<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: mysql</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-15945: The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-clust</title><link>https://patchthecve.com/cve/CVE-2017-15945.html</link><guid>https://patchthecve.com/cve/CVE-2017-15945.html</guid><pubDate>Wed, 17 Jun 2026 01:08:31 +0000</pubDate><description>HIGH 7.8: The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to the mysql acc</description></item><item><title>CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote a</title><link>https://patchthecve.com/cve/CVE-2015-2575.html</link><guid>https://patchthecve.com/cve/CVE-2015-2575.html</guid><pubDate>Wed, 17 Jun 2026 00:24:19 +0000</pubDate><description>MEDIUM 4.9: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.</description></item><item><title>CVE-2013-1492: Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact</title><link>https://patchthecve.com/cve/CVE-2013-1492.html</link><guid>https://patchthecve.com/cve/CVE-2013-1492.html</guid><pubDate>Tue, 16 Jun 2026 23:51:32 +0000</pubDate><description>HIGH 7.5: Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.30, has unspecified impact and attack vectors, a different vulnerability than CVE-2012-0553.</description></item><item><title>CVE-2012-0553: Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact</title><link>https://patchthecve.com/cve/CVE-2012-0553.html</link><guid>https://patchthecve.com/cve/CVE-2012-0553.html</guid><pubDate>Tue, 16 Jun 2026 23:37:31 +0000</pubDate><description>HIGH 7.5: Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.68 and 5.5.x before 5.5.28, has unspecified impact and attack vectors, a different vulnerability than CVE-2013-1492.</description></item><item><title>CVE-2012-0882: Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 an</title><link>https://patchthecve.com/cve/CVE-2012-0882.html</link><guid>https://patchthecve.com/cve/CVE-2012-0882.html</guid><pubDate>Tue, 16 Jun 2026 23:38:26 +0000</pubDate><description>HIGH 7.5: Buffer overflow in yaSSL, as used in MySQL 5.5.20 and possibly other versions including 5.5.x before 5.5.22 and 5.1.x before 5.1.62, allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VulnDisco Pack Professional 9.17.  NOTE: as of 20120224, this disclosure </description></item><item><title>CVE-2012-2749: MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of servi</title><link>https://patchthecve.com/cve/CVE-2012-2749.html</link><guid>https://patchthecve.com/cve/CVE-2012-2749.html</guid><pubDate>Tue, 16 Jun 2026 23:42:01 +0000</pubDate><description>MEDIUM 4.0: MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote authenticated users to cause a denial of service (mysqld crash) via vectors related to incorrect calculation and a sort order index.</description></item><item><title>CVE-2012-2102: MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of servi</title><link>https://patchthecve.com/cve/CVE-2012-2102.html</link><guid>https://patchthecve.com/cve/CVE-2012-2102.html</guid><pubDate>Tue, 16 Jun 2026 23:40:59 +0000</pubDate><description>LOW 3.5: MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote authenticated users to cause a denial of service (assertion failure and mysqld abort) by deleting a record and using HANDLER READ NEXT.</description></item><item><title>CVE-2009-5026: The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain s</title><link>https://patchthecve.com/cve/CVE-2009-5026.html</link><guid>https://patchthecve.com/cve/CVE-2009-5026.html</guid><pubDate>Tue, 16 Jun 2026 23:14:51 +0000</pubDate><description>MEDIUM 6.8: The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.</description></item><item><title>CVE-2012-1696: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authe</title><link>https://patchthecve.com/cve/CVE-2012-1696.html</link><guid>https://patchthecve.com/cve/CVE-2012-1696.html</guid><pubDate>Tue, 16 Jun 2026 23:40:07 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.</description></item><item><title>CVE-2012-0583: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and ear</title><link>https://patchthecve.com/cve/CVE-2012-0583.html</link><guid>https://patchthecve.com/cve/CVE-2012-0583.html</guid><pubDate>Tue, 16 Jun 2026 23:37:52 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.60 and earlier, and 5.5.19 and earlier, allows remote authenticated users to affect availability, related to MyISAM.</description></item><item><title>CVE-2012-0492: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0492.html</link><guid>https://patchthecve.com/cve/CVE-2012-0492.html</guid><pubDate>Tue, 16 Jun 2026 23:37:23 +0000</pubDate><description>LOW 2.1: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0485.</description></item><item><title>CVE-2012-0490: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote </title><link>https://patchthecve.com/cve/CVE-2012-0490.html</link><guid>https://patchthecve.com/cve/CVE-2012-0490.html</guid><pubDate>Tue, 16 Jun 2026 23:37:23 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect availability via unknown vectors.</description></item><item><title>CVE-2012-0485: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0485.html</link><guid>https://patchthecve.com/cve/CVE-2012-0485.html</guid><pubDate>Tue, 16 Jun 2026 23:37:23 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, and CVE-2012-0492.</description></item><item><title>CVE-2012-0484: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote </title><link>https://patchthecve.com/cve/CVE-2012-0484.html</link><guid>https://patchthecve.com/cve/CVE-2012-0484.html</guid><pubDate>Tue, 16 Jun 2026 23:37:22 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect confidentiality via unknown vectors.</description></item><item><title>CVE-2012-0120: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0120.html</link><guid>https://patchthecve.com/cve/CVE-2012-0120.html</guid><pubDate>Tue, 16 Jun 2026 23:36:42 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0119, CVE-2012-0485, and CVE-2012-0492.</description></item><item><title>CVE-2012-0119: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0119.html</link><guid>https://patchthecve.com/cve/CVE-2012-0119.html</guid><pubDate>Tue, 16 Jun 2026 23:36:42 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0115, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.</description></item><item><title>CVE-2012-0118: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0118.html</link><guid>https://patchthecve.com/cve/CVE-2012-0118.html</guid><pubDate>Tue, 16 Jun 2026 23:36:42 +0000</pubDate><description>MEDIUM 4.9: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0113.</description></item><item><title>CVE-2012-0116: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0116.html</link><guid>https://patchthecve.com/cve/CVE-2012-0116.html</guid><pubDate>Tue, 16 Jun 2026 23:36:42 +0000</pubDate><description>MEDIUM 4.9: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.</description></item><item><title>CVE-2012-0115: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0115.html</link><guid>https://patchthecve.com/cve/CVE-2012-0115.html</guid><pubDate>Tue, 16 Jun 2026 23:36:42 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0112, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.</description></item><item><title>CVE-2012-0114: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local u</title><link>https://patchthecve.com/cve/CVE-2012-0114.html</link><guid>https://patchthecve.com/cve/CVE-2012-0114.html</guid><pubDate>Tue, 16 Jun 2026 23:36:41 +0000</pubDate><description>LOW 3.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows local users to affect confidentiality and integrity via unknown vectors.</description></item><item><title>CVE-2012-0113: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0113.html</link><guid>https://patchthecve.com/cve/CVE-2012-0113.html</guid><pubDate>Tue, 16 Jun 2026 23:36:41 +0000</pubDate><description>MEDIUM 5.5: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect confidentiality and availability via unknown vectors, a different vulnerability than CVE-2012-0118.</description></item><item><title>CVE-2012-0112: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0112.html</link><guid>https://patchthecve.com/cve/CVE-2012-0112.html</guid><pubDate>Tue, 16 Jun 2026 23:36:41 +0000</pubDate><description>LOW 3.5: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0115, CVE-2012-0119, CVE-2012-0120, CVE-2012-0485, and CVE-2012-0492.</description></item><item><title>CVE-2012-0102: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0102.html</link><guid>https://patchthecve.com/cve/CVE-2012-0102.html</guid><pubDate>Tue, 16 Jun 2026 23:36:40 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0101.</description></item><item><title>CVE-2012-0101: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0101.html</link><guid>https://patchthecve.com/cve/CVE-2012-0101.html</guid><pubDate>Tue, 16 Jun 2026 23:36:40 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0102.</description></item><item><title>CVE-2012-0087: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenti</title><link>https://patchthecve.com/cve/CVE-2012-0087.html</link><guid>https://patchthecve.com/cve/CVE-2012-0087.html</guid><pubDate>Tue, 16 Jun 2026 23:36:39 +0000</pubDate><description>MEDIUM 4.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0101 and CVE-2012-0102.</description></item><item><title>CVE-2012-0075: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote </title><link>https://patchthecve.com/cve/CVE-2012-0075.html</link><guid>https://patchthecve.com/cve/CVE-2012-0075.html</guid><pubDate>Tue, 16 Jun 2026 23:36:37 +0000</pubDate><description>LOW 1.7: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.</description></item><item><title>CVE-2011-2262: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attacker</title><link>https://patchthecve.com/cve/CVE-2011-2262.html</link><guid>https://patchthecve.com/cve/CVE-2011-2262.html</guid><pubDate>Tue, 16 Jun 2026 23:31:00 +0000</pubDate><description>MEDIUM 5.0: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.</description></item></channel></rss>