Mysql Security Vulnerabilities and Issues — Page 20 of Mysql CVE List

Lucene search

OracleMysql

1325 matches found

CVE•added 2015/10/21 9:59 p.m.•93 views

CVE-2015-4730

Unspecified vulnerability in Oracle MySQL 5.6.20 and earlier allows remote authenticated users to affect availability via unknown vectors related to Types.

4CVSS5AI score0.00392EPSS

CVE•added 2017/10/19 5:29 p.m.•93 views

CVE-2017-10279

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

4.9CVSS4.8AI score0.00439EPSS

CVE•added 2017/04/24 7:59 p.m.•93 views

CVE-2017-3454

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.7.17 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

5.5CVSS5.3AI score0.00307EPSS

CVE•added 2017/08/08 3:29 p.m.•93 views

CVE-2017-3633

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Memcached to compromise MySQL...

6.5CVSS5.6AI score0.0111EPSS

CVE•added 2012/05/03 10:55 p.m.•92 views

CVE-2012-1688

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.61 and earlier, and 5.5.21 and earlier, allows remote authenticated users to affect availability, related to Server DML.

4CVSS4.4AI score0.00607EPSS

CVE•added 2014/07/17 5:10 a.m.•92 views

CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

4CVSS6.1AI score0.00502EPSS

CVE•added 2015/10/21 9:59 p.m.•92 views

CVE-2015-4807

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier, when running on Windows, allows remote authenticated users to affect availability via unknown vectors related to Server : Query Cache.

3.5CVSS5AI score0.00616EPSS

CVE•added 2017/10/19 5:29 p.m.•92 views

CVE-2017-10311

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful at...

4.9CVSS4.7AI score0.00876EPSS

CVE•added 2017/04/24 7:59 p.m.•92 views

CVE-2017-3450

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to comprom...

7.5CVSS6.7AI score0.01277EPSS

CVE•added 2024/10/15 8:15 p.m.•92 views

CVE-2024-21198

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...

4.9CVSS4.8AI score0.00161EPSS

CVE•added 2024/10/15 8:15 p.m.•92 views

CVE-2024-21200

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful att...

4.9CVSS5AI score0.00166EPSS

CVE•added 2008/09/18 3:4 p.m.•91 views

CVE-2008-4097

MySQL 5.0.51a allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are associated with symlinks within pathnames for subdirectories of the MySQL home data directory, which are followed ...

4.6CVSS6.3AI score0.00719EPSS

CVE•added 2012/10/17 12:55 a.m.•91 views

CVE-2012-3197

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication.

3.5CVSS4.2AI score0.00316EPSS

CVE•added 2013/04/17 12:19 p.m.•91 views

CVE-2013-1521

Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Server Locking.

6.5CVSS4.3AI score0.00465EPSS

CVE•added 2013/04/17 12:19 p.m.•91 views

CVE-2013-1544

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.

4CVSS4.3AI score0.00952EPSS

CVE•added 2018/04/19 2:29 a.m.•91 views

CVE-2018-2758

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to c...

6.5CVSS5.6AI score0.00765EPSS

CVE•added 2018/04/19 2:29 a.m.•91 views

CVE-2018-2812

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

5.5CVSS5.3AI score0.00464EPSS

CVE•added 2012/01/18 10:55 p.m.•90 views

CVE-2012-0487

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

4CVSS4.5AI score0.00765EPSS

CVE•added 2014/04/16 2:55 a.m.•90 views

CVE-2014-2438

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

3.5CVSS3.9AI score0.01187EPSS

CVE•added 2017/10/19 5:29 p.m.•90 views

CVE-2017-10283

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to...

5.3CVSS4.7AI score0.00498EPSS

CVE•added 2017/08/08 3:29 p.m.•90 views

CVE-2017-3529

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful a...

5.3CVSS4.8AI score0.00426EPSS

CVE•added 2024/10/15 8:15 p.m.•90 views

CVE-2024-21244

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...

2.2CVSS1.9AI score0.0008EPSS

CVE•added 2012/07/17 10:55 p.m.•89 views

CVE-2012-1734

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

4CVSS4.3AI score0.00887EPSS

CVE•added 2012/10/17 12:55 a.m.•89 views

CVE-2012-3173

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.

4CVSS4.2AI score0.00536EPSS

CVE•added 2013/01/17 1:55 a.m.•89 views

CVE-2013-0368

Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

4CVSS4.3AI score0.00713EPSS

CVE•added 2013/04/17 12:14 p.m.•89 views

CVE-2013-1511

Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

3.5CVSS4.3AI score0.00567EPSS

CVE•added 2014/10/15 10:55 p.m.•89 views

CVE-2014-6495

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.

4.3CVSS6.3AI score0.00598EPSS

CVE•added 2015/10/21 11:59 p.m.•89 views

CVE-2015-4890

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Replication.

3.5CVSS5AI score0.00486EPSS

CVE•added 2017/01/27 10:59 p.m.•89 views

CVE-2016-8318

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

6.8CVSS6.2AI score0.00264EPSS

CVE•added 2017/10/19 5:29 p.m.•89 views

CVE-2017-10296

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful at...

4.9CVSS4AI score0.00876EPSS

CVE•added 2017/10/19 5:29 p.m.•89 views

CVE-2017-10314

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

4.9CVSS4.5AI score0.00394EPSS

CVE•added 2017/08/08 3:29 p.m.•89 views

CVE-2017-3650

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attack...

4.3CVSS2.9AI score0.00868EPSS

CVE•added 2019/07/23 11:15 p.m.•89 views

CVE-2019-2731

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

5.5CVSS4.5AI score0.00502EPSS

CVE•added 2024/10/15 8:15 p.m.•89 views

CVE-2024-21196

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to comp...

6.5CVSS6.3AI score0.0018EPSS

CVE•added 2024/10/15 8:15 p.m.•89 views

CVE-2024-21207

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.38 and prior, 8.4.1 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise My...

4.9CVSS4.8AI score0.00166EPSS

CVE•added 2005/04/14 4:0 a.m.•88 views

CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files.

4.6CVSS5.8AI score0.00051EPSS

CVE•added 2006/05/05 12:46 p.m.•88 views

CVE-2006-1518

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

6.5CVSS7.5AI score0.35581EPSS

CVE•added 2013/04/17 5:55 p.m.•88 views

CVE-2013-2391

Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.

3CVSS4.2AI score0.00154EPSS

CVE•added 2013/04/17 5:55 p.m.•88 views

CVE-2013-2392

4CVSS4.3AI score0.00622EPSS

CVE•added 2014/10/15 3:55 p.m.•88 views

CVE-2014-6463

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

3.3CVSS6.1AI score0.00538EPSS

CVE•added 2014/10/15 3:55 p.m.•88 views

CVE-2014-6478

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.

4.3CVSS6.3AI score0.00345EPSS

CVE•added 2014/10/15 10:55 p.m.•88 views

CVE-2014-6507

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

4.3CVSS5.5AI score0.01121EPSS

CVE•added 2016/01/21 3:0 a.m.•88 views

CVE-2016-0503

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.

4CVSS5.5AI score0.01724EPSS

CVE•added 2017/10/19 5:29 p.m.•88 views

CVE-2017-10286

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

4.4CVSS4.3AI score0.00231EPSS

CVE•added 2017/01/27 10:59 p.m.•88 views

CVE-2017-3320

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.7.16 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serv...

3.5CVSS2.6AI score0.00213EPSS

CVE•added 2017/04/24 7:59 p.m.•88 views

CVE-2017-3331

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The supported version that is affected is 5.7.11 to 5.7.17. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful at...

6.5CVSS6.1AI score0.00488EPSS

CVE•added 2018/04/19 2:29 a.m.•88 views

CVE-2018-2816

4.9CVSS5AI score0.00439EPSS

CVE•added 2012/01/18 10:55 p.m.•87 views

CVE-2012-0492

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.

2.1CVSS4.5AI score0.00716EPSS

CVE•added 2013/04/17 12:19 p.m.•87 views

CVE-2013-1532

4CVSS4.3AI score0.01053EPSS

CVE•added 2015/10/21 9:59 p.m.•87 views

CVE-2015-4800

Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.

4CVSS5AI score0.00519EPSS

Total number of security vulnerabilities1325