cbcvebase.

Oracle MySQL vulnerabilities

1,330 known vulnerabilities affecting oracle/mysql.

Total CVEs
1,330
CISA KEV
0
Public exploits
50
Exploited in wild
2
Severity breakdown
CRITICAL12HIGH71MEDIUM1066LOW181

Vulnerabilities

Page 55 of 67
CVE-2010-3839P4MEDIUMCVSS 4.0v5.1v5.1.1+53 more2011-01-14
CVE-2010-3839 [MEDIUM] CVE-2010-3839: MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
nvd
CVE-2012-1756P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.232012-07-17
CVE-2012-1756 [MEDIUM] CVE-2012-1756: Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2016-0655P4MEDIUMCVSS 4.7≥ 5.6.0, ≤ 5.6.29≥ 5.7.0, ≤ 5.7.112016-04-21
CVE-2016-0655 [MEDIUM] CVE-2016-0655: Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0 Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows local users to affect availability via vectors related to InnoDB.
nvd
CVE-2013-3793P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.31≥ 5.6.0, ≤ 5.6.112013-07-17
CVE-2013-3793 [MEDIUM] CVE-2013-3793: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.
nvd
CVE-2013-3783P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.312013-07-17
CVE-2013-3783 [MEDIUM] CVE-2013-3783: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows re Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Parser.
nvd
CVE-2012-3166P4MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.63≥ 5.5.0, ≤ 5.5.252012-10-17
CVE-2012-3166 [MEDIUM] CVE-2012-3166: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2012-0485P4MEDIUMCVSS 4.0v5.1v5.1.1+80 more2012-01-18
CVE-2012-0485 [MEDIUM] CVE-2012-0485: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remot Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492.
nvd
CVE-2012-0490P4MEDIUMCVSS 4.0v5.1v5.1.1+106 more2012-01-18
CVE-2012-0490 [MEDIUM] CVE-2012-0490: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allo Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.
nvd
CVE-2016-0642P4MEDIUMCVSS 4.7≥ 5.5.0, ≤ 5.5.48≥ 5.6.0, ≤ 5.6.29+1 more2016-04-21
CVE-2016-0642 [MEDIUM] CVE-2016-0642: Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and ear Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.
nvd
CVE-2013-5894P4MEDIUMCVSS 4.0≤ 5.6.13v5.6.0+12 more2014-01-15
CVE-2013-5894 [MEDIUM] CVE-2013-5894: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows re Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2013-5881P4MEDIUMCVSS 4.0≤ 5.6.14v5.6.0+13 more2014-01-15
CVE-2013-5881 [MEDIUM] CVE-2013-5881: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows re Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.
nvd
CVE-2013-3794P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.30≥ 5.6.0, ≤ 5.6.102013-07-17
CVE-2013-3794 [MEDIUM] CVE-2013-3794: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Partition.
nvd
CVE-2012-0484P4MEDIUMCVSS 4.0v5.1v5.1.1+106 more2012-01-18
CVE-2012-0484 [MEDIUM] CVE-2012-0484: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allo Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.
nvd
CVE-2014-6520P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.382014-10-15
CVE-2014-6520 [MEDIUM] CVE-2014-6520: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.
nvd
CVE-2012-0572P4MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2012-0572 [MEDIUM] CVE-2012-0572: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2012-0578P4MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2012-0578 [MEDIUM] CVE-2012-0578: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote a Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
nvd
CVE-2013-0371P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0371 [MEDIUM] CVE-2013-0371: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote a Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability, related to MyISAM.
nvd
CVE-2013-0367P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0367 [MEDIUM] CVE-2013-0367: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote a Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Partition.
nvd
CVE-2013-0368P4MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0368 [MEDIUM] CVE-2013-0368: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote a Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2012-0487P4MEDIUMCVSS 4.0v5.5.0v5.5.1+20 more2012-01-18
CVE-2012-0487 [MEDIUM] CVE-2012-0487: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenti Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0117, CVE-2012-0486, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.
nvd
← Previous55 / 67Next →
Oracle MySQL vulnerabilities | cvebase