106 matches found
Oracle Linux 8 : mysql:8.0 (ELSA-2019-2511)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2511 advisory. mecab 0.996-1.9 - Release bump for rebuilding on new arches Related: 1518842 0.996-1.8 - skip %verify of /etc/opt/rh/rh-mysql57/mecabrc Resolves: 13823...
RLSA-2019:2511 Important: mysql:8.0 security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The following packages have been upgraded to a later upstream version: mysql 8.0.17. Security Fixes: mysql: Server: Replication multiple unspecified vulnerabilities...
Man-in-the-Middle Attack
MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. It was found that the MySQL client library permitted but did not require a client to use SSL/TLS when establishing a secure connection to a MySQL server using the "--ssl" option. A man-in-the-middle...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
Denial Of Service (DoS)
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. This update fixes several vulnerabilities in the MySQL database server. Information about these flaws can be found on the Oracle Critical Patch Update...
CVE-2019-2617 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-2617
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
CVE-2019-2617
CVE-2019-2617 is a MySQL Server vulnerability in the Server: Replication path. Affected: MySQL 8.0.15 and prior. Exploitation requires network access via multiple protocols and can lead to a hang or full crash (DOS). Remediation in vendor advisories includes upgrading to fixed releases (e.g., Red...
CVE-2007-2617
creationtimestamp| type| source ---|---|--- 2018-09-21 01:57:20+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/solaris/escalate/srsexecreadline.rb 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:22+00:00| seen|...
Security Bulletin: vulnerabilities in OpenSource Oracle MySQL Server affect IBM Security Guardium
Summary An unspecified vulnerability in Oracle MySQL Server related to the Server could allow a remote attacker to cause a denial of service Vulnerability Details CVEID: CVE-2015-2582 DESCRIPTION: An unspecified vulnerability in Oracle MySQL Server related to the Server : GIS component could allo...
CVE-2017-2617
The set of connected sources confirms a vulnerability in hawtio prior to version 1.5.5 that allows remote code execution via file upload. An attacker can upload a crafted file to the Hawtio web console, which could be executed on the target host where Hawtio is deployed. Red Hat’s advisory (RHSA-...
Important: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R6 security and bug fix update
An update is now available for Red Hat JBoss Fuse and Red Hat JBoss A-MQ. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
CVE-2018-2617
Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise OSS Support Tools...
CVE-2018-2617
CVE-2018-2617 affects Oracle OSS Support Tools, specifically the Diagnostic Assistant subcomponent of Oracle Support Tools, with versions prior to 2.11.33. The vulnerability allows an unauthenticated, network-accessible attacker to access OSS Support Tools via HTTP, potentially exposing confident...
CVE-2018-2617
Vulnerability in the OSS Support Tools component of Oracle Support Tools subcomponent: Diagnostic Assistant. The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise OSS Support Tools...
CVE-2016-2617
CVE-2016-2617 is rejected/not used; the candidate was not associated with any vulnerability.
CVE-2017-2617
It was found that a flaw in hawtio could cause remote code execution via file upload. An attacker could use this vulnerability to upload crafted file which could be executed on a target machine where hawtio is deployed...
Obihai Patches Memory Corruption, DoS, CSRF Vulnerabilities
Obihai Technology recently patched vulnerabilities in its ObiPhone IP phones that could have led to memory corruption, buffer overflow, and denial of service conditions, among other outcomes. The California-based company manufactures IP-enabled phones and VOIP telephone adapters it calls OBi...