CVE-2023-21938

CVE-2023-21938 affects Oracle Java SE (Libraries, Swing, JSSE, Hotspot, JavaFX) and Oracle GraalVM Enterprise Edition across multiple components. Affected versions include Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.8, 21.3.4, 22.3.0. The vulner...

CVE-2023-22032

CVE-2023-22032 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.34 and earlier, and 8.1.0. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (complete DOS). CVSS 3.1 base sc...

CVE-2021-21341

CVE-2021-21341 affects the XStream Java library (unmarshalling) prior to 1.4.16. The vulnerability enables a remote attacker to cause a denial-of-service by consuming 100% CPU time via manipulated input streams. Impact is described as CPU denial of service; no user impact if the recommended Secur...

CVE-2021-2010

CVE-2021-2010 affects the MySQL Client C API in Oracle MySQL. Affected versions are 5.6.50 and earlier, 5.7.32 and earlier, and 8.0.22 and earlier. The vulnerability is exploitable remotely with low privileges and could lead to unauthorized data updates/inserts/deletes and partial DoS on MySQL Cl...

CVE-2021-2180

CVE-2021-2180 affects Oracle MySQL Server (InnoDB) with vulnerable versions 5.7.33 and earlier and 8.0.23 and earlier. A high-privilege attacker who can reach MySQL Server over the network via multiple protocols can cause the server to hang or crash (complete DOS). Connected documents confirm the...

CVE-2023-22104

CVE-2023-22104 affects Oracle MySQL Server (InnoDB). Affected: MySQL 8.0.32 and earlier. Description in connected sources confirms a high-privilege attacker with network access can cause availability impact (hang or frequent crash) of MySQL Server via multiple protocols. No explicit exploit detai...

CVE-2023-22115

CVE-2023-22115 affects Oracle MySQL Server (Server: DML). Affected: MySQL 8.0.33 and earlier. Exploitation could allow a high-privilege attacker with network access to cause a hang or crash (DoS). Remediation: upgrade to a fixed version; for some distributions this issue is addressed by upgrading...

CVE-2022-22970

CVE-2022-22970 is described in IBM and related bulletins as a Spring Framework DoS via data binding of file-upload types (MultipartFile/javax.servlet.Part) when running on affected Spring Framework versions. The root cause involves binding such fields to model objects, enabling resource-exhaustio...

CVE-2024-21131

CVE-2024-21131 affects Oracle Java SE (Hotspot) and Oracle GraalVM for JDK/Enterprise Edition. Affected versions include Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; GraalVM Enterprise: 20.3.14, 21.3.10. An unauthenticated network attacke...

CVE-2021-21342

CVE-2021-21342 affects the Java library XStream (prior to 1.4.16). During unmarshalling, the processed input stream can include type information used to recreate objects, enabling an attacker to inject/replace objects and trigger a server-side forgery. The documented fix is to upgrade to at least...

CVE-2018-3133

CVE-2018-3133 concerns Oracle MySQL Server (subcomponent: Server: Parser). Affected are MySQL Server versions 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can trigger a hang or frequen...

CVE-2019-2481

CVE-2019-2481 affects Oracle MySQL Server (Server: Optimizer). Affected versions are 5.6.42 and prior, 5.7.24 and prior, and 8.0.13 and prior. The vulnerability can be exploited by a high-privileged attacker over the network to cause a hang or a frequently repeating crash (complete DoS) of MySQL ...

CVE-2021-37136

CVE-2021-37136 : The Bzip2 decompression decoder can set no limit on the decompressed output size, affecting all Bzip2Decoder users. This under- or over-allocates memory during decompression and can trigger an OutOfMemoryError, enabling DoS. Connected IBM/ASTRA entries reiterate the same descript...

CVE-2018-3060

CVE-2018-3060 affects Oracle MySQL Server (InnoDB) with affected versions 5.5/5.6 per IBM/Guardium disclosures. The vulnerability is described as an unspecified issue in InnoDB that could allow an authenticated attacker to achieve no confidentiality impact, but high integrity and high availabilit...

CVE-2021-2031

CVE-2021-2031 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.22 and earlier. Condition: authenticated, high-privilege attacker with network access via multiple protocols. Impact: can hang or cause a frequently repeating crash (complete DoS) of MySQL Server. Base CVSS 3.1 sco...

CVE-2023-22097

CVE-2023-22097 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.34 and earlier and 8.1.0; an attacker with network access via multiple protocols could cause a hang or crash (DoS). Remediation exists in Linux distro advisories (e.g., AlmaLinux ALSA-2024-0894 lists MySQL InnoDB fixes...

CVE-2021-21343

CVE-2021-21343 affects XStream (Java) prior to 1.4.16. The vulnerability arises during unmarshalling when the processed input stream carries type information, enabling an attacker to create new instances based on that data and potentially replace or inject objects, including causing local file de...

CVE-2023-22102

CVE-2023-22102 is described as a vulnerable condition in Oracle MySQL’s Connector/J (affected versions 8.1.0 and earlier). The CVE text states that an unauthenticated attacker with network access via multiple protocols can compromise MySQL Connectors, with user interaction required, and that atta...

CVE-2021-2016

CVE-2021-2016 affects Oracle MySQL Server, specifically the Server: Optimizer. Affects MySQL 8.0.19 and earlier. An attacker with network access via multiple protocols and high privileges can trigger a hang or frequently repeatable crash (complete DoS) of MySQL Server. Root cause: vulnerability i...

CVE-2021-2060

CVE-2021-2060 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 5.6.50 and earlier, 5.7.32 and earlier, and 8.0.22 and earlier. The vulnerability can be exploited by a highly privileged attacker with network access via multiple protocols to cause a hang or crash (a...

CVE-2021-2389

CVE-2021-2389 affects Oracle MySQL Server (InnoDB) with vulnerable versions 5.7.34 and earlier and 8.0.25 and earlier. An unauthenticated attacker can exploit over network via multiple protocols to cause a hang or a frequent crash (complete DoS) of MySQL Server. Connected documents corroborate th...

CVE-2024-20952

CVE-2024-20952 affects Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (Security component). Affected Oracle Java SE versions: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; GraalVM for JDK: 17.0.9, 21.0.1; GraalVM Enterprise Edition: 20.3.12, 21.3.8, 22.3.4. The initia...

CVE-2018-3081

CVE-2018-3081 affects the MySQL Client component of Oracle MySQL. Affected versions: 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior, and 8.0.11 and prior. Attackers with network access via multiple protocols can exploit it to cause a hang or a crash (DoS) and may update/insert/delete data i...

CVE-2021-2024

CVE-2021-2024 affects Oracle MySQL Server (Server: Optimizer). Affects MySQL 8.0.22 and earlier. vulnerability allows a low-privileged, network‑authenticated attacker to cause a hang or repeatable crash (DoS) via multiple protocols, with availability impact described as high. No explicit root cau...

CVE-2020-2579

CVE-2020-2579 is a MySQL Server vulnerability in the optimizer component. Affected versions are 5.6.46 and earlier, 5.7.28 and earlier, and 8.0.18 and earlier. An attacker with network access over multiple protocols and low privileges can trigger a hang or a complete denial of service (DoS) via t...

CVE-2024-21147

The CVE-2024-21147 entry describes a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (Hotspot component) affecting multiple supported versions: Java SE 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; GraalVM for JDK 17.0.11, 21.0.3, 22.0.1; Graa...

CVE-2021-2046

CVE-2021-2046 affects Oracle MySQL Server (Server: Stored Procedure) with affected versions 8.0.22 and prior. Exploitation requires network access from a high-privilege attacker via multiple protocols and may cause a hang or crash (DoS) in MySQL Server, potentially impacting related products. Mit...

CVE-2021-21344

Summary: CVE-2021-21344 affects the XStream Java XML serialization library. In versions before 1.4.16, a remote attacker can load and execute arbitrary code by manipulating the processed input stream. The risk is mitigated if the security framework whitelist is properly configured; otherwise the ...

CVE-2021-2036

CVE-2021-2036 affects the Oracle MySQL Server, component Server: Optimizer , with affected versions including 8.0.22 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or complete denial of service of the MySQL Server. The C...

CVE-2021-22931

CVE-2021-22931 concerns Node.js DNS hostname handling. Public docs indicate vulnerability due to missing input validation of host names returned by DNS, which can cause domain hijacking and enable injection in applications using the DNS library. Affected software includes Node.js releases prior t...

CVE-2022-21427

CVE-2022-21427 affects Oracle MySQL Server (component: Server: FTS). Affected: MySQL 5.7.37 and earlier, 8.0.28 and earlier. An attacker with high privileges and network access via multiple protocols can cause a hang or frequent crash (DoS). The connected advisories indicate fixes in newer MySQL ...

CVE-2022-21626

CVE-2022-21626 affects Oracle Java SE (components: Security and JNDI) and Oracle GraalVM Enterprise Edition, with affected Java SE versions including 8u341, 8u345-perf, 11.0.16.1 (and related GraalVM versions 20.3.7, 21.3.3, 22.2.0). The vulnerability is exploitable remotely over HTTPS (and other...

CVE-2022-21628

CVE-2022-21628 affects Oracle Java SE ( Lightweight HTTP Server) and Oracle GraalVM Enterprise Edition; affected Java SE versions include 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19 and GraalVM EE: 20.3.7, 21.3.3, 22.2.0. Description states an unauthenticated attacker with network access via HTTP ...

CVE-2021-2009

CVE-2021-2009 concerns a vulnerability in Oracle MySQL Server, specifically in the Server: Security: Roles component. Affected versions are 8.0.19 and earlier. The description indicates that a high-privilege attacker who can reach the server over the network (via multiple protocols) could exploit...

CVE-2021-35550

CVE-2021-35550 is a network-authenticated TLS vulnerability in the JSSE component of Oracle Java SE and Oracle GraalVM Enterprise Edition, affecting Java SE 7u311, 8u301, 11.0.12 and GraalVM EE 20.3.3/21.2.0. Exploitation is possible over TLS with unauthenticated access and can lead to confidenti...

CVE-2019-3822

CVE-2019-3822 affects libcurl 7.36.0 through before 7.64.0. The vulnerability is a stack-based buffer overflow in the NTLM header creation path: Curl_auth_create_ntlm_type3_message() uses unsigned arithmetic to guard a local buffer, but the check is insufficient, allowing the output data to excee...

CVE-2021-2048

CVE-2021-2048 affects Oracle MySQL Server (InnoDB). Connected documents confirm the vulnerability lies in InnoDB with affected versions 8.0.22 and earlier, enabling a network-accessible attacker with high privileges to cause a hang or crash (DoS) and to perform unauthorized updates/inserts/delete...

CVE-2021-2193

CVE-2021-2193 affects Oracle MySQL Server (component: Server: Optimizer). Vulnerable in MySQL 8.0.23 and earlier. Root cause described as an easily exploitable feature/condition enabling a high-privileged attacker with network access (via multiple protocols) to cause a hang or frequently repeatab...

CVE-2018-3156

CVE-2018-3156 affects Oracle MySQL Server (subcomponents: InnoDB; also referenced in multiple advisories) with affected versions: 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. According to the connected advisories for Linux distributions, the vulnerability enables network-access...

CVE-2018-3251

CVE-2018-3251 affects Oracle MySQL Server (InnoDB). Affected: 5.6.41 and earlier, 5.7.23 and earlier, 8.0.12 and earlier. Exploitation via network against multiple protocols can cause a hang or crash (DOS). Several advisories reference fixes in corresponding OS/package updates (e.g., ALAS and Deb...

CVE-2018-2612

CVE-2018-2612 is reported in the MySQL Server component (subcomponent: InnoDB). Affected releases include MySQL 5.6.38 and earlier and 5.7.20 and earlier. The vulnerability enables a high-privilege attacker who can access the server over the network (via multiple protocols) to compromise data con...

CVE-2020-2759

CVE-2020-2759 affects Oracle MySQL Server (Server: Replication) with affected versions 8.0.19 and earlier. The vulnerability is exploitable over the network via multiple protocols and can lead to a hang or repeated crashes (high-availability Denial of Service) as described in the CVE entry. Conne...

CVE-2024-21047

CVE-2024-21047 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.36 and earlier and 8.3.0 and earlier. It enables a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DOS). Several sources (NVD/NASL references via Tenable/TSSA advisories) co...

CVE-2018-3143

CVE-2018-3143 is a vulnerability in the MySQL Server component (subcomponent: InnoDB) affecting Oracle MySQL. Affected versions are 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. It allows a low-privilege, network-attacker to cause a hang or crash (DoS) via multiple protocols. The issu...

CVE-2021-2012

CVE-2021-2012 affects Oracle MySQL Server (component: Server: Security: Privileges). Affected versions: 8.0.20 and earlier. An attacker with network access via multiple protocols and high privileges can exploit this to cause a hang or crash (high‑impact DoS) on MySQL Server. The document provides...

CVE-2021-2087

CVE-2021-2087 refers to a vulnerability in Oracle MySQL Server (Server: DML) affecting 8.0.22 and earlier. A high-privilege user with server access could cause a denial-of-service (hang or crash). Connected sources indicate remediation exists via upgrading MySQL (e.g., the CG/Mariner entry for my...

CVE-2021-2076

CVE-2021-2076 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.22 and earlier. An attacker with network access via multiple protocols and high privileges can cause the server to hang or crash (complete DoS). CVSS 3.1 base score 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:N...

CVE-2021-2081

CVE-2021-2081 affects Oracle MySQL Server (component: Server: Stored Procedure). Affected versions are 8.0.22 and earlier. The description states an easily exploitable vulnerability that allows a highly privileged attacker who can access the server over multiple network protocols to cause a hang ...

CVE-2021-2038

CVE-2021-2038 affects Oracle MySQL Server (Server: Components Services). Affected versions: 8.0.22 and earlier. Root cause: vulnerability in a server component allowing a high-privileged attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (complete DoS)....

CVE-2021-2307

CVE-2021-2307 affects Oracle MySQL Server (Server: Packaging) with affected versions 5.7.33 and prior and 8.0.23 and prior. The vulnerability allows unauthenticated access within the MySQL Server host after user interaction; CVSSv3.1 base score 6.1 (Confidentiality/Integrity). Affected components...