Mysql Server Security Vulnerabilities and Issues — Page 2 of Mysql Server CVE List

Lucene search

OracleMysql Server

233 matches found

CVE•added 2023/04/18 8:15 p.m.•296 views

CVE-2023-21911

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

4.9CVSS5.2AI score0.0008EPSS

CVE•added 2024/04/16 10:15 p.m.•296 views

CVE-2024-21009

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se...

4.9CVSS4.8AI score0.00151EPSS

CVE•added 2024/04/16 10:15 p.m.•295 views

CVE-2024-20998

4.9CVSS5.8AI score0.0015EPSS

CVE•added 2024/04/16 10:15 p.m.•295 views

CVE-2024-21008

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL ...

4.4CVSS3.8AI score0.0013EPSS

CVE•added 2024/04/16 10:15 p.m.•295 views

CVE-2024-21013

4.4CVSS3.8AI score0.00115EPSS

CVE•added 2024/02/17 2:15 a.m.•294 views

CVE-2024-20982

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Se...

4.9CVSS4.5AI score0.0023EPSS

CVE•added 2024/02/17 2:15 a.m.•293 views

CVE-2024-20984

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server : Security : Firewall). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compro...

4.4CVSS4.6AI score0.00186EPSS

CVE•added 2023/04/18 8:15 p.m.•292 views

CVE-2023-21947

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Su...

4.4CVSS4.7AI score0.0008EPSS

CVE•added 2024/04/16 10:15 p.m.•291 views

CVE-2024-20993

4.9CVSS4.7AI score0.00157EPSS

CVE•added 2024/04/16 10:15 p.m.•291 views

CVE-2024-21000

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...

3.8CVSS3.6AI score0.00186EPSS

CVE•added 2024/04/16 10:15 p.m.•291 views

CVE-2024-21060

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My...

4.9CVSS5.8AI score0.00115EPSS

CVE•added 2024/07/16 11:15 p.m.•291 views

CVE-2024-21179

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Succe...

4.9CVSS5.1AI score0.00214EPSS

CVE•added 2023/04/18 8:15 p.m.•288 views

CVE-2023-21917

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS5.3AI score0.00132EPSS

CVE•added 2024/02/17 2:15 a.m.•287 views

CVE-2024-20966

4.9CVSS5.2AI score0.00218EPSS

CVE•added 2024/02/17 2:15 a.m.•287 views

CVE-2024-20970

4.9CVSS4.4AI score0.00253EPSS

CVE•added 2024/04/16 10:15 p.m.•287 views

CVE-2024-21052

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

4.9CVSS4.7AI score0.00135EPSS

CVE•added 2022/02/24 7:15 p.m.•285 views

CVE-2022-21824

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto ". The prototype pollution has...

8.2CVSS8.1AI score0.00335EPSS

CVE•added 2023/01/18 12:15 a.m.•284 views

CVE-2023-21836

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

4.9CVSS5AI score0.00106EPSS

CVE•added 2023/04/18 8:15 p.m.•284 views

CVE-2023-21953

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS5.2AI score0.0008EPSS

CVE•added 2023/04/18 8:15 p.m.•277 views

CVE-2023-21929

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

5.5CVSS5.7AI score0.00093EPSS

CVE•added 2023/04/18 8:15 p.m.•275 views

CVE-2023-21963

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.40 and prior and 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...

2.7CVSS2.8AI score0.00059EPSS

CVE•added 2023/04/18 8:15 p.m.•272 views

CVE-2023-21913

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS4.9AI score0.00157EPSS

CVE•added 2024/04/16 10:15 p.m.•268 views

CVE-2024-21053

4.9CVSS5.8AI score0.00156EPSS

CVE•added 2023/04/18 8:15 p.m.•267 views

CVE-2023-21912

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.41 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to comprom...

7.5CVSS7AI score0.0014EPSS

CVE•added 2023/04/18 8:15 p.m.•266 views

CVE-2023-21919

4.9CVSS5.2AI score0.0008EPSS

CVE•added 2021/08/05 9:15 p.m.•264 views

CVE-2021-22926

libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the CURLOPT_SSLCERT option (--cert with the command line tool).When libcurl is built to use the macOS native TLS library Secure Transport, an application can ask for the client certifica...

7.5CVSS7.2AI score0.00509EPSS

CVE•added 2024/07/16 11:15 p.m.•263 views

CVE-2024-21176

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

5.3CVSS5.3AI score0.00767EPSS

CVE•added 2025/01/21 9:15 p.m.•263 views

CVE-2025-21543

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to co...

4.9CVSS4.4AI score0.00089EPSS

CVE•added 2019/11/08 3:15 p.m.•256 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

6.5CVSS6AI score0.01412EPSS

CVE•added 2022/02/24 7:15 p.m.•255 views

CVE-2021-44531

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and

7.4CVSS7.5AI score0.00076EPSS

CVE•added 2023/04/18 8:15 p.m.•250 views

CVE-2023-21920

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS5.2AI score0.0008EPSS

CVE•added 2022/02/24 7:15 p.m.•246 views

CVE-2021-44533

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and

5.3CVSS6.3AI score0.00364EPSS

CVE•added 2022/02/24 7:15 p.m.•236 views

CVE-2021-44532

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and

5.3CVSS6.6AI score0.00132EPSS

CVE•added 2021/06/11 4:15 p.m.•227 views

CVE-2021-22901

curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection. A malicious server can use this in rare unfortunate circumstances to potentially reach remote code execution in the client. Wh...

8.1CVSS8.2AI score0.00344EPSS

CVE•added 2022/04/19 9:15 p.m.•214 views

CVE-2022-21423

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

4CVSS3.3AI score0.00092EPSS

CVE•added 2022/06/02 2:15 p.m.•201 views

CVE-2022-27778

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when --no-clobber is used together with --remove-on-error.

8.1CVSS7.8AI score0.0046EPSS

CVE•added 2019/07/02 7:15 p.m.•200 views

CVE-2019-5443

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl

7.8CVSS7.5AI score0.00953EPSS

CVE•added 2025/04/15 9:15 p.m.•194 views

CVE-2025-21588

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

4.9CVSS4.7AI score0.00036EPSS

CVE•added 2025/04/15 9:16 p.m.•181 views

CVE-2025-30715

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to comp...

4.9CVSS4.7AI score0.00039EPSS

CVE•added 2025/01/21 9:15 p.m.•175 views

CVE-2025-21494

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure wh...

4.1CVSS3.4AI score0.00019EPSS

CVE•added 2025/04/15 9:15 p.m.•175 views

CVE-2025-30704

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to co...

4.4CVSS4.1AI score0.0003EPSS

CVE•added 2023/07/18 9:15 p.m.•173 views

CVE-2023-22053

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Se...

5.9CVSS5.8AI score0.00105EPSS

CVE•added 2025/04/15 9:15 p.m.•173 views

CVE-2025-30681

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise M...

2.7CVSS2.3AI score0.00039EPSS

CVE•added 2021/06/11 4:15 p.m.•168 views

CVE-2021-22897

curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the Schannel TLS library. The selected cipher set was stored in a single "static" variable in the library, which has the surprising...

5.3CVSS5.5AI score0.01081EPSS

CVE•added 2022/04/19 9:15 p.m.•167 views

CVE-2022-21440

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

5.5CVSS5.4AI score0.00132EPSS

CVE•added 2025/04/15 9:15 p.m.•167 views

CVE-2025-21583

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.4.0 and 9.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

4.9CVSS4.4AI score0.00036EPSS

CVE•added 2022/04/19 9:15 p.m.•166 views

CVE-2022-21459

5.5CVSS5.4AI score0.00132EPSS

CVE•added 2025/01/21 9:15 p.m.•163 views

CVE-2025-21529

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoc...

4.9CVSS4.4AI score0.00089EPSS

CVE•added 2025/04/15 9:15 p.m.•162 views

CVE-2025-30683

4.9CVSS4.4AI score0.00036EPSS

CVE•added 2025/04/15 9:16 p.m.•161 views

CVE-2025-30721

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to ...

4CVSS3AI score0.00012EPSS

Total number of security vulnerabilities233