Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 102

Export CSV
CVE-2010-1848

mysql: multiple insufficient table name checks

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name.

CVSS 2.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-1849

mysql: over-sized packet denial of service vulnerability

The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.

CVSS 2.0 · 5.0 Medium EPSS 3.7% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-1850

mysql: COM_FIELD_LIST table name buffer overflow

Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name.

CVSS 2.0 · 6.0 Medium EPSS 21.8% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3676

MySQL: mysqld DoS (assertion failure) after changing InnoDB storage engine configuration parameters (MySQL bug #55039)

storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement.

CVSS 2.0 · 4.0 Medium EPSS 9.5% KEV · Not listed
Vendors
Mysql Oracle
Products
Mysql Mysql
CVE-2010-3677

MySQL: Mysqld DoS (crash) by processing joins involving a table with a unique SET column (MySQL BZ#54575)

Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.

CVSS 2.0 · 4.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3678

MySQL: mysqld DoS (crash) by processing IN / CASE statements with NULL arguments (MySQL bug #54477)

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.

CVSS 2.0 · 4.0 Medium EPSS 12.2% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3679

MySQL: Use of unassigned memory (valgrind errors / crash) by providing certain values to BINLOG statement (MySQL BZ#54393)

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.

CVSS 2.0 · 4.0 Medium EPSS 12.2% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3680

MySQL: mysqld DoS (assertion failure) by using temporary InnoDB engine tables with nullable columns (MySQL bug #54044)

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.

CVSS 2.0 · 4.0 Medium EPSS 12.2% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3681

MySQL: mysqld DoS (assertion failure) by alternate reads from two indexes on a table using the HANDLER interface (MySQL bug #54007)

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.

CVSS 2.0 · 4.0 Medium EPSS 12.2% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3682

MySQL: mysqld DoS (crash) by processing EXPLAIN statements for complex SQL queries (MySQL bug #52711)

Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.

CVSS 2.0 · 4.0 Medium EPSS 11.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3683

MySQL: mysqld DoS (assertion failure) while reading the file back into a table (MySQL bug #52512)

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.

CVSS 2.0 · 4.0 Medium EPSS 12.2% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3833

MySQL: CREATE TABLE ... SELECT causes crash when KILL_BAD_DATA is returned (MySQL Bug#55826)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ... SELECT."

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3834

MySQL: user variable assignments crash server when used within query (MySQL Bug#55568)

Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."

CVSS 2.0 · 4.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Mysql Oracle
Products
Mysql Mysql
CVE-2010-3835

MySQL: crash with user variables, assignments, joins... (MySQL Bug #55564)

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3836

MySQL: pre-evaluating LIKE arguments in view prepare mode causes crash (MySQL Bug#54568)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers.

CVSS 2.0 · 4.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3837

MySQL: crash when group_concat and "with rollup" in prepared statements (MySQL Bug#54476)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3838

MySQL: crash with LONGBLOB and union or update with subquery (MySQL Bug#54461)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result is "processed using an intermediate temporary table."

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3839

MySQL: server hangs during JOIN query in stored procedures called twice in a row (MySQL Bug#53544)

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3840

MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)

The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2011-2262

mysql: Unspecified vulnerability allows remote attackers to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux