CVSS: 6.5EPSS: 2%CPEs: 61EXPL: 4CVE-2010-3683 – OraclMySQL 5.1.48 - 'LOAD DATA INFILE' Denial of Service
https://notcve.org/view.php?id=CVE-2010-3683
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request. MySQL de Oracle versiones 5.1 anteriores a 5.1.49 y versiones 5.5 anteriores a 5.5.5, envía un paquete OK cuando una petición LOAD DATA INFILE genera errores SQL, lo que permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio mysq... • https://www.exploit-db.com/exploits/34510 •
CVSS: 6.5EPSS: 3%CPEs: 61EXPL: 4CVE-2010-3681 – Oracle MySQL 5.1.48 - 'HANDLER' Interface Denial of Service
https://notcve.org/view.php?id=CVE-2010-3681
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure. MySQL de Oracle versiones 5.1 anteriores a 5.1.49 y versiones 5.5 anteriores a 5.5.5, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio mysqld) mediante la interfaz HANDLER y realizar "alternate r... • https://www.exploit-db.com/exploits/34520 •
CVSS: 6.5EPSS: 2%CPEs: 56EXPL: 4CVE-2010-3676 – Oracle MySQL < 5.1.49 - 'DDL' Statements Denial of Service
https://notcve.org/view.php?id=CVE-2010-3676
11 Jan 2011 — storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement. El archivo storage/innobase/dict/dict0crea.c en mysqld en MySQL de Oracle versiones 5.1 anteriores a 5.1.49, permite a los usuarios autenticados remotos causar una denegación de servicio (fallo ... • https://www.exploit-db.com/exploits/34522 •
CVSS: 6.5EPSS: 4%CPEs: 56EXPL: 3CVE-2010-3679 – Oracle MySQL < 5.1.49 - Malformed 'BINLOG' Arguments Denial of Service
https://notcve.org/view.php?id=CVE-2010-3679
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind. Oracle MySQL 5.1 ersiones anteriores a la 5.1.49 permite a los usuarios autenticados remotos provocar una denegación de servicio (bloqueo del demonio mysqld) a través de ciertos argumentos al comando BINLOG, que desencadena un acceso a la memoria no inicializada, como lo ... • https://www.exploit-db.com/exploits/34521 • CWE-399: Resource Management Errors •
CVSS: 6.5EPSS: 5%CPEs: 56EXPL: 3CVE-2010-3680 – MySQL 5.1.48 - 'Temporary InnoDB' Tables Denial of Service
https://notcve.org/view.php?id=CVE-2010-3680
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure. MySQL de Oracle versiones 5.1 anteriores a 5.1.49, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio mysqld) mediante la creación de tablas temporales con columnas que aceptan valores NULL mientras se utiliza InnoDB, que desencadena un fal... • https://www.exploit-db.com/exploits/34505 •
CVSS: 7.5EPSS: 3%CPEs: 116EXPL: 4CVE-2010-3682 – MySQL 5.1.48 - 'EXPLAIN' Denial of Service
https://notcve.org/view.php?id=CVE-2010-3682
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function. MySQL de Oracle versiones 5.1 anteriores a 5.1.49 y versiones 5.0 anteriores a 5.0.92, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio ... • https://www.exploit-db.com/exploits/34506 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 1%CPEs: 9EXPL: 4CVE-2010-2008 – Oracle MySQL - 'ALTER DATABASE' Remote Denial of Service
https://notcve.org/view.php?id=CVE-2010-2008
13 Jul 2010 — MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of service (server crash and database loss) via an ALTER DATABASE command with a #mysql50# string followed by a . (dot), .. (dot dot), ../ (dot dot slash) or similar sequence, and an UPGRADE DATA DIRECTORY NAME command, which causes MySQL to move certain directories to the server data directory. MySQL anterior a v5.1.48 permite a usuarios autenticados remotamente con privilegios de modificación en la base ... • https://www.exploit-db.com/exploits/14537 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 9.8EPSS: 88%CPEs: 85EXPL: 0CVE-2010-1850 – mysql: COM_FIELD_LIST table name buffer overflow
https://notcve.org/view.php?id=CVE-2010-1850
07 Jun 2010 — Buffer overflow in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to execute arbitrary code via a COM_FIELD_LIST command with a long table name. Un desbordamiento de búfer en MySQL v5.0 a v5.0.91 y v5.1 antes de v5.1.47 permite ejecutar código de su elección a usuarios remotos autenticados mediante un comando COM_FIELD_LIST con un nombre de tabla larga. • http://bugs.mysql.com/bug.php?id=53237 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.5EPSS: 0%CPEs: 85EXPL: 0CVE-2010-1848 – mysql: multiple insufficient table name checks
https://notcve.org/view.php?id=CVE-2010-1848
07 Jun 2010 — Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. (dot dot) in a table name. Vulnerabilidad de salto de directorio en MySQL v5.0 hasta v5.0.91 y v5.1 anteriores a v5.1.47 permite a usuarios autenticados remotamente saltarse tablas establecidas permitiendo leer definiciones de campos de tablas de s... • http://bugs.mysql.com/bug.php?id=53371 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 4%CPEs: 85EXPL: 0CVE-2010-1849 – mysql: over-sized packet denial of service vulnerability
https://notcve.org/view.php?id=CVE-2010-1849
07 Jun 2010 — The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length. La función my_net_skip_rest en sql/net_serv.cc en MySQL v5.0 a v5.0.91 y v5.1 antes de v5.1.47 permite a atacantes remotos provocar una denegación de servicio (mediante excesivo consumo de CPU y ancho de banda) mediante el envío de una gran cantidad de paquet... • http://bugs.mysql.com/bug.php?id=50974 •