CVE-2024-21177

Removed by vendor...

CVE-2024-21177

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-21173

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2024-21171

Removed by vendor...

CVE-2024-21170

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successfu...

CVE-2024-21165

Removed by vendor...

CVE-2024-21162

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-21158

The CVE-2024-21158 issue concerns Oracle PeopleSoft Enterprise PeopleTools, specifically the Portal component. The connected PT-2023-9312 entry states the vulnerability arises from insufficient input validation in the Portal, affecting PeopleSoft Enterprise PeopleTools versions 8.59–8.61. It enab...

CVE-2024-21159

CVE-2024-21159 (MySQL InnoDB) affects Oracle MySQL Server, specifically InnoDB. Affected releases: 8.0.36 and prior, and 8.3.0 and prior. An attacker with network access through multiple protocols can cause the server to hang or crash (DoS). The CVSS base score is 4.9 (Availability impact). No ex...

CVE-2024-21135

Removed by vendor...

CVE-2024-21137

Removed by vendor...

CVE-2024-21129

Removed by vendor...

CVE-2024-21129

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2024-21127

Removed by vendor...

CVE-2024-21125

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2024-21123

The CVE-2024-21123 issue affects Oracle Database Server (Oracle Database Core). Affected versions are 19.3 through 19.23. The root cause is insufficient input validation in the Oracle Database Core component, enabling a high-privileged attacker with SYSDBA privileges to compromise the Core when l...

CVE-2024-20996

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2024-20996

CVE-2024-20996 is a vulnerability in Oracle MySQL Server (InnoDB) affecting MySQL versions 8.0.37 and earlier and 8.4.0 and earlier. The flaw allows a highly privileged attacker, with network access via multiple protocols, to cause a hang or crash of MySQL Server (complete DoS). The base impact i...

MySQL -- Multiple vulnerabilities

Oracle reports: 36 new security patches for Oracle MySQL. 11 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials. The highest CVSS v3.1 Base Score of vulnerabilities affecting Oracle MySQL is 9.8...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure components. The vulnerabilities allow a malicious party to impersonate another user, gain elevated privileges and potentially execute arbitrary code. Some of the vulnerabilities are in development tooling and are not readily accessible to...