195 matches found
CVE-2021-27928-POC
CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...
CVE-2021-27928
Information Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch through...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, mariadb-operator, step-issuer, cert-manager-cmctl, opentelemetry-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-csi-driver, cert-manager-istio-csr...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: kapp-controller, azcopy, terraform-provider-azurerm, crossplane-provider-aws-elasticache, crossplane-provider-aws-kms, paranoia, cloud-provider-azure, aws-node-termination-handler, crossplane-provider-aws-sns, tofu-controller, sftpgo-plugin-pubsub, consul-k8s,...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: thanos-operator, cloud-provider-azure, kustomize, amass, goreleaser, newrelic-nri-statsd, mockery, rancher-agent, dex, percona-server-mongodb-operator, rook, spicedb-operator, argo-cd, hubble, aws-signer-notation-plugin, rancher-webhook, cert-exporter,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: kapp-controller, azcopy, thanos-operator, crossplane-provider-aws-elasticache, paranoia, mods, kine, crossplane-provider-aws-sns, tofu-controller, sftpgo-plugin-pubsub, hubble-ui, sealed-secrets, kustomize, amass, gke-gcloud-auth-plugin, goreleaser,...
CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0
Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1
Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CVE-2026-61828: Incorrect Default Permissions
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CLEANSTART-2026-BE68531 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-63666
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KJ85611 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer-fips, mariadb-operator, cert-manager-csi-driver-fips, percona-server-mongodb-operator-fips, opentelemetry-operator-fips, cert-manager-csi-driver, cert-manager-webhook-pdns-fips, cert-manager-cmctl-fips, percona-xtradb-cluster-operator-fips,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator, mariadb-operator, step-issuer, cert-manager-cmctl, opentelemetry-operator, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-csi-driver, cert-manager-istio-csr...
CVE-2019-12301
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2...
CVE-2021-27928 vulnerabilities
Vulnerabilities for packages: percona-server...