MySQL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
384 matching records
- Medium4.6Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with ..Check if you run itEPSS 2.22%Jun 27, 2001
- High7.5Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.Check if you run itEPSS 9.63%Feb 9, 2001
- High7.5Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.Check this weekEPSS 11.29%Feb 9, 2001
- High7.5Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.Check if you run itEPSS 5.43%Jan 23, 2001
- High7.2MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and poss…Check if you run itEPSS 0.53%Jan 19, 2001
- High7.2MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.Check if you run itEPSS 1.93%Dec 19, 2000
- High7.5MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.Check if you run itEPSS 4.74%Feb 8, 2000
- Medium6.4MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.Check if you run itEPSS 6.99%Jan 11, 2000
- Medium4.6mysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users to obtain passwords for users who are added to the user database.Check if you run itEPSS 0.85%Dec 27, 1998