Latest oracle mysql connectors Vulnerabilities

● CVE-2023-21971

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privi...

Oracle Communications Cloud Native Core Binding Support Function=22.4.0

Oracle Communications Cloud Native Core Binding Support Function=23.1.0

Oracle Communications Cloud Native Core Policy=22.4.0

Oracle Communications Cloud Native Core Policy=23.1.0

Oracle Mysql Connectors>=8.0.0<=8.0.32

Netapp Active Iq Unified Manager Linux

and 4 more

● CVE-2022-21363

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privil...

redhat/eap7-wildfly<0:7.4.5-3.GA_redhat_00001.1.el8ea

redhat/eap7-wildfly<0:7.4.5-3.GA_redhat_00001.1.el7ea

Oracle Mysql Connectors>=8.0.0<=8.0.27

Quarkus Quarkus<2.7.0

● CVE-2021-44533

Node.js could allow a remote attacker to bypass security restrictions, caused by the incorrect handling of multi-value Relative Distinguished Names. By crafting certificate subjects containing a singl...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 20 more

● CVE-2021-44531

Node.js could allow a remote attacker to bypass security restrictions, caused by the improper handling of URI Subject Alternative Name (SAN) types. An attacker could exploit this vulnerability to bypa...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 18 more

● CVE-2021-44532

Node.js could allow a remote attacker to bypass security restrictions, caused by a string injection vulnerability when name constraints were used within a certificate chain. An attacker could exploit ...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 19 more

● CVE-2022-21824

Node.js could provide weaker than expected security, caused by an error related to the formatting logic of the console.table() function. An attacker could exploit this vulnerability using console.tabl...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 19 more

● CVE-2021-2471

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privil...

redhat/MySQL Connector/J<8.0.27

Oracle Communications Cloud Native Core Console=1.9.0

Oracle Communications Cloud Native Core Network Slice Selection Function=1.8.0

Oracle Communications Cloud Native Core Policy=1.15.0

Oracle Communications Cloud Native Core Security Edge Protection Proxy=1.7.0

Oracle Mysql Connectors>=8.0.0<=8.0.26

and 2 more

● CVE-2021-3712

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker could exploit this ...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 79 more

● CVE-2021-3711

OpenSSL is vulnerable to a buffer overflow, caused by improper bounds checking by the EVP_PKEY_decrypt() function within implementation of the SM2 decryption. By sending specially crafted SM2 content,...

debian/openssl

redhat/openssl<1.1.1

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1l

and 41 more

● CVE-2021-3450

OpenSSL could allow a remote attacker to bypass security restrictions, caused by a missing check in the validation logic of X.509 certificate chains by the X509_V_FLAG_X509_STRICT flag. By using any v...

rust/openssl-src>=111.11.0<111.15.0

IBM Security Verify Access<=10.0.0

OpenSSL OpenSSL>=1.1.1h<1.1.1k

FreeBSD FreeBSD=12.2

FreeBSD FreeBSD=12.2-p1

FreeBSD FreeBSD=12.2-p2

and 52 more

● CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it...

rust/openssl-src<111.15.0

debian/openssl

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1k

and 202 more

● CVE-2020-1967

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signatu...

debian/openssl

OpenSSL OpenSSL>=1.1.1d<=1.1.1f

Debian Debian Linux=9.0

Debian Debian Linux=10.0

FreeBSD FreeBSD=12.1

Fedoraproject Fedora=30

and 33 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

● CVE-2019-2435

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vuln...

Oracle Mysql Connectors>=2.1.0<=2.1.8

Oracle Mysql Connectors>=8.0.0<=8.0.13

Netapp Active Iq Unified Manager Windows>=7.3

Netapp Active Iq Unified Manager Vsphere>=9.5

NetApp OnCommand Workflow Automation

Netapp Snapcenter

Latest oracle mysql connectors Vulnerabilities

Company

Resources

Contact