Tagged “vex”
CVEs tagged vex, newest first.
7401 CVEsRSS
CVE-2026-101778Medium· 6.5mysql: mysql: Denial of Service (CVE-2026-101778)
A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU …
CVE-2026-101773High· 7.1mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)
A flaw was found in the MySQL Group Replication plugin. An unauthenticated attacker located on the adjacent network can exploit this vulnerability to compromise the database service. Successful exploitation primarily allows an attacker to …
CVE-2026-101771High· 8.1mysql: mysql: complete service takeover via network access (CVE-2026-101771)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101774Medium· 6.5mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)
A flaw was found in the Pluggable Authentication component of MySQL. An unauthenticated remote attacker could exploit this vulnerability across multiple network protocols to cause the server to hang or crash repeatedly, resulting in a Deni…
CVE-2026-101772High· 8.1mysql: mysql: unauthorized server takeover (CVE-2026-101772)
A flaw was found in the Client programs component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advi…
CVE-2026-101779Low· 2.7mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)
A flaw was found in the MySQL Server Telemetry component. A remote attacker with high privileges and network access can exploit this vulnerability over multiple protocols to cause a partial Denial of Service (DoS). Successful exploitation …
CVE-2026-101776Medium· 4.9mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)
A flaw was found in the MySQL Group Replication plugin. A remote attacker with high privileges and network access can exploit this vulnerability across multiple protocols. Successful exploitation allows the attacker to cause the service to…
CVE-2026-101775High· 7.4mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)
A flaw was found in the MySQL Server replication component. An unauthenticated remote attacker with network access could exploit this vulnerability to create, delete, or modify critical database data. A successful attack can also lead to a…
CVE-2026-101780Medium· 6.5mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)
A flaw was found in the MySQL Server X Plugin component. An authenticated remote attacker with low privileges and network access can exploit this vulnerability through network protocol requests. Successful exploitation allows the attacker …
CVE-2026-101781High· 8.8mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)
A flaw was found in MySQL's Group Replication Group Communication System (GCS). An unauthenticated attacker located on the same adjacent network segment can exploit this vulnerability without requiring privileges or user interaction. Succe…
CVE-2026-101787Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)
A flaw was found in MySQL within the Server Optimizer component. An authenticated remote attacker with high privileges can exploit this vulnerability over the network to cause the database to hang or crash repeatedly. Successful exploitati…
CVE-2026-101785High· 8.3mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)
A flaw was found in the MySQL Server JSON component. An authenticated remote attacker with low privileges can exploit this vulnerability over network protocols to modify, create, or delete accessible database records. Successful exploitati…
CVE-2026-101784Medium· 4.9mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)
A flaw was found in the query optimizer component of MySQL Server and MySQL Cluster. An authenticated attacker with high privileges and network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful exploitati…
CVE-2026-101789Medium· 6.5mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)
A flaw was found in the MySQL Optimizer component. An authenticated remote attacker with low privileges can exploit this vulnerability over the network to cause a Denial of Service (DoS). Successful exploitation allows the attacker to hang…
CVE-2026-101788Medium· 5.9mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)
A flaw was found in MySQL Server and MySQL Cluster within the Server Components Services. This vulnerability allows an unauthenticated remote attacker with network access via multiple protocols to cause a Denial of Service (DoS). A success…
CVE-2026-101799Medium· 6.5mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)
A flaw was found in the Group Replication GCS component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CP…
CVE-2026-101797High· 7.5mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)
A flaw was found in the mysqldump component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory f…
CVE-2026-101795Medium· 6.7mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)
A flaw was found in the Components Services component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU …
CVE-2026-101794Medium· 6.5mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)
A flaw was found in the XML component of MySQL. An authenticated, low-privileged remote attacker with network access can exploit this vulnerability to cause a Denial of Service (DoS). Successful attacks can result in a hang or frequently r…
CVE-2026-101801Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)
A flaw was found in the Server Optimizer component of MySQL. A remote attacker with high privileges can exploit this vulnerability across network protocols to cause the database to hang or repeatedly crash. This issue leads to a complete D…
CVE-2026-101798Medium· 4.9mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)
A flaw was found in the MySQL Server optimizer component. A remote attacker with high privileges and network access can exploit this vulnerability by submitting crafted requests across supported protocols. Successful exploitation allows th…
CVE-2026-101796High· 7.5mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)
A flaw was found in the Replication component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory…
CVE-2026-101802Medium· 6.5mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)
A flaw was found in the MySQL Server Parser component. An authenticated remote attacker with low privileges can exploit this vulnerability through network access using multiple protocols. A successful attack can cause the service to hang o…
CVE-2026-101800Medium· 6.8mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)
A flaw was found in the Security: Privileges component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU…
CVE-2026-101803Medium· 6.5mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)
A flaw was found in the XML component of MySQL. This issue may allow an attacker to impact the confidentiality, integrity, and/or availability of MySQL Server depending on the vulnerability details. Refer to the Oracle CPU advisory for com…
CVE-2026-108518Low· 2.9PoCDBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element
DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element names a database handle attribute, which dbi_profile reads fro…
CVE-2026-83378Medium· 4.8Vulnerability in Oracle Java SE (component: Compiler)
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mult…
CVE-2026-87255Low· 3.7Vulnerability in Oracle Java SE (component: Compiler)
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoc…
CVE-2026-111879Medium· 6.5DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock
DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. open_data creates the table's lock file and takes an exclusive flock on it for a CREATE, before th…
CVE-2026-87293Medium· 5.4Vulnerability in Oracle Java SE (component: RMI)
Vulnerability in Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated …