EulerOS 2.0 SP8 : mysql-connector-java (EulerOS-SA-2020-1812)

According to the version of the mysql-connector-java package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are...

Security Bulletin: Security vulnerability has been identified in Oracle MySQL shipped with IBM Tivoli Network Manager IP Edition (CVE-2017-3523)

Summary Oracle MySQL is shipped with IBM Tivoli Network Manager IP Edition. Information about a security vulnerability affecting Oracle MySQL has been published in a security bulletin. Vulnerability Details Refer to the security bulletin listed in the Remediation/Fixes section Affected Products a...

openSUSE Security Update : mysql-connector-java (openSUSE-2018-248)

This update for mysql-connector-java to version to 5.1.42 fixes several issues. These security issues were fixed : - CVE-2017-3589: An unspecified vulnerability in MySQL Connector/J could have resulted in unauthorized update, insert or delete access to some of MySQL Connectors accessible data...

Ubuntu: Security Advisory (USN-3523-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 17.10 : linux-raspi2 vulnerabilities (USN-3523-3)

Jann Horn discovered that the Berkeley Packet Filter BPF implementation in the Linux kernel did not properly check the relationship between pointer values and the BPF stack. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-1786...

Ubuntu: Security Advisory (USN-3523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated mysql-connector-java packages fix security vulnerabilities

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code CVE-2017-3523. Two vulnerabilities have been found in the MySQL Connector/J JDBC driver CVE-2017-3586, CVE-2017-3589...

[SECURITY] [DLA 945-1] mysql-connector-java security update

Package : mysql-connector-java Version : 5.1.42-1deb7u1 CVE ID : CVE-2017-3523 CVE-2017-3586 CVE-2017-3589 Several issues were discovered in mysql-connector-java that allow attackers to execute arbitrary code, insert or delete access to some of MySQL Connectors accessible data as well as...

Debian Security Advisory DSA 3840-1 (mysql-connector-java - security update)

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitrary code. For additional details, please refer to the advisory at https://www.computest.nl/advisories/CT-2017-0425MySQL-Connector-J.txt...

CVE-2017-3523

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Whil...

CVE-2017-3523

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Whil...

CVE-2017-3523

CVE-2017-3523 affects Oracle MySQL Connector/J (MySQL Connectors). Connected docs indicate affected: MySQL Connector/J versions 5.1.40 and earlier. The vulnerability is described as difficult to exploit but allows takeover of MySQL Connectors by a low-privileged, network-accessible attacker acros...

CVE-2016-3523

CVE-2016-3523 is described in the provided documents as an unspecified vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite affecting versions 12.1.3, 12.2.3, 12.2.4, and 12.2.5. The issue reportedly allows remote attackers to affect integrity via v...

Debian DSA-3523-1 : iceweasel - security update

This update disables the Graphite font shaping library in Iceweasel, Debian's version of the Mozilla Firefox web browser. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3523. The text...

[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04774019 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04774019 Version: 1 HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple...

CVE-2014-3523

Memory leak in the winntaccept function in server/mpm/winnt/child.c in the WinNT MPM in the Apache HTTP Server 2.4.x before 2.4.10 on Windows, when the default AcceptFilter is enabled, allows remote attackers to cause a denial of service memory consumption via crafted requests...

openSUSE Security Update : inn (openSUSE-SU-2012:1171-1)

fix starttls command injection issue CVE-2012-3523, bnc776967 - handle /var/run on tmpfs. bnc778439 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-600. The text description of...

CVE-2013-3523

CVE-2013-3523 : The connected sources confirm a SQL injection vulnerability in This HTML Is Simple (THIS) before 1.2.4. The flaw allows an attacker to remotely execute arbitrary SQL commands through URL vectors involving op=page&id=. Affected component is the THIS web application code path handli...

SuSE 11.2 Security Update : inn (SAT Patch Number 6774)

A STARTTLS injection issue has been fixed in inn. CVE-2012-3523 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

CVE-2012-3523

The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection"...