Oracle

Mysql Connectors

30 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-60180

  • EPSS 0.46%
  • Veröffentlicht 21.07.2026 21:33:33
  • Zuletzt bearbeitet 06.08.2026 18:17:12

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

7.4

CVE-2026-60179

  • EPSS 0.33%
  • Veröffentlicht 21.07.2026 21:33:33
  • Zuletzt bearbeitet 06.08.2026 18:16:32

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple proto...

4.8

CVE-2025-30714

  • EPSS 0.42%
  • Veröffentlicht 15.04.2025 20:31:11
  • Zuletzt bearbeitet 03.09.2026 18:52:36

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple pro...

7.5

CVE-2025-30706

  • EPSS 0.59%
  • Veröffentlicht 15.04.2025 20:31:08
  • Zuletzt bearbeitet 03.09.2026 18:52:44

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocol...

6.4

CVE-2025-21548

  • EPSS 0.46%
  • Veröffentlicht 21.01.2025 21:15:21
  • Zuletzt bearbeitet 18.06.2025 19:24:16

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple ...

5.3

CVE-2023-21971

  • EPSS 1.29%
  • Veröffentlicht 18.04.2023 20:15:16
  • Zuletzt bearbeitet 21.11.2024 07:44:01

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple pr...

8.2

CVE-2022-21824

  • EPSS 21.51%
  • Veröffentlicht 24.02.2022 19:15:10
  • Zuletzt bearbeitet 21.11.2024 06:45:30

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, whi...

5.3

CVE-2021-44533

Exploit
  • EPSS 9.36%
  • Veröffentlicht 24.02.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:31:10

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers could craft certificate subjects containing a single-value Relative Distinguished Name that would be interpreted as a m...

5.3

CVE-2021-44532

Exploit
  • EPSS 10.36%
  • Veröffentlicht 24.02.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:31:10

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an inje...

7.4

CVE-2021-44531

  • EPSS 8.37%
  • Veröffentlicht 24.02.2022 19:15:09
  • Zuletzt bearbeitet 21.11.2024 06:31:10

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting U...