Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql workbench vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2021-3537
A vulnerability found in libxml2 in versions prior to 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the applic...
Xmlsoft Libxml2Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Debian Debian Linux 9.0Fedoraproject Fedora 33Fedoraproject Fedora 34Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Active Iq Unified Manager -Netapp Manageability Software Development Kit -Netapp Hci H410c Firmware -Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Openjdk 8Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0
5.8
CVSSv2
CVE-2021-3450
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve paramet...
Openssl OpensslFreebsd Freebsd 12.2Netapp Santricity Smi-s Provider Firmware -Netapp Storagegrid Firmware -Windriver Linux -Windriver Linux 18.0Windriver Linux 19.0Windriver Linux 17.0Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Ontap Select Deploy Administration Utility -Netapp Cloud Volumes Ontap Mediator -Fedoraproject Fedora 34Tenable Nessus AgentTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Oracle Jd Edwards World Security A9.4Oracle Weblogic Server 12.2.1.4.0
4.3
CVSSv2
CVE-2021-3449
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_ce...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.2Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Performance Analyzer -Tenable Tenable.scTenable NessusTenable Nessus Network Monitor 5.11.1Tenable Nessus Network Monitor 5.12.0Tenable Nessus Network Monitor 5.12.1Tenable Nessus Network Monitor 5.13.0Tenable Nessus Network Monitor 5.11.0Tenable Log Correlation EngineFedoraproject Fedora 34
2.1
CVSSv2
CVE-2021-20227
A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threa...
Sqlite SqliteOracle Outside In Technology 8.5.5Oracle Communications Network Charging And Control 6.0.1Oracle Zfs Storage Appliance Kit 8.8Oracle Jd Edwards Enterpriseone ToolsOracle Mysql WorkbenchOracle Communications Network Charging And ControlOracle Enterprise Manager For Oracle Database 13.4.0.0
6.4
CVSSv2
CVE-2020-24977
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c. The issue has been fixed in commit 50f06b3e.
Xmlsoft Libxml2 2.9.10Debian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Opensuse Leap 15.1Opensuse Leap 15.2Netapp Snapdrive -Netapp Clustered Data Ontap -Netapp Clustered Data Ontap Antivirus Connector -Netapp Active Iq Unified ManagerNetapp Manageability Software Development Kit -Netapp Inventory Collect Tool -Netapp Hci H410c Firmware -Oracle Http Server 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Mysql WorkbenchOracle Real User Experience Insight 13.4.1.0
9.3
CVSSv2
CVE-2020-8174
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
Nodejs Node.jsOracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Mysql ClusterOracle Blockchain PlatformNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
5.8
CVSSv2
CVE-2020-8172
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Nodejs Node.jsOracle Graalvm 19.3.2Oracle Graalvm 20.1.0Oracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Mysql ClusterOracle Blockchain Platform
5
CVSSv2
CVE-2020-13871
SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Sqlite Sqlite 3.32.2Fedoraproject Fedora 33Debian Debian Linux 9.0Oracle Hyperion Infrastructure Technology 11.1.2.4Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Network Charging And Control 12.0.2Oracle Communications Network Charging And Control 6.0.1Oracle Zfs Storage Appliance Kit 8.8Oracle Communications Messaging Server 8.1Oracle Mysql WorkbenchSiemens Sinec Infrastructure Network ServicesNetapp Cloud Backup -Netapp Ontap Select Deploy Administration Utility -
5
CVSSv2
CVE-2020-11080
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. T...
Nghttp2 Nghttp2Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 33Oracle Enterprise Communications Broker 3.1.0Oracle Graalvm 19.3.2Oracle Graalvm 20.1.0Oracle MysqlOracle Enterprise Communications Broker 3.2.0Oracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Blockchain PlatformNodejs Node.js
5
CVSSv2
CVE-2020-1967
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an invalid or u...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Freebsd Freebsd 12.1Fedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Jd Edwards World Security A9.4Oracle Enterprise Manager Ops Center 12.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle MysqlOracle Enterprise Manager Base Platform 13.4.0.0Oracle Mysql Enterprise MonitorOracle Mysql WorkbenchOracle Http Server 12.2.1.4.0Oracle Enterprise Manager For Storage Management 13.3.0.0Oracle Mysql ConnectorsOracle Enterprise Manager For Storage Management 13.4.0.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Application Server 12.1.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-47626CVE-2024-3400physicalCVE-2024-31426CVE-2024-22423CVE-2024-22438injectlocal usersCVE-2024-3797
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook