CVE-2019-12086-jackson-databind-file-read

jackson-CVE-2019-12086 Vulnerability Description When Default Typing is enabled, and the classpath contains mysql-connector-java version 8.0.15 released on 2019.2.1 or earlier, an attacker can read arbitrary files by sending malicious JSON data. The mysql-connector-java library is the commonly us...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-091360)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091360 advisory. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled either globally or for a specific property f...

PT-2026-62662

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attack...

Unity Linux 20.1070e Security Update: mysql-connector-java (UTSA-2026-016694)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016694 advisory. Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 8.0.15 and prior. Difficult to...

SUSE: Security Advisory (SUSE-SU-2025:21144-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 16 Security Update : mysql-connector-java (openSUSE-SU-2025-20089-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025-20089-1 advisory. - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'....

Security update for mysql-connector-java (important)

openSUSE security update: security update for mysql-connector-java ------------------------------------------------------------- Announcement ID: openSUSE-SU-2025-20089-1 Rating: important References: bsc1241693 Cross-References: CVE-2025-30706 CVSS scores: CVE-2025-30706 SUSE : 7.5...

SUSE-SU-2025:21144-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not checking validity of ResultSet. -...

OPENSUSE-SU-2025:20089-1 Security update for mysql-connector-java

This update for mysql-connector-java fixes the following issues: - Upgrade to Version 9.3.0 - CVE-2025-30706: Fixed Connector/J vulnerability bsc1241693 - Updatable ResultSet fails with 'Parameter index out of range'. - Fixed Resultset UPDATE methods not checking validity of ResultSet. -...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions. An attacker could achieve remote code execution and compromise MySQL Connectors by exploiting this vulnerability. Remediation Upgrade com.mysql:mysql-connector-j to version 9.3.0 or higher. References -...

OPENSUSE-SU-2024:12927-1 mysql-connector-java-8.0.33-2.1 on GA media

These are all security issues fixed in the mysql-connector-java-8.0.33-2.1 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : mysql-connector-java (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mysql-connector-java: Connector/J unspecified vulnerability CPU October 2018 CVE-2018-3258 - Unspecified...

RHEL 6 : mysql-connector-java (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mysql-connector-java: Improper automatic deserialization of binary data CPU Apr 2017 CVE-2017-3523 -...

RHEL 7 : mysql-connector-java (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mysql-connector-java: Improper automatic deserialization of binary data CPU Apr 2017 CVE-2017-3523 -...

Fedora: Security Advisory for mysql-connector-java (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 3.2.10 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Remote Code Execution (RCE)

mysql-connector-java is vulnerable to Remote Code Execution. The vulnerability is due to not sanitizing the propertiesTransformClassName when instantiated or not in setupPropertiesTransformer in the ConnectionUrl.java file. This potentially leads to Arbitrary Code Execution...

ch.hortis.sonar:sonar-application (>=1.0-beta, <=1.0.2), ch.hortis.sonar:sonar-maven-plugin (>=1.0-beta, <=1.0.2) +60 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.0.5)

mysql:mysql-connector-java MAVEN version 5.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - ch.hortis.sonar:sonar-application =1.0-beta, =1.0-beta, =1.1, =2.1.1, =1.0.0, =1.0.0, =2.0-rc1, =2.0-rc1,...

cn.alphabets.light:lightcore-java (1.1.0), cn.springcloud.gray:spring-cloud-gray-server (>=a.1.0.0, <=2.1.0) +62 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.1.42)

mysql:mysql-connector-java MAVEN version 5.1.42 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - cn.alphabets.light:lightcore-java 1.1.0 - cn.springcloud.gray:spring-cloud-gray-server =a.1.0.0, =a.1.0.0,...

com.alibaba:druid (>=0.2.1, <=0.2.3), com.gnizr:gnizr-core (2.4.0-m4) +11 more potentially affected by CVE-2023-22102 via mysql:mysql-connector-java (5.0.4)

mysql:mysql-connector-java MAVEN version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mysql:mysql-connector-java and may be impacted: - com.alibaba:druid =0.2.1, =1.0.0, =1.0.0, =1.0.3, =2.6, =4.0.2 - org.tinystruct:tinystruct 0.1.0 Source cve...