MY
Product
Mysql
92
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Mysql to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-15945 | 7.8 | Oct 27 | The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown… Affected: before 5.6.36 |
| CVE-2015-2575 | – | Apr 16 | Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via… Affected: through 5.1.34 |
| CVE-2013-1492 | – | Mar 28 | Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553 Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0553 | – | Mar 28 | Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492 Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0882 | – | Dec 21 | Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-2749 | – | Aug 17 | MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-2102 | – | Aug 17 | MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2009-5026 | – | Aug 17 | The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +15 more |
| CVE-2012-1696 | – | May 3 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 4.1.0; 4.1.2; 4.1.3; 4.1.8; 4.1.10; 4.1.12; +21 more |
| CVE-2012-0583 | – | May 3 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authenticated users to affect availability,… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0492 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0490 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2012-0485 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0484 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2012-0120 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0119 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0118 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0116 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0115 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0114 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2012-0113 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0112 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2012-0102 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2012-0101 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2012-0087 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2012-0075 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +26 more |
| CVE-2011-2262 | – | Jan 18 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3836 | – | Jan 14 | MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +25 more |
| CVE-2010-3835 | – | Jan 14 | MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3833 | – | Jan 14 | MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash)… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +25 more |
| CVE-2010-3834 | – | Jan 14 | Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +25 more |
| CVE-2010-3840 | – | Jan 14 | The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3839 | – | Jan 14 | MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3838 | – | Jan 14 | MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1)… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +25 more |
| CVE-2010-3837 | – | Jan 14 | MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +25 more |
| CVE-2010-3677 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a… Affected: through 5.1.48; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +22 more |
| CVE-2010-3683 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3682 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT Affected: through 5.1.48; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37; +22 more |
| CVE-2010-3681 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3680 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3679 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3678 | – | Jan 11 | Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-3676 | – | Jan 11 | storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the… Affected: 5.1.5; 5.1.23; 5.1.31; 5.1.32; 5.1.34; 5.1.37 |
| CVE-2010-1850 | – | Jun 8 | Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +17 more |
| CVE-2010-1849 | – | Jun 8 | The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +17 more |
| CVE-2010-1848 | – | Jun 8 | Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +17 more |
| CVE-2010-1626 | – | May 21 | MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a… Affected: through 5.1.45; 5.0.5.0.21; 5.0.15; 5.0.16; 5.0.17; 5.0.20; +11 more |
| CVE-2010-1621 | – | May 14 | The mysql_uninstall_plugin function in sql/sql_plugin.cc in MySQL 5.1 before 5.1.46 does not check privileges before uninstalling a plugin, which allows remote attackers to… Affected: through 5.1.45 |
| CVE-2009-4030 | – | Nov 30 | MySQL 5.1.x before 5.1.41 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY… Affected: 5.1.5; 5.1.23; 5.1.32 |
| CVE-2009-4028 | – | Nov 30 | The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509… Affected: through 5.0.87; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +24 more |