327 matches found
CVE-2021-2471
CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...
CVE-2023-21971_Analysis
CVE-2023-21971 Connector/J RCE Analysis References Remote Code Execution RCE in com.mysql:mysql-connector-j | CVE-2023-21971 | Snyk New Vulnerability in MySQL JDBC Driver: RCE and Unauthorized DB Access MYSQL JDBC Deserialization Analysis - 跳跳糖 tttang.com Vulnerability Overview Vulnerability in...
CLEANSTART-2026-DR90917 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
Security vulnerability affects the rundeck package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...
Linux Distros Unpatched Vulnerability : CVE-2026-101768
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficult to exploit...
Linux Distros Unpatched Vulnerability : CVE-2026-101677
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-101678
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable...
Oracle MySQL Connectors J (October 2026 CPU)
The versions of MySQL Connectors installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficul...
EUVD-2026-106169
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors. Successful attacks of this...
EUVD-2026-106082
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...
EUVD-2026-106081
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...
CVE-2026-101768
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors. Successful attacks of this...
CVE-2026-101677
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...
CVE-2026-101678
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks...
CVE-2026-101768
A vulnerability exists in the Connector/J component of Oracle MySQL Connectors (version 26.7.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise and potentially take over MySQL Connectors. This flaw impacts Confidentialit...
CVE-2026-101678
The Oracle MySQL Connectors product is affected by a vulnerability in the Connector/J component, specifically in version 26.7.0 . This vulnerability allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DOS) . Exploitation is c...
CVE-2026-101677
A vulnerability exists in the Connector/J component of the Oracle MySQL Connectors product, specifically affecting version 26.7.0 . An unauthenticated attacker with network access via multiple protocols can exploit this vulnerability, although successful execution requires human interaction from ...
PT-2026-119441
Name of the Vulnerable Software and Affected Versions Oracle MySQL Connector/J version 26.7.0 Description An issue in the MySQL Connectors product allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the...
CVE-2026-61700
A flaw was found in MariaDB Connector/J. This flaw allows a rogue or man-in-the-middle server to bypass the allowLocalInfile=false setting during server-initiated LOCAL INFILE requests. When an application sends a LOAD DATA LOCAL INFILE COMQUERY, a malicious server can echo the filename, causing...
Linux Distros Unpatched Vulnerability : CVE-2026-61700
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9,...
MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests
Summary MariaDB Connector/J does not enforce allowLocalInfile=false when processing server-initiated LOCAL INFILE requests protocol packet type 0xfb. However, exploitation is constrained: the server can only request the exact filename the client already included in its LOAD DATA LOCAL INFILE quer...