Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Oracle
Mysql

Oracle Mysql vulnerabilities

Known exploitedIn KEVPublic exploitFix available

xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 HighJanuary 21, 2020
spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 MediumJanuary 17, 2020
spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 HighJanuary 16, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema)...CVE-2020-2694Fix available3.1 LowJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2686Fix available6.5 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2679Fix available4.9 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2660Fix available4.9 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2020-2627Fix available6.5 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2589Fix available4.9 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported...CVE-2020-2588Fix available4.9 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported...CVE-2020-2584Fix available4.4 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, netapp active iq unified manager +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2020-2580Fix available4.9 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2020-2579Fix available6.5 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2020-2577Fix available4.9 MediumJanuary 15, 2020
oracle mysql, canonical ubuntu linux, mariadb +6 more +8 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2574Fix available5.9 MediumJanuary 15, 2020
oracle mysql, canonical ubuntu linux, netapp active iq unified manager +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2573Fix available5.9 MediumJanuary 15, 2020
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +4 more +6 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin)....CVE-2020-2572Fix available2.7 LowJanuary 15, 2020
oracle mysql, canonical ubuntu linux, oracle corporation mysql server +2 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2570Fix available5.9 MediumJanuary 15, 2020
sqlite, canonical ubuntu linux, debian linux +4 more +6 moreselectExpander in select.c in SQLite 3.30.1 proceeds with WITH stack unwinding even after a...CVE-2019-20218Fix available7.5 HighJanuary 2, 2020
sqlite, debian linux, netapp cloud backup +11 more +13 morezipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update...CVE-2019-19925Fix available7.5 HighDecember 24, 2019
sqlite, apache bookkeeper, netapp cloud backup +5 more +7 moreSQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window...CVE-2019-19924Fix availableEPSS 10.7%5.3 MediumDecember 24, 2019
sqlite, debian linux, netapp cloud backup +11 more +13 moreflattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving...CVE-2019-19923Fix available7.5 HighDecember 24, 2019
apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 HighDecember 23, 2019
sqlite, debian linux, netapp cloud backup +11 more +13 moremultiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as...CVE-2019-19926Fix available7.5 HighDecember 23, 2019
apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 CriticalDecember 20, 2019
sqlite, debian linux, netapp cloud backup +11 more +13 moreexprListAppendList in window.c in SQLite 3.30.1 allows attackers to trigger an invalid pointer...CVE-2019-19880Fix available7.5 HighDecember 18, 2019
libssh, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0...CVE-2019-14889Fix available7.1 HighDecember 10, 2019
sqlite, apache guacamole, netapp cloud backup +6 more +8 moreSQLite 3.30.1, during handling of CREATE TABLE and CREATE VIEW statements, does not consider...CVE-2019-19603Fix availableEPSS 11.0%7.5 HighDecember 9, 2019
sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morepragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in...CVE-2019-19646Fix available9.8 CriticalDecember 9, 2019
sqlite, netapp cloud backup, ontap select deploy administration utility +6 more +8 morealter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types...CVE-2019-19645Fix available5.5 MediumDecember 9, 2019
openssl, canonical ubuntu linux, debian linux +6 more +8 morersaz_512_sqr overflow bug on x86_64CVE-2019-1551Fix availableEPSS 14.3%5.3 MediumDecember 6, 2019
sqlite, netapp cloud backup, ontap select deploy administration utility +5 more +7 morelookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a...CVE-2019-193179.8 CriticalDecember 5, 2019
sqlite, canonical ubuntu linux, oracle mysql workbench +4 more +6 moresqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and...CVE-2019-19244Fix available7.5 HighNovember 25, 2019
sqlite, canonical ubuntu linux, oracle mysql workbench +5 more +7 moreSQLite 3.30.1 mishandles pExpr->y.pTab, as demonstrated by the TK_COLUMN case in...CVE-2019-19242Fix available5.9 MediumNovember 25, 2019
mysql-gui-tools, fedoraproject fedora +1 moremysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the...CVE-2010-41775.5 MediumNovember 12, 2019
hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 MediumNovember 8, 2019
mysql-gui-tools, fedoraproject fedora +1 moreMySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of...CVE-2010-41785.5 MediumNovember 6, 2019
oracle mysql, fedoraproject fedora, mariadb +4 more +6 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2021-2007Fix available3.7 LowNovember 5, 2019
oracle mysql, canonical ubuntu linux, mariadb +5 more +7 moreVulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions...CVE-2020-2922Fix available3.7 LowNovember 5, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2019-3018Fix available4.4 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported...CVE-2019-3011Fix available6.5 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection)....CVE-2019-3009Fix available4.4 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported...CVE-2019-3004Fix available6.5 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2998Fix available4.9 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported...CVE-2019-2997Fix available4.9 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported...CVE-2019-2993Fix available5.3 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2991Fix available5.5 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2982Fix available4.9 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +3 more +5 moreVulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer)....CVE-2019-2974Fix available6.5 MediumOctober 16, 2019
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +5 more +7 moreVulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions...CVE-2019-2968Fix available4.9 MediumOctober 16, 2019
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open