← Back

Mariadb

mariadb

Vendor: Mariadb • 406 CVEs

CVEs (406)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Canonical
MariadbOracle+1 more
6Linux Enterprise Desktop
Linux Enterprise ServerLinux Enterprise Software Development Kit+3 more
Apr 29, 2026
Dec 3, 2012
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and...Show more
Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands.Show less
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Dec 3, 2012
N/A· v4
N/A· v3
6.5 MEDIUM· v2
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x b...Show more
Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command.Show less
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replicati...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Replication.Show less
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.Show less
5Canonical
DebianMariadb+2 more
9Debian Linux
Enterprise LinuxEnterprise Linux Desktop+6 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server.
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB Plugin.
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Full Text Search.Show less
5Canonical
DebianMariadb+2 more
9Debian Linux
Enterprise LinuxEnterprise Linux Desktop+6 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.63 and earlier, and 5.5.25 and earlier, allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
6Canonical
DebianF5+3 more
21Big Ip Access Policy Manager
Big Ip Advanced Firewall ManagerBig Ip Analytics+18 more
Apr 29, 2026
Oct 17, 2012
N/A· v4
N/A· v3
9.0 HIGH· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vec...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Schema.Show less
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 16, 2012
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 16, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors relat...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol.Show less
5Canonical
DebianMariadb+2 more
8Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+5 more
Apr 29, 2026
Oct 16, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer...Show more
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.Show less
3Debian
MariadbOracle
3Debian Linux
MariadbMysql
Apr 29, 2026
Aug 17, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has n...Show more
Unspecified vulnerability in MySQL 5.5.x before 5.5.23 has unknown impact and attack vectors related to a "Security Fix", aka Bug #59533. NOTE: this might be a duplicate of CVE-2012-1689, but as of 20120816, Oracle has not commented on this possibility.Show less
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
3Mariadb
OracleRedhat
6Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux Server+3 more
Apr 29, 2026
Jul 17, 2012
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
2Mariadb
Oracle
2Mariadb
Mysql
Apr 29, 2026
Jun 26, 2012
N/A· v4
N/A· v3
5.1 MEDIUM· v2
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain...Show more
sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remote attackers to bypass authentication by repeatedly authenticating with the same incorrect password, which eventually causes a token comparison to succeed due to an improperly-checked return value.Show less