Latest oracle mysql workbench Vulnerabilities

● CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. O...

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el8

redhat/jbcs-httpd24-openssl<1:1.1.1k-13.el7

redhat/openssl<1:1.1.1k-7.el8_6

redhat/openssl<1:3.0.1-41.el9_0

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el7

redhat/jws5-tomcat-native<0:1.2.31-11.redhat_11.el8

and 108 more

● CVE-2022-23308

A flaw was found in libxml2. A call to the xmlGetID function can return a pointer already freed when parsing an XML document with the XML_PARSE_DTDVALID option and without the XML_PARSE_NOENT option, ...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 75 more

● CVE-2021-44532

Node.js could allow a remote attacker to bypass security restrictions, caused by a string injection vulnerability when name constraints were used within a certificate chain. An attacker could exploit ...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 19 more

● CVE-2022-21824

Node.js could provide weaker than expected security, caused by an error related to the formatting logic of the console.table() function. An attacker could exploit this vulnerability using console.tabl...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 19 more

● CVE-2021-44533

Node.js could allow a remote attacker to bypass security restrictions, caused by the incorrect handling of multi-value Relative Distinguished Names. By crafting certificate subjects containing a singl...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 20 more

● CVE-2021-44531

Node.js could allow a remote attacker to bypass security restrictions, caused by the improper handling of URI Subject Alternative Name (SAN) types. An attacker could exploit this vulnerability to bypa...

redhat/rh-nodejs12-nodejs<0:12.22.12-2.el7

redhat/rh-nodejs14-nodejs<0:14.20.1-2.el7

debian/nodejs<=10.24.0~dfsg-1~deb10u1<=10.24.0~dfsg-1~deb10u3

IBM Cognos Analytics 11.2.x<=IBM Cognos Analytics 11.2.x

IBM Cognos Analytics 11.1.x<=IBM Cognos Analytics 11.1.x

redhat/node<12.22.9

and 18 more

● CVE-2021-3712

OpenSSL could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read when processing ASN.1 strings. By sending specially crafted data, an attacker could exploit this ...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 79 more

● CVE-2021-3634

A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other sessi...

Libssh Libssh>=0.9.1<0.9.6

Redhat Virtualization=4.0

Redhat Enterprise Linux=8.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

Fedoraproject Fedora=33

and 6 more

● CVE-2021-3537

A NULL pointer dereference flaw was found in libxml2, where it did not propagate errors while parsing XML mixed content. This flaw causes the application to crash if an untrusted XML document is parse...

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

redhat/jbcs-httpd24-openssl-chil<0:1.0.0-11.el8

and 36 more

● CVE-2021-3517

A heap-based buffer overflow was found in libxml2 when processing truncated UTF-8 input. Reference: <a href="https://gitlab.gnome.org/GNOME/libxml2/-/issues/235">https://gitlab.gnome.org/GNOME/libxml...

rubygems/nokogiri<1.11.4

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

and 46 more

● CVE-2021-3518

libxml2. This issue was addressed with improved checks.

rubygems/nokogiri<1.11.4

redhat/jbcs-httpd24-apr-util<0:1.6.1-91.el8

redhat/jbcs-httpd24-curl<0:7.78.0-3.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-80.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-41.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-11.el8

and 37 more

● CVE-2021-3449

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it...

rust/openssl-src<111.15.0

debian/openssl

IBM Cognos Analytics<=12.0.0-12.0.1

IBM Cognos Analytics<=11.2.0-11.2.4 FP2

IBM Cognos Analytics<=11.1.1-11.1.7 FP7

OpenSSL OpenSSL>=1.1.1<1.1.1k

and 202 more

● CVE-2021-3450

OpenSSL could allow a remote attacker to bypass security restrictions, caused by a missing check in the validation logic of X.509 certificate chains by the X509_V_FLAG_X509_STRICT flag. By using any v...

rust/openssl-src>=111.11.0<111.15.0

IBM Security Verify Access<=10.0.0

OpenSSL OpenSSL>=1.1.1h<1.1.1k

FreeBSD FreeBSD=12.2

FreeBSD FreeBSD=12.2-p1

FreeBSD FreeBSD=12.2-p2

and 52 more

● CVE-2021-20227

SQLite 3.34.1 fixes a potential use-after-free bug when processing a subquery with both a correlated WHERE clause and a "HAVING 0" clause and where the parent query is an aggregate. References: <a h...

redhat/sqlite<3.34.1

IBM DRM<=2.0.6

SQLite SQLite>=3.33.0<3.34.1

Oracle Communications Network Charging And Control>=12.0.1.0<=12.0.4.0.0

Oracle Communications Network Charging And Control=6.0.1

Oracle Enterprise Manager For Oracle Database=13.4.0.0

and 4 more

● CVE-2020-24977

GNOME libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the xmlEncodeEntitiesInternal function in libxml2/entities.c. By persuading a victim to open a specially-crafted...

IBM Security Verify Access<=10.0.0

Xmlsoft Libxml2=2.9.10

Debian Debian Linux=9.0

Fedoraproject Fedora=31

Fedoraproject Fedora=32

Fedoraproject Fedora=33

and 22 more

● CVE-2020-13871

SQLite is vulnerable to a denial of service, caused by a use-after-free in resetAccumulator in select.c. By sending a specially crafted request, a remote attacker could exploit this vulnerability to c...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.32.2

Fedoraproject Fedora=33

Debian Debian Linux=9.0

Oracle Communications Messaging Server=8.1

Oracle Communications Network Charging And Control=6.0.1

and 9 more

● CVE-2020-1967

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signatu...

debian/openssl

OpenSSL OpenSSL>=1.1.1d<=1.1.1f

Debian Debian Linux=9.0

Debian Debian Linux=10.0

FreeBSD FreeBSD=12.1

Fedoraproject Fedora=30

and 33 more

● CVE-2020-11656

In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.

SQLite SQLite<=3.31.1

NetApp ONTAP Select Deploy administration utility

Oracle Communications Network Charging And Control>=12.0.0<=12.0.3

Oracle Communications Network Charging And Control=6.0.1

Oracle Communications Network Charging And Control=12.0.2

Oracle Enterprise Manager Ops Center=12.4.0.0

and 9 more

● CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

SQLite SQLite<=3.31.1

NetApp ONTAP Select Deploy administration utility

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

and 26 more

● CVE-2020-1730

A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fu...

Libssh Libssh>=0.8.0<0.8.9

Libssh Libssh>=0.9.0<0.9.4

Netapp Cloud Backup

Canonical Ubuntu Linux=18.04

Canonical Ubuntu Linux=19.10

Fedoraproject Fedora=31

and 7 more

● CVE-2020-9327

In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations.

SQLite SQLite=3.31.1

Netapp Cloud Backup

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

Canonical Ubuntu Linux=19.10

Siemens Sinec Infrastructure Network Services<1.0.1.1

and 15 more

● CVE-2019-20388

GNOME libxml2 could allow a remote attacker to obtain sensitive information, caused by a xmlSchemaValidateStream memory leak in xmlSchemaPreRun in xmlschemas.c. By persuading a victim to open a specia...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 59 more

● CVE-2020-7595

GNOME libxml2 is vulnerable to a denial of service, caused by an error in xmlStringLenDecodeEntities in parser.c. An attacker could exploit this vulnerability to cause the application to enter into an...

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 72 more

● CVE-2019-20218

An unspecified error in selectExpander in select.c in SQLite has an unknown impact and attack vector.

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Debian Debian Linux=9.0

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

Canonical Ubuntu Linux=19.10

and 7 more

● CVE-2019-19925

SQLite is vulnerable to a denial of service, caused by the mishandling of a NULL pathname in the zipfileUpdate function in ext/misc/zipfile.c. By sending a specially-crafted request, a remote attacker...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Siemens Sinec Infrastructure Network Services<1.0.1.1

Oracle Mysql Workbench<=8.0.19

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 16 more

● CVE-2019-19923

flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN in which the right-hand side is a view. This can cause a NULL pointer dereference (or inco...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Siemens Sinec Infrastructure Network Services<1.0.1.1

Oracle Mysql Workbench<=8.0.19

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 16 more

● CVE-2019-19924

SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Siemens Sinec Infrastructure Network Services<1.0.1.1

Apache Bookkeeper=4.12.1

Oracle Mysql Workbench<=8.0.19

Netapp Cloud Backup

and 4 more

● CVE-2019-19926

multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Siemens Sinec Infrastructure Network Services<1.0.1.1

Oracle Mysql Workbench<=8.0.19

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 17 more

● CVE-2019-19880

exprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer dereference because constant integer values in ORDER BY clauses of window definitions are mishandled.

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Netapp Cloud Backup

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Suse Package Hub

and 14 more

● CVE-2019-14889

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided ...

Libssh Libssh<0.8.8

Libssh Libssh>=0.9.0<0.9.3

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

Canonical Ubuntu Linux=19.04

Canonical Ubuntu Linux=19.10

and 5 more

● CVE-2019-19646

An unspecified error related to the mishandling of NOT NULL in an integrity_check PRAGMA command in pragma.c in SQLite has an unknown impact and attack vector.

IBM Data Risk Manager<=2.0.6

SQLite SQLite<=3.30.1

Siemens Sinec Infrastructure Network Services<1.0.1.1

Tenable Tenable.sc<5.19.0

Oracle Mysql Workbench<=8.0.19

Netapp Cloud Backup

and 1 more

● CVE-2019-19645

alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.

IBM Data Risk Manager<=2.0.6

SQLite SQLite<=3.30.1

Netapp Cloud Backup

NetApp ONTAP Select Deploy administration utility

Oracle Mysql Workbench<=8.0.19

Tenable Tenable.sc<5.19.0

and 4 more

● CVE-2019-19603

An error during handling of CREATE TABLE and CREATE VIEW statements in SQLite has an unknown impact via a specially crafted table name.

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Oracle Mysql Workbench<=8.0.19

Siemens Sinec Infrastructure Network Services<1.0.1.1

Siemens Sinec Infrastructure Network Services=1.0.1.1

Apache Guacamole=1.3.0

and 5 more

● CVE-2019-19317

SQLite is vulnerable to a denial of service, caused by an error in lookupName in resolve.c. By providing specially crafted input, a remote attacker could exploit this vulnerability to cause the applic...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Netapp Cloud Backup

NetApp ONTAP Select Deploy administration utility

Oracle Mysql Workbench<=8.0.19

Siemens Sinec Infrastructure Network Services<1.0.1.1

● CVE-2019-19242

An unspecified error with the mishandling of pExpr->y.pTab in the sqlite3ExprCodeTarget function in expr.c in SQLite has an unknown impact and attack vector.

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Canonical Ubuntu Linux=12.04

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

Canonical Ubuntu Linux=19.04

and 8 more

● CVE-2019-19244

SQLite is vulnerable to a denial of service, caused by an error in sqlite3Select in select.c. By providing specially crafted input, a remote attacker could exploit this vulnerability to cause the appl...

IBM Data Risk Manager<=2.0.6

SQLite SQLite=3.30.1

Canonical Ubuntu Linux=19.04

Canonical Ubuntu Linux=19.10

Oracle Mysql Workbench<=8.0.19

Siemens Sinec Infrastructure Network Services<1.0.1.1

and 4 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

● CVE-2018-14550

An issue has been found in third-party PNM decoding associated with libpng 1.6.35. It is a stack-based buffer overflow in the function get_token in pnm2png.c in pnm2png.

Libpng Libpng=1.6.35

Oracle Hyperion Infrastructure Technology=11.1.2.6.0

Oracle Mysql Workbench<=8.0.23

Netapp Active Iq Unified Manager Vmware Vsphere

NetApp OnCommand API Services

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2018-10933

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthor...

debian/libssh<=0.6.3-4+deb8u2<=0.7.3-2<=0.7.3-1

ubuntu/libssh<0.6.3-4.3ubuntu0.1

ubuntu/libssh<0.8.0~20170825.94

ubuntu/libssh<0.8.1-1ubuntu0.1

ubuntu/libssh<0.6.1-0ubuntu3.4

debian/libssh

and 15 more

● CVE-2018-2598

Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulner...

Oracle Mysql Workbench<=6.3.10

Latest oracle mysql workbench Vulnerabilities

Company

Resources

Contact