PatchFirst · Latest vulnerabilities

mysql-5.5 vulnerabilities · Page 53

Vulnerabilities published for mysql-5.5 in the last 30 days: 80. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 1057

CVE-2014-4287
Not ratedEPSS 2.69%Fix available
CVE-2014-4287
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.
mysql-5.5 Operating systems
- Update to 5.5.40-0ubuntu0.14.04.1
Published October 15, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-4274
Not ratedEPSS 0.34%Fix available
CVE-2014-4274
Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
mysql-5.5 Operating systems
- Update to 5.5.40-0ubuntu0.14.04.1
Published October 15, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-4260
Not ratedEPSS 3.51%Fix available
CVE-2014-4260
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.
mysql-5.5 Operating systems
- Update to 5.5.38-0ubuntu0.14.04.1
Published July 17, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-4258
Not ratedEPSS 3.51%Fix available
CVE-2014-4258
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.
mysql-5.5 Operating systems
- Update to 5.5.38-0ubuntu0.14.04.1
Published July 17, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-4207
Not ratedEPSS 3.94%Fix available
CVE-2014-4207
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.
mysql-5.5 Operating systems
- Update to 5.5.38-0ubuntu0.14.04.1
Published July 17, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2494
Not ratedEPSS 3.51%Fix available
CVE-2014-2494
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.
mysql-5.5 Operating systems
- Update to 5.5.38-0ubuntu0.14.04.1
Published July 17, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2440
Not ratedEPSS 4.71%Fix available
CVE-2014-2440
Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2438
Not ratedEPSS 3.16%Fix available
CVE-2014-2438
Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2436
Not ratedEPSS 3.77%Fix available
CVE-2014-2436
Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2432
Not ratedEPSS 3.44%Fix available
CVE-2014-2432
Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2431
Not ratedEPSS 5.06%Fix available
CVE-2014-2431
Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2430
Not ratedEPSS 3.27%Fix available
CVE-2014-2430
Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-2419
Not ratedEPSS 3.73%Fix available
CVE-2014-2419
Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 16, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-0384
Not ratedEPSS 3.29%Fix available
CVE-2014-0384
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published April 15, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2014-0001
Not ratedEPSS 6.4%Fix available
CVE-2014-0001
Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server version string.
mysql-5.5 Operating systems
- Update to 5.5.37-0ubuntu0.14.04.1
Published January 31, 2014Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2012-5627
Not ratedEPSS 11.41%Public exploitNo fix published
CVE-2012-5627
Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks.
mysql-5.5 Operating systems
Published October 1, 2013Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2012-5615
Not ratedEPSS 14.78%Public exploitFix available
CVE-2012-5615
Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.
mysql-5.5 Operating systems
- Update to 5.5.40-0ubuntu0.14.04.1
Published December 3, 2012Updated August 6, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →

mysql-5.5 vulnerabilities · Page 53

CVE-2014-4287

CVE-2014-4274

CVE-2014-4260

CVE-2014-4258

CVE-2014-4207

CVE-2014-2494

CVE-2014-2440

CVE-2014-2438

CVE-2014-2436

CVE-2014-2432

CVE-2014-2431

CVE-2014-2430

CVE-2014-2419

CVE-2014-0384

CVE-2014-0001

CVE-2012-5627

CVE-2012-5615

Check your server