The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Percona Server

Apache Tomcat: code execution via Enabled AJP Connector
An attacker can use a vulnerability via Enabled AJP Connector of Apache Tomcat, in order to run code...
bulletinapr2020, CERTFR-2020-AVI-112, cpujul2020, CVE-2020-1938, DLA-2133-1, DLA-2209-1, DSA-4673-1, DSA-4680-1, FEDORA-2020-04ac174fa9, FEDORA-2020-c870aa8378, HPESBUX04015, openSUSE-SU-2020:0345-1, openSUSE-SU-2020:0597-1, RHSA-2020:0855-01, RHSA-2020:0912-01, RHSA-2020:1478-01, RHSA-2020:1479-01, RHSA-2020:2779-01, RHSA-2020:2780-01, RHSA-2020:2781-01, RHSA-2020:2783-01, RHSA-2020:2840-01, SUSE-SU-2020:0598-1, SUSE-SU-2020:0631-1, SUSE-SU-2020:0632-1, SUSE-SU-2020:0725-1, SUSE-SU-2020:1111-1, SUSE-SU-2020:1126-1, SUSE-SU-2020:1272-1, SUSE-SU-2020:14342-1, VIGILANCE-VUL-31664
OpenSSL: Man-in-the-Middle via X509_V_FLAG_X509_STRICT
An attacker can act as a Man-in-the-Middle via X509_V_FLAG_X509_STRICT on OpenSSL, in order to read or write data in the session...
6443733, CERTFR-2021-AVI-221, CERTFR-2021-AVI-235, cisco-sa-openssl-2021-GHY28dJd, cpuapr2021, CVE-2021-3450, FEDORA-2021-c11da301be, FEDORA-2021-d049f32a82, FEDORA-2021-d934acdb42, FEDORA-2021-f347d1c866, FreeBSD-SA-21:07.openssl, RHSA-2021:1024-01, SB10356, SSB-439005, TNS-2021-05, VIGILANCE-VUL-34943
OpenSSL: NULL pointer dereference via X509_issuer_and_serial_hash
An attacker can force a NULL pointer to be dereferenced via X509_issuer_and_serial_hash() of OpenSSL, in order to trigger a denial of service...
6429603, 6443405, 6445489, 6463981, CERTFR-2021-AVI-124, CERTFR-2021-AVI-187, cpuapr2021, CVE-2021-23841, DLA-2563-1, DLA-2565-1, DSA-4855-1, HT212528, HT212529, HT212530, HT212531, openSUSE-SU-2021:0427-1, openSUSE-SU-2021:0430-1, SSB-439005, SUSE-SU-2021:0725-1, SUSE-SU-2021:0752-1, SUSE-SU-2021:0753-1, SUSE-SU-2021:0754-1, SUSE-SU-2021:0755-1, SUSE-SU-2021:0769-1, SUSE-SU-2021:0793-1, SUSE-SU-2021:0939-1, SUSE-SU-2021:14667-1, SUSE-SU-2021:14670-1, SYMSA17570, USN-4738-1, USN-4745-1, VIGILANCE-VUL-34598
OpenSSL: buffer overflow via EVP_XUpdate
An attacker can trigger a buffer overflow via EVP_XUpdate of OpenSSL, in order to trigger a denial of service, and possibly to run code...
6429603, 6443405, 6445489, 6451671, 6463981, CERTFR-2021-AVI-124, CERTFR-2021-AVI-187, cpuapr2021, CVE-2021-23840, DLA-2563-1, DLA-2565-1, DSA-4855-1, openSUSE-SU-2021:0357-1, openSUSE-SU-2021:0372-1, openSUSE-SU-2021:0427-1, openSUSE-SU-2021:0430-1, SSB-439005, STORM-2021-002, SUSE-SU-2021:0649-1, SUSE-SU-2021:0651-1, SUSE-SU-2021:0673-1, SUSE-SU-2021:0674-1, SUSE-SU-2021:0725-1, SUSE-SU-2021:0752-1, SUSE-SU-2021:0753-1, SUSE-SU-2021:0754-1, SUSE-SU-2021:0755-1, SUSE-SU-2021:0769-1, SUSE-SU-2021:0793-1, SUSE-SU-2021:0939-1, SUSE-SU-2021:14667-1, SUSE-SU-2021:14670-1, SYMSA17570, USN-4738-1, VIGILANCE-VUL-34597
Apache Tomcat: information disclosure via HTTP/2 Request Header Mix-up
An attacker can bypass access restrictions to data via HTTP/2 Request Header Mix-up of Apache Tomcat, in order to obtain sensitive information...
CERTFR-2020-AVI-792, cpuapr2021, CVE-2020-17527, DLA-2495-1, DSA-4835-1, openSUSE-SU-2021:0043-1, openSUSE-SU-2021:0081-1, SUSE-SU-2021:0031-1, SUSE-SU-2021:0040-1, SUSE-SU-2021:0041-1, SUSE-SU-2021:0042-1, VIGILANCE-VUL-34034
Node Core: denial of service via Numerous DNS Responses
An attacker can trigger a fatal error via Numerous DNS Responses of Node Core, in order to trigger a denial of service...
6410882, 6420355, 6426699, CERTFR-2021-AVI-101, CERTFR-2021-AVI-146, cpuapr2021, CVE-2020-8277, FEDORA-2020-307e873389, FEDORA-2020-7473744de1, K07944249, openSUSE-SU-2020:2045-1, openSUSE-SU-2020:2092-1, openSUSE-SU-2021:0064-1, openSUSE-SU-2021:0066-1, RHSA-2020:5305-01, RHSA-2020:5499-01, RHSA-2021:0421-01, RHSA-2021:0551-01, SUSE-SU-2020:3478-1, SUSE-SU-2020:3549-1, SUSE-SU-2021:0061-1, SUSE-SU-2021:0062-1, USN-4638-1, VIGILANCE-VUL-33903
MIT krb5: denial of service via asn1_encode.c
An attacker can trigger a fatal error via asn1_encode.c of MIT krb5, in order to trigger a denial of service...
cpuapr2021, CVE-2020-28196, DLA-2437-1, DSA-4795-1, FEDORA-2020-0df38b2843, FEDORA-2020-27b577ab23, FEDORA-2020-32193cbbe6, openSUSE-SU-2020:2037-1, openSUSE-SU-2020:2062-1, RHSA-2021:1593-01, SUSE-SU-2020:3375-1, SUSE-SU-2020:3377-1, SUSE-SU-2020:3379-1, USN-4635-1, VIGILANCE-VUL-33846
Oracle MySQL: vulnerabilities of October 2020
Several vulnerabilities were announced in Oracle products...
6459931, CERTFR-2020-AVI-664, cpuoct2020, CVE-2020-14672, CVE-2020-14760, CVE-2020-14765, CVE-2020-14769, CVE-2020-14771, CVE-2020-14773, CVE-2020-14775, CVE-2020-14776, CVE-2020-14777, CVE-2020-14785, CVE-2020-14786, CVE-2020-14789, CVE-2020-14790, CVE-2020-14791, CVE-2020-14793, CVE-2020-14794, CVE-2020-14799, CVE-2020-14800, CVE-2020-14804, CVE-2020-14809, CVE-2020-14812, CVE-2020-14814, CVE-2020-14821, CVE-2020-14827, CVE-2020-14828, CVE-2020-14829, CVE-2020-14830, CVE-2020-14836, CVE-2020-14837, CVE-2020-14838, CVE-2020-14839, CVE-2020-14844, CVE-2020-14845, CVE-2020-14846, CVE-2020-14848, CVE-2020-14852, CVE-2020-14853, CVE-2020-14860, CVE-2020-14861, CVE-2020-14866, CVE-2020-14867, CVE-2020-14868, CVE-2020-14869, CVE-2020-14870, CVE-2020-14873, CVE-2020-14878, CVE-2020-14888, CVE-2020-14891, CVE-2020-14893, DLA-2538-1, FEDORA-2020-561eed63ef, FEDORA-2020-ac2d47d89a, FEDORA-2020-b995eb2973, NTAP-20201023-0003, openSUSE-SU-2020:2090-1, openSUSE-SU-2020:2149-1, openSUSE-SU-2020:2254-1, RHSA-2020:5246-01, RHSA-2020:5500-01, RHSA-2020:5654-01, RHSA-2020:5663-01, RHSA-2020:5665-01, SUSE-SU-2020:3497-1, SUSE-SU-2020:3500-1, SUSE-SU-2020:3564-1, USN-4604-1, VIGILANCE-VUL-33648
Spring Security: read-write access via Signature Wrapping
An attacker can bypass access restrictions via Signature Wrapping of Spring Security, in order to read or alter data...
cpujan2021, cpuoct2020, CVE-2020-5407, VIGILANCE-VUL-33643
Percona Server for MySQL: vulnerability
A vulnerability of Percona Server for MySQL was announced...
CVE-2020-26542, VIGILANCE-VUL-33572
Our database contains other pages. You can request a free trial to read them.

Display information about Percona Server: