İçeriğe atla
Noroxi

MariaDB kayıtları

mariadb üreticisine ait 419 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
5 · %1,2
Pre-auth RCE
8
Düzeltme kaydı olan
%92,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

419 kayıt
  • CVE-2016-6662
    59Planlayın

    Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    oracle · mysql20 Eyl 2016

  • CVE-2014-0224
    58Planlayın

    OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, whi

    YüksekCVSS 7,4SilahlaştırılmışEPSS %95

    openssl · openssl5 Haz 2014

  • CVE-2014-0195
    57Planlayın

    The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properl

    OrtaCVSS 6,8SilahlaştırılmışEPSS %100

    openssl · openssl5 Haz 2014

  • CVE-2022-0778
    52Planlayın

    Infinite loop in BN_mod_sqrt() reachable when parsing certificates

    YüksekCVSS 7,5Kavram kanıtıEPSS %73

    openssl · openssl15 Mar 2022

  • CVE-2009-4484
    51Planlayın

    Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysq

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    oracle · mysql30 Ara 2009

  • CVE-2012-2122
    49Planlayın

    sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x befo

    OrtaCVSS 5,1SilahlaştırılmışEPSS %97

    oracle · mysql26 Haz 2012

  • CVE-2018-25032
    46Planlayın

    zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

    YüksekCVSS 7,5Kavram kanıtıEPSS %52

    zlib · zlib25 Mar 2022

  • CVE-2014-0221
    43Planlayın

    The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote a

    OrtaCVSS 4,3Kavram kanıtıEPSS %88

    openssl · openssl5 Haz 2014

  • CVE-2014-3470
    43Planlayın

    The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an ano

    OrtaCVSS 4,3İstismar yokEPSS %86

    openssl · openssl5 Haz 2014

  • CVE-2016-9843
    41Planlayın

    The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big

    KritikCVSS 9,8İstismar yokEPSS %6

    zlib · zlib23 May 2017

  • CVE-2012-2750
    41Planlayın

    Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533.

    KritikCVSS 10,0İstismar yokEPSS %4

    oracle · mysql16 Ağu 2012

  • CVE-2021-27928
    40Planlayın

    A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.

    YüksekCVSS 7,2Kavram kanıtıEPSS %38

    mariadb · mariadb18 Mar 2021

  • CVE-2023-26785
    40Planlayın

    MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "cre

    KritikCVSS 9,8İstismar yokEPSS %2

    mariadb · mariadb17 Eki 2024

  • CVE-2026-49261
    40Planlayın

    MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

    KritikCVSS 9,8İstismar yokEPSS %2

    mariadb · mariadb11 Haz 2026

  • CVE-2026-32710
    39İzleyin

    Heap-based Buffer Overflow in MariaDB

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    mariadb · mariadb20 Mar 2026

  • CVE-2020-15180
    38İzleyin

    A flaw was found in the mysql-wsrep component of mariadb.

    KritikCVSS 9,0İstismar yokEPSS %6

    mariadb · mariadb27 May 2021

  • CVE-2012-3163
    38İzleyin

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authentica

    KritikCVSS 9,0İstismar yokEPSS %5

    oracle · mysql16 Eki 2012

  • CVE-2017-15365
    36İzleyin

    sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x bef

    YüksekCVSS 8,8İstismar yokEPSS %3

    mariadb · mariadb25 Oca 2018

  • CVE-2020-13249
    36İzleyin

    libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server.

    YüksekCVSS 8,8İstismar yokEPSS %2

    mariadb · connector\/c20 May 2020

  • CVE-2012-5613
    33İzleyin

    MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to u

    OrtaCVSS 6,0SilahlaştırılmışEPSS %32

    mariadb · mariadb3 Ara 2012

  • CVE-2012-5611
    33İzleyin

    Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions

    OrtaCVSS 6,5Kavram kanıtıEPSS %24

    oracle · mysql3 Ara 2012

  • CVE-2015-0411
    33İzleyin

    Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiali

    YüksekCVSS 7,5İstismar yokEPSS %10

    oracle · communications policy management21 Oca 2015

  • CVE-2012-5612
    32İzleyin

    Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows

    OrtaCVSS 6,5Kavram kanıtıEPSS %21

    mariadb · mariadb3 Ara 2012

  • CVE-2014-0001
    32İzleyin

    Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (cr

    YüksekCVSS 7,5İstismar yokEPSS %6

    mariadb · mariadb31 Oca 2014

  • CVE-2014-6491
    32İzleyin

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality

    YüksekCVSS 7,5İstismar yokEPSS %6

    oracle · mysql15 Eki 2014