Vulnerabilities > Oracle

DATE CVE VULNERABILITY TITLE RISK
2011-01-14 CVE-2010-3833 Resource Management Errors vulnerability in multiple products
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ...
network
low complexity
mysql oracle CWE-399
5.0
2011-01-11 CVE-2010-3683 Denial Of Service vulnerability in Oracle MySQL 'LOAD DATA INFILE'
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
network
low complexity
mysql oracle
4.0
2011-01-11 CVE-2010-3682 Denial Of Service vulnerability in Oracle MySQL 'EXPLAIN'
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ...
network
low complexity
mysql oracle
4.0
2011-01-11 CVE-2010-3681 Denial Of Service vulnerability in Oracle MySQL 'HANDLER' interface
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
network
low complexity
mysql oracle
4.0
2011-01-11 CVE-2010-3680 Denial Of Service vulnerability in Oracle MySQL 'TEMPORARY InnoDB' Tables
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
network
low complexity
mysql oracle
4.0
2011-01-11 CVE-2010-3679 Resource Management Errors vulnerability in multiple products
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-11 CVE-2010-3678 Resource Management Errors vulnerability in multiple products
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-11 CVE-2010-3677 Resource Management Errors vulnerability in multiple products
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-11 CVE-2010-3676 Denial Of Service vulnerability in Oracle MySQL Prior to 5.1.49 'DDL' Statements
storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement.
network
low complexity
mysql oracle
4.0
2010-10-29 CVE-2010-3654 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.
9.3