CVE-2020-14631

CVE-2020-14631 affects Oracle MySQL Server (component: Server: Security: Audit). The MiracleML/MiracleLinux and related Nessus/RHSA entries indicate affected MySQL Server versions 8.0.20 and earlier; exploit involves high-privilege attacker with network access via multiple protocols, potentially ...

CVE-2020-14632

CVE-2020-14632 concerns the MySQL Server component “Server: Options.” The vulnerability affects MySQL 8.0.x (8.0.20 and earlier) and can be exploited remotely with high privileges to cause a hang or crash of MySQL Server (DoS) via multiple network protocols. Connected advisories ( MiracleLinux AX...

CVE-2020-14654

CVE-2020-14654 affects Oracle MySQL Server (component: Server: Optimizer). Affected are MySQL 8.0.20 and earlier. Exploitation requires network access via multiple protocols and can cause a hang or crash (complete DOS) of the MySQL Server. CVSS v3.1 base score 4.9 (Availability). Connected adviso...

CVE-2020-14838

CVE-2020-14838 affects Oracle MySQL Server (Server: Security: Privileges) for MySQL 8.0.21 and earlier. The vulnerability allows a low-privileged, network-authenticated attacker to read a subset of MySQL Server data via multiple protocols due to the Privileges component exposure. CVSS 3.1 Base Sc...

CVE-2022-21245

CVE-2022-21245 affects Oracle MySQL Server (Server: Security: Privileges) with vulnerable versions 5.7.36 and earlier and 8.0.27 and earlier. It allows a network-accessible, low-privilege attacker to perform unauthorized updates/inserts/deletes on data (I:LOW, A:N). The CVE entry provides affecte...

CVE-2019-2977

CVE-2019-2977 affects Oracle Java SE/OpenJDK Hotspot in Java SE 11.0.4 and 13. The connected sources confirm a vulnerability in the Hotspot component with an out-of-bounds issue in the String indexOf path, enabling unauthenticated network access to read a subset of data and cause a partial DOS. P...

CVE-2019-2998

CVE-2019-2998 affects Oracle MySQL Server, component Server: Optimizer. Affected versions are 8.0.17 and prior. An attacker with network access via multiple protocols and high privileges can cause a hang or complete DoS of MySQL Server. The connected advisories (e.g., MiracleLinux/RHSA-RHSA-2020-...

CVE-2020-14578

CVE-2020-14578 affects Oracle Java SE and Java SE Embedded (Libraries component) with Java SE 7u261 and 8u251; Java SE Embedded 8u251. It is exploitable over a network (multiple protocols) by unauthenticated attackers, including via sandboxed Java Web Start apps, applets, or direct API input, lea...

CVE-2020-14614

CVE-2020-14614 affects the MySQL Server (Oracle MySQL) package, specifically the Server: Optimizer. Affected versions are 8.0.20 and earlier. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a complete denial-of-service crash of MySQL ...

CVE-2018-3058

The connected advisory entries substantiate CVE-2018-3058 as a real MySQL/MariaDB vulnerability affecting Oracle MySQL Server (MyISAM subcomponent) with affected 5.5.60 and prior, 5.6.40 and prior, 5.7.22 and prior. The issue allows a low-privilege, network-access attacker via multiple protocols ...

CVE-2020-14866

CVE-2020-14866 affects Oracle MySQL Server (component: Server: Optimizer). Affected versions are 8.0.21 and earlier. An authenticated, network-accessible attacker could trigger a denial of service by causing the optimizer to hang or crash, per connected documents describing the vulnerability’s im...

CVE-2020-2901

CVE-2020-2901 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.19 and earlier. Underlying issue allows a high-privilege attacker with network access to cause the server to hang or crash (complete DoS) via multiple protocols. Public exploitation details are not provided in the ...

CVE-2022-21417

CVE-2022-21417 affects Oracle MySQL Server (InnoDB) with vulnerable versions 5.7.37 and earlier and 8.0.28 and earlier. The issue can cause the MySQL Server to hang or crash (partial DoS) via network access. Connected sources indicate fixes in MySQL 8.0.29 and later (e.g., via ALMA/Ubuntu advisor...

CVE-2019-2964

CVE-2019-2964 affects Oracle Java SE/Java SE Embedded across multiple OpenJDK branches, including Java 7u231, 8u221, 11.0.4 and 13 (and Embedded 8u221) with vulnerable components in Concurrency. Exploitation can occur via APIs by unauthenticated network access, potentially causing a partial denia...

CVE-2020-2892

CVE-2020-2892 affects Oracle MySQL Server, component Server: Optimizer, with affected versions 8.0.19 and earlier. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause the MySQL server to hang or crash (DoS). Related connected documents confirm t...

CVE-2024-21015

CVE-2024-21015 affects Oracle MySQL Server (component: Server: DML). Influence: vulnerable on MySQL Server versions 8.0.34 and prior and 8.3.0 and prior; exploit can cause hang or crash (DoS) and unauthorized update/insert/delete to some data. Affected by network-accessible vectors; base score 5....

CVE-2018-3155

CVE-2018-3155 affects Oracle MySQL MySQL Server (Parser) component. Affects MySQL versions 5.7.23 and earlier and 8.0.12 and earlier. Attack requires network access from low-privilege user and can cause a hang or frequently repeatable crash (DoS) of MySQL Server; CVSSv3 base score 7.7 (HIGH), vec...

CVE-2019-2978

CVE-2019-2978 relates to the OpenJDK/Java SE Networking component. Affected Java releases include Java SE: 7u231, 8u221, 11.0.4, 13 and Java SE Embedded: 8u221. Root cause: incorrect handling of nested jar: URLs in the Jar URL handler, which can be triggered via network interaction. Impact: poten...

CVE-2019-2999

CVE-2019-2999 is a Java SE Javadoc vulnerability affecting multiple OpenJDK/OpenJDK-derived builds (e.g., Java 7u231, 8u221, 11.0.4, 13.0.1) where the Javadoc component could allow unauthenticated network access leading to data exposure/updating under a sandboxed Java Web Start/Applet context. Co...

CVE-2019-3003

CVE-2019-3003 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.16 and earlier. The vulnerability is exploitable remotely over multiple protocols by a high-privilege attacker, potentially causing a hang or crash (DoS) of MySQL Server. CVSS 3.0 Base Score is 4.9 (Availability impact)...

CVE-2020-14809

CVE-2020-14809 affects Oracle MySQL Server (Server: Optimizer). Affected versions are 8.0.21 and earlier. The issue allows a high-privileged attacker who can reach the server over multiple network protocols to cause a hang or frequent crash (DoS) in MySQL Server. The provided documents do not spe...

CVE-2020-14821

CVE-2020-14821 affects Oracle MySQL Server (InnoDB) and targets MySQL 8.0.21 and earlier. An authenticated, high-privilege attacker with network access via multiple protocols can cause a hang or complete DoS of MySQL Server. Public documents identify affected packages and note remediation through...

CVE-2020-2580

CVE-2020-2580 – MySQL Server (Oracle MySQL) – DDL vulnerability . The vulnerability affects MySQL Server component: Server: DDL in 8.0.17 and earlier. A high-privilege attacker who can reach the server over the network via multiple protocols can exploit this to cause a hang or a near-frequent cra...

CVE-2020-14836

CVE-2020-14836 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.21 and earlier. Vulnerability allows a low-privileged, network-access attacker (via multiple protocols) to cause the server to hang or crash (complete DoS) as described in the CVE entry. Some connected advisories ...

CVE-2021-35559

CVE-2021-35559 is a vulnerability in Oracle Java SE/OpenJDK (Swing component) affecting Java SE versions 7u311, 8u301, 11.0.12, and 17, plus Oracle GraalVM Enterprise Edition 20.3.3 and 21.2.0. The issue is described as easily exploitable with network access and can lead to partial denial of serv...

CVE-2022-21341

CVE-2022-21341 is an openly documented vulnerability affecting Oracle Java SE and Oracle GraalVM Enterprise Edition across multiple components (Serialization, JAXP, ImageIO, Hotspot, Libraries, 2D, etc.). Affected versions include Java SE 7u321, 8u311, 11.0.13, 17.0.1 and GraalVM EE 20.3.4/21.3.0...

CVE-2018-2562

CVE-2018-2562 affects the MySQL Server component (Partition subcomponent) of Oracle MySQL. Affected versions include 5.5.58 and earlier, 5.6.38 and earlier, and 5.7.19 and earlier. The vulnerability allows a low-privileged, network-attacker with access via multiple protocols to cause a hang or cr...

CVE-2020-14597

CVE-2020-14597 affects Oracle MySQL Server, component Server: Optimizer, in 8.0.20 and earlier. A high-privilege attacker with network access via multiple protocols can exploit this to cause a hang or frequent crash (DoS) of MySQL Server. https://nvd.nist.gov shows CVSS 3.1 base score 4.9 (AV:N/A...

CVE-2020-14860

Oracle MySQL CVE-2020-14860 affects MySQL Server 8.0.21 and earlier, specifically the Security: Roles component. The vulnerability could allow a high-privileged attacker with network access via multiple protocols to modify data (unauthorized update/insert/delete) in MySQL Server. Root cause and e...

CVE-2020-2659

CVE-2020-2659 affects Oracle Java SE/SE Embedded (Networking) with vulnerable openjdk7/8 builds (7u241, 8u231; Embedded 8u231). The issue is a networking component flaw in DatagramChannelImpl that could let an unauthenticated attacker cause a partial denial of service over the network. Several co...

CVE-2022-21282

CVE-2022-21282 is a combined Java/Oracle Java SE/GraalVM issue reported across multiple advisories. The connected documents identify assorted affected components and versions, notably: Serialization , JAXP , Libraries , Hotspot , and ImageIO within Oracle Java SE and GraalVM Enterprise Edition. A...

CVE-2019-2988

CVE-2019-2988 affects Oracle Java SE/SE Embedded (component 2D). Affected: Java SE 7u231, 8u221, 11.0.4, 13; Java SE Embedded 8u221. Root cause: issues in the 2D graphics subsystem enabling unauthenticated network-based access to trigger a partial denial of service. Impact is explicitly a partial...

CVE-2020-14869

CVE-2020-14869 affects Oracle MySQL Server, specifically the LDAP Authentication path in the Server component. Affects MySQL 5.7.x up to 5.7.31 and earlier, and 8.0.x up to 8.0.21 and earlier. An attacker with network access can exploit via multiple protocols to cause a hang or a frequently repea...

CVE-2022-21336

The CVE-2022-21336 entry corresponds to Oracle MySQL Cluster (Cluster: General). Affected releases include 7.4.34 and earlier, 7.5.24 and earlier, 7.6.20 and earlier, and 8.0.27 and earlier. The vulnerability is exploitable by a high-privilege attacker with access to the hardware’s physical commu...

CVE-2020-14575

The CVE-2020-14575 entry concerns Oracle MySQL Server (Server: DML) affecting 8.0.20 and earlier. The vulnerability is exploitable remotely over multiple protocols by a high-privilege attacker and can cause a hang or frequent crash (DoS) of MySQL Server. The CVSS 3.1 base score is 4.9 (Availabili...

CVE-2022-21340

CVE-2022-21340 concerns Oracle Java SE and GraalVM Enterprise Edition. The vulnerability affects Oracle Java SE components (Libraries) and GraalVM Enterprise Edition libraries listed as affected: Java SE 7u321, 8u311, 11.0.13, 17.0.1; GraalVM Enterprise Edition 20.3.4 and 21.3.0. The description ...

CVE-2019-2989

CVE-2019-2989 affects Oracle Java SE/Java SE Embedded with multiple OpenJDK components (Networking) and is echoed in several advisories. Affected packages include java-1.7.0-openjdk (and variants for 7u231, 7.x, 8u221, 11.0.4, 13; Java SE Embedded 8u221). Other connected entries reference related...

CVE-2022-21328

CVE-2022-21328 relates to Oracle MySQL Cluster. Connected CNVD entry describes an input validation error in Oracle MySQL Cluster, making the cluster vulnerable to an attacker who can execute arbitrary code via that flaw. Affected are MySQL Cluster components for versions 7.4.34 and prior, 7.5.24 ...

CVE-2019-2948

CVE-2019-2948 is a vulnerability in Oracle MySQL Server (component: Server: Optimizer). Affected versions are 5.7.26 and earlier, and 8.0.16 and earlier. It permits a high-privilege attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (DoS). The conne...

CVE-2021-2203

CVE-2021-2203 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.23 and earlier. Description indicates an easily exploitable vulnerability that, with network access via multiple protocols, could allow a high-privilege attacker to cause a hang or frequent crashes of My...

CVE-2021-45960

CVE-2021-45960 (Expat/libexpat) is corroborated by connected advisories describing a left shift (29 or more) in storeAtts() of xmlparse.c that can trigger realloc misbehavior, potentially leading to allocation errors or memory mismanagement in Expat before 2.4.3. The CVE is repeatedly listed acro...

CVE-2022-21304

CVE-2022-21304 affects Oracle MySQL Server (Server: Parser). Affected versions: MySQL 5.7.36 and earlier; 8.0.27 and earlier. The vulnerability can be exploited by a privileged attacker with network access via multiple protocols to cause the server to hang or crash (partial/complete DoS) as descr...

CVE-2022-21331

The CVE-2022-21331 issue affects Oracle MySQL Cluster (Cluster: General) with affected versions 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior, and 8.0.27 and prior. The vulnerability could allow an attacker with high privileges who has access to the hardware’s physical network segment to r...

CVE-2019-2969

CVE-2019-2969 is a vulnerability in Oracle MySQL Server, specifically the client programs component. The connected sources indicate affected MySQL Server client-side code with versions 5.6.44 and earlier, 5.7.26 and earlier, and 8.0.16 and earlier. The issue is exploitable by an unauthenticated a...

CVE-2022-21249

CVE-2022-21249 affects Oracle MySQL Server (Server: DDL) with affected versions up through 8.0.27 and earlier. The issue can be triggered by an attacker with network access via multiple protocols, potentially enabling a partial DoS on MySQL Server. The connected documents confirm affected package...

CVE-2021-3522

CVE-2021-3522 affects GStreamer before 1.18.4, where an out-of-bounds read may occur when handling certain ID3v2 tags. The issue is evidenced in multiple connected documents (e.g., Astra Linux advisory and Amazon Linux advisories) referencing an out-of-bounds read impacting availability. The conc...

CVE-2021-35565

CVE-2021-35565 affects Java SE (JSSE) and OpenJDK components across Java releases (7u311, 8u301, 11.0.12) and Oracle GraalVM Enterprise Edition (20.3.3, 21.2.0). The issue arises in TLS handling via the HttpsServer, enabling an unauthenticated network attacker to cause a partial denial of service...

CVE-2020-2593

CVE-2020-2593 affects multiple OpenJDK/JRE components across the Java SE/Embedded stack (Networking, Security, Serialization, 2D, JAXP, Libraries, etc.). Connected advisories enumerate affected versions including Java SE 7u231/7u241, 8u221/8u231, 11.0.4/11.0.5, and 13.0.1, with OpenJDK builds for...

CVE-2023-21940

CVE-2023-21940 is a MySQL Server vulnerability affecting the 8.0.32 and earlier series in the Server: Components Services area. The issue allows a high-privilege attacker with network access to cause a hang or a crash (DoS) via multiple protocols. Supported versions affected are 8.0.32 and prior....

CVE-2024-21102

CVE-2024-21102 affects Oracle MySQL Server (component: Server: Thread Pooling). Affected versions are 8.0.36 and earlier, and 8.3.0 and earlier. The description states an easily exploitable vulnerability that, with network access via multiple protocols and a high-privilege attacker, can lead to a...