WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor mysql✕
Overview 118 matches · 3 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 34 public PoC · 5 EPSS ≥ 0.5
118matches 3in Waratek scope2.5% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 34public PoC28.8% 5EPSS ≥ 0.54.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.8% No exploit published 2 1.7% Outside Waratek scope 0 0.0% Not applicable 115 97.5% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 20 16.9% Medium 78 66.1% Low 20 16.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 118 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 33 28.0% Proof of concept only 1 0.8% Forecast only 0 0.0% No public exploit 84 71.2%
split by peak 23 / year
Not applicable: 115No exploit published: 2Mitigation candidate: 1 Low: 20Medium: 78High: 20 not blocked: 118 No public exploit: 84Proof of concept only: 1Working exploit published: 33
20011 Not applicable1 Medium1 not blocked1 No public exploit1 20020 20032 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20046 Not applicable6 High3 Medium1 Low2 not blocked6 Working exploit published2 No public exploit4 200516 Not applicable16 High4 Medium11 Low1 not blocked16 Working exploit published6 No public exploit10 200614 Not applicable14 High2 Medium7 Low5 not blocked14 Working exploit published7 No public exploit7 200711 Not applicable11 High1 Medium6 Low4 not blocked11 Working exploit published2 No public exploit9 20086 Not applicable6 High1 Medium4 Low1 not blocked6 Working exploit published3 No public exploit3 20096 Not applicable6 High1 Medium5 not blocked6 Working exploit published3 No public exploit3 20105 Not applicable5 Medium4 Low1 not blocked5 No public exploit5 201116 Not applicable16 Medium16 not blocked16 Working exploit published7 No public exploit9 201223 Not applicable23 High1 Medium17 Low5 not blocked23 Working exploit published1 No public exploit22 20132 Not applicable2 High2 not blocked2 No public exploit2 20140 20151 Not applicable1 Medium1 not blocked1 No public exploit1 20160 20174 Not applicable4 High2 Medium1 Low1 not blocked4 No public exploit4 20181 Not applicable1 High1 not blocked1 No public exploit1 20191 Not applicable1 Medium1 not blocked1 No public exploit1 20200 20211 Mitigation candidate1 Medium1 not blocked1 Proof of concept only1 20221 No exploit published1 Medium1 not blocked1 No public exploit1 20231 No exploit published1 High1 not blocked1 No public exploit1
200120032005200720092011201320152017201920212023
118 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2005-0709 Medium 2005-05-02 Not applicable Working exploit published MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, allows remote authenticated users with INSERT and DELETE privileges to execute arbitrary code by using CREATE FUNCTION to access libc calls, as demonstrated by using strcat, on_exit, and exit.
CVE-2005-0083 Medium 2005-05-02 Not applicable No public exploit MySQL MaxDB 7.5.00 for Windows, and possibly earlier versions and other platforms, allows remote attackers to cause a denial of service (application crash) via invalid parameters to the (1) DBMCli_String::ReallocString, (2) DBMCli_String::operator, (3) DBMCli_Buffer::ForceResize, (4) DBMCli_Wizard::InstallDatabase, (5) DBMCli_Devspaces::Complete, (6) DBMWeb_TemplateWizard::askForWriteCountStep5, or (7) DBMWeb_DBMWeb::wizardDB functions, which triggers a null dereference.
CVE-2005-1274 High 2005-04-26 Not applicable No public exploit Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter.
CVE-2005-0684 High 2005-04-25 Not applicable Working exploit published Multiple buffer overflows in the web tool for MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long file parameter after a percent ("%") sign or (2) a long Lock-Token string to the WebDAV functionality, which is not properly handled by the getLockTokenHeader function in WDVHandler_CommonUtils.c.
CVE-2005-0082 Medium 2005-04-14 Not applicable No public exploit The sapdbwa_GetUserData function in MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via invalid parameters to the WebDAV handler code, which triggers a null dereference that causes the SAP DB Web Agent to crash.
CVE-2005-0081 Medium 2005-04-14 Not applicable No public exploit MySQL MaxDB 7.5.0.0, and other versions before 7.5.0.21, allows remote attackers to cause a denial of service (crash) via an HTTP request with invalid headers.
CVE-2005-0111 High 2005-01-13 Not applicable No public exploit Stack-based buffer overflow in the websql CGI program in MySQL MaxDB 7.5.00 allows remote attackers to execute arbitrary code via a long password parameter.
CVE-2004-1169 Medium 2005-01-10 Not applicable No public exploit MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.
CVE-2004-1168 High 2005-01-10 Not applicable No public exploit Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.
CVE-2004-0931 Medium 2004-12-31 Not applicable No public exploit MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.
CVE-2004-0628 High 2004-12-06 Not applicable No public exploit Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.
CVE-2004-0627 High 2004-12-06 Not applicable Working exploit published The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
CVE-2004-0837 Low 2004-11-03 Not applicable No public exploit MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
CVE-2004-0835 High 2004-11-03 Not applicable Working exploit published MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
CVE-2004-0381 Low 2004-05-04 Not applicable No public exploit mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
CVE-2003-1480 Medium 2003-12-31 Not applicable Working exploit published MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.
CVE-2003-0780 High 2003-09-22 Not applicable Working exploit published Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.
CVE-2001-1255 Medium 2001-10-02 Not applicable No public exploit WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.
‹ prev page 2 of 2 next ›