The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of MySQL Community

Apache Tomcat: code execution via Enabled AJP Connector
An attacker can use a vulnerability via Enabled AJP Connector of Apache Tomcat, in order to run code...
bulletinapr2020, CERTFR-2020-AVI-112, cpujul2020, CVE-2020-1938, DLA-2133-1, DLA-2209-1, DSA-4673-1, DSA-4680-1, FEDORA-2020-04ac174fa9, FEDORA-2020-c870aa8378, HPESBUX04015, openSUSE-SU-2020:0345-1, openSUSE-SU-2020:0597-1, RHSA-2020:0855-01, RHSA-2020:0912-01, RHSA-2020:1478-01, RHSA-2020:1479-01, RHSA-2020:2779-01, RHSA-2020:2780-01, RHSA-2020:2781-01, RHSA-2020:2783-01, RHSA-2020:2840-01, SUSE-SU-2020:0598-1, SUSE-SU-2020:0631-1, SUSE-SU-2020:0632-1, SUSE-SU-2020:0725-1, SUSE-SU-2020:1111-1, SUSE-SU-2020:1126-1, SUSE-SU-2020:1272-1, SUSE-SU-2020:14342-1, VIGILANCE-VUL-31664
OpenSSL: Man-in-the-Middle via X509_V_FLAG_X509_STRICT
An attacker can act as a Man-in-the-Middle via X509_V_FLAG_X509_STRICT on OpenSSL, in order to read or write data in the session...
6443733, CERTFR-2021-AVI-221, CERTFR-2021-AVI-235, cisco-sa-openssl-2021-GHY28dJd, cpuapr2021, CVE-2021-3450, FEDORA-2021-c11da301be, FEDORA-2021-d049f32a82, FEDORA-2021-d934acdb42, FEDORA-2021-f347d1c866, FreeBSD-SA-21:07.openssl, RHSA-2021:1024-01, SB10356, SSB-439005, TNS-2021-05, VIGILANCE-VUL-34943
OpenSSL: NULL pointer dereference via X509_issuer_and_serial_hash
An attacker can force a NULL pointer to be dereferenced via X509_issuer_and_serial_hash() of OpenSSL, in order to trigger a denial of service...
6429603, 6443405, 6445489, 6463981, CERTFR-2021-AVI-124, CERTFR-2021-AVI-187, cpuapr2021, CVE-2021-23841, DLA-2563-1, DLA-2565-1, DSA-4855-1, HT212528, HT212529, HT212530, HT212531, openSUSE-SU-2021:0427-1, openSUSE-SU-2021:0430-1, SSB-439005, SUSE-SU-2021:0725-1, SUSE-SU-2021:0752-1, SUSE-SU-2021:0753-1, SUSE-SU-2021:0754-1, SUSE-SU-2021:0755-1, SUSE-SU-2021:0769-1, SUSE-SU-2021:0793-1, SUSE-SU-2021:0939-1, SUSE-SU-2021:14667-1, SUSE-SU-2021:14670-1, SYMSA17570, USN-4738-1, USN-4745-1, VIGILANCE-VUL-34598
OpenSSL: buffer overflow via EVP_XUpdate
An attacker can trigger a buffer overflow via EVP_XUpdate of OpenSSL, in order to trigger a denial of service, and possibly to run code...
6429603, 6443405, 6445489, 6451671, 6463981, CERTFR-2021-AVI-124, CERTFR-2021-AVI-187, cpuapr2021, CVE-2021-23840, DLA-2563-1, DLA-2565-1, DSA-4855-1, openSUSE-SU-2021:0357-1, openSUSE-SU-2021:0372-1, openSUSE-SU-2021:0427-1, openSUSE-SU-2021:0430-1, SSB-439005, STORM-2021-002, SUSE-SU-2021:0649-1, SUSE-SU-2021:0651-1, SUSE-SU-2021:0673-1, SUSE-SU-2021:0674-1, SUSE-SU-2021:0725-1, SUSE-SU-2021:0752-1, SUSE-SU-2021:0753-1, SUSE-SU-2021:0754-1, SUSE-SU-2021:0755-1, SUSE-SU-2021:0769-1, SUSE-SU-2021:0793-1, SUSE-SU-2021:0939-1, SUSE-SU-2021:14667-1, SUSE-SU-2021:14670-1, SYMSA17570, USN-4738-1, VIGILANCE-VUL-34597
Apache Tomcat: information disclosure via HTTP/2 Request Header Mix-up
An attacker can bypass access restrictions to data via HTTP/2 Request Header Mix-up of Apache Tomcat, in order to obtain sensitive information...
CERTFR-2020-AVI-792, cpuapr2021, CVE-2020-17527, DLA-2495-1, DSA-4835-1, openSUSE-SU-2021:0043-1, openSUSE-SU-2021:0081-1, SUSE-SU-2021:0031-1, SUSE-SU-2021:0040-1, SUSE-SU-2021:0041-1, SUSE-SU-2021:0042-1, VIGILANCE-VUL-34034
Node Core: denial of service via Numerous DNS Responses
An attacker can trigger a fatal error via Numerous DNS Responses of Node Core, in order to trigger a denial of service...
6410882, 6420355, 6426699, CERTFR-2021-AVI-101, CERTFR-2021-AVI-146, cpuapr2021, CVE-2020-8277, FEDORA-2020-307e873389, FEDORA-2020-7473744de1, K07944249, openSUSE-SU-2020:2045-1, openSUSE-SU-2020:2092-1, openSUSE-SU-2021:0064-1, openSUSE-SU-2021:0066-1, RHSA-2020:5305-01, RHSA-2020:5499-01, RHSA-2021:0421-01, RHSA-2021:0551-01, SUSE-SU-2020:3478-1, SUSE-SU-2020:3549-1, SUSE-SU-2021:0061-1, SUSE-SU-2021:0062-1, USN-4638-1, VIGILANCE-VUL-33903
MIT krb5: denial of service via asn1_encode.c
An attacker can trigger a fatal error via asn1_encode.c of MIT krb5, in order to trigger a denial of service...
cpuapr2021, CVE-2020-28196, DLA-2437-1, DSA-4795-1, FEDORA-2020-0df38b2843, FEDORA-2020-27b577ab23, FEDORA-2020-32193cbbe6, openSUSE-SU-2020:2037-1, openSUSE-SU-2020:2062-1, RHSA-2021:1593-01, SUSE-SU-2020:3375-1, SUSE-SU-2020:3377-1, SUSE-SU-2020:3379-1, USN-4635-1, VIGILANCE-VUL-33846
Oracle MySQL: vulnerabilities of October 2020
Several vulnerabilities were announced in Oracle products...
6459931, CERTFR-2020-AVI-664, cpuoct2020, CVE-2020-14672, CVE-2020-14760, CVE-2020-14765, CVE-2020-14769, CVE-2020-14771, CVE-2020-14773, CVE-2020-14775, CVE-2020-14776, CVE-2020-14777, CVE-2020-14785, CVE-2020-14786, CVE-2020-14789, CVE-2020-14790, CVE-2020-14791, CVE-2020-14793, CVE-2020-14794, CVE-2020-14799, CVE-2020-14800, CVE-2020-14804, CVE-2020-14809, CVE-2020-14812, CVE-2020-14814, CVE-2020-14821, CVE-2020-14827, CVE-2020-14828, CVE-2020-14829, CVE-2020-14830, CVE-2020-14836, CVE-2020-14837, CVE-2020-14838, CVE-2020-14839, CVE-2020-14844, CVE-2020-14845, CVE-2020-14846, CVE-2020-14848, CVE-2020-14852, CVE-2020-14853, CVE-2020-14860, CVE-2020-14861, CVE-2020-14866, CVE-2020-14867, CVE-2020-14868, CVE-2020-14869, CVE-2020-14870, CVE-2020-14873, CVE-2020-14878, CVE-2020-14888, CVE-2020-14891, CVE-2020-14893, DLA-2538-1, FEDORA-2020-561eed63ef, FEDORA-2020-ac2d47d89a, FEDORA-2020-b995eb2973, NTAP-20201023-0003, openSUSE-SU-2020:2090-1, openSUSE-SU-2020:2149-1, openSUSE-SU-2020:2254-1, RHSA-2020:5246-01, RHSA-2020:5500-01, RHSA-2020:5654-01, RHSA-2020:5663-01, RHSA-2020:5665-01, SUSE-SU-2020:3497-1, SUSE-SU-2020:3500-1, SUSE-SU-2020:3564-1, USN-4604-1, VIGILANCE-VUL-33648
Spring Security: read-write access via Signature Wrapping
An attacker can bypass access restrictions via Signature Wrapping of Spring Security, in order to read or alter data...
cpujan2021, cpuoct2020, CVE-2020-5407, VIGILANCE-VUL-33643
Spring Security: information disclosure via CBC Null Initialization Vector
An attacker can bypass access restrictions to data via CBC Null Initialization Vector of Spring Security, in order to obtain sensitive information...
6344075, 6367943, cpujan2021, cpuoct2020, CVE-2020-5408, VIGILANCE-VUL-33518
Our database contains other pages. You can request a free trial to read them.

Display information about MySQL Community: