify.com/CVE-2022-20967/): Cross-site scripting in Cisco Identity Services Engine Software (medium 4.8)
- [CVE-2022-20966](https://insights.sbomify.com/CVE-2022-20966/): Cross-site scripting in Cisco Identity Services Engine Software (medium 5.4)
- [CVE-2022-20965](https://insights.sbomify.com/CVE-2022-20965/): Missing authorization in Cisco Identity Services Engine Software (medium 4.3)
- [CVE-2022-20964](https://insights.sbomify.com/CVE-2022-20964/): Command injection in Cisco Identity Services Engine Software (medium 6.3)
- [CVE-2022-20963](https://insights.sbomify.com/CVE-2022-20963/): Cross-site scripting in Cisco Identity Services Engine Software (medium 5.4)
- [CVE-2022-20962](https://insights.sbomify.com/CVE-2022-20962/): Path traversal in Cisco Identity Services Engine Software (low 3.8)
- [CVE-2022-20961](https://insights.sbomify.com/CVE-2022-20961/): Cross-site request forgery in Cisco Identity Services Engine Software (high 8.8)
- [CVE-2022-20960](https://insights.sbomify.com/CVE-2022-20960/): Denial of service in Cisco Secure Email (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/404/