Page 35 of 478 results (0.023 seconds)

CVSS: 9.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2013-3839 – mysql: unspecified DoS related to Optimizer (CPU October 2013)

https://notcve.org/view.php?id=CVE-2013-3839

16 Oct 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. Vulnerabilidad no especificada en el componente MySQL Server de Oracle MySQL 5.1.70 y anteriores, 5.5.32 y anteriores y 5.6.12 y anteriores permite a usuarios remotos autenticados afectar la disponibilidad a través de vectores desconocidos relacionados con Optimizer. MySQL is a... • http://rhn.redhat.com/errata/RHSA-2014-0173.html •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 3

CVE-2012-5627 – Oracle MySQL / MariaDB - Insecure Salt Generation Security Bypass

https://notcve.org/view.php?id=CVE-2012-5627

29 Aug 2013 — Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force password guessing attacks. Oracle MySQL y MariaDB 5.5.x anteriores a 5.5.29, 5.3.x anteriores a 5.3.12, y 5.2.x anteriores a 5.2.14 no modifican el "salt" durante múltiples ejecuciones del comando change_user en una misma conexión, lo cual... • https://www.exploit-db.com/exploits/38109 • CWE-522: Insufficiently Protected Credentials •

CVSS: 9.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2013-3811

https://notcve.org/view.php?id=CVE-2013-3811

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3806. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.5.31 y anteriores y 5.6.11 y anteriores, permite a usuarios autenticados remotamente comprometer la disponibilidad a través de vectores relacionados con InnoDB. Vulnerabilidad distinta de CVE-2013-380... • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2013-3795

https://notcve.org/view.php?id=CVE-2013-3795

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.6.11 y anteriores, permite a usuarios autenticados remotamente comprometer la disponibilidad a través de vectores relacionados con Data Manipulation Language. • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2013-3810

https://notcve.org/view.php?id=CVE-2013-3810

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA Transactions. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.5.31 y anteriores y 5.6.11 y anteriores, permite a usuarios autenticados remotamente comprometer la disponibilidad a través de vectores relacionados con XA Transactions. • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.8EPSS: 1%CPEs: 12EXPL: 0

CVE-2013-3798

https://notcve.org/view.php?id=CVE-2013-3798

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect integrity and availability via unknown vectors related to MemCached. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.6.11 y anteriores, permite a usuarios autenticados remotamente comprometer la disponibilidad e integriddad a través de vectores relacionados con MemCached. • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2013-3806

https://notcve.org/view.php?id=CVE-2013-3806

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3811. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.6.11 y anteriores, permite a usuarios autenticados remotamente comprometer la disponibilidad a través de vectores relacionados con InnoDB. Vulnerabilidad distinta de CVE-2013-3811. • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2013-3796

https://notcve.org/view.php?id=CVE-2013-3796

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.6.11, permite a usuarios autenticados remotamente comprometer la disponibilidad a través de vectores relacionados con Server Optimizer. • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.1EPSS: 0%CPEs: 12EXPL: 0

CVE-2013-3807

https://notcve.org/view.php?id=CVE-2013-3807

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Server Privileges. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.6.11 y anteriores, permite a usuarios autenticados remotamente comprometer la integridad a través de vectores relacionados con Server Privileges. • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •

CVSS: 9.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2013-3783 – Ubuntu Security Notice USN-1909-1

https://notcve.org/view.php?id=CVE-2013-3783

17 Jul 2013 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Parser. Vulnerabilidad sin especificar en el componente MySQL Server en Oracle MySQL 5.3.31 y anteriores permite a usuarios autenticados remotamente comprometer la disponibilidad a través de vectores desconocidos relacionados con el Server Parser. Multiple security issues were discovered in MySQL and this update includes new... • http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html •