Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,903

Export CSV
CVE-2012-1734

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Jul 2012)

Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 4 more
CVE-2012-1735

mysql: unspecified vulnerability related to Server Optimizer DoS

Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Mariadb Oracle
Products
Mariadb Mysql
CVE-2012-1756

mysql: unspecified vulnerability leads to DoS via unspecified vectors

Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Mariadb Oracle
Products
Mariadb Mysql
CVE-2012-1757

mysql: unspecified vulnerability related to InnoDB DoS

Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed
Vendors
Mariadb Oracle
Products
Mariadb Mysql
CVE-2012-2102

mysql: Server crash on HANDLER READ NEXT after DELETE

MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.

CVSS 2.0 · 3.5 Low EPSS 2.1% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-2122

mysql: incorrect type cast in check_scramble() leading to authentication bypass

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.

CVSS 2.0 · 5.1 Medium EPSS 96.6% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux
CVE-2012-2749

mysql: crash caused by wrong calculation of key length for sort order index

MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.

CVSS 2.0 · 4.0 Medium EPSS 1.9% KEV · Not listed
Vendors
Mysql Oracle Redhat
Products
Mysql Mysql Enterprise Linux
CVE-2012-2750

mysql: unspecified flaw related to Optimizer

Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.

CVSS 2.0 · 10.0 Critical EPSS 3.6% KEV · Not listed
Vendors
Debian Mariadb Oracle
Products
Debian Linux Mariadb Mysql
CVE-2012-3144

mysql: unspecified Server DoS vulnerability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.

CVSS 2.0 · 4.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Oracle
Products
Mysql
CVE-2012-3147

mysql: unspecified client vulnerability with integrity and availability impact

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client.

CVSS 2.0 · 6.4 Medium EPSS 2.9% KEV · Not listed
Vendors
Oracle
Products
Mysql
CVE-2012-3149

mysql: unspecified client vulnerability with confidentiality impact

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote authenticated users to affect confidentiality, related to MySQL Client.

CVSS 2.0 · 3.5 Low EPSS 1.6% KEV · Not listed
Vendors
Oracle
Products
Mysql
CVE-2012-3150

mysql: unspecified DoS vulnerability related to Server Optimizer (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-3156

mysql: unspecified Server DoS vulnerability

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server.

CVSS 2.0 · 3.5 Low EPSS 1.9% KEV · Not listed
Vendors
Oracle
Products
Mysql
CVE-2012-3158

mysql: unspecified vulnerability related to the MySQL Protocol (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-3160

mysql: unspecified vulnerability in Server Installation leading to information disclosure (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-3163

mysql: unspecified vulnerability related to Information Schema (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.

CVSS 2.0 · 9.0 Critical EPSS 5.1% KEV · Not listed
Vendors
Canonical Debian F5 and 3 more
Products
Ubuntu Linux Debian Linux Big-ip Access Policy Manager and 19 more
CVE-2012-3166

mysql: unspecified DoS vulnerability related to InnoDB (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

CVSS 2.0 · 4.0 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-3167

mysql: unspecified DoS vulnerability related to Server Full Text Search (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.

CVSS 2.0 · 3.5 Low EPSS 2.7% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-3173

mysql: unspecified DoS vulnerability related to InnoDB Plugin (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.

CVSS 2.0 · 4.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more
CVE-2012-3177

mysql: unspecified Server DoS vulnerability (CPU Oct 2012)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.

CVSS 2.0 · 6.8 Medium EPSS 3.7% KEV · Not listed
Vendors
Canonical Debian Mariadb and 2 more
Products
Ubuntu Linux Debian Linux Mariadb and 6 more