openSUSE: Security Advisory for mysql (SUSE-SU-2023:2979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.2.10 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Remote Code Execution (RCE)

mysql-connector-java is vulnerable to Remote Code Execution. The vulnerability is due to not sanitizing the propertiesTransformClassName when instantiated or not in setupPropertiesTransformer in the ConnectionUrl.java file. This potentially leads to Arbitrary Code Execution...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0, <=0.5.24), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.24) +5345 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (>=8.0.7-dmr, <=8.0.33)

mysql:mysql-connector-java MAVEN version =8.0.7-dmr, =0.5.0, =0.5.0, =4.2.6, =j8.2.2.0, =greenwich.sr1, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef,...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-maven-plugin (>=1.0-beta, <=1.0.2) +60 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.0.5)

mysql:mysql-connector-java MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.1, =2.1.1, =1.0.0, =1.0.0, =2.0-rc1, =2.0-rc1,...

cc.concurrent:mango (>=1.0, <=1.03), cc.protea.foundation:foundation (>=0.1, <=0.4.1) +74 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.29)

mysql:mysql-connector-java MAVEN version 5.1.29 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cc.concurrent:mango =1.0, =0.1, =0.1, =6.0.05, =2.1, =0.1.0, =0.2.1, =0.1, =1.0.0, =1.0, =1.2.2 and more...

cn.alphabets.light:lightcore-java (1.1.0), cn.springcloud.gray:spring-cloud-gray-server (>=a.1.0.0, <=2.1.0) +62 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.42)

mysql:mysql-connector-java MAVEN version 5.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cn.alphabets.light:lightcore-java 1.1.0 - cn.springcloud.gray:spring-cloud-gray-server =a.1.0.0, =a.1.0.0,...

com.github.skarpushin:summerb (>=2.5.2, <=3.0.0), com.github.skarpushin:summerb-dbupgrade (>=4.1.0, <=4.1.2) +10 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.19)

mysql:mysql-connector-java MAVEN version 5.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.github.skarpushin:summerb =2.5.2, =4.1.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.1.2 -...

com.alibaba:druid (>=0.2.1, <=0.2.3), com.gnizr:gnizr-core (2.4.0-m4) +11 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.0.4)

mysql:mysql-connector-java MAVEN version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.alibaba:druid =0.2.1, =1.0.0, =1.0.0, =1.0.3, =2.6, =4.0.2 - org.tinystruct:tinystruct 0.1.0 Source cve...

org.apache.empire-db:empire-db-codegen (2.0.6-incubating), org.apache.empire-db:empire-db-maven-plugin (2.0.6-incubating) potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.1)

mysql:mysql-connector-java MAVEN version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - org.apache.empire-db:empire-db-codegen 2.0.6-incubating - org.apache.empire-db:empire-db-maven-plugin...

cn.linham:beecloud-core (>=3.3, <=5.8.06), cn.linham:beecloud-service-core (>=3.0, <=5.8.06) +45 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.12)

mysql:mysql-connector-java MAVEN version 5.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cn.linham:beecloud-core =3.3, =3.0, =4.0, =4.4, =4.2.1, =4.2.1, =4.2.1, =4.2.1, =4.2.1, =0.1.0, =0.1.0,...

com.mozu:mozu-api-java (>=1.7.16, <=1.24.11), com.mozu:mozu-api-toolkit (>=1.0.14, <=1.1.7) +1 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (3.0.10)

mysql:mysql-connector-java MAVEN version 3.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.mozu:mozu-api-java =1.7.16, =1.0.14, =1.1.7 - jcs:jcs 1.3 Source cves: CVE-2023-22102 Source advisory:...

ai.libs:jaicore-experiments (>=0.1.0, <=0.2.7), cn.mapway:db-maven-plugin (1.5.0) +87 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.45)

mysql:mysql-connector-java MAVEN version 5.1.45 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ai.libs:jaicore-experiments =0.1.0, =1.1.5, =1.0.2, =0.7.4, =0.7.4, =0.7.4, =0.7.4, =0.7.4, =0.9.0, =1.0.0...

com.erpya:adempiere-business-processors (>=adempiere-3.9.4-abp-1.0.3, <=1.0.5), com.erpya:adempiere-dashboard-improvements (>=1.0.0, <=1.0.1) +96 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.3)

mysql:mysql-connector-java MAVEN version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.erpya:adempiere-business-processors =adempiere-3.9.4-abp-1.0.3, =1.0.0, =1.0.0, =shw-1.0.0, =1.0.0,...

ai.preferred:venom (4.1.3), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +311 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.47)

mysql:mysql-connector-java MAVEN version 5.1.47 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ai.preferred:venom 4.1.3 - ai.tripl:arc-jupyter2.11 =0.0.13, =1.13.3, =finchley.sr2.sr1, =1.0, =6.2.1, =1....

ai.preferred:cerebro (1.0), be.yildiz-games:authentication (>=1.0.0, <=1.0.2) +42 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (6.0.5)

mysql:mysql-connector-java MAVEN version 6.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ai.preferred:cerebro 1.0 - be.yildiz-games:authentication =1.0.0, =1.0.0, =1.1.0, =3.5.0, =0.0.1, =0.0.1,...

br.com.codecode:vlocadora-dao (6.0), br.com.objectos.db:bootstrap-maven-plugin-it (0.3.0) +248 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.38)

mysql:mysql-connector-java MAVEN version 5.1.38 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - br.com.codecode:vlocadora-dao 6.0 - br.com.objectos.db:bootstrap-maven-plugin-it 0.3.0 -...

am.ik.home:uaa-server (>=1.0.0, <=1.8.1), cc.zenfery:springboot-starter-mds-sample (>=0.1.1, <=0.1.2) +134 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.40)

mysql:mysql-connector-java MAVEN version 5.1.40 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - am.ik.home:uaa-server =1.0.0, =0.1.1, =1.8.0-release, =2.50-beta, =1.3.1, =0.0.1, =1.0.0, =1.0.0, =1.0,...

cn.m1c.lannie:m1c-lannie-common (>=1.0.0-release, <=1.0.6.6-release), com.github.debop:hibernate-redis-stresser (2.3.2) +16 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (6.0.3)

mysql:mysql-connector-java MAVEN version 6.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cn.m1c.lannie:m1c-lannie-common =1.0.0-release, =v2.5.00r160728, =1.0.0, =5.0.0.m3, =5.0.0.m3, =5.0.0.rc1,...

com.googlecode.metridoc:metridoc-all (>=0.6, <=0.24), com.googlecode.metridoc:metridoc-camel-core (>=0.6, <=0.12) +39 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.15)

mysql:mysql-connector-java MAVEN version 5.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.googlecode.metridoc:metridoc-all =0.6, =0.6, =0.13, =0.4.2, =0.4.2, =0.9, =0.4.2, =0.5, =0.7, =0.16,...