p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de la pile Bases de données · Page n° 50

Vulnérabilités publiées pour Bases de données au cours des 30 derniers jours : 82. Présentes dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Bases de données

Vulnérabilités : 1414

  1. CVE-2020-14651

    Moyenne · CVSS 5.5EPSS 2,02%Correctif disponible

    CVE-2020-14651

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  2. CVE-2020-14643

    Moyenne · CVSS 5.5EPSS 2,15%Correctif disponible

    CVE-2020-14643

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  3. CVE-2020-14641

    Moyenne · CVSS 4.9EPSS 1,98%Correctif disponible

    CVE-2020-14641

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  4. CVE-2020-14634

    Faible · CVSS 2.7EPSS 1,78%Correctif disponible

    CVE-2020-14634

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  5. CVE-2020-14633

    Faible · CVSS 2.7EPSS 1,42%Correctif disponible

    CVE-2020-14633

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  6. CVE-2020-14632

    Moyenne · CVSS 4.9EPSS 2,23%Correctif disponible

    CVE-2020-14632

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  7. CVE-2020-14631

    Moyenne · CVSS 4.9EPSS 2,28%Correctif disponible

    CVE-2020-14631

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  8. CVE-2020-14624

    Moyenne · CVSS 4.9EPSS 2,14%Correctif disponible

    CVE-2020-14624

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  9. CVE-2020-14623

    Moyenne · CVSS 4.9EPSS 2,01%Correctif disponible

    CVE-2020-14623

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  10. CVE-2020-14620

    Moyenne · CVSS 4.9EPSS 2,28%Correctif disponible

    CVE-2020-14620

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  11. CVE-2020-14619

    Moyenne · CVSS 6.5EPSS 2,69%Correctif disponible

    CVE-2020-14619

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  12. CVE-2020-14614

    Moyenne · CVSS 4.9EPSS 2,32%Aucun correctif publié

    CVE-2020-14614

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    Publication Mise à jour
  13. CVE-2020-14597

    Moyenne · CVSS 4.9EPSS 2,07%Correctif disponible

    CVE-2020-14597

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  14. CVE-2020-14591

    Moyenne · CVSS 6.5EPSS 1,89%Correctif disponible

    CVE-2020-14591

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  15. CVE-2020-14586

    Moyenne · CVSS 4.9EPSS 2,15%Correctif disponible

    CVE-2020-14586

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  16. CVE-2020-14576

    Moyenne · CVSS 6.5EPSS 2,24%Correctif disponible

    CVE-2020-14576

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 5.7.31-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.31-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  17. CVE-2020-14575

    Moyenne · CVSS 4.9EPSS 2,44%Correctif disponible

    CVE-2020-14575

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  18. CVE-2020-14568

    Moyenne · CVSS 4.9EPSS 2,42%Correctif disponible

    CVE-2020-14568

    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour
  19. CVE-2020-14567

    Moyenne · CVSS 4.9EPSS 2,16%Correctif disponible

    CVE-2020-14567

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Mettez à jour vers 5.7.30-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.30-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.20-0ubuntu0.20.04.1
    Publication Mise à jour
  20. CVE-2020-14559

    Moyenne · CVSS 4.3EPSS 1,92%Correctif disponible

    CVE-2020-14559

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

    • Mettez à jour vers 5.7.31-0ubuntu0.16.04.1
    • Mettez à jour vers 5.7.31-0ubuntu0.18.04.1
    • Mettez à jour vers 8.0.21-0ubuntu0.20.04.3
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →