Search: 5.1.8.3

CVE-2026-101721 is a security vulnerability affecting MySQL Server and MySQL Cluster components, including versions 5.5.32 through 5.5.57 on Ubuntu 14.04. The vulnerability is recognized by Oracle and included in their October 2026 Critical Patch Update, which addresses numerous security issues across Oracle products. No public exploit code or in-the-wild exploitation has been reported. Oracle strongly recommends applying available patches promptly to mitigate this and other vulnerabilities.

A medium severity vulnerability (CVE-2026-101678) affects specific versions of MySQL 5.5 connectors. The flaw has a CVSS 3.1 base score of 4.3, indicating a network attack vector with low complexity and no privileges required, but requires user interaction and impacts availability only. No confidentiality or integrity impact is reported. The vulnerability is published and affects multiple Ubuntu-packaged MySQL 5.5 versions.

A medium severity vulnerability (CVE-2026-101677) affects specific Ubuntu-packaged versions of MySQL 5.5, related to the MySQL Connectors component. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a network attack vector with low complexity and no privileges required, but requires user interaction. The impact is limited to low integrity impact with no confidentiality or availability impact. No public exploits or known active exploitation have been reported. No patch or remediation information is provided in the available data.

CVE-2026-101637 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), specifically impacting MySQL version 9.7 and certain Ubuntu-packaged versions of MySQL 5.5. The vulnerability is documented in Oracle's October 2026 Critical Patch Update, which includes numerous security patches across Oracle products. No public exploit code or in-the-wild exploitation has been reported. The severity is assessed as medium.

A medium severity vulnerability (CVE-2026-101626) affects specific versions of MySQL 5.5 connectors. The flaw allows a network attacker with high attack complexity and no privileges or user interaction to cause a confidentiality breach, impacting data confidentiality but not integrity or availability. The vulnerability was published on October 23, 2026, and affects multiple Ubuntu-packaged versions of MySQL 5.5. No known exploits are reported in the wild, and no patch information is provided in the source data.

CVE-2026-101623 is a security vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 5.5 package versions. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which addresses numerous security issues across its product portfolio.

CVE-2026-101613 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to Data Definition Language (DDL) operations. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities. Users are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-101599 is a high severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 score of 7.5, indicating a significant risk. The vulnerability requires local attack vector with high attack complexity, low privileges, and user interaction, but can impact confidentiality, integrity, and availability with a scope change. Multiple versions of VirtualBox 5.0.x are affected. No public exploits or patches are currently documented in the provided data.

CVE-2026-101598 is a high-severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and no user interaction. It affects multiple specific versions of VirtualBox, primarily in the 5.0.x series. There is no information about public exploits or vendor patches in the provided data.

CVE-2026-101516 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed in various Ubuntu releases. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related Oracle products. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low complexity and no required privileges or user interaction, leading to limited confidentiality and integrity impacts without affecting availability.

Thunderbird's chat feature with XMPP accounts had a vulnerability where attribute values were not escaped when serializing outgoing XMPP stanzas. This allowed a remote XMPP user to send crafted requests that caused Thunderbird to inject arbitrary stanzas into the user's connection, which the server would process as if sent by the user. This could enable sending messages or changing contact and subscription settings without user interaction. The issue was fixed in Thunderbird versions 158.0.1 and 153.5.1.

A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SNS VPN log monitoring screen. This vulnerability allows an attacker with low privileges to inject malicious scripts that are stored and later executed in the context of users viewing the log monitoring screen. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. No information about affected versions or available patches is provided.

CVE-2026-91664 is a vulnerability in Oracle Essbase version 21.8.3.0.0 that allows an unauthenticated attacker with network access via TCP to cause a denial of service by hanging or crashing the application. The vulnerability impacts availability but does not affect confidentiality or integrity. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products. However, no explicit patch version or fix details for this specific vulnerability are provided in the advisory content.

CVE-2026-91652 is a vulnerability in Oracle Essbase version 21.8.3.0.0 that allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some Oracle Essbase data. The vulnerability impacts confidentiality but does not affect integrity or availability. The CVSS 3.1 base score is 5.0, indicating a medium severity issue. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability for this specific version in the provided data.

CVE-2026-91651 is a vulnerability in Oracle Essbase Web Platform version 21.8.3.0.0 that allows a low privileged attacker with network access via HTTP to compromise the product. The vulnerability is difficult to exploit but can lead to complete takeover of Oracle Essbase, impacting confidentiality, integrity, and availability. The CVSS 3.1 base score is 8.5, indicating high severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous security patches across multiple products. No explicit patch version is stated for this specific vulnerability in the advisory, so users should consult Oracle's advisory for patch availability and apply updates promptly.

CVE-2026-91648 is a vulnerability in Oracle Essbase version 21.8.3.0.0 affecting the Java Based Agent component. It allows an unauthenticated attacker with network access via TCP to gain unauthorized read access to some Oracle Essbase data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. No integrity or availability impacts are reported. Oracle has released a Critical Patch Update advisory covering multiple products, including Oracle Essbase, recommending timely patch application.

CVE-2026-91646 is a vulnerability in Oracle Essbase version 21.8.3.0.0 that allows an unauthenticated attacker with network access via T3 or IIOP protocols to perform unauthorized read, update, insert, or delete operations on accessible data. The vulnerability also enables a partial denial of service condition. It is rated as medium severity with a CVSS 3.1 base score of 5.6.

CVE-2026-91645 is a vulnerability in Oracle Essbase version 21.8.3.0.0 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Oracle Essbase data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. No public exploits or in-the-wild exploitation have been reported. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains numerous patches across Oracle products.

CVE-2026-91643 is a vulnerability in Oracle Essbase version 21.8.3.0.0 affecting the Java Based Agent component. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Oracle Essbase data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. No integrity or availability impacts are reported. Oracle has published a Critical Patch Update advisory including multiple patches but does not explicitly confirm a patch for this specific version in the provided data.

CVE-2026-91641 is a vulnerability in Oracle Essbase version 21.8.3.0.0 that allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some Oracle Essbase data. The vulnerability affects confidentiality but does not impact integrity or availability. The vulnerability has a CVSS 3.1 base score of 5.0, indicating medium severity. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities, strongly recommending customers apply patches promptly.