CVE-2021-35603

CVE-2021-35603 is a TLS-related vulnerability in the JSSE component of Java SE and GraalVM Enterprise Edition. Affected: Java SE 7u311, 8u301, 11.0.12, 17; GraalVM EE 20.3.3 and 21.2.0. Description indicates an unauthenticated network attacker could read data from vulnerable Java deployments (e.g...

CVE-2021-21347

CVE-2021-21347 affects XStream Java library (pre-1.4.16). The vulnerability allows a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream, with high severity when not using a proper security framework. Guidance across sources indicates u...

CVE-2020-14769

CVE-2020-14769 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 5.6.49 and prior, 5.7.31 and prior, 8.0.21 and prior. The vulnerability in the Optimizer can be exploited by a low-privilege, network-contact attacker to cause the server to hang or crash (DoS). CVSSv3.1 base score 6....

CVE-2020-14828

CVE-2020-14828 affects Oracle MySQL Server (Server: DML) and is detailed in related documents as affecting MySQL 8.0.21 and earlier. The vulnerability is described as easily exploitable, allowing a high-privilege attacker with network access via multiple protocols to take over the MySQL Server, w...

CVE-2020-2800

CVE-2020-2800 affects Oracle Java SE/Java SE Embedded, specifically the Lightweight HTTP Server component. Affected versions include Java SE 7u251, 8u241, 11.0.6, 14 and Java SE Embedded 8u241. The vulnerability can be exploited over a network with unauthenticated access via multiple protocols, p...

CVE-2020-2830

CVE-2020-2830 affects Oracle Java SE/Java SE Embedded (Concurrency component) with Java SE versions 7u251, 8u241, 11.0.6 and 14; Java SE Embedded 8u241. The vulnerability allows unauthenticated network-based exploitation via multiple protocols, potentially enabling partial denial of service on Ja...

CVE-2020-2896

CVE-2020-2896 affects the MySQL Server (Oracle MySQL), specifically the Server: Information Schema component. Affected are 8.0.19 and earlier. The vulnerability allows a high-privilege attacker who has network access via multiple protocols to cause the MySQL Server to hang or crash (complete deni...

CVE-2023-22113

CVE-2023-22113 affects Oracle MySQL Server (Server: Security: Encryption) and is applicable to MySQL 8.0.33 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to potentially read a subset of data, with the CVSS v3.1 base score of 2.7 (low im...

CVE-2024-21138

CVE-2024-21138 affects Oracle Java SE Hotspot and Oracle GraalVM for JDK/Enterprise Edition (as listed in the initial document). Affected versions include Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterpris...

CVE-2021-2146

The CVE-2021-2146 entry describes a vulnerability in Oracle MySQL Server (component: Server: Options) affecting MySQL 5.7.33 and earlier and 8.0.23 and earlier. It allows a high‑privileged attacker with network access via multiple protocols to cause the server to hang or crash (DoS). Public advis...

CVE-2020-14845

CVE-2020-14845 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. The vulnerability enables a network-authenticated, high-privileged attacker to cause a denial of service (hang or crash) in MySQL Server via multiple protocols. Impact: availability disruption; CVS...

CVE-2021-29489

Highcharts JS (charting library) versions 8 and earlier are vulnerable to cross-site scripting due to inadequate filtering of the chart options structure for XSS vectors. The vulnerability can allow execution of untrusted script in the end user’s browser if the configuration contains malicious in...

CVE-2019-2968

CVE-2019-2968 affects the MySQL Server, specifically the InnoDB component. Affected versions are 8.0.17 and earlier. The vulnerability can be exploited by a highly privileged attacker who has network access via multiple protocols, potentially causing a hang or a frequently repeated crash (a compl...

CVE-2020-14678

CVE-2020-14678 affects the MySQL Server component “Server: Security: Privileges” in Oracle MySQL. Affected versions are 8.0.20 and prior. The exploit requires network access via multiple protocols and a high-privilege attacker can compromise and take over the MySQL Server. Public advisories align...

CVE-2020-2588

CVE-2020-2588 is a MySQL Server vulnerability (Oracle MySQL) in the Server: DML component. Affected products/versions shown in the sources are MySQL 8.0.18 and earlier. The issue is exploitable by a high-privilege attacker with network access via multiple protocols, and successful exploitation ca...

CVE-2021-35624

CVE-2021-35624 affects Oracle MySQL Server (Server: Security: Privileges). Affected versions: MySQL 5.7.35 and earlier, and 8.0.26 and earlier. Description from the CVE entry: a high‑privileged attacker with network access via multiple protocols can compromise MySQL Server, potentially leading to...

CVE-2020-14619

CVE-2020-14619 affects Oracle MySQL Server 8.0.20 and earlier, due to a vulnerability in Server: Parser that can cause a denial of service. Exploitation could lead to a hang or frequent crash. Remediation is to upgrade to a newer MySQL 8.0 release; distros list fixes (e.g., Gentoo: >=8.0.24, A...

CVE-2020-2773

CVE-2020-2773 is a vulnerability in Oracle Java SE and Java SE Embedded (component: Security) that can be exploited remotely by unauthenticated attackers to cause a partial denial of service on affected Java runtimes. Affected versions include Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedde...

CVE-2021-2232

CVE-2021-2232 affects Oracle MySQL Server, specifically the Server: Group Replication Plugin . Affected are MySQL 8.0.23 and earlier . The initial sources describe a vulnerability that, when exploited by a high-privileged attacker with local access to the MySQL server host, can lead to a partial ...

CVE-2021-2354

CVE-2021-2354 affects Oracle MySQL Server (component: Server: Federated). Affected versions are 8.0.25 and earlier. The vulnerability can allow a high-privilege attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (complete DoS). Connected documents provi...

CVE-2019-2967

CVE-2019-2967 is a vulnerability in Oracle MySQL Server (Server: Optimizer) affecting 8.0.17 and older. An attacker with low privileges and network access via multiple protocols can exploit it to cause a hang or crash (DoS). The exploit details and CVSS context are reflected across multiple advis...

CVE-2020-14553

CVE-2020-14553 affects Oracle MySQL Server (Server: Pluggable Auth) with versions 5.7.30 and prior and 8.0.20 and prior. The vulnerability allows a low-privilege, network-accessible attacker to perform unauthorized updates to MySQL data (I:LOW, A:N) via multiple protocols. Public sources confirm ...

CVE-2020-2930

CVE-2020-2930 affects Oracle MySQL's MySQL Server, component Server: Parser. Affects 8.0.19 and earlier; exploitation can enable a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS). Remediation referenced in a related package update is upgrading to ...

CVE-2020-14568

The CVE-2020-14568 issue affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.20 and earlier. The root cause involves InnoDB-related vulnerabilities that can allow a high-privileged attacker with network access to cause a hang or a frequent crash (complete DoS) of MySQL Server via mu...

CVE-2020-2604

CVE-2020-2604 affects Oracle Java SE/Java SE Embedded Serialization. Affected: Java SE 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded 8u231. Described impact: unauthenticated, network-based attacker can take over the Java environment; high confidentiality, integrity, and availability impact (CVSS...

CVE-2020-2774

CVE-2020-2774 affects Oracle MySQL Server 8.0.18 and earlier, involving the Server: Security: Privileges area. A high-privilege attacker with network access via multiple protocols can cause a hang or frequent crash (DoS) of MySQL Server. The available connected documents confirm the vulnerability...

CVE-2021-2340

CVE-2021-2340 affects Oracle MySQL Server, specifically the Memcached component, with vulnerable versions 8.0.25 and earlier. The issue can be exploited over the network via multiple protocols and may allow a high-privilege attacker to cause a partial denial of service on MySQL Server. Affected e...

CVE-2021-35586

CVE-2021-35586 is a vulnerability in Oracle Java SE (Java SE component: ImageIO) and Oracle GraalVM Enterprise Edition (affected versions: Java SE 7u311, 8u301, 11.0.12, 17; GraalVM EE: 20.3.3, 21.2.0) that enables an unauthenticated attacker with network access via multiple protocols to cause a ...

CVE-2022-21282

CVE-2022-21282 is a combined Java/Oracle Java SE/GraalVM issue reported across multiple advisories. The connected documents identify assorted affected components and versions, notably: Serialization , JAXP , Libraries , Hotspot , and ImageIO within Oracle Java SE and GraalVM Enterprise Edition. A...

CVE-2019-2957

CVE-2019-2957 is a vulnerability in Oracle MySQL Server (Server: Security: Encryption) affecting MySQL 8.0.17 and earlier. The issue allows a highly privileged attacker who can reach the server over multiple network protocols to trigger a hang or crash (complete or frequent DOS) in MySQL Server. ...

CVE-2020-14804

CVE-2020-14804 affects Oracle MySQL Server (component: Server: FTS). Affected versions: 8.0.21 and earlier. An attacker with high privileges, over the network via multiple protocols, can cause a hang or crash (DoS) in MySQL Server. Remediation in connected docs shows upgrading to MySQL 8.0.26 (an...

CVE-2020-2577

CVE-2020-2577 affects Oracle MySQL Server: InnoDB is the vulnerable component. Affected versions are 5.7.28 and earlier, and 8.0.18 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. Connected...

CVE-2020-2584

CVE-2020-2584 affects Oracle MySQL Server (component: Server: Options). Affected versions are 5.7.28 and prior, and 8.0.18 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially leading to unauthorized acces...

CVE-2020-2781

CVE-2020-2781 concerns Oracle/OpenJDK Java SE JSSE vulnerability that allows unauthenticated network access to degrade availability in Java SE and Java SE Embedded (client/server deployment). The Chainguard data confirms affected OpenJDK JSSE components and versions, aligning with the CVE descrip...

CVE-2020-14837

CVE-2020-14837 affects Oracle MySQL Server 8.0.21 and earlier, specifically the Server: Optimizer component. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). CVSS 3.1 base score is 4.9 (Availability). Affected v...

CVE-2020-2895

CVE-2020-2895 affects Oracle MySQL Server, InnoDB component. Affected: MySQL 8.0.19 and earlier. Vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. CVSS 3.0 base score 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)...

CVE-2021-2174

Summary: CVE-2021-2174 αφορά la base de datos Oracle MySQL, específicamente la seguridad de InnoDB en MySQL Server. Afecta versiones 5.7.33 y anteriores y 8.0.23 y anteriores. El fallo, descrito en varias fuentes, permite a un atacante con alto nivel de privilegios y acceso en red a través de múl...

CVE-2019-2963

CVE-2019-2963 affects Oracle MySQL Server (InnoDB). According to the supplied connected advisories, vulnerable versions are MySQL 8.0.17 and earlier. The vulnerability enables high-privilege, network-access attackers to cause the MySQL Server to hang or crash (denial of service). The documents do...

CVE-2020-2601

CVE-2020-2601 affects Oracle Java SE and Java SE Embedded Security components. Affected Java SE: 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded: 8u231. Root cause is a Kerberos-related issue that can be exploited by an unauthenticated attacker with network access, potentially allowing access to s...

CVE-2020-2627

CVE-2020-2627 affects MySQL Server (Oracle MySQL), specifically the Parser component in MySQL 8.0.18 and earlier. The vulnerability is described as easily exploitable with network access via multiple protocols, potentially causing the MySQL Server to hang or crash (complete DOS) via the Parser. C...

CVE-2020-2853

Summary of CVE-2020-2853 (MySQL) : In Oracle MySQL Server, a vulnerability in the Server: Security: Privileges component affects 8.0.18 and earlier, enabling a highly privileged attacker with network access (via multiple protocols) to trigger a hang or crash of MySQL Server (denial of service). T...

CVE-2020-2903

CVE-2020-2903 affects Oracle MySQL Server (Server: Connection Handling). Affected: MySQL 8.0.19 and earlier. Exploitation requires network access and a high-privilege attacker can cause a hang or crash (DoS) via multiple protocols. CVSS v3 base 4.9 (A: High). Remediation: upgrade to a fixed relea...

CVE-2024-21094

CVE-2024-21094 affects Oracle Java SE Hotspot and Oracle GraalVM variants, with affected versions including Java SE 8u401/11.0.22/17.0.10/21.0.2/22 and GraalVM JDK 17.0.10/21.0.2/22, and GraalVM Enterprise 20.3.13/21.3.9. The vulnerability can be exploited remotely via multiple protocols to allow...

CVE-2019-2993

CVE-2019-2993 is a vulnerability in Oracle MySQL’s MySQL Server, specifically the Server: C API component. Affected versions include MySQL 5.7.27 and earlier and 8.0.17 and earlier. The vulnerability is described as difficult to exploit but, if exploited by a low-privilege attacker with network a...

CVE-2020-2924

CVE-2020-2924 affects Oracle MySQL Server (component: Server: Optimizer) with vulnerable versions 8.0.19 and earlier. The issue can be exploited by a highly privileged attacker over the network via multiple protocols to cause a hang or crash of MySQL Server (complete DoS). The provided documents ...

CVE-2021-1998

CVE-2021-1998 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.20 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially allowing unauthorized update/in...

CVE-2021-21350

CVE-2021-21350 affects the XStream Java library. Connected sources confirm that before version 1.4.16 XStream allowed remote code execution by manipulating the processed input stream, with guidance to enable a security whitelist and upgrade to at least 1.4.16. Debian security advisories (DSA-5004...

CVE-2021-2293

CVE-2021-2293 affects Oracle MySQL Server (Server: Stored Procedure). Affected versions: 8.0.23 and earlier. Exploitation is possible by a high-privilege attacker with network access via multiple protocols, potentially causing a hang or crash (DoS) of MySQL Server. CVSS v3.1 base score 4.9 (Avail...

CVE-2021-35564

CVE-2021-35564 affects Java SE (Keytool) and Oracle GraalVM Enterprise Edition, with affected Java SE versions 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. The vulnerability is exploitable remotely with unauthenticated network access and can lead to unauthorized updates/insertions/dele...

CVE-2020-2762

CVE-2020-2762 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.19 and earlier. The root cause is within the InnoDB component, enabling a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) on the MySQL Server. Impact is Availability (...