CVE-2022-21326

CVE-2022-21326 affects Oracle MySQL Cluster (component: Cluster: General). Affected versions include 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability is exploitable by a high-privilege attacker with access to the physical communication segment attached...

CVE-2018-3062

CVE-2018-3062 affects Oracle MySQL Server (Memcached subcomponent). Affected versions are MySQL 5.6.40 and earlier, 5.7.22 and earlier, and 8.0.11 and earlier. The vulnerability can be exploited by a low-privileged attacker over the memcached network interface to cause the MySQL server to hang or...

CVE-2022-21318

CVE-2022-21318 affects Oracle MySQL Cluster (Cluster: General). Affected versions are 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability is described as difficult to exploit with high-privilege attacker access to the MySQL Cluster infrastructure, potentially leading to takeover of the ...

CVE-2022-21635

CVE-2022-21635 affects Oracle MySQL Server (InnoDB) with vulnerable 8.0.29 and earlier. Root cause: InnoDB component allows high-privilege attacker with network access via multiple protocols to modify data or cause a DoS via hangs/crashes. Affected packages include MySQL Server; Debian/Mariner en...

CVE-2023-21911

CVE-2023-21911 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.32 and earlier. The advisory states the issue allows a high-privilege attacker, over the network via multiple protocols, to cause a hang or crash (complete DoS) of MySQL Server. Exploitation details are not provided ...

CVE-2020-2816

CVE-2020-2816 affects Oracle Java SE JSSE in Java SE 11.0.6 and 14. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise Java SE, potentially enabling unauthorized creation, deletion, or modification of data in Java SE‑accessible data. The description n...

CVE-2022-21330

CVE-2022-21330 affects Oracle MySQL Cluster (Cluster: General). Affected versions include 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability requires physical access to the hardware’s communication segment and user interaction from another person, with exploitation ...

CVE-2022-21344

CVE-2022-21344 affects Oracle MySQL Server (Server: Replication). Affected: MySQL 5.7.36 and earlier, 8.0.27 and earlier. Exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). Remediation in public advisories recommends upgradin...

CVE-2024-21008

CVE-2024-21008 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL Server versions 8.0.36 and prior, and 8.3.0 and prior. Attackers with network access via multiple protocols and high privileges can cause a hang or a crash (DoS). The information in connected sources corroborates the ...

CVE-2022-21314

The CVE-2022-21314 entry concerns Oracle MySQL Cluster (component: Cluster: General). Affected versions are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability allows a highly privileged attacker with access to the hardware’s physical communication segmen...

CVE-2022-21352

CVE-2022-21352 affects Oracle MySQL Server (InnoDB) with impacted versions 8.0.26 and prior. The vulnerability is described as allowing a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially leading to unauthorized creation, deletion, or modif...

CVE-2024-20993

CVE-2024-20993 affects Oracle MySQL Server, specifically the Optimizer component. Affected versions are MySQL 8.0.35 and earlier and 8.2.0 and earlier. The vulnerability is exploitable by an attacker with network access via multiple protocols and is described as capable of causing a hang or a fre...

CVE-2024-21087

CVE-2024-21087 affects Oracle MySQL Server (Server: Group Replication Plugin). Affected versions: 8.0.36 and prior, and 8.3.0 and prior. An attacker with network access can exploit via multiple protocols to cause a hang or a complete DOS crash. CVSS 3.1 base score 4.9 (Availability impact). Explo...

CVE-2018-3280

CVE-2018-3280 affects the MySQL Server component (Server: JSON) of Oracle MySQL. Affected products/versions: MySQL 8.0.12 and earlier. The vulnerability allows a highly privileged attacker who can access the server over multiple network protocols to cause a hang or a frequent, repeatable crash of...

CVE-2020-14771

CVE-2020-14771 describes an LDAP Auth access-control vulnerability in Oracle MySQL Server. Affected: MySQL Server versions 5.7.31 and earlier, 8.0.21 and earlier. The issue is exploitable by an authenticated attacker with network access via multiple protocols and can lead to partial denial of ser...

CVE-2024-21062

The CVE-2024-21062 entry corresponds to a vulnerability in Oracle MySQL Server (Server: Optimizer). The connected documentation confirms affected versions are 8.0.36 and prior and 8.3.0 and prior, with exploitation possible over the network by a high-privilege attacker, potentially causing a hang...

CVE-2018-2767

CVE-2018-2767 affects Oracle MySQL Server (subcomponent: Server: Security: Encryption). Affected are MySQL Server versions 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability allows a low-privilege attacker who can reach the server over multiple network protocols to ...

CVE-2018-3285

CVE-2018-3285 is a vulnerability in the MySQL Server component of Oracle MySQL (Server: Windows). Affected versions are 8.0.12 and prior. It allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeating crash (complete DOS) of MySQL Server....

CVE-2024-20998

CVE-2024-20998 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.36 and prior and 8.3.0 and prior. The vulnerability can be exploited over the network by a high-privileged attacker to cause a hang or crash (complete DOS). Remediation observed in published advis...

CVE-2018-3077

CVE-2018-3077 affects Oracle MySQL Server: DDL. Affected: MySQL 5.7.22 and earlier; 8.0.11 and earlier. Exploitation can cause a denial of service with high availability impact, exploitable with network access via multiple protocols and requires HIGH privileges. Root cause is in the Server: DDL h...

CVE-2022-21358

CVE-2022-21358 affects Oracle/MySQL Server (component: Server: Security: Encryption). Affected versions are 8.0.27 and earlier. The vulnerability can be exploited by a low-privilege attacker with network access via multiple protocols, potentially causing the MySQL Server to hang or crash (complet...

CVE-2024-21052

CVE-2024-21052 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.34 and prior. The vulnerability could be exploited by a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVS...

CVE-2017-10355

CVE-2017-10355 is documented across multiple openJDK/OpenJDK-derived advisories (CentOS, Debian, Amazon, IBM, etc.) as a networking vulnerability in the FtpClient component of OpenJDK’s Java SE/Java SE Embedded. Technical details in connected sources specify that the FtpClient did not set default...

CVE-2022-21357

CVE-2022-21357 affects Oracle MySQL Cluster (Cluster: General). Affected: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, 8.0.27 and prior. Reported impact: unauthorized read of a subset of MySQL Cluster data and partial denial of service. Exploitation details vary by source, but public rec...

CVE-2018-3074

CVE-2018-3074 affects Oracle MySQL Server (Server: Security: Roles). Affected: MySQL 8.0.11 and earlier. Underlying issue: vulnerability in Roles subcomponent can allow a low-privileged, network-access attacker to cause a denial of service (hangs/crashes) in MySQL Server via multiple protocols. I...

CVE-2022-21287

CVE-2022-21287 affects Oracle MySQL Cluster (Cluster: General). Affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, 8.0.27 and prior. The issue can allow takeover of MySQL Cluster and is described as high impact to confidentiality, integrity, and availability. Exploitation co...

CVE-2022-21632

CVE-2022-21632 affects Oracle MySQL Server 8.0.30 and earlier. Vulnerability in Server: Security: Privileges enables a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). CVSS 3.1 base score 4.9 (Availability). Remediation observed in downst...

CVE-2022-21323

CVE-2022-21323 affects Oracle MySQL Cluster (Cluster: General). Affected: MySQL Cluster products prior to 7.5.24, 7.6.20, and 8.0.27. The issue allows a high-privilege attacker with access to the physical communication segment to compromise the cluster, enabling unauthorized read access to a subs...

CVE-2022-23913

CVE-2022-23913 affects Apache ActiveMQ Artemis, specifically versions prior to 2.20.0 or 2.19.1. The issue allows an attacker to partially disrupt availability (DoS) through uncontrolled memory/resource consumption. This conclusion is drawn from the CVE entry and the IBM security bulletin that li...

CVE-2024-21055

CVE-2024-21055 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.35 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or a frequent, repeatable crash (complete DOS) of MySQL Server. The base...

CVE-2024-21060

CVE-2024-21060 affects Oracle MySQL Server (Server: Data Dictionary). Affected versions: 8.0.36 and prior, 8.3.0 and prior. An attacker with high privileges and network access via multiple protocols can cause a hang or frequent crash (DoS). The vulnerability is described as easily exploitable. Pu...

CVE-2018-12015

CVE-2018-12015 affects the Archive::Tar module in Perl (up to 5.26.2). The vulnerability lets a crafted tar archive bypass directory-traversal protection and overwrite arbitrary files when a tar contains a symlink and a regular file with the same name. Affected advisories/archives confirm the iss...

CVE-2018-2973

CVE-2018-2973 is an Oracle Java SE/JSSE vulnerability affecting Java SE: 6u191, 7u181, 8u172, 10.0.1 and Java SE Embedded: 8u171. It can be exploited over the network with SSL/TLS by an unauthenticated attacker to cause unauthorized data modifications (integrity impact). Affected deployments load...

CVE-2018-3075

Oracle MySQL Server (Server: Security: Privileges) is affected by CVE-2018-3075 in MySQL 8.0.11 and earlier. The vulnerability, described across IBM/IBM Guardium sources, enables a high-privilege attacker with network access via multiple protocols to compromise the MySQL Server and can result in ...

CVE-2018-3079

CVE-2018-3079 affects the Oracle MySQL Server InnoDB component. The vulnerability exists in MySQL 8.0.11 and earlier. An authenticated, high-privilege attacker who can reach the server over network (via multiple protocols) can trigger a denial of service, causing the server to hang or crash (A: H...

CVE-2022-21312

CVE-2022-21312 affects the MySQL Cluster component of Oracle MySQL. Affected versions are 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability can be exploited by a highly privileged attacker with access to the physical network segment attached to ...

CVE-2022-21366

CVE-2022-21366 affects Oracle Java SE (ImageIO) and Oracle GraalVM Enterprise Edition. The Oracle advisory describes affected versions: Java SE 11.0.13 and 17.0.1; GraalVM EE 20.3.4 and 21.3.0. Exploitation could allow an unauthenticated network attacker to cause a partial denial of service or, d...

CVE-2018-3066

CVE-2018-3066 affects the MySQL Server component (subcomponent: Server: Options) and is disclosed across multiple advisories. Affected versions include 5.5.60 and earlier, 5.6.40 and earlier, and 5.7.22 and earlier. The vulnerability is described as difficult to exploit, requiring network access ...

CVE-2018-3170

CVE-2018-3170 affects Oracle MySQL Server (Server: DDL). Affected: MySQL 8.0.12 and earlier. Description from multiple sources confirms a high-privilege attacker with network access via multiple protocols can cause a hang or complete denial of service (DOS) on MySQL Server. Several connected advi...

CVE-2022-21313

CVE-2022-21313 concerns the Oracle MySQL Cluster component (Cluster: General). The vulnerability affects MySQL Cluster in versions 7.6.20 and earlier and 8.0.27 and earlier. It is described as allowing a high-privilege attacker with access to the hardware’s physical communication segment to obtai...

CVE-2022-21334

CVE-2022-21334 affects Oracle MySQL Cluster (Cluster: General) with affected versions 8.0.27 and earlier. The vulnerability is described as potentially leading to takeover of MySQL Cluster with a requirement for user interaction and access to the physical communication segment, and it is characte...

CVE-2022-21600

CVE-2022-21600 affects Oracle MySQL Server (Server: Optimizer). Affected: 8.0.27 and earlier. Exploitation by a high-privilege attacker with network access via multiple protocols can lead to takeover of the MySQL Server. CVSS v3.1 base score 7.2 (C/H I/H A/H). Remediation per advisory sources inc...

CVE-2024-21056

CVE-2024-21056 affects Oracle MySQL Server (Server: DML); supported versions 8.0.34 and prior are impacted. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent, complete denial of service of MySQL Server. CVSS 3.1 base score 4...

CVE-2018-2755

CVE-2018-2755 affects Oracle MySQL Server (Server: Replication) and is present in supported MySQL/MariaDB branches up to specific prior versions: 5.5.59 and earlier, 5.6.39 and earlier, and 5.7.21 and earlier. The issue allows takeover of MySQL Server and requires logon with user interaction; imp...

CVE-2018-3286

CVE-2018-3286 affects Oracle MySQL Server (Server: Security: Privileges). Affected: MySQL 8.0.12 and earlier. Description from multiple sources: vulnerability allows a low-privileged, network-accessing attacker to modify data in MySQL Server through various protocols, with impact described as una...

CVE-2019-13118

CVE-2019-13118 affects libxslt 1.1.33, where a too-narrow type holding grouping characters in xsl:number can pass an invalid character/length to xsltNumberFormatDecimal, causing a read of uninitialized stack data (stack overflow vulnerability). Connected Apple advisories (HT210351, HT210346, HT21...

CVE-2022-21277

CVE-2022-21277 affects Oracle Java SE and Oracle GraalVM Enterprise Edition via ImageIO, with additional related CVEs (CVE-2022-21248, CVE-2022-21282, CVE-2022-21283, CVE-2022-21291, CVE-2022-21293, CVE-2022-21294, CVE-2022-21299, CVE-2022-21305, CVE-2022-21341, CVE-2022-21360, CVE-2022-21365, CV...

CVE-2022-21355

CVE-2022-21355 affects Oracle MySQL Cluster (Cluster: General). Public sources enumerate affected versions: 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. Several connected documents describe this as a buffer overflow vulnerability in MySQL Cluster, with the potential...

CVE-2022-21356

The CVE-2022-21356 entry concerns Oracle MySQL Cluster (Cluster: General). Affected versions include 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability appears to allow a high-privilege attacker with access to the physical communication segment t...

CVE-2019-2426

CVE-2019-2426 affects Oracle Java SE Networking. Affected: Java SE 7u201, 8u192, 11.0.1; Java SE Embedded 8u191. Attack requires network access and can lead to unauthorized read access to a subset of Java SE data. Root cause: vulnerability in the Java SE Networking component that can be exploited...