Lucene search
+L

324 matches found

OSV
OSV
added 2020/03/31 1:8 p.m.8 views

OPENSUSE-SU-2020:0430-1 Security update for python-mysql-connector-python

This update for python-mysql-connector-python fixes the following issues: python-mysql-connector-python was updated to 8.0.19 boo1122204 - CVE-2019-2435: - WL13531: Remove xplugin namespace - WL13372: DNS SRV support - WL12738: Specify TLS ciphers to be used by a client or session - BUG30270760:...

8.1CVSS8.3AI score0.02518EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2020/03/30 12:0 a.m.19 views

openSUSE: Security Advisory for python-mysql-connector-python (openSUSE-SU-2020:0409-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS8.1AI score0.02518EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2020/03/30 12:0 a.m.28 views

openSUSE Security Update : python-mysql-connector-python (openSUSE-2020-409)

This update for python-mysql-connector-python fixes the following issues : python-mysql-connector-python was updated to 8.0.19 boo1122204 - CVE-2019-2435 : - WL13531: Remove xplugin namespace - WL13372: DNS SRV support - WL12738: Specify TLS ciphers to be used by a client or session - BUG30270760...

8.1CVSS6.9AI score0.02518EPSS
SaveExploits0References2
NCSC
NCSC
added 2020/01/15 12:0 a.m.5 views

Multiple vulnerabilities fixed in MySQL

Oracle has fixed several vulnerabilities in the MySQL connector, MySQL server and MySQL client. By exploiting the vulnerabilities, a malicious person with access to the the network read or manipulate data in the database or cause a denial-of-service. Oracle released updates to fix the...

9.8CVSS9.1AI score0.45426EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2019/12/04 12:0 a.m.31 views

EulerOS 2.0 SP2 : unixODBC (EulerOS-SA-2019-2494)

According to the versions of the unixODBC packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Install unixODBC if you want to access databases through ODBC.You will also need the mysql-connector-odbc package if you want to access a MySQ...

9.8CVSS8AI score0.03082EPSS
SaveExploits0References3
OSV
OSV
added 2019/10/16 6:15 p.m.3 views

UBUNTU-CVE-2019-2920

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. Supported versions that are affected are 5.3.13 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...

5.3CVSS6.6AI score0.0225EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:0 a.m.9 views

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis allows a attacker to gain access to confidential data.

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file parsing involves the ability to read any local files on the server when default typing is enabled. A special jar-connector-mysql-connector-java is also available and points to classes at the final JSON...

7.8CVSS7.8AI score0.21949EPSS
SaveExploits2References37Affected Software36
RedHat Linux
RedHat Linux
added 2019/06/18 7:52 p.m.5 views

mysql-connector-java: Connector/J unspecified vulnerability (CPU October 2018)

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successf...

8.8CVSS7.3AI score0.03742EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2019/05/23 9:32 a.m.126 views

Information exposure in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

7.5CVSS1.2AI score0.21949EPSS
SaveExploits2References46Affected Software1
OSV
OSV
added 2019/05/23 9:32 a.m.4 views

GHSA-5WW9-J83M-Q7QX Information exposure in FasterXML jackson-databind

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

7.5CVSS6.9AI score0.21949EPSS
SaveExploits2References46
NVD
NVD
added 2019/05/17 5:29 p.m.45 views

CVE-2019-12086

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

7.5CVSS8.2AI score0.21949EPSS
SaveExploits2References41
OSV
OSV
added 2019/05/17 5:29 p.m.1 views

DEBIAN-CVE-2019-12086

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

7.5CVSS6.9AI score0.21949EPSS
SaveExploits2References1
Prion
Prion
added 2019/05/17 5:29 p.m.30 views

Design/Logic Flaw

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

5CVSS8AI score0.21949EPSS
SaveExploits2References41Affected Software2
OSV
OSV
added 2019/05/17 5:29 p.m.23 views

CVE-2019-12086

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

7.5CVSS7.3AI score
SaveExploits0References41
Cvelist
Cvelist
added 2019/05/17 4:57 p.m.43 views

CVE-2019-12086

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint, the service has the mysql-connector-java jar 8.0.14 or earlier in the classpath, and an...

8.2AI score0.21949EPSS
SaveExploits2References41
OpenVAS
OpenVAS
added 2019/05/07 12:0 a.m.72 views

Fedora Update for mysql-connector-java FEDORA-2018-6b350bb946

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.7AI score0.03742EPSS
SaveExploits0References2
OSV
OSV
added 2019/04/23 7:32 p.m.3 views

CVE-2019-2692

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

6.3CVSS6.7AI score0.00501EPSS
SaveExploits0References3
Prion
Prion
added 2019/04/23 7:32 p.m.14 views

Design/Logic Flaw

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

3.5CVSS5.6AI score0.00501EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2019/04/23 6:16 p.m.26 views

CVE-2019-2692

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

5.7AI score0.00501EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/04/23 6:16 p.m.44 views

CVE-2019-2692

Removed by vendor...

6.3CVSS6.8AI score0.00501EPSS
SaveExploits0
Rows per page
Query Builder