Mysql Security Vulnerabilities and Issues — Mysql CVE List

Lucene search

OracleMysql

64 matches found

CVE•added 2014/01/31 11:55 p.m.•175 views

CVE-2014-0001

Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.

7.5CVSS7.2AI score0.20195EPSS

CVE•added 2014/01/15 4:8 p.m.•149 views

CVE-2013-5908

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling.

2.6CVSS6.8AI score0.0587EPSS

CVE•added 2014/10/15 10:55 p.m.•143 views

CVE-2014-6500

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491.

7.5CVSS6.4AI score0.02121EPSS

CVE•added 2014/01/15 4:8 p.m.•141 views

CVE-2014-0412

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

4CVSS7.6AI score0.00493EPSS

CVE•added 2014/10/15 10:55 p.m.•141 views

CVE-2014-6491

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500.

7.5CVSS6.4AI score0.02121EPSS

CVE•added 2014/01/15 4:8 p.m.•129 views

CVE-2014-0393

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect integrity via unknown vectors related to InnoDB.

3.3CVSS7.5AI score0.00449EPSS

CVE•added 2014/07/17 11:17 a.m.•127 views

CVE-2014-4258

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

6.5CVSS6.1AI score0.00733EPSS

CVE•added 2014/01/15 4:8 p.m.•126 views

CVE-2014-0437

3.5CVSS7.6AI score0.00461EPSS

CVE•added 2014/01/15 4:8 p.m.•125 views

CVE-2014-0402

4CVSS7.6AI score0.00501EPSS

CVE•added 2014/10/15 3:55 p.m.•125 views

CVE-2014-4274

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

4.1CVSS6.2AI score0.00076EPSS

CVE•added 2014/01/15 4:8 p.m.•117 views

CVE-2014-0386

4CVSS7.6AI score0.00501EPSS

CVE•added 2014/01/15 4:8 p.m.•117 views

CVE-2014-0401

4CVSS7.8AI score0.00501EPSS

CVE•added 2014/10/15 3:55 p.m.•117 views

CVE-2014-6469

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

6.8CVSS5.6AI score0.01291EPSS

CVE•added 2014/04/16 12:55 a.m.•116 views

CVE-2014-0384

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

4CVSS3.8AI score0.01029EPSS

CVE•added 2014/04/16 2:55 a.m.•113 views

CVE-2014-2440

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

5.1CVSS4.3AI score0.00819EPSS

CVE•added 2014/10/15 10:55 p.m.•113 views

CVE-2014-6559

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.

4.3CVSS5.6AI score0.01256EPSS

CVE•added 2014/07/17 5:10 a.m.•112 views

CVE-2014-2494

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

4CVSS6.1AI score0.00555EPSS

CVE•added 2014/10/15 10:55 p.m.•112 views

CVE-2014-6520

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.

4CVSS6.2AI score0.00844EPSS

CVE•added 2014/01/15 4:8 p.m.•111 views

CVE-2014-0420

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.

2.8CVSS5AI score0.00806EPSS

CVE•added 2014/07/17 11:17 a.m.•110 views

CVE-2014-4260

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

5.5CVSS6AI score0.00558EPSS

CVE•added 2014/04/16 2:55 a.m.•109 views

CVE-2014-2431

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

2.6CVSS4.2AI score0.01132EPSS

CVE•added 2014/04/16 2:55 a.m.•108 views

CVE-2014-2419

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

4CVSS3.9AI score0.01361EPSS

CVE•added 2014/04/16 2:55 a.m.•108 views

CVE-2014-2436

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.

6.5CVSS3.9AI score0.00825EPSS

CVE•added 2014/10/15 10:55 p.m.•107 views

CVE-2014-6494

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496.

4.3CVSS6.4AI score0.01871EPSS

CVE•added 2014/10/15 10:55 p.m.•106 views

CVE-2014-6530

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP.

6.5CVSS6.2AI score0.00893EPSS

CVE•added 2014/10/15 10:55 p.m.•105 views

CVE-2014-6551

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.

2.1CVSS6.1AI score0.00164EPSS

CVE•added 2014/04/16 2:55 a.m.•104 views

CVE-2014-2432

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.

2.8CVSS4.2AI score0.01404EPSS

CVE•added 2014/10/15 10:55 p.m.•103 views

CVE-2014-6496

4.3CVSS6.4AI score0.01871EPSS

CVE•added 2014/10/15 10:55 p.m.•103 views

CVE-2014-6555

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

6.5CVSS6.1AI score0.00689EPSS

CVE•added 2014/04/16 2:55 a.m.•101 views

CVE-2014-2430

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

3.5CVSS3.9AI score0.00901EPSS

CVE•added 2014/10/15 10:55 p.m.•101 views

CVE-2014-6505

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

4CVSS6.2AI score0.00844EPSS

CVE•added 2014/10/15 3:55 p.m.•100 views

CVE-2014-4287

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

4CVSS6.2AI score0.00844EPSS

CVE•added 2014/01/15 4:8 p.m.•98 views

CVE-2013-5891

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

4CVSS5AI score0.00535EPSS

CVE•added 2014/10/15 3:55 p.m.•98 views

CVE-2014-6464

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

4CVSS5.6AI score0.00997EPSS

CVE•added 2014/07/17 11:17 a.m.•97 views

CVE-2014-4243

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

2.8CVSS5AI score0.01044EPSS

CVE•added 2014/10/15 3:55 p.m.•96 views

CVE-2014-6484

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

4CVSS6.2AI score0.00844EPSS

CVE•added 2014/04/16 2:55 a.m.•95 views

CVE-2014-2444

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to InnoDB.

6.5CVSS5.2AI score0.00311EPSS

CVE•added 2014/07/17 5:10 a.m.•94 views

CVE-2014-4207

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

4CVSS6.1AI score0.00452EPSS

CVE•added 2014/04/16 2:55 a.m.•92 views

CVE-2014-2438

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

3.5CVSS3.9AI score0.01187EPSS

CVE•added 2014/10/15 3:55 p.m.•92 views

CVE-2014-6463

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

3.3CVSS6.1AI score0.00538EPSS

CVE•added 2014/10/15 10:55 p.m.•91 views

CVE-2014-6495

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.

4.3CVSS6.3AI score0.00747EPSS

CVE•added 2014/10/15 3:55 p.m.•90 views

CVE-2014-6478

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.

4.3CVSS6.3AI score0.00491EPSS

CVE•added 2014/10/15 10:55 p.m.•90 views

CVE-2014-6507

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

4.3CVSS5.5AI score0.0083EPSS

CVE•added 2014/01/15 4:8 p.m.•73 views

CVE-2014-0431

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881.

3.5CVSS5.2AI score0.00661EPSS

CVE•added 2014/04/16 2:55 a.m.•73 views

CVE-2014-2442

Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to MyISAM.

4CVSS5.2AI score0.00294EPSS

CVE•added 2014/10/15 10:55 p.m.•71 views

CVE-2014-6564

Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH DML.

4CVSS6.1AI score0.00615EPSS

CVE•added 2014/04/16 2:55 a.m.•69 views

CVE-2014-2435

Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

4CVSS5.2AI score0.00332EPSS

CVE•added 2014/07/17 11:17 a.m.•68 views

CVE-2014-4233

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SRREP.

4CVSS5.1AI score0.00803EPSS

CVE•added 2014/07/17 11:17 a.m.•68 views

CVE-2014-4238

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

4CVSS5.1AI score0.00803EPSS

CVE•added 2014/07/17 5:10 a.m.•67 views

CVE-2014-2484

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRFTS.

6.5CVSS5.1AI score0.00834EPSS

Total number of security vulnerabilities64