p PatchFirst

PatchFirst · Latest vulnerabilities

Databases stack vulnerabilities · Page 65

Vulnerabilities published for Databases in the last 30 days: 82. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Databases

Vulnerabilities: 1414

  1. CVE-2018-2787

    Medium · CVSS 5.5EPSS 2.58%Fix available

    CVE-2018-2787

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  2. CVE-2018-2786

    Medium · CVSS 5.5EPSS 2.51%Fix available

    CVE-2018-2786

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  3. CVE-2018-2784

    Medium · CVSS 6.5EPSS 3%Fix available

    CVE-2018-2784

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  4. CVE-2018-2782

    Medium · CVSS 6.5EPSS 3%Fix available

    CVE-2018-2782

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  5. CVE-2018-2781

    Medium · CVSS 4.9EPSS 3.3%Fix available

    CVE-2018-2781

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.5.60-0ubuntu0.14.04.1
    • Update to 5.5.61-1ubuntu0.14.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  6. CVE-2018-2780

    Medium · CVSS 6.5EPSS 2.93%Fix available

    CVE-2018-2780

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  7. CVE-2018-2779

    Medium · CVSS 4.9EPSS 2.75%Fix available

    CVE-2018-2779

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  8. CVE-2018-2778

    Medium · CVSS 4.9EPSS 2.75%Fix available

    CVE-2018-2778

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  9. CVE-2018-2777

    Medium · CVSS 4.9EPSS 3.03%Fix available

    CVE-2018-2777

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  10. CVE-2018-2776

    Medium · CVSS 4.9EPSS 2.75%Fix available

    CVE-2018-2776

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via XCom to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  11. CVE-2018-2775

    Medium · CVSS 6.5EPSS 2.93%Fix available

    CVE-2018-2775

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  12. CVE-2018-2773

    Medium · CVSS 4.1EPSS 0.49%Fix available

    CVE-2018-2773

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.1 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.5.60-0ubuntu0.14.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  13. CVE-2018-2771

    Medium · CVSS 4.4EPSS 3.6%Fix available

    CVE-2018-2771

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.5.60-0ubuntu0.14.04.1
    • Update to 5.5.61-1ubuntu0.14.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  14. CVE-2018-2769

    Medium · CVSS 4.9EPSS 2.75%Fix available

    CVE-2018-2769

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  15. CVE-2018-2766

    Medium · CVSS 4.9EPSS 3.08%Fix available

    CVE-2018-2766

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  16. CVE-2018-2762

    Medium · CVSS 4.4EPSS 0.44%Fix available

    CVE-2018-2762

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  17. CVE-2018-2761

    Medium · CVSS 5.9EPSS 4.02%Fix available

    CVE-2018-2761

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H).

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.5.60-0ubuntu0.14.04.1
    • Update to 5.5.61-1ubuntu0.14.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  18. CVE-2018-2759

    Medium · CVSS 4.9EPSS 2.81%Fix available

    CVE-2018-2759

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  19. CVE-2018-2758

    Medium · CVSS 6.5EPSS 3.12%Fix available

    CVE-2018-2758

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated
  20. CVE-2018-2755

    High · CVSS 7.7EPSS 0.85%Fix available

    CVE-2018-2755

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.0 Base Score 7.7 (Confiden

    • Update to 10.0.36-0ubuntu0.16.04.1
    • Update to 5.5.60-0ubuntu0.14.04.1
    • Update to 5.5.61-1ubuntu0.14.04.1
    • Update to 5.7.22-0ubuntu0.16.04.1
    • Update to 5.7.22-0ubuntu18.04.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →