2022 CVEs (page 173)
Page 173 of 265 — CVEs published in 2022, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-21581 | Medium | 5.9 | 2022-07-19 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is… |
CVE-2022-21580 | Medium | 5.9 | 2022-07-19 | Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Infrastructure). Su… |
CVE-2022-21579 | Medium | 6.4 | 2022-07-19 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that a… |
CVE-2022-21578 | Medium | 6.7 | 2022-07-19 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that a… |
CVE-2022-21577 | Medium | 6.4 | 2022-07-19 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that a… |
CVE-2022-21576 | Medium | 6.4 | 2022-07-19 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that a… |
CVE-2022-21575 | Medium | 6.0 | 2022-07-19 | Vulnerability in the Oracle WebCenter Sites Support Tools product of Oracle Fusion Middleware (component: User Interface). The supported version that is affect… |
CVE-2022-21574 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Suppor… |
CVE-2022-21573 | Medium | 6.5 | 2022-07-19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported ve… |
CVE-2022-21572 | Medium | 5.4 | 2022-07-19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported ve… |
CVE-2022-21571 | High | 8.2 | 2022-07-19 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.36. Easily… |
CVE-2022-21570 | High | 7.5 | 2022-07-19 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.2.1.3.0, 12.2… |
CVE-2022-21569 | Medium | 6.5 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21568 | Medium | 6.5 | 2022-07-19 | Vulnerability in the Oracle iReceivables product of Oracle E-Business Suite (component: Access Request). Supported versions that are affected are 12.2.3-12.2.1… |
CVE-2022-21567 | High | 7.5 | 2022-07-19 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.11. Easily… |
CVE-2022-21566 | High | 7.5 | 2022-07-19 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.9… |
CVE-2022-21565 | Medium | 6.5 | 2022-07-19 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerabil… |
CVE-2022-21564 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 12.2.1.3.0… |
CVE-2022-21563 | Low | 3.4 | 2022-07-19 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploi… |
CVE-2022-21562 | High | 7.5 | 2022-07-19 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.3.0 and 12… |
CVE-2022-21561 | Medium | 6.5 | 2022-07-19 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.6.3 and… |
CVE-2022-21560 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2022-21559 | Medium | 5.5 | 2022-07-19 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11… |
CVE-2022-21558 | High | 7.8 | 2022-07-19 | Vulnerability in the Oracle Crystal Ball product of Oracle Construction and Engineering (component: Installation). Supported versions that are affected are 11… |
CVE-2022-21557 | Medium | 5.7 | 2022-07-19 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3.0… |
CVE-2022-21556 | Medium | 6.5 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp… |
CVE-2022-21555 | Medium | 4.2 | 2022-07-19 | Vulnerability in the MySQL Shell for VS Code product of Oracle MySQL (component: Shell: GUI). Supported versions that are affected are 1.1.8 and prior. Easily… |
CVE-2022-21554 | Medium | 4.4 | 2022-07-19 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.36. Easily… |
CVE-2022-21553 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21552 | High | 7.2 | 2022-07-19 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Search). Supported versions that are affected are 12.2.1.3.0 and… |
CVE-2022-21551 | Medium | 6.8 | 2022-07-19 | Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate). The supported version that is affected is 21c: prior to 21.7.0.0.0; 19c: prior to 19.1.0.0.2… |
CVE-2022-21550 | Medium | 6.3 | 2022-07-19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.36 and prior, 7.5.26 and… |
CVE-2022-21549 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a… |
CVE-2022-21548 | Medium | 6.5 | 2022-07-19 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2022-21547 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21545 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Candidate Self Service Registration). Supported versions that are affec… |
CVE-2022-21544 | High | 7.1 | 2022-07-19 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that a… |
CVE-2022-21543 | Critical | 9.8 | 2022-07-19 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected… |
CVE-2022-21542 | High | 7.4 | 2022-07-19 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime). Supported versions that are affected are 9.2.6.3 and… |
CVE-2022-21541 | Medium | 5.9 | 2022-07-19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are… |
CVE-2022-21540 | Medium | 5.3 | 2022-07-19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are… |
CVE-2022-21539 | Medium | 5.0 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit… |
CVE-2022-21538 | Low | 3.1 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.29 and prior… |
CVE-2022-21537 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vu… |
CVE-2022-21536 | High | 8.1 | 2022-07-19 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected… |
CVE-2022-21535 | Low | 2.5 | 2022-07-19 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: General/Core Client). Supported versions that are affected are 8.0.28 and prior. Di… |
CVE-2022-21534 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Eas… |
CVE-2022-21533 | Medium | 5.5 | 2022-07-19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMB Server). The supported version that is affected is 11. Easily exploitable vulnera… |
CVE-2022-21532 | Medium | 4.3 | 2022-07-19 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator). Supported versions that are affected… |
CVE-2022-21531 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21530 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21529 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21528 | Medium | 5.5 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21527 | Medium | 5.5 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21526 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21525 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21524 | High | 7.6 | 2022-07-19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnera… |
CVE-2022-21523 | Medium | 4.3 | 2022-07-19 | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 12.2… |
CVE-2022-21522 | Medium | 4.4 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.29 and prior. Dif… |
CVE-2022-21521 | Medium | 4.9 | 2022-07-19 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). Supported versions that are affected are 8.58 a… |
CVE-2022-21520 | Medium | 6.1 | 2022-07-19 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.58 and… |
CVE-2022-21519 | Medium | 5.9 | 2022-07-19 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.29 and prior. Difficult… |
CVE-2022-21518 | Medium | 6.5 | 2022-07-19 | Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported ver… |
CVE-2022-21517 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vu… |
CVE-2022-21516 | High | 7.3 | 2022-07-19 | Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are… |
CVE-2022-21515 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.38 and prior and 8.0.29 an… |
CVE-2022-21514 | High | 7.5 | 2022-07-19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11. Easily e… |
CVE-2022-21513 | High | 8.2 | 2022-07-19 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploi… |
CVE-2022-21512 | Medium | 4.4 | 2022-07-19 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8… |
CVE-2022-21511 | High | 7.2 | 2022-07-19 | Vulnerability in the Oracle Database - Enterprise Edition Recovery component of Oracle Database Server. For supported versions that are affected see note. Easi… |
CVE-2022-21510 | High | 8.8 | 2022-07-19 | Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server. For supported versions that are affected see note. Easi… |
CVE-2022-21509 | Medium | 5.5 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exp… |
CVE-2022-21508 | Medium | 5.8 | 2022-07-19 | Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.3. Easily exploitable vulnerability allows… |
CVE-2022-21455 | Medium | 4.9 | 2022-07-19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Easi… |
CVE-2022-21439 | Medium | 4.2 | 2022-07-19 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulne… |
CVE-2022-21432 | Low | 2.7 | 2022-07-19 | Vulnerability in the Oracle Database - Enterprise Edition RDBMS Security component of Oracle Database Server. Supported versions that are affected are 12.1.0.2… |
CVE-2022-21429 | High | 8.1 | 2022-07-19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care). Supported ve… |
CVE-2022-21428 | Medium | 6.7 | 2022-07-19 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that a… |
CVE-2022-31150 | Medium | 5.3 | 2022-07-19 | undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5… |
CVE-2022-31144 | High | 7.0 | 2022-07-19 | Redis is an in-memory database that persists on disk. A specially crafted `XAUTOCLAIM` command on a stream key in a specific state may result with heap overflo… |
CVE-2022-34540 | High | 8.8 | 2022-07-19 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/license_… |
CVE-2022-34539 | High | 8.8 | 2022-07-19 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This v… |
CVE-2022-34538 | High | 8.8 | 2022-07-19 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi… |
CVE-2022-34537 | Medium | 5.4 | 2022-07-19 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 was discovered to contain a cross-site scripting (XSS) vulnerability via the component bia_oneshot.cgi. |
CVE-2022-34536 | High | 7.5 | 2022-07-19 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows attackers to access the core log file and perform session hijacking via a crafted session token. |
CVE-2022-34535 | High | 7.5 | 2022-07-19 | Digital Watchdog DW MEGApix IP cameras A7.2.2_20211029 allows unauthenticated attackers to view internal paths and scripts via web files. |
CVE-2022-34534 | High | 7.5 | 2022-07-19 | Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call. |
CVE-2022-34266 | Medium | 5.5 | 2022-07-19 | The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerabili… |
CVE-2022-2476 | Medium | 5.5 | 2022-07-19 | A null pointer dereference bug was found in wavpack-5.4.0 The results from the ASAN log: AddressSanitizer:DEADLYSIGNAL ========================================… |
CVE-2022-2122 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or… |
CVE-2022-1925 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow in matroskaparse element in gst_matroska_decompress_data funct… |
CVE-2022-1924 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in matroskademux element in lzo decompression function which causes a… |
CVE-2022-1923 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes… |
CVE-2022-1922 | High | 7.8 | 2022-07-19 | DOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in matroskademux element in gst_matroska_decompress_data function whi… |
CVE-2022-1921 | High | 7.8 | 2022-07-19 | Integer overflow in avidemux element in gst_avi_demux_invert function which allows a heap overwrite while parsing avi files. Potential for arbitrary code execu… |
CVE-2022-1920 | High | 7.8 | 2022-07-19 | Integer overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which allows a heap overwrite while parsing matroska files. Potential… |
CVE-2022-36305 | Medium | 6.1 | 2022-07-19 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the body function at /web/api/v1/upload/UploadHandler.php. |
CVE-2022-36304 | Medium | 6.1 | 2022-07-19 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the generate_response function at /web/api/v1/upload/UploadHandler.php. |
CVE-2022-36303 | Medium | 6.1 | 2022-07-19 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the handle_file_upload function at /web/api/v1/upload/UploadHandler.php. |
CVE-2022-34025 | Medium | 6.1 | 2022-07-19 | Vesta v1.0.0-5 was discovered to contain a cross-site scripting (XSS) vulnerability via the post function at /web/api/v1/upload/UploadHandler.php. |