MariaDB
- Products in analyzed data
- 2
- Catalog vulnerabilities
- 423
Severity across 20 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 20 analyzed records
A short verification protects source data and prevents automated AI requests.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-48165MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityCritical |
CVE-2026-48163MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityCritical |
CVE-2026-44173MariaDB: FILE privilege was not checked for subqueries in the FROM clause | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityHigh |
CVE-2026-44172MariaDB: mysql_real_escape_string() incorrectly handled big5 | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityMedium |
CVE-2026-44171MariaDB: path traversal in mbstream | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityMedium |
CVE-2026-44169MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityMedium |
CVE-2026-44168MariaDB: wsrep SST unsafe parameter handling on the donor side | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityHigh |
CVE-2026-44170MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/12/2026 | SeverityMedium |
CVE-2026-49261MariaDB server has unsafe parameter handling in `wsrep_notify_cmd` | Exploitation statusNot known exploited | FixYes | Affected productserver | Published06/11/2026 | SeverityCritical |
CVE-2026-35549CVE-2026-35549 | Exploitation statusNot known exploited | FixYes | Affected productMariaDB | Published04/03/2026 | SeverityMedium |
CVE-2026-32710Heap-based Buffer Overflow in MariaDB | Exploitation statusNot known exploited | FixYes | Affected productserver | Published03/20/2026 | SeverityHigh |
CVE-2026-3494MariaDB Server Audit Plugin Comment Handling Bypass | Exploitation statusNot known exploited | FixYes | Affected productNot confirmed | Published03/03/2026 | SeverityMedium |
CVE-2025-13699MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productMariaDB | Published12/23/2025 | SeverityHigh |
CVE-2025-56404CVE-2025-56404 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published09/10/2025 | SeverityHigh |
CVE-2023-52970CVE-2023-52970 | Exploitation statusNot known exploited | FixYes | Affected productMariaDB | Published03/08/2025 | SeverityMedium |
CVE-2023-52968CVE-2023-52968 | Exploitation statusNot known exploited | FixYes | Affected productMariaDB | Published03/08/2025 | SeverityMedium |
CVE-2023-52969CVE-2023-52969 | Exploitation statusNot known exploited | FixYes | Affected productMariaDB | Published03/08/2025 | SeverityMedium |
CVE-2023-52971CVE-2023-52971 | Exploitation statusNot known exploited | FixYes | Affected productMariaDB | Published03/08/2025 | SeverityMedium |
CVE-2023-26785CVE-2023-26785 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/17/2024 | SeverityCritical |
CVE-2024-27766CVE-2024-27766 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/17/2024 | SeverityMedium |
CVE-2023-39593CVE-2023-39593 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published10/17/2024 | SeverityMedium |
CVE-2023-22084CVE-2023-22084 | Exploitation statusNot confirmed | FixNot confirmed | Affected productMySQL Server | Published10/17/2023 | SeverityMedium |
CVE-2023-5157Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6 | Exploitation statusNot known exploited | FixNot confirmed | Affected productRed Hat Enterprise Linux 8 | Published09/26/2023 | SeverityHigh |
CVE-2023-40354CVE-2023-40354 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published08/14/2023 | SeverityUnknown |
CVE-2022-47015CVE-2022-47015 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published01/20/2023 | SeverityMedium |
CVE-2022-21595CVE-2022-21595 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published10/18/2022 | SeverityMedium |
CVE-2022-38791CVE-2022-38791 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published08/27/2022 | SeverityUnknown |
CVE-2022-32088CVE-2022-32088 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32087CVE-2022-32087 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32086CVE-2022-32086 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32085CVE-2022-32085 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32083CVE-2022-32083 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32091CVE-2022-32091 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32084CVE-2022-32084 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32081CVE-2022-32081 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32089CVE-2022-32089 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-32082CVE-2022-32082 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/01/2022 | SeverityUnknown |
CVE-2022-31624CVE-2022-31624 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/25/2022 | SeverityUnknown |
CVE-2022-31621CVE-2022-31621 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/25/2022 | SeverityMedium |
CVE-2022-31622CVE-2022-31622 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published05/25/2022 | SeverityUnknown |
CVE-2022-31623CVE-2022-31623 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published05/25/2022 | SeverityUnknown |
CVE-2022-21451CVE-2022-21451 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/19/2022 | SeverityMedium |
CVE-2022-21427CVE-2022-21427 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/19/2022 | SeverityMedium |
CVE-2022-27457CVE-2022-27457 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27456CVE-2022-27456 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27455CVE-2022-27455 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27451CVE-2022-27451 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27452CVE-2022-27452 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27449CVE-2022-27449 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27448CVE-2022-27448 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27447CVE-2022-27447 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27446CVE-2022-27446 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27445CVE-2022-27445 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27444CVE-2022-27444 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/14/2022 | SeverityUnknown |
CVE-2022-27387CVE-2022-27387 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27386CVE-2022-27386 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27385CVE-2022-27385 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27384CVE-2022-27384 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27382CVE-2022-27382 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27383CVE-2022-27383 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27381CVE-2022-27381 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27380CVE-2022-27380 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27378CVE-2022-27378 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27379CVE-2022-27379 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27377CVE-2022-27377 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2022-27376CVE-2022-27376 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published04/12/2022 | SeverityUnknown |
CVE-2018-25032CVE-2018-25032 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published03/25/2022 | SeverityHigh |
CVE-2022-0778Infinite loop in BN_mod_sqrt() reachable when parsing certificates | Exploitation statusNot known exploited | FixYes | Affected productOpenSSL | Published03/15/2022 | SeverityHigh |
CVE-2022-24052CVE-2022-24052 | Exploitation statusNot confirmed | FixNot confirmed | Affected productMariaDB | Published02/18/2022 | SeverityHigh |
CVE-2022-24051CVE-2022-24051 | Exploitation statusNot confirmed | FixNot confirmed | Affected productMariaDB | Published02/18/2022 | SeverityHigh |
CVE-2022-24050CVE-2022-24050 | Exploitation statusNot confirmed | FixNot confirmed | Affected productMariaDB | Published02/18/2022 | SeverityHigh |
CVE-2022-24048CVE-2022-24048 | Exploitation statusNot confirmed | FixNot confirmed | Affected productMariaDB | Published02/18/2022 | SeverityHigh |
CVE-2021-46661CVE-2021-46661 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46662CVE-2021-46662 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46663CVE-2021-46663 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46664CVE-2021-46664 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46665CVE-2021-46665 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46666CVE-2021-46666 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46667CVE-2021-46667 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46668CVE-2021-46668 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46669CVE-2021-46669 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/01/2022 | SeverityUnknown |
CVE-2021-46657CVE-2021-46657 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/29/2022 | SeverityUnknown |
CVE-2021-46658CVE-2021-46658 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/29/2022 | SeverityUnknown |
CVE-2021-46659CVE-2021-46659 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published01/29/2022 | SeverityUnknown |
CVE-2021-35604CVE-2021-35604 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published10/20/2021 | SeverityMedium |
CVE-2021-2389CVE-2021-2389 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published07/20/2021 | SeverityMedium |
CVE-2021-2372CVE-2021-2372 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published07/20/2021 | SeverityMedium |
CVE-2020-15180CVE-2020-15180 | Exploitation statusNot confirmed | FixNot confirmed | Affected productmariadb | Published05/27/2021 | SeverityUnknown |
CVE-2021-2194CVE-2021-2194 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/22/2021 | SeverityMedium |
CVE-2021-2180CVE-2021-2180 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/22/2021 | SeverityMedium |
CVE-2021-2174CVE-2021-2174 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/22/2021 | SeverityMedium |
CVE-2021-2166CVE-2021-2166 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/22/2021 | SeverityMedium |
CVE-2021-2154CVE-2021-2154 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/22/2021 | SeverityMedium |
CVE-2021-2144CVE-2021-2144 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published04/22/2021 | SeverityHigh |
CVE-2021-27928CVE-2021-27928 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published03/19/2021 | SeverityUnknown |
CVE-2021-2032CVE-2021-2032 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published01/20/2021 | SeverityMedium |
CVE-2021-2022CVE-2021-2022 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published01/20/2021 | SeverityMedium |
CVE-2021-2011CVE-2021-2011 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published01/20/2021 | SeverityMedium |
CVE-2021-2007CVE-2021-2007 | Exploitation statusNot known exploited | FixNot confirmed | Affected productMySQL Server | Published01/20/2021 | SeverityLow |
CVE-2020-28912CVE-2020-28912 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published12/24/2020 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan