MariaDB server.

MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

• MariaDB server
• Path traversal

MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

• MariaDB server
• SQL injection

MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

• MariaDB server
• CWE-126

MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

• MariaDB server
• Memory corruption

MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

• MariaDB server
• Memory corruption

MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

• MariaDB server
• CWE-706

MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

• MariaDB server
• Broken access control
• CWE-620

MariaDB: Unauthorized file access via CONNECT engine UDFs

• MariaDB server
• Broken access control

MariaDB: privilege escalation via incorrect view frm parsing

• MariaDB server
• CWE-116
• CWE-144

MariaDB: database privilege escalation via user / role name collision in the acl cache

• MariaDB server
• Broken access control
• CWE-706

MariaDB: insufficient validation of binary frm data when opening a table

• MariaDB server
• CWE-1285

MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

• MariaDB server
• Weak cryptography or TLS

MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

• MariaDB server
• CWE-15

MariaDB: mysql_json plugin OOB reads

• MariaDB server
• Memory corruption

MariaDB: `qc_info` plugin can do OOB reads if query contains \0

• MariaDB server
• Memory corruption

MariaDB: one byte OOB write in DOS tables of the CONNECT engine

• MariaDB server
• Memory corruption

MariaDB: Insecure $HOME in MariaDB rpm packages

• MariaDB server
• Broken access control

MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side

• MariaDB server
• Command injection

MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)

• MariaDB server
• Command injection

MariaDB: FILE privilege was not checked for subqueries in the FROM clause

• MariaDB server
• Privilege escalation
• Broken access control

MariaDB: path traversal in mbstream

• MariaDB server
• Path traversal

MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

• MariaDB server
• Broken access control

MariaDB: wsrep SST unsafe parameter handling on the donor side

• MariaDB server
• Command injection

MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

• MariaDB server
• Command injection

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

• MariaDB server
• Command injection

Heap-based Buffer Overflow in MariaDB

• MariaDB server
• Memory corruption