Oracle MySQL vulnerabilities
1,330 known vulnerabilities affecting oracle/mysql.
Total CVEs
1,330
CISA KEV
0
Public exploits
50
Exploited in wild
2
Severity breakdown
CRITICAL12HIGH71MEDIUM1066LOW181
Vulnerabilities
Page 11 of 67
CVE-2016-3486P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-07-21
CVE-2016-3486 [MEDIUM] CVE-2016-3486: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote au
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.
nvd
CVE-2016-3501P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-07-21
CVE-2016-3501 [MEDIUM] CVE-2016-3501: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote au
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
nvd
CVE-2014-2436P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.36≥ 5.6.0, ≤ 5.6.162014-04-16
CVE-2014-2436 [MEDIUM] CVE-2014-2436: Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows re
Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.
nvd
CVE-2016-5612P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.50≥ 5.6.0, ≤ 5.6.31+1 more2016-10-25
CVE-2016-5612 [MEDIUM] CVE-2016-5612: Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and ear
Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
nvd
CVE-2016-3518P4MEDIUMCVSS 6.5≤ 5.7.122016-07-21
CVE-2016-3518 [MEDIUM] CVE-2016-3518: Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to af
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.
nvd
CVE-2015-2568P4MEDIUMCVSS 5.0≥ 5.5.0, ≤ 5.5.41≥ 5.6.0, ≤ 5.6.222015-04-16
CVE-2015-2568 [MEDIUM] CVE-2015-2568: Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.
nvd
CVE-2002-1376P4HIGHCVSS 7.5v3.22.26v3.22.27+45 more2002-12-23
CVE-2002-1376 [HIGH] CVE-2002-1376: libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify le
libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.
nvd
CVE-2019-2434P4MEDIUMCVSS 6.5≥ 5.7.0, ≤ 5.7.24≥ 8.0.0, ≤ 8.0.132019-01-16
CVE-2019-2434 [MEDIUM] CVE-2019-2434: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supporte
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in
nvd
CVE-2018-0735P4MEDIUMCVSS 5.9≤ 5.6.42≥ 5.7.0, ≤ 5.7.24+1 more2018-10-29
CVE-2018-0735 [MEDIUM] CWE-327 CVE-2018-0735: The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attac
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
nvd
CVE-2018-2573P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.38≥ 5.7.0, ≤ 5.7.202018-01-18
CVE-2018-2573 [MEDIUM] CVE-2018-2573: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported v
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in un
nvd
CVE-2016-0502P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.31≥ 5.6.0, ≤ 5.6.112016-01-21
CVE-2016-0502 [MEDIUM] CVE-2016-0502: Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote au
Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.
nvd
CVE-2017-3273P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.34≥ 5.7.0, ≤ 5.7.162017-01-27
CVE-2017-3273 [MEDIUM] CWE-20 CVE-2017-3273: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported v
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can r
nvd
CVE-2015-2617P4MEDIUMCVSS 6.5≤ 5.6.242015-07-16
CVE-2015-2617 [MEDIUM] CVE-2015-2617: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated user
Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Partition.
nvd
CVE-2019-2482P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.42≥ 5.7.0, ≤ 5.7.24+1 more2019-01-16
CVE-2019-2482 [MEDIUM] CVE-2019-2482: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported ve
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability
nvd
CVE-2019-2966P4MEDIUMCVSS 6.5≥ 8.0.0, ≤ 8.0.172019-10-16
CVE-2019-2966 [MEDIUM] CVE-2019-2966: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to
nvd
CVE-2019-2967P4MEDIUMCVSS 6.5≥ 8.0.0, ≤ 8.0.172019-10-16
CVE-2019-2967 [MEDIUM] CVE-2019-2967: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to
nvd
CVE-2017-3257P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.34≥ 5.7.0, ≤ 5.7.162017-01-27
CVE-2017-3257 [MEDIUM] CWE-269 CVE-2017-3257: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supporte
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.34 and earlier5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can re
nvd
CVE-2018-2761P4MEDIUMCVSS 5.9≥ 5.5.0, ≤ 5.5.59≥ 5.6.0, ≤ 5.6.39+1 more2018-04-19
CVE-2018-2761 [MEDIUM] CVE-2018-2761: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Support
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulne
nvd
CVE-2018-3145P4MEDIUMCVSS 6.5≥ 8.0.0, ≤ 8.0.122018-10-17
CVE-2018-3145 [MEDIUM] CVE-2018-3145: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supporte
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability
nvd
CVE-2019-2834P4MEDIUMCVSS 6.5≥ 8.0.0, ≤ 8.0.162019-07-23
CVE-2019-2834 [MEDIUM] CVE-2019-2834: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Suppo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized abil
nvd