Lucene search

K
OracleMysql5.0.22

18 matches found

CVE
CVE
added 2009/07/13 5:30 p.m.734 views

CVE-2009-2446

Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a databas...

8.5CVSS9.4AI score0.11194EPSS
CVE
CVE
added 2009/11/30 5:30 p.m.340 views

CVE-2009-4028

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificat...

6.8CVSS5.9AI score0.01802EPSS
CVE
CVE
added 2010/06/08 12:30 a.m.247 views

CVE-2010-1850

Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.

6CVSS9.3AI score0.19713EPSS
CVE
CVE
added 2010/06/08 12:30 a.m.227 views

CVE-2010-1848

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.

6.5CVSS8.7AI score0.00282EPSS
CVE
CVE
added 2009/11/30 5:30 p.m.216 views

CVE-2008-7247

sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a (1) DATA DIRECTORY or ...

6CVSS8.9AI score0.00452EPSS
CVE
CVE
added 2010/06/08 12:30 a.m.214 views

CVE-2010-1849

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.

5CVSS8.8AI score0.02058EPSS
CVE
CVE
added 2011/01/14 7:1 p.m.207 views

CVE-2010-3833

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CR...

5CVSS5.4AI score0.07282EPSS
CVE
CVE
added 2009/11/30 5:30 p.m.203 views

CVE-2009-4019

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote aut...

4CVSS8.7AI score0.18024EPSS
CVE
CVE
added 2010/05/21 5:30 p.m.196 views

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.

3.6CVSS6.2AI score0.00452EPSS
CVE
CVE
added 2011/01/14 7:2 p.m.190 views

CVE-2010-3838

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the fun...

4CVSS5.2AI score0.00973EPSS
CVE
CVE
added 2011/01/14 7:2 p.m.179 views

CVE-2010-3836

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers.

4CVSS5.1AI score0.00808EPSS
CVE
CVE
added 2011/01/14 7:2 p.m.178 views

CVE-2010-3834

Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignme...

4CVSS5.1AI score0.00953EPSS
CVE
CVE
added 2011/01/14 7:2 p.m.172 views

CVE-2010-3837

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified i...

4CVSS5.2AI score0.00763EPSS
CVE
CVE
added 2006/08/18 8:4 p.m.69 views

CVE-2006-4226

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.

3.6CVSS7.6AI score0.00563EPSS
CVE
CVE
added 2007/12/10 9:46 p.m.63 views

CVE-2007-6304

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required numb...

5CVSS6.1AI score0.04114EPSS
CVE
CVE
added 2006/08/09 10:4 p.m.62 views

CVE-2006-4031

MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

2.1CVSS7.8AI score0.00263EPSS
CVE
CVE
added 2007/05/16 1:19 a.m.59 views

CVE-2007-2692

The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.

6CVSS6.4AI score0.00773EPSS
CVE
CVE
added 2006/07/10 9:5 p.m.55 views

CVE-2006-3486

Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overf...

2.1CVSS6.8AI score0.00102EPSS