# Vulnerabilities published in 2022


- [CVE-2022-20304](https://insights.sbomify.com/CVE-2022-20304/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20303](https://insights.sbomify.com/CVE-2022-20303/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20302](https://insights.sbomify.com/CVE-2022-20302/): Security feature bypass in Android (high 7.6)
- [CVE-2022-20301](https://insights.sbomify.com/CVE-2022-20301/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20300](https://insights.sbomify.com/CVE-2022-20300/): Missing authorization in Android (medium 5.5)
- [CVE-2022-2030](https://insights.sbomify.com/CVE-2022-2030/): Path traversal in ATP series firmware (medium 6.5)
- [CVE-2022-20299](https://insights.sbomify.com/CVE-2022-20299/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20298](https://insights.sbomify.com/CVE-2022-20298/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20297](https://insights.sbomify.com/CVE-2022-20297/): Security feature bypass in Android (high 7.8)
- [CVE-2022-20296](https://insights.sbomify.com/CVE-2022-20296/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20295](https://insights.sbomify.com/CVE-2022-20295/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20294](https://insights.sbomify.com/CVE-2022-20294/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20293](https://insights.sbomify.com/CVE-2022-20293/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20292](https://insights.sbomify.com/CVE-2022-20292/): Security feature bypass in Android (high 7.8)
- [CVE-2022-20291](https://insights.sbomify.com/CVE-2022-20291/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20290](https://insights.sbomify.com/CVE-2022-20290/): Missing authorization in Android (medium 5.5)
- [CVE-2022-2029](https://insights.sbomify.com/CVE-2022-2029/): Cross-site Scripting (XSS) - DOM in kromitgmbh/titra (high 8.2)
- [CVE-2022-20289](https://insights.sbomify.com/CVE-2022-20289/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20288](https://insights.sbomify.com/CVE-2022-20288/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20287](https://insights.sbomify.com/CVE-2022-20287/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20286](https://insights.sbomify.com/CVE-2022-20286/): Security feature bypass in Android (high 7.8)
- [CVE-2022-20285](https://insights.sbomify.com/CVE-2022-20285/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20284](https://insights.sbomify.com/CVE-2022-20284/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20283](https://insights.sbomify.com/CVE-2022-20283/): Integer overflow in Android (high 8.8)
- [CVE-2022-20282](https://insights.sbomify.com/CVE-2022-20282/): Missing authorization in Android (high 7.8)
- [CVE-2022-20281](https://insights.sbomify.com/CVE-2022-20281/): Missing authorization in Android (high 7.8)
- [CVE-2022-20280](https://insights.sbomify.com/CVE-2022-20280/): SQL injection in Android (low 3.3)
- [CVE-2022-2028](https://insights.sbomify.com/CVE-2022-2028/): Cross-site Scripting (XSS) - Generic in kromitgmbh/titra (high 8.2)
- [CVE-2022-20279](https://insights.sbomify.com/CVE-2022-20279/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20278](https://insights.sbomify.com/CVE-2022-20278/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20277](https://insights.sbomify.com/CVE-2022-20277/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20276](https://insights.sbomify.com/CVE-2022-20276/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20275](https://insights.sbomify.com/CVE-2022-20275/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20274](https://insights.sbomify.com/CVE-2022-20274/): Missing authorization in Android (high 7.8)
- [CVE-2022-20273](https://insights.sbomify.com/CVE-2022-20273/): Memory corruption in Android (medium 6.5)
- [CVE-2022-20272](https://insights.sbomify.com/CVE-2022-20272/): Misconfiguration in Android (medium 5.5)
- [CVE-2022-20271](https://insights.sbomify.com/CVE-2022-20271/): Privilege escalation in Android (high 7.8)
- [CVE-2022-20270](https://insights.sbomify.com/CVE-2022-20270/): Information disclosure in Android (medium 5.5)
- [CVE-2022-2027](https://insights.sbomify.com/CVE-2022-2027/): Improper Neutralization of Formula Elements in a CSV File in kromitgmbh/titra (high 8.0)
- [CVE-2022-20269](https://insights.sbomify.com/CVE-2022-20269/): Memory corruption in Android (medium 6.8)
- [CVE-2022-20268](https://insights.sbomify.com/CVE-2022-20268/): Privilege escalation in Android (high 7.8)
- [CVE-2022-20267](https://insights.sbomify.com/CVE-2022-20267/): Missing authorization in Android (low 3.3)
- [CVE-2022-20266](https://insights.sbomify.com/CVE-2022-20266/): Privilege escalation in Android (medium 5.0)
- [CVE-2022-20265](https://insights.sbomify.com/CVE-2022-20265/): Security feature bypass in Android (medium 4.6)
- [CVE-2022-20264](https://insights.sbomify.com/CVE-2022-20264/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20263](https://insights.sbomify.com/CVE-2022-20263/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20262](https://insights.sbomify.com/CVE-2022-20262/): Missing authorization in Android (low 3.3)
- [CVE-2022-20261](https://insights.sbomify.com/CVE-2022-20261/): Missing authorization in Android (low 2.3)
- [CVE-2022-20260](https://insights.sbomify.com/CVE-2022-20260/): Denial of service in Android (medium 5.5)
- [CVE-2022-2026](https://insights.sbomify.com/CVE-2022-2026/): Cross-site Scripting (XSS) - Stored in kromitgmbh/titra (high 8.2)
- [CVE-2022-20259](https://insights.sbomify.com/CVE-2022-20259/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20258](https://insights.sbomify.com/CVE-2022-20258/): Security feature bypass in Android (high 7.8)
- [CVE-2022-20257](https://insights.sbomify.com/CVE-2022-20257/): Auth bypass in Android (low 3.3)
- [CVE-2022-20256](https://insights.sbomify.com/CVE-2022-20256/): Race condition in Android (medium 6.4)
- [CVE-2022-20255](https://insights.sbomify.com/CVE-2022-20255/): Missing authorization in Android (medium 4.4)
- [CVE-2022-20254](https://insights.sbomify.com/CVE-2022-20254/): Privilege escalation in Android (high 8.8)
- [CVE-2022-20253](https://insights.sbomify.com/CVE-2022-20253/): Denial of service in Android (medium 6.5)
- [CVE-2022-20252](https://insights.sbomify.com/CVE-2022-20252/): Information disclosure in Android (low 3.3)
- [CVE-2022-20251](https://insights.sbomify.com/CVE-2022-20251/): Information disclosure in Android (low 3.3)
- [CVE-2022-20250](https://insights.sbomify.com/CVE-2022-20250/): Missing authorization in Android (high 7.8)
- [CVE-2022-2025](https://insights.sbomify.com/CVE-2022-2025/): Grandstream GSD3710 Stack-based Buffer Overflow (critical 9.8)
- [CVE-2022-20249](https://insights.sbomify.com/CVE-2022-20249/): Information disclosure in Android (low 3.3)
- [CVE-2022-20248](https://insights.sbomify.com/CVE-2022-20248/): Security feature bypass in Android (high 7.8)
- [CVE-2022-20247](https://insights.sbomify.com/CVE-2022-20247/): Memory corruption in Android (high 7.5)
- [CVE-2022-20246](https://insights.sbomify.com/CVE-2022-20246/): Privilege escalation in Android (high 7.8)
- [CVE-2022-20245](https://insights.sbomify.com/CVE-2022-20245/): Information disclosure in Android (low 2.4)
- [CVE-2022-20244](https://insights.sbomify.com/CVE-2022-20244/): Memory corruption in Android (high 7.5)
- [CVE-2022-20243](https://insights.sbomify.com/CVE-2022-20243/): Information disclosure in Android (medium 4.4)
- [CVE-2022-20242](https://insights.sbomify.com/CVE-2022-20242/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20241](https://insights.sbomify.com/CVE-2022-20241/): Information disclosure in Android (low 3.3)
- [CVE-2022-20240](https://insights.sbomify.com/CVE-2022-20240/): Missing authorization in Android (low 2.3)
- [CVE-2022-2024](https://insights.sbomify.com/CVE-2022-2024/): OS Command Injection in gogs/gogs (critical 9.8)
- [CVE-2022-20239](https://insights.sbomify.com/CVE-2022-20239/): Privilege escalation in Android (medium 4.2)
- [CVE-2022-20238](https://insights.sbomify.com/CVE-2022-20238/): Memory corruption in Android (critical 9.8)
- [CVE-2022-20237](https://insights.sbomify.com/CVE-2022-20237/): Memory corruption in Android (critical 9.8)
- [CVE-2022-20236](https://insights.sbomify.com/CVE-2022-20236/): Memory corruption in Android (high 7.5)
- [CVE-2022-20235](https://insights.sbomify.com/CVE-2022-20235/): Memory corruption in Android (medium 5.5)
- [CVE-2022-20234](https://insights.sbomify.com/CVE-2022-20234/): Missing authorization in Android (high 7.5)
- [CVE-2022-20233](https://insights.sbomify.com/CVE-2022-20233/): Memory corruption in Android (medium 6.7)
- [CVE-2022-20231](https://insights.sbomify.com/CVE-2022-20231/): Memory corruption in Android (medium 6.7)
- [CVE-2022-20230](https://insights.sbomify.com/CVE-2022-20230/): Information disclosure in Android (medium 5.5)
- [CVE-2022-2023](https://insights.sbomify.com/CVE-2022-2023/): Incorrect Use of Privileged APIs in polonel/trudesk (critical 10.0)
- [CVE-2022-20229](https://insights.sbomify.com/CVE-2022-20229/): Memory corruption in Android (critical 9.8)
- [CVE-2022-20228](https://insights.sbomify.com/CVE-2022-20228/): Use after free in Android (medium 6.5)
- [CVE-2022-20227](https://insights.sbomify.com/CVE-2022-20227/): Memory corruption in Android (medium 5.5)
- [CVE-2022-20226](https://insights.sbomify.com/CVE-2022-20226/): Other in Android (low 3.9)
- [CVE-2022-20225](https://insights.sbomify.com/CVE-2022-20225/): Missing authorization in Android (medium 5.5)
- [CVE-2022-20224](https://insights.sbomify.com/CVE-2022-20224/): Memory corruption in Android (high 7.5)
- [CVE-2022-20223](https://insights.sbomify.com/CVE-2022-20223/): Privilege escalation in Android (high 7.8)
- [CVE-2022-20222](https://insights.sbomify.com/CVE-2022-20222/): Memory corruption in Android (critical 9.8)
- [CVE-2022-20221](https://insights.sbomify.com/CVE-2022-20221/): Memory corruption in Android (medium 6.5)
- [CVE-2022-20220](https://insights.sbomify.com/CVE-2022-20220/): Path traversal in Android (high 7.8)
- [CVE-2022-2022](https://insights.sbomify.com/CVE-2022-2022/): Cross-site Scripting (XSS) - Stored in nocodb/nocodb (critical 9.0)
- [CVE-2022-20219](https://insights.sbomify.com/CVE-2022-20219/): Information disclosure in Android (medium 5.5)
- [CVE-2022-20218](https://insights.sbomify.com/CVE-2022-20218/): Privilege escalation in Android (high 7.8)
- [CVE-2022-20217](https://insights.sbomify.com/CVE-2022-20217/): Missing authorization in Android (medium 6.5)
- [CVE-2022-20216](https://insights.sbomify.com/CVE-2022-20216/): Misconfiguration in Android (critical 9.8)
- [CVE-2022-20215](https://insights.sbomify.com/CVE-2022-20215/): Other in Android (medium 5.5)
- [CVE-2022-20214](https://insights.sbomify.com/CVE-2022-20214/): Security feature bypass in Android (medium 4.7)
- [CVE-2022-20213](https://insights.sbomify.com/CVE-2022-20213/): Denial of service in Android (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/412/