GCVE - cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*

part: a version: 5.0.46 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Mysql (`73f061c3-5e03-5b81-8702-d9e22bdb3e50`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mysql/mysql-server`	purl2cpe	2026-06-01 10:18:14.711100

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-3682`	vulnerable	2026-06-08 04:55:16.276125	Details available Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function. Published: 2011-01-11T19:00:00.000Z Updated: 2024-08-07T03:18:52.644Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-1397-1 http://support.apple.com/kb/HT4723 http://secunia.com/advisories/42875 http://www.ubuntu.com/usn/USN-1017-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-3677`	vulnerable	2026-06-08 04:55:16.228485	Details available Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column. Published: 2011-01-11T19:00:00.000Z Updated: 2024-08-07T03:18:51.984Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-1397-1 http://support.apple.com/kb/HT4723 http://secunia.com/advisories/42875 http://www.ubuntu.com/usn/USN-1017-1 http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4098`	vulnerable	2026-06-08 04:50:37.798132	Details available MySQL before 5.0.67 allows local users to bypass certain privilege checks by calling CREATE TABLE on a MyISAM table with modified (1) DATA DIRECTORY or (2) INDEX DIRECTORY arguments that are originally associated with pathnames without symlinks, and that can point to tables created at a future time at which a pathname is modified to contain a symlink to a subdirectory of the MySQL home data directory. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4097. Published: 2008-09-17T18:06:00.000Z Updated: 2024-08-07T10:00:42.841Z Open on db.gcve.eu Reference links http://www.mandriva.com/security/advisories?name=MDVSA-2009:094 http://www.ubuntu.com/usn/USN-1397-1 http://www.redhat.com/support/errata/RHSA-2009-1067.html http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480292#25 http://www.ubuntu.com/usn/USN-671-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0226`	vulnerable	2026-06-08 04:50:10.538966	Details available Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp. Published: 2008-01-10T23:00:00.000Z Updated: 2024-08-07T07:39:35.055Z Open on db.gcve.eu Reference links http://www.debian.org/security/2008/dsa-1478 http://secunia.com/advisories/29443 http://www.securityfocus.com/archive/1/485810/100/0/threaded http://secunia.com/advisories/28324 http://securityreason.com/securityalert/3531	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.