CVE-2019-2685

CVE-2019-2685 affects Oracle MySQL Server (Server: Optimizer). Affected versions are 8.0.15 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) of MySQL Server. Connected documents confirm multiple advisories refe...

CVE-2019-2694

CVE-2019-2694 is a vulnerability in Oracle MySQL's MySQL Server product, specifically the Server: Optimizer subcomponent. Affected versions are 8.0.15 and prior. An attacker with network access and low privileges can trigger a hang or a frequent, repeatable crash (DOS) via multiple protocols. The...

CVE-2019-2795

CVE-2019-2795 affects Oracle MySQL Server, subcomponent Server: Charsets. Affected versions are 8.0.16 and earlier. Exploitation by a low-privilege, networked attacker via multiple protocols can cause a hang or crash (complete DoS). CVSS v3 base score 6.5 (vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U...

CVE-2021-20270

CVE-2021-20270 describes an infinite loop in Pygments’ SMLLexer, affecting Pygments 1.5–2.7.3, which can cause DoS during syntax highlighting of StandardML sources (e.g., input containing only the keyword “exception”). Connected advisories confirm affected distributions (e.g., Debian, AlmaLinux, ...

CVE-2019-2644

CVE-2019-2644 affects Oracle MySQL Server (Server: DDL). Affected: 8.0.15 and earlier. It permits a network-accessing, highly privileged attacker to cause a hang or crash (DoS) in MySQL Server. Remediation per RH/Oracle advisories is upgrading to 8.0.17 or newer.

CVE-2019-2584

CVE-2019-2584 is a MySQL Server (Oracle MySQL) vulnerability in the Server: Security: Privileges area. Affected versions are 8.0.15 and earlier. An attacker with high privileges who can reach the server over network via multiple protocols can cause a hang or a crash (DoS) of MySQL Server. The con...

CVE-2019-2587

CVE-2019-2587 is a MySQL Server vulnerability in the Server: Partition subcomponent. Affected: MySQL 8.0.15 and earlier. Exploitation is network-based and can cause a hang or a complete DoS of MySQL Server (CVSS 3.0 base 4.9; Availability impact). Connected advisories indicate similar MySQL famil...

CVE-2019-2596

CVE-2019-2596 is a MySQL Server (Optimizer) vulnerability affecting 8.0.15 and prior. It is network-exploitable and can cause a hang or complete DoS of MySQL Server when successfully attacked by a high-privilege account with network access. Public advisories (e.g., Red Hat RHSA-2019:2484, CentOS/...

CVE-2019-2687

CVE-2019-2687 is a vulnerability in the MySQL Server component (subcomponent: Optimizer) of Oracle MySQL, affecting 8.0.15 and earlier. It allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS). The connected advisories show this CVE alongside m...

CVE-2019-2812

CVE-2019-2812 is a vulnerability in the Oracle MySQL Server component (Server: Optimizer). Affected are MySQL 8.0.16 and earlier. The issue allows a low-privilege, networked attacker to cause a hang or crash of MySQL Server (DoS) via multiple protocols. The available sources (NVD entry and multip...

CVE-2019-2830

CVE-2019-2830 affects the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected versions are 8.0.16 and earlier. The vulnerability can be exploited by a high-privilege attacker who can network-access the server via multiple protocols, potentially causing a hang or a c...

CVE-2019-2834

CVE-2019-2834 affects Oracle MySQL’s MySQL Server component, specifically the Server: Optimizer. Affected versions are 8.0.16 and earlier. The vulnerability can be exploited by a low-privileged attacker over network via multiple protocols to cause a hang or a crash (denial of service). The connec...

CVE-2019-2631

Mode C: CVE-2019-2631 is a vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Information Schema). Affected versions are 8.0.15 and earlier. It allows a high-privileged attacker who can access the server over network protocols to cause the MySQL Server to hang or crash (co...

CVE-2019-2636

CVE-2019-2636 affects the MySQL Server component (Server: Group Replication Plugin). The provided sources indicate affected versions are 8.0.15 and prior, with exploitation requiring network access via the MySQL Protocol. Successful exploitation can lead to a hang or a frequently repeated crash, ...

CVE-2019-2691

CVE-2019-2691 affects Oracle MySQL Server (Server: Security: Roles) and is listed as affected in multiple advisories. Affected versions are 8.0.15 and prior. The vulnerability enables a high-privileged attacker who can access the server over network protocols to cause a hang or a complete denial ...

CVE-2019-2780

CVE-2019-2780 affects Oracle MySQL Server (subcomponent: Server: Components / Services). Affected versions are 8.0.16 and earlier. The vulnerability can be exploited by a highly privileged attacker who has network access through multiple protocols to cause a hang or a complete denial of service (...

CVE-2019-2803

CVE-2019-2803 affects Oracle MySQL Server (Server: Optimizer). The MySQL 8.0 line, up to 8.0.16 (and earlier) is listed as affected. The vulnerability allows a high-privilege attacker who can reach the server over multiple network protocols to cause a hang or complete denial of service of the MyS...

CVE-2019-2580

CVE-2019-2580 affects the MySQL Server component (subcomponent: InnoDB) of Oracle MySQL. Affected versions include 8.0.15 and prior. The vulnerability is described as easily exploitable with network access via multiple protocols and can lead to a hang or frequently repeatable crash of MySQL Serve...

CVE-2019-2810

CVE-2019-2810 is a vulnerability in Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.16 and earlier. Outcome: high-privilege attacker with network access via multiple protocols can cause a hang or crash (denial of service). Severity: CVSS 3.0 base 4.9 (A). No explicit exploit details ...

CVE-2019-2589

CVE-2019-2589 affects Oracle MySQL Server (subcomponent: Server: Security: Privileges). Affected: MySQL 8.0.x up to 8.0.15 (and prior). Description in connected sources confirms an easily exploitable post-authentication path where a high-privileged attacker with network access via multiple protoc...

CVE-2019-2688

CVE-2019-2688 affects Oracle MySQL Server (Server: Optimizer). Affected are MySQL 8.0.15 and earlier. It allows a high-privilege attacker with network access to cause a hang or crash (DOS). Upgrades to MySQL 8.0.17+ (e.g., RH/RHEL/CentOS advisories) are the documented mitigation; apply vendor-app...

CVE-2019-2815

CVE-2019-2815 affects Oracle MySQL Server (subcomponent: Optimizer). The vulnerability exists in 8.0.16 and earlier and can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or complete DOS. The provided connected documents corroborate the existe...

CVE-2019-2798

CVE-2019-2798 is an Oracle MySQL Server vulnerability affecting the InnoDB subcomponent. The public details in the Initial document and connected advisories show that affected versions are 8.0.15 and earlier, with exploitation possible by a high-privilege attacker with network access via multiple...

CVE-2019-2801

CVE-2019-2801 is a vulnerability in the MySQL Server component (subcomponent: Server: FTS). Affected versions are 8.0.16 and earlier. An attacker with network access via multiple protocols and with high privileges can trigger a hang or a complete DOS on MySQL Server. The issue is exposed via the ...

CVE-2019-2802

CVE-2019-2802 affects Oracle MySQL Server (Server: Optimizer). The vulnerability exists in the MySQL Server subcomponent and is exploitable over network with high privileges, potentially causing a hang or complete denial of service (A: High). Affected versions are 8.0.16 and earlier; exact exploi...

CVE-2019-15604

CVE-2019-15604 concerns Node.js TLS handling with improper certificate validation, leading to a potential DoS through a crafted X.509 certificate. The issue affects Node.js 10, 12, and 13 and is mitigated by upgrading to versions where the fix is applied (e.g., Node.js 10.19.0+, 12.15.0+ as cited...

CVE-2019-10192

CVE-2019-10192 is a heap-buffer overflow in Redis HyperLogLog used by SETRANGE. Affected: Redis HyperLogLog in 3.x before 3.2.13, 4.x before 4.0.14, and 5.x before 5.0.4. By corrupting a hyperloglog, an attacker can cause Redis to write up to 3 bytes beyond the end of a heap-allocated buffer. Imp...

CVE-2021-32672

Redis contains CVE-2021-32672, a vulnerability in the Redis Lua Debugger where the protocol parser can read data beyond the actual buffer when handling malformed requests. This affects Redis builds that include Lua debugging support (3.2+). The issue is mitigated by upgrading to patched releases:...

CVE-2022-0711

HAProxy is affected by CVE-2022-0711 due to a flaw in processing HTTP responses with the Set-Cookie2 header, which can cause an infinite loop and a denial-of-service condition (availability impact). The vulnerability is observable across multiple advisories and vendor pages, including Debian secu...

CVE-2016-0742

The CVE-2016-0742 issue affects nginx resolver prior to 1.8.1 and 1.9.x prior to 1.9.10. A crafted UDP DNS response can trigger an invalid pointer dereference, crashing a worker process and causing a denial of service. Affected component: resolver in nginx; root cause: dereference of invalid poin...

CVE-2021-20229

CVE-2021-20229 – Summary (based on provided sources): PostgreSQL versions before 13.2 are vulnerable to a confidentiality flaw where a user with SELECT privilege on a single column can craft a query that returns all columns in a table. The issue is discussed across multiple advisories (IBM Securi...

CVE-2019-5419

CVE-2019-5419 describes a denial-of-service in Ruby on Rails Action View triggered by specially crafted Accept headers, affecting Rails <5.2.2.1, <5.1.6.2, <5.0.7.2,

CVE-2022-4900

CVE-2022-4900 is a PHP heap-buffer overflow caused by setting PHP_CLI_SERVER_WORKERS to a large value. From connected sources, IBM Storage Sentinel Anomaly Scan Engine 1.1 and Debian/IBM advisories confirm the issue affects PHP and can enable a local denial-of-service condition. Remediation in th...

CVE-2019-17570

The CVE-2019-17570 issue affects Apache XML-RPC (ws-xmlrpc) Java library. Root cause: untrusted deserialization in XmlRpcResponseParser:addResult that could allow a malicious XML-RPC server to cause arbitrary code execution on a vulnerable client. Impact: high (remote code execution) with network...

CVE-2019-10196

The CVE-2019-10196 entry affects the http-proxy-agent package before version 2.1.0. The root cause is that the auth option is passed to the Buffer constructor without proper sanitization, enabling a Denial of Service that can consume all CPU resources, and potential data exposure due to an uninit...

CVE-2015-7545

The CVE-2015-7545 issue affects Git’s remote helpers (notably git-remote-ext) and other remote helpers. Git prior to 2.3.10, 2.4.x prior to 2.4.10, 2.5.x prior to 2.5.4, and 2.6.x prior to 2.6.1 do not properly restrict allowed protocols, which could let remote attackers execute arbitrary code vi...

CVE-2013-5123

The CVE-2013-5123 issue affects Python-pip prior to 1.5, where the mirroring support (-M/--use-mirrors) performs insecure DNS queries and lacks proper authenticity checks, enabling MITM-like download tampering. Connected advisories confirm this vulnerability and describe the fix as removing the m...