Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mariadb mariadb vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv2

CVE-2012-5611

Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions up to and including 5.5.28, and 5.1.53 and other versions up to and including 5.1.66, and MariaDB 5.5.2.x prior to 5.5.28a, 5.3.x prior to 5.3.11, 5.2.x prior to 5.2.13 and 5.1.x prior t...
Mariadb Mariadb 5.1.41Mariadb Mariadb 5.1.42Mariadb Mariadb 5.1.44Mariadb Mariadb 5.1.47Mariadb Mariadb 5.1.49Mariadb Mariadb 5.1.50Mariadb Mariadb 5.1.51Mariadb Mariadb 5.1.53Mariadb Mariadb 5.1.55Mariadb Mariadb 5.1.60Mariadb Mariadb 5.1.61Mariadb Mariadb 5.1.62Mariadb Mariadb 5.2.0Mariadb Mariadb 5.2.1Mariadb Mariadb 5.2.2Mariadb Mariadb 5.2.3Mariadb Mariadb 5.2.4Mariadb Mariadb 5.2.5Mariadb Mariadb 5.2.6Mariadb Mariadb 5.2.7Mariadb Mariadb 5.2.8Mariadb Mariadb 5.2.9
5.1
CVSSv2

CVE-2012-2122

sql/password.c in Oracle MySQL 5.1.x prior to 5.1.63, 5.5.x prior to 5.5.24, and 5.6.x prior to 5.6.6, and MariaDB 5.1.x prior to 5.1.62, 5.2.x prior to 5.2.12, 5.3.x prior to 5.3.6, and 5.5.x prior to 5.5.23, when running in certain environments with certain implementations of t...
Oracle Mysql 5.1.52Oracle Mysql 5.1.59Oracle Mysql 5.1.51Oracle Mysql 5.1.60Oracle Mysql 5.1.54Oracle Mysql 5.1.53Oracle Mysql 5.1.61Oracle Mysql 5.1.55Oracle Mysql 5.1.57Oracle Mysql 5.1.58Oracle Mysql 5.1.56Oracle Mysql 5.5.10Oracle Mysql 5.5.19Oracle Mysql 5.5.17Oracle Mysql 5.5.14Oracle Mysql 5.5.16Oracle Mysql 5.5.11Oracle Mysql 5.5.21Oracle Mysql 5.5.20Oracle Mysql 5.5.18Oracle Mysql 5.5.15Oracle Mysql 5.5.13
6.5
CVSSv2

CVE-2012-4414

Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly prior to 5.5.29, and MariaDB 5.1.x up to and including 5.1.62, 5.2.x up to and including 5.2.12, 5.3.x up to and including 5.3.7, and 5.5.x up to and including 5.5.25, allow remote authenticat...
Oracle Mysql 5.5.10Oracle Mysql 5.1.63Oracle Mysql 5.1.52Oracle Mysql 5.1.59Oracle Mysql 5.5.27Oracle Mysql 5.1.51Oracle Mysql 5.1.62Oracle Mysql 5.1.60Oracle Mysql 5.5.19Oracle Mysql 5.1.54Oracle Mysql 5.1.53Oracle Mysql 5.5.17Oracle Mysql 5.1.61Oracle Mysql 5.1.55Oracle Mysql 5.1.57Oracle Mysql 5.5.22Oracle Mysql 5.5.14Oracle MysqlOracle Mysql 5.5.16Oracle Mysql 5.5.11Oracle Mysql 5.1.65Oracle Mysql 5.5.21
5
CVSSv2

CVE-2012-5615

Oracle MySQL 5.5.38 and previous versions, 5.6.19 and previous versions, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote malicious ...
Mariadb Mariadb 5.5.28aOracle Mysql 5.5.19Mariadb Mariadb 5.2.13Mariadb Mariadb 5.1.66Mariadb Mariadb 5.3.11
4
CVSSv2

CVE-2012-5627

Oracle MySQL and MariaDB 5.5.x prior to 5.5.29, 5.3.x prior to 5.3.12, and 5.2.x prior to 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection which makes it easier for remote authenticated users to conduct brute force p...
Oracle MysqlMariadb Mariadb 10.0.0Mariadb Mariadb
5
CVSSv2

CVE-2022-27378

An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below exists to allow malicious users to cause a Denial of Service (DoS) via specially crafted SQL statements.
Mariadb MariadbMariadb Mariadb 10.9Debian Debian Linux 10.0
NA

CVE-2022-38791

In MariaDB prior to 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
Mariadb MariadbMariadb Mariadb 10.9.1Fedoraproject Fedora 35Fedoraproject Fedora 36Fedoraproject Fedora 37
4.6
CVSSv2

CVE-2022-24048

MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw ...
Mariadb MariadbMariadb Mariadb 10.8.0Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
4.6
CVSSv2

CVE-2022-24050

MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within...
Mariadb MariadbMariadb Mariadb 10.8.0Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
4.6
CVSSv2

CVE-2022-24051

MariaDB CONNECT Storage Engine Format String Privilege Escalation Vulnerability. This vulnerability allows local malicious users to escalate privileges on affected installations of MariaDB. Authentication is required to exploit this vulnerability. The specific flaw exists within ...
Mariadb MariadbMariadb Mariadb 10.8.0Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
file inclusionprivilegeinsecure direct object referenceCVE-2024-37404CVE-2024-9466CVE-2024-30118CVE-2024-47668CVE-2024-43573CVE-2024-45144
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook