mariadb

31 results · Clear filters · Feed

• Medium 6.2
  CVE-2026-60747

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 6.6
  CVE-2026-60585

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 6.4
  CVE-2026-60331

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 4.4
  CVE-2026-60184

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 4.9
  CVE-2026-47023

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Debian Ubuntu Alpine
  Jul 21, 2026
• Medium 5.0
  CVE-2026-44173

  MariaDB: FILE privilege was not checked for subqueries in the FROM clause

  MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB allowed SELECT ... INTO OUTFILE and SELECT ... INTO DUMPFI…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine
  Jun 12, 2026
• Medium 6.9
  CVE-2026-44172

  MariaDB: mysql_real_escape_string() incorrectly handled big5

  MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 charac…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine PyPI
  Jun 12, 2026
• Medium 6.3
  CVE-2026-44171

  MariaDB: path traversal in mbstream

  MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, mbstream did not check for /../ in the path when unpacking the arc…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine
  Jun 12, 2026
• Medium 4.3
  CVE-2026-44169

  MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

  MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE …

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine
  Jun 12, 2026
• Medium 6.3
  CVE-2026-44170

  MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

  MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, MariaDB on WIndows with installed CONNECT engine and enabled REST …

  MariaDB server mariadb mariadb Ubuntu Alpine
  Jun 12, 2026
• Medium 4.3
  CVE-2026-3494 Public exploit

  MariaDB Server Audit Plugin Comment Handling Bypass

  In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen…

  amazon MariaDB Foundation Aurora MySQL RDS for MariaDB Debian Ubuntu Alpine
  Mar 3, 2026
• Medium 4.9
  CVE-2025-21490

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Jan 21, 2025
• Medium 4.9
  CVE-2024-21096

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Apr 16, 2024
• Medium 4.9
  CVE-2023-22084

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 17, 2023
• Medium 6.5
  CVE-2022-47015

  MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mba…

  mariadb-10.3 mariadb-10.6 mariadb mariadb Debian Ubuntu Alpine
  Jan 20, 2023
• Medium 5.3
  CVE-2022-31621

  MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occur…

  mariadb mariadb-10.5 Debian Alpine
  May 25, 2022
• Medium 4.9
  CVE-2022-21427

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Apr 19, 2022
• Medium 5.5
  CVE-2021-35604

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 20, 2021
• Medium 5.9
  CVE-2021-2389

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Jul 20, 2021
• Medium 4.4
  CVE-2021-2372

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Jul 20, 2021
• Medium 4.9
  CVE-2021-2166

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Apr 22, 2021
• Medium 4.9
  CVE-2021-2154

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Apr 22, 2021
• Medium 4.9
  CVE-2020-14812

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are aff…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 4.9
  CVE-2020-14789

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 6.5
  CVE-2020-14765

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 4.9
  CVE-2020-14776

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Debian Ubuntu Alpine
  Oct 21, 2020
• Medium 4.9
  CVE-2020-2814

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 4.9
  CVE-2020-2812

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions tha…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 5.5
  CVE-2020-2760

  Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 5.3
  CVE-2020-2752

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Apr 15, 2020
• Medium 5.9
  CVE-2020-2574

  Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine
  Jan 15, 2020