Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle mysql vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2

CVE-2006-4031

MySQL 4.1 prior to 4.1.21 and 5.0 prior to 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Mysql Mysql 5.0.5Mysql Mysql 5.0.10Mysql Mysql 5.0.15Mysql Mysql 5.0.17Mysql Mysql 4.1.13Mysql Mysql 5.0.5.0.21Mysql Mysql 5.0.3Mysql Mysql 4.1.15Mysql Mysql 4.1.8Mysql Mysql 4.1.14Mysql Mysql 4.1.12Mysql Mysql 4.1.10Mysql Mysql 5.0.2Mysql Mysql 5.0.22.1.0.1Mysql Mysql 5.0.20Mysql Mysql 5.0.1Mysql Mysql 4.1.0Mysql Mysql 5.0.4Mysql Mysql 4.1.3Mysql Mysql 5.0.16Mysql Mysql 4.1.2Oracle Mysql 3.22.27
7.5
CVSSv2

CVE-2013-1492

Buffer overflow in yaSSL, as used in MySQL 5.1.x prior to 5.1.68 and 5.5.x prior to 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.
Oracle Mysql 5.1.63Oracle Mysql 5.1.52Oracle Mysql 5.1.59Mysql Mysql 5.1.23Mysql Mysql 5.1.34Oracle Mysql 5.1.51Oracle Mysql 5.1.62Oracle Mysql 5.1.60Oracle Mysql 5.1.54Oracle Mysql 5.1.53Oracle Mysql 5.1.61Oracle Mysql 5.1.55Oracle Mysql 5.1.57Oracle Mysql 5.1.65Oracle Mysql 5.1.58Mysql Mysql 5.1.37Oracle Mysql 5.1.66Oracle Mysql 5.1.64Mysql Mysql 5.1.31Oracle Mysql 5.1.67Oracle Mysql 5.1.56Mysql Mysql 5.1.32
6.8
CVSSv2

CVE-2009-4028

The vio_verify_callback function in viosslfactories.c in MySQL 5.0.x prior to 5.0.88 and 5.1.x prior to 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle malicious users to spoof arbitrary SSL-based MySQL ser...
Mysql Mysql 5.0.5Mysql Mysql 5.0.10Mysql Mysql 5.0.54Mysql Mysql 5.0.0Mysql MysqlMysql Mysql 5.1.23Mysql Mysql 5.0.84Mysql Mysql 5.0.15Mysql Mysql 5.1.34Mysql Mysql 5.0.17Mysql Mysql 5.0.5.0.21Mysql Mysql 5.0.3Mysql Mysql 5.0.44Mysql Mysql 5.0.66Mysql Mysql 5.0.56Mysql Mysql 5.0.60Mysql Mysql 5.0.24Mysql Mysql 5.0.2Mysql Mysql 5.1.37Mysql Mysql 5.0.22.1.0.1Mysql Mysql 5.0.30Mysql Mysql 5.0.20
4
CVSSv2

CVE-2010-3835

MySQL 5.1 prior to 5.1.51 and 5.5 prior to 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the...
Mysql Mysql 5.1.23Mysql Mysql 5.1.34Mysql Mysql 5.1.37Mysql Mysql 5.1.31Mysql Mysql 5.1.32Mysql Mysql 5.1.5Oracle Mysql 5.1.39Oracle Mysql 5.1.40Oracle Mysql 5.1.41Oracle Mysql 5.1.42Oracle Mysql 5.1.43Oracle Mysql 5.1.44Oracle Mysql 5.1.45Oracle Mysql 5.1.46Oracle Mysql 5.1.47Oracle Mysql 5.1.48Oracle Mysql 5.1.49Oracle Mysql 5.1.50Oracle Mysql 5.1Oracle Mysql 5.1.1Oracle Mysql 5.1.2Oracle Mysql 5.1.3
4
CVSSv2

CVE-2010-3839

MySQL 5.1 prior to 5.1.51 and 5.5 prior to 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
Mysql Mysql 5.1.23Mysql Mysql 5.1.34Mysql Mysql 5.1.37Mysql Mysql 5.1.31Mysql Mysql 5.1.32Mysql Mysql 5.1.5Oracle Mysql 5.1.39Oracle Mysql 5.1.40Oracle Mysql 5.1.41Oracle Mysql 5.1.42Oracle Mysql 5.1.43Oracle Mysql 5.1.44Oracle Mysql 5.1.45Oracle Mysql 5.1.46Oracle Mysql 5.1.47Oracle Mysql 5.1.48Oracle Mysql 5.1.49Oracle Mysql 5.1.50Oracle Mysql 5.1Oracle Mysql 5.1.1Oracle Mysql 5.1.2Oracle Mysql 5.1.3
7.5
CVSSv2

CVE-2012-0553

Buffer overflow in yaSSL, as used in MySQL 5.1.x prior to 5.1.68 and 5.5.x prior to 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492.
Oracle Mysql 5.1.63Oracle Mysql 5.1.52Oracle Mysql 5.1.59Mysql Mysql 5.1.23Mysql Mysql 5.1.34Oracle Mysql 5.1.51Oracle Mysql 5.1.62Oracle Mysql 5.1.60Oracle Mysql 5.1.54Oracle Mysql 5.1.53Oracle Mysql 5.1.61Oracle Mysql 5.1.55Oracle Mysql 5.1.57Oracle Mysql 5.1.65Oracle Mysql 5.1.58Mysql Mysql 5.1.37Oracle Mysql 5.1.66Oracle Mysql 5.1.64Mysql Mysql 5.1.31Oracle Mysql 5.1.67Oracle Mysql 5.1.56Mysql Mysql 5.1.32
4
CVSSv2

CVE-2010-3840

The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 prior to 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line s...
Mysql Mysql 5.1.23Mysql Mysql 5.1.34Mysql Mysql 5.1.37Mysql Mysql 5.1.31Mysql Mysql 5.1.32Mysql Mysql 5.1.5Oracle Mysql 5.1.39Oracle Mysql 5.1.40Oracle Mysql 5.1.41Oracle Mysql 5.1.42Oracle Mysql 5.1.43Oracle Mysql 5.1.44Oracle Mysql 5.1.45Oracle Mysql 5.1.46Oracle Mysql 5.1.47Oracle Mysql 5.1.48Oracle Mysql 5.1.49Oracle Mysql 5.1.50Oracle Mysql 5.1Oracle Mysql 5.1.1Oracle Mysql 5.1.2Oracle Mysql 5.1.3
5
CVSSv2

CVE-2011-2262

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote malicious users to affect availability via unknown vectors.
Oracle Mysql 5.1.63Oracle Mysql 5.1.52Oracle Mysql 5.1.59Mysql Mysql 5.1.23Mysql Mysql 5.1.34Oracle Mysql 5.1.51Oracle Mysql 5.1.62Oracle Mysql 5.1.60Oracle Mysql 5.1.54Oracle Mysql 5.1.53Oracle Mysql 5.1.61Oracle Mysql 5.1.55Oracle Mysql 5.1.57Oracle Mysql 5.1.65Oracle Mysql 5.1.58Mysql Mysql 5.1.37Oracle Mysql 5.1.64Mysql Mysql 5.1.31Oracle Mysql 5.1.56Mysql Mysql 5.1.32Mysql Mysql 5.1.5Oracle Mysql 5.1.39
4
CVSSv2

CVE-2010-3677

Oracle MySQL 5.1 prior to 5.1.49 and 5.0 prior to 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
Mysql Mysql 5.1.23Mysql Mysql 5.1.34Mysql MysqlMysql Mysql 5.1.37Mysql Mysql 5.1.31Mysql Mysql 5.1.32Oracle Mysql 5.1.39Oracle Mysql 5.1.40Oracle Mysql 5.1.41Oracle Mysql 5.1.42Oracle Mysql 5.1.43Oracle Mysql 5.1.44Oracle Mysql 5.1.45Oracle Mysql 5.1.46Oracle Mysql 5.1.47Oracle Mysql 5.1.1Oracle Mysql 5.1.2Oracle Mysql 5.1.3Oracle Mysql 5.1.4Oracle Mysql 5.1.10Oracle Mysql 5.1.11Oracle Mysql 5.1.12
4
CVSSv2

CVE-2010-3682

Oracle MySQL 5.1 prior to 5.1.49 and 5.0 prior to 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer d...
Mysql Mysql 5.1.23Mysql Mysql 5.1.34Mysql MysqlMysql Mysql 5.1.37Mysql Mysql 5.1.31Mysql Mysql 5.1.32Oracle Mysql 5.1.39Oracle Mysql 5.1.40Oracle Mysql 5.1.41Oracle Mysql 5.1.42Oracle Mysql 5.1.43Oracle Mysql 5.1.44Oracle Mysql 5.1.45Oracle Mysql 5.1.46Oracle Mysql 5.1.47Oracle Mysql 5.1.1Oracle Mysql 5.1.2Oracle Mysql 5.1.3Oracle Mysql 5.1.4Oracle Mysql 5.1.10Oracle Mysql 5.1.11Oracle Mysql 5.1.12
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
file inclusionprivilegeinsecure direct object referenceCVE-2024-37404CVE-2024-9466CVE-2024-30118CVE-2024-47668CVE-2024-43573CVE-2024-45144
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook