Oracle MySQL 的 MySQL Connectors 安全漏洞

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in MySQL Connectors for Oracle MySQL. An attacker could exploit this vulnerability to cause the MySQL server to hang or crash frequently and repeatedly...

PT-2024-3194 · Mysql Server · Mysql Connectors

Name of the Vulnerable Software and Affected Versions: MySQL Connectors versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the Connector/Python component of MySQL Connectors, allowing an unauthenticated attacker with network access via multiple protocol...

MGASA-2024-0130 Updated apache-mod_jk packages fix security vulnerability

The modjk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied requests, modjk would use an implicit mapping and map the request to the firs...

SUSE SLES12 Security Update : apache2-mod_jk (SUSE-SU-2024:1198-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:1198-1 advisory. - Upgrade from version 1.2.40 to 1.2.49 - CVE-2023-41081: Fix an information disclosure issue in modjk. bsc1215301 Tenable has extracted the...

The vulnerability of the data integration tool Softing edgeAggregator and the software modules for connecting controllers such as Softing edgeConnector Modbus, Softing edgeConnector 840D, Softing edgeConnector Fanuc CNC, and Softing edgeConnector Siemens lies in the transmission of accounting data in an unencrypted form. This allows unauthorized individuals to gain unauthorized access to protected information.

The vulnerability of the data integration tool Softing edgeAggregator and the software modules for connecting controllers such as Softing edgeConnector Modbus, Softing edgeConnector 840D, Softing edgeConnector Fanuc CNC, and Softing edgeConnector Siemens lies in the transmission of credentials in...

de.ikor.sip.foundation:sip-integration-starter (=3.2.0), de.ikor.sip.foundation:sip-security (=3.2.0) +95 more potentially affected by CVE-2024-22371 via org.apache.camel:camel-core (>=4.0.0 <=4.0.3)

org.apache.camel:camel-core MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.3 a...

org.apache.camel.kafkaconnector:camel-aws-redshift-sink-kafka-connector (>=4.0.0 <=4.0.3), org.apache.camel.kafkaconnector:camel-aws-redshift-source-kafka-connector (>=4.0.0 <=4.0.3) +17 more potentially affected by CVE-2024-22369 via org.apache.camel:camel-sql (>=4.0.0 <=4.0.3)

org.apache.camel:camel-sql MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =3.2.0, =3.4.0 - org.apache.camel.quar...

[SECURITY] Fedora 39 Update: libmodsecurity-3.0.12-1.fc39

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

[SECURITY] Fedora 38 Update: libmodsecurity-3.0.12-1.fc38

Libmodsecurity is one component of the ModSecurity v3 project. The library codebase serves as an interface to ModSecurity Connectors taking in web traffic and applying traditional ModSecurity processing. In general, it provides the capability to load/interpret rules written in the ModSecurity...

CSAM Strengthens Attack Surface Coverage and Risk Assessment With Third-Party Connectors

Organizations using Qualys CyberSecurity Asset Management CSAM can now import asset data from any external system into the Enterprise TruRisk Platform. With third-party connectors, you will identify any existing coverage gaps and add business context to your unified inventory, helping you...

Oracle MySQL Connectors C++ and ODBC (January 2024 CPU)

The 8.1.0 versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2024 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are...

Vulnerabilities fixed in Oracle MySQL

Oracle has fixed vulnerabilities in several MySQL products. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Manipulation of data Remote code execution User rights Access to sensitive da...

CVE-2023-22102

A vulnerability was found in the MySQL Connectors product of Oracle MySQL component: Connector/J. This issue may allow unauthenticated attackers with network access via multiple protocols to compromise MySQL Connectors. Successful attacks can result in a takeover of MySQL Connectors...

Recommended number of Cloud Connectors for Citrix Cloud deployment.

A guideline for deploying Cloud Connectors to ensure optimal performance and reliability of Citrix Cloud services...

Removing maintenance mode from hosting connection fails (after certificate thumbprint update)

After the SSL certificate is updated on vCenter, updated the cert SSL thumbprint on for DaaS using remote powershell SDK 2. We put the Hosting Conneciton in maintenance mode to achieve above. 3. Updated the certificates on Trusted People store of Cloud Connectors. 4. This causes all the catalogs...

How to validate Rendezvous version

There are two versions of Rendezvous available: - Version 1 V1: supports bypassing the Citrix Cloud Connectors for HDX session traffic only. - Version 2 V2: supports bypassing the Citrix Cloud Connectors for both control traffic and HDX session traffic. How to check which version of Rendezvous...

httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure

A vulnerability was found in Apache Tomcat Connectors modjk. Affected versions of this package are vulnerable to information exposure in the modjk component. This flaw allows an attacker to exploit the implicit mapping functionality, resulting in the unintended exposure of the status worker and...

httpd: Apache Tomcat Connectors (mod_jk) Information Disclosure

A vulnerability was found in Apache Tomcat Connectors modjk. Affected versions of this package are vulnerable to information exposure in the modjk component. This flaw allows an attacker to exploit the implicit mapping functionality, resulting in the unintended exposure of the status worker and...

PT-2023-9595

Name of the Vulnerable Software and Affected Versions MySQL Connectors versions 9.0.0 and prior Description The issue is related to a lack of authentication for a critical function in the Connector/Python component of MySQL Connectors, allowing a low-privileged attacker with network access via...

PT-2023-9630 · Mysql Server · Mysql Connectors

Name of the Vulnerable Software and Affected Versions: MySQL Connectors versions 8.4.0 and prior Description: The issue is related to insufficient input validation in the Connector/Python component of the MySQL Connectors product. This can allow a remote attacker with low privileges and network...