MySQL - 2289 CVEs (Page 11/20)

About “MySQL”

A curated feed of “MySQL”-related CVEs appears below. We currently track 2289 CVEs for this tag (all time). In the last 365 days, 184 were published. Average CVSS is 5.6 (all time; 6.4 over 365d), and 20% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-400 - Uncontrolled Resource Consumption, CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE-284 - Improper Access Control.

In our taxonomy this topic maps to a MODERATE impact class. Databases, proxies, and web servers often need coordinated restarts and config checks. Patch only modules you deploy, verify TLS and authentication, and tune limits. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0

2019-09-24

Critical

CVE-2019-16383

MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database.…

CVSS: 9.4 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

2019-09-23

Medium

CVE-2019-15635

An issue was discovered in Grafana 5.4.0. Passwords for data sources used by Grafana (e.g., MySQL) are not encrypted. An admin user can reveal passwords for any data source by pressing the "Save and…

CVSS: 4.9 CWE: CWE-319 - Cleartext Transmission of Sensitive Information View on NVD

2019-08-15

High

CVE-2018-14669

ClickHouse MySQL client before versions 1.1.54390 had "LOAD DATA LOCAL INFILE" functionality enabled that allowed a malicious MySQL database read arbitrary files from the connected ClickHouse server.

CVSS: 7.5 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

2019-08-12

Medium

CVE-2019-14939

An issue was discovered in the mysql (aka mysqljs) module 2.17.1 for Node.js. The LOAD DATA LOCAL INFILE option is open by default.

CVSS: 5.5 CWE: N/A View on NVD

2019-08-05

High

CVE-2017-18470

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

CVSS: 8.8 CWE: CWE-255 View on NVD

Medium

CVE-2016-10768

cPanel before 60.0.25 allows file-overwrite operations during preparation for MySQL upgrades (SEC-161).

CVSS: 6.5 CWE: CWE-20 - Improper Input Validation View on NVD

2019-08-02

High

CVE-2017-18432

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).

CVSS: 7.8 CWE: CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor View on NVD

Medium

CVE-2017-18411

The "addon domain conversion" feature in cPanel before 67.9999.103 can copy all MySQL databases to the new account (SEC-285).

CVSS: 6.8 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2017-18410

In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).

CVSS: 6.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2017-18409

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases (SEC-283).

CVSS: 6.5 CWE: CWE-20 - Improper Input Validation View on NVD

Medium

CVE-2017-18408

cPanel before 67.9999.103 allows stored XSS in WHM MySQL Password Change interfaces (SEC-282).

CVSS: 5.4 CWE: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') View on NVD

2019-07-30

High

CVE-2019-14389

cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510).

CVSS: 7.8 CWE: N/A View on NVD

2019-07-23

Medium

CVE-2019-2879

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privileged…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2834

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low p…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2830

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2826

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows…

CVSS: 4.9 CWE: N/A View on NVD

High

CVE-2019-2822

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Admin / InnoDB Cluster). Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerabilit…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2819

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior.…

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2019-2815

CVSS: 4.9 CWE: N/A View on NVD

Low

CVE-2019-2814

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows high privilege…

CVSS: 2.2 CWE: N/A View on NVD

Medium

CVE-2019-2812

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2811

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability a…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2810

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2808

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2805

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily ex…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2803

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2802

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2801

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privil…

CVSS: 4.9 CWE: N/A View on NVD

High

CVE-2019-2800

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2019-2798

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2797

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vulne…

CVSS: 4.2 CWE: N/A View on NVD

Medium

CVE-2019-2796

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2795

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low pr…

CVSS: 6.5 CWE: N/A View on NVD

Low

CVE-2019-2791

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable v…

CVSS: 3.8 CWE: N/A View on NVD

Low

CVE-2019-2789

CVSS: 2.7 CWE: N/A View on NVD

Medium

CVE-2019-2785

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2784

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high privil…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2780

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components / Services). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2778

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploi…

CVSS: 5.4 CWE: N/A View on NVD

Medium

CVE-2019-2774

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulne…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2758

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability al…

CVSS: 5.5 CWE: N/A View on NVD

Medium

CVE-2019-2757

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2755

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vul…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2752

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows high pr…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2747

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: GIS). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privil…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2746

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Data Dictionary). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2743

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.12 and prior. Difficult to exploit vulnerability allo…

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2741

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Log). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Difficult to exploit vul…

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2740

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily explo…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2739

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and pr…

CVSS: 5.1 CWE: N/A View on NVD

Low

CVE-2019-2738

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Compiling). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Diffi…

CVSS: 3.1 CWE: N/A View on NVD

Medium

CVE-2019-2737

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior.…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2731

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.23 and prior. Easily exploitable vulnerability allows low…

CVSS: 5.4 CWE: N/A View on NVD

Low

CVE-2019-2730

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.44 and prior and 5.7.18 and prior. Easily exploi…

CVSS: 2.7 CWE: N/A View on NVD

2019-07-18

High

CVE-2019-1010246

MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password information disclosure. The impact is: MySQL database content disclosure (e.g. user…

CVSS: 7.5 CWE: CWE-862 - Missing Authorization View on NVD

Critical

CVE-2019-1010248

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can expl…

CVSS: 9.8 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

Critical

CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The my…

CVSS: 9.8 CWE: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') View on NVD

2019-06-19

High

CVE-2019-11271

Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database. A local authenticated malicious user ma…

CVSS: 7.8 CWE: CWE-532 - Insertion of Sensitive Information into Log File View on NVD

2019-06-15

High

CVE-2019-12831

In MyBB before 1.8.21, an attacker can abuse a default behavior of MySQL on many systems (that leads to truncation of strings that are too long for a database column) to create a PHP shell in the cac…

CVSS: 7.2 CWE: CWE-20 - Improper Input Validation View on NVD

2019-05-23

High

CVE-2019-10855

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.

CVSS: 7.5 CWE: CWE-326 - Inadequate Encryption Strength View on NVD

2019-05-17

High

CVE-2019-12086

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON en…

CVSS: 7.5 CWE: CWE-502 - Deserialization of Untrusted Data View on NVD

2019-04-23

Medium

CVE-2019-2695

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows low p…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2694

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2693

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2692

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high…

CVSS: 6.3 CWE: N/A View on NVD

Medium

CVE-2019-2691

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2689

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2688

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2687

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2686

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2685

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2683

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily e…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2681

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2644

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privil…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2636

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Group Replication Plugin). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerabi…

CVSS: 4.4 CWE: N/A View on NVD

Medium

CVE-2019-2635

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows hig…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2634

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows u…

CVSS: 5.1 CWE: N/A View on NVD

High

CVE-2019-2632

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Pluggable Auth). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable…

CVSS: 7.5 CWE: N/A View on NVD

Medium

CVE-2019-2631

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability all…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2630

CVSS: 4.4 CWE: N/A View on NVD

Medium

CVE-2019-2628

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability al…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2627

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and pr…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2626

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2625

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2624

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2623

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows low p…

CVSS: 5.3 CWE: N/A View on NVD

Medium

CVE-2019-2620

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability a…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2617

CVSS: 4.4 CWE: N/A View on NVD

Medium

CVE-2019-2614

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Diff…

CVSS: 4.4 CWE: N/A View on NVD

Medium

CVE-2019-2607

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2606

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2596

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2593

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2592

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerabilit…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2589

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2587

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2585

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2584

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2581

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulne…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2580

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2566

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.25 and prior and 8.0.15 and prior. Easily exploitable v…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2018-3123

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: libmysqld). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Diffic…

CVSS: 5.9 CWE: N/A View on NVD

2019-01-26

Medium

CVE-2019-6799

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the serv…

CVSS: 5.9 CWE: N/A View on NVD

2019-01-16

Medium

CVE-2019-2539

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2537

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily explo…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2536

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 8.0.13 and prior. Difficult to exploit vulnerability allows hig…

CVSS: 5.0 CWE: N/A View on NVD

Medium

CVE-2019-2535

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.13 and prior. Difficult to exploit vulnerability allows high…

CVSS: 4.1 CWE: N/A View on NVD

High

CVE-2019-2534

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easi…

CVSS: 7.1 CWE: N/A View on NVD

Medium

CVE-2019-2533

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2532

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploi…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2531

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2530

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2529

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and prior. Easily…

CVSS: 6.5 CWE: N/A View on NVD

Medium

CVE-2019-2528

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulne…

CVSS: 4.9 CWE: N/A View on NVD

Low

CVE-2019-2513

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell). Supported versions that are affected are 8.0.13 and prior. Difficult to exploit vulnerability allows low privileged…

CVSS: 2.5 CWE: N/A View on NVD

Medium

CVE-2019-2510

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability al…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2507

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2503

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). Supported versions that are affected are 5.6.42 and prior, 5.7.24 and prior and 8.0.13 and pri…

CVSS: 6.4 CWE: N/A View on NVD

Medium

CVE-2019-2502

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged…

CVSS: 4.9 CWE: N/A View on NVD

Medium

CVE-2019-2495

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privil…

CVSS: 4.9 CWE: N/A View on NVD