https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-24970.htmlhttps://patchthecve.com/cve/CVE-2025-24970.htmlWed, 17 Jun 2026 08:59:54 +0000HIGH 7.5: Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead tohttps://patchthecve.com/cve/CVE-2025-21492.htmlhttps://patchthecve.com/cve/CVE-2025-21492.htmlWed, 17 Jun 2026 08:43:36 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Suhttps://patchthecve.com/cve/CVE-2024-21262.htmlhttps://patchthecve.com/cve/CVE-2024-21262.htmlFri, 18 Sep 2026 20:51:50 +0000MEDIUM 6.5: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successfuhttps://patchthecve.com/cve/CVE-2024-38808.htmlhttps://patchthecve.com/cve/CVE-2024-38808.htmlWed, 17 Jun 2026 07:41:05 +0000MEDIUM 4.3: In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when the following is truehttps://patchthecve.com/cve/CVE-2024-21147.htmlhttps://patchthecve.com/cve/CVE-2024-21147.htmlWed, 17 Jun 2026 07:08:37 +0000HIGH 7.4: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.https://patchthecve.com/cve/CVE-2024-21140.htmlhttps://patchthecve.com/cve/CVE-2024-21140.htmlWed, 17 Jun 2026 07:08:36 +0000MEDIUM 4.8: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.https://patchthecve.com/cve/CVE-2024-21138.htmlhttps://patchthecve.com/cve/CVE-2024-21138.htmlWed, 17 Jun 2026 07:08:36 +0000LOW 3.7: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.https://patchthecve.com/cve/CVE-2024-25047.htmlhttps://patchthecve.com/cve/CVE-2024-25047.htmlWed, 17 Jun 2026 07:15:25 +0000HIGH 8.6: IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956.https://patchthecve.com/cve/CVE-2024-21102.htmlhttps://patchthecve.com/cve/CVE-2024-21102.htmlWed, 17 Jun 2026 07:08:32 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Myhttps://patchthecve.com/cve/CVE-2024-21101.htmlhttps://patchthecve.com/cve/CVE-2024-21101.htmlWed, 17 Jun 2026 07:08:32 +0000LOW 2.2: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.33 and prior, 7.6.29 and prior, 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via muhttps://patchthecve.com/cve/CVE-2024-21096.htmlhttps://patchthecve.com/cve/CVE-2024-21096.htmlWed, 17 Jun 2026 07:08:31 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes thttps://patchthecve.com/cve/CVE-2024-21087.htmlhttps://patchthecve.com/cve/CVE-2024-21087.htmlWed, 17 Jun 2026 07:08:30 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comhttps://patchthecve.com/cve/CVE-2024-21085.htmlhttps://patchthecve.com/cve/CVE-2024-21085.htmlWed, 17 Jun 2026 07:08:30 +0000LOW 3.7: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability https://patchthecve.com/cve/CVE-2024-21069.htmlhttps://patchthecve.com/cve/CVE-2024-21069.htmlWed, 17 Jun 2026 07:08:28 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.https://patchthecve.com/cve/CVE-2024-21062.htmlhttps://patchthecve.com/cve/CVE-2024-21062.htmlWed, 17 Jun 2026 07:08:27 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-21061.htmlhttps://patchthecve.com/cve/CVE-2024-21061.htmlWed, 17 Jun 2026 07:08:27 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyShttps://patchthecve.com/cve/CVE-2024-21060.htmlhttps://patchthecve.com/cve/CVE-2024-21060.htmlWed, 17 Jun 2026 07:08:27 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Mhttps://patchthecve.com/cve/CVE-2024-21056.htmlhttps://patchthecve.com/cve/CVE-2024-21056.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21055.htmlhttps://patchthecve.com/cve/CVE-2024-21055.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful athttps://patchthecve.com/cve/CVE-2024-21054.htmlhttps://patchthecve.com/cve/CVE-2024-21054.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-21053.htmlhttps://patchthecve.com/cve/CVE-2024-21053.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21052.htmlhttps://patchthecve.com/cve/CVE-2024-21052.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21051.htmlhttps://patchthecve.com/cve/CVE-2024-21051.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21050.htmlhttps://patchthecve.com/cve/CVE-2024-21050.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21049.htmlhttps://patchthecve.com/cve/CVE-2024-21049.htmlWed, 17 Jun 2026 07:08:25 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21047.htmlhttps://patchthecve.com/cve/CVE-2024-21047.htmlWed, 17 Jun 2026 07:08:25 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Suchttps://patchthecve.com/cve/CVE-2024-21015.htmlhttps://patchthecve.com/cve/CVE-2024-21015.htmlWed, 17 Jun 2026 07:08:21 +0000MEDIUM 5.5: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.https://patchthecve.com/cve/CVE-2024-21013.htmlhttps://patchthecve.com/cve/CVE-2024-21013.htmlWed, 17 Jun 2026 07:08:21 +0000MEDIUM 4.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQLhttps://patchthecve.com/cve/CVE-2024-21009.htmlhttps://patchthecve.com/cve/CVE-2024-21009.htmlWed, 17 Jun 2026 07:08:20 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-21008.htmlhttps://patchthecve.com/cve/CVE-2024-21008.htmlWed, 17 Jun 2026 07:08:20 +0000MEDIUM 4.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQLhttps://patchthecve.com/cve/CVE-2024-21000.htmlhttps://patchthecve.com/cve/CVE-2024-21000.htmlWed, 17 Jun 2026 07:08:19 +0000LOW 3.8: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromhttps://patchthecve.com/cve/CVE-2024-20998.htmlhttps://patchthecve.com/cve/CVE-2024-20998.htmlWed, 17 Jun 2026 07:08:19 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-20994.htmlhttps://patchthecve.com/cve/CVE-2024-20994.htmlWed, 17 Jun 2026 07:08:19 +0000MEDIUM 5.3: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromihttps://patchthecve.com/cve/CVE-2024-20993.htmlhttps://patchthecve.com/cve/CVE-2024-20993.htmlWed, 17 Jun 2026 07:08:19 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2023-43051.htmlhttps://patchthecve.com/cve/CVE-2023-43051.htmlWed, 17 Jun 2026 06:25:01 +0000MEDIUM 5.4: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2https://patchthecve.com/cve/CVE-2023-38359.htmlhttps://patchthecve.com/cve/CVE-2023-38359.htmlWed, 17 Jun 2026 06:09:59 +0000MEDIUM 6.1: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2https://patchthecve.com/cve/CVE-2023-32344.htmlhttps://patchthecve.com/cve/CVE-2023-32344.htmlWed, 17 Jun 2026 05:58:37 +0000MEDIUM 4.3: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.https://patchthecve.com/cve/CVE-2023-30996.htmlhttps://patchthecve.com/cve/CVE-2023-30996.htmlWed, 17 Jun 2026 05:56:02 +0000MEDIUM 5.3: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.https://patchthecve.com/cve/CVE-2022-34357.htmlhttps://patchthecve.com/cve/CVE-2022-34357.htmlWed, 17 Jun 2026 04:50:10 +0000MEDIUM 6.5: IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other