CVE-2024-47091

CVE-2024-47091 describes a local privilege escalation in the Windows mk_mysql agent plugin used by Checkmk. A local unprivileged user can escalate by creating a Windows service whose name matches 'MySQL' or 'MariaDB' (or by gaining write access to a binary referenced by such a service). This allo...

CVE-2024-47091 Privilege escalation via mk_mysql agent plugin on Windows

Privilege escalation in the mkmysql agent plugin on Windows in Checkmk 2.4.0p29, 2.3.0p47, and 2.2.0 EOL allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' or with write access to a binary referenced by such a service to execute arbitrary cod...

Checkmk 代码问题漏洞

Checkmk is an IT monitoring platform developed by Checkmk Corporation. Versions of Checkmk prior to 2.4.0p29, 2.3.0p47, and 2.2.0 contained code vulnerabilities. These vulnerabilities stemmed from permission escalation issues within the mkmysql proxy plugin on Windows, which could allow...

PT-2026-40585

Privilege escalation in the mk mysql agent plugin on Windows in Checkmk 2.4.0p29, 2.3.0p47, and 2.2.0 EOL allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' or with write access to a binary referenced by such a service to execute arbitrary co...

Exploit for Heap-based Buffer Overflow in Mariadb

CVE-2026-32710 Heap buffer overflow in MariaDB JSONSCHEMA...

Exploit for Insufficient Logging in Mariadb

CVE-2026-3494 - MariaDB serveraudit Logging Verification PoC...

SUSE SLES16 Security Update : mariadb (SUSE-SU-2026:21407-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:21407-1 advisory. This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can...

openSUSE 16 Security Update : mariadb (openSUSE-SU-2026:20629-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20629-1 advisory. This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can lead to cras...

Security update for mariadb (important)

openSUSE security update: security update for mariadb ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20629-1 Rating: important References: bsc1260081 Cross-References: CVE-2026-32710 CVSS scores: CVE-2026-32710 SUSE : 8.5...

OPENSUSE-SU-2026:20629-1 Security update for mariadb

This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can lead to crash or remote code execution bsc1260081...

JLSEC-2026-211

libmariadb/mariadblib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadblib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle...

SUSE-SU-2026:21407-1 Security update for mariadb

This update for mariadb fixes the following issue: - Update to v11.8.6 - CVE-2026-32710: heap-based buffer overflow via JSONSCHEMAVALID can lead to crash or remote code execution bsc1260081...

Improper Neutralization of Special Elements in Data Query Logic

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the FilterExpressionConverter implementations. An attacker can alter underlying vector store queries by supplying crafted filter expressions, as keys and values are not...

AZL-9801 CVE-2022-31622 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9800 CVE-2022-31621 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9803 CVE-2022-31624 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9802 CVE-2022-31623 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9408 CVE-2022-27444 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9410 CVE-2022-27446 for package mariadb is not applicable

This CVE either no longer is or was never applicable...

AZL-9415 CVE-2022-27452 for package mariadb is not applicable

This CVE either no longer is or was never applicable...