MY
Database
MySQL
1,327
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 43Medium 450Low 0
Watch
Add MySQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-2993 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: 5.7.0 through 5.7.27; 8.0.0 through 8.0.17 |
| CVE-2019-2924 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: 5.6.0 through 5.6.45; 5.7.0 through 5.7.27 |
| CVE-2019-2923 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: 5.6.0 through 5.6.45; 5.7.0 through 5.7.27 |
| CVE-2019-2922 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: 5.6.0 through 5.6.45; 5.7.0 through 5.7.27 |
| CVE-2019-2920 | 5.3 | Oct 16 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC) Affected: 5.3.0 through 5.3.13; 8.0.0 through 8.0.17 |
| CVE-2019-2743 | 5.3 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 8.0.0 through 8.0.12 |
| CVE-2019-2741 | 5.3 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Log) Affected: 5.0.0 through 5.7.26; 8.0.0 through 8.0.16 |
| CVE-2019-2623 | 5.3 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options) Affected: 8.0.0 through 8.0.15 |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: before 8.0.23 |
| CVE-2018-3174 | 5.3 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 5.5.0 through 5.5.61; 5.6.0 through 5.6.41; 5.7.0 through 5.7.23; 8.0.0 through 8.0.12 |
| CVE-2018-3074 | 5.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 8.0.0 through 8.0.11 |
| CVE-2018-3062 | 5.3 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) Affected: 5.6.0 through 5.6.40; 5.7.0 through 5.7.22; 8.0.0 through 8.0.11 |
| CVE-2017-10283 | 5.3 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema) Affected: 5.6.0; 5.6.1; 5.6.2; 5.6.3; 5.6.4; 5.6.5; +34 more |
| CVE-2017-3637 | 5.3 | Aug 8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin) Affected: through 5.7.18 |
| CVE-2017-3636 | 5.3 | Aug 8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 5.5.0 through 5.5.56; 5.6.0 through 5.6.36 |
| CVE-2017-3635 | 5.3 | Aug 8 | Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C) Affected: 5.5.0 through 5.5.56; 5.6.0 through 5.6.36; 5.7.0 through 5.7.18 |
| CVE-2017-3529 | 5.3 | Aug 8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF) Affected: through 5.7.18 |
| CVE-2017-3305 | 5.3 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API) Affected: 5.5.0 through 5.5.55; 5.6.0 through 5.6.35 |
| CVE-2016-3615 | 5.3 | Jul 21 | Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before… Affected: 5.5.0 through 5.5.49; 5.6.0 through 5.6.30; 5.7.0 through 5.7.12 |
| CVE-2016-3614 | 5.3 | Jul 21 | Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server:… Affected: 5.6.0 through 5.6.30; 5.7.0 through 5.7.12 |
| CVE-2019-2739 | 5.1 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 5.6.0 through 5.6.44; 5.7.0 through 5.7.26; 8.0.0 through 8.0.16 |
| CVE-2019-2634 | 5.1 | Apr 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 8.0.0 through 8.0.15 |
| CVE-2016-0641 | 5.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.0 through 5.5.47; 5.6.0 through 5.6.28; 5.7.0 through 5.7.10 |
| CVE-2026-34319 | 5.0 | Apr 21 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2026-34317 | 5.0 | Apr 21 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client) Affected: 8.0.0 through 8.0.45; 8.4.0 through 8.4.8; 9.0.0 through 9.6.0 |
| CVE-2021-35602 | 5.0 | Oct 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options) Affected: 8.0.0 through 8.0.26 |
| CVE-2021-2048 | 5.0 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.22 |
| CVE-2019-2536 | 5.0 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 8.0.0 through 8.0.13 |
| CVE-2018-3171 | 5.0 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition) Affected: 5.7.0 through 5.7.23; 8.0.0 through 8.0.12 |
| CVE-2018-3081 | 5.0 | Jul 18 | Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs) Affected: 5.5.0 through 5.5.60; 5.6.0 through 5.6.40; 5.7.0 through 5.7.22; 8.0.0 through 8.0.11 |
| CVE-2026-21964 | 4.9 | Jan 20 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling) Affected: 8.0.0 through 8.0.44; 8.4.0 through 8.4.7; 9.0.0 through 9.5.0 |
| CVE-2025-50102 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50101 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50099 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50097 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50095 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 9.0.0 through 9.3.0 |
| CVE-2025-50094 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.42; 8.4.5; 9.3.0 |
| CVE-2025-50093 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50092 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50091 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50089 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 9.0.0 through 9.1.0 |
| CVE-2025-50088 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.41; 8.4.0 through 8.4.4; 9.0.0 through 9.2.0 |
| CVE-2025-50087 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50086 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50084 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50080 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50079 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2025-50077 | 4.9 | Jul 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.42; 8.4.0 through 8.4.5; 9.0.0 through 9.3.0 |
| CVE-2024-21241 | 4.9 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 8.0.0 through 8.0.39; 8.4.0 through 8.4.2; 9.0.0; 9.0.1 |
| CVE-2024-21239 | 4.9 | Oct 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 8.0.0 through 8.0.39; 8.4.0 through 8.4.2; 9.0.0; 9.0.1 |
The 500 most important CVEs for this product (exploited first, then by severity)
