Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 456

Export CSV
CVE-2014-4243

mysql: unspecified vulnerability related to ENFED (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

CVSS 2.0 · 2.8 Low EPSS 3.4% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Solaris and 5 more
CVE-2014-6505

mysql: unspecified vulnerability related to SERVER:MEMORY STORAGE ENGINE (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Enterprise Linux and 6 more
CVE-2016-3521

mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: Types.

CVSS 3.0 · 6.5 Medium EPSS 10.4% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Powerkvm and 5 more
CVE-2014-4207

mysql: unspecified vulnerability related to SROPTZR (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

CVSS 2.0 · 4.0 Medium EPSS 3.9% KEV · Not listed
Vendors
Debian Mariadb Oracle and 2 more
Products
Debian Linux Mariadb Mysql and 7 more
CVE-2014-3470

openssl: client-side denial of service when using anonymous ECDH

The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.

CVSS 2.0 · 4.3 Medium EPSS 85.8% KEV · Not listed
Vendors
Fedoraproject Mariadb Openssl and 3 more
Products
Fedora Mariadb Openssl and 8 more
CVE-2014-6551

mysql: unspecified vulnerability related to CLIENT:MYSQLADMIN (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Mariadb Oracle Redhat and 1 more
Products
Mariadb Mysql Solaris and 7 more
CVE-2016-3492

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

CVSS 3.1 · 6.5 Medium EPSS 6.8% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 7 more
CVE-2016-3615

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote authenticated users to affect availability via vectors related to Server: DML.

CVSS 3.0 · 5.3 Medium EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Ibm and 3 more
Products
Ubuntu Linux Debian Linux Powerkvm and 5 more
CVE-2016-5612

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 7 more
CVE-2014-2494

mysql: unspecified vulnerability related to ENARC (CPU July 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

CVSS 2.0 · 4.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Debian Mariadb Oracle and 2 more
Products
Debian Linux Mariadb Mysql and 7 more
CVE-2014-2440

mysql: unspecified vulnerability related to Client (CPU April 2014)

Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0 · 5.1 Medium EPSS 4.7% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Solaris and 6 more
CVE-2016-3459

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier and MariaDB 10.0.x before 10.0.25 and 10.1.x before 10.1.14 allows remote administrators to affect availability via vectors related to Server: InnoDB.

CVSS 3.0 · 4.9 Medium EPSS 3.3% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Rhel Software Collections
CVE-2014-2438

mysql: unspecified DoS related to Replication (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

CVSS 2.0 · 3.5 Low EPSS 3.2% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 7 more
CVE-2014-2436

mysql: unspecified vulnerability related to RBR (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.

CVSS 2.0 · 6.5 Medium EPSS 3.8% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Solaris and 8 more
CVE-2016-3452

mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption.

CVSS 3.0 · 3.7 Low EPSS 4.1% KEV · Not listed
Vendors
Ibm Mariadb Oracle and 1 more
Products
Powerkvm Mariadb Linux and 3 more
CVE-2016-3471

mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)

Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Enterprise Linux and 1 more
CVE-2014-2432

mysql: unspecified DoS related to Federated (CPU April 2014)

Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.

CVSS 2.0 · 2.8 Low EPSS 3.4% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Solaris and 8 more
CVE-2014-2431

mysql: unspecified DoS related to Options (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

CVSS 2.0 · 2.6 Low EPSS 5.1% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Solaris and 8 more
CVE-2016-0668

mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU April 2016)

Unspecified vulnerability in Oracle MySQL 5.6.28 and earlier and 5.7.10 and earlier and MariaDB 10.0.x before 10.0.24 and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to InnoDB.

CVSS 3.1 · 4.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Mariadb and 4 more
Products
Ubuntu Linux Debian Linux Mariadb and 8 more
CVE-2014-2430

mysql: unspecified DoS related to Performance Schema (CPU April 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

CVSS 2.0 · 3.5 Low EPSS 3.3% KEV · Not listed
Vendors
Mariadb Oracle Redhat
Products
Mariadb Mysql Solaris and 8 more