cbcvebase.

Oracle MySQL vulnerabilities

1,330 known vulnerabilities affecting oracle/mysql.

Total CVEs
1,330
CISA KEV
0
Public exploits
50
Exploited in wild
2
Severity breakdown
CRITICAL12HIGH71MEDIUM1066LOW181

Vulnerabilities

Page 8 of 67
CVE-2000-0148P4HIGHCVSS 7.5v3.22.26v3.22.27+5 more2000-02-08
CVE-2000-0148 [HIGH] CVE-2000-0148: MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a sho MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
nvd
CVE-2013-1492P4HIGHCVSS 7.5v5.1v5.1.1+93 more2013-03-28
CVE-2013-1492 [HIGH] CVE-2013-1492: Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecif Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
nvd
CVE-2012-0553P4HIGHCVSS 7.5v5.1v5.1.1+91 more2013-03-28
CVE-2012-0553 [HIGH] CWE-119 CVE-2012-0553: Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecif Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492.
nvd
CVE-2016-5624P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.512016-10-25
CVE-2016-5624 [MEDIUM] CVE-2016-5624: Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to af Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.
nvd
CVE-2014-6555P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.39≥ 5.6.0, ≤ 5.6.202014-10-15
CVE-2014-6555 [MEDIUM] CVE-2014-6555: Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows re Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.
nvd
CVE-2005-2572P4HIGHCVSS 8.5v5.0.332005-08-16
CVE-2005-2572 [HIGH] CVE-2005-2572: MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysq MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or (2) a request for a function in a library that has the XXX_deinit or
nvd
CVE-2017-10276P4MEDIUMCVSS 6.5v5.6.0v5.6.1+51 more2017-10-19
CVE-2017-10276 [MEDIUM] CVE-2017-10276: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported v Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result
nvd
CVE-2019-2455P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.42≥ 5.7.0, ≤ 5.7.24+1 more2019-01-16
CVE-2019-2455 [MEDIUM] CVE-2019-2455: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supporte Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerabi
nvd
CVE-2018-3065P4MEDIUMCVSS 6.5≥ 5.7.0, ≤ 5.7.22≥ 8.0.0, ≤ 8.0.112018-07-18
CVE-2018-3065 [MEDIUM] CVE-2018-3065: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported v Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in un
nvd
CVE-2017-3244P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.53≥ 5.6.0, ≤ 5.6.34+1 more2017-01-27
CVE-2017-3244 [MEDIUM] CVE-2017-3244: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported v Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulner
nvd
CVE-2018-3070P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.60≥ 5.6.0, ≤ 5.6.40+1 more2018-07-18
CVE-2018-3070 [MEDIUM] CVE-2018-3070: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Suppor Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnera
nvd
CVE-2018-2573P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.38≥ 5.7.0, ≤ 5.7.202018-01-18
CVE-2018-2573 [MEDIUM] CVE-2018-2573: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported v Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in un
nvd
CVE-2018-2703P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.38≥ 5.7.0, ≤ 5.7.202018-01-18
CVE-2018-2703 [MEDIUM] CVE-2018-2703: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privi Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerabili
nvd
CVE-2018-2782P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.39≥ 5.7.0, ≤ 5.7.212018-04-19
CVE-2018-2782 [MEDIUM] CVE-2018-2782: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versio Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unautho
nvd
CVE-2017-10384P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.57≥ 5.6.0, ≤ 5.6.37+1 more2017-10-19
CVE-2017-10384 [MEDIUM] CVE-2017-10384: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported v Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.57 and earlier 5.6.37 and earlier 5.7.19 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerabi
nvd
CVE-2017-3453P4MEDIUMCVSS 6.5≥ 5.5.0, ≤ 5.5.54≥ 5.6.0, ≤ 5.6.35+1 more2017-04-24
CVE-2017-3453 [MEDIUM] CVE-2017-3453: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Suppo Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi
nvd
CVE-2018-3251P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.41≥ 5.7.0, ≤ 5.7.23+1 more2018-10-17
CVE-2018-3251 [MEDIUM] CVE-2018-3251: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versio Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can
nvd
CVE-2018-2775P4MEDIUMCVSS 6.5≥ 5.7.0, ≤ 5.7.212018-04-19
CVE-2018-2775 [MEDIUM] CVE-2018-2775: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Suppo Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized abil
nvd
CVE-2018-2780P4MEDIUMCVSS 6.5≥ 5.7.0, ≤ 5.7.212018-04-19
CVE-2018-2780 [MEDIUM] CVE-2018-2780: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Suppo Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized abil
nvd
CVE-2018-2784P4MEDIUMCVSS 6.5≥ 5.6.0, ≤ 5.6.39≥ 5.7.0, ≤ 5.7.212018-04-19
CVE-2018-2784 [MEDIUM] CVE-2018-2784: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versio Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unautho
nvd
← Previous8 / 67Next →
Oracle MySQL vulnerabilities | cvebase