K63545041: Server component of Oracle MySQL vulnerabilities CVE-2017-3317, CVE-2017-3318, and CVE-2017-3319

Security Advisory Description CVE-2017-3317 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Logging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker...

K67190282: MySQL X plugin vulnerabilities CVE-2017-3637 and CVE-2017-3646

Security Advisory Description CVE-2017-3637 Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: X Plugin. Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols...

SUSE CVE-2017-3319

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: X Plugin. Supported versions that are affected are 5.7.16 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

SUSE CVE-2017-3637

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: X Plugin. Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

SUSE CVE-2017-3646

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: X Plugin. Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

CVE-2022-25601

Reflected Cross-Site Scripting XSS vulnerability affecting parameter &tab discovered in Contact Form X WordPress plugin versions = 2.4...

mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: Server: X Plugin unspecified vulnerability (CPU Oct 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

ALSA-2021:3590 Moderate: mysql:8.0 security, bug fix, and enhancement update

MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.26. BZ1996693 Security Fixes: mysql: Server: Stored Procedure multiple...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10 <=1.1.0), RPD:bmc-rpd (=1.1) +17734 more potentially affected by CVE-2021-35517 via org.apache.commons:commons-compress (>=1.0 <=1.20)

org.apache.commons:commons-compress MAVEN version =1.0, =0.0.10, =0.0.4, =1.0.6, =1.0.6, =0.0.25, =0.0.25, =0.6.0, =0.5.0, =0.9.0, =0.5.0, =0.6.0, =0.11.0, =0.12.0 and more Source cves: CVE-2021-35517 Source advisory: OSV:GHSA-XQFJ-VM6H-2X34...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10 <=1.1.0), RPD:bmc-rpd (=1.1) +17734 more potentially affected by CVE-2021-35516 via org.apache.commons:commons-compress (>=1.0 <=1.20)

org.apache.commons:commons-compress MAVEN version =1.0, =0.0.10, =0.0.4, =1.0.6, =1.0.6, =0.0.25, =0.0.25, =0.6.0, =0.5.0, =0.9.0, =0.5.0, =0.6.0, =0.11.0, =0.12.0 and more Source cves: CVE-2021-35516 Source advisory: OSV:GHSA-CRV7-7245-F45F...

0x.plugin.bom:zero-x-plugin-bom (>=0.0.10 <=1.1.0), RPD:bmc-rpd (=1.1) +17734 more potentially affected by CVE-2021-35515 via org.apache.commons:commons-compress (>=1.0 <=1.20)

org.apache.commons:commons-compress MAVEN version =1.0, =0.0.10, =0.0.4, =1.0.6, =1.0.6, =0.0.25, =0.0.25, =0.6.0, =0.5.0, =0.9.0, =0.5.0, =0.6.0, =0.11.0, =0.12.0 and more Source cves: CVE-2021-35515 Source advisory: OSV:GHSA-7HFM-57QF-J43Q...

USN-4651-1 mysql-8.0 vulnerabilities

Tom Reynolds discovered that due to a packaging error, the MySQL X Plugin was listening to all network interfaces by default, contrary to expectations. This update changes the default MySQL configuration to bind the MySQL X Plugin to localhost only. This change may impact environments where the...

Vulnerability of the Server component: The X Plugin of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2020-59061)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An unspecified vulnerability exists in the Server: X Plugin component of Oracle MySQL Server 8.0.21 and earlier. An attacker can exploit this...

UBUNTU-CVE-2020-14870

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14870

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14870

CVE-2020-14870 affects Oracle MySQL Server (Server: X Plugin) with affected versions 8.0.21 and earlier. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (Denial of Service). Public advisories reference MySQL-related fixes and upgrades...

CVE-2020-11508

CVE-2020-11508 affects WordPress WP Lead Plus X plugin up to version 0.98. The vulnerability is an XSS flaw in the page builder caused by an unprotected AJAX action wp_ajax_core37_lp_save_page, allowing a logged-in user with minimal permissions to save or replace pages with arbitrary JavaScript. ...

WordPress WP Lead Plus X plugin <= 0.99 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by WordFence in WordPress WP Lead Plus X plugin versions = 0.99. Solution Patched version not available according to WordFence...