MS
Product
Mysql Server
330
CVEs
0
On KEV
9.8
Max CVSS
12
New 30D
Severity mix
Critical 7High 23Medium 282Low 18
Watch
Add Mysql Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60747 | 6.2 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication) Affected: 8.4.0 through 8.4.10; 9.7.0; 9.7.1 |
| CVE-2021-2417 | 6.0 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS) Affected: 8.0.0 through 8.0.25 |
| CVE-2023-22053 | 5.9 | Jul 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs) Affected: 5.0.0 through 5.7.42; 8.0.0 through 8.0.32 |
| CVE-2022-21457 | 5.9 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-22947 | 5.9 | Sep 29 | When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple… Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2021-2429 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.25 |
| CVE-2021-2390 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2021-2389 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: through 5.7.33; 8.0.15 through 8.0.23 |
| CVE-2021-23841 | 5.9 | Feb 16 | The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509… Affected: before 5.7.33; 8.0.15 before 8.0.23 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: through 5.7.32; 8.0.15 through 8.0.22 |
| CVE-2025-53054 | 5.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.6; 9.0.0 through 9.4.0 |
| CVE-2025-53053 | 5.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.6; 9.0.0 through 9.4.0 |
| CVE-2025-30695 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-30693 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-21559 | 5.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21555 | 5.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2025-21497 | 5.5 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2024-21015 | 5.5 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 8.0.0 through 8.0.34; 8.1.0 through 8.3.0 |
| CVE-2023-21929 | 5.5 | Apr 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.0 through 8.0.32 |
| CVE-2023-21872 | 5.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.29 |
| CVE-2023-21869 | 5.5 | Jan 18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.31 |
| CVE-2022-21528 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.29 |
| CVE-2022-21527 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.29 |
| CVE-2022-21509 | 5.5 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 8.0.29 |
| CVE-2022-21459 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2022-21440 | 5.5 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-35604 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2025-21540 | 5.4 | Jan 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.40; 8.4.0 through 8.4.3; 9.0.0 through 9.1.0 |
| CVE-2026-21929 | 5.3 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser) Affected: 9.0.0 through 9.5.0 |
| CVE-2024-21176 | 5.3 | Jul 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: through 8.4.0 |
| CVE-2024-20994 | 5.3 | Apr 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema) Affected: 8.0.0 through 8.0.36; 8.3.0 |
| CVE-2024-20964 | 5.3 | Feb 17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges) Affected: 8.0.0 through 8.0.35; 8.1.0 through 8.2.0 |
| CVE-2021-44532 | 5.3 | Feb 24 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format Affected: through 5.7.37; 8.0.0 through 8.0.28 |
| CVE-2021-44533 | 5.3 | Feb 24 | Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly Affected: through 5.7.37; 8.0.0 through 8.0.28 |
| CVE-2021-22923 | 5.3 | Aug 5 | When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then… Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2021-22925 | 5.3 | Aug 5 | curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl Affected: 5.7.0 through 5.7.35; 8.0.0 through 8.0.26 |
| CVE-2021-22897 | 5.3 | Jun 11 | curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use the… Affected: through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2022-21539 | 5.0 | Jul 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: through 8.0.29 |
| CVE-2022-21418 | 5.0 | Apr 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.28 |
| CVE-2021-2385 | 5.0 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication) Affected: 5.7.0 through 5.7.34; 8.0.0 through 8.0.25 |
| CVE-2026-101751 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101750 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101749 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption) Affected: 26.7.0 through 26.7.1 |
| CVE-2026-101732 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-101731 | 4.9 | Oct 20 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 8.4.0 through 8.4.12; 9.7.0 through 9.7.3; 26.7.0 through 26.7.1 |
| CVE-2026-61144 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-61128 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60195 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality) Affected: 9.7.0; 9.7.1 |
| CVE-2026-60194 | 4.9 | Jul 21 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality) Affected: 9.7.0; 9.7.1 |
