https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-21492.htmlhttps://patchthecve.com/cve/CVE-2025-21492.htmlWed, 17 Jun 2026 08:43:36 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Suhttps://patchthecve.com/cve/CVE-2024-21147.htmlhttps://patchthecve.com/cve/CVE-2024-21147.htmlWed, 17 Jun 2026 07:08:37 +0000HIGH 7.4: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.https://patchthecve.com/cve/CVE-2024-21144.htmlhttps://patchthecve.com/cve/CVE-2024-21144.htmlWed, 17 Jun 2026 07:08:37 +0000LOW 3.7: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerabilityhttps://patchthecve.com/cve/CVE-2024-21140.htmlhttps://patchthecve.com/cve/CVE-2024-21140.htmlWed, 17 Jun 2026 07:08:36 +0000MEDIUM 4.8: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.https://patchthecve.com/cve/CVE-2024-21138.htmlhttps://patchthecve.com/cve/CVE-2024-21138.htmlWed, 17 Jun 2026 07:08:36 +0000LOW 3.7: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.https://patchthecve.com/cve/CVE-2024-21102.htmlhttps://patchthecve.com/cve/CVE-2024-21102.htmlWed, 17 Jun 2026 07:08:32 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Myhttps://patchthecve.com/cve/CVE-2024-21101.htmlhttps://patchthecve.com/cve/CVE-2024-21101.htmlWed, 17 Jun 2026 07:08:32 +0000LOW 2.2: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.33 and prior, 7.6.29 and prior, 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via muhttps://patchthecve.com/cve/CVE-2024-21096.htmlhttps://patchthecve.com/cve/CVE-2024-21096.htmlWed, 17 Jun 2026 07:08:31 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes thttps://patchthecve.com/cve/CVE-2024-21087.htmlhttps://patchthecve.com/cve/CVE-2024-21087.htmlWed, 17 Jun 2026 07:08:30 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comhttps://patchthecve.com/cve/CVE-2024-21085.htmlhttps://patchthecve.com/cve/CVE-2024-21085.htmlWed, 17 Jun 2026 07:08:30 +0000LOW 3.7: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to exploit vulnerability https://patchthecve.com/cve/CVE-2024-21069.htmlhttps://patchthecve.com/cve/CVE-2024-21069.htmlWed, 17 Jun 2026 07:08:28 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.https://patchthecve.com/cve/CVE-2024-21062.htmlhttps://patchthecve.com/cve/CVE-2024-21062.htmlWed, 17 Jun 2026 07:08:27 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-21061.htmlhttps://patchthecve.com/cve/CVE-2024-21061.htmlWed, 17 Jun 2026 07:08:27 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyShttps://patchthecve.com/cve/CVE-2024-21060.htmlhttps://patchthecve.com/cve/CVE-2024-21060.htmlWed, 17 Jun 2026 07:08:27 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Mhttps://patchthecve.com/cve/CVE-2024-21056.htmlhttps://patchthecve.com/cve/CVE-2024-21056.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21055.htmlhttps://patchthecve.com/cve/CVE-2024-21055.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful athttps://patchthecve.com/cve/CVE-2024-21054.htmlhttps://patchthecve.com/cve/CVE-2024-21054.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-21053.htmlhttps://patchthecve.com/cve/CVE-2024-21053.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21052.htmlhttps://patchthecve.com/cve/CVE-2024-21052.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21051.htmlhttps://patchthecve.com/cve/CVE-2024-21051.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21050.htmlhttps://patchthecve.com/cve/CVE-2024-21050.htmlWed, 17 Jun 2026 07:08:26 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21049.htmlhttps://patchthecve.com/cve/CVE-2024-21049.htmlWed, 17 Jun 2026 07:08:25 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks https://patchthecve.com/cve/CVE-2024-21047.htmlhttps://patchthecve.com/cve/CVE-2024-21047.htmlWed, 17 Jun 2026 07:08:25 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Suchttps://patchthecve.com/cve/CVE-2024-21015.htmlhttps://patchthecve.com/cve/CVE-2024-21015.htmlWed, 17 Jun 2026 07:08:21 +0000MEDIUM 5.5: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.https://patchthecve.com/cve/CVE-2024-21013.htmlhttps://patchthecve.com/cve/CVE-2024-21013.htmlWed, 17 Jun 2026 07:08:21 +0000MEDIUM 4.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQLhttps://patchthecve.com/cve/CVE-2024-21009.htmlhttps://patchthecve.com/cve/CVE-2024-21009.htmlWed, 17 Jun 2026 07:08:20 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-21008.htmlhttps://patchthecve.com/cve/CVE-2024-21008.htmlWed, 17 Jun 2026 07:08:20 +0000MEDIUM 4.4: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQLhttps://patchthecve.com/cve/CVE-2024-21000.htmlhttps://patchthecve.com/cve/CVE-2024-21000.htmlWed, 17 Jun 2026 07:08:19 +0000LOW 3.8: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromhttps://patchthecve.com/cve/CVE-2024-20998.htmlhttps://patchthecve.com/cve/CVE-2024-20998.htmlWed, 17 Jun 2026 07:08:19 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-20994.htmlhttps://patchthecve.com/cve/CVE-2024-20994.htmlWed, 17 Jun 2026 07:08:19 +0000MEDIUM 5.3: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromihttps://patchthecve.com/cve/CVE-2024-20993.htmlhttps://patchthecve.com/cve/CVE-2024-20993.htmlWed, 17 Jun 2026 07:08:19 +0000MEDIUM 4.9: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Shttps://patchthecve.com/cve/CVE-2024-28752.htmlhttps://patchthecve.com/cve/CVE-2024-28752.htmlWed, 17 Jun 2026 07:21:44 +0000CRITICAL 9.3: A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted.https://patchthecve.com/cve/CVE-2024-28757.htmlhttps://patchthecve.com/cve/CVE-2024-28757.htmlThu, 15 Oct 2026 01:17:42 +0000HIGH 7.5: libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).https://patchthecve.com/cve/CVE-2024-1635.htmlhttps://patchthecve.com/cve/CVE-2024-1635.htmlWed, 07 Oct 2026 22:17:01 +0000HIGH 7.5: A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and opehttps://patchthecve.com/cve/CVE-2023-31102.htmlhttps://patchthecve.com/cve/CVE-2023-31102.htmlWed, 17 Jun 2026 05:56:17 +0000HIGH 7.8: Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.https://patchthecve.com/cve/CVE-2023-38545.htmlhttps://patchthecve.com/cve/CVE-2023-38545.htmlWed, 17 Jun 2026 06:10:41 +0000CRITICAL 9.8: This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host nam