Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit this vulnerability to affect availability...

MariaDB 10.5.0 < 10.5.5

The version of MariaDB installed on the remote host is prior to 10.5.5. It is, therefore, affected by a vulnerability as referenced in the 10.5.5 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

MariaDB 10.2.0 < 10.2.33

The version of MariaDB installed on the remote host is prior to 10.2.33. It is, therefore, affected by a vulnerability as referenced in the 10.2.33 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

MariaDB 10.1.0 < 10.1.46

The version of MariaDB installed on the remote host is prior to 10.1.46. It is, therefore, affected by a vulnerability as referenced in the 10.1.46 advisory. - Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.6.50 and prior,...

PT-2021-2906

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.7.33 and prior Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Options component of Oracle MySQL Server. It allows a high-privileged...

PT-2021-2888

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple...

PT-2021-3019

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.33 and prior MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the MySQL Server component, specifically in the Server: Replication subcomponent. This can be...

PT-2021-3031

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Information Schema component of Oracle MySQL Server. This can be exploited by a remote attacker to gain unauthorized...

PT-2021-2911

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Optimizer component of Oracle MySQL Server. It allows a high-privileged attacker with network access via multiple...

Remote Code Execution

Apache Druid is vulnerable to remote code execution. Certain properties supported by the MySQL JDBC driver allows an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Druid server processes...

CVE-2021-26919

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker...

CVE-2021-26919: Undefined Security Weakness

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker...

Oracle MySQL Server 5.5.x <= 5.5.23 Security Update (cpujul2012) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle MySQL Server <= 5.1.62 / 5.4.x <= 5.5.23 Security Update (cpujul2012) - Linux

Oracle MySQL Server is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2021-2905

Name of the Vulnerable Software and Affected Versions Oracle MySQL Server versions 5.7.33 and prior Oracle MySQL Server versions 8.0.23 and prior Description The issue is related to insufficient input validation in the Server: Group Replication Plugin component of Oracle MySQL Server. It allows a...

MySQL Server Installed (Windows)

Binary data mysqlwininstalled.nbin...

Huawei EulerOS: Security Advisory for mariadb (EulerOS-SA-2021-1327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : mariadb (EulerOS-SA-2021-1327)

According to the version of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.6.45 and prior,...

CVE-2020-2761

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2021-7858

Name of the Vulnerable Software and Affected Versions Protocol Buffers versions prior to 3.15.0 MySQL Server versions 8.0.28 and earlier Description A nullptr dereference occurs when a null char is present in a proto symbol, leading to an unchecked call into the proto file's name during generatio...