MY
Product
Mysql
92
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Mysql to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-4019 | – | Nov 30 | mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2)… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +19 more |
| CVE-2008-7247 | – | Nov 30 | sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +20 more |
| CVE-2009-2446 | – | Jul 13 | Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause… Affected: 4.1.0; 4.1.2; 4.1.3; 4.1.8; 4.1.10; 4.1.12; +26 more |
| CVE-2009-0819 | – | Mar 5 | sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a… Affected: through 5.1.32-bzr; 5.1.23; 5.1.31; 6.0.9; 6.0.10-bzr |
| CVE-2008-4456 | – | Oct 6 | Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the --html option… Affected: 5.0.4; 5.0.30; 5.0.36; 5.0.44 |
| CVE-2008-4098 | – | Sep 18 | MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +13 more |
| CVE-2008-3963 | – | Sep 11 | MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +16 more |
| CVE-2008-2079 | – | May 5 | MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TABLE on a… Affected: 4.1.0 before 4.1.24; 5.0.0 before 5.0.60; 5.1.0 before 5.1.24 |
| CVE-2008-0226 | – | Jan 10 | Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +14 more |
| CVE-2007-6303 | – | Dec 10 | MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +8 more |
| CVE-2007-6304 | – | Dec 10 | The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +8 more |
| CVE-2007-5925 | – | Nov 10 | The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service… Affected: through 5.1.23_bk |
| CVE-2007-2691 | – | May 16 | MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE statements, which allows remote authenticated users to… Affected: through 4.1.22; 5.0 before 5.0.42; 5.1 before 5.1.18 |
| CVE-2007-2693 | – | May 16 | MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from partitioned tables via an ALTER TABLE statement Affected: 5.1.5 |
| CVE-2007-2692 | – | May 16 | The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +9 more |
| CVE-2007-1420 | – | Mar 12 | MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row… Affected: through 5.0.33; 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; +8 more |
| CVE-2006-7232 | – | Dec 31 | sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the… Affected: 5.0 before 5.0.32; 5.1 before 5.1.14 |
| CVE-2006-4380 | – | Aug 28 | MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a query with multiupdate and subselects Affected: 4.1.13 |
| CVE-2006-4227 | – | Aug 18 | MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows… Affected: 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.20; 5.0.22.1.0.1; +2 more |
| CVE-2006-4226 | – | Aug 18 | MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the… Affected: 4.1.0; 4.1.2; 4.1.3; 4.1.8; 4.1.10; 4.1.12; +17 more |
| CVE-2006-4031 | – | Aug 9 | MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the… Affected: 4.1.0; 4.1.2; 4.1.3; 4.1.8; 4.1.10; 4.1.12; +15 more |
| CVE-2006-3469 | – | Jul 21 | Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a… Affected: 4.1.8; 4.1.12; 4.1.13; 4.1.14; 4.1.15; 5.0.5.0.21; +4 more |
| CVE-2006-3486 | – | Jul 10 | Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12… Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +6 more |
| CVE-2006-3081 | – | Jun 19 | mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to… Affected: 4.1.13; 4.1.15; 5.0.0; 5.0.1; 5.0.2; 5.0.3; +2 more |
| CVE-2006-2753 | – | Jun 1 | SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte… Affected: 4.1.0; 4.1.2; 4.1.3; 4.1.8; 4.1.10; 4.1.12; +14 more |
| CVE-2006-1516 | – | May 5 | The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a… Affected: 4.1.0; 4.1.3; 4.1.8; 4.1.10; 4.1.12; 4.1.13; +11 more |
| CVE-2006-1518 | – | May 5 | Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets… Affected: 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; 5.0.10; +4 more |
| CVE-2006-1517 | – | May 5 | sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an… Affected: 4.1.0; 4.1.3; 4.1.8; 4.1.10; 4.1.12; 4.1.13; +11 more |
| CVE-2006-0903 | – | Feb 27 | MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query… Affected: 4.1.0; 4.1.3; 4.1.8; 4.1.10; 4.1.12; 4.1.13; +10 more |
| CVE-2005-2558 | – | Aug 16 | Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create… Affected: 4.1.0; 4.1.3; 4.1.10; 5.0.1; 5.0.2; 5.0.3; +1 more |
| CVE-2005-2573 | – | Aug 16 | The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist… Affected: 4.1.0; 4.1.3; 4.1.10; 5.0.1; 5.0.2; 5.0.3; +1 more |
| CVE-2005-1636 | – | May 17 | mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local… Affected: 5.0.1; 5.0.2; 5.0.3; 5.0.4 |
| CVE-2005-0710 | – | May 2 | MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to bypass library path restrictions and execute arbitrary… Affected: 4.1.0; 4.1.3; 4.1.10 |
| CVE-2005-0711 | – | May 2 | MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to… Affected: 4.1.0; 4.1.3; 4.1.10 |
| CVE-2005-0709 | – | May 2 | MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access… Affected: 4.1.0; 4.1.3; 4.1.10 |
| CVE-2004-0628 | – | Dec 6 | Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long… Affected: 4.1.0 |
| CVE-2004-0627 | – | Dec 6 | The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string Affected: 4.1.0 |
| CVE-2004-0835 | – | Nov 3 | MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an… Affected: 4.1.0 through 4.1.2; 5.0.0 through 5.0.1 |
| CVE-2004-0837 | – | Nov 3 | MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs Affected: 4.1.0 |
| CVE-2004-0381 | – | May 4 | mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file Affected: 4.1.0 |
| CVE-2003-1480 | – | Dec 31 | MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods Affected: 4.1.0 |
| CVE-2003-0780 | – | Sep 22 | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a… Affected: 4.1.0 |