PT-2023-9635 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.37 and prior Description: The issue is related to the Server: Pluggable Auth component of Oracle MySQL Server. It allows a high privileged attacker with network access via multiple protocols to compromise the...

PT-2023-9838 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2023-9627 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.4.0 and prior Description: The issue is related to insufficient input validation in the Server: Thread Pooling component of Oracle MySQL Server. It allows an attacker with network access via multiple protocols t...

PT-2023-9625

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.38, 8.4.1, and 9.0.0 Description The vulnerability in the MySQL Server product of Oracle MySQL, specifically in the InnoDB component, is related to insufficient input validation. This issue can be exploited by a remot...

PT-2023-9536 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description: The issue is related to insufficient protection of internal data due to incorrect input validation in the Server: Telemetry component of MySQL Server. Th...

PT-2023-9564

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of MySQL Server, which can be exploited by an attacker with high...

PT-2023-9539

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The issue is related to the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

PT-2023-9569

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server versions 8.4.2 and prior MySQL Server versions 9.0.1 and prior Description The vulnerability in the MySQL Server product of Oracle MySQL is related to the DML component and is caused by...

PT-2023-9561

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.39 and prior Oracle MySQL Server versions 8.4.1 and prior Oracle MySQL Server versions 9.0.1 and prior Description The issue is related to the Server: Thread Pooling component of Oracle MySQL Server and is...

PT-2023-9674

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.39 and prior MySQL Server version 8.4.0 Description The issue is related to insufficient input validation in the Server: Health Monitor component of Oracle MySQL Server. It allows a highly privileged attacker with...

PT-2023-9311 · Oracle +2 · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.36 and prior MySQL Server versions 8.3.0 and prior Description: The issue is related to insufficient input validation in the InnoDB component of the MySQL Server product. It allows a high-privileged attacker with...

K000137734: MariaDB/MySQL vulnerability CVE-2023-22084

Security Advisory Description Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

CVE-2023-49694 NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...

Mageia: Security Advisory (MGASA-2023-0327)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : MariaDB -- Denial-of-Service vulnerability (388e6557-8c80-11ee-9ee3-84a93843eb75)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 388e6557-8c80-11ee-9ee3-84a93843eb75 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that...

Fedora 37 : galera / mariadb (2023-bff42b29eb)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-bff42b29eb advisory. MariaDB 10.5.23 & Galera 26.4.16 Release notes: https://mariadb.com/kb/en/mariadb-10-5-23-release-notes/ Tenable has extracted the preceding description bloc...

Fedora 39 : galera / mariadb (2023-2eca0baace)

The remote Fedora 39 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2023-2eca0baace advisory. MariaDB 10.5.23 & Galera 26.4.16 Release notes: https://mariadb.com/kb/en/mariadb-10-5-23-release-notes/ Tenable has extracted the preceding description bloc...

MySQL Server Privilege DoS

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to carry out a DoS Denial-of-Service attack remotely...

MariaDB -- Denial-of-Service vulnerability

The MariaDB project reports: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash complete...

mysql: Server: DML unspecified vulnerability (CPU Apr 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...