mariadb-10.0

31 results · Clear filters · Feed

• High 8.0
  CVE-2026-102523

  MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

  MariaDB server is a community developed fork of MySQL server. From 10.11.1 until 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ALTER TABLE ... CONVERT ... PARTITION does not apply filename encoding to user-specified partition names before using them in files…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Nov 5, 2026
• High 7.5
  CVE-2026-101796

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 7.5
  CVE-2026-101797

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported vers…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 8.3
  CVE-2026-101785

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions …

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 8.8
  CVE-2026-101781

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Su…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 7.4
  CVE-2026-101775

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 8.1
  CVE-2026-101771

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versio…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 7.1
  CVE-2026-101773

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 8.1
  CVE-2026-101772

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versio…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 8.1
  CVE-2026-101770

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versio…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 7.5
  CVE-2026-101679

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versio…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Oct 20, 2026
• High 7.7
  CVE-2026-86047

  MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and mariadb-dump are affected because each does not consistently quote identifiers an…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 16, 2026
• High 8.8
  CVE-2026-97380

  MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, c…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux
  Oct 16, 2026
• High 7.2
  CVE-2026-107823

  MariaDB: privilege escalation via incorrect view frm parsing

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely encode embedded newline characters in a username. An account with CREATE USER an…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.0
  CVE-2026-107821 Public exploit

  MariaDB: insufficient validation of binary frm data when opening a table

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM fi…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.4
  CVE-2026-107818

  MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE priv…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.5
  CVE-2026-107815

  MariaDB: one byte OOB write in DOS tables of the CONNECT engine

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack bu…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu
  Oct 9, 2026
• High 8.4
  CVE-2026-107814

  MariaDB: Insecure $HOME in MariaDB rpm packages

  MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A …

  MariaDB server mariadb-10.3 mariadb-10.0 Ubuntu
  Oct 9, 2026
• High 7.2
  CVE-2026-61094

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported ve…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 8.2
  CVE-2026-60315

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versi…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 7.2
  CVE-2026-60316

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versi…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 8.4
  CVE-2026-60163

  Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin).…

  Oracle MySQL Server MySQL Cluster percona-server-5.6 Ubuntu
  Jul 21, 2026
• High 8.0
  CVE-2026-48165

  MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side

  MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_add…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  Jun 12, 2026
• High 8.0
  CVE-2026-44168

  MariaDB: wsrep SST unsafe parameter handling on the donor side

  MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.26, 10.11.1 to before 10.11.17, 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, during the SST the donor node is interpolating parameters that the…

  MariaDB server mariadb-10.3 mariadb-10.0 Debian Ubuntu Alpine Wolfi
  Jun 12, 2026
• High 7.0
  CVE-2025-13699

  MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

  MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit t…

  MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux
  Dec 23, 2025
• High 7.0
  CVE-2022-24052

  MariaDB CONNECT Storage Engine Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows…

  MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 7.0
  CVE-2022-24051

  MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local attack…

  MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 7.0
  CVE-2022-24050

  MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attac…

  MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 7.0
  CVE-2022-24048

  MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allow…

  MariaDB MariaDB mariadb-10.3 mariadb-10.0 Debian Ubuntu Azure Linux Alpine
  Feb 18, 2022
• High 7.2
  CVE-2021-2144

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Apr 22, 2021
• High 7.8
  CVE-2020-1547

  Windows Backup Engine Elevation of Privilege Vulnerability

  An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted applica…

  Microsoft Windows 10 Version 1809 Windows 10 Version 1607 Windows 10 Version 1507 Windows Ubuntu
  Aug 17, 2020