Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle mysql 5.0.33 vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2004-0388
The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
Oracle Mysql 5.0.33
8.5
CVSSv2
CVE-2005-2572
MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1) a request for a non-library file, which causes the Windows LoadLibraryEx functio...
Oracle Mysql 5.0.33
2.6
CVSSv2
CVE-2008-4456
Cross-site scripting (XSS) vulnerability in the command-line client in MySQL 5.0.26 up to and including 5.0.45, and other versions including versions later than 5.0.45, when the --html option is enabled, allows malicious users to inject arbitrary web script or HTML by placing it ...
Oracle Mysql 5.0.32Oracle Mysql 5.0.33Oracle Mysql 5.0.45Oracle Mysql 5.0.67Mysql Mysql 5.0.30Oracle Mysql 5.0.30Mysql Mysql 5.0.36Oracle Mysql 5.0.37Oracle Mysql 5.0.41Oracle Mysql 5.0.42Mysql Mysql 5.0.44Oracle Mysql 5.0.26Oracle Mysql 5.0.27Oracle Mysql 5.0.38Mysql Mysql 5.0.4
5
CVSSv2
CVE-2007-6304
The federated engine in MySQL 5.0.x prior to 5.0.51a, 5.1.x prior to 5.1.23, and 6.0.x prior to 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks ...
Oracle Mysql 5.0.11Mysql Mysql 5.0.17Oracle Mysql 5.0.21Oracle Mysql 5.0.22Oracle Mysql 5.0.37Oracle Mysql 5.0.7Oracle Mysql 5.0.8Oracle Mysql 5.1.15Oracle Mysql 5.1.16Mysql Mysql 5.0.1Mysql Mysql 5.0.10Mysql Mysql 5.0.16Mysql Mysql 5.0.20Oracle Mysql 5.0.3Oracle Mysql 5.0.33Mysql Mysql 5.0.5.0.21Oracle Mysql 5.0.6Oracle Mysql 5.1.13Oracle Mysql 5.1.14Oracle Mysql 6.0.2Oracle Mysql 6.0.3Oracle Mysql 5.0.0
3.6
CVSSv2
CVE-2010-1626
MySQL prior to 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247.
Oracle Mysql 5.1.44Oracle Mysql 5.1.43Oracle Mysql 5.1.36Oracle Mysql 5.1.35Mysql Mysql 5.1.5Oracle Mysql 5.0.91Mysql Mysql 5.0.84Oracle Mysql 5.0.83Oracle Mysql 5.0.45Oracle Mysql 5.0.22Oracle Mysql 5.0.21Mysql Mysql 5.0.16Oracle Mysql 5.1.38Mysql Mysql 5.1.37Oracle Mysql 5.1.30Mysql Mysql 5.1.23Oracle Mysql 5.0.86Oracle Mysql 5.0.85Oracle Mysql 5.0.67Oracle Mysql 5.0.51Mysql Mysql 5.0.24Oracle Mysql 5.0.23
6
CVSSv2
CVE-2007-2692
The mysql_change_db function in MySQL 5.0.x prior to 5.0.40 and 5.1.x prior to 5.1.18 does not restore THD::db_access privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges.
Oracle Mysql 5.0.0Mysql Mysql 5.0.1Mysql Mysql 5.0.15Mysql Mysql 5.0.2Mysql Mysql 5.0.3Oracle Mysql 5.0.3Mysql Mysql 5.0.5.0.21Oracle Mysql 5.0.6Oracle Mysql 5.1.12Oracle Mysql 5.1.13Oracle Mysql 5.1.14Mysql Mysql 5.1.5Oracle Mysql 5.1.6Mysql Mysql 5.0.10Mysql Mysql 5.0.16Mysql Mysql 5.0.20Oracle Mysql 5.0.21Oracle Mysql 5.0.33Oracle Mysql 5.0.37Oracle Mysql 5.0.7Oracle Mysql 5.0.8Oracle Mysql 5.1.15
4
CVSSv2
CVE-2008-3963
MySQL 5.0 prior to 5.0.66, 5.1 prior to 5.1.26, and 6.0 prior to 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote malicious users to cause a denial of service (daemon crash) by using this toke...
Mysql Mysql 5.0.0Mysql Mysql 5.0.15Mysql Mysql 5.0.2Oracle Mysql 5.0.23Oracle Mysql 5.0.25Oracle Mysql 5.0.26Oracle Mysql 5.0.33Oracle Mysql 5.0.42Oracle Mysql 5.0.38Mysql Mysql 5.0.54Oracle Mysql 5.0.52Oracle Mysql 5.1.3Oracle Mysql 5.1.4Oracle Mysql 5.1.12Oracle Mysql 5.1.17Oracle Mysql 5.1.21Oracle Mysql 5.1.22Oracle Mysql 6.0.2Oracle Mysql 6.0.1Oracle Mysql 5.0.0Mysql Mysql 5.0.10Mysql Mysql 5.0.22.1.0.1
4
CVSSv2
CVE-2009-4019
mysqld in MySQL 5.0.x prior to 5.0.88 and 5.1.x prior to 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, ...
Oracle Mysql 5.0.25Mysql Mysql 5.0.24Oracle Mysql 5.0.0Oracle Mysql 5.0.11Mysql Mysql 5.0.30Oracle Mysql 5.0.42Oracle Mysql 5.0.32Oracle Mysql 5.0.51Oracle Mysql 5.0.26Oracle Mysql 5.0.33Mysql Mysql 5.0.66Oracle Mysql 5.0.7Mysql Mysql 5.1.23Mysql Mysql 5.1.5Oracle Mysql 5.1.13Oracle Mysql 5.1.14Oracle Mysql 5.1.30Oracle Mysql 5.1Oracle Mysql 5.1.18Oracle Mysql 5.1.19Mysql Mysql 5.0.2Mysql Mysql 5.0.20
6
CVSSv2
CVE-2008-7247
sql/sql_table.cc in MySQL 5.0.x up to and including 5.0.88, 5.1.x up to and including 5.1.41, and 6.0 prior to 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calli...
Mysql Mysql 5.0.20Mysql Mysql 5.0.2Mysql Mysql 5.0.16Oracle Mysql 5.0.0Oracle Mysql 5.0.11Mysql Mysql 5.0.1Oracle Mysql 5.0.42Mysql Mysql 5.0.56Oracle Mysql 5.0.51Mysql Mysql 5.0.5.0.21Oracle Mysql 5.0.33Mysql Mysql 5.0.4Oracle Mysql 5.0.7Oracle Mysql 5.0.75Mysql Mysql 5.1.5Oracle Mysql 5.1.6Oracle Mysql 5.1.14Oracle Mysql 5.1.11Oracle Mysql 5.1Oracle Mysql 5.1.10Oracle Mysql 5.1.19Oracle Mysql 5.1.20
6.5
CVSSv2
CVE-2010-1848
Directory traversal vulnerability in MySQL 5.0 up to and including 5.0.91 and 5.1 prior to 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (d...
Mysql Mysql 5.0.1Mysql Mysql 5.0.10Mysql Mysql 5.0.16Mysql Mysql 5.0.2Mysql Mysql 5.0.20Oracle Mysql 5.0.0Oracle Mysql 5.0.14Mysql Mysql 5.0.15Oracle Mysql 5.0.19Mysql Mysql 5.0.24Oracle Mysql 5.0.45Mysql Mysql 5.0.45bMysql Mysql 5.0.82Oracle Mysql 5.0.83Mysql Mysql 5.0.84Oracle Mysql 5.0.91Oracle Mysql 5.0.9Oracle Mysql 5.0.11Mysql Mysql 5.0.17Oracle Mysql 5.0.21Oracle Mysql 5.0.22Oracle Mysql 5.0.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook