6915 matches found
The vulnerability of the Item_field::used_tables/update_depend_map_for_order component of the MariaDB database management system, which allows a hacker to trigger a service failure.
The vulnerability of the Itemfield::usedtables/updatedependmapfororder component of the MariaDB database management system is related to the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the item_cmpfunc.h component of the MariaDB database management system allows a hacker to trigger a segmentation fault.
The vulnerability of the itemcmpfunc.h component in the MariaDB database management system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the my_wildcmp_8bit_impl component of the MariaDB database management system allows a attacker to cause a service failure.
The vulnerability of the mywildcmp8bitimpl component of the MariaDB database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the ds_compress.cc component in the MariaDB database management system allows a hacker to cause a service failure.
The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the field_conv.cc component in the MariaDB database management system allows a attacker to cause service failures.
The vulnerability of the fieldconv.cc component in the MariaDB database management system is related to errors that occur during the code validation process. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the item_subselect.cc component of the MariaDB database management system allows a hacker to cause service failures.
The vulnerability of the itemsubselect.cc component of the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the MariaDB database management system lies in the improper processing of condition transfers from HAVING to WHEREE, which allows attackers to trigger service failures.
The vulnerability of the MariaDB database management system is related to the incorrect processing of condition transfers from HAVING to WHEREE. Exploiting this vulnerability can allow attackers to cause service failures...
Oracle Linux 8 : mariadb:10.3 (ELSA-2019-3708)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-3708 advisory. - Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6....
Frappe Technologies Frappe SQL Injection Vulnerability
Frappe Technologies Frappe is a Python, Mariadb-based web development framework with integrated front-end pages from Frappe Technologies, India. Frappe suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to access sensitive information...
PT-2025-10403
Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11. MariaDB Server versions 11.0 through 11.4. Description The issue causes MariaDB Server to crash in Item direct view ref::derived field transformer for where. Recommendations For MariaDB Server versio...
PT-2025-10402
Name of the Vulnerable Software and Affected Versions MariaDB Server versions 10.4 through 10.11., 11.0 through 11.0. Description The issue may cause MariaDB Server to crash with an empty backtrace log. This could be related to the make aggr tables info and optimize stage2 functions...
PT-2025-10401 · Mariadb +1 · Mariadb Server +1
Name of the Vulnerable Software and Affected Versions: MariaDB Server versions 10.4 through 10.4.32 MariaDB Server versions 10.5 through 10.5.23 MariaDB Server versions 10.6 through 10.6.16 MariaDB Server versions 10.7 through 10.11.6 MariaDB Server versions 11.0 through 11.0.4 MariaDB Server...
CVE-2023-40354
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08....
Design/Logic Flaw
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08....
MariaDB Security Vulnerabilities
MariaDB is a free and open source database management system from the Mariadb Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB MaxScale versions prior to 23.02.3, which stems from the fact that passwords are stored in plaintext in...
CVE-2023-40354
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08....
CVE-2023-40354
An issue was discovered in MariaDB MaxScale before 23.02.3. A user enters an encrypted password on a "maxctrl create service" command line, but this password is then stored in cleartext in the resulting .cnf file under /var/lib/maxscale/maxscale.cnf.d. The fixed versions are 2.5.28, 6.4.9, 22.08....
CVE-2023-40354
Affected software: MariaDB MaxScale. Vulnerability details: When a user runs “maxctrl create service” and enters an encrypted password, the password is stored in cleartext in the generated /var/lib/maxscale/maxscale.cnf.d/.cnf file. Root cause/impact: This leaks credentials and can result in unau...
