Known vulnerabilities in MariaDB - page 2

Software: MariaDB
Software CPE: cpe:2.3:a:mariadb_foundation:mariadb:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MariaDB MariaDB is affected by 70 known vulnerabilities: 5 high, 17 medium, 48 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU65896 - Memory corruption
CVE-2022-32088
CWE-119 Low
No
No
10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4 29.07.2022 SB2022080150
SB2022052337
SB2022052338
and 12 more
#VU63536 - Memory corruption
CVE-2022-27452
CWE-119 Low
No
No
10.9.1 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 18 more
#VU63521 - Buffer overflow
CVE-2022-27387
CWE-120 Low
No
No
10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 20 more
#VU63520 - Memory corruption
CVE-2022-27386
CWE-119 Low
No
No
10.7.3 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 21 more
#VU63519 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27384
CWE-89 Low
No
No
10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 21 more
#VU63517 - Use After Free
CVE-2022-27383
CWE-416 Low
No
No
10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 21 more
#VU63516 - Memory corruption
CVE-2022-27382
CWE-119 Low
No
No
10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 13 more
#VU63515 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27381
CWE-89 Low
No
No
10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 23 more
#VU63514 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27380
CWE-89 Low
No
No
10.6.4 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 22 more
#VU63512 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27379
CWE-89 Low
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.3 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 19 more
#VU63510 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27378
CWE-89 Low
No
No
10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4, 10.8.3, 10.9.1 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 21 more
#VU63508 - Use After Free
CVE-2022-27377
CWE-416 Low
No
No
10.2.44, 10.3.35, 10.4.25, 10.5.16, 10.6.8, 10.7.4 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 23 more
#VU63507 - Use After Free
CVE-2022-27376
CWE-416 Low
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7 23.05.2022 SB2022052321
SB2022052322
SB2022061533
and 20 more
#VU60556 - Resource Management Errors
CVE-2021-46659
CWE-399 Medium
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3, 10.8.2 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 27 more
#VU60553 - Heap-based Buffer Overflow
CVE-2022-24052
CWE-122 Medium
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3, 10.8.2 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60554 - Use After Free
CVE-2022-24050
CWE-416 Medium
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3, 10.8.2 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60555 - Memory corruption
CVE-2022-24048
CWE-119 Medium
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3, 10.8.2 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 29 more
#VU60552 - Use of Externally-Controlled Format String
CVE-2022-24051
CWE-134 Medium
No
No
10.2.43, 10.3.34, 10.4.24, 10.5.15, 10.6.7, 10.7.3, 10.8.2 12.02.2022 SB2022021201
SB2022022815
SB2022072731
and 28 more
#VU51645 - Command injection
CVE-2021-27928
CWE-77 High
Available
No
10.2.37, 10.3.28, 10.4.18, 10.5.9 23.03.2021 SB2021032310
SB2021042124
SB2021042125
and 11 more
#VU50455 - Improper input validation
CVE-2020-28912
CWE-20 Low
No
No
10.1.48, 10.2.35, 10.3.26, 10.4.16, 10.5.7 24.12.2020 SB2020122415
SB2020120412


Showing elements 21 - 40 out of 70