p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости percona-server-5.6 · Страница 54

За последние 30 дней в percona-server-5.6 опубликовано уязвимостей: 73; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1130

  1. CVE-2016-0642

    Средний · CVSS 4.7EPSS 1,19%Нет опубликованного исправления

    CVE-2016-0642

    Unspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier allows local users to affect integrity and availability via vectors related to Federated.

    Опубликовано Обновлено
  2. CVE-2016-0641

    Средний · CVSS 5.1EPSS 1,53%Нет опубликованного исправления

    CVE-2016-0641

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect confidentiality and availability via vectors related to MyISAM.

    Опубликовано Обновлено
  3. CVE-2016-0640

    Средний · CVSS 6.1EPSS 1,57%Нет опубликованного исправления

    CVE-2016-0640

    Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before 10.1.12 allows local users to affect integrity and availability via vectors related to DML.

    Опубликовано Обновлено
  4. CVE-2016-0639

    Критический · CVSS 9.8EPSS 10,23%Нет опубликованного исправления

    CVE-2016-0639

    Unspecified vulnerability in Oracle MySQL 5.6.29 and earlier and 5.7.11 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Pluggable Authentication.

    Опубликовано Обновлено
  5. CVE-2016-2047

    Средний · CVSS 5.9EPSS 3,74%Нет опубликованного исправления

    CVE-2016-2047

    The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a "/CN=" string in a field in a certificate, as demonstrated by "/OU=/CN=bar.com/CN=foo.com."

    Опубликовано Обновлено
  6. CVE-2015-7744

    Средний · CVSS 5.9EPSS 5,07%Нет опубликованного исправления

    CVE-2015-7744

    wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimizations on a server, which makes it easier for remote attackers to obtain private RSA keys by capturing TLS handshakes, aka a Lenstra attack.

    Опубликовано Обновлено
  7. CVE-2016-0616

    Без оценкиEPSS 4,28%Нет опубликованного исправления

    CVE-2016-0616

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    Опубликовано Обновлено
  8. CVE-2016-0611

    Без оценкиEPSS 3,2%Нет опубликованного исправления

    CVE-2016-0611

    Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    Опубликовано Обновлено
  9. CVE-2016-0610

    Без оценкиEPSS 3,06%Нет опубликованного исправления

    CVE-2016-0610

    Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and MariaDB before 10.0.22 and 10.1.x before 10.1.9 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

    Опубликовано Обновлено
  10. CVE-2016-0609

    Без оценкиEPSS 4,42%Нет опубликованного исправления

    CVE-2016-0609

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.

    Опубликовано Обновлено
  11. CVE-2016-0608

    Без оценкиEPSS 3,94%Нет опубликованного исправления

    CVE-2016-0608

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.

    Опубликовано Обновлено
  12. CVE-2016-0607

    Без оценкиEPSS 2,82%Нет опубликованного исправления

    CVE-2016-0607

    Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication.

    Опубликовано Обновлено
  13. CVE-2016-0606

    Без оценкиEPSS 4,23%Нет опубликованного исправления

    CVE-2016-0606

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect integrity via unknown vectors related to encryption.

    Опубликовано Обновлено
  14. CVE-2016-0605

    Без оценкиEPSS 2,92%Нет опубликованного исправления

    CVE-2016-0605

    Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors.

    Опубликовано Обновлено
  15. CVE-2016-0601

    Без оценкиEPSS 1,73%Нет опубликованного исправления

    CVE-2016-0601

    Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition.

    Опубликовано Обновлено
  16. CVE-2016-0600

    Без оценкиEPSS 3,94%Нет опубликованного исправления

    CVE-2016-0600

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

    Опубликовано Обновлено
  17. CVE-2016-0599

    Без оценкиEPSS 1,73%Нет опубликованного исправления

    CVE-2016-0599

    Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    Опубликовано Обновлено
  18. CVE-2016-0598

    Без оценкиEPSS 3,94%Нет опубликованного исправления

    CVE-2016-0598

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

    Опубликовано Обновлено
  19. CVE-2016-0597

    Без оценкиEPSS 4,3%Нет опубликованного исправления

    CVE-2016-0597

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    Опубликовано Обновлено
  20. CVE-2016-0596

    Без оценкиEPSS 4,3%Нет опубликованного исправления

    CVE-2016-0596

    Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →