MySQL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
384 matching records
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ...Check this weekEPSS 11.44%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are ex…Check this weekEPSS 12.23%Jan 11, 2011
- Medium4.0Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a…Check if you run itEPSS 2.34%Jan 11, 2011
- Medium4.0storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by mod…Check if you run itEPSS 9.47%Jan 11, 2011
- Low3.5MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABAS…Check if you run itEPSS 9.01%Jul 13, 2010
- Medium6.0Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.Check this weekEPSS 21.79%Jun 8, 2010
- Medium5.0The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwi…Check if you run itEPSS 3.72%Jun 8, 2010
- Medium6.5Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field def…Check if you run itEPSS 3.12%Jun 8, 2010
- Low3.6CVE-2010-1626 is listed by oracle.Check if you run itEPSS 0.49%May 21, 2010
- High7.5Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.…Check this weekEPSS 69.55%Dec 30, 2009
- Medium4.4CVE-2009-4030 is listed by oracle.Check if you run itEPSS 0.43%Nov 30, 2009
- Medium6.8The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth…Check if you run itEPSS 1.77%Nov 30, 2009
- Medium4.0mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does…Check this weekEPSS 16.26%Nov 30, 2009
- Medium6.0sql/sql_table.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesy…Check if you run itEPSS 1.77%Nov 30, 2009
- High8.5Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated us…Check this weekEPSS 10.59%Jul 13, 2009
- Medium4.0sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression em…Check this weekEPSS 10.18%Mar 5, 2009
- Low2.6Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 through 5.0.45, and other versions including versions later than 5.0.45, when the -…Check if you run itEPSS 7.05%Oct 6, 2008
- Medium4.6CVE-2008-4097 is listed by oracle.Check if you run itEPSS 1.85%Sep 18, 2008
- Medium4.0MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, w…Check if you run itEPSS 6.46%Sep 11, 2008
- Medium4.6MySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5 allows local users to bypass certain privilege checks by calling CREATE TAB…Check if you run itEPSS 2.59%May 5, 2008
- Medium5.0The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL…Check if you run itEPSS 2.96%Dec 10, 2007