com.aliyun.emr:emr-druid_2.11 (>=1.7.0, <=2.2.0), com.github.1510460325:core (>=1.0.3, <=2.18.12) +128 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.18)

mysql:mysql-connector-java MAVEN version 5.1.18 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.aliyun.emr:emr-druid2.11 =1.7.0, =1.0.3, =1.3.0, =1.5.0, =1.0.3, =1.0.0, =0.27, =0.28, =0.27, =0.30 an...

ai.hyacinth.framework:core-service-jpa-support (>=0.5.0, <=0.5.24), ai.hyacinth.framework:core-service-trigger-server (>=0.5.0, <=0.5.24) +5345 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (>=8.0.7-dmr, <=8.0.33)

mysql:mysql-connector-java MAVEN version =8.0.7-dmr, =0.5.0, =0.5.0, =4.2.6, =j8.2.2.0, =greenwich.sr1, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef,...

com.alipay.sofa.acts:acts-bom (1.0.0), com.alipay.sofa.acts:acts-common-util (1.0.0) +28 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.16)

mysql:mysql-connector-java MAVEN version 5.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.alipay.sofa.acts:acts-bom 1.0.0 - com.alipay.sofa.acts:acts-common-util 1.0.0 -...

cc.concurrent:config-server (0.1), ch.inftec.flyway:flyway-extension-commandline (>=0.1-rc-1, <=0.1-s-pr-11_8) +74 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.26)

mysql:mysql-connector-java MAVEN version 5.1.26 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cc.concurrent:config-server 0.1 - ch.inftec.flyway:flyway-extension-commandline =0.1-rc-1, =0.1-rc-1,...

ai.preferred:venom (>=4.2.1, <=4.2.5), cc.xbyter.cloud:code-generator (1.0.0) +94 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.48)

mysql:mysql-connector-java MAVEN version 5.1.48 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ai.preferred:venom =4.2.1, =a.1.1.1, =a.2.0.0.rc1, =a.1.1.1, =a.2.0.0.rc1, =a.1.1.1, =a.1.1.2, =a.1.1.1,...

br.com.progolden:webapp-parent (>=1.1, <=1.3), co.jufeng:jufeng-core (1.0.0) +151 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.35)

mysql:mysql-connector-java MAVEN version 5.1.35 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - br.com.progolden:webapp-parent =1.1, =4.2.12, =4.2.12, =4.2.12, =4.2.12, =4.2.12, =1.2.3, =1.0.0, =0.2.0,...

com.alibaba.rocketmq:rocketmq-qatest (3.1.1), com.axway.ats.distrib:ats-distrib (>=4.0.0, <=4.0.6) +119 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.13)

mysql:mysql-connector-java MAVEN version 5.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.alibaba.rocketmq:rocketmq-qatest 3.1.1 - com.axway.ats.distrib:ats-distrib =4.0.0, =4.0.0, =4.0.0,...

ch.wavein:wi-play-mongo_2.12 (1.6), ch.wavein:wi-play-mongo_2.13 (1.7.5) +70 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.10)

mysql:mysql-connector-java MAVEN version 5.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.wavein:wi-play-mongo2.12 1.6 - ch.wavein:wi-play-mongo2.13 1.7.5 - com.54chen:amoeba-parser 0.0.1 -...

OpenRefine Remote Code execution in project import with mysql jdbc url attack

Summary An remote Code exec vulnerability allows any unauthenticated user to exec code on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker can ge...

GHSA-P3R5-X3HR-GPG5 OpenRefine Remote Code execution in project import with mysql jdbc url attack

Summary An remote Code exec vulnerability allows any unauthenticated user to exec code on the server. Details Hi,Team, i find openrefine support to import data from database,When use mysql jdbc to connect to database,It is vulnerable to jdbc url attacks,for example,unauthenticated attacker can ge...

PT-2023-28144 · Unknown +2 · Mysql Connector/J +4

Name of the Vulnerable Software and Affected Versions: OpenRefine versions prior to 3.7.5 Description: A remote code execution issue allows any unauthenticated user to execute code on the server. This is possible due to a vulnerability in the way OpenRefine handles certain database connections,...

SUSE: Security Advisory (SUSE-SU-2023:3187-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:3187-1 Security update for javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflags

This update for javapackages-tools, javassist, mysql-connector-java, protobuf, python-python-gflags contains the following fixes: Changes in mysql-connector-java: - Restrict license to GPL-2.0-only - Fix README adjustments - Depend on log4j rather than log4j-mini and adjust log4j dependencies to...

openSUSE 15 Security Update : mysql-connector-java (SUSE-SU-2023:2979-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2979-1 advisory. - CVE-2023-21971: Fixed a denial-of-service vulnerability in the java.sql.DriverManager.getConnection method when used with untrusted inputs bsc1211247...

openSUSE 15 Security Update : mysql-connector-java (SUSE-SU-2023:2241-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2023:2241-1 advisory. - CVE-2023-21971: Fixed a crash in MySQL Connectors that could be triggered by an authenticated remote user bsc1211247. - Ship protobuf 3.9.2 compatible...

Amazon Linux 2 : mysql-connector-java (ALAS-2023-2017)

The version of mysql-connector-java installed on the remote host is prior to 5.1.25-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2017 advisory. Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are...

Debian: Security Advisory (DLA-526-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2019-12086

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

SUSE CVE-2020-2875

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...

SUSE CVE-2020-2933

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...