Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 117

Export CSV
CVE-2010-3837

MySQL: crash when group_concat and "with rollup" in prepared statements (MySQL Bug#54476)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3838

MySQL: crash with LONGBLOB and union or update with subquery (MySQL Bug#54461)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result is "processed using an intermediate temporary table."

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3839

MySQL: server hangs during JOIN query in stored procedures called twice in a row (MySQL Bug#53544)

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2010-3840

MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)

The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2011-2262

mysql: Unspecified vulnerability allows remote attackers to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0075

mysql: Unspecified vulnerability allows remote authenticated users to affect integrity

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.

CVSS 2.0 · 1.7 Low EPSS 2.4% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0087

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0101 and CVE-2012-0102.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0101

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0102.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0102

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0112

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.

CVSS 2.0 · 3.5 Low EPSS 2.1% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0113

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.

CVSS 2.0 · 5.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0114

mysql: Unspecified vulnerability allows local users to affect confidentiality and integrity

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.

CVSS 2.0 · 3.0 Low EPSS < 1% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0115

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.

CVSS 2.0 · 4.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0116

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and integrity

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

CVSS 2.0 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0118

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality and availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.

CVSS 2.0 · 4.9 Medium EPSS 2.1% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0119

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.

CVSS 2.0 · 4.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0120

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.

CVSS 2.0 · 4.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0484

mysql: Unspecified vulnerability allows remote authenticated users to affect confidentiality

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 2.6% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0485

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-0490

mysql: Unspecified vulnerability allows remote authenticated users to affect availability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 2.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux