MySQL is the most popular and most widely used database in the world. MySQL customers include NASA, US Navy, Google, Facebook, Twitter just to cite a few.. In partnership with Oracle Inc. we have worked delicately to enhance the security of the open-source product, and to identify and mitigate those vulnerabilities. Sincere thanks to Oracle Inc for the prompt response and adequate mitigation to the issues. You can get a copy of the report here: https://packetstormsecurity.com/files/download/138007/MySQL-Zerodays.pdf The report corresponds to Oracle's (July 2016 CPU), in which we have discovered over 14 zero-day vulnerabilities affecting MySQL. CVE's, versions affected and all relevant information are enlisted in the CPU. Here's a link to Oracle's Critical Patch Update / July 2016 . http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html There are a number of issues affecting third-party technologies used by other popular products which would gather the interest of the community, but those will not be released as of yet, until the maintainers of those are informed... Kind Regards, Nicholas Lemonias, CEO Advanced Information Security Corporation
