mysql connectors vulnerabilities and exploits

(subscribe to this query)

5.5

CVSSv2

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and previous versions. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

Oracle Mysql Connectors

6

CVSSv2

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

Oracle Mysql Connectors Quarkus Quarkus

5.8

CVSSv2

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to comprom...

Oracle Mysql Connectors Netapp Active Iq Unified Manager Netapp Oncommand Workflow Automation -Netapp Snapcenter -

5.8

CVSSv2

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, whic...

Nodejs Node.js Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Mysql Enterprise Monitor Oracle Mysql Connectors Oracle Mysql Workbench Oracle Mysql Server Oracle Graalvm 20.3.5 Oracle Graalvm 21.3.1 Oracle Graalvm 22.0.0.2 Oracle Mysql Cluster

5

CVSSv2

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerabilit...

Nodejs Node.js Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Mysql Enterprise Monitor Oracle Mysql Connectors Oracle Mysql Server Oracle Graalvm 20.3.5 Oracle Graalvm 21.3.1 Oracle Graalvm 22.0.0.2 Oracle Mysql Workbench Oracle Mysql Cluster Debian Debian Linux 11.0

5

CVSSv2

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a multi-value Relativ...

Nodejs Node.js Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Mysql Enterprise Monitor Oracle Mysql Connectors Oracle Mysql Workbench Oracle Mysql Server Oracle Graalvm 20.3.5 Oracle Graalvm 21.3.1 Oracle Graalvm 22.0.0.2 Oracle Mysql Cluster Oracle Mysql Cluster 8.0.29 Debian Debian Linux 11.0

6.4

CVSSv2

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could b...

Nodejs Node.js Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Mysql Enterprise Monitor Oracle Mysql Server Oracle Mysql Connectors Oracle Mysql Workbench Oracle Mysql Cluster Debian Debian Linux 10.0 Debian Debian Linux 11.0 Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -

2 Github repositories

7.9

CVSSv2

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Mysql Connectors Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0 Quarkus Quarkus

3 Github repositories

NA

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

Oracle Mysql Connectors Oracle Communications Cloud Native Core Policy 22.4.0 Oracle Communications Cloud Native Core Policy 23.1.0 Oracle Communications Cloud Native Core Binding Support Function 22.4.0 Oracle Communications Cloud Native Core Binding Support Function 23.1.0 Netapp Snapcenter -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -

1 Github repository

3.5

CVSSv2

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors execu...

Oracle Mysql Connector\\/j

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook