CVE-2019-2420

CVE-2019-2420 is a vulnerability in the Oracle MySQL Server: Optimizer subcomponent. Affected products/versions include MySQL Server 5.7.24 and prior and 8.0.13 and prior; exploitation requires network access and high privileges, via multiple protocols, to cause a hang or frequent crash (DoS). Co...

CVE-2019-2957

CVE-2019-2957 is a vulnerability in Oracle MySQL Server (Server: Security: Encryption) affecting MySQL 8.0.17 and earlier. The issue allows a highly privileged attacker who can reach the server over multiple network protocols to trigger a hang or crash (complete or frequent DOS) in MySQL Server. ...

CVE-2020-14583

CVE-2020-14583 affects Oracle Java SE/Java SE Embedded (Libraries component). Affected: Java SE 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded 8u251. Exploitation requires network access with user interaction and can lead to takeover of Java SE/Embedded with high impact on confidentiality, int...

CVE-2020-14837

CVE-2020-14837 affects Oracle MySQL Server 8.0.21 and earlier, specifically the Server: Optimizer component. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). CVSS 3.1 base score is 4.9 (Availability). Affected v...

CVE-2020-14839

CVE-2020-14839 affects Oracle MySQL Server (Server: Optimizer) with affected versions 8.0.21 and earlier. The vulnerability, described across multiple sources, enables a high-privilege attacker with network access to cause a hang or complete DoS (high availability impact) via unspecified attack v...

CVE-2020-2584

CVE-2020-2584 affects Oracle MySQL Server (component: Server: Options). Affected versions are 5.7.28 and prior, and 8.0.18 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Server, potentially leading to unauthorized acces...

CVE-2022-21282

CVE-2022-21282 is a combined Java/Oracle Java SE/GraalVM issue reported across multiple advisories. The connected documents identify assorted affected components and versions, notably: Serialization , JAXP , Libraries , Hotspot , and ImageIO within Oracle Java SE and GraalVM Enterprise Edition. A...

CVE-2019-2539

In the provided connected documents, CVE-2019-2539 is described as a vulnerability in the MySQL Server component (subcomponent: Server: Connection). Affected versions are 8.0.13 and prior. The flaw can be exploited by a highly privileged attacker with network access via multiple protocols to caus...

CVE-2020-14845

CVE-2020-14845 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. The vulnerability enables a network-authenticated, high-privileged attacker to cause a denial of service (hang or crash) in MySQL Server via multiple protocols. Impact: availability disruption; CVS...

CVE-2020-14868

CVE-2020-14868 affects Oracle MySQL Server (Server: Optimizer) and is associated with MySQL 8.0.21 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to trigger a hang or frequent crash (Denial of Service) in MySQL Server. The connected mat...

CVE-2020-2773

CVE-2020-2773 is a vulnerability in Oracle Java SE and Java SE Embedded (component: Security) that can be exploited remotely by unauthenticated attackers to cause a partial denial of service on affected Java runtimes. Affected versions include Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedde...

CVE-2020-2903

CVE-2020-2903 affects Oracle MySQL Server (Server: Connection Handling). Affected: MySQL 8.0.19 and earlier. Exploitation requires network access and a high-privilege attacker can cause a hang or crash (DoS) via multiple protocols. CVSS v3 base 4.9 (A: High). Remediation: upgrade to a fixed relea...

CVE-2021-29489

Highcharts JS (charting library) versions 8 and earlier are vulnerable to cross-site scripting due to inadequate filtering of the chart options structure for XSS vectors. The vulnerability can allow execution of untrusted script in the end user’s browser if the configuration contains malicious in...

CVE-2020-2761

CVE-2020-2761 affects Oracle MySQL Server (Server: Security: Privileges) in MySQL 8.0.18 and earlier. An authenticated, high-privilege attacker with network access via multiple protocols can cause a hang or crash (DoS). Remediation is to upgrade MySQL to a version where the fix is included (per A...

CVE-2020-2895

CVE-2020-2895 affects Oracle MySQL Server, InnoDB component. Affected: MySQL 8.0.19 and earlier. Vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. CVSS 3.0 base score 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)...

CVE-2021-35564

CVE-2021-35564 affects Java SE (Keytool) and Oracle GraalVM Enterprise Edition, with affected Java SE versions 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. The vulnerability is exploitable remotely with unauthenticated network access and can lead to unauthorized updates/insertions/dele...

CVE-2024-21144

CVE-2024-21144 affects Oracle Java SE and Oracle GraalVM Enterprise Edition (component: Concurrency; also listed under Hotspot, 2D, and other Java runtime areas in related entries). Affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14, 21.3.10 (and o...

CVE-2020-2601

CVE-2020-2601 affects Oracle Java SE and Java SE Embedded Security components. Affected Java SE: 7u241, 8u231, 11.0.5, 13.0.1; Java SE Embedded: 8u231. Root cause is a Kerberos-related issue that can be exploited by an unauthenticated attacker with network access, potentially allowing access to s...

CVE-2020-2660

CVE-2020-2660 affects Oracle MySQL's MySQL Server (component: Server: Optimizer). The cited description indicates an easily exploitable, network-accessible vulnerability allowing a high-privilege attacker to cause a hang or a frequent crash (complete DOS) of MySQL Server. Affected versions are 5....

CVE-2020-2925

CVE-2020-2925 affects Oracle MySQL Server, component Server: PS, with affected versions 8.0.19 and earlier. The connected sources confirm a high-privilege, network-accessible attacker could cause a hang or frequent crash (DoS) of MySQL Server. No exploit details are provided in the documents. A r...

CVE-2024-21094

CVE-2024-21094 affects Oracle Java SE Hotspot and Oracle GraalVM variants, with affected versions including Java SE 8u401/11.0.22/17.0.10/21.0.2/22 and GraalVM JDK 17.0.10/21.0.2/22, and GraalVM Enterprise 20.3.13/21.3.9. The vulnerability can be exploited remotely via multiple protocols to allow...

CVE-2019-2993

CVE-2019-2993 is a vulnerability in Oracle MySQL’s MySQL Server, specifically the Server: C API component. Affected versions include MySQL 5.7.27 and earlier and 8.0.17 and earlier. The vulnerability is described as difficult to exploit but, if exploited by a low-privilege attacker with network a...

CVE-2020-14846

CVE-2020-14846 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Described as an easily exploitable issue where a low-privilege attacker with network access via multiple protocols can cause the server to hang or crash (DoS). CVSS v3.1 base score 6.5 (...

CVE-2021-2170

CVE-2021-2170 affects Oracle MySQL Server (component: Server: Optimizer) with affected versions 8.0.23 and earlier. The vulnerability can allow a high-privileged attacker with network access to cause a hang or a frequently repeatable crash (complete DoS) of MySQL Server. Public references in conn...

CVE-2021-2208

CVE-2021-2208 affects Oracle MySQL Server (Server: Partition) with affected versions 8.0.23 and earlier. The vulnerability can be exploited by an authenticated, high-privilege attacker over network via multiple protocols to cause a hang or crash (DoS) of MySQL Server. Connected sources confirm th...

CVE-2021-2215

CVE-2021-2215 affects Oracle MySQL Server (Server: Stored Procedure) with affected versions 8.0.23 and earlier. The vulnerability can be exploited by a high-privileged attacker with network access via multiple protocols to cause a hang or a repeatable crash (DoS) of MySQL Server. The CVSS 3.1 bas...

CVE-2019-2966

CVE-2019-2966 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.17 and earlier. It is remotely exploitable by a low-privilege attacker via multiple network protocols to cause a hang or complete denial of service of MySQL Server. Connected advisories (MiracleLin...

CVE-2019-3004

CVE-2019-3004 affects Oracle MySQL Server (component: Server: Parser). Affected: MySQL Server 8.0.17 and earlier. Description: a low-privilege, network-accessible attacker can cause a hang or as-needed crash (complete DOS) of MySQL Server via multiple protocols. Connected documents corroborate pr...

CVE-2020-14656

CVE-2020-14656 is a MySQL (Oracle MySQL) vulnerability in the Server: Locking component affecting 8.0.20 and earlier. The issue allows a high-privileged attacker with network access via multiple protocols to cause a hang or crash (complete DOS) of MySQL Server. The available connected advisories ...

CVE-2020-14793

CVE-2020-14793 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 5.6.49 and earlier, 5.7.31 and earlier, 8.0.21 and earlier. Exploitation requires network access, potentially via multiple protocols, with high privileges to cause a hang or crash (DoS). Connected advisories confirm m...

CVE-2021-2178

CVE-2021-2178 affects Oracle MySQL Server (Server: Replication). Affected versions: MySQL 5.7.32 and earlier, and 8.0.22 and earlier. The vulnerability is exploitable by a low-privileged attacker with network access via multiple protocols, potentially causing a hang or a frequently repeatable cra...

CVE-2021-2300

CVE-2021-2300 affects Oracle MySQL Server (Server: DML) with affected versions 8.0.23 and earlier. The vulnerability could allow a high-privilege attacker, with network access via multiple protocols, to cause a hang or crash (complete DoS) of MySQL Server. The impact is availability loss as descr...

CVE-2019-2530

CVE-2019-2530 is a vulnerability in Oracle MySQL Server (Server: Optimizer). Affected are MySQL 8.0.13 and earlier. It allows a high-privileged attacker with network access to cause a hang or a frequent crash (DoS); CVSS 3.1 base score 4.9. Remediation in advisories (e.g., RHSA-2019:2511) is to u...

CVE-2020-14593

CVE-2020-14593 is a vulnerability in the 2D component of Oracle Java SE/SE Embedded. Affected: Java SE 7u261, 8u251, 11.0.7, 14.0.1; Java SE Embedded 8u251. Vulnerability type is unspecified in the provided sources, but exploitation is described as unauthenticated with network access via multiple...

CVE-2020-14702

CVE-2020-14702 affects Oracle MySQL Server (MySQL 8.0 family, up to 8.0.20). The issue is in Server: Privileges, enabling a high-privileged attacker with network access via multiple protocols to cause a hang or complete denial-of-service against MySQL Server. Exploitation details are not provided...

CVE-2020-14861

CVE-2020-14861 affects Oracle MySQL Server (Server: Optimizer) in versions 8.0.21 and earlier. The vulnerability allows a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server, per the description. The i...

CVE-2020-2583

CVE-2020-2583 affects OpenJDK/OpenJDK-derived packages across multiple vendors and OSes, with the Serialization component (and related areas) being impacted. Public advisories in Debian (DLA-2128-1) and CentOS/Red Hat family outline affected versions such as Java 7u241/8u231/11.0.5/13.0.1 (and em...

CVE-2021-2299

CVE-2021-2299 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.23 and earlier. Root cause: vulnerability in the Optimizer logic allows a high-privileged, network-proximate attacker to cause a hang or crash (DoS) via multiple protocols. Impact: availability impact (c...

CVE-2022-21589

CVE-2022-21589 affects Oracle MySQL Server (Server: Security: Privileges). Affected versions are 5.7.39 and earlier, and 8.0.16 and earlier. The vulnerability allows a low-privileged, network-accessible attacker to read a subset of MySQL Server data. The description does not provide a patch/versi...

CVE-2022-21824

CVE-2022-21824 is a prototype pollution vulnerability in Node.js linked to console.table properties. It affects Node.js prior to patched releases and can be triggered when user-controlled data is passed as the first parameter with a plain object containing an own property such as proto . Public a...

CVE-2019-3009

CVE-2019-3009 affects Oracle MySQL Server (Server: Connection). Affected versions are 8.0.17 and earlier. The root cause, as described in the public entry and corroborated by linked advisories, is a condition that enables a high-privilege attacker who can access the server over multiple protocols...

CVE-2020-14540

CVE-2020-14540 affects Oracle MySQL Server (Server: DML). Affected: MySQL 5.7.30 and earlier and 8.0.20 and earlier. Exploitation can allow a high-privilege attacker with network access via multiple protocols to cause a denial of service (hang or crash). Remediation in public advisories: upgrade ...

CVE-2020-14579

CVE-2020-14579 affects Oracle Java SE/Embedded (Libraries component) with affected Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. The connected advisories confirm network-remote, unauthenticated access leading to a partial denial of service via multiple protocols, per CVSS 3.1 Base Score 3.7 ...

CVE-2020-14680

CVE-2020-14680 affects Oracle MySQL Server, specifically the Server: Optimizer component. Affected are MySQL Server versions 8.0.20 and earlier . The vulnerability is exploitable remotely via multiple protocols by a low-privilege attacker , resulting in a possible hang or crash (DENIAL OF SERVICE...

CVE-2020-14794

CVE-2020-14794 affects Oracle MySQL Server 8.0.21 and earlier (Server: Optimizer). The vulnerability can cause the server to hang or crash, enabling a high-privilege attacker with network access to trigger a complete DoS. Public sources in the connected set corroborate the issue and identify the ...

CVE-2021-2172

CVE-2021-2172 affects Oracle MySQL Server (Server: DML) for 8.0.23 and earlier. An attacker with network access via multiple protocols and low privileges can cause a hang or crash (DoS). CVSSv3.1 base score 6.5 (A: High). Remediation exists in newer MySQL 8.0 releases (e.g., Fedora/AlmaLinux advi...

CVE-2022-21278

CVE-2022-21278 affects Oracle MySQL Server (Server: Optimizer). Public sources in connected documents describe a vulnerability due to improper input validation in the Server: Optimizer. Affected versions are 8.0.26 and earlier. Successful exploitation via network from a low-privilege, unauthentic...

CVE-2024-21138

CVE-2024-21138 affects Oracle Java SE Hotspot and Oracle GraalVM for JDK/Enterprise Edition (as listed in the initial document). Affected versions include Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterpris...

CVE-2019-2535

CVE-2019-2535 affects Oracle MySQL Server (subcomponent: Server: Options). From the public records, affected versions are 8.0.13 and prior. The vulnerability is described as difficult to exploit but can allow a high-privileged attacker who can log on to the host where MySQL Server runs to comprom...

CVE-2020-2779

The CVE concerns Oracle MySQL Server: Privileges in MySQL Server 8.0.18 and earlier. An attacker with network access (via multiple protocols) could exploit this to cause a hang or frequent crashes (complete DoS). CVSS v3.0 base score is 4.9 (availability impact). Remediation noted in connected ma...