Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mysql mysql 5.0.20 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2
CVE-2006-4227
MySQL prior to 5.0.25 and 5.1 prior to 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available...
Oracle Mysql 5.0.0Mysql Mysql 5.0.1Mysql Mysql 5.0.24Mysql Mysql 5.0.3Mysql Mysql 5.0.4Mysql Mysql 5.0.22.1.0.1Oracle Mysql 5.1.10Mysql Mysql 5.1.5Mysql Mysql 5.0.2Mysql Mysql 5.0.20Oracle Mysql 5.1.6Oracle Mysql 5.1.9
2.1
CVSSv2
CVE-2007-1420
MySQL 5.x prior to 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL derefe...
Mysql Mysql 5.0.15Oracle Mysql 5.0.7Oracle Mysql 5.0.6Oracle Mysql 5.0.41Mysql Mysql 5.0.16Oracle Mysql 5.0.32Mysql MysqlMysql Mysql 5.0.0Mysql Mysql 5.0.10Mysql Mysql 5.0.5Mysql Mysql 5.0.4Mysql Mysql 5.0.24Mysql Mysql 5.0.30Mysql Mysql 5.0.2Mysql Mysql 5.0.20Mysql Mysql 5.0.17Mysql Mysql 5.0.1Mysql Mysql 5.0.3
6.5
CVSSv2
CVE-2006-1518
Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote malicious users to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.
Oracle Mysql 5.0.13Oracle Mysql 5.0.0Mysql Mysql 5.0.15Mysql Mysql 5.0.16Mysql Mysql 5.0.17Oracle Mysql 5.0.14Mysql Mysql 5.0.3Oracle Mysql 5.0.3Oracle Mysql 5.0.11Oracle Mysql 5.0.12Mysql Mysql 5.0.2Mysql Mysql 5.0.20Oracle Mysql 5.0.8Oracle Mysql 5.0.9Mysql Mysql 5.0.1Mysql Mysql 5.0.10Oracle Mysql 5.0.18Oracle Mysql 5.0.19Oracle Mysql 5.0.6Oracle Mysql 5.0.7Mysql Mysql 5.0.4Mysql Mysql 5.0.5
3.5
CVSSv2
CVE-2007-6303
MySQL 5.0.x prior to 5.0.51a, 5.1.x prior to 5.1.23, and 6.0.x prior to 6.0.4 does not update the DEFINER value of a view when the view is altered, which allows remote authenticated users to gain privileges via a sequence of statements including a CREATE SQL SECURITY DEFINER VIEW...
Mysql Mysql 5.0.0Mysql Mysql 5.0.24Oracle Mysql 5.0.41Oracle Mysql 5.1.10Oracle Mysql 5.1.11Oracle Mysql 5.1.2Oracle Mysql 6.0.0Mysql Mysql 5.0.22.1.0.1Mysql Mysql 5.0.4Oracle Mysql 5.1.1Oracle Mysql 5.1.16Oracle Mysql 5.1.17Mysql Mysql 5.0.1Mysql Mysql 5.0.15Mysql Mysql 5.0.2Mysql Mysql 5.0.20Mysql Mysql 5.0.3Mysql Mysql 5.0.5Mysql Mysql 5.0.5.0.21Oracle Mysql 5.1.12Oracle Mysql 5.1.13Oracle Mysql 6.0.1
2.1
CVSSv2
CVE-2006-3486
Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL prior to 5.0.23 and 5.1 prior to 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, w...
Mysql Mysql 5.0.5Mysql Mysql 5.0.10Mysql Mysql 5.0.0Mysql Mysql 5.0.15Mysql Mysql 5.0.17Mysql Mysql 5.0.3Mysql Mysql 5.0.2Mysql Mysql 5.0.20Mysql Mysql 5.0.1Mysql Mysql 5.0.4Mysql Mysql 5.0.16Mysql Mysql 5.1.5Oracle Mysql 5.0.6Oracle Mysql 5.0.11Oracle Mysql 5.0.12Oracle Mysql 5.0.13Oracle Mysql 5.0.14Oracle Mysql 5.0.18Oracle Mysql 5.0.19Oracle Mysql 5.0.21Oracle Mysql 5.0.22Oracle Mysql 5.0.7
7.5
CVSSv2
CVE-2006-2753
SQL injection vulnerability in MySQL 4.1.x prior to 4.1.20 and 5.0.x prior to 5.0.22 allows context-dependent malicious users to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the m...
Mysql Mysql 4.1.14Mysql Mysql 4.1.15Oracle Mysql 4.1.4Oracle Mysql 4.1.5Mysql Mysql 5.0.10Oracle Mysql 5.0.11Oracle Mysql 5.0.12Oracle Mysql 5.0.19Mysql Mysql 5.0.2Oracle Mysql 5.0.6Oracle Mysql 5.0.7Mysql Mysql 4.1.12Mysql Mysql 4.1.13Mysql Mysql 4.1.2Mysql Mysql 4.1.3Mysql Mysql 5.0.0Mysql Mysql 5.0.1Mysql Mysql 4.1.0Oracle Mysql 4.1.1Oracle Mysql 4.1.16Oracle Mysql 4.1.17Oracle Mysql 4.1.6
5
CVSSv2
CVE-2006-1516
The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote malicious users to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.
Oracle Mysql 4.0.1Oracle Mysql 4.0.10Oracle Mysql 4.0.16Oracle Mysql 4.0.17Oracle Mysql 4.0.24Oracle Mysql 4.0.25Oracle Mysql 4.0.7Oracle Mysql 4.0.8Mysql Mysql 4.1.10Oracle Mysql 4.1.17Oracle Mysql 4.1.18Oracle Mysql 4.1.2Mysql Mysql 4.1.8Oracle Mysql 4.1.9Oracle Mysql 5.0.12Oracle Mysql 5.0.13Mysql Mysql 5.0.3Oracle Mysql 5.0.3Mysql Mysql 5.0.4Oracle Mysql 4.0.0Oracle Mysql 4.0.14Oracle Mysql 4.0.15
5
CVSSv2
CVE-2007-6304
The federated engine in MySQL 5.0.x prior to 5.0.51a, 5.1.x prior to 5.1.23, and 6.0.x prior to 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks ...
Oracle Mysql 5.0.11Mysql Mysql 5.0.17Oracle Mysql 5.0.21Oracle Mysql 5.0.22Oracle Mysql 5.0.37Oracle Mysql 5.0.7Oracle Mysql 5.0.8Oracle Mysql 5.1.15Oracle Mysql 5.1.16Mysql Mysql 5.0.1Mysql Mysql 5.0.10Mysql Mysql 5.0.16Mysql Mysql 5.0.20Oracle Mysql 5.0.3Oracle Mysql 5.0.33Mysql Mysql 5.0.5.0.21Oracle Mysql 5.0.6Oracle Mysql 5.1.13Oracle Mysql 5.1.14Oracle Mysql 6.0.2Oracle Mysql 6.0.3Oracle Mysql 5.0.0
3.6
CVSSv2
CVE-2010-1626
MySQL prior to 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.
Oracle Mysql 5.1.44Oracle Mysql 5.1.43Oracle Mysql 5.1.36Oracle Mysql 5.1.35Mysql Mysql 5.1.5Oracle Mysql 5.0.91Mysql Mysql 5.0.84Oracle Mysql 5.0.83Oracle Mysql 5.0.45Oracle Mysql 5.0.22Oracle Mysql 5.0.21Mysql Mysql 5.0.16Oracle Mysql 5.1.38Mysql Mysql 5.1.37Oracle Mysql 5.1.30Mysql Mysql 5.1.23Oracle Mysql 5.0.86Oracle Mysql 5.0.85Oracle Mysql 5.0.67Oracle Mysql 5.0.51Mysql Mysql 5.0.24Oracle Mysql 5.0.23
6
CVSSv2
CVE-2007-2692
The mysql_change_db function in MySQL 5.0.x prior to 5.0.40 and 5.1.x prior to 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.
Oracle Mysql 5.0.0Mysql Mysql 5.0.1Mysql Mysql 5.0.15Mysql Mysql 5.0.2Mysql Mysql 5.0.3Oracle Mysql 5.0.3Mysql Mysql 5.0.5.0.21Oracle Mysql 5.0.6Oracle Mysql 5.1.12Oracle Mysql 5.1.13Oracle Mysql 5.1.14Mysql Mysql 5.1.5Oracle Mysql 5.1.6Mysql Mysql 5.0.10Mysql Mysql 5.0.16Mysql Mysql 5.0.20Oracle Mysql 5.0.21Oracle Mysql 5.0.33Oracle Mysql 5.0.37Oracle Mysql 5.0.7Oracle Mysql 5.0.8Oracle Mysql 5.1.15
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook