Browse CVEs

CRITICAL 9.1 CVE-2026-44172 MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, … MariaDB Mitigation only Fix from $2,3002026-06-12 HIGH 7.5 CVE-2025-56404 An issue was discovered in MariaDB MCP 0.1.0 allowing attackers to gain sensitive information via the SSE service as the SSE service lacks user valid… Model Context Protocol No fix yet Fix from $1,9502025-09-10 CRITICAL 9.8 CVE-2023-26785 MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create funct… MariaDB No fix yet Fix from $2,3002024-10-17 MEDIUM 5.7 CVE-2024-27766 An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the lib_mysqludf_sys.so function. NOTE: this is disputed by the Mar… MariaDB No fix yet Fix from $1,6002024-10-17 MEDIUM 5.6 CVE-2023-39593 Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges.… MariaDB No fix yet Fix from $1,6002024-10-17 HIGH 7.5 CVE-2017-16046 `mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. MariaDB Mitigation only Fix from $1,9502018-06-04 MEDIUM 6.5 CVE-2012-5611EPSS 24% Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5… MariaDB No fix yet Fix from $1,6002012-12-03 MEDIUM 6.0 CVE-2012-5613EPSS 32% MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who … MariaDB No fix yet Fix from $1,6002012-12-03 MEDIUM 5.0 CVE-2012-5615EPSS 15% Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different er… MariaDB Mitigation only Fix from $1,6002012-12-03