# CVEs published 2022-01-19 231 CVEs were published on January 19, 2022: 9 critical, 39 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2021-46028](https://cve.now/CVE-2021-46028.md): In mblog \<= 3.5.0 there is a CSRF vulnerability in the background article management. (no CVSS) - [CVE-2021-46026](https://cve.now/CVE-2021-46026.md): mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background… (no CVSS) - [CVE-2021-46027](https://cve.now/CVE-2021-46027.md): mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. (no CVSS) - [CVE-2021-46025](https://cve.now/CVE-2021-46025.md): A Cross SIte Scripting (XSS) vulnerability exists in OneBlog \<= 2.2.8. (no CVSS) - [CVE-2021-4143](https://cve.now/CVE-2021-4143.md): Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton (CVSS 8.1, bigbluebutton/bigbluebutton) - [CVE-2022-21701](https://cve.now/CVE-2022-21701.md): Privileged Escalation in Istio (CVSS 5.0, istio) - [CVE-2022-21679](https://cve.now/CVE-2022-21679.md): Authorization Policy bypass in Istio (CVSS 6.8, istio) - [CVE-2022-21699](https://cve.now/CVE-2022-21699.md): Execution with Unnecessary Privileges in ipython (CVSS 8.2, ipython) - [CVE-2021-44777](https://cve.now/CVE-2021-44777.md): WordPress Email Tracker plugin \<= 5.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries… (CVSS 5.4, Prashant Baldha Email Tracker) - [CVE-2022-23045](https://cve.now/CVE-2022-23045.md): PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating… (no CVSS, PhpIPAM) - [CVE-2022-23046](https://cve.now/CVE-2022-23046.md): PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via… (no CVSS, PhpIPAM) - [CVE-2021-23843](https://cve.now/CVE-2021-23843.md): Lack of authentication mechanisms on the device (CVSS 8.8, Bosch AMS · Bosch APE +2) - [CVE-2021-23842](https://cve.now/CVE-2021-23842.md): Use of Hard-coded Cryptographic Key (CVSS 5.7, Bosch AMS · Bosch APE +2) - [CVE-2021-26247](https://cve.now/CVE-2021-26247.md): As an unauthenticated remote user, visit "http://\/auth\_changepassword.php?ref=\alert(1)\" to successfully… (no CVSS, Cacti) - [CVE-2021-23225](https://cve.now/CVE-2021-23225.md): Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new\_username"… (no CVSS, Cacti) - [CVE-2021-3816](https://cve.now/CVE-2021-3816.md): Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group\_prefix field during the… (no CVSS, Cacti) - [CVE-2022-22769](https://cve.now/CVE-2022-22769.md): TIBCO EBX vulnerabilities (CVSS 8.0, TIBCO Software TIBCO EBX · TIBCO Software TIBCO Product and…) - [CVE-2022-0243](https://cve.now/CVE-2022-0243.md): Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore (CVSS 7.4, orchardcms/orchardcore) - [CVE-2021-38789](https://cve.now/CVE-2021-38789.md): Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's… (no CVSS) - [CVE-2022-0274](https://cve.now/CVE-2022-0274.md): Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore (CVSS 6.8, orchardcms/orchardcore · OrchardCore.Application.Cms.Targets) - [CVE-2021-44299](https://cve.now/CVE-2021-44299.md): A reflected cross-site scripting (XSS) vulnerability in \\lib\\packages\\themes\\themes.php of Navigate CMS v2.9.4 allows authenticated… (no CVSS) - [CVE-2021-46204](https://cve.now/CVE-2021-46204.md): Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. (no CVSS) - [CVE-2021-46203](https://cve.now/CVE-2021-46203.md): Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. (no CVSS) - [CVE-2021-42810](https://cve.now/CVE-2021-42810.md): Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users (CVSS 7.8, Thales SafeNet Authentication Service) - [CVE-2022-22310](https://cve.now/CVE-2022-22310.md): IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. (CVSS 4.8, IBM WebSphere Application Server Liberty) - [CVE-2021-38788](https://cve.now/CVE-2021-38788.md): The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. (no CVSS) - [CVE-2021-46030](https://cve.now/CVE-2021-46030.md): There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS \<= v2. (no CVSS) - [CVE-2021-44837](https://cve.now/CVE-2021-44837.md): An issue was discovered in Delta RM 1.2. (no CVSS) - [CVE-2021-45808](https://cve.now/CVE-2021-45808.md): jpress v4.2.0 allows users to register an account by default. (no CVSS) - [CVE-2021-38787](https://cve.now/CVE-2021-38787.md): There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd… (no CVSS) - [CVE-2021-46104](https://cve.now/CVE-2021-46104.md): An issue was discovered in webp\_server\_go 0.4.0. (no CVSS) - [CVE-2021-38786](https://cve.now/CVE-2021-38786.md): There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash… (no CVSS) - [CVE-2022-21403](https://cve.now/CVE-2022-21403.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 6.6, Oracle Communications Operations Monitor) - [CVE-2022-21402](https://cve.now/CVE-2022-21402.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 4.8, Oracle Communications Operations Monitor) - [CVE-2022-21401](https://cve.now/CVE-2022-21401.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 6.6, Oracle Communications Operations Monitor) - [CVE-2022-21400](https://cve.now/CVE-2022-21400.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21399](https://cve.now/CVE-2022-21399.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 6.6, Oracle Communications Operations Monitor) - [CVE-2022-21398](https://cve.now/CVE-2022-21398.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21397](https://cve.now/CVE-2022-21397.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21396](https://cve.now/CVE-2022-21396.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21395](https://cve.now/CVE-2022-21395.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 7.2, Oracle Communications Operations Monitor) - [CVE-2022-21394](https://cve.now/CVE-2022-21394.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox) - [CVE-2022-21393](https://cve.now/CVE-2022-21393.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 4.3, Oracle Database - Enterprise Edition) - [CVE-2022-21392](https://cve.now/CVE-2022-21392.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). (CVSS 8.8, Oracle Enterprise Manager Base Platform) - [CVE-2022-21391](https://cve.now/CVE-2022-21391.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 9.9, Oracle Communications Billing and Revenue Management) - [CVE-2022-21390](https://cve.now/CVE-2022-21390.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 10.0, Oracle Communications Billing and Revenue Management) - [CVE-2022-21389](https://cve.now/CVE-2022-21389.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 10.0, Oracle Communications Billing and Revenue Management) - [CVE-2022-21388](https://cve.now/CVE-2022-21388.md): Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise… (CVSS 3.3, Oracle Communications Pricing Design Center) - [CVE-2022-21387](https://cve.now/CVE-2022-21387.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 5.3, Oracle Commerce Platform) - [CVE-2022-21386](https://cve.now/CVE-2022-21386.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21383](https://cve.now/CVE-2022-21383.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). (CVSS 4.3, Oracle Enterprise Session Border Controller) - [CVE-2022-21382](https://cve.now/CVE-2022-21382.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). (CVSS 7.7, Oracle Enterprise Session Border Controller) - [CVE-2022-21381](https://cve.now/CVE-2022-21381.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). (CVSS 6.4, Oracle Enterprise Session Border Controller) - [CVE-2022-21380](https://cve.now/CVE-2022-21380.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21379](https://cve.now/CVE-2022-21379.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21378](https://cve.now/CVE-2022-21378.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 5.5, Oracle MySQL Server) - [CVE-2022-21377](https://cve.now/CVE-2022-21377.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API). (CVSS 5.4, Oracle Primavera Portfolio Management) - [CVE-2022-21376](https://cve.now/CVE-2022-21376.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 5.4, Oracle Primavera Portfolio Management) - [CVE-2022-21375](https://cve.now/CVE-2022-21375.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.5, Oracle Solaris Operating System) - [CVE-2022-21374](https://cve.now/CVE-2022-21374.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21373](https://cve.now/CVE-2022-21373.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator). (CVSS 6.1, Oracle Partner Management) - [CVE-2022-21372](https://cve.now/CVE-2022-21372.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 2.7, Oracle MySQL Server) - [CVE-2022-21371](https://cve.now/CVE-2022-21371.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 7.5, Oracle WebLogic Server) - [CVE-2022-21370](https://cve.now/CVE-2022-21370.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21369](https://cve.now/CVE-2022-21369.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21368](https://cve.now/CVE-2022-21368.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). (CVSS 4.7, Oracle MySQL Server) - [CVE-2022-21367](https://cve.now/CVE-2022-21367.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). (CVSS 5.5, Oracle MySQL Server) - [CVE-2022-21366](https://cve.now/CVE-2022-21366.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21365](https://cve.now/CVE-2022-21365.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21364](https://cve.now/CVE-2022-21364.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21363](https://cve.now/CVE-2022-21363.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 6.6, Oracle MySQL Connectors · mysql:mysql-connector-java) - [CVE-2022-21362](https://cve.now/CVE-2022-21362.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21361](https://cve.now/CVE-2022-21361.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21360](https://cve.now/CVE-2022-21360.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21359](https://cve.now/CVE-2022-21359.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21358](https://cve.now/CVE-2022-21358.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 6.5, Oracle MySQL Server) - [CVE-2022-21357](https://cve.now/CVE-2022-21357.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21356](https://cve.now/CVE-2022-21356.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21355](https://cve.now/CVE-2022-21355.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21354](https://cve.now/CVE-2022-21354.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). (CVSS 6.1, Oracle iStore) - [CVE-2022-21353](https://cve.now/CVE-2022-21353.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21352](https://cve.now/CVE-2022-21352.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.9, Oracle MySQL Server) - [CVE-2022-21351](https://cve.now/CVE-2022-21351.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 7.1, Oracle MySQL Server) - [CVE-2022-21350](https://cve.now/CVE-2022-21350.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21349](https://cve.now/CVE-2022-21349.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21348](https://cve.now/CVE-2022-21348.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21347](https://cve.now/CVE-2022-21347.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21346](https://cve.now/CVE-2022-21346.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 7.5, Oracle BI Publisher) - [CVE-2022-21345](https://cve.now/CVE-2022-21345.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 6.5, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21344](https://cve.now/CVE-2022-21344.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21342](https://cve.now/CVE-2022-21342.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21341](https://cve.now/CVE-2022-21341.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21340](https://cve.now/CVE-2022-21340.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21339](https://cve.now/CVE-2022-21339.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21338](https://cve.now/CVE-2022-21338.md): Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework). (CVSS 4.6, Oracle Communications Convergence) - [CVE-2022-21337](https://cve.now/CVE-2022-21337.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21336](https://cve.now/CVE-2022-21336.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21335](https://cve.now/CVE-2022-21335.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21334](https://cve.now/CVE-2022-21334.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21333](https://cve.now/CVE-2022-21333.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21332](https://cve.now/CVE-2022-21332.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21331](https://cve.now/CVE-2022-21331.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21330](https://cve.now/CVE-2022-21330.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21329](https://cve.now/CVE-2022-21329.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21328](https://cve.now/CVE-2022-21328.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21327](https://cve.now/CVE-2022-21327.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21326](https://cve.now/CVE-2022-21326.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21325](https://cve.now/CVE-2022-21325.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21324](https://cve.now/CVE-2022-21324.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21323](https://cve.now/CVE-2022-21323.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21322](https://cve.now/CVE-2022-21322.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21321](https://cve.now/CVE-2022-21321.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21320](https://cve.now/CVE-2022-21320.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21319](https://cve.now/CVE-2022-21319.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21318](https://cve.now/CVE-2022-21318.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21317](https://cve.now/CVE-2022-21317.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21316](https://cve.now/CVE-2022-21316.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21315](https://cve.now/CVE-2022-21315.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21314](https://cve.now/CVE-2022-21314.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21313](https://cve.now/CVE-2022-21313.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21312](https://cve.now/CVE-2022-21312.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21311](https://cve.now/CVE-2022-21311.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21310](https://cve.now/CVE-2022-21310.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21309](https://cve.now/CVE-2022-21309.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21308](https://cve.now/CVE-2022-21308.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21307](https://cve.now/CVE-2022-21307.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21306](https://cve.now/CVE-2022-21306.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server) - [CVE-2022-21305](https://cve.now/CVE-2022-21305.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21304](https://cve.now/CVE-2022-21304.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21303](https://cve.now/CVE-2022-21303.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21302](https://cve.now/CVE-2022-21302.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.3, Oracle MySQL Server) - [CVE-2022-21301](https://cve.now/CVE-2022-21301.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 5.5, Oracle MySQL Server) - [CVE-2022-21300](https://cve.now/CVE-2022-21300.md): Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Integration). (CVSS 7.5, Oracle PeopleSoft Enterprise CS SA Integration Pack) - [CVE-2022-21299](https://cve.now/CVE-2022-21299.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21298](https://cve.now/CVE-2022-21298.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install). (CVSS 3.9, Oracle Solaris Operating System) - [CVE-2022-21297](https://cve.now/CVE-2022-21297.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21296](https://cve.now/CVE-2022-21296.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21295](https://cve.now/CVE-2022-21295.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.8, Oracle VM VirtualBox) - [CVE-2022-21294](https://cve.now/CVE-2022-21294.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21293](https://cve.now/CVE-2022-21293.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21292](https://cve.now/CVE-2022-21292.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 7.5, Oracle WebLogic Server) - [CVE-2022-21291](https://cve.now/CVE-2022-21291.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21290](https://cve.now/CVE-2022-21290.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21289](https://cve.now/CVE-2022-21289.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21288](https://cve.now/CVE-2022-21288.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21287](https://cve.now/CVE-2022-21287.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21286](https://cve.now/CVE-2022-21286.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21285](https://cve.now/CVE-2022-21285.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21284](https://cve.now/CVE-2022-21284.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21283](https://cve.now/CVE-2022-21283.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21282](https://cve.now/CVE-2022-21282.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21281](https://cve.now/CVE-2022-21281.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.8, Oracle Primavera Portfolio Management) - [CVE-2022-21280](https://cve.now/CVE-2022-21280.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21279](https://cve.now/CVE-2022-21279.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21278](https://cve.now/CVE-2022-21278.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 7.1, Oracle MySQL Server) - [CVE-2022-21277](https://cve.now/CVE-2022-21277.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21276](https://cve.now/CVE-2022-21276.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 9.9, Oracle Communications Billing and Revenue Management) - [CVE-2022-21275](https://cve.now/CVE-2022-21275.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 10.0, Oracle Communications Billing and Revenue Management) - [CVE-2022-21274](https://cve.now/CVE-2022-21274.md): Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx Creation). (CVSS 8.1, Oracle Sourcing) - [CVE-2022-21273](https://cve.now/CVE-2022-21273.md): Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Expenses, Currency Override). (CVSS 8.1, Oracle Project Costing) - [CVE-2022-21272](https://cve.now/CVE-2022-21272.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21271](https://cve.now/CVE-2022-21271.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Solaris Operating System) - [CVE-2022-21270](https://cve.now/CVE-2022-21270.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21269](https://cve.now/CVE-2022-21269.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 6.1, Oracle Primavera Portfolio Management) - [CVE-2022-21268](https://cve.now/CVE-2022-21268.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 3.3, Oracle Communications Billing and Revenue Management) - [CVE-2022-21267](https://cve.now/CVE-2022-21267.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 3.3, Oracle Communications Billing and Revenue Management) - [CVE-2022-21266](https://cve.now/CVE-2022-21266.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component… (CVSS 7.5, Oracle Communications Billing and Revenue Management) - [CVE-2022-21265](https://cve.now/CVE-2022-21265.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 3.8, Oracle MySQL Server) - [CVE-2022-21264](https://cve.now/CVE-2022-21264.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21263](https://cve.now/CVE-2022-21263.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture). (CVSS 4.8, Oracle Solaris Operating System) - [CVE-2022-21262](https://cve.now/CVE-2022-21262.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21261](https://cve.now/CVE-2022-21261.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21260](https://cve.now/CVE-2022-21260.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21259](https://cve.now/CVE-2022-21259.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21258](https://cve.now/CVE-2022-21258.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21257](https://cve.now/CVE-2022-21257.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21256](https://cve.now/CVE-2022-21256.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21255](https://cve.now/CVE-2022-21255.md): Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet). (CVSS 8.1, Oracle Configurator) - [CVE-2022-21254](https://cve.now/CVE-2022-21254.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 5.3, Oracle MySQL Server) - [CVE-2022-21253](https://cve.now/CVE-2022-21253.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21252](https://cve.now/CVE-2022-21252.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21251](https://cve.now/CVE-2022-21251.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). (CVSS 7.5, Oracle Installed Base) - [CVE-2022-21250](https://cve.now/CVE-2022-21250.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). (CVSS 8.1, Oracle Trade Management) - [CVE-2022-21249](https://cve.now/CVE-2022-21249.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 2.7, Oracle MySQL Server) - [CVE-2022-21248](https://cve.now/CVE-2022-21248.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java SE JDK and JRE) - [CVE-2022-21247](https://cve.now/CVE-2022-21247.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition) - [CVE-2022-21246](https://cve.now/CVE-2022-21246.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21245](https://cve.now/CVE-2022-21245.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.3, Oracle MySQL Server) - [CVE-2022-21244](https://cve.now/CVE-2022-21244.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.3, Oracle Primavera Portfolio Management) - [CVE-2022-21243](https://cve.now/CVE-2022-21243.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.3, Oracle Primavera Portfolio Management) - [CVE-2022-21242](https://cve.now/CVE-2022-21242.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 5.4, Oracle Primavera Portfolio Management) - [CVE-2021-35687](https://cve.now/CVE-2021-35687.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications… (CVSS 5.3, Oracle Financial Services Analytical Applications Infrastru…) - [CVE-2021-35686](https://cve.now/CVE-2021-35686.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications… (CVSS 4.3, Oracle Financial Services Analytical Applications Infrastru…) - [CVE-2021-35683](https://cve.now/CVE-2021-35683.md): Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 9.9, Oracle Hyperion Essbase Administration Services) - [CVE-2021-35587](https://cve.now/CVE-2021-35587.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). (CVSS 9.8, KEV, Oracle Access Manager) - [CVE-2022-0166](https://cve.now/CVE-2022-0166.md): Privilege escalation vulnerability in McAfee Agent (CVSS 7.8, McAfee Agent for Windows) - [CVE-2021-31854](https://cve.now/CVE-2021-31854.md): Code injection vulnerability in McAfee Agent (CVSS 7.7, McAfee Agent for Windows) - [CVE-2021-31821](https://cve.now/CVE-2021-31821.md): When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus… (no CVSS, Octopus Deploy Octopus Tentacle) - [CVE-2022-0266](https://cve.now/CVE-2022-0266.md): Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat (CVSS 6.5, livehelperchat/livehelperchat · remdex/livehelperchat) - [CVE-2022-23435](https://cve.now/CVE-2022-23435.md): decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service. (no CVSS, pl.droidsonroids.gif:android-gif-drawable) - [CVE-2022-22180](https://cve.now/CVE-2022-22180.md): Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22179](https://cve.now/CVE-2022-22179.md): Junos OS: jdhcpd crashes upon receiving a specific DHCP packet (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22178](https://cve.now/CVE-2022-22178.md): Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is… (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22177](https://cve.now/CVE-2022-22177.md): Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a… (CVSS 5.3, Juniper Networks Junos OS) - [CVE-2022-22176](https://cve.now/CVE-2022-22176.md): Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet (CVSS 7.4, Juniper Networks Junos OS) - [CVE-2022-22175](https://cve.now/CVE-2022-22175.md): Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22174](https://cve.now/CVE-2022-22174.md): Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22173](https://cve.now/CVE-2022-22173.md): Junos OS: CRL failing to download causes a memory leak and ultimately a DoS (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22172](https://cve.now/CVE-2022-22172.md): Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22171](https://cve.now/CVE-2022-22171.md): Junos OS: Specific packets over VXLAN cause FPC reset (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22170](https://cve.now/CVE-2022-22170.md): Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22169](https://cve.now/CVE-2022-22169.md): Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor… (CVSS 5.9, Juniper Networks Junos OS) - [CVE-2022-22168](https://cve.now/CVE-2022-22168.md): Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22167](https://cve.now/CVE-2022-22167.md): Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy (CVSS 7.2, Juniper Networks Junos OS) - [CVE-2022-22166](https://cve.now/CVE-2022-22166.md): Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel… (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22164](https://cve.now/CVE-2022-22164.md): Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled. (CVSS 6.5, Juniper Networks Junos OS Evolved) - [CVE-2022-22163](https://cve.now/CVE-2022-22163.md): Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet (CVSS 7.4, Juniper Networks Junos OS) - [CVE-2022-22162](https://cve.now/CVE-2022-22162.md): Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in (CVSS 7.3, Juniper Networks Junos OS) - [CVE-2022-22161](https://cve.now/CVE-2022-22161.md): Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22160](https://cve.now/CVE-2022-22160.md): Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22159](https://cve.now/CVE-2022-22159.md): Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS). (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22157](https://cve.now/CVE-2022-22157.md): Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled (CVSS 7.2, Juniper Networks Junos OS) - [CVE-2022-22156](https://cve.now/CVE-2022-22156.md): Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22155](https://cve.now/CVE-2022-22155.md): Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22154](https://cve.now/CVE-2022-22154.md): Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS (CVSS 6.8, Juniper Networks Junos OS) - [CVE-2022-22153](https://cve.now/CVE-2022-22153.md): SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22152](https://cve.now/CVE-2022-22152.md): Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface (CVSS 7.7, Juniper Networks Contrail Service Orchestration) - [CVE-2021-33912](https://cve.now/CVE-2021-33912.md): libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an… (no CVSS) - [CVE-2021-33913](https://cve.now/CVE-2021-33913.md): libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated… (no CVSS) - [CVE-2022-21704](https://cve.now/CVE-2022-21704.md): Incorrect Default Permissions in log4js-node (CVSS 5.5, log4js-node · log4js) - [CVE-2022-23221](https://cve.now/CVE-2022-23221.md): H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the… (CVSS 9.8, com.h2database:h2) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2022-01-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.