Archive

19 January 2022

Vulnerabilities first published on this day (UTC), newest first.

← December 2021 2022 / January /19 February 2022 →

All Critical High Medium Low Exploited only Public exploit

136 results · Clear filters · Feed

Medium 5.0

CVE-2022-21701

Privileged Escalation in Istio

Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escalation attack. Users who have `CREATE` permission for `gateways.gateway.networking.k8s.io` objects can escalate this p…

istio istio

Jan 19, 2022
Medium 6.8

CVE-2022-21679

Authorization Policy bypass in Istio

Istio is an open platform to connect, manage, and secure microservices. In Istio 1.12.0 and 1.12.1 The authorization policy with hosts and notHosts might be accidentally bypassed for ALLOW action or rejected unexpectedly for DENY action during the upgrade fro…

istio istio

Jan 19, 2022
Medium 5.4

CVE-2021-44777

WordPress Email Tracker plugin <= 5.2.6 - Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion

Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered in Email Tracker WordPress plugin (versions <= 5.2.6).

Prashant Baldha Email Tracker (WordPress plugin) Web / CMS

Jan 19, 2022
Medium 5.7

CVE-2021-23842

Use of Hard-coded Cryptographic Key

Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieve the key from the firmware to decrypt network traffic between the AMC2 and the host system. Thus, an attacker can exp…

Bosch BIS APE AMS

Jan 19, 2022
Medium 6.8

CVE-2022-0274

Cross-site Scripting (XSS) - Stored in orchardcms/orchardcore

Cross-site Scripting (XSS) - Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

OrchardCMS orchardcms/orchardcore OrchardCore.Application.Cms.Targets NuGet

Jan 19, 2022
Medium 4.8

CVE-2022-22310

IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A rem…

IBM WebSphere Application Server - Liberty

Jan 19, 2022
Medium 6.6

CVE-2022-21403

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 4.8

CVE-2022-21402

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 6.6

CVE-2022-21401

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 5.4

CVE-2022-21400

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 6.6

CVE-2022-21399

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 5.4

CVE-2022-21398

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 5.4

CVE-2022-21397

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 5.4

CVE-2022-21396

Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation En…

Oracle Communications Operations Monitor

Jan 19, 2022
Medium 6.5

CVE-2022-21394

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jan 19, 2022
Medium 4.3

CVE-2022-21393

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12…

Oracle Database - Enterprise Edition

Jan 19, 2022
Medium 5.3

CVE-2022-21387

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Sup…

Oracle Commerce Platform

Jan 19, 2022
Medium 6.1

CVE-2022-21386

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…

Oracle WebLogic Server

Jan 19, 2022
Medium 4.3

CVE-2022-21383

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). Sup…

Oracle Enterprise Session Border Controller

Jan 19, 2022
Medium 6.4

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). S…

Oracle Enterprise Session Border Controller

Jan 19, 2022
Medium 6.3

CVE-2022-21380

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are a…

Oracle MySQL Cluster

Jan 19, 2022
Medium 4.9

CVE-2022-21379

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported vers…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu

Jan 19, 2022
Medium 5.5

CVE-2022-21378

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 19, 2022
Medium 5.4

CVE-2022-21377

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API)…

Oracle Primavera Portfolio Management

Jan 19, 2022
Medium 5.4

CVE-2022-21376

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acce…

Oracle Primavera Portfolio Management

Jan 19, 2022
Medium 5.5

CVE-2022-21375

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affect…

Oracle Solaris Operating System

Jan 19, 2022
Medium 4.9

CVE-2022-21374

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 19, 2022
Medium 6.1

CVE-2022-21373

Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator). Suppor…

Oracle Partner Management

Jan 19, 2022
Medium 4.9

CVE-2022-21370

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 19, 2022
Medium 6.1

CVE-2022-21369

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supp…

Oracle PeopleSoft Enterprise PT PeopleTools

Jan 19, 2022
Medium 4.7

CVE-2022-21368

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions …

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 19, 2022
Medium 5.5

CVE-2022-21367

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 19, 2022
Medium 5.3

CVE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21365

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 5.3

CVE-2022-21364

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported ve…

Oracle PeopleSoft Enterprise PT PeopleTools

Jan 19, 2022
Medium 6.6

CVE-2022-21363

Improper Handling of Insufficient Permissions or Privileges in MySQL Connectors Java

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…

Oracle MySQL Connectors mysql mysql-connector-java Ubuntu Azure Linux Maven

Jan 19, 2022
Medium 4.9

CVE-2022-21362

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Azure Linux

Jan 19, 2022
Medium 6.1

CVE-2022-21361

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported ver…

Oracle WebLogic Server

Jan 19, 2022
Medium 5.3

CVE-2022-21360

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). …

Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Jan 19, 2022
Medium 6.1

CVE-2022-21359

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework)…

Oracle PeopleSoft Enterprise PT PeopleTools

Jan 19, 2022