GCVE - cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql:3.23.42:*:*:*:*:*:*:*

part: a version: 3.23.42 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Mysql (`73f061c3-5e03-5b81-8702-d9e22bdb3e50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mysql/mysql-server`	purl2cpe	2026-06-01 10:18:14.710875

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1696`	vulnerable	2026-06-08 05:00:50.507600	Details available Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer. Published: 2012-05-03T22:00:00.000Z Updated: 2024-08-06T19:08:38.184Z Open on db.gcve.eu Reference links http://secunia.com/advisories/53372 http://security.gentoo.org/glsa/glsa-201308-06.xml http://www.securityfocus.com/bid/53071 http://www.securitytracker.com/id?1026934 http://secunia.com/advisories/48890	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4031`	vulnerable	2026-06-08 04:49:10.786386	Details available MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy. Published: 2006-08-09T22:00:00.000Z Updated: 2024-08-07T18:57:46.100Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21259 http://secunia.com/advisories/21627 http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://www.novell.com/linux/security/advisories/2006_23_sr.html http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0903`	vulnerable	2026-06-08 04:48:55.691910	Details available MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query. Published: 2006-02-27T23:00:00.000Z Updated: 2024-08-07T16:48:56.622Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDKSA-2006:064 http://bugs.mysql.com/bug.php?id=17667 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915 http://www.debian.org/security/2006/dsa-1079 http://secunia.com/advisories/19034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0957`	vulnerable	2026-06-08 04:47:52.084286	Details available Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities. Published: 2004-10-21T04:00:00.000Z Updated: 2024-08-08T00:31:48.222Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/17783 http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947 http://www.redhat.com/support/errata/RHSA-2004-611.html http://www.debian.org/security/2005/dsa-707 http://www.mandriva.com/security/advisories?name=MDKSA-2005:070	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0381`	vulnerable	2026-06-08 04:47:49.631739	Details available mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. Published: 2004-04-06T04:00:00.000Z Updated: 2024-08-08T00:17:14.402Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11557 http://www.securityfocus.com/bid/9976 https://exchange.xforce.ibmcloud.com/vulnerabilities/15617 http://www.debian.org/security/2004/dsa-483 http://security.gentoo.org/glsa/glsa-200405-20.xml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1480`	vulnerable	2026-06-08 04:47:47.709252	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0780`	vulnerable	2026-06-08 04:47:22.473445	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1923`	vulnerable	2026-06-08 04:47:18.513258	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1921`	vulnerable	2026-06-08 04:47:18.505410	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1809`	vulnerable	2026-06-08 04:47:18.218480	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1376`	vulnerable	2026-06-08 04:46:23.618661	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1375`	vulnerable	2026-06-08 04:46:23.616854	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1374`	vulnerable	2026-06-08 04:46:23.601342	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1373`	vulnerable	2026-06-08 04:46:23.590428	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.