SUSE CVE-2021-2471

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

MySQL Connector/J Code Execution

The vulnerability of the MySQL Connector/J component of the Apache Linkis application programming interface, which is responsible for connecting, managing, and orchestrating applications, relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker ...

MySQL Connector/J File Read

The vulnerability of the MySQL Connector/J component of the Apache Linkis application programming interface, which involves connection management and orchestration, stems from insufficient protection of sensitive data when processing the AllowLoadLocalInfile parameter with a value of true...

Important: Red Hat Security Advisory: Red Hat Fuse 7.11.0 release and security update

A minor version update from 7.10 to 7.11 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scorin...

mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0, <=0.5.24), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.24) +3436 more potentially affected by CVE-2021-2471 via mysql:mysql-connector-java (>=8.0.7-dmr, <=8.0.26)

mysql:mysql-connector-java MAVEN version =8.0.7-dmr, =0.5.0, =0.5.0, =4.2.6, =j8.2.2.0, =greenwich.sr1, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef,...

GHSA-W6F2-8WX4-47R5 Incorrect Authorization in MySQL Connector Java

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0, <=0.5.24), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.24) +3436 more potentially affected by CVE-2021-2471 via mysql:mysql-connector-java (>=8.0.7-dmr, <=8.0.26)

mysql:mysql-connector-java MAVEN version =8.0.7-dmr, =0.5.0, =0.5.0, =4.2.6, =j8.2.2.0, =greenwich.sr1, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef,...

com.mozu:mozu-api-java (>=1.7.16, <=1.24.11), com.mozu:mozu-api-toolkit (>=1.0.14, <=1.1.7) +1 more potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (3.0.10)

mysql:mysql-connector-java MAVEN version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.mozu:mozu-api-java =1.7.16, =1.0.14, =1.1.7 - jcs:jcs 1.3 Source cves: CVE-2015-2575 Source advisory:...

org.openwfe:openwfe-embed (1.7.2), org.openwfe:openwfe-engine (1.7.2) +3 more potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (3.1.13)

mysql:mysql-connector-java MAVEN version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - org.openwfe:openwfe-embed 1.7.2 - org.openwfe:openwfe-engine 1.7.2 - org.openwfe:openwfe-sql 1.7.2 -...

ai.databand.azkaban:azkaban-common (3.18.0), ai.databand.azkaban:azkaban-exec-server (3.18.0) +1910 more potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (>=5.0.2, <=5.1.34)

mysql:mysql-connector-java MAVEN version =5.0.2, =1.0.1, =0.2.0, =0.2.0, =0.1.0, =0.3.0, =1.1-beta2, =1.1-beta2, =0.1.0, =0.3.0 and more Source cves: CVE-2015-2575 Source advisory: OSV:GHSA-GC43-G62C-99G2...

org.opencms:opencms (5.0.1) potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (3.0.8)

mysql:mysql-connector-java MAVEN version 3.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - org.opencms:opencms 5.0.1 Source cves: CVE-2015-2575 Source advisory: OSV:GHSA-GC43-G62C-99G2...

ai.databand.azkaban:azkaban-common (3.18.0), ai.databand.azkaban:azkaban-exec-server (3.18.0) +1910 more potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (>=5.0.2, <=5.1.34)

mysql:mysql-connector-java MAVEN version =5.0.2, =1.0.1, =0.2.0, =0.2.0, =0.1.0, =0.3.0, =1.1-beta2, =1.1-beta2, =0.1.0, =0.3.0 and more Source cves: CVE-2015-2575 Source advisory: GHSA-GC43-G62C-99G2...

com.mysql:management (>=1.1.6, <=5-0-2-beta), org.mentaframework:mentawai (1.10.1) potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (3.1.12)

mysql:mysql-connector-java MAVEN version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.mysql:management =1.1.6, =5-0-2-beta - org.mentaframework:mentawai 1.10.1 Source cves: CVE-2015-2575...

com.bbossgroups.plugins:bboss-plugin-hibernate (4.10.8), esper:esper (1.11.0) +3 more potentially affected by CVE-2015-2575 via mysql:mysql-connector-java (3.1.14)

mysql:mysql-connector-java MAVEN version 3.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.bbossgroups.plugins:bboss-plugin-hibernate 4.10.8 - esper:esper 1.11.0 - org.eweb4j:eweb4j-all =1.8.6,...

com.mysql:management (>=1.1.6, <=5-0-2-beta), org.mentaframework:mentawai (1.10.1) potentially affected by CVE-2018-3258 via mysql:mysql-connector-java (3.1.12)

mysql:mysql-connector-java MAVEN version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.mysql:management =1.1.6, =5-0-2-beta - org.mentaframework:mentawai 1.10.1 Source cves: CVE-2018-3258...

com.github.yungyu16:dynamic-config (1.0.1), com.openthinks.libs:sql (2.0) +54 more potentially affected by CVE-2018-3258 via mysql:mysql-connector-java (5.1.14)

mysql:mysql-connector-java MAVEN version 5.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.github.yungyu16:dynamic-config 1.0.1 - com.openthinks.libs:sql 2.0 -...

br.com.objectos.way:db-mysql (>=0.2.0, <=0.4.1), br.com.objectos.way:sql-db-testing (>=0.2.0, <=0.4.1) +72 more potentially affected by CVE-2018-3258 via mysql:mysql-connector-java (5.1.21)

mysql:mysql-connector-java MAVEN version 5.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - br.com.objectos.way:db-mysql =0.2.0, =0.2.0, =0.1.0, =0.3.0, =1.1, =1.0, =1.0, =0.1.0, =0.1.0, =0.1.1 and...

com.bbossgroups.plugins:bboss-plugin-hibernate (4.10.8), esper:esper (1.11.0) +3 more potentially affected by CVE-2018-3258 via mysql:mysql-connector-java (3.1.14)

mysql:mysql-connector-java MAVEN version 3.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.bbossgroups.plugins:bboss-plugin-hibernate 4.10.8 - esper:esper 1.11.0 - org.eweb4j:eweb4j-all =1.8.6,...

be.thematchbox:abstractriver (>=1.0.1, <=1.1.0), cn.dalgen.plugins:mybatis-maven-plugin (>=1.0.0, <=2.1.4) +27 more potentially affected by CVE-2018-3258 via mysql:mysql-connector-java (5.1.33)

mysql:mysql-connector-java MAVEN version 5.1.33 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - be.thematchbox:abstractriver =1.0.1, =1.0.0, =3.1.0, =0.1.0, =0.1.0, =2.4, =2017.1.0.3, =2017.1.0.3,...