# CVEs published 2022-01-19 231 CVEs were published on January 19, 2022: 9 critical, 39 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2021-46028](https://cve.now/CVE-2021-46028.md): In mblog \<= 3.5.0 there is a CSRF vulnerability in the background article management. (no CVSS) - [CVE-2021-46026](https://cve.now/CVE-2021-46026.md): mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background b (no CVSS) - [CVE-2021-46027](https://cve.now/CVE-2021-46027.md): mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. (no CVSS) - [CVE-2021-46025](https://cve.now/CVE-2021-46025.md): A Cross SIte Scripting (XSS) vulnerability exists in OneBlog \<= 2.2.8. (no CVSS) - [CVE-2021-4143](https://cve.now/CVE-2021-4143.md): Cross-site Scripting (XSS) - Generic in bigbluebutton/bigbluebutton (CVSS 8.1, bigbluebutton/bigbluebutton) - [CVE-2022-21701](https://cve.now/CVE-2022-21701.md): Privileged Escalation in Istio (CVSS 5.0, istio) - [CVE-2022-21679](https://cve.now/CVE-2022-21679.md): Authorization Policy bypass in Istio (CVSS 6.8, istio) - [CVE-2022-21699](https://cve.now/CVE-2022-21699.md): Execution with Unnecessary Privileges in ipython (CVSS 8.2, ipython) - [CVE-2021-44777](https://cve.now/CVE-2021-44777.md): WordPress Email Tracker plugin \<= 5.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion (CVSS 5.4, Prashant Baldha Email Tracker) - [CVE-2022-23045](https://cve.now/CVE-2022-23045.md): PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the (no CVSS, PhpIPAM) - [CVE-2022-23046](https://cve.now/CVE-2022-23046.md): PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/r (no CVSS, PhpIPAM) - [CVE-2021-23843](https://cve.now/CVE-2021-23843.md): Lack of authentication mechanisms on the device (CVSS 8.8, Bosch AMS · Bosch APE +2) - [CVE-2021-23842](https://cve.now/CVE-2021-23842.md): Use of Hard-coded Cryptographic Key (CVSS 5.7, Bosch AMS · Bosch APE +2) - [CVE-2021-26247](https://cve.now/CVE-2021-26247.md): As an unauthenticated remote user, visit "http://\/auth\_changepassword.php?ref=\alert(1)\" to successfully execu (no CVSS, Cacti) - [CVE-2021-23225](https://cve.now/CVE-2021-23225.md): Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary web script or HTML in the "new\_username" field (no CVSS, Cacti) - [CVE-2021-3816](https://cve.now/CVE-2021-3816.md): Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group\_prefix field during the creat (no CVSS, Cacti) - [CVE-2022-22769](https://cve.now/CVE-2022-22769.md): TIBCO EBX vulnerabilities (CVSS 8.0, TIBCO Software TIBCO EBX · TIBCO Software TIBCO Product and…) - [CVE-2022-0243](https://cve.now/CVE-2022-0243.md): Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore (CVSS 7.4, orchardcms/orchardcore) - [CVE-2021-38789](https://cve.now/CVE-2021-38789.md): Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, (no CVSS) - [CVE-2022-0274](https://cve.now/CVE-2022-0274.md): Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore (CVSS 6.8, orchardcms/orchardcore · OrchardCore.Application.Cms.Targets) - [CVE-2021-44299](https://cve.now/CVE-2021-44299.md): A reflected cross-site scripting (XSS) vulnerability in \\lib\\packages\\themes\\themes.php of Navigate CMS v2.9.4 allows authenticated attacker (no CVSS) - [CVE-2021-46204](https://cve.now/CVE-2021-46204.md): Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. (no CVSS) - [CVE-2021-46203](https://cve.now/CVE-2021-46203.md): Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. (no CVSS) - [CVE-2021-42810](https://cve.now/CVE-2021-42810.md): Safenet Authentication Service Remote Desktop Gateway prior to 2.0.3 may allow privilege escilation to authenticated users (CVSS 7.8, Thales SafeNet Authentication Service) - [CVE-2022-22310](https://cve.now/CVE-2022-22310.md): IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. (CVSS 4.8, IBM WebSphere Application Server Liberty) - [CVE-2021-38788](https://cve.now/CVE-2021-38788.md): The Background service in Allwinner R818 SoC Android Q SDK V1.0 is used to manage background applications. (no CVSS) - [CVE-2021-46030](https://cve.now/CVE-2021-46030.md): There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS \<= v2. (no CVSS) - [CVE-2021-44837](https://cve.now/CVE-2021-44837.md): An issue was discovered in Delta RM 1.2. (no CVSS) - [CVE-2021-45808](https://cve.now/CVE-2021-45808.md): jpress v4.2.0 allows users to register an account by default. (no CVSS) - [CVE-2021-38787](https://cve.now/CVE-2021-38787.md): There is an integer overflow in the ION driver "/dev/ion" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd "COMPAT\_ION\_ (no CVSS) - [CVE-2021-46104](https://cve.now/CVE-2021-46104.md): An issue was discovered in webp\_server\_go 0.4.0. (no CVSS) - [CVE-2021-38786](https://cve.now/CVE-2021-38786.md): There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (d (no CVSS) - [CVE-2022-21403](https://cve.now/CVE-2022-21403.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 6.6, Oracle Communications Operations Monitor) - [CVE-2022-21402](https://cve.now/CVE-2022-21402.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 4.8, Oracle Communications Operations Monitor) - [CVE-2022-21401](https://cve.now/CVE-2022-21401.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 6.6, Oracle Communications Operations Monitor) - [CVE-2022-21400](https://cve.now/CVE-2022-21400.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21399](https://cve.now/CVE-2022-21399.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 6.6, Oracle Communications Operations Monitor) - [CVE-2022-21398](https://cve.now/CVE-2022-21398.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21397](https://cve.now/CVE-2022-21397.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21396](https://cve.now/CVE-2022-21396.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21395](https://cve.now/CVE-2022-21395.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 7.2, Oracle Communications Operations Monitor) - [CVE-2022-21394](https://cve.now/CVE-2022-21394.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox) - [CVE-2022-21393](https://cve.now/CVE-2022-21393.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 4.3, Oracle Database - Enterprise Edition) - [CVE-2022-21392](https://cve.now/CVE-2022-21392.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). (CVSS 8.8, Oracle Enterprise Manager Base Platform) - [CVE-2022-21391](https://cve.now/CVE-2022-21391.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti (CVSS 9.9, Oracle Communications Billing and Revenue Management) - [CVE-2022-21390](https://cve.now/CVE-2022-21390.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Webservi (CVSS 10.0, Oracle Communications Billing and Revenue Management) - [CVE-2022-21389](https://cve.now/CVE-2022-21389.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti (CVSS 10.0, Oracle Communications Billing and Revenue Management) - [CVE-2022-21388](https://cve.now/CVE-2022-21388.md): Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Instal (CVSS 3.3, Oracle Communications Pricing Design Center) - [CVE-2022-21387](https://cve.now/CVE-2022-21387.md): Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). (CVSS 5.3, Oracle Commerce Platform) - [CVE-2022-21386](https://cve.now/CVE-2022-21386.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21383](https://cve.now/CVE-2022-21383.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). (CVSS 4.3, Oracle Enterprise Session Border Controller) - [CVE-2022-21382](https://cve.now/CVE-2022-21382.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). (CVSS 7.7, Oracle Enterprise Session Border Controller) - [CVE-2022-21381](https://cve.now/CVE-2022-21381.md): Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). (CVSS 6.4, Oracle Enterprise Session Border Controller) - [CVE-2022-21380](https://cve.now/CVE-2022-21380.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21379](https://cve.now/CVE-2022-21379.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21378](https://cve.now/CVE-2022-21378.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 5.5, Oracle MySQL Server) - [CVE-2022-21377](https://cve.now/CVE-2022-21377.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API). (CVSS 5.4, Oracle Primavera Portfolio Management) - [CVE-2022-21376](https://cve.now/CVE-2022-21376.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 5.4, Oracle Primavera Portfolio Management) - [CVE-2022-21375](https://cve.now/CVE-2022-21375.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.5, Oracle Solaris Operating System) - [CVE-2022-21374](https://cve.now/CVE-2022-21374.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21373](https://cve.now/CVE-2022-21373.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator). (CVSS 6.1, Oracle Partner Management) - [CVE-2022-21372](https://cve.now/CVE-2022-21372.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 2.7, Oracle MySQL Server) - [CVE-2022-21371](https://cve.now/CVE-2022-21371.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 7.5, Oracle WebLogic Server) - [CVE-2022-21370](https://cve.now/CVE-2022-21370.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21369](https://cve.now/CVE-2022-21369.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21368](https://cve.now/CVE-2022-21368.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). (CVSS 4.7, Oracle MySQL Server) - [CVE-2022-21367](https://cve.now/CVE-2022-21367.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). (CVSS 5.5, Oracle MySQL Server) - [CVE-2022-21366](https://cve.now/CVE-2022-21366.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21365](https://cve.now/CVE-2022-21365.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21364](https://cve.now/CVE-2022-21364.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21363](https://cve.now/CVE-2022-21363.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 6.6, Oracle MySQL Connectors · mysql:mysql-connector-java) - [CVE-2022-21362](https://cve.now/CVE-2022-21362.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21361](https://cve.now/CVE-2022-21361.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21360](https://cve.now/CVE-2022-21360.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21359](https://cve.now/CVE-2022-21359.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21358](https://cve.now/CVE-2022-21358.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 6.5, Oracle MySQL Server) - [CVE-2022-21357](https://cve.now/CVE-2022-21357.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21356](https://cve.now/CVE-2022-21356.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21355](https://cve.now/CVE-2022-21355.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21354](https://cve.now/CVE-2022-21354.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). (CVSS 6.1, Oracle iStore) - [CVE-2022-21353](https://cve.now/CVE-2022-21353.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21352](https://cve.now/CVE-2022-21352.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.9, Oracle MySQL Server) - [CVE-2022-21351](https://cve.now/CVE-2022-21351.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 7.1, Oracle MySQL Server) - [CVE-2022-21350](https://cve.now/CVE-2022-21350.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21349](https://cve.now/CVE-2022-21349.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21348](https://cve.now/CVE-2022-21348.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21347](https://cve.now/CVE-2022-21347.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21346](https://cve.now/CVE-2022-21346.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 7.5, Oracle BI Publisher) - [CVE-2022-21345](https://cve.now/CVE-2022-21345.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 6.5, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21344](https://cve.now/CVE-2022-21344.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21342](https://cve.now/CVE-2022-21342.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21341](https://cve.now/CVE-2022-21341.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21340](https://cve.now/CVE-2022-21340.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21339](https://cve.now/CVE-2022-21339.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21338](https://cve.now/CVE-2022-21338.md): Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework). (CVSS 4.6, Oracle Communications Convergence) - [CVE-2022-21337](https://cve.now/CVE-2022-21337.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21336](https://cve.now/CVE-2022-21336.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21335](https://cve.now/CVE-2022-21335.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21334](https://cve.now/CVE-2022-21334.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21333](https://cve.now/CVE-2022-21333.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21332](https://cve.now/CVE-2022-21332.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21331](https://cve.now/CVE-2022-21331.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21330](https://cve.now/CVE-2022-21330.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21329](https://cve.now/CVE-2022-21329.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21328](https://cve.now/CVE-2022-21328.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21327](https://cve.now/CVE-2022-21327.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21326](https://cve.now/CVE-2022-21326.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21325](https://cve.now/CVE-2022-21325.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21324](https://cve.now/CVE-2022-21324.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21323](https://cve.now/CVE-2022-21323.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21322](https://cve.now/CVE-2022-21322.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21321](https://cve.now/CVE-2022-21321.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21320](https://cve.now/CVE-2022-21320.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21319](https://cve.now/CVE-2022-21319.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21318](https://cve.now/CVE-2022-21318.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21317](https://cve.now/CVE-2022-21317.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21316](https://cve.now/CVE-2022-21316.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21315](https://cve.now/CVE-2022-21315.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21314](https://cve.now/CVE-2022-21314.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21313](https://cve.now/CVE-2022-21313.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21312](https://cve.now/CVE-2022-21312.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21311](https://cve.now/CVE-2022-21311.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 2.9, Oracle MySQL Cluster) - [CVE-2022-21310](https://cve.now/CVE-2022-21310.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21309](https://cve.now/CVE-2022-21309.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21308](https://cve.now/CVE-2022-21308.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21307](https://cve.now/CVE-2022-21307.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21306](https://cve.now/CVE-2022-21306.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server) - [CVE-2022-21305](https://cve.now/CVE-2022-21305.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21304](https://cve.now/CVE-2022-21304.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21303](https://cve.now/CVE-2022-21303.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21302](https://cve.now/CVE-2022-21302.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.3, Oracle MySQL Server) - [CVE-2022-21301](https://cve.now/CVE-2022-21301.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 5.5, Oracle MySQL Server) - [CVE-2022-21300](https://cve.now/CVE-2022-21300.md): Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Integration). (CVSS 7.5, Oracle PeopleSoft Enterprise CS SA Integration Pack) - [CVE-2022-21299](https://cve.now/CVE-2022-21299.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21298](https://cve.now/CVE-2022-21298.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install). (CVSS 3.9, Oracle Solaris Operating System) - [CVE-2022-21297](https://cve.now/CVE-2022-21297.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21296](https://cve.now/CVE-2022-21296.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21295](https://cve.now/CVE-2022-21295.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.8, Oracle VM VirtualBox) - [CVE-2022-21294](https://cve.now/CVE-2022-21294.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21293](https://cve.now/CVE-2022-21293.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21292](https://cve.now/CVE-2022-21292.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 7.5, Oracle WebLogic Server) - [CVE-2022-21291](https://cve.now/CVE-2022-21291.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21290](https://cve.now/CVE-2022-21290.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21289](https://cve.now/CVE-2022-21289.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21288](https://cve.now/CVE-2022-21288.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21287](https://cve.now/CVE-2022-21287.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21286](https://cve.now/CVE-2022-21286.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21285](https://cve.now/CVE-2022-21285.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21284](https://cve.now/CVE-2022-21284.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21283](https://cve.now/CVE-2022-21283.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21282](https://cve.now/CVE-2022-21282.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21281](https://cve.now/CVE-2022-21281.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.8, Oracle Primavera Portfolio Management) - [CVE-2022-21280](https://cve.now/CVE-2022-21280.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21279](https://cve.now/CVE-2022-21279.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster) - [CVE-2022-21278](https://cve.now/CVE-2022-21278.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 7.1, Oracle MySQL Server) - [CVE-2022-21277](https://cve.now/CVE-2022-21277.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). (CVSS 5.3, Oracle Java SE JDK and JRE) - [CVE-2022-21276](https://cve.now/CVE-2022-21276.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti (CVSS 9.9, Oracle Communications Billing and Revenue Management) - [CVE-2022-21275](https://cve.now/CVE-2022-21275.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connecti (CVSS 10.0, Oracle Communications Billing and Revenue Management) - [CVE-2022-21274](https://cve.now/CVE-2022-21274.md): Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx Creation). (CVSS 8.1, Oracle Sourcing) - [CVE-2022-21273](https://cve.now/CVE-2022-21273.md): Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Expenses, Currency Override). (CVSS 8.1, Oracle Project Costing) - [CVE-2022-21272](https://cve.now/CVE-2022-21272.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2022-21271](https://cve.now/CVE-2022-21271.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Solaris Operating System) - [CVE-2022-21270](https://cve.now/CVE-2022-21270.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21269](https://cve.now/CVE-2022-21269.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 6.1, Oracle Primavera Portfolio Management) - [CVE-2022-21268](https://cve.now/CVE-2022-21268.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline (CVSS 3.3, Oracle Communications Billing and Revenue Management) - [CVE-2022-21267](https://cve.now/CVE-2022-21267.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline (CVSS 3.3, Oracle Communications Billing and Revenue Management) - [CVE-2022-21266](https://cve.now/CVE-2022-21266.md): Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline (CVSS 7.5, Oracle Communications Billing and Revenue Management) - [CVE-2022-21265](https://cve.now/CVE-2022-21265.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 3.8, Oracle MySQL Server) - [CVE-2022-21264](https://cve.now/CVE-2022-21264.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21263](https://cve.now/CVE-2022-21263.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture). (CVSS 4.8, Oracle Solaris Operating System) - [CVE-2022-21262](https://cve.now/CVE-2022-21262.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21261](https://cve.now/CVE-2022-21261.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21260](https://cve.now/CVE-2022-21260.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21259](https://cve.now/CVE-2022-21259.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21258](https://cve.now/CVE-2022-21258.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21257](https://cve.now/CVE-2022-21257.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.1, Oracle WebLogic Server) - [CVE-2022-21256](https://cve.now/CVE-2022-21256.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21255](https://cve.now/CVE-2022-21255.md): Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet). (CVSS 8.1, Oracle Configurator) - [CVE-2022-21254](https://cve.now/CVE-2022-21254.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 5.3, Oracle MySQL Server) - [CVE-2022-21253](https://cve.now/CVE-2022-21253.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server) - [CVE-2022-21252](https://cve.now/CVE-2022-21252.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). (CVSS 6.5, Oracle WebLogic Server) - [CVE-2022-21251](https://cve.now/CVE-2022-21251.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). (CVSS 7.5, Oracle Installed Base) - [CVE-2022-21250](https://cve.now/CVE-2022-21250.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). (CVSS 8.1, Oracle Trade Management) - [CVE-2022-21249](https://cve.now/CVE-2022-21249.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 2.7, Oracle MySQL Server) - [CVE-2022-21248](https://cve.now/CVE-2022-21248.md): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java SE JDK and JRE) - [CVE-2022-21247](https://cve.now/CVE-2022-21247.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition) - [CVE-2022-21246](https://cve.now/CVE-2022-21246.md): Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). (CVSS 5.4, Oracle Communications Operations Monitor) - [CVE-2022-21245](https://cve.now/CVE-2022-21245.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.3, Oracle MySQL Server) - [CVE-2022-21244](https://cve.now/CVE-2022-21244.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.3, Oracle Primavera Portfolio Management) - [CVE-2022-21243](https://cve.now/CVE-2022-21243.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 4.3, Oracle Primavera Portfolio Management) - [CVE-2022-21242](https://cve.now/CVE-2022-21242.md): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). (CVSS 5.4, Oracle Primavera Portfolio Management) - [CVE-2021-35687](https://cve.now/CVE-2021-35687.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 5.3, Oracle Financial Services Analytical Applications Infrastru…) - [CVE-2021-35686](https://cve.now/CVE-2021-35686.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 4.3, Oracle Financial Services Analytical Applications Infrastru…) - [CVE-2021-35683](https://cve.now/CVE-2021-35683.md): Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console). (CVSS 9.9, Oracle Hyperion Essbase Administration Services) - [CVE-2021-35587](https://cve.now/CVE-2021-35587.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). (CVSS 9.8, KEV, Oracle Access Manager) - [CVE-2022-0166](https://cve.now/CVE-2022-0166.md): Privilege escalation vulnerability in McAfee Agent (CVSS 7.8, McAfee Agent for Windows) - [CVE-2021-31854](https://cve.now/CVE-2021-31854.md): Code injection vulnerability in McAfee Agent (CVSS 7.7, McAfee Agent for Windows) - [CVE-2021-31821](https://cve.now/CVE-2021-31821.md): When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Se (no CVSS, Octopus Deploy Octopus Tentacle) - [CVE-2022-0266](https://cve.now/CVE-2022-0266.md): Authorization Bypass Through User-Controlled Key in livehelperchat/livehelperchat (CVSS 6.5, livehelperchat/livehelperchat · remdex/livehelperchat) - [CVE-2022-23435](https://cve.now/CVE-2022-23435.md): decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service. (no CVSS, pl.droidsonroids.gif:android-gif-drawable) - [CVE-2022-22180](https://cve.now/CVE-2022-22180.md): Junos OS: EX2300 Series, EX2300-MP Series, EX3400 Series: A slow memory leak due to processing of specific IPv6 packets (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22179](https://cve.now/CVE-2022-22179.md): Junos OS: jdhcpd crashes upon receiving a specific DHCP packet (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22178](https://cve.now/CVE-2022-22178.md): Junos OS: MX and SRX series: Flowd core observed if the SIP ALG is enabled and a specific Session Initiation Protocol (SIP) packet is received (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22177](https://cve.now/CVE-2022-22177.md): Junos OS and Junos OS Evolved: After receiving a specific number of crafted packets snmpd will segmentation fault (SIGSEGV) requiring a manual restart. (CVSS 5.3, Juniper Networks Junos OS) - [CVE-2022-22176](https://cve.now/CVE-2022-22176.md): Junos OS: In a scenario with dhcp-security and option-82 configured jdhcpd crashes upon receipt of a malformed DHCP packet (CVSS 7.4, Juniper Networks Junos OS) - [CVE-2022-22175](https://cve.now/CVE-2022-22175.md): Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22174](https://cve.now/CVE-2022-22174.md): Junos OS: QFX5000 Series, EX4600: Device may run out of memory, causing traffic loss, upon receipt of specific IPv6 packets (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22173](https://cve.now/CVE-2022-22173.md): Junos OS: CRL failing to download causes a memory leak and ultimately a DoS (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22172](https://cve.now/CVE-2022-22172.md): Junos OS and Junos OS Evolved: An l2cpd memory leak can occur when specific LLDP packets are received leading to a DoS (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22171](https://cve.now/CVE-2022-22171.md): Junos OS: Specific packets over VXLAN cause FPC reset (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22170](https://cve.now/CVE-2022-22170.md): Junos OS: Specific packets over VXLAN cause FPC memory leak and ultimately reset (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22169](https://cve.now/CVE-2022-22169.md): Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device. (CVSS 5.9, Juniper Networks Junos OS) - [CVE-2022-22168](https://cve.now/CVE-2022-22168.md): Junos OS: vMX and MX150: Specific packets might cause a memory leak and eventually an FPC reboot (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22167](https://cve.now/CVE-2022-22167.md): Junos OS: SRX Series: If no-syn-check is enabled, traffic classified as UNKNOWN gets permitted by pre-id-default-policy (CVSS 7.2, Juniper Networks Junos OS) - [CVE-2022-22166](https://cve.now/CVE-2022-22166.md): Junos OS: An rpd core will occur if BGP update tracing is configured and an update containing a malformed BGP SR-TE policy tunnel attribute is received (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22164](https://cve.now/CVE-2022-22164.md): Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled. (CVSS 6.5, Juniper Networks Junos OS Evolved) - [CVE-2022-22163](https://cve.now/CVE-2022-22163.md): Junos OS: jdhcpd crashes upon receipt of a specific DHCPv6 packet (CVSS 7.4, Juniper Networks Junos OS) - [CVE-2022-22162](https://cve.now/CVE-2022-22162.md): Junos OS: A low privileged user can elevate their privileges to the ones of the highest privileged j-web user logged in (CVSS 7.3, Juniper Networks Junos OS) - [CVE-2022-22161](https://cve.now/CVE-2022-22161.md): Junos OS: MX104 might become unresponsive if the out-of-band management port receives a flood of traffic (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22160](https://cve.now/CVE-2022-22160.md): Junos OS: MX Series: The bbe-smgd process crashes if an unsupported configuration exists and a PPPoE client sends a specific message (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22159](https://cve.now/CVE-2022-22159.md): Junos OS: An attacker sending crafted packets can cause a traffic and CPU Denial of Service (DoS). (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22157](https://cve.now/CVE-2022-22157.md): Junos OS: SRX Series: Traffic classification vulnerability when 'no-syn-check' is enabled (CVSS 7.2, Juniper Networks Junos OS) - [CVE-2022-22156](https://cve.now/CVE-2022-22156.md): Junos OS: Certificate validation is skipped when fetching system scripts from a HTTPS URL (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22155](https://cve.now/CVE-2022-22155.md): Junos OS: ACX5448: FPC memory leak due to IPv6 neighbor flaps (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2022-22154](https://cve.now/CVE-2022-22154.md): Junos Fusion: A Satellite Device can be controlled by rewiring it to a foreign AD causing a DoS (CVSS 6.8, Juniper Networks Junos OS) - [CVE-2022-22153](https://cve.now/CVE-2022-22153.md): SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2022-22152](https://cve.now/CVE-2022-22152.md): Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface (CVSS 7.7, Juniper Networks Contrail Service Orchestration) - [CVE-2021-33912](https://cve.now/CVE-2021-33912.md): libspf2 before 1.2.11 has a four-byte heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthe (no CVSS) - [CVE-2021-33913](https://cve.now/CVE-2021-33913.md): libspf2 before 1.2.11 has a heap-based buffer overflow that might allow remote attackers to execute arbitrary code (via an unauthenticated e (no CVSS) - [CVE-2022-21704](https://cve.now/CVE-2022-21704.md): Incorrect Default Permissions in log4js-node (CVSS 5.5, log4js-node · log4js) - [CVE-2022-23221](https://cve.now/CVE-2022-23221.md): H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE\_UNKNOWN\_SETTING (CVSS 9.8, com.h2database:h2) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2022-01-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.