Software Detail
Title
CVE
CRITICAL
HIGH
MEDIUM
LOW
CWE
Number of items displayed
MySQL Comunity Edition Number Of NVD 1286 CRITICAL 7 HIGH 76 MEDIUM 1021 LOW 173
URL https://www.mysql.com/jp/products/community/
Explanation It is an open source, free relational database management system (RDBMS) that is used around the world.
Its performance and functionality are sufficient for commercial use, and it is used for more than just the backend of web applications.
With the merger of Sun Microsystems into Oracle, it was feared that it might no longer be available for free commercial use, but it is still available under the GPL license for cloud backend and internal use.
It is still used as a backend for many web applications (WordPress, Facebook, etc.).

Since it has been merged with Oracle, the development speed has been increased, and the latest version is a higher performance, higher functionality relational database management system (RDBMS).

You can also get technical support by paying a support fee.

It has become one of the open source combinations called LAMP (Linux, Apache, MySQL [MariaDB], PHP).
Tag
  • 商用ライセンス有り
  • GPL v2
  • オープンソース
Add Information URL
No Type Name URL
1 https://dev.mysql.com/downloads/mysql/
2 https://endoflife.software/applications/databases/mysql
List Of Product  [ Click to show release history and vulnerability information ]
No Name Latest Version Release date Initial release Normal Support Security Support
Service Pack Support		 Extended
for a fee		 Critical High Medium Low
1241 MySQL 8.1 8.1.0 July 18, 2023 July 18, 2023 0 0 0 0
1242 New!! MySQL 8 8.0.45 Jan. 20, 2029 April 19, 2018 April 19, 2026 4 25 565 54
1243 MySQL 5.7 5.7.44 Oct. 25, 2023 Jan. 21, 2015 Oct. 21, 2023 6 26 356 33
1244 MySQL 5.6 5.6.51 Jan. 20, 2021 Feb. 5, 2013 Feb. 5, 2021 5 28 359 90
1245 MySQL 5.5 5.5.62 Oct. 22, 2018 Oct. 3, 2010 Jan. 3, 2018 3 26 347 92
1246 MySQL 7.6 7.6.9 Jan. 1, 2000 0 2 40 16
1247 MySQL 7.5 7.5.9 Jan. 1, 2000 0 2 39 15
1248 MySQL 7.4 7.4.9 Jan. 1, 2000 0 2 38 14
1249 MySQL 7.3 7.3.9 Jan. 1, 2000 0 2 13 0
1250 MySQL 7.2 7.2.35 Jan. 1, 2000 0 0 12 0
1251 MySQL 7.1 7.1.37 Jan. 1, 2000 0 0 12 0
1252 MySQL 6.0 6.0.5 Jan. 1, 2000 0 0 18 1
1253 MySQL 5.4 5.4.3 Jan. 1, 2000 0 3 132 41
1254 MySQL 5.3 5.3.9 Jan. 1, 2000 0 3 133 41
1255 MySQL 5.1 5.1.9 Dec. 31, 2013 0 10 221 60
1256 MySQL 5.0 5.0.96 Jan. 9, 2012 0 8 168 54
1257 MySQL 4.1 4.1.9 Jan. 1, 2000 0 5 136 47
1258 MySQL 4.0 4.0.9 Jan. 1, 2000 0 11 139 48
1259 MySQL 3.2 3.20.32a Jan. 1, 2000 0 10 128 45
1260 MySQL 1.5 1.5.1 Jan. 1, 2000 0 6 127 44
NVD Vulnerability Information
  • CRITICAL
  • HIGH
  • MEDIUM
  • LOW
No CVSS3
CVSS2		 Level
Attach Vector		 Title CWE CVE cpe23Uri or higher or less more than less than Update date
Published date		 Show Affected Exploit
PoC
Search
1241 -
5.0 		MEDIUM The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trail… NVD-CWE-Other
CVE-2006-1516 cpe:2.3:a:oracle:mysql:5.0.9:*
cpe:2.3:a:oracle:mysql:5.0.8:*
cpe:2.3:a:oracle:mysql:5.0.7:*
cpe:2.3:a:oracle:… 		2019-12-18 05:16
2006-05-5 		Show GitHub Exploit DB Packet Storm
1242 -
5.0 		MEDIUM sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to obtain sensitive information via a COM_TABLE_DUMP request with an incorrect packet leng… NVD-CWE-Other
CVE-2006-1517 cpe:2.3:a:oracle:mysql:5.0.9:*
cpe:2.3:a:oracle:mysql:5.0.8:*
cpe:2.3:a:oracle:mysql:5.0.7:*
cpe:2.3:a:oracle:… 		2019-12-18 05:16
2006-05-5 		Show GitHub Exploit DB Packet Storm
1243 -
6.5 		MEDIUM Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length val… NVD-CWE-Other
CVE-2006-1518 cpe:2.3:a:oracle:mysql:5.0.9:*
cpe:2.3:a:oracle:mysql:5.0.8:*
cpe:2.3:a:oracle:mysql:5.0.7:*
cpe:2.3:a:oracle:… 		2019-12-18 05:16
2006-05-5 		Show GitHub Exploit DB Packet Storm
1244 -
4.6 		MEDIUM MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this … NVD-CWE-Other
CVE-2006-0903 cpe:2.3:a:oracle:mysql:5.0.9:*
cpe:2.3:a:oracle:mysql:5.0.8:*
cpe:2.3:a:oracle:mysql:5.0.7:*
cpe:2.3:a:oracle:… 		2023-11-7 10:58
2006-02-28 		Show GitHub Exploit DB Packet Storm
1245 -
2.1 		LOW MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: th… CWE-200
Information Exposure 		CVE-2006-0369 cpe:2.3:a:oracle:mysql:5.0.18:* 2024-08-8 02:15
2006-01-23 		Show GitHub Exploit DB Packet Storm
1246 -
4.6 		MEDIUM Stack-based buffer overflow in the init_syms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions … NVD-CWE-Other
CVE-2005-2558 cpe:2.3:a:oracle:mysql:5.0.0:alpha
cpe:2.3:a:oracle:mysql:4.1.5:*
cpe:2.3:a:oracle:mysql:4.1.4:*
cpe:2.3:a:ora… 		2019-12-18 02:12
2005-08-16 		Show GitHub Exploit DB Packet Storm
1247 -
8.5 		HIGH MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via (1)… NVD-CWE-Other
CVE-2005-2572 cpe:2.3:a:oracle:mysql:5.0.33:* 2019-12-18 02:14
2005-08-16 		Show GitHub Exploit DB Packet Storm
1248 -
5.0 		MEDIUM The mysql_create_function function in sql_udf.cc for MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta, when running on Windows, uses an incomplete blacklist in a directory traver… NVD-CWE-Other
CVE-2005-2573 cpe:2.3:a:oracle:mysql:5.0.0:alpha
cpe:2.3:a:oracle:mysql:4.1.5:*
cpe:2.3:a:oracle:mysql:4.1.4:*
cpe:2.3:a:ora… 		2023-11-7 10:57
2005-08-16 		Show GitHub Exploit DB Packet Storm
1249 -
4.6 		MEDIUM mysql_install_db in MySQL 4.1.x before 4.1.12 and 5.x up to 5.0.4 creates the mysql_install_db.X file with a predictable filename and insecure permissions, which allows local users to execute arbitra… NVD-CWE-Other
CVE-2005-1636 cpe:2.3:a:oracle:mysql:5.0.0:alpha
cpe:2.3:a:oracle:mysql:4.0.9:gamma
cpe:2.3:a:oracle:mysql:4.0.9:*
cpe:2.3:a… 		2019-12-18 02:12
2005-05-17 		Show GitHub Exploit DB Packet Storm
1250 -
4.6 		MEDIUM MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demon… CWE-94
Code Injection 		CVE-2005-0709 cpe:2.3:a:oracle:mysql:4.1.5:*
cpe:2.3:a:oracle:mysql:4.1.4:*
cpe:2.3:a:oracle:mysql:4.1.3:beta
cpe:2.3:a:orac… 		2019-12-18 02:12
2005-05-2 		Show GitHub Exploit DB Packet Storm