Vulnerabilities
VEX
CWE
KEV Catalogs
All catalogs
CIRCL
CISA
ENISA
Shadowserver
Previdian
Community
Sightings
Comments
Bundles
Organizations
Contributors
Disclosure
Vulnerability Disclosures
Statistics
Log in
About
Search term
Success
GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference -
Registration
← All credits
zhaoyudi (Nebulalab)
1 vulnerability record and advisories credit this contributor.
CVE-2024-21511
Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.