CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 08:40 UTC)

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product oracle:mysql. Show all products

15 CVEs, showing 1 to 15

CVE	Severity	Title	Published
CVE-2026-34319	Medium 5.0	Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).	Apr 21, 2026
CVE-2026-34318	Medium 5.8	Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).	Apr 21, 2026
CVE-2026-34317	Medium 5.0	Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client).	Apr 21, 2026
CVE-2026-21964	Medium 4.9	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).	Jan 20, 2026
CVE-2020-15358	Medium 5.5	In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation. Assigned by mitre	Jun 27, 2020
CVE-2020-1967	High 7.5	Segmentation fault in SSL_check_chain Assigned by openssl	Apr 21, 2020
CVE-2020-11655	High 7.5	SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled. Assigned by mitre	Apr 9, 2020
CVE-2020-11656	Critical 9.8	In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement. Assigned by mitre	Apr 9, 2020
CVE-2020-5258	High 7.7	Prototype pollution in dojo Assigned by GitHub_M	Mar 10, 2020
CVE-2020-5398 Healthcare	High 8.0	RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application Assigned by pivotal	Jan 16, 2020
CVE-2019-14540	Critical 9.8	A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. Assigned by mitre	Sep 15, 2019
CVE-2019-16168	Medium 6.5	In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the… Assigned by mitre	Sep 9, 2019
CVE-2018-0735	Medium 5.9	Timing attack against ECDSA signature generation Assigned by openssl	Oct 29, 2018
CVE-2016-9841	Critical 9.8	inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus	May 23, 2017
CVE-2016-9840	High 8.8	inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. Assigned by microfocus	May 23, 2017

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.