# Vulnerabilities published in 2022


- [CVE-2022-0129](https://insights.sbomify.com/CVE-2022-0129/): DLL Highjack vulnerability in McAfee TechCheck utility (high 7.4)
- [CVE-2022-0128](https://insights.sbomify.com/CVE-2022-0128/): Out-of-bounds Read in vim/vim (high 7.1)
- [CVE-2022-0125](https://insights.sbomify.com/CVE-2022-0125/): Missing authorization in GitLab (medium 4.3)
- [CVE-2022-0124](https://insights.sbomify.com/CVE-2022-0124/): Other in GitLab (medium 4.3)
- [CVE-2022-0123](https://insights.sbomify.com/CVE-2022-0123/): Security feature bypass in GitLab (medium 5.9)
- [CVE-2022-0122](https://insights.sbomify.com/CVE-2022-0122/): Open Redirect in digitalbazaar/forge (medium 5.3)
- [CVE-2022-0121](https://insights.sbomify.com/CVE-2022-0121/): Cross-site Scripting in hoppscotch/hoppscotch (high 8.0)
- [CVE-2022-0120](https://insights.sbomify.com/CVE-2022-0120/): Information disclosure in Chrome (medium 6.5)
- [CVE-2022-0118](https://insights.sbomify.com/CVE-2022-0118/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2022-0117](https://insights.sbomify.com/CVE-2022-0117/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-0116](https://insights.sbomify.com/CVE-2022-0116/): Other in Chrome (medium 4.3)
- [CVE-2022-0115](https://insights.sbomify.com/CVE-2022-0115/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-0114](https://insights.sbomify.com/CVE-2022-0114/): Memory corruption in Chrome (high 8.1)
- [CVE-2022-0113](https://insights.sbomify.com/CVE-2022-0113/): Information disclosure in Chrome (medium 6.5)
- [CVE-2022-0112](https://insights.sbomify.com/CVE-2022-0112/): Other in Chrome (medium 4.3)
- [CVE-2022-0111](https://insights.sbomify.com/CVE-2022-0111/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-0110](https://insights.sbomify.com/CVE-2022-0110/): Other in Chrome (medium 4.3)
- [CVE-2022-0109](https://insights.sbomify.com/CVE-2022-0109/): Information disclosure in Chrome (medium 6.5)
- [CVE-2022-0108](https://insights.sbomify.com/CVE-2022-0108/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2022-0107](https://insights.sbomify.com/CVE-2022-0107/): Use after free in Chrome (high 8.8)
- [CVE-2022-0106](https://insights.sbomify.com/CVE-2022-0106/): Use after free in Chrome (high 8.8)
- [CVE-2022-0105](https://insights.sbomify.com/CVE-2022-0105/): Use after free in Chrome (high 8.8)
- [CVE-2022-0104](https://insights.sbomify.com/CVE-2022-0104/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-0103](https://insights.sbomify.com/CVE-2022-0103/): Use after free in Chrome (high 8.8)
- [CVE-2022-0102](https://insights.sbomify.com/CVE-2022-0102/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-0101](https://insights.sbomify.com/CVE-2022-0101/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-0100](https://insights.sbomify.com/CVE-2022-0100/): Memory corruption in Chrome (high 8.8)
- [CVE-2022-0099](https://insights.sbomify.com/CVE-2022-0099/): Use after free in Chrome (high 8.8)
- [CVE-2022-0098](https://insights.sbomify.com/CVE-2022-0098/): Use after free in Chrome (high 8.8)
- [CVE-2022-0097](https://insights.sbomify.com/CVE-2022-0097/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2022-0096](https://insights.sbomify.com/CVE-2022-0096/): Use after free in Chrome (high 8.8)
- [CVE-2022-0093](https://insights.sbomify.com/CVE-2022-0093/): Auth bypass in GitLab (low 3.5)
- [CVE-2022-0090](https://insights.sbomify.com/CVE-2022-0090/): Security feature bypass in GitLab (medium 6.5)
- [CVE-2022-0088](https://insights.sbomify.com/CVE-2022-0088/): Cross-Site Request Forgery (CSRF) in yourls/yourls (low 3.5)
- [CVE-2022-0087](https://insights.sbomify.com/CVE-2022-0087/): Cross-site Scripting (XSS) - Reflected in keystonejs/keystone (high 7.1)
- [CVE-2022-0086](https://insights.sbomify.com/CVE-2022-0086/): Server-Side Request Forgery (SSRF) in transloadit/uppy (high 8.2)
- [CVE-2022-0085](https://insights.sbomify.com/CVE-2022-0085/): Server-Side Request Forgery (SSRF) in dompdf/dompdf (low 3.7)
- [CVE-2022-0084](https://insights.sbomify.com/CVE-2022-0084/): XNIO `notifyReadClosed` method logging message to unexpected end (high 7.5)
- [CVE-2022-0083](https://insights.sbomify.com/CVE-2022-0083/): Generation of Error Message Containing Sensitive Information in livehelperchat/livehelperchat (high 7.3)
- [CVE-2022-0080](https://insights.sbomify.com/CVE-2022-0080/): Heap-based Buffer Overflow in mruby/mruby (high 8.2)
- [CVE-2022-0079](https://insights.sbomify.com/CVE-2022-0079/): Generation of Error Message Containing Sensitive Information in star7th/showdoc (medium 5.3)
- [CVE-2022-0074](https://insights.sbomify.com/CVE-2022-0074/): Privilege Escalation in OpenLiteSpeed Web Server (high 8.8)
- [CVE-2022-0073](https://insights.sbomify.com/CVE-2022-0073/): Authenticated Remote Code Execution in OpenLiteSpeed Web Server (high 8.8)
- [CVE-2022-0072](https://insights.sbomify.com/CVE-2022-0072/): Directory Traversal in OpenLiteSpeed Web Server (medium 5.8)
- [CVE-2022-0071](https://insights.sbomify.com/CVE-2022-0071/): Hotdog Container Escape (high 8.8)
- [CVE-2022-0070](https://insights.sbomify.com/CVE-2022-0070/): Log4j hot patch package privilege escalation (high 8.8)
- [CVE-2022-0031](https://insights.sbomify.com/CVE-2022-0031/): Cortex XSOAR: Local Privilege Escalation (PE) Vulnerability in Cortex XSOAR Engine (medium 6.7)
- [CVE-2022-0030](https://insights.sbomify.com/CVE-2022-0030/): PAN-OS: Authentication Bypass in Web Interface (high 8.1)
- [CVE-2022-0029](https://insights.sbomify.com/CVE-2022-0029/): Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File (medium 5.5)
- [CVE-2022-0028](https://insights.sbomify.com/CVE-2022-0028/): Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service (high 8.6, exploited in the wild)
- [CVE-2022-0027](https://insights.sbomify.com/CVE-2022-0027/): Cortex XSOAR: Incorrect Authorization Vulnerability When Generating Reports (medium 4.3)
- [CVE-2022-0026](https://insights.sbomify.com/CVE-2022-0026/): Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability (medium 6.7)
- [CVE-2022-0025](https://insights.sbomify.com/CVE-2022-0025/): Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability (medium 6.7)
- [CVE-2022-0024](https://insights.sbomify.com/CVE-2022-0024/): PAN-OS: Improper Neutralization Vulnerability Leads to Unintended Program Execution During Configuration Commit (high 7.2)
- [CVE-2022-0023](https://insights.sbomify.com/CVE-2022-0023/): PAN-OS: Denial-of-Service (DoS) Vulnerability in DNS Proxy (medium 5.9)
- [CVE-2022-0022](https://insights.sbomify.com/CVE-2022-0022/): PAN-OS: Use of a Weak Cryptographic Algorithm for Stored Password Hashes (medium 4.1)
- [CVE-2022-0021](https://insights.sbomify.com/CVE-2022-0021/): GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon (low 3.3)
- [CVE-2022-0020](https://insights.sbomify.com/CVE-2022-0020/): Cortex XSOAR: Stored Cross-Site Scripting (XSS) Vulnerability in Web Interface (medium 6.8)
- [CVE-2022-0019](https://insights.sbomify.com/CVE-2022-0019/): GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux (medium 4.7)
- [CVE-2022-0018](https://insights.sbomify.com/CVE-2022-0018/): Information disclosure in GlobalProtect App (medium 6.1)
- [CVE-2022-0017](https://insights.sbomify.com/CVE-2022-0017/): GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation (high 7.0)
- [CVE-2022-0016](https://insights.sbomify.com/CVE-2022-0016/): GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon (high 7.4)
- [CVE-2022-0015](https://insights.sbomify.com/CVE-2022-0015/): Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability (high 7.8)
- [CVE-2022-0014](https://insights.sbomify.com/CVE-2022-0014/): Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session (medium 6.7)
- [CVE-2022-0013](https://insights.sbomify.com/CVE-2022-0013/): Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File (medium 5.0)
- [CVE-2022-0012](https://insights.sbomify.com/CVE-2022-0012/): Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability (medium 6.1)
- [CVE-2022-0011](https://insights.sbomify.com/CVE-2022-0011/): PAN-OS: URL Category Exceptions Match More URLs Than Intended in URL Filtering (medium 6.5)
- [CVE-2022-0010](https://insights.sbomify.com/CVE-2022-0010/): QCS 800xA Vulnerability identified in system log files (high 7.8)
- [CVE-2022-0005](https://insights.sbomify.com/CVE-2022-0005/): Information disclosure in Intel(R) Processors with SGX (low 2.4)
- [CVE-2022-0004](https://insights.sbomify.com/CVE-2022-0004/): Security feature bypass in Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT (medium 6.8)
- [CVE-2022-0002](https://insights.sbomify.com/CVE-2022-0002/): Information disclosure in Intel(R) Processors (medium 6.5)
- [CVE-2022-0001](https://insights.sbomify.com/CVE-2022-0001/): Information disclosure in Intel(R) Processors (medium 6.5)
- [ALEA-2022:2093](https://insights.sbomify.com/ALEA-2022-2093/): dhcp bug fix and enhancement update (not scored)
- [ALEA-2022:2037](https://insights.sbomify.com/ALEA-2022-2037/): alsa-sof-firmware bug fix and enhancement update (not scored)
- [ALEA-2022:2029](https://insights.sbomify.com/ALEA-2022-2029/): libseccomp bug fix and enhancement update (not scored)
- [ALEA-2022:2026](https://insights.sbomify.com/ALEA-2022-2026/): strace bug fix and enhancement update (not scored)
- [ALEA-2022:2014](https://insights.sbomify.com/ALEA-2022-2014/): RDMA stack bug fix and enhancement update (not scored)
- [ALEA-2022:2012](https://insights.sbomify.com/ALEA-2022-2012/): tzdata bug fix and enhancement update (not scored)
- [ALEA-2022:2010](https://insights.sbomify.com/ALEA-2022-2010/): mcelog bug fix and enhancement update (not scored)
- [ALEA-2022:1998](https://insights.sbomify.com/ALEA-2022-1998/): sos bug fix and enhancement update (not scored)
- [ALEA-2022:1990](https://insights.sbomify.com/ALEA-2022-1990/): rasdaemon bug fix and enhancement update (not scored)
- [ALEA-2022:1985](https://insights.sbomify.com/ALEA-2022-1985/): NetworkManager bug fix and enhancement update (not scored)
- [ALEA-2022:1978](https://insights.sbomify.com/ALEA-2022-1978/): pcs bug fix and enhancement update (not scored)
- [ALEA-2022:1963](https://insights.sbomify.com/ALEA-2022-1963/): new module: log4j:2 (not scored)
- [ALEA-2022:1962](https://insights.sbomify.com/ALEA-2022-1962/): vulkan bug fix and enhancement update (not scored)
- [ALEA-2022:1957](https://insights.sbomify.com/ALEA-2022-1957/): perl:5.32 metadata for the AlmaLinux 8 module matrix (not scored)
- [ALEA-2022:1956](https://insights.sbomify.com/ALEA-2022-1956/): perl:5.32 metadata for the AlmaLinux 8 module matrix (not scored)
- [ALEA-2022:1955](https://insights.sbomify.com/ALEA-2022-1955/): perl:5.32 metadata for the AlmaLinux 8 module matrix (not scored)
- [ALEA-2022:1954](https://insights.sbomify.com/ALEA-2022-1954/): perl:5.32 metadata for the AlmaLinux 8 module matrix (not scored)
- [ALEA-2022:1943](https://insights.sbomify.com/ALEA-2022-1943/): pmdk:1_fileformat_v6 bug fix and enhancement update (not scored)
- [ALEA-2022:1926](https://insights.sbomify.com/ALEA-2022-1926/): libreswan bug fix and enhancement update (not scored)
- [ALEA-2022:1925](https://insights.sbomify.com/ALEA-2022-1925/): xdp-tools bug fix and enhancement update (not scored)
- [ALEA-2022:1904](https://insights.sbomify.com/ALEA-2022-1904/): new module: php:8.0 (not scored)
- [ALEA-2022:1884](https://insights.sbomify.com/ALEA-2022-1884/): idm:client and idm:DL1 bug fix and enhancement update (not scored)
- [ALEA-2022:1881](https://insights.sbomify.com/ALEA-2022-1881/): nispor bug fix and enhancement update (not scored)
- [ALEA-2022:1869](https://insights.sbomify.com/ALEA-2022-1869/): new module: perl:5.32 (not scored)
- [ALEA-2022:1786](https://insights.sbomify.com/ALEA-2022-1786/): rig bug fix and enhancement update (not scored)
- [ALEA-2022:1783](https://insights.sbomify.com/ALEA-2022-1783/): annobin bug fix and enhancement update (not scored)
- [ALEA-2022:1774](https://insights.sbomify.com/ALEA-2022-1774/): open-vm-tools bug fix and enhancement update (not scored)
- [ALEA-2022:1772](https://insights.sbomify.com/ALEA-2022-1772/): nmstate bug fix and enhancement update (not scored)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/433/