CVE-2022-21333

CVE-2022-21333 is a vulnerability in Oracle MySQL Cluster (Cluster: General). Affected versions include 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The connected sources describe a buffer overflow in Oracle MySQL Cluster that can allow a high-privilege atta...

CVE-2024-20983

CVE-2024-20983 affects MySQL Server (Oracle MySQL), specifically the Server: DML component. Affected versions are 8.0.34 and earlier. The vulnerability can be exploited by a highly privileged attacker who has network access via multiple protocols, enabling a denial of service (hang or repeated cr...

CVE-2024-21061

CVE-2024-21061 affects Oracle MySQL’s server-side Audit Plug-in in MySQL Server. Affected versions are 8.0.35 and earlier and 8.2.0 and earlier. The vulnerability enables a high-privilege attacker who can reach the server over network protocols to cause a hang or frequently repeatable crash (comp...

CVE-2024-21049

CVE-2024-21049 affects Oracle MySQL Server (Server: DML). Affected: MySQL Server 8.0.34 and earlier. Attackers with network access via multiple protocols and with high privileges can cause a hang or frequent crash (DoS). Public details in connected docs confirm the vulnerability class and impact;...

CVE-2018-3078

CVE-2018-3078 affects Oracle MySQL Server (Server: DDL) with affected versions 8.0.11 and earlier. The vulnerability can be exploited by a high-privilege attacker who can access the server over multiple network protocols to cause the MySQL Server to hang or crash (complete DoS). If exploiting det...

CVE-2022-21315

The CVE-2022-21315 entry concerns Oracle MySQL Cluster (Cluster: General). Affected are MySQL Cluster versions 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability is exploitable by a high-privilege attacker who has access to the physical communica...

CVE-2018-3080

CVE-2018-3080 : Oracle MySQL Server (DDL subcomponent) is affected in 8.0.11 and earlier. The vulnerability, described as a server-side issue in the DDL path, can be exploited by a highly privileged attacker with network access via multiple protocols to trigger a hang or crash of MySQL Server, re...

CVE-2020-5421

CVE-2020-5421 affects Spring Framework releases across multiple lines (5.2.x to 5.0.x, 4.3.x and older). The issue arises from improper input handling of the jsessionid path parameter, which may bypass RFD Protection and weaken security controls. Affected products reference VMware Tanzu Spring Fr...

CVE-2018-2938

CVE-2018-2938 concerns a vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Affected versions are Java SE: 6u191, 7u181, and 8u172. The vulnerability is described as difficult to exploit but capable of allowing an unauthenticated attacker with network access via mul...

CVE-2018-2755

CVE-2018-2755 affects Oracle MySQL Server (Server: Replication) and is present in supported MySQL/MariaDB branches up to specific prior versions: 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The issue allows takeover of MySQL Server and requires logon with user interaction; imp...

CVE-2018-3279

CVE-2018-3279 affects Oracle MySQL Server (subcomponent: Server: Security: Roles). Affected versions are 8.0.12 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent crash (DoS) of MySQL Server. CVSS 3.0 base score ...

CVE-2022-21327

CVE-2022-21327 : Vulnerability in Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. Exploitation requires high privileges and access to the physical network segment; user interaction is required. Success...

CVE-2018-3082

CVE-2018-3082 affects Oracle MySQL’s MySQL Server component, specifically the Server: DDL subcomponent. Affected are MySQL 8.0.11 and earlier. An attacker with network access via multiple protocols and high privileges can read a subset of MySQL Server data due to the vulnerability. The issue is a...

CVE-2018-3195

CVE-2018-3195 affects Oracle MySQL Server, specifically the Server: DDL subcomponent. The connected advisory for this CVE confirms affected versions are 8.0.12 and prior. The vulnerability can be exploited by a high-privileged attacker who can access the server over multiple network protocols, an...

CVE-2022-21286

CVE-2022-21286 affects Oracle MySQL Cluster (Cluster: General). Affected versions are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability can be exploited by a high-privilege attacker with access to the physical communication segment used by the MySQL Clu...

CVE-2022-21320

The CVE-2022-21320 entry concerns Oracle MySQL Cluster (component: Cluster: General). Affected are versions 8.0.27 and earlier. The flaw allows takeover of MySQL Cluster and is described as difficult to exploit, requiring access to the hardware’s physical communication segment and human interacti...

CVE-2024-21050

CVE-2024-21050 is a MySQL Server vulnerability (Oracle MySQL) in the Server: DML component. Affected versions are 8.0.34 and earlier. An attacker with network access and high privileges can cause the MySQL Server to hang or crash (complete DOS). The public details consistently describe the issue ...

CVE-2018-3186

CVE-2018-3186 affects Oracle MySQL Server (Server: Optimizer) prior to or including 8.0.12. An attacker with high privileges and network access via multiple protocols can cause a hang or crash (DoS) in MySQL Server. The provided documents specify the vulnerable component and impact but do not inc...

CVE-2022-21322

CVE-2022-21322 affects Oracle MySQL Cluster (component: Cluster: General). Affected are MySQL Cluster versions 8.0.27 and earlier. The vulnerability is described as high impact and difficult to exploit, requiring access to the physical network segment and user interaction, with potential takeover...

CVE-2023-21953

CVE-2023-21953 affects Oracle MySQL Server, component Server: Partition , with affected versions 8.0.32 and prior . The connected materials confirm this is a vulnerability that an attacker with network access via multiple protocols could exploit to cause a hang or frequently repeatable crash (com...

CVE-2022-21289

CVE-2022-21289 affects Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The issue is described as a vulnerability that, when exploited by a highly privileged attacker with access to the hardware’s physical comm...

CVE-2022-21337

The CVE-2022-21337 entry concerns Oracle MySQL Cluster (Cluster: General). Affected are MySQL Cluster releases up to and including 7.4.34, 7.5.24, 7.6.20, and 8.0.27 (and prior). The vulnerability enables takeover of MySQL Cluster by a high-privilege attacker who has access to the physical commun...

CVE-2022-21308

CVE-2022-21308 affects Oracle MySQL Cluster (Cluster: General) with affected versions 8.0.27 and earlier. The vulnerability, which requires human interaction and local access to the hardware communication segment, can lead to takeover of MySQL Cluster. A fix exists: upgrade to MySQL package versi...

CVE-2018-3182

CVE-2018-3182 affects the MySQL Server component (Server: DML). Affected versions are 8.0.12 and prior. An attacker with network access and low privileges via multiple protocols can cause the MySQL Server to hang or crash (DoS). CVSS 3.0 base score is 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Th...

CVE-2018-2940

CVE-2018-2940 affects Oracle Java SE and Java SE Embedded Libraries. Affected: Java SE 6u191, 7u181, 8u172, 10.0.1; Java SE Embedded 8u171. Underlying issue in the Libraries component allows an unauthenticated, network-accessible attacker to read data from Java deployments that load untrusted cod...

CVE-2022-21284

The CVE-2022-21284 entry concerns Oracle MySQL Cluster (Cluster: General) with affected versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability allows a high-privilege attacker who has access to the physical network segment to compromise the MySQL Cl...

CVE-2022-21290

CVE-2022-21290 affects Oracle MySQL Cluster (component: Cluster: General). Affected versions: 8.0.27 and earlier. The issue is exploitable by a high-privilege attacker with access to the physical communication segment attached to the hardware where MySQL Cluster runs, with exploitation requiring ...

CVE-2023-21929

CVE-2023-21929 affects Oracle MySQL Server (component: Server: DDL) in MySQL 8.0.32 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) and perform unauthorized data updates/inserts/deletes on accessible data. R...

CVE-2020-2767

CVE-2020-2767 affects Oracle Java SE JSSE: vulnerable in Java SE 11.0.6 and 14 (client/server deployment). The vulnerability allows unauthenticated network access over HTTPS to modify or read Java SE data due to TLS/JSSE handling flaws, with potential for unauthorized updates, insertions, deletio...

CVE-2022-21335

CVE-2022-21335 concerns Oracle MySQL Cluster (Cluster: General). Affected: MySQL Cluster versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The issue is described as difficult to exploit and requires high privileges with access to the physical communication segme...

CVE-2020-2778

CVE-2020-2778 affects Oracle Java SE JSSE (Java 11.0.6 and 14). It can be triggered over HTTPS by unauthenticated remote attackers, potentially enabling read access to a subset of Java SE data. The related connected advisories (e.g., CentOS/RH/OpenJDK tracking) describe the issue as an incomplete...

CVE-2021-22901

CVE-2021-22901 affects curl/libcurl up to version 7.76.x for builds using OpenSSL. A use-after-free during TLS 1.3 session-ticket handling on a single connection can lead to remote code execution in rare cases. Impact is tied to memory access after freeing objects when a session ticket arrives on...

CVE-2021-3859

CVE-2021-3859 corresponds to an Undertow flaw that triggers a client-side invocation timeout for certain HTTP/2 calls, enabling denial-of-service conditions. Connected advisories (e.g., RHSA-2024:10207) explicitly reference Undertow and cite the issue as the cause for DoS when HTTP2 client invoca...

CVE-2018-2668

CVE-2018-2668 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected: 5.5.58 and earlier; 5.6.38 and earlier; 5.7.20 and earlier. Description across sources: a low-privilege, network-accessible attacker can exploit via multiple protocols to cause a hang or ...

CVE-2022-21271

CVE-2022-21271 is a vulnerability in Oracle Java SE and Oracle GraalVM Enterprise Edition (Libraries). Affected versions are Oracle Java SE: 7u321, 8u311, 11.0.13; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. The description states it is easily exploitable by an unauthenticated attacker ...

CVE-2024-21053

CVE-2024-21053 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.34 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to cause a hang or crash (complete DOS) of MySQL Server. Exploitation and impact details are docu...

CVE-2018-2813

CVE-2018-2813 is reported in the F5 AWS advisory as a MySQL Server (subcomponent: Server: DDL) vulnerability. Affected are Oracle MySQL/MariaDB lineage versions 5.5.59 and prior, 5.6.39 and prior, and 5.7.21 and prior. The issue: a low-privileged attacker with network access can compromise MySQL ...

CVE-2023-21919

CVE-2023-21919 affects Oracle MySQL Server (component: Server: DDL), with vulnerable versions 8.0.32 and earlier. The issue allows a high-privilege attacker who can reach the server over multiple protocols to cause a hang or crash (DoS), as reflected by the CVSS availability impact. Connected adv...

CVE-2020-2768

CVE-2020-2768 affects Oracle MySQL Cluster (Cluster: General) with vulnerable MySQL Cluster versions 7.3.28 and earlier, 7.4.27 and earlier, 7.5.17 and earlier, 7.6.13 and earlier, and 8.0.19 and earlier. The vulnerability can allow a low-privileged, network-accessing attacker to cause a hang or ...

CVE-2021-20190

CVE-2021-20190 is a Jackson Databind deserialization vulnerability involving the interaction between serialization gadgets and typing, present in Jackson Databind up to 2.9.10.7. The IBM bulletin for Cloudera Observability confirms this CVE as part of a collection and notes a fix in Cloudera Obse...

CVE-2021-20289

CVE-2021-20289 affects RESTEasy: REST endpoints reveal endpoint class and method names in exception responses when a URI path/query value cannot be mapped, potentially leaking sensitive information and impacting data confidentiality (highest threat: partial confidentiality). Affected: RESTEasy up...

CVE-2016-5018

CVE-2016-5018 affects multiple Tomcat branches (9.0.0.M1–M9, 8.5.0–8.5.4, 8.0.0.RC1–8.0.36, 7.0.0–7.0.70, 6.0.0–6.0.45). The vulnerability allows a malicious web application to bypass a configured SecurityManager via a Tomcat utility method that is accessible to web applications, enabling bypass ...

CVE-2022-2764

CVE-2022-2764 concerns Undertow. A DoS can occur because the Undertow server waits for LAST_CHUNK forever during EJB invocations, impacting availability (per CVSS vector: Network, Low access, High impact to availability). Public details in the provided documents specify the vulnerability as a DoS...

CVE-2017-10115

CVE-2017-10115 is a covert timing-channel vulnerability in the DSA implementation of the JCE in OpenJDK/OpenJRE/JRockit, affecting Java SE 6u151, 7u141, 8u131 and related packages (e.g., OpenJDK 7 on Debian/Ubuntu, RHEL/CentOS, Arch Linux advisories). A remote attacker could potentially exploit t...

CVE-2017-10281

CVE-2017-10281 affects Oracle/OpenJDK components (Java SE, Java SE Embedded, JRockit) with the Serialization subcomponent. The vulnerability is exploitable remotely via network protocols and can be triggered by sandboxed Web Start/Applet use or by supplying data to APIs, potentially causing parti...

CVE-2017-10268

CVE-2017-10268 affects Oracle MySQL Server (Server: Replication) with affected versions 5.5.57 and earlier, 5.6.37 and earlier, and 5.7.19 and earlier. The vulnerability allows a high-privilege attacker with logon to the infrastructure where MySQL Server executes to compromise the server, potenti...

CVE-2024-20975

CVE-2024-20975 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL Server versions 8.2.0 and earlier. Exploitation by a low-privileged attacker with network access via multiple protocols can cause a hang or repeated crash (DoS). CVSS 3.1 base score 6.5, Availability impact. The conne...

CVE-2017-10345

CVE-2017-10345 affects Oracle Java SE/Embedded/JRockit serialization. The vulnerability allows an unauthenticated attacker with network access to compromise the target, potentially causing a partial denial of service; exploitation is difficult and may require human interaction. Affected versions ...

CVE-2023-21920

Summary: CVE-2023-21920 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.32 and earlier. Exploitable with network access via multiple protocols by a highly privileged attacker, leading to a hang or frequent crashes (DoS) of MySQL Server. CVSS v3.1 base score 4.9 (Impact: Avail...

CVE-2018-2640

The CVE refers to CVE-2018-2640 in the MySQL/MariaDB family: the vulnerability is in the MySQL Server component (Server: Optimizer) and affects multiple supported branches (5.5.x, 5.6.x, 5.7.x) with ability for a network‑accessible, low‑privileged attacker to cause a hang or crash (DOS). Public a...