boatbuddy (>=0.5.6, <=0.12.0), ctpysql (>=0.0.1, <=0.0.2) +37 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.0.33)

mysql-connector-python PYPI version 8.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - boatbuddy =0.5.6, =0.0.1, =0.2.0, =1.0.1, =0.18.0.1, =1.0.0, =1.0.0, =1.2.0, =0.1.0.dev20230322, =0.0.1, =1.3.1,...

agixt (>=1.4.20, <=1.4.42), bepatient-db (0.4.0) +13 more potentially affected by CVE-2024-21272 via mysql-connector-python (8.1.0)

mysql-connector-python PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mysql-connector-python and may be impacted: - agixt =1.4.20, =0.0.107, =0.0.2, =0.0.3, =0.0.1, =1.0.0, =0.1.0, =0.4.3, =0.0.1, =0.0.0, =0.0.7 - wolf-core 2.0.1...

Access Control Bypass

Overview mysql-connector-python is a MySQL driver written in Python which does not depend on MySQL C client libraries and implements the DB API v2.0 specification PEP-249. Affected versions of this package are vulnerable to Access Control Bypass via multiple protocols. An attacker can take over t...

afs2-datasource (>=3.8.0.0, <=3.8.2), afw (>=0.0.6, <=0.0.21) +282 more potentially affected by CVE-2024-21272 via mysql-connector-python (>=8.0.5, <=9.0.0)

mysql-connector-python PYPI version =8.0.5, =3.8.0.0, =0.0.6, =1.4.20, =0.0.1, =0.1.1, =0.0.1, =1.0.0b1, =0.10.0, =2021.2.5rc1, =1.0.1rc1, =1.0.12, =1.1.15, =0.1.0, =0.1.5 and more Source cves: CVE-2024-21272 Source advisory: MEND:CVE-2024-21272...

UBUNTU-CVE-2024-21170

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 8.4.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successfu...

OPENSUSE-SU-2024:14149-1 python310-mysql-connector-python-8.2.0-1.5 on GA media

These are all security issues fixed in the python310-mysql-connector-python-8.2.0-1.5 package on the GA media of openSUSE Tumbleweed...

Improper Access Control in MySQL Connector Python

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connector...

GHSA-V5RQ-W2XM-7G5F Improper Access Control in MySQL Connector Python

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connector...

Mageia: Security Advisory (MGASA-2020-0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated mysql-connector-python packages fix security vulnerability

Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion o...

OPENSUSE-SU-2020:0430-1 Security update for python-mysql-connector-python

This update for python-mysql-connector-python fixes the following issues: python-mysql-connector-python was updated to 8.0.19 boo1122204 - CVE-2019-2435: - WL13531: Remove xplugin namespace - WL13372: DNS SRV support - WL12738: Specify TLS ciphers to be used by a client or session - BUG30270760:...

openSUSE: Security Advisory for python-mysql-connector-python (openSUSE-SU-2020:0409-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : python-mysql-connector-python (openSUSE-2020-409)

This update for python-mysql-connector-python fixes the following issues : python-mysql-connector-python was updated to 8.0.19 boo1122204 - CVE-2019-2435 : - WL13531: Remove xplugin namespace - WL13372: DNS SRV support - WL12738: Specify TLS ciphers to be used by a client or session - BUG30270760...

CVE-2017-3590

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to...