Ubuntu 18.04 LTS / 20.04 LTS : MySQL vulnerabilities (USN-5270-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5270-1 advisory. Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been...

CVE-2022-21249 vulnerabilities

Vulnerabilities for packages: mysql...

Oracle MySQL Server 8.0 <= 8.0.27 Security Update (cpujan2022) - Linux

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

Oracle MySQL Server 8.0 <= 8.0.27 Security Update (cpujan2022) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

CVE-2021-21249

creationtimestamp| type| source ---|---|--- 2021-01-16 00:51:27+00:00| published-proof-of-concept| https://t.me/cibsecurity/22232...

CVE-2021-21249

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can lead to post-auth remote code execution. In order to parse and process YAML files, OneDev uses SnakeYaml which by default when not using SafeConstructor allows the...

CVE-2021-21249

CVE-2021-21249 affects OneDev prior to 4.0.3, where YAML parsing with SnakeYaml could deserialize arbitrary classes, enabling post-auth remote code execution. The root cause is unsafe deserialization when not using SafeConstructor, allowing crafted YAML to instantiate user-controlled classes (e.g...

CVE-2018-21249

creationtimestamp| type| source ---|---|--- 2020-06-19 20:55:36+00:00| seen| https://t.me/cibsecurity/12901...

CVE-2018-21249

Mattermost Server prior to version 5.3.0 is affected by a timing mishandling issue. Affected product: Mattermost Server (versions before 5.3.0). Root cause: timing mishandling in the server. Reported impact is limited in the provided materials, with CVSS indicating low to medium severity (base sc...