CVE-2021-27928-POC

CVE-2021-27928 POC 설명 MariaDB 10.210.2.37 이전, 10.310.3.28 이전, 10.410.4.18 이전, 10.510.5.9 이전, 2021-03-03 기준 Percona Server, 그리고 2021-03-03 기준 MySQL용 wsrep 패치에서 원격 코드 실행 문제가 발견되었습니다. 신뢰할 수 없는 검색 경로로 인해 eval 주입이 발생하며, 데이터베이스 SUPER 사용자는 wsrepprovider와 wsrepnotifycmd를 수정한 후 OS 명령을 실행할 수 있습니다. 참고: 이 문제...

CVE-2021-27928

Информация root@kitploit: Exploit Title: Выполнение команд ОС через 'wsrepprovider' в MariaDB 10.2 / MySQL Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 до 10.2.37 10.3 до 10.3.28 10.4 до 10.4.18 10.5 до 10.5.9 Percona Server до 2021-03-03; и патч wsrep до 2021-03-03 для...

GO-2026-4399 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, mariadb-operator, step-issuer, cert-manager-cmctl, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, helm, grafana-mimir, docker-cli-buildx, kuberay-operator, snyk-cli, vertical-pod-autoscaler, containerd, redpanda, gitlab-runner, govulncheck, cert-manager-webhook-pdns, container-object-storage-interface, crossplane-provider-family-azure, flux,...

GO-2026-4946 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver, helm, redpanda, container-object-storage-interface, litestream, nri-prometheus, kots, juicefs-csi-driver, smarter-device-manager, k8ssandra-client, influx, neuvector-dbgen, docker-credential-acr-env, maru, nri-mysql, spire-server, sonobuoy,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: helm, kuberay-operator, swagger, vertical-pod-autoscaler, cloud-provider-vsphere, kubernetes-dashboard, kubernetes-csi-external-attacher, hydra, s5cmd, gitlab-runner, govulncheck, cert-manager-cmctl, container-object-storage-interface, aws-privateca-issuer, git-sync,...

CLEANSTART-2026-SP46945 Security fixes in percona-server-mongodb-operator 1.23.0-r0

Package percona-server-mongodb-operator version 1.23.0-r0 fixes 22 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-CN16573 Security fixes in percona-server-mongodb-operator 1.22.0-r1

Package percona-server-mongodb-operator version 1.22.0-r1 fixes 32 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

CVE-2026-61828 nixos/mysql : `services.mysql` is configured with insecure authentication by default when used with `mysql` or `percona-server`

Nixpkgs is a collection of software packages that can be installed with the Nix package manager. Prior to the 25.11 and 26.05 channel fixes, the NixOS module for MySQL services.mysql initializes the MySQL database in a way that allows local users, such as unprivileged web or CGI processes on the...

CLEANSTART-2026-BE68531 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1

Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KJ85611 Security fixes for CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32952, CVE-2026-33814, CVE-2026-35469, CVE-2026-39821, CVE-2026-39824, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42502, CVE-2026-42506, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 1.22.0-r1

Multiple security vulnerabilities affect the percona-server-mongodb-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-openshift-routes-fips, cert-manager-csi-driver-fips, cert-manager-webhook-pdns, cert-manager-istio-csr-fips, cert-manager-webhook-pdns-fips, percona-server-mongodb-operator, cert-manager-google-cas-issuer-fips, cert-manager-csi-driver,...

GHSA-GX3X-VQ4P-MHHV vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, mariadb-operator, step-issuer, cert-manager-cmctl, cert-manager-csi-driver, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, opentelemetry-operator...

CVE-2019-12301

The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2...

GHSA-Q88M-4HG8-4H3H vulnerabilities

Vulnerabilities for packages: percona-server...

GHSA-2Q7X-W5Q3-RJXC vulnerabilities

Vulnerabilities for packages: percona-server...

CVE-2020-26542 vulnerabilities

Vulnerabilities for packages: percona-server...

CVE-2021-27928 vulnerabilities

Vulnerabilities for packages: percona-server...

GHSA-Q88M-4HG8-4H3H vulnerabilities

Vulnerabilities for packages: percona-server...

GHSA-2Q7X-W5Q3-RJXC vulnerabilities

Vulnerabilities for packages: percona-server...