p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de la pile Bases de données · Page n° 32

Vulnérabilités publiées pour Bases de données au cours des 30 derniers jours : 81. Présentes dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Bases de données

Vulnérabilités : 1413

  1. CVE-2022-39410

    Moyenne · CVSS 6.5EPSS 1,52%Correctif disponible

    CVE-2022-39410

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  2. CVE-2022-39408

    Moyenne · CVSS 6.5EPSS 1,52%Correctif disponible

    CVE-2022-39408

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  3. CVE-2022-39403

    Faible · CVSS 3.9EPSS 0,46%Aucun correctif publié

    CVE-2022-39403

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Shell accessible data as well as unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 3.9 (Confidentiality and In

    Publication Mise à jour
  4. CVE-2022-39402

    Moyenne · CVSS 4.3EPSS 0,45%Aucun correctif publié

    CVE-2022-39402

    Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. While the vulnerability is in MySQL Shell, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Shell accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

    Publication Mise à jour
  5. CVE-2022-39400

    Moyenne · CVSS 4.9EPSS 1,45%Correctif disponible

    CVE-2022-39400

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  6. CVE-2022-21641

    Moyenne · CVSS 4.9EPSS 1,25%Correctif disponible

    CVE-2022-21641

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.30-0ubuntu0.20.04.2
    • Mettez à jour vers 8.0.30-0ubuntu0.22.04.1
    Publication Mise à jour
  7. CVE-2022-21640

    Moyenne · CVSS 4.9EPSS 1,45%Correctif disponible

    CVE-2022-21640

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  8. CVE-2022-21638

    Moyenne · CVSS 4.9EPSS 1,25%Correctif disponible

    CVE-2022-21638

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.30-0ubuntu0.20.04.2
    • Mettez à jour vers 8.0.30-0ubuntu0.22.04.1
    Publication Mise à jour
  9. CVE-2022-21637

    Moyenne · CVSS 4.9EPSS 1,45%Correctif disponible

    CVE-2022-21637

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  10. CVE-2022-21635

    Moyenne · CVSS 6.5EPSS 1,34%Correctif disponible

    CVE-2022-21635

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.29 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/

    • Mettez à jour vers 8.0.30-0ubuntu0.20.04.2
    • Mettez à jour vers 8.0.30-0ubuntu0.22.04.1
    Publication Mise à jour
  11. CVE-2022-21633

    Moyenne · CVSS 4.9EPSS 1,47%Correctif disponible

    CVE-2022-21633

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  12. CVE-2022-21632

    Moyenne · CVSS 4.9EPSS 1,47%Correctif disponible

    CVE-2022-21632

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  13. CVE-2022-21625

    Moyenne · CVSS 4.4EPSS 1,34%Correctif disponible

    CVE-2022-21625

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  14. CVE-2022-21617

    Moyenne · CVSS 4.9EPSS 1,74%Correctif disponible

    CVE-2022-21617

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 5.7.40-0ubuntu0.16.04.1+esm1
    • Mettez à jour vers 5.7.40-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  15. CVE-2022-21611

    Moyenne · CVSS 4.1EPSS 0,46%Correctif disponible

    CVE-2022-21611

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  16. CVE-2022-21608

    Moyenne · CVSS 4.9EPSS 1,74%Correctif disponible

    CVE-2022-21608

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.39 and prior and 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 5.7.40-0ubuntu0.16.04.1+esm1
    • Mettez à jour vers 5.7.40-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  17. CVE-2022-21607

    Moyenne · CVSS 4.9EPSS 1,2%Correctif disponible

    CVE-2022-21607

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.29-0ubuntu0.20.04.2
    • Mettez à jour vers 8.0.29-0ubuntu0.22.04.1
    Publication Mise à jour
  18. CVE-2022-21605

    Moyenne · CVSS 4.9EPSS 1,32%Correctif disponible

    CVE-2022-21605

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Data Dictionary). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.29-0ubuntu0.20.04.2
    • Mettez à jour vers 8.0.29-0ubuntu0.22.04.1
    Publication Mise à jour
  19. CVE-2022-21604

    Moyenne · CVSS 4.9EPSS 1,47%Correctif disponible

    CVE-2022-21604

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.31-0ubuntu0.20.04.1
    • Mettez à jour vers 8.0.31-0ubuntu0.22.04.1
    Publication Mise à jour
  20. CVE-2022-21600

    Élevée · CVSS 7.2EPSS 1,39%Correctif disponible

    CVE-2022-21600

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

    • Mettez à jour vers 8.0.28-0ubuntu0.20.04.3
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →