搜索结果
关于「mariadb」的漏洞数据
| AVD编号 | 漏洞名称 | 漏洞类型 | 披露时间 | 漏洞状态 |
|---|---|---|---|---|
| AVD-2026-97380 | MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges(CVE-2026-97380) | 2026-10-17 | ||
| AVD-2026-92262 | MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.(CVE-2026-92262) | 2026-10-17 | ||
| AVD-2026-86047 | MariaDB: Insufficient quoting in mariadb-dump and SHOW commands(CVE-2026-86047) | 2026-10-17 | ||
| AVD-2026-85985 | MariaDB: Unauthorized file access via CONNECT engine UDFs(CVE-2026-85985) | 2026-10-17 | ||
| AVD-2026-85748 | MariaDB: Use-after-free with a large number of SYS_REFCURSOR's(CVE-2026-85748) | 2026-10-17 | ||
| AVD-2026-85746 | MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections(CVE-2026-85746) | 2026-10-17 | ||
| AVD-2026-85745 | MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.(CVE-2026-85745) | 2026-10-17 | ||
| AVD-2026-107822 | MariaDB ACL缓存权限混淆漏洞(CVE-2026-107822) | 2026-10-10 | ||
| AVD-2026-107823 | MariaDB视图解析权限提升漏洞(CVE-2026-107823) | 2026-10-10 | ||
| AVD-2026-107818 | MariaDB 服务环境注入漏洞(CVE-2026-107818) | 2026-10-10 | ||
| AVD-2026-107816 | MariaDB qc_info 越界读取漏洞(CVE-2026-107816) | 2026-10-10 | ||
| AVD-2026-107817 | MariaDB mysql_json插件越界读取漏洞(CVE-2026-107817) | 2026-10-10 | ||
| AVD-2026-107821 | MariaDB FRM解析越界访问漏洞(CVE-2026-107821) | 2026-10-10 | ||
| AVD-2026-107815 | MariaDB CONNECT 栈越界写漏洞(CVE-2026-107815) | 2026-10-10 | ||
| AVD-2026-107814 | MariaDB RPM HOME目录提权漏洞(CVE-2026-107814) | 2026-10-10 | ||
| AVD-2026-48163 | MariaDB：捐赠方的 wsrep SST 不安全参数处理 (rsync) (CVE-2026-48163) | 2026-06-13 | ||
| AVD-2026-48165 | MariaDB：在连接端不安全地使用“wsrep_sst_receive_address”值（CVE-2026-48165） | 2026-06-13 | ||
| AVD-2026-44173 | MariaDB：未检查 FROM 子句中子查询的 FILE 权限 (CVE-2026-44173) | 2026-06-13 | ||
| AVD-2026-44172 | MariaDB：mysql_real_escape_string() 错误地处理了 big5 (CVE-2026-44172) | 2026-06-13 | ||
| AVD-2026-44169 | MariaDB：基于角色的例程级权限检查中的授权绕过暴露了存储的例程定义 (CVE-2026-44169) | 2026-06-13 | ||
| AVD-2026-44170 | MariaDB：通过未经净化的 URL 在 Windows 上的 CONNECT REST Xcurl 中进行参数注入 (CVE-2026-44170) | 2026-06-13 | ||
| AVD-2026-44168 | MariaDB：捐赠方的 wsrep SST 参数处理不安全 (CVE-2026-44168) | 2026-06-13 | ||
| AVD-2026-44171 | MariaDB：mbstream 中的路径遍历 (CVE-2026-44171) | 2026-06-13 | ||
| AVD-2026-49261 | MariaDB 服务器在“wsrep_notify_cmd”中进行不安全的参数处理 (CVE-2026-49261) | 2026-06-12 | ||
| AVD-2026-34303 | MySQL Server Optimizer组件DOS漏洞(CVE-2026-34303) | 2026-04-22 | ||
| AVD-2026-35549 | MariaDB 认证插件堆栈溢出漏洞(CVE-2026-35549) | 2026-04-03 | ||
| AVD-2026-32710 | MariaDB 中基于堆的缓冲区溢出 (CVE-2026-32710) | 2026-03-21 | ||
| AVD-2026-3494 | MariaDB <= 11.8.5 审计日志绕过漏洞(CVE-2026-3494) | 2026-03-04 | ||
| AVD-2025-13699 | MariaDB mariadb-dump 实用程序目录遍历远程代码执行漏洞 (CVE-2025-13699) | 2025-12-24 | ||
| AVD-2025-30722 | Oracle MySQL 安全漏洞(CVE-2025-30722) | 2025-04-16 |