MC
Product
Mysql Cluster
by Oracle · last CVE Aug 18, 2026
93
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 67Low 11
Watch

Add Mysql Cluster to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-22931
9.8
22%
Aug 16
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name…
Affected: through 8.0.26
CVE-2026-60163
8.4
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60592
8.2
0%
Aug 18
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator)
Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2
CVE-2026-60315
8.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2022-21824
8.2
22%
Feb 24
Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously…
Affected: through 8.0.29
CVE-2020-8174
8.1
8%
Jul 24
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0
Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21
CVE-2026-70724
7.5
0%
Aug 18
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2
CVE-2026-46863
7.5
0%
Jun 16
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling)
Affected: 8.0.11 through 8.0.46; 8.4.0 through 8.4.9; 9.0.0 through 9.7.0
CVE-2021-22884
7.5
37%
Mar 3
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”
Affected: through 8.0.25
CVE-2021-22883
7.5
77%
Mar 3
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established
Affected: through 8.0.25
CVE-2020-8277
7.5
54%
Nov 19
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1…
Affected: through 8.0.23
CVE-2021-44531
7.4
8%
Feb 24
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates
Affected: through 8.0.29
CVE-2020-8172
7.4
6%
Jun 8
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0
Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21
CVE-2026-61094
7.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60316
7.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2025-30722
6.8
1%
Apr 15
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)
Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2026-60181
6.7
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator)
Affected: 9.7.0; 9.7.1
CVE-2025-50068
6.7
0%
Jul 15
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0
CVE-2026-60585
6.6
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60178
6.6
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-61109
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-61108
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS)
Affected: 9.7.0; 9.7.1
CVE-2026-61093
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60718
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)
Affected: 9.7.0; 9.7.1
CVE-2026-60324
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60311
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60174
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-47064
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2025-21575
6.5
1%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser)
Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2025-21574
6.5
1%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser)
Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2025-21518
6.5
1%
Jan 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 7.6.0 through 7.6.32; 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0
CVE-2024-21177
6.5
1%
Jul 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: through 7.5.34; 7.6.0 through 7.6.30; 8.0.0 through 8.0.37; 8.1.0 through 8.4.0
CVE-2026-60332
6.4
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60331
6.4
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60183
6.4
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2023-21860
6.3
1%
Jan 18
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations)
Affected: 7.4.0 through 7.4.38; 7.5.0 through 7.5.28; 7.6.0 through 7.6.24; 8.0.0 through 8.0.31
CVE-2022-21550
6.3
51%
Jul 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.36; 7.5.0 through 7.5.26; 7.6.0 through 7.6.22; 8.0.0 through 8.0.29
CVE-2022-21490
6.3
79%
Apr 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.00 through 7.4.35; 7.5.00 through 7.5.25; 7.6.00 through 7.6.21; 8.0.00 through 8.0.28
CVE-2021-35621
6.3
50%
Oct 20
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26
CVE-2021-35598
6.3
51%
Oct 20
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26
CVE-2021-35594
6.3
51%
Oct 20
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26
CVE-2021-35593
6.3
51%
Oct 20
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26
CVE-2021-35592
6.3
52%
Oct 20
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26
CVE-2021-35590
6.3
88%
Oct 20
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: 7.4.0 through 7.4.33; 7.5.0 through 7.5.23; 7.6.0 through 7.6.19; 8.0.0 through 8.0.26
CVE-2026-60747
6.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2022-21519
5.9
1%
Jul 19
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General)
Affected: through 8.0.29
CVE-2025-30693
5.5
1%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 7.6.0 through 7.6.33; 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2018-1324
5.5
4%
Mar 16
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes…
Affected: through 7.4.34; 7.5.0 through 7.5.24; 7.6.0 through 7.6.20; 8.0.0 through 8.0.27
CVE-2017-3304
5.4
1%
Apr 24
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD)
Affected: through 7.2.27; through 7.3.16; through 7.4.14; through 7.5.5
CVE-2021-44532
5.3
10%
Feb 24
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format
Affected: through 8.0.29
Page 1 of 2 · 93 total