Oracle MySQL vulnerabilities
1,330 known vulnerabilities affecting oracle/mysql.
Total CVEs
1,330
CISA KEV
0
Public exploits
50
Exploited in wild
2
Severity breakdown
CRITICAL12HIGH71MEDIUM1066LOW181
Vulnerabilities
Page 23 of 67
CVE-2021-35624P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.35≥ 8.0.0, ≤ 8.0.262021-10-20
CVE-2021-35624 [MEDIUM] CVE-2021-35624: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability c
nvd
CVE-2021-2226P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.33≥ 8.0.0, ≤ 8.0.232021-04-22
CVE-2021-2226 [MEDIUM] CVE-2021-2226: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). S
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can r
nvd
CVE-2022-21316P4MEDIUMCVSS 6.3≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21316 [MEDIUM] CVE-2022-21316: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Clust
nvd
CVE-2021-22570P4MEDIUMCVSS 5.5≤ 8.0.282022-01-26
CVE-2021-22570 [MEDIUM] CWE-476 CVE-2021-22570: Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly,
Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to version 3.15.0 or greater.
nvd
CVE-2013-3801P4MEDIUMCVSS 5.0≥ 5.5.0, ≤ 5.5.30≥ 5.6.0, ≤ 5.6.102013-07-17
CVE-2013-3801 [MEDIUM] CVE-2013-3801: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.1
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Options.
nvd
CVE-2010-1849P4MEDIUMCVSS 5.0v5.0.0v5.0.3+60 more2010-06-08
CVE-2010-1849 [MEDIUM] CVE-2010-1849: The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 a
The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.
nvd
CVE-2018-3278P4MEDIUMCVSS 4.9≥ 5.6.0, ≤ 5.6.41≥ 5.7.0, ≤ 5.7.23+1 more2018-10-17
CVE-2018-3278 [MEDIUM] CVE-2018-3278: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported v
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerabili
nvd
CVE-2018-3276P4MEDIUMCVSS 4.9≥ 5.6.0, ≤ 5.6.41≥ 5.7.0, ≤ 5.7.23+1 more2018-10-17
CVE-2018-3276 [MEDIUM] CVE-2018-3276: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Suppo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulne
nvd
CVE-2019-2510P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.24≥ 8.0.0, ≤ 8.0.132019-01-16
CVE-2019-2510 [MEDIUM] CVE-2019-2510: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versio
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauth
nvd
CVE-2018-3161P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.23≥ 8.0.0, ≤ 8.0.122018-10-17
CVE-2018-3161 [MEDIUM] CVE-2018-3161: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Suppo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can resul
nvd
CVE-2018-3077P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.22≥ 8.0.0, ≤ 8.0.112018-07-18
CVE-2018-3077 [MEDIUM] CVE-2018-3077: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported v
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in u
nvd
CVE-2018-3054P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.22≥ 8.0.0, ≤ 8.0.112018-07-18
CVE-2018-3054 [MEDIUM] CVE-2018-3054: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported v
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in u
nvd
CVE-2021-2478P4MEDIUMCVSS 4.9≥ 8.0, ≤ 8.0.262021-10-20
CVE-2021-2478 [MEDIUM] CVE-2021-2478: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versio
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cau
nvd
CVE-2010-3833P4MEDIUMCVSS 5.0v5.1v5.1.1+93 more2011-01-14
CVE-2010-3833 [MEDIUM] CWE-399 CVE-2010-3833: MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type er
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ... SELECT."
nvd
CVE-2018-3162P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.23≥ 8.0.0, ≤ 8.0.122018-10-17
CVE-2018-3162 [MEDIUM] CVE-2018-3162: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versio
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauth
nvd
CVE-2021-2352P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.252021-07-21
CVE-2021-2352 [MEDIUM] CVE-2021-2352: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versio
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cau
nvd
CVE-2018-3063P4MEDIUMCVSS 4.9≥ 5.5.0, ≤ 5.5.602018-07-18
CVE-2018-3063 [MEDIUM] CVE-2018-3063: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privile
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.5.60 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unaut
nvd
CVE-2016-5628P4MEDIUMCVSS 4.9≤ 5.7.132016-10-25
CVE-2016-5628 [MEDIUM] CVE-2016-5628: Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: DML.
nvd
CVE-2018-2766P4MEDIUMCVSS 4.9≥ 5.6.0, ≤ 5.6.39≥ 5.7.0, ≤ 5.7.212018-04-19
CVE-2018-2766 [MEDIUM] CVE-2018-2766: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versio
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauth
nvd
CVE-2020-2812P4MEDIUMCVSS 4.9≥ 5.6.0, ≤ 5.6.47≥ 5.7.0, ≤ 5.7.29+1 more2020-04-15
CVE-2020-2812 [MEDIUM] CVE-2020-2812: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Sup
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vul
nvd