Mysql Server Security Vulnerabilities and Issues — Mysql Server CVE List

Lucene search

OracleMysql Server

107 matches found

cve•added 2022/05/03 4:15 p.m.•1125 views

CVE-2022-1292

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the s...

10CVSS9AI score0.6768EPSS

cve•added 2022/10/18 9:15 p.m.•544 views

CVE-2022-21641

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS4.9AI score0.00096EPSS

cve•added 2022/10/18 9:15 p.m.•543 views

CVE-2022-21607

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS4.7AI score0.00099EPSS

cve•added 2022/10/18 9:15 p.m.•532 views

CVE-2022-21638

4.9CVSS4.9AI score0.00096EPSS

cve•added 2022/10/18 9:15 p.m.•529 views

CVE-2022-21592

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.7.39 and prior and 8.0.29 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi...

4.3CVSS3.7AI score0.0019EPSS

cve•added 2022/10/18 9:15 p.m.•528 views

CVE-2022-21595

Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Suc...

4.4CVSS4.6AI score0.00073EPSS

cve•added 2022/10/18 9:15 p.m.•521 views

CVE-2022-21605

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

4.9CVSS4.7AI score0.00099EPSS

cve•added 2022/04/19 9:15 p.m.•362 views

CVE-2022-21427

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....

4.9CVSS5.3AI score0.00065EPSS

cve•added 2022/04/19 9:15 p.m.•343 views

CVE-2022-21460

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...

4.4CVSS4.3AI score0.0021EPSS

cve•added 2022/04/19 9:15 p.m.•328 views

CVE-2022-21451

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Su...

4.4CVSS4.5AI score0.00112EPSS

cve•added 2022/01/19 12:15 p.m.•314 views

CVE-2022-21278

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful atta...

7.1CVSS6.6AI score0.0027EPSS

cve•added 2022/07/19 10:15 p.m.•297 views

CVE-2022-21455

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

4.9CVSS4.7AI score0.00091EPSS

cve•added 2022/04/19 9:15 p.m.•283 views

CVE-2022-21417

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succ...

4.9CVSS4.9AI score0.00116EPSS

cve•added 2022/01/19 12:15 p.m.•274 views

CVE-2022-21245

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi...

4.3CVSS4AI score0.00242EPSS

cve•added 2022/01/19 12:15 p.m.•274 views

CVE-2022-21265

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

5.5CVSS3.6AI score0.0012EPSS

cve•added 2022/10/18 9:15 p.m.•273 views

CVE-2022-21589

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.39 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi...

4.3CVSS3.4AI score0.00136EPSS

cve•added 2022/04/19 9:15 p.m.•270 views

CVE-2022-21454

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to comp...

6.5CVSS6.2AI score0.00268EPSS

cve•added 2022/01/19 12:15 p.m.•269 views

CVE-2022-21303

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise ...

4.9CVSS4.9AI score0.00167EPSS

cve•added 2022/01/19 12:15 p.m.•268 views

CVE-2022-21249

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

4CVSS3AI score0.00118EPSS

cve•added 2022/01/19 12:15 p.m.•268 views

CVE-2022-21301

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

5.5CVSS5.4AI score0.00169EPSS

cve•added 2022/01/19 12:15 p.m.•268 views

CVE-2022-21367

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...

5.5CVSS5.4AI score0.00153EPSS

cve•added 2022/01/19 12:15 p.m.•266 views

CVE-2022-21254

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful at...

6.3CVSS5.2AI score0.00386EPSS

cve•added 2022/01/19 12:15 p.m.•266 views

CVE-2022-21304

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serv...

4.9CVSS4.9AI score0.00167EPSS

cve•added 2022/01/19 12:15 p.m.•265 views

CVE-2022-21253

6.8CVSS4.9AI score0.00161EPSS

cve•added 2022/04/19 9:15 p.m.•264 views

CVE-2022-21478

5.5CVSS5.4AI score0.0013EPSS

cve•added 2022/01/19 12:15 p.m.•263 views

CVE-2022-21270

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...

4.9CVSS4.9AI score0.00167EPSS

cve•added 2022/01/19 12:15 p.m.•262 views

CVE-2022-21264

4.9CVSS4.9AI score0.00167EPSS

cve•added 2022/01/19 12:15 p.m.•262 views

CVE-2022-21302

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of th...

5.3CVSS5.2AI score0.00295EPSS

cve•added 2022/04/19 9:15 p.m.•262 views

CVE-2022-21425

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

5.5CVSS5.4AI score0.0013EPSS

cve•added 2022/01/19 12:15 p.m.•260 views

CVE-2022-21256

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....

6.8CVSS4.9AI score0.00161EPSS

cve•added 2022/10/18 9:15 p.m.•259 views

CVE-2022-39410

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful atta...

6.5CVSS6.2AI score0.00089EPSS

cve•added 2022/01/19 12:15 p.m.•258 views

CVE-2022-21362

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succe...

4.9CVSS4.9AI score0.00151EPSS

cve•added 2022/10/18 9:15 p.m.•258 views

CVE-2022-21594

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS4.9AI score0.00051EPSS

cve•added 2022/10/18 9:15 p.m.•258 views

CVE-2022-21608

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...

4.9CVSS4.8AI score0.00081EPSS

cve•added 2022/01/19 12:15 p.m.•257 views

CVE-2022-21297

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS4.6AI score0.00151EPSS

cve•added 2022/01/19 12:15 p.m.•257 views

CVE-2022-21342

4.9CVSS4.9AI score0.00151EPSS

cve•added 2022/01/19 12:15 p.m.•257 views

CVE-2022-21370

4.9CVSS4.9AI score0.00151EPSS

cve•added 2022/01/19 12:15 p.m.•255 views

CVE-2022-21351

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful atta...

7.1CVSS6.6AI score0.0027EPSS

cve•added 2022/10/18 9:15 p.m.•255 views

CVE-2022-21617

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...

4.9CVSS4.9AI score0.00081EPSS

cve•added 2022/02/24 7:15 p.m.•254 views

CVE-2022-21824

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto ". The prototype pollution has...

8.2CVSS8.1AI score0.00317EPSS

cve•added 2022/10/18 9:15 p.m.•254 views

CVE-2022-39400

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS4.9AI score0.00051EPSS

cve•added 2022/10/18 9:15 p.m.•254 views

CVE-2022-39408

6.5CVSS6.2AI score0.00089EPSS

cve•added 2022/10/18 9:15 p.m.•253 views

CVE-2022-21599

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Success...

4.9CVSS4.9AI score0.00051EPSS

cve•added 2022/01/19 12:15 p.m.•252 views

CVE-2022-21339

4.9CVSS4.9AI score0.00167EPSS

cve•added 2022/01/19 12:15 p.m.•252 views

CVE-2022-21374

4.9CVSS4.9AI score0.00151EPSS

cve•added 2022/04/19 9:15 p.m.•251 views

CVE-2022-21412

4.9CVSS4.8AI score0.00133EPSS

cve•added 2022/01/19 12:15 p.m.•250 views

CVE-2022-21378

5.5CVSS5.4AI score0.00153EPSS

cve•added 2022/10/18 9:15 p.m.•250 views

CVE-2022-21633

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful a...

4.9CVSS4.9AI score0.00051EPSS

cve•added 2022/10/18 9:15 p.m.•250 views

CVE-2022-21635

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

6.5CVSS6.3AI score0.00133EPSS

cve•added 2022/01/19 12:15 p.m.•249 views

CVE-2022-21352

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of t...

5.9CVSS5.5AI score0.00203EPSS

Total number of security vulnerabilities107