Known Vulnerabilities for products from Dbd-mysql Project

Listed below are 7 of the newest known vulnerabilities associated with the vendor "Dbd-mysql Project".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2017-10789 The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this sett... 5.9 - MEDIUM 2017-07-01 2019-10-03
CVE-2017-10788 The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and applica... 9.8 - CRITICAL 2017-07-01 2017-07-12
CVE-2016-1251 There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL dri... 8.1 - HIGH 2016-11-29 2017-07-01
CVE-2016-1249 The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a d... 5.9 - MEDIUM 2017-02-17 2021-08-09
CVE-2016-1246 Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of servic... 7.5 - HIGH 2016-10-05 2017-11-13
CVE-2015-8949 Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impa... 9.8 - CRITICAL 2016-08-19 2017-07-01
CVE-2014-9906 Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or poss... 9.8 - CRITICAL 2016-08-19 2016-11-28

Known software with vulnerabilities from Dbd-mysql Project

Type Vendor Product Version
ApplicationDbd-mysql ProjectDbd-mysql3.0000_0