mariadb vulnerabilities (Root)
17 vulnerabilities.
-
mariadbRoot MariaDB: Insufficient quoting in mariadb-dump and SHOW commands 7.7 High -
mariadbRoot MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections 9.9 Critical -
mariadbRoot MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges 8.8 High -
mariadbRoot MariaDB: privilege escalation via incorrect view frm parsing 7.2 High -
mariadbRoot MariaDB: insufficient validation of binary frm data when opening a table 8.0 High -
mariadbRoot MariaDB: environment injection via wsrep bootstrap in the mariadb.service file 8.4 High -
mariadbRoot MariaDB: one byte OOB write in DOS tables of the CONNECT engine 8.5 High -
mariadbRoot MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass. 9.9 Critical -
mariadbRoot MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` 10.0 Critical -
mariadbRoot MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side 8.0 High -
mariadbRoot MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) 8.0 High -
mariadbRoot MariaDB: FILE privilege was not checked for subqueries in the FROM clause 5.0 Medium -
mariadbRoot MariaDB: mysql_real_escape_string() incorrectly handled big5 6.9 Medium -
mariadbRoot MariaDB: path traversal in mbstream 6.3 Medium -
mariadbRoot MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL 6.3 Medium -
mariadbRoot MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions 4.3 Medium -
mariadbRoot MariaDB: wsrep SST unsafe parameter handling on the donor side 8.0 High