CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2016-7440 – Slackware Security Advisory - mariadb Updates
https://notcve.org/view.php?id=CVE-2016-7440
25 Oct 2016 — The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences. La implementación de software C de AES Encryption and Decryption en wolfSSL (anterioremtne CyaSSL) en versiones anteriores a 3.9.10 hace más fácil para usuarios locales descubrir las claves AES aprovechando las diferencias de tiempo de banco del cachè. Multiple security issues were discovered in MySQL and t... • http://www.debian.org/security/2016/dsa-3706 •
CVSS: 10.0EPSS: 2%CPEs: 30EXPL: 8CVE-2016-6662 – MySQL / MariaDB / PerconaDB 5.5.51/5.6.32/5.7.14 - Code Execution / Privilege Escalation
https://notcve.org/view.php?id=CVE-2016-6662
12 Sep 2016 — Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before 5.5.51-38.1, 5.6.x before 5.6.32-78.0, and 5.7.x before 5.7.14-7 allow local users to create arbitrary configurations and bypass certain protection mechanisms by setting general_log_file to a my.cnf configuration. NOTE: this can be leveraged to execute arbitrary code with root privileges by setting malloc_lib. NOTE: the affected MySQL... • https://packetstorm.news/files/id/138678 • CWE-264: Permissions, Privileges, and Access Controls CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2016-3471 – mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)
https://notcve.org/view.php?id=CVE-2016-3471
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.5.45 and earlier and 5.6.26 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to Server: Option. Vulnerabilidad no especificada en Oracle MySQL 5.5.45 y versiones anteriores y 5.6.26 y versiones anteriores permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con Server: Option. MariaDB is a multi-user, multi-threaded SQL database server. F... • http://rhn.redhat.com/errata/RHSA-2016-0534.html •
CVSS: 4.3EPSS: 8%CPEs: 26EXPL: 0CVE-2016-5444 – mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)
https://notcve.org/view.php?id=CVE-2016-5444
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Connection. Vulnerabilidad no especificada en Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.11 y versiones anteriores y MariaDB en versiones anteriores a 5.5.49, 10.0.x en versiones anteriores a 10.0.25 y 10.1.x en v... • http://rhn.redhat.com/errata/RHSA-2016-0705.html •
CVSS: 4.3EPSS: 8%CPEs: 11EXPL: 0CVE-2016-3452 – mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)
https://notcve.org/view.php?id=CVE-2016-3452
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.49, 10.0.x before 10.0.25, and 10.1.x before 10.1.14 allows remote attackers to affect confidentiality via vectors related to Server: Security: Encryption. Vulnerabilidad no especificada en Oracle MySQL 5.5.48 y versiones anteriores, 5.6.29 y versiones anteriores y 5.7.10 y versiones anteriores y MariaDB en versiones anteriores a 5.5.49, 10.0.x en versiones anteriores a 10.0.25 y 1... • http://rhn.redhat.com/errata/RHSA-2016-0705.html •
CVSS: 7.7EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3440
https://notcve.org/view.php?id=CVE-2016-3440
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer. Vulnerabilidad no especificada en Oracle MySQL 5.7.11 y versiones anteriores permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores relacionados con Server: Optimizer. • http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5436 – Ubuntu Security Notice USN-3040-1
https://notcve.org/view.php?id=CVE-2016-5436
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: InnoDB. Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: InnoDB. Multiple security issues were discovered in MySQL and this update include s new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.50 in Ubuntu 1... • http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html •
CVSS: 4.9EPSS: 1%CPEs: 27EXPL: 0CVE-2016-5440 – mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)
https://notcve.org/view.php?id=CVE-2016-5440
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote administrators to affect availability via vectors related to Server: RBR. Vulnerabilidad no especificada en Oracle MySQL 5.5.49 y versiones anteriores, 5.6.30 y versiones anteriores y 5.7.12 y versiones anteriores y MariaDB en versiones anteriores a 5.5.50, 10.0.x en versiones anteriores a 10.0.26 y 10.1.x en versio... • http://lists.opensuse.org/opensuse-updates/2016-09/msg00042.html •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5441 – Ubuntu Security Notice USN-3040-1
https://notcve.org/view.php?id=CVE-2016-5441
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Replication. Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Replication. Multiple security issues were discovered in MySQL and this update include s new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.50 i... • http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html •
CVSS: 4.9EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5437 – Ubuntu Security Notice USN-3040-1
https://notcve.org/view.php?id=CVE-2016-5437
21 Jul 2016 — Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log. Vulnerabilidad no especificada en Oracle MySQL 5.7.12 y versiones anteriores permite a administradores remotos afectar la disponibilidad a través de vectores relacionados con Server: Log. Multiple security issues were discovered in MySQL and this update include s new upstream MySQL versions to fix these issues. MySQL has been updated to 5.5.50 in Ubuntu 12.04 L... • http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html •