Skip to content

Oracle Mysql vulnerabilities

mysqlStack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1...CVE-2005-2558Fix available4.6 MediumAugust 16, 2005
mysqlmysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X...CVE-2005-1636Fix available4.6 MediumMay 17, 2005
oracle mysqlMySQL 4.1.9, and possibly earlier versions, allows remote attackers with certain privileges to...CVE-2005-07995.0 MediumMarch 15, 2005
mysqlMySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating...CVE-2005-0711Public exploit2.1 LowMarch 11, 2005
mysqlMySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT...CVE-2005-0710Public exploitEPSS 12.4%4.6 MediumMarch 11, 2005
mysqlMySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT...CVE-2005-0709Public exploitEPSS 17.8%4.6 MediumMarch 11, 2005
oracle mysql, debian linux, mariadb +2 moreThe mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and...CVE-2005-0004Fix available4.6 MediumJanuary 19, 2005
oracle mysqlBuffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4...CVE-2004-21495.0 MediumDecember 31, 2004
oracle mysql, suse linux +1 moreMySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via...CVE-2004-09565.0 MediumDecember 5, 2004
oracle mysql, openpkg, redhat enterprise linux +3 more +5 moreUnknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a...CVE-2004-09576.8 MediumOctober 21, 2004
mysql, debian linux +1 moreMySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service ...CVE-2004-08372.6 LowOctober 11, 2004
oracle mysql, debian linux +1 moreBuffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3...CVE-2004-083610.0 HighOctober 11, 2004
mysql, debian linux +1 moreMySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the...CVE-2004-0835Public exploitEPSS 22.4%7.5 HighOctober 11, 2004
oracle mysqlThe mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql...CVE-2004-0457Fix available4.6 MediumAugust 18, 2004
oracle mysqlThe mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink...CVE-2004-03882.1 LowApril 14, 2004
mysqlmysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the...CVE-2004-03812.1 LowApril 6, 2004
mysqlMySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for...CVE-2003-1480Public exploit4.3 MediumDecember 31, 2003
oracle mysqlStack-based buffer overflow in the mysql_real_connect function in the MySql client library ...CVE-2003-13314.0 MediumDecember 31, 2003
mysql, conectiva linux +1 moreBuffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23...CVE-2003-0780Public exploitFix availableEPSS 78.4%9.0 HighSeptember 12, 2003
oracle mysqlMySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root...CVE-2003-0150Public exploitEPSS 44.8%9.0 HighMarch 21, 2003
oracle mysqlDouble-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access...CVE-2003-0073Fix available5.0 MediumFebruary 19, 2003
oracle mysqlThe default configuration in MySQL 3.20.32 through 3.23.52, when running on Windows, does not...CVE-2002-19237.5 HighDecember 31, 2002
oracle mysqlThe default configuration of MySQL 3.20.32 through 3.23.52, when running on Windows, does set the...CVE-2002-19217.5 HighDecember 31, 2002
oracle mysqlThe default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a...CVE-2002-1809Public exploitEPSS 16.1%7.5 HighDecember 31, 2002
oracle mysql, symantec veritas netbackup advanced reporter, netbackup global data manager +2 morelibmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify...CVE-2002-13767.5 HighDecember 17, 2002
oracle mysql, symantec veritas netbackup advanced reporter, netbackup global data manager +2 moreThe COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote...CVE-2002-1375Public exploitEPSS 23.5%7.5 HighDecember 17, 2002
oracle mysql, symantec veritas netbackup advanced reporter, netbackup global data manager +2 moreThe COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote...CVE-2002-1374Public exploitEPSS 20.5%7.5 HighDecember 17, 2002
oracle mysqlSigned integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows...CVE-2002-13735.0 MediumDecember 17, 2002
oracle mysqlBuffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32...CVE-2002-09697.8 HighOctober 11, 2002
mysql winmysqladmin, oracle mysql +1 moreWinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local...CVE-2001-12554.6 MediumOctober 2, 2001
oracle mysqlDirectory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary...CVE-2001-0407Public exploit4.6 MediumJune 27, 2001
oracle mysqlBuffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a...CVE-2001-14547.5 HighFebruary 9, 2001
oracle mysqlBuffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to...CVE-2001-1453EPSS 11.3%7.5 HighFebruary 9, 2001
oracle mysqlBuffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and...CVE-2001-1274Public exploit7.5 HighJanuary 23, 2001
oracle mysqlMySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain...CVE-2001-12757.2 HighJanuary 19, 2001
oracle mysqlMySQL Database Engine uses a weak authentication method which leaks information that could be...CVE-2000-09817.2 HighDecember 19, 2000
oracle mysqlMySQL 3.22 allows remote attackers to bypass password authentication and access a database via a...CVE-2000-01487.5 HighFebruary 8, 2000
oracle mysqlMySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.CVE-2000-0045Public exploit6.4 MediumJanuary 11, 2000
oracle mysqlmysqld in MySQL 3.21 creates log files with world-readable permissions, which allows local users...CVE-1999-11884.6 MediumDecember 27, 1998