# Vulnerabilities published in 2022


- [CVE-2022-21295](https://insights.sbomify.com/CVE-2022-21295/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2022-21294](https://insights.sbomify.com/CVE-2022-21294/): Denial of service in Java SE JDK and JRE (medium 5.3)
- [CVE-2022-21293](https://insights.sbomify.com/CVE-2022-21293/): Denial of service in Java SE JDK and JRE (medium 5.3)
- [CVE-2022-21292](https://insights.sbomify.com/CVE-2022-21292/): Information disclosure in WebLogic Server (high 7.5)
- [CVE-2022-21291](https://insights.sbomify.com/CVE-2022-21291/): Other in Java SE JDK and JRE (medium 5.3)
- [CVE-2022-21290](https://insights.sbomify.com/CVE-2022-21290/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-2129](https://insights.sbomify.com/CVE-2022-2129/): Out-of-bounds Write in vim/vim (high 7.8)
- [CVE-2022-21289](https://insights.sbomify.com/CVE-2022-21289/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21288](https://insights.sbomify.com/CVE-2022-21288/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21287](https://insights.sbomify.com/CVE-2022-21287/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21286](https://insights.sbomify.com/CVE-2022-21286/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21285](https://insights.sbomify.com/CVE-2022-21285/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21284](https://insights.sbomify.com/CVE-2022-21284/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21283](https://insights.sbomify.com/CVE-2022-21283/): Denial of service in Java SE JDK and JRE (medium 5.3)
- [CVE-2022-21282](https://insights.sbomify.com/CVE-2022-21282/): XML external entity in Java SE JDK and JRE (medium 5.3)
- [CVE-2022-21281](https://insights.sbomify.com/CVE-2022-21281/): Other in Primavera Portfolio Management (medium 4.8)
- [CVE-2022-21280](https://insights.sbomify.com/CVE-2022-21280/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-2128](https://insights.sbomify.com/CVE-2022-2128/): Unrestricted Upload of File with Dangerous Type in polonel/trudesk (critical 9.6)
- [CVE-2022-21279](https://insights.sbomify.com/CVE-2022-21279/): Other in MySQL Cluster (medium 6.3)
- [CVE-2022-21278](https://insights.sbomify.com/CVE-2022-21278/): Other in MySQL Server (high 7.1)
- [CVE-2022-21277](https://insights.sbomify.com/CVE-2022-21277/): Denial of service in Java SE JDK and JRE (medium 5.3)
- [CVE-2022-21276](https://insights.sbomify.com/CVE-2022-21276/): Other in Communications Billing and Revenue Management (critical 9.9)
- [CVE-2022-21275](https://insights.sbomify.com/CVE-2022-21275/): Other in Communications Billing and Revenue Management (critical 10.0)
- [CVE-2022-21274](https://insights.sbomify.com/CVE-2022-21274/): Other in Sourcing (high 8.1)
- [CVE-2022-21273](https://insights.sbomify.com/CVE-2022-21273/): Other in Project Costing (high 8.1)
- [CVE-2022-21272](https://insights.sbomify.com/CVE-2022-21272/): Cross-site scripting in PeopleSoft Enterprise PT PeopleTools (medium 6.1)
- [CVE-2022-21271](https://insights.sbomify.com/CVE-2022-21271/): Denial of service in Solaris Operating System (medium 5.3)
- [CVE-2022-21270](https://insights.sbomify.com/CVE-2022-21270/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2022-2127](https://insights.sbomify.com/CVE-2022-2127/): Samba: out-of-bounds read in winbind auth_crap (medium 5.9)
- [CVE-2022-21269](https://insights.sbomify.com/CVE-2022-21269/): Cross-site scripting in Primavera Portfolio Management (medium 6.1)
- [CVE-2022-21268](https://insights.sbomify.com/CVE-2022-21268/): Information disclosure in Communications Billing and Revenue Management (low 3.3)
- [CVE-2022-21267](https://insights.sbomify.com/CVE-2022-21267/): Information disclosure in Communications Billing and Revenue Management (low 3.3)
- [CVE-2022-21266](https://insights.sbomify.com/CVE-2022-21266/): Information disclosure in Communications Billing and Revenue Management (high 7.5)
- [CVE-2022-21265](https://insights.sbomify.com/CVE-2022-21265/): Other in MySQL Server (low 3.8)
- [CVE-2022-21264](https://insights.sbomify.com/CVE-2022-21264/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2022-21263](https://insights.sbomify.com/CVE-2022-21263/): Other in Solaris Operating System (medium 4.8)
- [CVE-2022-21262](https://insights.sbomify.com/CVE-2022-21262/): Other in WebLogic Server (medium 6.1)
- [CVE-2022-21261](https://insights.sbomify.com/CVE-2022-21261/): Other in WebLogic Server (medium 6.1)
- [CVE-2022-21260](https://insights.sbomify.com/CVE-2022-21260/): Other in WebLogic Server (medium 6.1)
- [CVE-2022-2126](https://insights.sbomify.com/CVE-2022-2126/): Out-of-bounds Read in vim/vim (high 7.8)
- [CVE-2022-21259](https://insights.sbomify.com/CVE-2022-21259/): Other in WebLogic Server (medium 6.1)
- [CVE-2022-21258](https://insights.sbomify.com/CVE-2022-21258/): Other in WebLogic Server (medium 6.1)
- [CVE-2022-21257](https://insights.sbomify.com/CVE-2022-21257/): Other in WebLogic Server (medium 6.1)
- [CVE-2022-21256](https://insights.sbomify.com/CVE-2022-21256/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2022-21255](https://insights.sbomify.com/CVE-2022-21255/): Other in Configurator (high 8.1)
- [CVE-2022-21254](https://insights.sbomify.com/CVE-2022-21254/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2022-21253](https://insights.sbomify.com/CVE-2022-21253/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2022-21252](https://insights.sbomify.com/CVE-2022-21252/): Other in WebLogic Server (medium 6.5)
- [CVE-2022-21251](https://insights.sbomify.com/CVE-2022-21251/): Denial of service in Installed Base (high 7.5)
- [CVE-2022-21250](https://insights.sbomify.com/CVE-2022-21250/): Other in Trade Management (high 8.1)
- [CVE-2022-2125](https://insights.sbomify.com/CVE-2022-2125/): Heap-based Buffer Overflow in vim/vim (high 7.8)
- [CVE-2022-21249](https://insights.sbomify.com/CVE-2022-21249/): Denial of service in MySQL Server (low 2.7)
- [CVE-2022-21248](https://insights.sbomify.com/CVE-2022-21248/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2022-21247](https://insights.sbomify.com/CVE-2022-21247/): Other in Database - Enterprise Edition (low 2.7)
- [CVE-2022-21246](https://insights.sbomify.com/CVE-2022-21246/): Other in Communications Operations Monitor (medium 5.4)
- [CVE-2022-21245](https://insights.sbomify.com/CVE-2022-21245/): Other in MySQL Server (medium 4.3)
- [CVE-2022-21244](https://insights.sbomify.com/CVE-2022-21244/): Other in Primavera Portfolio Management (medium 4.3)
- [CVE-2022-21243](https://insights.sbomify.com/CVE-2022-21243/): Denial of service in Primavera Portfolio Management (medium 4.3)
- [CVE-2022-21242](https://insights.sbomify.com/CVE-2022-21242/): Other in Primavera Portfolio Management (medium 5.4)
- [CVE-2022-21241](https://insights.sbomify.com/CVE-2022-21241/): Cross-site scripting in CSV+ (critical 9.6)
- [CVE-2022-21240](https://insights.sbomify.com/CVE-2022-21240/): Memory corruption in Intel(R) PROSet/Wireless WiFi products (medium 4.4)
- [CVE-2022-2124](https://insights.sbomify.com/CVE-2022-2124/): Buffer Over-read in vim/vim (high 7.8)
- [CVE-2022-21239](https://insights.sbomify.com/CVE-2022-21239/): Memory corruption in Intel QAT Driver for Windows (medium 5.6)
- [CVE-2022-21238](https://insights.sbomify.com/CVE-2022-21238/): Cross-site scripting in InRouter302 (medium 5.4)
- [CVE-2022-21237](https://insights.sbomify.com/CVE-2022-21237/): Memory corruption in Intel(R) NUCs (medium 6.7)
- [CVE-2022-21236](https://insights.sbomify.com/CVE-2022-21236/): Information disclosure in reolink:rlc-410w firmware (high 8.1)
- [CVE-2022-21235](https://insights.sbomify.com/CVE-2022-21235/): Command Injection (high 8.1)
- [CVE-2022-21234](https://insights.sbomify.com/CVE-2022-21234/): SQL injection in lansweeper (critical 9.1)
- [CVE-2022-21233](https://insights.sbomify.com/CVE-2022-21233/): Information disclosure in Intel(R) Processors (medium 5.5)
- [CVE-2022-21231](https://insights.sbomify.com/CVE-2022-21231/): Prototype Pollution (high 7.5)
- [CVE-2022-21230](https://insights.sbomify.com/CVE-2022-21230/): Information Exposure (medium 5.5)
- [CVE-2022-2123](https://insights.sbomify.com/CVE-2022-2123/): WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF (medium 4.3)
- [CVE-2022-21229](https://insights.sbomify.com/CVE-2022-21229/): Memory corruption in Intel(R) NUC 9 Extreme Laptop Kit drivers (high 7.8)
- [CVE-2022-21228](https://insights.sbomify.com/CVE-2022-21228/): ICSA-22-090-03 Fuji Electric Alpha5 (high 7.8)
- [CVE-2022-21227](https://insights.sbomify.com/CVE-2022-21227/): Denial of Service (DoS) (high 7.5)
- [CVE-2022-21226](https://insights.sbomify.com/CVE-2022-21226/): Memory corruption in Intel(R) Trace Analyzer and Collector (medium 5.5)
- [CVE-2022-21225](https://insights.sbomify.com/CVE-2022-21225/): Privilege escalation in Intel(R) Data Center Manager software (high 8.0)
- [CVE-2022-21223](https://insights.sbomify.com/CVE-2022-21223/): Command Injection (high 8.1)
- [CVE-2022-21222](https://insights.sbomify.com/CVE-2022-21222/): Regular Expression Denial of Service (ReDoS) (medium 5.3)
- [CVE-2022-21221](https://insights.sbomify.com/CVE-2022-21221/): Directory Traversal (medium 5.9)
- [CVE-2022-21220](https://insights.sbomify.com/CVE-2022-21220/): XML external entity in Intel(R) Quartus(R) Prime Pro Edition (high 7.8)
- [CVE-2022-2122](https://insights.sbomify.com/CVE-2022-2122/): Integer overflow in GStreamer (high 7.8)
- [CVE-2022-21219](https://insights.sbomify.com/CVE-2022-21219/): Memory corruption in CX-Programmer (high 7.8)
- [CVE-2022-21218](https://insights.sbomify.com/CVE-2022-21218/): Information disclosure in Intel(R) Trace Analyzer and Collector (medium 5.5)
- [CVE-2022-21217](https://insights.sbomify.com/CVE-2022-21217/): Memory corruption in reolink:rlc-410w firmware (critical 9.1)
- [CVE-2022-21216](https://insights.sbomify.com/CVE-2022-21216/): Privilege escalation in Intel(R) Atom and Intel Xeon Scalable Processors (high 7.5)
- [CVE-2022-21215](https://insights.sbomify.com/CVE-2022-21215/): Airspan Networks Mimosa Server-Side Request Forgery (SSRF) (critical 10.0)
- [CVE-2022-21214](https://insights.sbomify.com/CVE-2022-21214/): ICSA-22-090-03 Fuji Electric Alpha5 (high 7.8)
- [CVE-2022-21213](https://insights.sbomify.com/CVE-2022-21213/): Prototype Pollution (high 7.5)
- [CVE-2022-21212](https://insights.sbomify.com/CVE-2022-21212/): Denial of service in Intel(R) PROSet/Wireless WiFi products (medium 6.5)
- [CVE-2022-21211](https://insights.sbomify.com/CVE-2022-21211/): Denial of Service (DoS) (medium 5.9)
- [CVE-2022-21210](https://insights.sbomify.com/CVE-2022-21210/): SQL injection in lansweeper (medium 6.6)
- [CVE-2022-2121](https://insights.sbomify.com/CVE-2022-2121/): OFFIS DCMTK NULL Pointer Dereference (high 7.5)
- [CVE-2022-21209](https://insights.sbomify.com/CVE-2022-21209/): ICSA-22-055-01 FATEK Automation FvDesigner (high 7.8)
- [CVE-2022-21208](https://insights.sbomify.com/CVE-2022-21208/): Denial of Service (DoS) (high 7.5)
- [CVE-2022-21205](https://insights.sbomify.com/CVE-2022-21205/): XML external entity in Intel(R) Quartus(R) Prime Pro Edition (high 7.5)
- [CVE-2022-21204](https://insights.sbomify.com/CVE-2022-21204/): Privilege escalation in Intel(R) Quartus(R) Prime Pro Edition (high 7.8)
- [CVE-2022-21203](https://insights.sbomify.com/CVE-2022-21203/): Privilege escalation in Intel(R) Quartus(R) Prime Standard Edition (high 7.8)
- [CVE-2022-21202](https://insights.sbomify.com/CVE-2022-21202/): ICSA-22-090-03 Fuji Electric Alpha5 (low 3.3)
- [CVE-2022-21201](https://insights.sbomify.com/CVE-2022-21201/): Memory corruption in LinkHub Mesh Wifi (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2022/page/403/