U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:a:oracle:mysql:5.6.43:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 132 matching records.
Displaying matches 121 through 132.
Vuln ID Summary CVSS Severity
CVE-2015-3152

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

Published: May 16, 2016; 6:59:01 AM -0400 		V4.0:(not available)
 V3.1: 5.9 MEDIUM
V2.0: 4.3 MEDIUM
CVE-2016-0667

Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Locking.

Published: April 21, 2016; 6:59:31 AM -0400 		V4.0:(not available)
 V3.0: 4.4 MEDIUM
V2.0: 2.8 LOW
CVE-2016-0663

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Performance Schema.

Published: April 21, 2016; 6:59:29 AM -0400 		V4.0:(not available)
 V3.0: 4.7 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0662

Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Partition.

Published: April 21, 2016; 6:59:27 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0659

Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Optimizer.

Published: April 21, 2016; 6:59:26 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0658

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to Optimizer.

Published: April 21, 2016; 6:59:25 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0657

Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect confidentiality via vectors related to JSON.

Published: April 21, 2016; 6:59:24 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0656

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0654.

Published: April 21, 2016; 6:59:23 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0654

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to InnoDB, a different vulnerability than CVE-2016-0656.

Published: April 21, 2016; 6:59:22 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0653

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to FTS.

Published: April 21, 2016; 6:59:21 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2016-0652

Unspecified vulnerability in Oracle MySQL 5.7.10 and earlier allows local users to affect availability via vectors related to DML.

Published: April 21, 2016; 6:59:20 AM -0400 		V4.0:(not available)
 V3.0: 5.5 MEDIUM
V2.0: 3.5 LOW
CVE-2013-1548

Unspecified vulnerability in Oracle MySQL 5.1.63 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Types.

Published: April 17, 2013; 8:19:44 AM -0400 		V4.0:(not available)
 V3.x:(not available)
 V2.0: 3.5 LOW