Oracle

Mysql

1431 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2020-14567

  • EPSS 2.16%
  • Veröffentlicht 15.07.2020 18:15:22
  • Zuletzt bearbeitet 21.11.2024 05:03:33

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network ...

4.3

CVE-2020-14559

  • EPSS 1.92%
  • Veröffentlicht 15.07.2020 18:15:21
  • Zuletzt bearbeitet 21.11.2024 05:03:32

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privilege...

5.3

CVE-2020-14550

  • EPSS 2.22%
  • Veröffentlicht 15.07.2020 18:15:18
  • Zuletzt bearbeitet 21.11.2024 05:03:31

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Difficult to exploit vulnerability allows low privileged attacker with net...

4.3

CVE-2020-14553

  • EPSS 1.96%
  • Veröffentlicht 15.07.2020 18:15:18
  • Zuletzt bearbeitet 21.11.2024 05:03:31

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with networ...

4.9

CVE-2020-14547

  • EPSS 2.61%
  • Veröffentlicht 15.07.2020 18:15:17
  • Zuletzt bearbeitet 21.11.2024 05:03:30

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network ac...

6.5

CVE-2020-14539

  • EPSS 2.24%
  • Veröffentlicht 15.07.2020 18:15:14
  • Zuletzt bearbeitet 21.11.2024 05:03:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacke...

4.9

CVE-2020-14540

  • EPSS 2.15%
  • Veröffentlicht 15.07.2020 18:15:14
  • Zuletzt bearbeitet 21.11.2024 05:03:29

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access v...

5.5

CVE-2020-15358

Exploit
  • EPSS 1.03%
  • Veröffentlicht 27.06.2020 12:15:11
  • Zuletzt bearbeitet 21.11.2024 05:05:24

In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.

7.5

CVE-2020-11080

  • EPSS 5.32%
  • Veröffentlicht 03.06.2020 23:15:11
  • Zuletzt bearbeitet 21.11.2024 04:56:44

In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings e...

7.5

CVE-2020-1967

Exploit
  • EPSS 53.34%
  • Veröffentlicht 21.04.2020 14:15:11
  • Zuletzt bearbeitet 21.11.2024 05:11:45

Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occur...