Mariadb

Mariadb

407 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2020-2922

  • EPSS 0.33%
  • Veröffentlicht 15.04.2020 14:15:35
  • Zuletzt bearbeitet 21.11.2024 05:26:38

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with ne...

4.9

CVE-2020-2814

  • EPSS 0.12%
  • Veröffentlicht 15.04.2020 14:15:29
  • Zuletzt bearbeitet 21.11.2024 05:26:20

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.47 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with net...

4.9

CVE-2020-2812

  • EPSS 0.11%
  • Veröffentlicht 15.04.2020 14:15:28
  • Zuletzt bearbeitet 21.11.2024 05:26:20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged...

6.5

CVE-2020-2780

  • EPSS 0.2%
  • Veröffentlicht 15.04.2020 14:15:26
  • Zuletzt bearbeitet 21.11.2024 05:26:15

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with...

5.3

CVE-2020-2752

  • EPSS 0.21%
  • Veröffentlicht 15.04.2020 14:15:25
  • Zuletzt bearbeitet 21.11.2024 05:26:10

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows low privileged attacker with net...

5.5

CVE-2020-2760

  • EPSS 0.1%
  • Veröffentlicht 15.04.2020 14:15:25
  • Zuletzt bearbeitet 21.11.2024 05:26:11

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mu...

7.8

CVE-2020-7221

Exploit
  • EPSS 0.27%
  • Veröffentlicht 04.02.2020 17:15:13
  • Zuletzt bearbeitet 21.11.2024 05:36:51

mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of auth_pam_tool_dir/auth_pam_tool...

5.9

CVE-2020-2574

  • EPSS 0.25%
  • Veröffentlicht 15.01.2020 17:15:18
  • Zuletzt bearbeitet 21.11.2024 05:25:35

Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with ne...

7.8

CVE-2015-2325

Exploit
  • EPSS 0.57%
  • Veröffentlicht 14.01.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 02:27:13

The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other unspecified impact via a regular expression with a gro...

5.5

CVE-2015-2326

Exploit
  • EPSS 0.3%
  • Veröffentlicht 14.01.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 02:27:13

The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group containing both a forward referencing subroutine call a...