PE
Vendor
Percona
24
CVEs
0
On KEV
0
New 30D
Products
PS9.8
Percona Server
Percona
7 CVEs0 on KEV0 new
XT7.8
Xtrabackup
Percona
6 CVEs0 on KEV0 new
XC9.0
Xtradb Cluster
Percona
5 CVEs0 on KEV0 new
MA9.9
Monitoring And Management
Percona
3 CVEs0 on KEV0 new
TO8.1
Toolkit
Percona
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-25212 | MA Monitoring And Management Percona | 9.9 | Apr 2 | An issue was discovered in Percona PMM before 3.7 |
| CVE-2024-7701 | TO Toolkit Percona | 7.5 | Dec 15 | Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0 |
| CVE-2022-25834 | XT Xtrabackup Percona | 7.8 | Jun 7 | In Percona XtraBackup (PXB) through 2.2.24 and 3.x through 8.0.27-19, a crafted filename on the local file system could trigger unexpected command shell execution of arbitrary… |
| CVE-2023-34409 | MA Monitoring And Management Percona | 9.8 | Jun 6 | In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does not properly formalize and sanitize URL paths to reject path… |
| CVE-2022-34968 | PS Percona Server Percona | 7.5 | Aug 3 | An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL query |
| CVE-2022-26944 | XT Xtrabackup Percona | 6.5 | Jun 2 | Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output |
| CVE-2020-15180 | XC Xtradb Cluster Percona | 9.0 | May 27 | A flaw was found in the mysql-wsrep component of mariadb |
| CVE-2021-27928 | PS Percona Server Percona | 7.2 | Mar 19 | A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03;… |
| CVE-2020-26542 | PS Percona Server Percona | 9.8 | Nov 9 | An issue was discovered in the MongoDB Simple LDAP plugin through 2020-10-02 for Percona Server when using the SimpleLDAP authentication in conjunction with Microsoft’s Active… |
| CVE-2020-10997 | XT Xtrabackup Percona | 6.5 | Apr 27 | Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output |
| CVE-2020-10996 | XC Xtradb Cluster Percona | 8.1 | Apr 27 | An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2 |
| CVE-2020-7920 | MA Monitoring And Management Percona | 7.5 | Feb 6 | pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service |
| CVE-2019-12301 | PS Percona Server Percona | 9.8 | May 23 | The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade |
| CVE-2017-15365 | XC Xtradb Cluster Percona | 8.8 | Jan 25 | sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster before 5.6.37-26.21-3 and 5.7.x before 5.7.19-29.22-3 allows remote… |
| CVE-2015-1027 | TO Toolkit Percona | 5.9 | Sep 29 | The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which… |
| CVE-2014-2029 | TO Toolkit Percona | 8.1 | Sep 29 | The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive information or execute arbitrary code by… |
| CVE-2016-6225 | XT Xtrabackup Percona | 5.9 | Mar 23 | xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent… |
| CVE-2016-6664 | PS Percona Server Percona | 7.0 | Dec 13 | mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before… |
| CVE-2016-6663 | PS Percona Server Percona | 7.0 | Dec 13 | Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before… |
| CVE-2016-6662 | PS Percona Server Percona | 9.8 | Sep 20 | Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5.51, 10.0.x before 10.0.27, and 10.1.x before 10.1.17; and Percona Server before… |
| CVE-2013-6394 | XT Xtrabackup Percona | – | Dec 13 | Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and… |