MC
Product
Mysql Cluster
93
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 14Medium 67Low 11
Watch
Add Mysql Cluster to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60163 | 8.4 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60592 | 8.2 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-60315 | 8.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2022-21824 | 8.2 | Feb 24 | Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously… Affected: through 8.0.29 |
| CVE-2020-8174 | 8.1 | Jul 24 | napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-70724 | 7.5 | Aug 18 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General) Affected: 8.0.0 through 8.0.48; 8.4.0 through 8.4.11; 9.7.0 through 9.7.2 |
| CVE-2026-46863 | 7.5 | Jun 16 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling) Affected: 8.0.11 through 8.0.46; 8.4.0 through 8.4.9; 9.0.0 through 9.7.0 |
| CVE-2021-22884 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6” Affected: through 8.0.25 |
| CVE-2021-22883 | 7.5 | Mar 3 | Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established Affected: through 8.0.25 |
| CVE-2020-8277 | 7.5 | Nov 19 | A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1… Affected: through 8.0.23 |
| CVE-2021-44531 | 7.4 | Feb 24 | Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates Affected: through 8.0.29 |
| CVE-2020-8172 | 7.4 | Jun 8 | TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0 Affected: through 7.3.30; 7.4.0 through 7.4.29; 7.5.0 through 7.5.19; 7.6.0 through 7.6.15; 8.0.0 through 8.0.21 |
| CVE-2026-61094 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2026-60316 | 7.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin) Affected: 8.0.0 through 8.0.47; 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
Showing 14