VYPR
← MySQL

Vendor CVEs

MySQL

All CVEs

177 total · sorted by risk
  • CVE-2007-1420Mar 12, 2007
    MySQL
    MySQL
    risk 0.03cvss —epss 0.01

    MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL…

  • CVE-2006-0903Feb 27, 2006
    MySQL
    MySQL
    risk 0.03cvss —epss 0.01

    MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor…

  • CVE-2005-2468Dec 31, 2005
    MySQL
    Eventum
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) isCorrectPassword or (2) userExist function in class.auth.php, getCustomFieldReport function in (4) custom_fields.php, (5)…

  • CVE-2005-2467Dec 31, 2005
    MySQL
    Eventum
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to view.php, (2) release parameter to list.php, or (3) F parameter to get_jsrs_data.php.

  • CVE-2005-0711May 2, 2005
    MySQL
    MySQL
    risk 0.03cvss —epss 0.02

    MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack.

  • CVE-2003-1480Dec 31, 2003
    MySQL
    MySQL
    risk 0.03cvss —epss 0.03

    MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.

  • CVE-2001-0407Jun 27, 2001
    MySQL
    MySQL
    risk 0.03cvss —epss 0.02

    Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. (dot dot).

  • CVE-2001-1274Jan 23, 2001
    MySQL
    MySQL
    risk 0.03cvss —epss 0.05

    Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.

  • CVE-2010-1850Jun 8, 2010
    MySQL
    MySQL
    risk 0.02cvss —epss 0.22

    Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.

  • CVE-2007-5969Dec 10, 2007
    MySQL
    Community Server
    risk 0.01cvss —epss 0.14

    MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4, when a table relies on symlinks created through explicit DATA DIRECTORY and INDEX DIRECTORY options, allows remote authenticated users to…

  • CVE-2007-3780Jul 15, 2007
    MySQL
    Community Server
    risk 0.01cvss —epss 0.14

    MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in the connection protocol.

  • CVE-2004-0628Dec 6, 2004
    MySQL
    MySQL
    risk 0.01cvss —epss 0.08

    Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.

  • CVE-2004-0836Nov 3, 2004
    MySQL
    MySQL
    risk 0.01cvss —epss 0.10

    Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

  • CVE-2002-1376Dec 23, 2002
    MySQL
    MySQL
    risk 0.01cvss —epss 0.07

    libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row routines, which allows remote attackers to cause a denial of service and possibly execute arbitrary code.

  • CVE-2001-1453Feb 9, 2001
    MySQL
    MySQL
    risk 0.01cvss —epss 0.11

    Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.

  • CVE-2001-1454Feb 9, 2001
    MySQL
    MySQL
    risk 0.01cvss —epss 0.10

    Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.

  • CVE-2026-21968Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2026-21965Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2026-21964Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…

  • CVE-2026-21952Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. …

  • CVE-2026-21950Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.…

  • CVE-2026-21949Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.…

  • CVE-2026-21948Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…

  • CVE-2026-21941Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple…

  • CVE-2026-21937Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols…

  • CVE-2026-21936Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…

  • CVE-2026-21929Jan 20, 2026
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. …

  • CVE-2024-29401Mar 26, 2024
    MySQL
    MySQL
    risk 0.00cvss —epss 0.01

    xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.

  • CVE-2022-39402Oct 18, 2022
    MySQL
    Mysql Shell
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell executes to…

  • CVE-2022-39403Oct 18, 2022
    MySQL
    Mysql Shell
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to…

  • CVE-2022-21535Jul 19, 2022
    MySQL
    Mysql Shell
    risk 0.00cvss —epss 0.00

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: General/Core Client). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell…

  • CVE-2015-2575Apr 16, 2015
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

  • CVE-2013-2162Aug 19, 2013
    MySQL
    Server
    risk 0.00cvss —epss 0.00

    Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions before restricting the permissions, which allows local users to read the file and…

  • CVE-2013-1492Mar 28, 2013
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.

  • CVE-2012-0553Mar 28, 2013
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492.

  • CVE-2012-0882Dec 21, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.05

    Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17. NOTE: as of…

  • CVE-2012-4452Oct 9, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.00

    MySQL 5.0.88, and possibly other versions and platforms, allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without…

  • CVE-2012-2750Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

  • CVE-2012-2749Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.

  • CVE-2012-2102Aug 17, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.

  • CVE-2012-1696May 3, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

  • CVE-2012-0583May 3, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authenticated users to affect availability, related to MyISAM.

  • CVE-2012-0492Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.

  • CVE-2012-0490Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.

  • CVE-2012-0485Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492.

  • CVE-2012-0484Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.

  • CVE-2012-0120Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.

  • CVE-2012-0119Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.

  • CVE-2012-0118Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.

  • CVE-2012-0116Jan 18, 2012
    MySQL
    MySQL
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Page 2 of 4