« List of all vendors

MariaDB

List of Opam related CVEs (30 found)

CVE-2026-86047 – MariaDB: Insufficient quoting in mariadb-dump and SHOW commands
10/16/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-85745 – MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.
10/16/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-85748 – MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
10/16/2026
Affected packages: conf-mariadb • conf-mysql
Critical severity
CVE-2026-85746 – MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
10/16/2026
Affected packages: conf-mariadb • conf-mysql
Critical severity
CVE-2026-92262 – MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.
10/16/2026
Affected packages: conf-mariadb • conf-mysql
Critical severity
CVE-2026-97380 – MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges
10/16/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-85985 – MariaDB: Unauthorized file access via CONNECT engine UDFs
10/16/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-107823 – MariaDB: privilege escalation via incorrect view frm parsing
10/9/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-107822 – MariaDB: database privilege escalation via user / role name collision in the acl cache
10/9/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-107821 – MariaDB: insufficient validation of binary frm data when opening a table
10/9/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-107818 – MariaDB: environment injection via wsrep bootstrap in the mariadb.service file
10/9/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-107817 – MariaDB: mysql_json plugin OOB reads
10/9/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-107816 – MariaDB: `qc_info` plugin can do OOB reads if query contains \0
10/9/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-107815 – MariaDB: one byte OOB write in DOS tables of the CONNECT engine
10/9/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-107814 – MariaDB: Insecure $HOME in MariaDB rpm packages
10/9/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-48165 – MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side
6/12/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-48163 – MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)
6/12/2026
Affected packages: conf-mariadb • conf-mysql
High severity
CVE-2026-44173 – MariaDB: FILE privilege was not checked for subqueries in the FROM clause
6/12/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-44172 – MariaDB: mysql_real_escape_string() incorrectly handled big5
6/12/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity
CVE-2026-44171 – MariaDB: path traversal in mbstream
6/12/2026
Affected packages: conf-mariadb • conf-mysql
Medium severity