p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de mysql-5.6 · Page n° 2

Vulnérabilité publiée pour mysql-5.6 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 150

  1. CVE-2016-0644

    Moyenne · CVSS 5.5EPSS 1,85%Correctif disponible

    CVE-2016-0644

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect availability via vectors related to DDL.

    • Mettez à jour vers 5.6.30-0ubuntu0.14.04.1
    Publication Mise à jour
  2. CVE-2016-0643

    Faible · CVSS 3.3EPSS 1,64%Correctif disponible

    CVE-2016-0643

    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows local users to affect confidentiality via vectors related to DML.

    • Mettez à jour vers 5.6.30-0ubuntu0.14.04.1
    Publication Mise à jour
  3. CVE-2016-0641

    Moyenne · CVSS 5.1EPSS 1,53%Correctif disponible

    CVE-2016-0641

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.

    • Mettez à jour vers 5.6.30-0ubuntu0.14.04.1
    Publication Mise à jour
  4. CVE-2016-0640

    Moyenne · CVSS 6.1EPSS 1,57%Correctif disponible

    CVE-2016-0640

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

    • Mettez à jour vers 5.6.30-0ubuntu0.14.04.1
    Publication Mise à jour
  5. CVE-2016-2047

    Moyenne · CVSS 5.9EPSS 3,74%Correctif disponible

    CVE-2016-2047

    The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

    • Mettez à jour vers 5.6.30-0ubuntu0.14.04.1
    Publication Mise à jour
  6. CVE-2015-7744

    Moyenne · CVSS 5.9EPSS 5,07%Correctif disponible

    CVE-2015-7744

    wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

    • Mettez à jour vers 5.6.27-0ubuntu0.14.04.1
    Publication Mise à jour
  7. CVE-2016-0609

    Non évaluéeEPSS 4,42%Correctif disponible

    CVE-2016-0609

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.

    • Mettez à jour vers 5.6.28-0ubuntu0.14.04.1
    Publication Mise à jour
  8. CVE-2016-0608

    Non évaluéeEPSS 3,94%Correctif disponible

    CVE-2016-0608

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.

    • Mettez à jour vers 5.6.28-0ubuntu0.14.04.1
    Publication Mise à jour
  9. CVE-2016-0606

    Non évaluéeEPSS 4,23%Correctif disponible

    CVE-2016-0606

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.

    • Mettez à jour vers 5.6.28-0ubuntu0.14.04.1
    Publication Mise à jour
  10. CVE-2016-0600

    Non évaluéeEPSS 3,94%Correctif disponible

    CVE-2016-0600

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

    • Mettez à jour vers 5.6.28-0ubuntu0.14.04.1
    Publication Mise à jour
  11. CVE-2016-0598

    Non évaluéeEPSS 3,94%Correctif disponible

    CVE-2016-0598

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

    • Mettez à jour vers 5.6.28-0ubuntu0.14.04.1
    Publication Mise à jour
  12. CVE-2016-0597

    Non évaluéeEPSS 4,3%Correctif disponible

    CVE-2016-0597

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    • Mettez à jour vers 5.6.28-0ubuntu0.14.04.1
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →