[ASA-201902-21] python-mysql-connector: authentication bypass

Arch Linux Security Advisory ASA-201902-21 ========================================== Severity: High Date : 2019-02-17 CVE-ID : CVE-2019-2435 Package : python-mysql-connector Type : authentication bypass Remote : Yes Link : https://security.archlinux.org/AVG-898 Summary ======= The package...

Fedora 28 : 1:mysql-connector-java (2018-7a5bcb4dbe)

Fixes CVE-2018-3258 Connector/J unspecified vulnerability CPU October 2018 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora 29 : 1:mysql-connector-java (2018-6b350bb946)

Fixes CVE-2018-3258 Connector/J unspecified vulnerability CPU October 2018 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

Fedora Update for mysql-connector-java FEDORA-2018-7a5bcb4dbe

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-3258

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successf...

Code injection

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successf...

Security Bulletin: A security vulnerability has been identified in MySQL shipped with Tivoli Network Manager IP Edition (Oracle Critical Patch Update Advisory - October 2015)

Summary MySQL Server is shipped as a component of Tivoli Network Manager IP Edition. Information about a security vulnerability affecting MySQL Server has been published in a security bulletin Vulnerability Details Please consult the security bulletin for vulnerability details and information abo...

Security Bulletin:A security vulnerability has been identified in MySQL Server shipped with Tivoli Network Manager IP Edition (Oracle Critical Patch Update Advisory - July 2015)

Summary MySQL Server is shipped as a component of Tivoli Network Manager IP Edition. Information about a security vulnerability affecting MySQL Server has been published in a security bulletin Vulnerability Details Please consult the security bulletin...

openSUSE Security Update : mysql-connector-java (openSUSE-2018-248)

This update for mysql-connector-java to version to 5.1.42 fixes several issues. These security issues were fixed : - CVE-2017-3589: An unspecified vulnerability in MySQL Connector/J could have resulted in unauthorized update, insert or delete access to some of MySQL Connectors accessible data...

Debian: Security Advisory (DLA-945-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

UBUNTU-CVE-2018-2585

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and prior and 6.10.4 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MyS...

MGASA-2017-0382 Updated mysql-connector-java packages fix security vulnerabilities

Thijs Alkemade discovered that unexpected automatic deserialisation of Java objects in the MySQL Connector/J JDBC driver may result in the execution of arbitary code CVE-2017-3523. Two vulnerabilities have been found in the MySQL Connector/J JDBC driver CVE-2017-3586, CVE-2017-3589...

CVE-2017-10277

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Net. Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors...

SUSE-SU-2017:2591-1 Security update for mysql-connector-java

This update for mysql-connector-java to version to 5.1.42 fixes several issues. These security issues were fixed: - CVE-2017-3589: An unspecified vulnerability in MySQL Connector/J could have resulted in unauthorized update, insert or delete access to some of MySQL Connectors accessible data...

Authorization Bypass

mysql-connector is vulnerable to authorization bypass. The library does not properly verify server certificates if the sslverifycert value is set to false. This allows a malicious user to update, insert or delete data on the database...

SQL Injection

mysql-connector-java is vulnerable to SQL injection. This is possible because user input is directly used in SQL queries without being checked for malicious intent...

CVE-2017-3635

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/C. Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

UBUNTU-CVE-2017-3635

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/C. Supported versions that are affected are 6.1.10 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

openSUSE Security Update : mysql-connector-cpp / mysql-workbench (openSUSE-2017-671)

This update for mysql-connector-cpp and mysql-workbench fixes the following issues : Mysql-connector-cpp was updated to version 1.1.8 : - See the news files on https://dev.mysql.com/doc/relnotes/connector-cpp/en/ Mysql-workbench was updated to version 6.3.9 : -...

Debian DSA-3857-1 : mysql-connector-java - security update

Two vulnerabilities have been found in the MySQL Connector/J JDBC driver. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3857. The text itself is copyright C Software in the Public...