MySQL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
384 matching records
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Oct 21, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.58%Oct 21, 2025
- Medium5.5Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.48%Oct 21, 2025
- Medium5.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Check if you run itEPSS 0.48%Oct 21, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.58%Oct 21, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.58%Oct 21, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Oct 21, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Oct 21, 2025
- Medium5.5LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system.Check if you run itEPSS 0.25%Oct 13, 2025
- High8.6Nagios XI < 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizCheck this weekEPSS 25.35%Sep 25, 2025
- Critical9.8The WP Database Backup plugin for WordPress is vulnerable to OS Command Injection in versions before 5.2 via the mysqldump function.Check this weekEPSS 22.05%Jul 25, 2025
- Medium4.4Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Check if you run itEPSS 0.48%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Jul 15, 2025
- Low2.2Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).Check if you run itEPSS 0.44%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.58%Jul 15, 2025
- Low2.7Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.52%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.52%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Check if you run itEPSS 0.64%Jul 15, 2025
- Medium5.5Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.52%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.64%Jul 15, 2025
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.66%Jul 15, 2025
- Medium6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.66%Jul 15, 2025
- Medium6.7Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Check if you run itEPSS 0.19%Jul 15, 2025
- High7.1SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $Check if you run itEPSS 0.32%Jun 25, 2025