mariadb vulnerabilities (Bitnami)
136 vulnerabilities.
-
mariadbBitnami MariaDB: Insufficient quoting in mariadb-dump and SHOW commands 7.7 High -
mariadbBitnami MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon. 4.3 Medium -
mariadbBitnami MariaDB: Use-after-free with a large number of SYS_REFCURSOR's 9.9 Critical -
mariadbBitnami MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 9.9 Critical -
mariadbBitnami MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges 8.8 High -
mariadbBitnami MariaDB: Unauthorized file access via CONNECT engine UDFs 5.4 Medium -
mariadbBitnami MariaDB: privilege escalation via incorrect view frm parsing 7.2 High -
mariadbBitnami MariaDB: database privilege escalation via user / role name collision in the acl cache 6.4 Medium -
mariadbBitnami MariaDB: insufficient validation of binary frm data when opening a table 8.0 High -
mariadbBitnami MariaDB: environment injection via wsrep bootstrap in the mariadb.service file 8.4 High -
mariadbBitnami MariaDB: mysql_json plugin OOB reads 4.4 Medium -
mariadbBitnami MariaDB: `qc_info` plugin can do OOB reads if query contains \0 6.4 Medium -
mariadbBitnami MariaDB: one byte OOB write in DOS tables of the CONNECT engine 8.5 High -
mariadbBitnami MariaDB: Insecure $HOME in MariaDB rpm packages 8.4 High -
mariadbBitnami MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES 7.4 High -
mariadbBitnami MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) 8.1 High -
mariadbBitnami MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters 7.5 High -
mariadbBitnami MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS 5.9 Medium -
mariadbBitnami MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 9.9 Critical -
mariadbBitnami MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets 6.5 Medium -
mariadbBitnami MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb 5.9 Medium -
mariadbBitnami MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` 7.5 High -
mariadbBitnami MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` 10.0 Critical -
mariadbBitnami MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side 8.0 High -
mariadbBitnami MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) 8.0 High -
mariadbBitnami MariaDB: FILE privilege was not checked for subqueries in the FROM clause 5.0 Medium -
mariadbBitnami MariaDB: mysql_real_escape_string() incorrectly handled big5 6.9 Medium -
mariadbBitnami MariaDB: path traversal in mbstream 6.3 Medium -
mariadbBitnami MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL 6.3 Medium -
mariadbBitnami MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions 4.3 Medium -
mariadbBitnami MariaDB: wsrep SST unsafe parameter handling on the donor side 8.0 High -
mariadbBitnami An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6,... 6.5 Medium -
mariadbBitnami Heap-based Buffer Overflow in MariaDB 8.6 High -
mariadbBitnami MariaDB Server Audit Plugin Comment Handling Bypass 5.3 Medium -
mariadbBitnami Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). ... 5.3 Medium -
mariadbBitnami Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... 5.5 Medium -
mariadbBitnami MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN:... 4.9 Medium -
mariadbBitnami MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.... 4.9 Medium -
mariadbBitnami MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through... 4.9 Medium -
mariadbBitnami MariaDB Server 10.4 before 10.4.33, 10.5 before 10.5.24, 10.6 before 10.6.17, 10.7 through 10.11... 4.9 Medium -
mariadbBitnami Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... 4.9 Medium -
mariadbBitnami An issue in MYSQL MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the... 5.7 Medium -
mariadbBitnami Insecure permissions in the sys_exec function of Oracle MYSQL MariaDB v10.5 allows authenticated... 5.6 Medium -
mariadbBitnami MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability. 9.8 Critical -
mariadbBitnami Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). ... 4.9 Medium -
mariadbBitnami Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported... 4.9 Medium -
mariadbBitnami Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 7.5 High -
mariadbBitnami MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for... 6.5 Medium -
mariadbBitnami In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release... 5.5 Medium -
mariadbBitnami Vulnerability in the MySQL Server product of Oracle MySQL (component: C API). Supported versions... 4.4 Medium - Show olderLoading…