- EPSS 0.18%
- Veröffentlicht 19.01.2022 12:15:10
- Zuletzt bearbeitet 21.11.2024 06:44:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with ...
CVE-2022-21248
- EPSS 0.08%
- Veröffentlicht 19.01.2022 12:15:10
- Zuletzt bearbeitet 21.11.2024 06:44:11
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20...
- EPSS 0.15%
- Veröffentlicht 19.01.2022 12:15:10
- Zuletzt bearbeitet 21.11.2024 06:44:12
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols...
CVE-2022-21253
- EPSS 0.36%
- Veröffentlicht 19.01.2022 12:15:10
- Zuletzt bearbeitet 21.11.2024 06:44:12
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple pro...
CVE-2022-21254
- EPSS 1.14%
- Veröffentlicht 19.01.2022 12:15:10
- Zuletzt bearbeitet 21.11.2024 06:44:12
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple pr...
CVE-2022-21256
- EPSS 0.36%
- Veröffentlicht 19.01.2022 12:15:10
- Zuletzt bearbeitet 21.11.2024 06:44:13
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access v...
CVE-2021-46143
- EPSS 4.09%
- Veröffentlicht 06.01.2022 04:15:07
- Zuletzt bearbeitet 05.05.2025 17:17:28
In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.
- EPSS 0.35%
- Veröffentlicht 01.01.2022 19:15:08
- Zuletzt bearbeitet 05.05.2025 17:17:28
In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).
- EPSS 94.36%
- Veröffentlicht 10.12.2021 10:15:09
- Zuletzt bearbeitet 27.10.2025 17:40:33
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An atta...
CVE-2021-43618
- EPSS 0.5%
- Veröffentlicht 15.11.2021 04:15:06
- Zuletzt bearbeitet 21.11.2024 06:29:31
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.