MY
Database
MySQL
1,328
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 43Medium 450Low 0
Watch
Add MySQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-35612 | 5.5 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.26 |
| CVE-2021-2304 | 5.5 | Apr 22 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: 8.0.0 through 8.0.23 |
| CVE-2020-14760 | 5.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: through 5.7.31 |
| CVE-2020-14651 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: 8.0.0 through 8.0.20 |
| CVE-2020-14643 | 5.5 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles) Affected: 8.0.0 through 8.0.20 |
| CVE-2020-15358 | 5.5 | Jun 27 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant… Affected: through 8.0.22 |
| CVE-2020-2760 | 5.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 5.7.0 through 5.7.29; 8.0.0 through 8.0.19 |
| CVE-2019-2991 | 5.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.17 |
| CVE-2019-2819 | 5.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: 5.6.0 through 5.6.44; 5.7.0 through 5.7.26; 8.0.0 through 8.0.16 |
| CVE-2019-2758 | 5.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 5.7.0 through 5.7.26; 8.0.0 through 8.0.16 |
| CVE-2019-2436 | 5.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 8.0.0 through 8.0.13 |
| CVE-2018-3247 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge) Affected: 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12 |
| CVE-2018-3195 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 8.0.0 through 8.0.12 |
| CVE-2018-3187 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12 |
| CVE-2018-3185 | 5.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12 |
| CVE-2018-2812 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.7.0 through 5.7.21 |
| CVE-2018-2787 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 5.6.0 through 5.6.39; 5.7.0 through 5.7.21 |
| CVE-2018-2786 | 5.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 5.7.0 through 5.7.21 |
| CVE-2018-2647 | 5.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 5.6.0 through 5.6.38; after 5.7.0 through 5.7.20 |
| CVE-2017-3454 | 5.5 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: through 5.7.17 |
| CVE-2016-7440 | 5.5 | Dec 13 | The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging… Affected: 5.5.0 through 5.5.52; 5.6.0 through 5.6.33; 5.7.0 through 5.7.15 |
| CVE-2016-0666 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before… Affected: 5.5.0 through 5.5.48; 5.6.0 through 5.6.29; 5.7.0 through 5.7.11 |
| CVE-2016-0665 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier allows local users to affect availability via vectors related to Security: Encryption Affected: 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2016-0662 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition Affected: through 5.7.11 |
| CVE-2016-0659 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer Affected: through 5.7.11 |
| CVE-2016-0658 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer Affected: through 5.7.10 |
| CVE-2016-0657 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON Affected: through 5.7.11 |
| CVE-2016-0656 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654 Affected: through 5.7.10 |
| CVE-2016-0654 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656 Affected: through 5.7.10 |
| CVE-2016-0653 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to FTS Affected: through 5.7.10 |
| CVE-2016-0652 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to DML Affected: through 5.7.10 |
| CVE-2016-0651 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier allows local users to affect availability via vectors related to Optimizer Affected: 5.5.0 through 5.5.46 |
| CVE-2016-0650 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2016-0649 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2016-0648 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before… Affected: 5.5.0 through 5.5.48; 5.6.0 through 5.6.29; 5.7.0 through 5.7.11 |
| CVE-2016-0647 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before… Affected: 5.5.0 through 5.5.48; 5.6.0 through 5.6.29; 5.7.0 through 5.7.11 |
| CVE-2016-0646 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2016-0644 | 5.5 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2019-2778 | 5.4 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 5.7.0 through 5.7.26; 8.0.0 through 8.0.16 |
| CVE-2019-2731 | 5.4 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: through 5.7.23 |
| CVE-2017-3455 | 5.4 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: through 5.7.17 |
| CVE-2013-0375 | 5.4 | Jan 17 | Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.1.28 and earlier, allows remote authenticated users to affect confidentiality and… Affected: 5.1.0 through 5.1.66 |
| CVE-2024-21238 | 5.3 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: 8.0.0 through 8.0.39; 8.4.0 through 8.4.2; 9.0.0; 9.0.1 |
| CVE-2022-21302 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.27 |
| CVE-2022-21254 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.27 |
| CVE-2021-35608 | 5.3 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin) Affected: 8.0.0 through 8.0.26 |
| CVE-2021-2006 | 5.3 | Jan 20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 8.0.0 through 8.0.19 |
| CVE-2020-14550 | 5.3 | Jul 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.6.0 through 5.6.48; 5.7.0 through 5.7.30; 8.0.0 through 8.0.20 |
| CVE-2020-2806 | 5.3 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: 5.7.0 before 5.7.29 |
| CVE-2020-2752 | 5.3 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.6.0 through 5.6.47; 5.7.0 through 5.7.27; 8.0.0 through 8.0.17 |
The 500 most important CVEs for this product (exploited first, then by severity)