174 matches found
CVE-2021-27928-POC
CVE-2021-27928 PoC 説明 MariaDB 10.2（10.2.37 より前）、10.3（10.3.28 より前）、10.4（10.4.18 より前）、10.5（10.5.9 より前）、Percona Server（2021-03-03 までのバージョン）、および MySQL 用 wsrep パッチ（2021-03-03 まで）において、リモートコード実行の問題が発見されました。信頼されていない検索パスにより eval インジェクションが発生し、データベースの SUPER ユーザーが wsrepprovider および wsrepnotifycmd を変更した後に OS...
CVE-2021-27928
정보 root@kitploit: Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before 10.2.37 10.3 before 10.3.28 10.4 before 10.4.18 10.5 before 10.5.9 Percona Server through 2021-03-03; and the wsrep patch throu...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, step-issuer, cert-manager-cmctl, opentelemetry-operator, mariadb-operator, percona-server-mongodb-operator, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-istio-csr...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: argo-cd, snyk-cli, azure-workload-identity-webhook, crossplane-provider-aws-kinesis, omnibump, sftpgo-plugin-eventstore, temporal-server, azcopy, kubernetes-csi-node-driver-registrar, aws-efs-csi-driver, coredns, slsa-verifier, harbor-scanner-trivy, authservice,...
GO-2026-4946 vulnerabilities
Vulnerabilities for packages: kapp, azure-service-operator, ipfs-cluster, oras, clickhouse-operator, pguser, mongo-tools, fluxcd-kustomize-mutating-webhook, helm-set-status, harbor-scanner-trivy, nats, crossplane, victoriametrics-operator, falco-exporter, memcached-exporter, weaviate,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: git-sync, kapp, whereabouts, azure-service-operator, cilium-cli, spegel, azure-workload-identity-webhook, ipfs-cluster, crossplane-provider-aws-kinesis, newrelic-fluent-bit-output, nginx-prometheus-exporter, clickhouse-operator, ghaudit, azcopy, pguser, blobfuse2,...
CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0
Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...
CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1
Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CVE-2026-61828: Incorrect Default Permissions
Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...
CLEANSTART-2026-BE68531 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KJ85611 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1
Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: cert-manager-google-cas-issuer-fips, step-issuer, percona-xtradb-cluster-operator-fips, mariadb-operator, aws-privateca-issuer-fips, percona-xtradb-cluster-operator, cert-manager-google-cas-issuer, mariadb-operator-fips, percona-server-mongodb-operator,...
GHSA-GX3X-VQ4P-MHHV vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, step-issuer, cert-manager-cmctl, opentelemetry-operator, mariadb-operator, percona-server-mongodb-operator, cert-manager-webhook-pdns, aws-privateca-issuer, cert-manager-istio-csr...
CVE-2019-12301
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2...
GHSA-2Q7X-W5Q3-RJXC vulnerabilities
Vulnerabilities for packages: percona-server...
GHSA-Q88M-4HG8-4H3H vulnerabilities
Vulnerabilities for packages: percona-server...