Login Request a demo
MS
Product
Mysql Server
by Oracle · last CVE Jul 21, 2026
318
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities318In the news0Timeline
Severity mix
Critical 7High 23Medium 270Low 18
Severity
All severities318Critical7High23Medium270Low18
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mysql Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3711
9.8
88%
Aug 24
SM2 Decryption Buffer Overflow
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-21344
9.8
76%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: through 5.7.36; 8.0.0 through 8.0.27
CVE-2019-5482
9.8
18%
Sep 16
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3
Affected: 5.0.0 through 5.7.28; 8.0.0 through 8.0.18
CVE-2019-5481
9.8
7%
Sep 16
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3
Affected: 5.7.0 through 5.7.28; 8.0.0 through 8.0.18
CVE-2019-3822
9.8
13%
Feb 6
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow
Affected: through 5.7.26; 5.7.27 through 8.0.15
CVE-2021-22945
9.1
7%
Sep 23
When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in…
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-21351
9.1
82%
Mar 22
XStream is vulnerable to an Arbitrary Code Execution attack
Affected: through 8.0.27
CVE-2026-60163
8.4
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60315
8.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2022-21824
8.2
22%
Feb 24
Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously…
Affected: through 8.0.29
CVE-2022-27778
8.1
4%
Jun 1
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`
Affected: through 5.7.38; 8.0.0 through 8.0.29
CVE-2021-22901
8.1
64%
Jun 11
curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used when a TLS 1.3 session ticket arrives over a connection
Affected: through 5.7.34; 8.0.0 through 8.0.25
CVE-2019-5443
7.8
1%
Jul 2
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as…
Affected: 5.0.0 through 5.7.27; 8.0.0 through 8.0.17
CVE-2019-5436
7.8
50%
May 28
A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1
Affected: through 5.7.27; 5.7.28 through 8.0.17
CVE-2026-46863
7.5
0%
Jun 16
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling)
Affected: 8.4.0 through 8.4.9; 9.0.0 through 9.7.0
CVE-2025-21521
7.5
1%
Jan 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling)
Affected: 8.0.0 through 8.0.39; 8.4.0 through 8.4.2; 9.0.0 through 9.0.1
CVE-2023-21912
7.5
1%
Apr 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
Affected: 5.7.0 through 5.7.41; 8.0.0 through 8.0.30
CVE-2021-35583
7.5
3%
Oct 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows)
Affected: 8.0.0 through 8.0.25
CVE-2021-22946
7.5
5%
Sep 29
A user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking to an IMAP, POP3 or FTP server (`--ssl-reqd` on the command line…
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-22926
7.5
15%
Aug 5
libcurl-using applications can ask for a specific client certificate to be used in a transfer
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-36222
7.5
11%
Jul 22
ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL…
Affected: 8.0.0 through 8.0.26
CVE-2021-21348
7.5
14%
Mar 22
XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)
Affected: through 8.0.27
CVE-2021-23840
7.5
51%
Feb 16
Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable…
Affected: before 5.7.33; 8.0.15 before 8.0.23
CVE-2020-28196
7.5
4%
Nov 6
MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support…
Affected: through 8.0.23
CVE-2021-44531
7.4
8%
Feb 24
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates
Affected: through 5.7.37; 8.0.0 through 8.0.28
CVE-2021-3712
7.4
50%
Aug 24
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-3450
7.4
18%
Mar 25
CA certificate check bypass with X509_V_FLAG_X509_STRICT
Affected: through 5.7.33; 8.0.15 through 8.0.23
CVE-2022-1292
7.3
83%
May 3
The c_rehash script allows command injection
Affected: 5.0.0 through 5.7.38; 8.0.0 through 8.0.29
CVE-2026-61094
7.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60316
7.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60181
6.7
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator)
Affected: 9.7.0; 9.7.1
CVE-2026-60585
6.6
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-60178
6.6
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-61109
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-61108
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS)
Affected: 9.7.0; 9.7.1
CVE-2026-61093
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60718
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON)
Affected: 9.7.0; 9.7.1
CVE-2026-60324
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60311
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60174
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-47064
6.5
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2026-34308
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-34303
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-34276
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-34272
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.0.0 through 9.6.0
CVE-2026-34271
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-34270
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-22017
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-22009
6.5
0%
Apr 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0
CVE-2026-21968
6.5
0%
Jan 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.44; 8.4.0 through 8.4.7; 9.0.0 through 9.5.0
Page 1 of 7 · 318 total
12…7