Oracle MySQL vulnerabilities

1,328 known vulnerabilities affecting oracle/mysql.

Total CVEs
1,328
CISA KEV
0
Public exploits
50
Exploited in wild
0
Severity breakdown
CRITICAL12HIGH71MEDIUM1064LOW181

Vulnerabilities

Page 59 of 67
CVE-2013-0368MEDIUMCVSS 4.0≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0368 [MEDIUM] CVE-2013-0368: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote a Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2012-1705MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2012-1705 [MEDIUM] CVE-2012-1705: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
nvd
CVE-2013-0384MEDIUMCVSS 6.8≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0384 [MEDIUM] CVE-2013-0384: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Information Schema.
nvd
CVE-2013-0383MEDIUMCVSS 4.3≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0383 [MEDIUM] CVE-2013-0383: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote attackers to affect availability via unknown vectors related to Server Locking.
nvd
CVE-2013-0375MEDIUMCVSS 5.4≥ 5.1.0, ≤ 5.1.662013-01-17
CVE-2013-0375 [MEDIUM] CVE-2013-0375: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Server Replication.
nvd
CVE-2012-0572MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2012-0572 [MEDIUM] CVE-2012-0572: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2013-0389MEDIUMCVSS 6.8≥ 5.1.0, ≤ 5.1.66≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2013-0389 [MEDIUM] CVE-2013-0389: Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
nvd
CVE-2012-5096LOWCVSS 3.5≥ 5.5.0, ≤ 5.5.282013-01-17
CVE-2012-5096 [LOW] CVE-2012-5096: Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote a Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users with Server Privileges to affect availability via unknown vectors.
nvd
CVE-2012-0882HIGHCVSS 7.5v5.5.0v5.5.1+79 more2012-12-21
CVE-2012-0882 [HIGH] CVE-2012-0882: Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of 20120224, this disclosure has no actionable information. However, because the module autho
nvd
CVE-2012-5615MEDIUMCVSS 5.0PoCv5.5.192012-12-03
CVE-2012-5615 [MEDIUM] CWE-200 CVE-2012-5615: Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, an Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
nvd
CVE-2012-5612MEDIUMCVSS 6.5PoC≥ 5.5.0, ≤ 5.5.282012-12-03
CVE-2012-5612 [MEDIUM] CWE-787 CVE-2012-5612: Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5 Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (
nvd
CVE-2012-5613MEDIUMCVSS 6.0PoCv5.5.192012-12-03
CVE-2012-5613 [MEDIUM] CWE-16 CVE-2012-5613: MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when conf MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this i
nvd
CVE-2012-5611MEDIUMCVSS 6.5PoCv5.1.53v5.5.192012-12-03
CVE-2012-5611 [MEDIUM] CWE-119 CVE-2012-5611: Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions throug Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FI
nvd
CVE-2012-5614MEDIUMCVSS 4.0PoC≥ 5.1.0, ≤ 5.1.67≥ 5.5.0, ≤ 5.5.292012-12-03
CVE-2012-5614 [MEDIUM] CVE-2012-5614: Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versi Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.
nvd
CVE-2012-3163CRITICALCVSS 9.0≥ 5.1.0, ≤ 5.1.64≥ 5.5.0, ≤ 5.5.262012-10-17
CVE-2012-3163 [CRITICAL] CVE-2012-3163: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.
nvd
CVE-2012-3180MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.65≥ 5.5.0, ≤ 5.5.272012-10-17
CVE-2012-3180 [MEDIUM] CVE-2012-3180: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
nvd
CVE-2012-3166MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.63≥ 5.5.0, ≤ 5.5.252012-10-17
CVE-2012-3166 [MEDIUM] CVE-2012-3166: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
nvd
CVE-2012-3177MEDIUMCVSS 6.8≥ 5.1.0, ≤ 5.1.65≥ 5.5.0, ≤ 5.5.272012-10-17
CVE-2012-3177 [MEDIUM] CVE-2012-3177: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.
nvd
CVE-2012-3173MEDIUMCVSS 4.0≥ 5.1.0, ≤ 5.1.63≥ 5.5.0, ≤ 5.5.252012-10-17
CVE-2012-3173 [MEDIUM] CVE-2012-3173: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.
nvd
CVE-2012-3167LOWCVSS 3.5≥ 5.1.0, ≤ 5.1.63≥ 5.5.0, ≤ 5.5.252012-10-17
CVE-2012-3167 [LOW] CVE-2012-3167: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.
nvd
← Previous59 / 67Next →