MS
Product
Mysql Server
by Oracle · last CVE Oct 20, 2026
330
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 7High 23Medium 282Low 18
Watch

Add Mysql Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-60747
6.2
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication)
Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1
CVE-2021-2417
6.0
2%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS)
Affected: 8.0.0 through 8.0.25
CVE-2023-22053
5.9
1%
Jul 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs)
Affected: 5.0.0 through 5.7.42; 8.0.0 through 8.0.32
CVE-2022-21457
5.9
2%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin)
Affected: 8.0.0 through 8.0.28
CVE-2021-22947
5.9
3%
Sep 29
When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple…
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-2429
5.9
41%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.25
CVE-2021-2390
5.9
4%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25
CVE-2021-2389
5.9
8%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25
CVE-2021-3449
5.9
64%
Mar 25
NULL pointer deref in signature_algorithms processing
Affected: through 5.7.33; 8.0.15 through 8.0.23
CVE-2021-23841
5.9
7%
Feb 16
The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509…
Affected: before 5.7.33; 8.0.15 before 8.0.23
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: through 5.7.32; 8.0.15 through 8.0.22
CVE-2025-53054
5.5
0%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.6; 9.0.0 through 9.4.0
CVE-2025-53053
5.5
0%
Oct 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.6; 9.0.0 through 9.4.0
CVE-2025-30695
5.5
1%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2025-30693
5.5
1%
Apr 15
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0
CVE-2025-21559
5.5
1%
Jan 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0
CVE-2025-21555
5.5
1%
Jan 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0
CVE-2025-21497
5.5
0%
Jan 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0
CVE-2024-21015
5.5
1%
Apr 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML)
Affected: 8.0.0 through 8.0.34; 8.1.0 through 8.3.0
CVE-2023-21929
5.5
1%
Apr 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL)
Affected: 8.0.0 through 8.0.32
CVE-2023-21872
5.5
1%
Jan 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.29
CVE-2023-21869
5.5
1%
Jan 18
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.31
CVE-2022-21528
5.5
2%
Jul 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: through 8.0.29
CVE-2022-21527
5.5
2%
Jul 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: through 8.0.29
CVE-2022-21509
5.5
2%
Jul 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: through 8.0.29
CVE-2022-21459
5.5
1%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.28
CVE-2022-21440
5.5
1%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.0.0 through 8.0.28
CVE-2021-35604
5.5
3%
Oct 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2025-21540
5.4
1%
Jan 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0
CVE-2026-21929
5.3
0%
Jan 20
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser)
Affected: 9.0.0 through 9.5.0
CVE-2024-21176
5.3
1%
Jul 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling)
Affected: through 8.4.0
CVE-2024-20994
5.3
1%
Apr 16
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)
Affected: 8.0.0 through 8.0.36; 8.3.0
CVE-2024-20964
5.3
1%
Feb 17
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges)
Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0
CVE-2021-44532
5.3
10%
Feb 24
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format
Affected: through 5.7.37; 8.0.0 through 8.0.28
CVE-2021-44533
5.3
9%
Feb 24
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly
Affected: through 5.7.37; 8.0.0 through 8.0.28
CVE-2021-22923
5.3
2%
Aug 5
When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then…
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-22925
5.3
5%
Aug 5
curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl
Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26
CVE-2021-22897
5.3
4%
Jun 11
curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the…
Affected: through 5.7.34; 8.0.0 through 8.0.25
CVE-2022-21539
5.0
1%
Jul 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: through 8.0.29
CVE-2022-21418
5.0
1%
Apr 19
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB)
Affected: 8.0.0 through 8.0.28
CVE-2021-2385
5.0
2%
Jul 21
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication)
Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25
CVE-2026-101751
4.9
0%
Oct 20
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS)
Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1
CVE-2026-101750
4.9
0%
Oct 20
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin)
Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1
CVE-2026-101749
4.9
0%
Oct 20
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption)
Affected: 26.7.0 through 26.7.1
CVE-2026-101732
4.9
0%
Oct 20
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1
CVE-2026-101731
4.9
0%
Oct 20
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1
CVE-2026-61144
4.9
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-61128
4.9
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer)
Affected: 9.7.0; 9.7.1
CVE-2026-60195
4.9
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality)
Affected: 9.7.0; 9.7.1
CVE-2026-60194
4.9
0%
Jul 21
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality)
Affected: 9.7.0; 9.7.1
Page 2 of 6 · 282 total
123…6