Vulnerabilities

TI-2025-21995 CVE-2025-30722 · GHSA-53hw-hvww-v6v8

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).

LOW 31

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).

CVSS 3.1MEDIUM 6.8 Network Low privileges No interaction EPSS 0.00509 Published 2025-04-15 Fixed

TI-2025-15543 CVE-2025-21583 · GHSA-7g4r-49h3-32mr

Incorrect permission assignment in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00877 Published 2025-04-15 No fix listed CWE-732

TI-2025-19451 CVE-2025-26512 · GHSA-98xh-6hr4-2qwh

CVE-2025-26512 Privilege Escalation Vulnerability in SnapCenter

MEDIUM 44

SnapCenter versions prior to 6.0.1P1 and 6.1P1 are susceptible to a vulnerability which may allow an authenticated SnapCenter Server user to become an admin user on a remote system where a SnapCenter plug-in has been ins…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00667 Published 2025-03-24 Fixed in 6.0.1P1, 6.1P1 CWE-266

TI-2024-31841 CVE-2024-47554 · GHSA-78wr-2p64-hpwj

Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader

LOW 23

Uncontrolled Resource Consumption vulnerability in Apache Commons IO.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01315 Published 2024-10-03 Partial fix · 2.14.0 CWE-400

TI-2024-14622 CVE-2024-21993 · GHSA-cgrw-9q9p-34fj

Information Disclosure Vulnerability in SnapCenter

LOW 28

SnapCenter versions prior to 5.0p1 are susceptible to a vulnerability which could allow an authenticated attacker to discover plaintext credentials.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00227 Published 2024-07-09 Fixed in 5.0p1 CWE-312

TI-2024-13894 CVE-2024-21102 · GHSA-4cjh-m2w7-xg99

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread…

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01116 Published 2024-04-16 Will not fix

TI-2024-13893 CVE-2024-21101 · GHSA-hv7f-m7x4-mc78

Improper privilege management in Oracle MySQL NDB Cluster

LOW 12

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

CVSS 3.1LOW 2.2 Network High privileges No interaction EPSS 0.00401 Published 2024-04-16 No fix listed CWE-269

TI-2024-13888 CVE-2024-21096 · GHSA-3vx9-2ch5-m6r6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump).

LOW 23

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump).

CVSS 3.1MEDIUM 4.9 Local No auth No interaction EPSS 0.00424 Published 2024-04-16 Partial fix

TI-2024-13879 CVE-2024-21087 · GHSA-2mpf-fq5j-4hgp

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group…

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00893 Published 2024-04-16 Will not fix

TI-2024-13861 CVE-2024-21069 · GHSA-wh99-p93p-g825

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00841 Published 2024-04-16 Will not fix

TI-2024-13854 CVE-2024-21062 · GHSA-r27r-5fwh-vxqw

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00841 Published 2024-04-16 Will not fix CWE-400

TI-2024-13853 CVE-2024-21061 · GHSA-6pwq-2vrc-6rr6

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit…

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00887 Published 2024-04-16 Fixed

TI-2024-13852 CVE-2024-21060 · GHSA-88h4-jw57-85v9

Resource allocation without limits in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00872 Published 2024-04-16 Will not fix CWE-770

TI-2024-13847 CVE-2024-21055 · GHSA-hcm7-xw9m-99cx

Uncontrolled resource consumption in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00887 Published 2024-04-16 Fixed CWE-400

TI-2024-13846 CVE-2024-21054 · GHSA-r345-8c48-x279

Stack-based buffer overflow in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0097 Published 2024-04-16 Will not fix CWE-121

TI-2024-13839 CVE-2024-21047 · GHSA-9cw3-8wpf-rpmg

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00935 Published 2024-04-16 Will not fix

TI-2024-13807 CVE-2024-21015 · GHSA-gj63-qcjc-2fcw

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00845 Published 2024-04-16 Partial fix

TI-2024-13805 CVE-2024-21013 · GHSA-5xq9-rcpj-p52v

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00898 Published 2024-04-16 Will not fix CWE-400

TI-2024-13801 CVE-2024-21009 · GHSA-7jxx-p3jr-r2x9

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01094 Published 2024-04-16 Will not fix

TI-2024-13800 CVE-2024-21008 · GHSA-8cpf-fxr6-4wpq

Uncontrolled resource consumption in Oracle MySQL Server

LOW 22

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00898 Published 2024-04-16 Will not fix CWE-400

TI-2024-13792 CVE-2024-21000 · GHSA-jfv3-gh3j-c5r7

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security…

LOW 19

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00626 Published 2024-04-16 Fix deferred

TI-2024-13790 CVE-2024-20998 · GHSA-5v68-73xh-wcgw

Stack-based buffer overflow in Oracle MySQL Server

LOW 24

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0097 Published 2024-04-16 Will not fix CWE-121

TI-2024-13786 CVE-2024-20994 · GHSA-26mf-52p6-23pq

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information…

LOW 26

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00984 Published 2024-04-16 Will not fix

TI-2024-13785 CVE-2024-20993 · GHSA-6qf6-cmc3-h6x2

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

LOW 25

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01085 Published 2024-04-16 Fixed

TI-2024-19305 CVE-2024-29131 · GHSA-xjp4-hw94-mvp5

Apache Commons Configuration: StackOverflowError adding property in AbstractListDelimiterHandler.flattenIterator()

MEDIUM 42

Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.02054 Published 2024-03-21 Partial fix · 2.10.1 CWE-787

Vulnerabilities

Filters