CVE-2020-2781

CVE-2020-2781 concerns Oracle/OpenJDK Java SE JSSE vulnerability that allows unauthenticated network access to degrade availability in Java SE and Java SE Embedded (client/server deployment). The Chainguard data confirms affected OpenJDK JSSE components and versions, aligning with the CVE descrip...

CVE-2021-2174

Summary: CVE-2021-2174 αφορά la base de datos Oracle MySQL, específicamente la seguridad de InnoDB en MySQL Server. Afecta versiones 5.7.33 y anteriores y 8.0.23 y anteriores. El fallo, descrito en varias fuentes, permite a un atacante con alto nivel de privilegios y acceso en red a través de múl...

CVE-2019-2434

CVE-2019-2434 affects the Oracle MySQL Server component (subcomponent: Server: Parser). Affected versions include 5.7.24 and earlier and 8.0.13 and earlier. It is exploitable over the network by a low-privileged attacker and can cause a hang or a crash (availability impact) in MySQL Server. The C...

CVE-2020-2584

CVE-2020-2584 affects Oracle MySQL Server (component: Server: Options). Affected versions are 5.7.28 and prior, and 8.0.18 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially leading to unauthorized acces...

CVE-2020-2904

CVE-2020-2904 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions: 8.0.19 and earlier. The issue enables a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (complete DoS) of MySQL Server. The connected sources indicate ...

CVE-2021-1998

CVE-2021-1998 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected versions are 8.0.20 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially allowing unauthorized update/in...

CVE-2019-2945

CVE-2019-2945 affects Oracle Java SE/Java SE Embedded (Networking) with affected Java SE versions 7u231, 8u221, 11.0.4, 13 and Java SE Embedded 8u221. The vulnerability can be exploited over the network by unauthenticated attackers; some vectors require user interaction and may lead to a partial ...

CVE-2020-2923

CVE-2020-2923 affects Oracle MySQL Server, component Server: Optimizer, with affected versions 8.0.19 and earlier. The vulnerability allows a high-privileged attacker who can access the service over network through multiple protocols to cause a hang or crash (Denial of Service). The connected Alm...

CVE-2021-2293

CVE-2021-2293 affects Oracle MySQL Server (Server: Stored Procedure). Affected versions: 8.0.23 and earlier. Exploitation is possible by a high-privilege attacker with network access via multiple protocols, potentially causing a hang or crash (DoS) of MySQL Server. CVSS v3.1 base score 4.9 (Avail...

CVE-2020-14777

Oracle MySQL Server vulnerability CVE-2020-14777 affects the Server: Optimizer in MySQL 8.0.21 and earlier. An attacker with network access via multiple protocols and high privileges can cause the server to hang or crash (DoS). Affected product/version details are supported in connected documents...

CVE-2020-14852

CVE-2020-14852 affects Oracle MySQL Server (Server: Charsets) and

CVE-2020-2604

CVE-2020-2604 affects Oracle Java SE/Java SE Embedded Serialization. Affected: Java SE 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded 8u231. Described impact: unauthenticated, network-based attacker can take over the Java environment; high confidentiality, integrity, and availability impact (CVSS...

CVE-2020-2773

CVE-2020-2773 is a vulnerability in Oracle Java SE and Java SE Embedded (component: Security) that can be exploited remotely by unauthenticated attackers to cause a partial denial of service on affected Java runtimes. Affected versions include Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedde...

CVE-2021-2122

CVE-2021-2122 affects Oracle MySQL Server (Server: DDL). Affected: MySQL 8.0.22 and earlier. Description in the CVE notes an easily exploitable vulnerability that, with network access via multiple protocols and a high-privilege attacker, can cause the MySQL Server to hang or crash (DoS). Connecte...

CVE-2019-2420

CVE-2019-2420 is a vulnerability in the Oracle MySQL Server: Optimizer subcomponent. Affected products/versions include MySQL Server 5.7.24 and prior and 8.0.13 and prior; exploitation requires network access and high privileges, via multiple protocols, to cause a hang or frequent crash (DoS). Co...

CVE-2020-14559

CVE-2020-14559 affects Oracle MySQL Server, specifically the Server: Information Schema component. Affected: MySQL Server versions 5.6.48 and earlier, 5.7.30 and earlier, and 8.0.20 and earlier. The vulnerability allows a low-privilege, network-accessible attacker to read a subset of data from My...

CVE-2020-14785

CVE-2020-14785 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions up to 8.0.21 and earlier. The issue allows a high-privilege attacker who can reach the server over multiple network protocols to cause the MySQL Server to hang or crash, producing a denial of service. Practica...

CVE-2020-2893

CVE-2020-2893 is an Oracle MySQL InnoDB vulnerability affecting 8.0.19 and earlier. An attacker with network access and high privileges can cause a hang or crash (denial of service) via multiple protocols. Connected sources enumerate this issue under MySQL Server/InnoDB and corroborate the 4.9 CV...

CVE-2019-2539

In the provided connected documents, CVE-2019-2539 is described as a vulnerability in the MySQL Server component (subcomponent: Server: Connection). Affected versions are 8.0.13 and prior. The flaw can be exploited by a highly privileged attacker with network access via multiple protocols to caus...

CVE-2020-14583

CVE-2020-14583 affects Oracle Java SE/Java SE Embedded (Libraries component). Affected: Java SE 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded 8u251. Exploitation requires network access with user interaction and can lead to takeover of Java SE/Embedded with high impact on confidentiality, int...

CVE-2021-2058

CVE-2021-2058 affects Oracle MySQL Server (component: Server: Locking) with affected versions 8.0.22 and earlier. The vulnerability allows a high-privileged attacker who can access the server over the network via multiple protocols to cause a hang or frequently repeatable crash (DoS) of MySQL Ser...

CVE-2021-2169

CVE-2021-2169 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 5.7.33 and prior, and 8.0.23 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause the MySQL Server to hang or crash (DoS). The CVSSv3.1 base...

CVE-2021-2170

CVE-2021-2170 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.23 and earlier. The vulnerability can allow a high-privileged attacker with network access to cause a hang or a frequently repeatable crash (complete DoS) of MySQL Server. Public references in conn...

CVE-2020-2898

CVE-2020-2898 affects Oracle MySQL Server, specifically the Server: Charsets component in version 8.0.19. The vulnerability can allow a high-privilege attacker with network access to cause a hang or crash (DoS) of MySQL Server. Connected sources corroborate the issue as a denial-of-service-type v...

CVE-2024-21144

CVE-2024-21144 affects Oracle Java SE and Oracle GraalVM Enterprise Edition (component: Concurrency; also listed under Hotspot, 2D, and other Java runtime areas in related entries). Affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14, 21.3.10 (and o...

CVE-2020-10878

Perl before 5.30.3 contains an integer overflow in the regular expression compiler (related to PL_regkind[OP(n)] == NOTHING). A crafted regex can produce malformed bytecode with a possibility of instruction injection, as documented by multiple advisories and CVEs (e.g., CVE-2020-10878). Public re...

CVE-2020-14837

CVE-2020-14837 affects Oracle MySQL Server 8.0.21 and earlier, specifically the Server: Optimizer component. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). CVSS 3.1 base score is 4.9 (Availability). Affected v...

CVE-2020-14867

CVE-2020-14867 affects Oracle MySQL Server (Server: DDL). Affected versions are 5.6.49 and earlier, 5.7.31 and earlier, and 8.0.21 and earlier. The vulnerability can be exploited by a highly privileged attacker with network access via multiple protocols to cause the MySQL Server to hang or crash ...

CVE-2019-2535

CVE-2019-2535 affects Oracle MySQL Server (subcomponent: Server: Options). From the public records, affected versions are 8.0.13 and prior. The vulnerability is described as difficult to exploit but can allow a high-privileged attacker who can log on to the host where MySQL Server runs to comprom...

CVE-2020-14593

CVE-2020-14593 is a vulnerability in the 2D component of Oracle Java SE/SE Embedded. Affected: Java SE 7u261, 8u251, 11.0.7, 14.0.1; Java SE Embedded 8u251. Vulnerability type is unspecified in the provided sources, but exploitation is described as unauthenticated with network access via multiple...

CVE-2020-14678

CVE-2020-14678 affects the MySQL Server component “Server: Security: Privileges” in Oracle MySQL. Affected versions are 8.0.20 and prior. The exploit requires network access via multiple protocols and a high-privilege attacker can compromise and take over the MySQL Server. Public advisories align...

CVE-2020-2897

CVE-2020-2897 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.19 and earlier. The vulnerability enables a high-privilege attacker who can reach the server over multiple network protocols to cause a hang or frequent crash (denial of service) of MySQL Server. T...

CVE-2022-21278

CVE-2022-21278 affects Oracle MySQL Server (Server: Optimizer). Public sources in connected documents describe a vulnerability due to improper input validation in the Server: Optimizer. Affected versions are 8.0.26 and earlier. Successful exploitation via network from a low-privilege, unauthentic...

CVE-2020-14830

CVE-2020-14830 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Description across sources: low-privilege attacker with network access via multiple protocols can cause the MySQL Server to hang or frequently crash (complete DoS). The connected documents confirm ...

CVE-2020-2583

CVE-2020-2583 affects OpenJDK/OpenJDK-derived packages across multiple vendors and OSes, with the Serialization component (and related areas) being impacted. Public advisories in Debian (DLA-2128-1) and CentOS/Red Hat family outline affected versions such as Java 7u241/8u231/11.0.5/13.0.1 (and em...

CVE-2021-2178

CVE-2021-2178 affects Oracle MySQL Server (Server: Replication). Affected versions: MySQL 5.7.32 and earlier, and 8.0.22 and earlier. The vulnerability is exploitable by a low-privileged attacker with network access via multiple protocols, potentially causing a hang or a frequently repeatable cra...

CVE-2021-2215

CVE-2021-2215 affects Oracle MySQL Server (Server: Stored Procedure) with affected versions 8.0.23 and earlier. The vulnerability can be exploited by a high-privileged attacker with network access via multiple protocols to cause a hang or a repeatable crash (DoS) of MySQL Server. The CVSS 3.1 bas...

CVE-2019-2914

CVE-2019-2914 affects Oracle MySQL Server (component: Server: Security: Encryption). Affected versions: 5.7.27 and prior, 8.0.17 and prior. Exploitation requires low privileges and network access; can result in a hang or complete DoS of MySQL Server (A: HIGH). CVSS 3.0 base score 6.5 (Availabilit...

CVE-2020-14540

CVE-2020-14540 affects Oracle MySQL Server (Server: DML). Affected: MySQL 5.7.30 and earlier and 8.0.20 and earlier. Exploitation can allow a high-privilege attacker with network access via multiple protocols to cause a denial of service (hang or crash). Remediation in public advisories: upgrade ...

CVE-2021-2193

CVE-2021-2193 affects Oracle MySQL Server (component: Server: Optimizer). Vulnerable in MySQL 8.0.23 and earlier. Root cause described as an easily exploitable feature/condition enabling a high-privileged attacker with network access (via multiple protocols) to cause a hang or frequently repeatab...

CVE-2021-2208

CVE-2021-2208 affects Oracle MySQL Server (Server: Partition) with affected versions 8.0.23 and earlier. The vulnerability can be exploited by an authenticated, high-privilege attacker over network via multiple protocols to cause a hang or crash (DoS) of MySQL Server. Connected sources confirm th...

CVE-2022-21824

CVE-2022-21824 is a prototype pollution vulnerability in Node.js linked to console.table properties. It affects Node.js prior to patched releases and can be triggered when user-controlled data is passed as the first parameter with a plain object containing an own property such as proto . Public a...

CVE-2020-14790

Oracle MySQL Server (Server: PS) is affected in 5.7.31 and earlier and 8.0.21 and earlier. An attacker with network access via multiple protocols can exploit this to cause the server to hang or crash (DoS). Public details show suggested fixes via upgrading to newer MySQL versions (e.g., MySQL 8.0...

CVE-2020-14844

CVE-2020-14844 affects Oracle MySQL Server (Server: PS) in 8.0.21 and earlier. An attacker with network access across multiple protocols could exploit this to cause a hang or crash (DoS). CVSS 3.1 base score 4.9 (Availability). Remediation mentioned in connected docs: upgrade to MySQL 8.0.26 or n...

CVE-2020-2896

CVE-2020-2896 affects the MySQL Server (Oracle MySQL), specifically the Server: Information Schema component. Affected are 8.0.19 and earlier. The vulnerability allows a high-privilege attacker who has network access via multiple protocols to cause the MySQL Server to hang or crash (complete deni...

CVE-2020-2924

CVE-2020-2924 affects Oracle MySQL Server (component: Server: Optimizer) with vulnerable versions 8.0.19 and earlier. The issue can be exploited by a highly privileged attacker over the network via multiple protocols to cause a hang or crash of MySQL Server (complete DoS). The provided documents ...

CVE-2021-29489

Highcharts JS (charting library) versions 8 and earlier are vulnerable to cross-site scripting due to inadequate filtering of the chart options structure for XSS vectors. The vulnerability can allow execution of untrusted script in the end user’s browser if the configuration contains malicious in...

CVE-2021-35556

CVE-2021-35556 is a vulnerability in the Swing component of Java SE (and related GraalVM Enterprise Edition versions) affecting Java SE 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. An unauthenticated attacker with network access via multiple protocols can potentially exploit this to ca...

CVE-2019-17267

Summary (CVE-2019-17267): A polymorphic typing deserialization issue in FasterXML Jackson Databind (versions prior to 2.9.10) related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup. IBM/X-Force details show a base score of 7.3 (CVSSv3) with high impact on confidentiality, integrit...

CVE-2019-2973

CVE-2019-2973 is an issue in Oracle Java SE/Java SE Embedded (component: JAXP) affecting OpenJDK/OpenJDK builds such as 7u231, 8u221, 11.0.4 and 13 (and Embedded 8u221). The vulnerability allows unauthenticated network-accessed exploitation that can cause a partial denial of service in Java SE/SE...