Lucene search
+L

709 matches found

vulnersOsv
vulnersOsv
added 2022/05/14 12:57 a.m.8 views

com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10 <=2.0.2), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10 <=6.0.2) +71 more potentially affected by CVE-2017-9795 via org.apache.geode:geode-core (>=1.10.0 <=1.2.1)

org.apache.geode:geode-core MAVEN version =1.10.0, =0.10, =0.10, =2.0.0, =0.1.9, =2.4.0, =1.22.0, =1.14.0, =1.10.0, =1.10.0, =1.10.0, =1.12.0, =1.11.0, =1.15.4 and more Source cves: CVE-2017-9795 Source advisory: OSV:GHSA-6M68-3W55-6MX4...

7.5CVSS7.1AI score0.04177EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/05/13 1:52 a.m.40 views

Improper Privilege Management in MySQL Connectors Java

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successf...

8.8CVSS5.6AI score0.03742EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/05/13 1:52 a.m.8 views

GHSA-4VRV-CH96-6H42 Improper Privilege Management in MySQL Connectors Java

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successf...

8.8CVSS7.2AI score0.03742EPSS
SaveExploits0References4
OSV
OSV
added 2022/05/13 1:45 a.m.30 views

GHSA-2CF3-G243-HHFX MySQL Connectors Privilege Escalation

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to...

3.3CVSS2.5AI score0.00406EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:45 a.m.24 views

MySQL Connectors Privilege Escalation

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to...

3.3CVSS2.5AI score0.00406EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/13 1:45 a.m.33 views

Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Whil...

6.4CVSS5.2AI score0.01713EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/05/13 1:45 a.m.3 views

GHSA-2XXH-F8R3-HVVR Improper Access Control in MySQL Connectors Java

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Whil...

8.5CVSS7.2AI score0.02877EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/13 1:45 a.m.38 views

Improper Access Control in MySQL Connectors Java

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Whil...

8.5CVSS7.8AI score0.02877EPSS
SaveExploits0References5Affected Software1
The Hacker News
The Hacker News
added 2022/05/10 9:48 a.m.65 views

Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory

Microsoft on Monday disclosed that it mitigated a security flaw affecting Azure Synapse and Azure Data Factory that, if successfully exploited, could result in remote code execution. The vulnerability, tracked as CVE-2022-29972, has been codenamed "SynLapse" by researchers from Orca Security, who...

1.1AI score0.03686EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/04/21 12:0 a.m.85 views

Oracle MySQL Connectors (Apr 2022 CPU)

The version of MySQL Connectors installed on the remote host are affected by a vulnerability as referenced in the April 2022 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/C++ OpenSSL. Supported versions that are affected are 8.0.28 and prior...

7.5CVSS6.5AI score0.70561EPSS
SaveExploits2References3
NCSC
NCSC
added 2022/04/20 12:0 a.m.14 views

Vulnerabilities fixed in Oracle MySQL

Oracle has fixed vulnerabilities in the following MySQL products: MySQL Workbench MySQL Server MySQL Cluster MySQL Connectors MySQL Enterprise Monitor The vulnerabilities potentially enable a malicious party to execute attacks that result in the following categories of damage: Denial-of-Service D...

9.8CVSS8.7AI score0.99677EPSS
SaveExploits132
CNVD
CNVD
added 2022/04/20 12:0 a.m.16 views

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-31689)

Oracle MySQL is an open source relational database management system from Oracle Corporation.MySQL Server is one of the database server components.MySQL Connectors is one of the drivers for connecting applications that use MySQL. An input validation error vulnerability exists in Oracle MySQL for...

6.3CVSS5.7AI score0.02959EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/20 12:0 a.m.15 views

Oracle MySQL Buffer Overflow Vulnerability (CNVD-2022-31923)

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Server is one of the database server components. MySQL Connectors is one of the drivers for connecting to applications that use MySQL. Oracle MySQL is vulnerable to a buffer overflow vulnerability...

2.9CVSS4.4AI score0.01625EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.7 views

The vulnerability of the Connector/J driver for MySQL Connectors in the MySQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the Connector/J driver for MySQL Connectors in the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.1CVSS7.1AI score0.0132EPSS
SaveExploits0References6Affected Software7
Veracode
Veracode
added 2022/03/10 12:42 a.m.30 views

Privilege Escalation

mysql-connector-java is vulnerable to privilege escalation. The vulnerability exists due to a lack of validation of access allowing an attacker to compromise MySQL Connectors...

5.9CVSS6.6AI score0.07318EPSS
SaveExploits1References8Affected Software1
NVD
NVD
added 2022/03/03 10:15 p.m.29 views

CVE-2022-23709

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...

4.3CVSS0.00544EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/03 9:50 p.m.32 views

CVE-2022-23709

A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this...

4.3CVSS6.5AI score0.00544EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/01/26 12:0 a.m.50 views

Oracle MySQL Connectors Input Validation Error Vulnerability (CNVD-2022-15473)

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Connectors is a driver for applications that use MySQL. versions 8.0.27 and earlier are vulnerable to an input validation error. An attacker could use this vulnerability to compromise Oracle MySQL...

6.6CVSS4AI score0.0132EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2022/01/25 8:0 a.m.3 views

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 6.6 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

...

6.6CVSS6.7AI score0.0132EPSS
SaveExploits0
Github Security Blog
Github Security Blog
added 2022/01/20 12:0 a.m.37 views

Improper Handling of Insufficient Permissions or Privileges in MySQL Connectors Java

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

6.6CVSS4.8AI score0.0132EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder