p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de la pila Bases de datos · Página 32

Vulnerabilidades publicadas para Bases de datos en los últimos 30 días: 81. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Bases de datos

Vulnerabilidades: 1413

  1. CVE-2022-39410

    Media · CVSS 6.5EPSS 1,52%Corrección disponible

    CVE-2022-39410

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  2. CVE-2022-39408

    Media · CVSS 6.5EPSS 1,52%Corrección disponible

    CVE-2022-39408

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  3. CVE-2022-39403

    Baja · CVSS 3.9EPSS 0,46%Sin corrección publicada

    CVE-2022-39403

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 3.9 (Confidentiality and In

    Publicación Actualización
  4. CVE-2022-39402

    Media · CVSS 4.3EPSS 0,45%Sin corrección publicada

    CVE-2022-39402

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

    Publicación Actualización
  5. CVE-2022-39400

    Media · CVSS 4.9EPSS 1,45%Corrección disponible

    CVE-2022-39400

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  6. CVE-2022-21641

    Media · CVSS 4.9EPSS 1,25%Corrección disponible

    CVE-2022-21641

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.30-0ubuntu0.20.04.2
    • Actualiza a 8.0.30-0ubuntu0.22.04.1
    Publicación Actualización
  7. CVE-2022-21640

    Media · CVSS 4.9EPSS 1,45%Corrección disponible

    CVE-2022-21640

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  8. CVE-2022-21638

    Media · CVSS 4.9EPSS 1,25%Corrección disponible

    CVE-2022-21638

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.30-0ubuntu0.20.04.2
    • Actualiza a 8.0.30-0ubuntu0.22.04.1
    Publicación Actualización
  9. CVE-2022-21637

    Media · CVSS 4.9EPSS 1,45%Corrección disponible

    CVE-2022-21637

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  10. CVE-2022-21635

    Media · CVSS 6.5EPSS 1,34%Corrección disponible

    CVE-2022-21635

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/

    • Actualiza a 8.0.30-0ubuntu0.20.04.2
    • Actualiza a 8.0.30-0ubuntu0.22.04.1
    Publicación Actualización
  11. CVE-2022-21633

    Media · CVSS 4.9EPSS 1,47%Corrección disponible

    CVE-2022-21633

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  12. CVE-2022-21632

    Media · CVSS 4.9EPSS 1,47%Corrección disponible

    CVE-2022-21632

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  13. CVE-2022-21625

    Media · CVSS 4.4EPSS 1,34%Corrección disponible

    CVE-2022-21625

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  14. CVE-2022-21617

    Media · CVSS 4.9EPSS 1,74%Corrección disponible

    CVE-2022-21617

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.40-0ubuntu0.16.04.1+esm1
    • Actualiza a 5.7.40-0ubuntu0.18.04.1
    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  15. CVE-2022-21611

    Media · CVSS 4.1EPSS 0,46%Corrección disponible

    CVE-2022-21611

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  16. CVE-2022-21608

    Media · CVSS 4.9EPSS 1,74%Corrección disponible

    CVE-2022-21608

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 5.7.40-0ubuntu0.16.04.1+esm1
    • Actualiza a 5.7.40-0ubuntu0.18.04.1
    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  17. CVE-2022-21607

    Media · CVSS 4.9EPSS 1,2%Corrección disponible

    CVE-2022-21607

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.29-0ubuntu0.20.04.2
    • Actualiza a 8.0.29-0ubuntu0.22.04.1
    Publicación Actualización
  18. CVE-2022-21605

    Media · CVSS 4.9EPSS 1,32%Corrección disponible

    CVE-2022-21605

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.29-0ubuntu0.20.04.2
    • Actualiza a 8.0.29-0ubuntu0.22.04.1
    Publicación Actualización
  19. CVE-2022-21604

    Media · CVSS 4.9EPSS 1,47%Corrección disponible

    CVE-2022-21604

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Actualiza a 8.0.31-0ubuntu0.20.04.1
    • Actualiza a 8.0.31-0ubuntu0.22.04.1
    Publicación Actualización
  20. CVE-2022-21600

    Alta · CVSS 7.2EPSS 1,39%Corrección disponible

    CVE-2022-21600

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

    • Actualiza a 8.0.28-0ubuntu0.20.04.3
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →