CVE-2020-14771

CVE-2020-14771 describes an LDAP Auth access-control vulnerability in Oracle MySQL Server. Affected: MySQL Server versions 5.7.31 and earlier, 8.0.21 and earlier. The issue is exploitable by an authenticated attacker with network access via multiple protocols and can lead to partial denial of ser...

CVE-2022-21357

CVE-2022-21357 affects Oracle MySQL Cluster (Cluster: General). Affected: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, 8.0.27 and prior. Reported impact: unauthorized read of a subset of MySQL Cluster data and partial denial of service. Exploitation details vary by source, but public rec...

CVE-2024-21052

CVE-2024-21052 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.34 and prior. The vulnerability could be exploited by a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVS...

CVE-2021-35641

CVE-2021-35641 affects Oracle MySQL Server (component: Server: Optimizer) in 8.0.26 and earlier. A high-privileged attacker with network access via multiple protocols can cause a hang or frequent crash (DoS) of MySQL Server. Several connected advisories note fixes in later MySQL 8.0 releases (exa...

CVE-2022-21312

CVE-2022-21312 affects the MySQL Cluster component of Oracle MySQL. Affected versions are 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability can be exploited by a highly privileged attacker with access to the physical network segment attached to ...

CVE-2024-20998

CVE-2024-20998 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.36 and prior and 8.3.0 and prior. The vulnerability can be exploited over the network by a high-privileged attacker to cause a hang or crash (complete DOS). Remediation observed in published advis...

CVE-2024-21062

The CVE-2024-21062 entry corresponds to a vulnerability in Oracle MySQL Server (Server: Optimizer). The connected documentation confirms affected versions are 8.0.36 and prior and 8.3.0 and prior, with exploitation possible over the network by a high-privilege attacker, potentially causing a hang...

CVE-2018-3079

CVE-2018-3079 affects the Oracle MySQL Server InnoDB component. The vulnerability exists in MySQL 8.0.11 and earlier. An authenticated, high-privilege attacker who can reach the server over network (via multiple protocols) can trigger a denial of service, causing the server to hang or crash (A: H...

CVE-2021-35633

CVE-2021-35633 affects Oracle MySQL Server (component: Server: Logging). Affected versions are 8.0.26 and earlier. The vulnerability allows a high-privileged attacker with network access through multiple protocols to cause a partial denial of service on MySQL Server. The CVSSv3.1 Base Score is 2....

CVE-2022-21287

CVE-2022-21287 affects Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, 8.0.27 and prior. The issue can allow takeover of MySQL Cluster and is described as high impact to confidentiality, integrity, and availability. Exploitation co...

CVE-2022-21479

CVE-2022-21479 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.28 and earlier. The vulnerability can be exploited by an authenticated attacker over network via multiple protocols to cause a hang or crash (DOS) and may lead to read access to a subset of data. Root c...

CVE-2018-3075

Oracle MySQL Server (Server: Security: Privileges) is affected by CVE-2018-3075 in MySQL 8.0.11 and earlier. The vulnerability, described across IBM/IBM Guardium sources, enables a high-privilege attacker with network access via multiple protocols to compromise the MySQL Server and can result in ...

CVE-2022-21334

CVE-2022-21334 affects Oracle MySQL Cluster (Cluster: General) with affected versions 8.0.27 and earlier. The vulnerability is described as potentially leading to takeover of MySQL Cluster with a requirement for user interaction and access to the physical communication segment, and it is characte...

CVE-2022-21483

CVE-2022-21483 affects Oracle MySQL Cluster (component: Cluster: General). Affected versions include 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior, and 8.0.28 and prior. The vulnerability allows a high-privilege attacker with access to the physical communication segment to compromise MySQL...

CVE-2022-21632

CVE-2022-21632 affects Oracle MySQL Server 8.0.30 and earlier. Vulnerability in Server: Security: Privileges enables a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). CVSS 3.1 base score 4.9 (Availability). Remediation observed in downst...

CVE-2017-10355

CVE-2017-10355 is documented across multiple openJDK/OpenJDK-derived advisories (CentOS, Debian, Amazon, IBM, etc.) as a networking vulnerability in the FtpClient component of OpenJDK’s Java SE/Java SE Embedded. Technical details in connected sources specify that the FtpClient did not set default...

CVE-2022-21323

CVE-2022-21323 affects Oracle MySQL Cluster (Cluster: General). Affected: MySQL Cluster products prior to 7.5.24, 7.6.20, and 8.0.27. The issue allows a high-privilege attacker with access to the physical communication segment to compromise the cluster, enabling unauthorized read access to a subs...

CVE-2018-3286

CVE-2018-3286 affects Oracle MySQL Server (Server: Security: Privileges). Affected: MySQL 8.0.12 and earlier. Description from multiple sources: vulnerability allows a low-privileged, network-accessing attacker to modify data in MySQL Server through various protocols, with impact described as una...

CVE-2019-13118

CVE-2019-13118 affects libxslt 1.1.33, where a too-narrow type holding grouping characters in xsl:number can pass an invalid character/length to xsltNumberFormatDecimal, causing a read of uninitialized stack data (stack overflow vulnerability). Connected Apple advisories (HT210351, HT210346, HT21...

CVE-2021-35607

CVE-2021-35607 affects Oracle MySQL Server (Server: DML) with affected versions 8.0.26 and earlier. The vulnerability allows a low-privileged, network-access attacker via multiple protocols to cause a hang or a frequent crash (DoS) of MySQL Server (CVSS v3.1 base 6.5). Connected sources indicate ...

CVE-2022-21484

CVE-2022-21484 affects Oracle MySQL Cluster (Cluster: General) with vulnerable versions 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior, and 8.0.28 and prior. The issue allows a high-privilege attacker with access to the hardware’s physical communication segment to compromise MySQL Cluster. ...

CVE-2024-20932

CVE-2024-20932 affects Oracle Java SE and GraalVM offerings (Java SE 17.0.9; GraalVM for JDK 17.0.9; GraalVM Enterprise 21.3.8, 22.3.4) in the Security component. The vulnerability allows unauthenticated, network-exposed attackers to modify or view data in affected deployments, with CVSS 3.1 metr...

CVE-2024-21055

CVE-2024-21055 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.35 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or a frequent, repeatable crash (complete DOS) of MySQL Server. The base...

CVE-2024-21060

CVE-2024-21060 affects Oracle MySQL Server (Server: Data Dictionary). Affected versions: 8.0.36 and prior, 8.3.0 and prior. An attacker with high privileges and network access via multiple protocols can cause a hang or frequent crash (DoS). The vulnerability is described as easily exploitable. Pu...

CVE-2018-2767

CVE-2018-2767 affects Oracle MySQL Server (subcomponent: Server: Security: Encryption). Affected are MySQL Server versions 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability allows a low-privilege attacker who can reach the server over multiple network protocols to ...

CVE-2021-35640

CVE-2021-35640 affects Oracle MySQL Server (component: Server: DDL). Affected: MySQL 8.0.26 and earlier. Attack scenario: high-privilege attacker with network access via multiple protocols can exploit the flaw to perform unauthorized updates/inserts/deletes on some MySQL data. Impact per CVE desc...

CVE-2022-21280

The CVE-2022-21280 entry refers to Oracle MySQL Cluster (Component: Cluster: General). Affected versions are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is described as difficult to exploit, requiring access to the physical communication segment a...

CVE-2022-21288

CVE-2022-21288 affects Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. Root cause details are not fully specified in the provided documents, but the impact is a takeover of MySQL Cluster with high privileges, ...

CVE-2022-21355

CVE-2022-21355 affects Oracle MySQL Cluster (Cluster: General). Public sources enumerate affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. Several connected documents describe this as a buffer overflow vulnerability in MySQL Cluster, with the potential...

CVE-2022-21366

CVE-2022-21366 affects Oracle Java SE (ImageIO) and Oracle GraalVM Enterprise Edition. The Oracle advisory describes affected versions: Java SE 11.0.13 and 17.0.1; GraalVM EE 20.3.4 and 21.3.0. Exploitation could allow an unauthenticated network attacker to cause a partial denial of service or, d...

CVE-2022-21600

CVE-2022-21600 affects Oracle MySQL Server (Server: Optimizer). Affected: 8.0.27 and earlier. Exploitation by a high-privilege attacker with network access via multiple protocols can lead to takeover of the MySQL Server. CVSS v3.1 base score 7.2 (C/H I/H A/H). Remediation per advisory sources inc...

CVE-2018-3084

CVE-2018-3084 affects Oracle MySQL Server (Shell: Core/Client). Affects 8.0.11 and earlier; a low-privileged user with logon can exploit to cause partial denial of service. Exploitation requires user interaction; CVSSv3 base score 2.8 (LOW). Remediation: upgrade Oracle MySQL to patched versions p...

CVE-2022-21313

CVE-2022-21313 concerns the Oracle MySQL Cluster component (Cluster: General). The vulnerability affects MySQL Cluster in versions 7.6.20 and earlier and 8.0.27 and earlier. It is described as allowing a high-privilege attacker with access to the hardware’s physical communication segment to obtai...

CVE-2022-21356

The CVE-2022-21356 entry concerns Oracle MySQL Cluster (Cluster: General). Affected versions include 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability appears to allow a high-privilege attacker with access to the physical communication segment t...

CVE-2024-20922

CVE-2024-20922 affects Oracle Java SE (JavaFX) and Oracle GraalVM Enterprise Edition, with affected Oracle Java SE: 8u391 and Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. The vulnerability is described as difficult to exploit and requires a logged-on user, with potential unauthorized up...

CVE-2024-21056

CVE-2024-21056 affects Oracle MySQL Server (Server: DML); supported versions 8.0.34 and prior are impacted. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent, complete denial of service of MySQL Server. CVSS 3.1 base score 4...

CVE-2018-2973

CVE-2018-2973 is an Oracle Java SE/JSSE vulnerability affecting Java SE: 6u191, 7u181, 8u172, 10.0.1 and Java SE Embedded: 8u171. It can be exploited over the network with SSL/TLS by an unauthenticated attacker to cause unauthorized data modifications (integrity impact). Affected deployments load...

CVE-2018-3066

CVE-2018-3066 affects the MySQL Server component (subcomponent: Server: Options) and is disclosed across multiple advisories. Affected versions include 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability is described as difficult to exploit, requiring network access ...

CVE-2018-3170

CVE-2018-3170 affects Oracle MySQL Server (Server: DDL). Affected: MySQL 8.0.12 and earlier. Description from multiple sources confirms a high-privilege attacker with network access via multiple protocols can cause a hang or complete denial of service (DOS) on MySQL Server. Several connected advi...

CVE-2022-21329

The CVE-2022-21329 entry concerns Oracle MySQL Cluster (component: Cluster: General). Affected versions are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability allows a high-privilege attacker with access to the hardware’s physical communication segment t...

CVE-2018-3073

CVE-2018-3073 affects Oracle MySQL Server (Server: Optimizer). Affected are MySQL 8.0.11 and earlier. The vulnerability could be exploited by a low-privilege, network-authenticated attacker via multiple protocols to cause a hang or frequent crash of MySQL Server (denial of service, high Availabil...

CVE-2021-35516

CVE-2021-35516 affects Apache Commons Compress (the sevenz package). A specially crafted 7Z archive can cause the library to allocate excessive memory, ultimately causing an out-of-memory condition and a denial-of-service on services that use Compress’ sevenz component. The initial description do...

CVE-2022-21277

CVE-2022-21277 affects Oracle Java SE and Oracle GraalVM Enterprise Edition via ImageIO, with additional related CVEs (CVE-2022-21248, CVE-2022-21282, CVE-2022-21283, CVE-2022-21291, CVE-2022-21293, CVE-2022-21294, CVE-2022-21299, CVE-2022-21305, CVE-2022-21341, CVE-2022-21360, CVE-2022-21365, CV...

CVE-2022-21307

CVE-2022-21307 affects Oracle MySQL Cluster (Cluster: General). Affected versions include 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability arises in MySQL Cluster and, per sources, can lead to takeover of the cluster and has a CVSS 3.1 base score of 6....

CVE-2022-21319

CVE-2022-21319 applies to Oracle MySQL Cluster (Cluster: General) and affects MySQL Cluster versions up to 8.0.27.x and earlier (also 7.x series). The vulnerability allows an attacker with access to the physical cluster network to read a subset of data and may enable partial DoS; exploitation req...

CVE-2022-21332

CVE-2022-21332 affects Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, 8.0.27 and prior. The vulnerability allows a high-privilege attacker with access to the hardware’s physical communication segment to takeover the MySQL Cluster,...

CVE-2024-20983

CVE-2024-20983 affects MySQL Server (Oracle MySQL), specifically the Server: DML component. Affected versions are 8.0.34 and earlier. The vulnerability can be exploited by a highly privileged attacker who has network access via multiple protocols, enabling a denial of service (hang or repeated cr...

CVE-2024-21049

CVE-2024-21049 affects Oracle MySQL Server (Server: DML). Affected: MySQL Server 8.0.34 and earlier. Attackers with network access via multiple protocols and with high privileges can cause a hang or frequent crash (DoS). Public details in connected docs confirm the vulnerability class and impact;...

CVE-2018-3078

CVE-2018-3078 affects Oracle MySQL Server (Server: DDL) with affected versions 8.0.11 and earlier. The vulnerability can be exploited by a high-privilege attacker who can access the server over multiple network protocols to cause the MySQL Server to hang or crash (complete DoS). If exploiting det...

CVE-2022-21309

The CVE-2022-21309 entry concerns Oracle MySQL Cluster (Cluster: General). Affected are MySQL Cluster versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable only by a high-privilege attacker with access to the hardware’s physical comm...