MA
Product
MariaDB
431
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Severity mix
Critical 11High 72Medium 161Low 9
Watch
Add MariaDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-0374 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related… Affected: 5.5.0 before 5.5.41; 10.0.0 before 10.0.16 |
| CVE-2014-6568 | – | Jan 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server… Affected: 5.5.0 before 5.5.41; 10.0.0 before 10.0.16 |
| CVE-2014-8964 | – | Dec 16 | Heap-based buffer overflow in PCRE 8.36 and earlier allows remote attackers to cause a denial of service (crash) or have other unspecified impact via a crafted regular expression,… Affected: 10.0.0 before 10.0.18 |
| CVE-2014-6564 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB FULLTEXT SEARCH… Affected: 10.0.0 before 10.0.13 |
| CVE-2014-6559 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6555 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6551 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6530 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and… Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6520 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6507 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6505 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to… Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6500 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6496 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6495 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6494 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6491 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6489 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability via vectors related to SERVER:SP Affected: 10.0.0 before 10.0.13 |
| CVE-2014-6484 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to… Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6478 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-6474 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED Affected: 10.0.0 before 10.0.13 |
| CVE-2014-6469 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6464 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 5.5.0 before 5.5.40; 10.0.0 before 10.0.15 |
| CVE-2014-6463 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-4287 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-4274 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors… Affected: 5.5.0 before 5.5.39; 10.0.0 before 10.0.13 |
| CVE-2014-4260 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and… Affected: 5.5.0 before 5.5.38; 10.0.0 before 10.0.12 |
| CVE-2014-4258 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality,… Affected: 5.5.0 before 5.5.38; 10.0.0 before 10.0.12 |
| CVE-2014-4243 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via… Affected: 5.5.0 before 5.5.36; 10.0.0 before 10.0.9 |
| CVE-2014-4207 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR Affected: 5.5.0 before 5.5.38; 10.0.0 before 10.0.12 |
| CVE-2014-2494 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC Affected: 5.5.0 before 5.5.38; 10.0.0 before 10.0.12 |
| CVE-2014-3470 | – | Jun 5 | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used,… Affected: 10.0.0 before 10.0.13 |
| CVE-2014-0221 | – | Jun 5 | The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service… Affected: 10.0.0 before 10.0.13 |
| CVE-2014-0195 | – | Jun 5 | The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS… Affected: 10.0.0 before 10.0.13 |
| CVE-2014-0198 | – | May 6 | The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive… Affected: 10.0.0 before 10.0.13 |
| CVE-2014-2440 | – | Apr 16 | Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and… Affected: 5.5.0 before 5.5.37; 10.0.0 before 10.0.11 |
| CVE-2014-2438 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 5.5.0 before 5.5.36; 10.0.0 before 10.0.9 |
| CVE-2014-2436 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability… Affected: 5.5.0 before 5.5.37; 10.0.0 before 10.0.11 |
| CVE-2014-2432 | – | Apr 16 | Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors… Affected: 5.5.0 before 5.5.36; 10.0.0 before 10.0.9 |
| CVE-2014-2431 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options Affected: 5.5.0 before 5.5.37; 10.0.0 before 10.0.11 |
| CVE-2014-2430 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 5.5.0 before 5.5.37; 10.0.0 before 10.0.11 |
| CVE-2014-2419 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 5.5.0 before 5.5.36; 10.0.0 before 10.0.9 |
| CVE-2014-0384 | – | Apr 16 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via… Affected: 5.5.0 before 5.5.36; 10.0.0 before 10.0.9 |
| CVE-2010-5298 | – | Apr 14 | Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across… Affected: 10.0.0 before 10.0.13 |
| CVE-2014-0001 | – | Jan 31 | Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows remote database servers to cause a denial of service (crash) and possibly execute arbitrary… Affected: through 5.5.34 |
| CVE-2014-0437 | – | Jan 15 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect… Affected: 5.5.0 before 5.5.35; 10.0.0 before 10.0.8 |
| CVE-2014-0420 | – | Jan 15 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via… Affected: 5.5.0 before 5.5.35; 10.0.0 before 10.0.8 |
| CVE-2014-0412 | – | Jan 15 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect… Affected: 5.5.0 before 5.5.35; 10.0.0 before 10.0.8 |
| CVE-2014-0402 | – | Jan 15 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect… Affected: 5.5.0 before 5.5.34; 10.0.0 before 10.0.7 |
| CVE-2014-0401 | – | Jan 15 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect… Affected: 5.5.0 before 5.5.35; 10.0.0 before 10.0.8 |
| CVE-2014-0393 | – | Jan 15 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.71 and earlier, 5.5.33 and earlier, and 5.6.13 and earlier allows remote authenticated users to affect… Affected: 5.5.0 before 5.5.34; 10.0.0 before 10.0.7 |