Skip to content
OpenAdvisories

Archive

19 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /19 February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2022-23046 Public exploit EPSS 25%

    PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a s…

  • High 8.8
    CVE-2022-21392 Public exploit

    Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework…

    Oracle Enterprise Manager Base Platform
  • High 7.5
    CVE-2022-21371 Public exploit Scanner template EPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…

    Oracle WebLogic Server
  • Medium 6.5
    CVE-2022-21350 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Medium 5.3
    CVE-2022-21340 Public exploit

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

    Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  • Critical 9.8
    CVE-2022-21306 Public exploit

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2021-35587 Exploited Public exploit Scanner template EPSS 96%

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported ve…

    Oracle Access Manager
    KEV Nov 28, 2022
  • Critical 9.8
    CVE-2022-23221 Public exploit EPSS 65%

    Arbitrary code execution in H2 Console

    H2 Console before 2.1.210 allows remote attackers to execute arbitrary code via a jdbc:h2:mem JDBC URL containing the IGNORE_UNKNOWN_SETTINGS=TRUE;FORBID_CREATION=FALSE;INIT=RUNSCRIPT substring, a different vulnerability than CVE-2021-42392.

    com.h2database:h2 h2database h2database Debian Ubuntu Maven