A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucket_pipeline_variable module. This flaw allows an attacker to steal bitbucket_pipeline credentials. The highest threat from this vulnerability is to confidentiality.

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.50 and prior 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of MySQL Client accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Client. CVSS 3.1 Base Score 4.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L).

MySQL Server Replication Vulnerability Allows High-Privileged Remote Attackers to Cause Denial of Service (DoS) in Versions 8.0.22 and Earlier

Windows Remote Procedure Call Information Disclosure Vulnerability

Sysinternals PsExec Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

PFX Encryption Security Feature Bypass Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Windows Update Stack Setup Elevation of Privilege Vulnerability

System Center Operations Manager Elevation of Privilege Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Bot Framework SDK Information Disclosure Vulnerability

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

ASP.NET Core and Visual Studio Denial of Service Vulnerability

Windows Fax Service Remote Code Execution Vulnerability

.NET Core and Visual Studio Denial of Service Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Server Tampering Vulnerability