CVEs published January 19, 2022
231 CVEs were published on January 19, 2022: 9 critical, 39 high. 1 is now in CISA KEV.
- Published
- 231
- Critical
- 9
- High
- 39
- Medium
- 136
- Low
- 23
- Unrated
- 24
- Now in CISA KEV
- 1
- Fix available
- 47
Most affected products
- Oracle MySQL Cluster
- 44
- Oracle MySQL Server
- 29
- Juniper Networks Junos OS
- 25
- Oracle Java SE JDK and JRE
- 16
- Oracle WebLogic Server
- 15
- Oracle Communications Operations Monitor
- 10
- Oracle Communications Billing and Revenue Management
- 8
- Oracle Primavera Portfolio Management
- 7
- Oracle PeopleSoft Enterprise PT PeopleTools
- 5
- Oracle Solaris Operating System
- 4
Critical 9
- CVE-2022-21391Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiOracle Communications Billing and Revenue Management
- CVE-2022-21390Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: WebserviOracle Communications Billing and Revenue Management
- CVE-2022-21389Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiOracle Communications Billing and Revenue Management
- CVE-2022-21306Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2022-21276Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiOracle Communications Billing and Revenue Management
- CVE-2022-21275Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: ConnectiOracle Communications Billing and Revenue Management
- CVE-2021-35683Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console).Oracle Hyperion Essbase Administration Services
- CVE-2021-35587Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent).Oracle Access Manager
- CVE-2022-23221H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGcom.h2database:h2
High 39
- CVE-2021-4143Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebuttonbigbluebutton/bigbluebutton
- CVE-2022-21699Execution with Unnecessary Privileges in ipythonipython
- CVE-2021-23843Lack of authentication mechanisms on the deviceBosch AMS · Bosch APE +2
- CVE-2022-22769TIBCO EBX vulnerabilitiesTIBCO Software TIBCO EBX · TIBCO Software TIBCO Product and…
- CVE-2022-0243Cross-site Scripting (XSS) - Stored in orchardcms/orchardcoreorchardcms/orchardcore
- CVE-2021-42810Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated usersThales SafeNet Authentication Service
- CVE-2022-21395Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21392Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework).Oracle Enterprise Manager Base Platform
- CVE-2022-21382Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI).Oracle Enterprise Session Border Controller
- CVE-2022-21371Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2022-21351Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21346Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2022-21300Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Integration).Oracle PeopleSoft Enterprise CS SA Integration Pack
- CVE-2022-21292Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21278Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21274Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx Creation).Oracle Sourcing
- CVE-2022-21273Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Expenses, Currency Override).Oracle Project Costing
- CVE-2022-21266Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: PipelineOracle Communications Billing and Revenue Management
- CVE-2022-21255Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet).Oracle Configurator
- CVE-2022-21251Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main).Oracle Installed Base
- CVE-2022-21250Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts).Oracle Trade Management
- CVE-2022-0166Privilege escalation vulnerability in McAfee AgentMcAfee Agent for Windows
- CVE-2021-31854Code injection vulnerability in McAfee AgentMcAfee Agent for Windows
- CVE-2022-22180Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packetsJuniper Networks Junos OS
- CVE-2022-22178Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is receivedJuniper Networks Junos OS
- CVE-2022-22176Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packetJuniper Networks Junos OS
- CVE-2022-22175Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processedJuniper Networks Junos OS
- CVE-2022-22174Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packetsJuniper Networks Junos OS
- CVE-2022-22173Junos OS: CRL failing to download causes a memory leak and ultimately a DoSJuniper Networks Junos OS
- CVE-2022-22171Junos OS: Specific packets over VXLAN cause FPC resetJuniper Networks Junos OS
- CVE-2022-22170Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately resetJuniper Networks Junos OS
- CVE-2022-22167Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policyJuniper Networks Junos OS
- CVE-2022-22163Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packetJuniper Networks Junos OS
- CVE-2022-22162Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged inJuniper Networks Junos OS
- CVE-2022-22161Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of trafficJuniper Networks Junos OS
- CVE-2022-22159Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS).Juniper Networks Junos OS
- CVE-2022-22157Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabledJuniper Networks Junos OS
- CVE-2022-22153SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet dropsJuniper Networks Junos OS
- CVE-2022-22152Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interfaceJuniper Networks Contrail Service Orchestration
Medium, low and unrated 183
- CVE-2021-46028In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management.
- CVE-2021-46026mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background b
- CVE-2021-46027mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management.
- CVE-2021-46025A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8.
- CVE-2022-21701Privileged Escalation in Istioistio
- CVE-2022-21679Authorization Policy bypass in Istioistio
- CVE-2021-44777WordPress Email Tracker plugin <= 5.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletionPrashant Baldha Email Tracker
- CVE-2022-23045PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the PhpIPAM
- CVE-2022-23046PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/rPhpIPAM
- CVE-2021-23842Use of Hard-coded Cryptographic KeyBosch AMS · Bosch APE +2
- CVE-2021-26247As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execuCacti
- CVE-2021-23225Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new_username" field Cacti
- CVE-2021-3816Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creatCacti
- CVE-2021-38789Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission,
- CVE-2022-0274Cross-site Scripting (XSS) - Stored in orchardcms/orchardcoreorchardcms/orchardcore · OrchardCore.Application.Cms.Targets
- CVE-2021-44299A reflected cross-site scripting (XSS) vulnerability in \lib\packages\themes\themes.php of Navigate CMS v2.9.4 allows authenticated attacker
- CVE-2021-46204Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
- CVE-2021-46203Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
- CVE-2022-22310IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security.IBM WebSphere Application Server Liberty
- CVE-2021-38788The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications.
- CVE-2021-46030There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2.
- CVE-2021-44837An issue was discovered in Delta RM 1.2.
- CVE-2021-45808jpress v4.2.0 allows users to register an account by default.
- CVE-2021-38787There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPAT_ION_
- CVE-2021-46104An issue was discovered in webp_server_go 0.4.0.
- CVE-2021-38786There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (d
- CVE-2022-21403Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21402Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21401Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21400Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21399Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21398Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21397Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21396Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21394Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-21393Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2022-21388Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise InstalOracle Communications Pricing Design Center
- CVE-2022-21387Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).Oracle Commerce Platform
- CVE-2022-21386Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2022-21383Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log).Oracle Enterprise Session Border Controller
- CVE-2022-21381Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI).Oracle Enterprise Session Border Controller
- CVE-2022-21380Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21379Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2022-21378Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21377Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API).Oracle Primavera Portfolio Management
- CVE-2022-21376Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2022-21375Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2022-21374Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2022-21373Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator).Oracle Partner Management
- CVE-2022-21372Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2022-21370Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21369Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21368Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Oracle MySQL Server
- CVE-2022-21367Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling).Oracle MySQL Server
- CVE-2022-21366Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).Oracle Java SE JDK and JRE
- CVE-2022-21365Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).Oracle Java SE JDK and JRE
- CVE-2022-21364Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21363Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors · mysql:mysql-connector-java
- CVE-2022-21362Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2022-21361Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2022-21360Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).Oracle Java SE JDK and JRE
- CVE-2022-21359Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21358Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2022-21357Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21356Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21355Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21354Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface).Oracle iStore
- CVE-2022-21353Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2022-21352Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21350Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2022-21349Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).Oracle Java SE JDK and JRE
- CVE-2022-21348Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21347Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2022-21345Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21344Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2022-21342Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21341Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).Oracle Java SE JDK and JRE
- CVE-2022-21340Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2022-21339Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21338Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework).Oracle Communications Convergence
- CVE-2022-21337Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21336Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21335Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21334Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21333Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21332Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21331Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21330Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21329Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21328Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21327Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21326Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21325Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21324Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21323Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21322Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21321Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21320Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21319Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21318Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21317Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21316Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21315Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21314Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21313Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21312Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21311Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21310Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21309Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21308Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21307Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21305Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Oracle Java SE JDK and JRE
- CVE-2022-21304Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server
- CVE-2022-21303Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2022-21302Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2022-21301Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2022-21299Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE JDK and JRE
- CVE-2022-21298Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install).Oracle Solaris Operating System
- CVE-2022-21297Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21296Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE JDK and JRE
- CVE-2022-21295Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2022-21294Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2022-21293Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2022-21291Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Oracle Java SE JDK and JRE
- CVE-2022-21290Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21289Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21288Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21287Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21286Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21285Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21284Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21283Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2022-21282Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).Oracle Java SE JDK and JRE
- CVE-2022-21281Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2022-21280Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21279Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2022-21277Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).Oracle Java SE JDK and JRE
- CVE-2022-21272Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2022-21271Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries).Oracle Solaris Operating System
- CVE-2022-21270Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated).Oracle MySQL Server
- CVE-2022-21269Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2022-21268Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: PipelineOracle Communications Billing and Revenue Management
- CVE-2022-21267Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: PipelineOracle Communications Billing and Revenue Management
- CVE-2022-21265Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21264Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21263Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture).Oracle Solaris Operating System
- CVE-2022-21262Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21261Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21260Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21259Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21258Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21257Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21256Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2022-21254Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21253Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2022-21252Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples).Oracle WebLogic Server
- CVE-2022-21249Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2022-21248Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).Oracle Java SE JDK and JRE
- CVE-2022-21247Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2022-21246Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine).Oracle Communications Operations Monitor
- CVE-2022-21245Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2022-21244Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2022-21243Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2022-21242Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2021-35687Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2021-35686Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2021-31821When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus SeOctopus Deploy Octopus Tentacle
- CVE-2022-0266Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchatlivehelperchat/livehelperchat · remdex/livehelperchat
- CVE-2022-23435decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.pl.droidsonroids.gif:android-gif-drawable
- CVE-2022-22179Junos OS: jdhcpd crashes upon receiving a specific DHCP packetJuniper Networks Junos OS
- CVE-2022-22177Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart.Juniper Networks Junos OS
- CVE-2022-22172Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoSJuniper Networks Junos OS
- CVE-2022-22169Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.Juniper Networks Junos OS
- CVE-2022-22168Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC rebootJuniper Networks Junos OS
- CVE-2022-22166Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is receivedJuniper Networks Junos OS
- CVE-2022-22164Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.Juniper Networks Junos OS Evolved
- CVE-2022-22160Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific messageJuniper Networks Junos OS
- CVE-2022-22156Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URLJuniper Networks Junos OS
- CVE-2022-22155Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flapsJuniper Networks Junos OS
- CVE-2022-22154Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoSJuniper Networks Junos OS
- CVE-2021-33912libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthe
- CVE-2021-33913libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e
- CVE-2022-21704Incorrect Default Permissions in log4js-nodelog4js-node · log4js