MA
Product
MariaDB
430
CVEs
0
On KEV
9.9
Max CVSS
15
New 30D
Severity mix
Critical 11High 71Medium 161Low 9
Watch
Add MariaDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3312 | 6.7 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2017-3600 | 6.6 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump) Affected: 5.5.0 before 5.5.53; 10.0.0 before 10.0.28; 10.1.0 before 10.1.19 |
| CVE-2026-35549 | 6.5 | Apr 3 | An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2 Affected: before 11.4.10; 11.5.0 before 11.8.6; 12.0.0 before 12.2.2 |
| CVE-2022-47015 | 6.5 | Jan 20 | MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service Affected: 10.3.0 before 10.3.39; 10.4.0 before 10.4.29; 10.5.0 before 10.5.20; 10.6.0 before 10.6.13; 10.8.0 before 10.8.8; 10.9.0 before 10.9.6; +2 more |
| CVE-2020-14765 | 6.5 | Oct 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS) Affected: 10.1.0 before 10.1.48; 10.2.0 before 10.2.35; 10.3.0 before 10.3.26; 10.4.0 before 10.4.16; 10.5.0 before 10.5.7 |
| CVE-2020-2780 | 6.5 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) Affected: 5.5.0 before 5.5.66; 10.1.0 before 10.1.42; 10.2.0 before 10.2.28; 10.3.0 before 10.3.19; 10.4.0 before 10.4.9 |
| CVE-2019-2974 | 6.5 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: 5.5.0 before 5.5.66; 10.1.0 before 10.1.42; 10.2.0 before 10.2.28; 10.3.0 before 10.3.19; 10.4.0 before 10.4.9 |
| CVE-2019-2805 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 5.5.0 before 5.5.65; 10.1.0 before 10.1.41; 10.2.0 before 10.2.26; 10.3.0 before 10.3.17; 10.4.0 before 10.4.7 |
| CVE-2019-2740 | 6.5 | Jul 23 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: XML) Affected: 5.5.0 before 5.5.65; 10.1.0 before 10.1.41; 10.2.0 before 10.2.26; 10.3.0 before 10.3.17; 10.4.0 before 10.4.7 |
| CVE-2019-2455 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2019-2529 | 6.5 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.63; 10.0.0 before 10.0.38; 10.1.0 before 10.1.38 |
| CVE-2018-3251 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11 |
| CVE-2018-3156 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11 |
| CVE-2018-3143 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.0.0 before 10.0.37; 10.1.0 before 10.1.37; 10.2.0 before 10.2.19; 10.3.0 before 10.3.11 |
| CVE-2018-3133 | 6.5 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.30; 10.2.0 before 10.2.12 |
| CVE-2018-3060 | 6.5 | Jul 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.2.0 before 10.2.17; 10.3.0 before 10.3.9 |
| CVE-2018-2819 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2018-2817 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2018-2784 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2018-2782 | 6.5 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2018-2668 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13 |
| CVE-2018-2665 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13 |
| CVE-2018-2640 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13 |
| CVE-2018-2622 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 5.5.0 before 5.5.59; 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13 |
| CVE-2018-2612 | 6.5 | Jan 18 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 10.0.0 before 10.0.34; 10.1.0 before 10.1.31; 10.2.0 before 10.2.13 |
| CVE-2017-10384 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 5.5.0 before 5.5.57; 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8 |
| CVE-2017-10379 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 5.5.0 before 5.5.57; 10.0.0 before 10.0.32; 10.1.0 before 10.1.26; 10.2.0 before 10.2.8 |
| CVE-2017-10378 | 6.5 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.58; 10.0.0 before 10.0.33; 10.1.0 before 10.1.29; 10.2.0 before 10.2.10 |
| CVE-2017-3453 | 6.5 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.55; 10.0.0 before 10.0.31; 10.1.0 before 10.1.23; 10.2.0 before 10.2.6 |
| CVE-2017-3258 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2017-3257 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) Affected: 10.0.0 before 10.0.29; 10.1.0 before 10.1.21; 10.2.0 before 10.2.8 |
| CVE-2017-3244 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2017-3238 | 6.5 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2016-5626 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18 |
| CVE-2016-5624 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18 |
| CVE-2016-5612 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors… Affected: 5.5.0 before 5.5.51; 10.0.0 before 10.0.27 |
| CVE-2016-3492 | 6.5 | Oct 25 | Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors… Affected: 5.5.0 before 5.5.52; 10.0.0 before 10.0.28; 10.1.0 before 10.1.18 |
| CVE-2016-3521 | 6.5 | Jul 21 | Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before… Affected: 5.5.20 before 5.5.50; 10.0.0 before 10.0.26; 10.1.0 before 10.1.15 |
| CVE-2016-0502 | 6.5 | Jan 21 | Unspecified vulnerability in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 5.5.0 before 5.5.32; 10.0.0 before 10.0.4 |
| CVE-2026-107822 | 6.4 | Oct 9 | MariaDB: database privilege escalation via user / role name collision in the acl cache Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 before 13.0.2 |
| CVE-2026-107816 | 6.4 | Oct 9 | MariaDB: `qc_info` plugin can do OOB reads if query contains \0 Affected: 10.6.1 before 10.6.28; 10.11.1 before 10.11.19; 11.4.1 before 11.4.13; 11.8.1 before 11.8.9; 12.3.1 before 12.3.3; 13.0.1 before 13.0.2 |
| CVE-2019-2503 | 6.4 | Jan 16 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling) Affected: 5.5.0 before 5.5.62; 10.0.0 before 10.0.37; 10.1.0 before 10.1.36; 10.2.0 before 10.2.18; 10.3.0 before 10.3.10 |
| CVE-2017-3291 | 6.3 | Jan 27 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 5.5.0 before 5.5.54; 10.0.0 before 10.0.29; 10.1.0 before 10.1.21 |
| CVE-2016-0640 | 6.1 | Apr 21 | Unspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and earlier and MariaDB before 5.5.48, 10.0.x before 10.0.24, and 10.1.x before… Affected: 5.5.20 before 5.5.48; 10.0.0 before 10.0.24; 10.1.0 before 10.1.12 |
| CVE-2021-2389 | 5.9 | Jul 21 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: 10.2.0 before 10.2.40; 10.3.0 before 10.3.31; 10.4.0 before 10.4.21; 10.5.0 before 10.5.12; 10.6.0 before 10.6.4 |
| CVE-2021-2011 | 5.9 | Jan 20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.5.0 before 5.5.61; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2020-2574 | 5.9 | Jan 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 5.5.0 before 5.5.67; 10.1.0 before 10.1.44; 10.2.0 before 10.2.31; 10.3.0 before 10.3.22; 10.4.0 before 10.4.12 |
| CVE-2018-2761 | 5.9 | Apr 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 5.5.0 before 5.5.60; 10.0.0 before 10.0.35; 10.1.0 before 10.1.33; 10.2.0 before 10.2.15 |
| CVE-2015-3152 | 5.9 | May 16 | Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows… Affected: 5.5.0 before 5.5.44; 10.0.0 before 10.0.20 |
| CVE-2016-2047 | 5.9 | Jan 27 | The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and… Affected: 5.5.20 before 5.5.47; 10.0.0 before 10.0.23; 10.1.0 before 10.1.10 |