agentprime: mariadb-serverEvery new CVE for mariadb-server.https://agentprime.io/CVE-2026-102523: MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITIONhttps://agentprime.io/advisories/CVE-2026-102523/https://agentprime.io/advisories/CVE-2026-102523/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 15:31:27 GMTCVECVE-2026-86047: MariaDB: Insufficient quoting in mariadb-dump and SHOW commandshttps://agentprime.io/advisories/CVE-2026-86047/https://agentprime.io/advisories/CVE-2026-86047/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:37:04 GMTCVECVE-2026-85745: MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.https://agentprime.io/advisories/CVE-2026-85745/https://agentprime.io/advisories/CVE-2026-85745/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:30:30 GMTCVECVE-2026-85748: MariaDB: Use-after-free with a large number of SYS_REFCURSOR'shttps://agentprime.io/advisories/CVE-2026-85748/https://agentprime.io/advisories/CVE-2026-85748/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:28:55 GMTCVEcriticalCVE-2026-85746: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollectionshttps://agentprime.io/advisories/CVE-2026-85746/https://agentprime.io/advisories/CVE-2026-85746/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:27:36 GMTCVEcriticalCVE-2026-92262: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.https://agentprime.io/advisories/CVE-2026-92262/https://agentprime.io/advisories/CVE-2026-92262/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:25:46 GMTCVEcriticalCVE-2026-97380: MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privilegeshttps://agentprime.io/advisories/CVE-2026-97380/https://agentprime.io/advisories/CVE-2026-97380/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:23:07 GMTCVECVE-2026-85985: MariaDB: Unauthorized file access via CONNECT engine UDFshttps://agentprime.io/advisories/CVE-2026-85985/https://agentprime.io/advisories/CVE-2026-85985/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Oct 2026 16:21:14 GMTCVECVE-2026-107823: MariaDB: privilege escalation via incorrect view frm parsinghttps://agentprime.io/advisories/CVE-2026-107823/https://agentprime.io/advisories/CVE-2026-107823/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:30:36 GMTCVECVE-2026-107822: MariaDB: database privilege escalation via user / role name collision in the acl cachehttps://agentprime.io/advisories/CVE-2026-107822/https://agentprime.io/advisories/CVE-2026-107822/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:28:47 GMTCVECVE-2026-107821: MariaDB: insufficient validation of binary frm data when opening a tablehttps://agentprime.io/advisories/CVE-2026-107821/https://agentprime.io/advisories/CVE-2026-107821/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:27:16 GMTCVECVE-2026-107819: MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failurehttps://agentprime.io/advisories/CVE-2026-107819/https://agentprime.io/advisories/CVE-2026-107819/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:25:45 GMTCVECVE-2026-107818: MariaDB: environment injection via wsrep bootstrap in the mariadb.service filehttps://agentprime.io/advisories/CVE-2026-107818/https://agentprime.io/advisories/CVE-2026-107818/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:23:58 GMTCVECVE-2026-107817: MariaDB: mysql_json plugin OOB readshttps://agentprime.io/advisories/CVE-2026-107817/https://agentprime.io/advisories/CVE-2026-107817/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:22:19 GMTCVECVE-2026-107816: MariaDB: `qc_info` plugin can do OOB reads if query contains \0https://agentprime.io/advisories/CVE-2026-107816/https://agentprime.io/advisories/CVE-2026-107816/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 17:19:00 GMTCVECVE-2026-107815: MariaDB: one byte OOB write in DOS tables of the CONNECT enginehttps://agentprime.io/advisories/CVE-2026-107815/https://agentprime.io/advisories/CVE-2026-107815/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 16:05:49 GMTCVECVE-2026-107814: MariaDB: Insecure $HOME in MariaDB rpm packageshttps://agentprime.io/advisories/CVE-2026-107814/https://agentprime.io/advisories/CVE-2026-107814/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 09 Oct 2026 16:02:25 GMTCVECVE-2026-48165: MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner sidehttps://agentprime.io/advisories/CVE-2026-48165/https://agentprime.io/advisories/CVE-2026-48165/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:35:16 GMTCVECVE-2026-48163: MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)https://agentprime.io/advisories/CVE-2026-48163/https://agentprime.io/advisories/CVE-2026-48163/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:34:57 GMTCVECVE-2026-44173: MariaDB: FILE privilege was not checked for subqueries in the FROM clausehttps://agentprime.io/advisories/CVE-2026-44173/https://agentprime.io/advisories/CVE-2026-44173/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:34:30 GMTCVECVE-2026-44171: MariaDB: path traversal in mbstreamhttps://agentprime.io/advisories/CVE-2026-44171/https://agentprime.io/advisories/CVE-2026-44171/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:33:27 GMTCVECVE-2026-44169: MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitionshttps://agentprime.io/advisories/CVE-2026-44169/https://agentprime.io/advisories/CVE-2026-44169/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:31:53 GMTCVECVE-2026-44168: MariaDB: wsrep SST unsafe parameter handling on the donor sidehttps://agentprime.io/advisories/CVE-2026-44168/https://agentprime.io/advisories/CVE-2026-44168/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:31:26 GMTCVECVE-2026-44170: MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URLhttps://agentprime.io/advisories/CVE-2026-44170/https://agentprime.io/advisories/CVE-2026-44170/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Jun 2026 17:30:15 GMTCVECVE-2026-49261: MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`https://agentprime.io/advisories/CVE-2026-49261/https://agentprime.io/advisories/CVE-2026-49261/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 17:13:20 GMTCVEcriticalCVE-2026-32710: Heap-based Buffer Overflow in MariaDBhttps://agentprime.io/advisories/CVE-2026-32710/https://agentprime.io/advisories/CVE-2026-32710/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Mar 2026 18:31:48 GMTCVE