Mysql Security Vulnerabilities and Issues — Page 25 of Mysql CVE List

Lucene search

OracleMysql

1325 matches found

CVE•added 2004/11/03 5:0 a.m.•67 views

CVE-2004-0836

Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

10CVSS7.5AI score0.02726EPSS

CVE•added 2006/08/09 10:4 p.m.•67 views

CVE-2006-4031

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

2.1CVSS7.8AI score0.00263EPSS

CVE•added 2012/10/16 11:55 p.m.•67 views

CVE-2012-3147

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client.

6.4CVSS5.7AI score0.00816EPSS

CVE•added 2012/10/16 11:55 p.m.•67 views

CVE-2012-3156

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.

3.5CVSS5.2AI score0.00427EPSS

CVE•added 2013/04/17 12:19 p.m.•67 views

CVE-2013-1566

Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

3.5CVSS4.4AI score0.00427EPSS

CVE•added 2014/01/15 4:8 p.m.•67 views

CVE-2013-5894

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

4CVSS5.1AI score0.00634EPSS

CVE•added 2014/04/16 2:55 a.m.•67 views

CVE-2014-2434

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to DML.

4CVSS5.2AI score0.00332EPSS

CVE•added 2014/04/16 2:55 a.m.•67 views

CVE-2014-2451

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Privileges.

3.5CVSS5.2AI score0.00275EPSS

CVE•added 2014/07/17 5:10 a.m.•67 views

CVE-2014-4214

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SRSP.

3.3CVSS5.1AI score0.00858EPSS

CVE•added 2014/10/15 3:55 p.m.•67 views

CVE-2014-6474

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED.

3.5CVSS6.1AI score0.00236EPSS

CVE•added 2015/04/16 4:59 p.m.•67 views

CVE-2015-0423

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

4CVSS7.5AI score0.00924EPSS

CVE•added 2016/01/21 3:2 a.m.•67 views

CVE-2016-0595

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.

4CVSS5.5AI score0.00722EPSS

CVE•added 2016/01/21 3:2 a.m.•67 views

CVE-2016-0605

Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors.

2.1CVSS5.6AI score0.00686EPSS

CVE•added 2016/07/21 10:14 a.m.•67 views

CVE-2016-5441

Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Replication.

4.9CVSS5.2AI score0.00633EPSS

CVE•added 2018/04/19 2:29 a.m.•67 views

CVE-2018-2780

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

6.5CVSS5.6AI score0.00571EPSS

CVE•added 2005/01/10 5:0 a.m.•66 views

CVE-2004-0956

MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.

5CVSS6.1AI score0.01048EPSS

CVE•added 2005/02/09 5:0 a.m.•66 views

CVE-2004-0957

Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

6.8CVSS5.9AI score0.0048EPSS

CVE•added 2013/07/17 1:41 p.m.•66 views

CVE-2013-3798

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect integrity and availability via unknown vectors related to MemCached.

5.8CVSS5.4AI score0.00657EPSS

CVE•added 2014/01/15 4:11 p.m.•66 views

CVE-2013-5860

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

6.8CVSS5.1AI score0.01019EPSS

CVE•added 2014/01/15 4:11 p.m.•66 views

CVE-2013-5882

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures.

6.8CVSS5AI score0.01019EPSS

CVE•added 2014/01/15 4:8 p.m.•66 views

CVE-2014-0430

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

2.8CVSS5.1AI score0.00706EPSS

CVE•added 2015/04/16 4:59 p.m.•66 views

CVE-2015-0503

Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.

4CVSS5.2AI score0.00392EPSS

CVE•added 2016/10/25 2:29 p.m.•66 views

CVE-2016-3495

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.

6.8CVSS4.5AI score0.00342EPSS

CVE•added 2004/05/04 4:0 a.m.•65 views

CVE-2004-0381

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

2.1CVSS5.8AI score0.00099EPSS

CVE•added 2004/06/01 4:0 a.m.•65 views

CVE-2004-0388

The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.

2.1CVSS5.9AI score0.00083EPSS

CVE•added 2011/01/14 7:2 p.m.•65 views

CVE-2010-3839

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.

4CVSS5.8AI score0.00882EPSS

CVE•added 2016/10/25 2:31 p.m.•65 views

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached.

4.9CVSS4.5AI score0.00374EPSS

CVE•added 2016/10/25 2:32 p.m.•65 views

CVE-2016-8290

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-5633.

4.4CVSS4.3AI score0.00432EPSS

CVE•added 2005/08/16 4:0 a.m.•64 views

CVE-2005-2558

Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long function_name field.

4.6CVSS7.3AI score0.05071EPSS

CVE•added 2007/12/10 9:46 p.m.•64 views

CVE-2007-6304

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required numb...

5CVSS6.1AI score0.04114EPSS

CVE•added 2013/04/17 5:55 p.m.•64 views

CVE-2013-2395

Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language, a different vulnerability than CVE-2013-1567.

6.8CVSS4.4AI score0.00486EPSS

CVE•added 2013/07/17 1:41 p.m.•64 views

CVE-2013-3795

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.

4CVSS5.1AI score0.00717EPSS

CVE•added 2015/04/16 4:59 p.m.•64 views

CVE-2015-0438

Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Partition.

4CVSS5.2AI score0.00727EPSS

CVE•added 2016/04/21 10:59 a.m.•64 views

CVE-2016-0658

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer.

5.5CVSS4.7AI score0.00134EPSS

CVE•added 2016/10/25 2:31 p.m.•64 views

CVE-2016-5609

Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

6.5CVSS5.5AI score0.01181EPSS

CVE•added 2016/10/25 2:31 p.m.•64 views

CVE-2016-5632

Unspecified vulnerability in Oracle MySQL 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Optimizer.

4.9CVSS5AI score0.00374EPSS

CVE•added 2016/10/25 2:31 p.m.•64 views

CVE-2016-5634

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to RBR.

4.9CVSS4.5AI score0.00374EPSS

CVE•added 2006/08/18 8:4 p.m.•63 views

CVE-2006-4227

MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.

6.5CVSS6.2AI score0.11296EPSS

CVE•added 2007/05/16 1:19 a.m.•63 views

CVE-2007-2692

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

6CVSS6.4AI score0.00773EPSS

CVE•added 2012/05/03 10:55 p.m.•63 views

CVE-2012-1696

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

4CVSS4.2AI score0.00759EPSS

CVE•added 2013/04/17 5:55 p.m.•63 views

CVE-2013-1570

Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote attackers to affect availability via unknown vectors related to MemCached.

5CVSS4.6AI score0.00666EPSS

CVE•added 2013/04/17 5:55 p.m.•63 views

CVE-2013-2381

Unspecified vulnerability in Oracle MySQL 5.6.10 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server Privileges.

3.5CVSS4.3AI score0.00211EPSS

CVE•added 2013/07/17 1:41 p.m.•63 views

CVE-2013-3807

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Server Privileges.

4CVSS5.3AI score0.00405EPSS

CVE•added 2016/01/21 3:2 a.m.•63 views

CVE-2016-0594

Unspecified vulnerability in Oracle MySQL 5.6.21 and earlier allows remote authenticated users to affect availability via vectors related to DML.

4.3CVSS5.4AI score0.00584EPSS

CVE•added 2012/01/18 10:55 p.m.•62 views

CVE-2012-0117

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

3.5CVSS4.5AI score0.00765EPSS

CVE•added 2012/01/18 10:55 p.m.•62 views

CVE-2012-0486

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

5CVSS4.5AI score0.00765EPSS

CVE•added 2014/01/15 4:11 p.m.•62 views

CVE-2013-5881

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.

4CVSS5.2AI score0.00661EPSS

CVE•added 2014/10/15 10:55 p.m.•62 views

CVE-2014-6489

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability via vectors related to SERVER:SP.

5.5CVSS6AI score0.00597EPSS

CVE•added 2016/07/21 10:14 a.m.•62 views

CVE-2016-5436

Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB.

4.9CVSS5.2AI score0.00805EPSS

CVE•added 2016/10/25 2:32 p.m.•62 views

CVE-2016-8289

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect integrity and availability via vectors related to Server: InnoDB.

4.7CVSS4AI score0.0012EPSS

Total number of security vulnerabilities1325