NotCVE - vendor:"Oracle" product:"Mysql" version:" <= 5.6.14"

Page 54 of 694 results (0.008 seconds)

CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 2

CVE-2012-5614 – MySQL - Denial of Service (PoC)

https://notcve.org/view.php?id=CVE-2012-5614

03 Dec 2012 — Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements. MySQL v5.5.19 y posiblemente otras versiones, y MariaDB v5.5.28a y posiblemente otras versiones, permiten a usuarios remotos autenticados provocar una denegación de servicio (caída de mysqld) a través de un comando SELE... • https://www.exploit-db.com/exploits/23078 •

CVSS: 7.5EPSS: 5%CPEs: 5EXPL: 2

CVE-2012-5615 – MySQL - Remote User Enumeration

https://notcve.org/view.php?id=CVE-2012-5615

03 Dec 2012 — Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames. MySQL v5.5.19 y posiblemente otras versiones, y MariaDB v5.5.28a, v5.3.11, v5.2.13, v5.1.66, y posiblemente con otras versiones, generan mensajes de error diferentes con retardos de tiempo diferentes dependiendo de si exis... • https://www.exploit-db.com/exploits/23081 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 7.2EPSS: 96%CPEs: 3EXPL: 6

CVE-2012-5613 – MySQL (Linux) - Database Privilege Escalation

https://notcve.org/view.php?id=CVE-2012-5613

03 Dec 2012 — MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it c... • https://www.exploit-db.com/exploits/23077 • CWE-16: Configuration •

CVSS: 9.8EPSS: 0%CPEs: 37EXPL: 0

CVE-2012-3163 – mysql: unspecified vulnerability related to Information Schema (CPU Oct 2012)

https://notcve.org/view.php?id=CVE-2012-3163

17 Oct 2012 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema. Vulnerabilidad no especificada en el componente MySQL Server en Oracle MySQL v5.1.64 y anteriores, y v5.5.26 y anteriores, permite a usuarios remotos autenticados a afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos ... • http://rhn.redhat.com/errata/RHSA-2012-1462.html •

CVSS: 9.1EPSS: 0%CPEs: 15EXPL: 0

CVE-2012-3166 – mysql: unspecified DoS vulnerability related to InnoDB (CPU Oct 2012)

https://notcve.org/view.php?id=CVE-2012-3166

17 Oct 2012 — Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB. Vulnerabilidad no especificada en el componente MySQL Server en Oracle MySQL v5.1.63 y anteriores, y v5.5.25 y anteriores, permite a usuarios remotos autenticados a afectar la disponibilidad a través de vectores desconocidos relacionados con InnoDB. Multiple vulnerabilities have been found in MySQL,... • http://rhn.redhat.com/errata/RHSA-2012-1462.html •