Known vulnerabilities in MariaDB - page 3

Software: MariaDB
Software CPE: cpe:2.3:a:mariadb_foundation:mariadb:*:*:*:*:*:*:*:*
Total vulnerabilities: 70
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MariaDB MariaDB is affected by 70 known vulnerabilities: 5 high, 17 medium, 48 low Critical High Medium Low

Vulnerabilities (70)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49122 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-15180
CWE-78 High
No
No
10.1.47, 10.2.34, 10.3.25, 10.4.15, 10.5.6 23.12.2020 SB2020122301
SB2020122306
SB2020122311
and 13 more
#VU33736 - Improper input validation
CVE-2018-3282
CWE-20 Medium
No
No
- 17.10.2018 SB2018101720
SB2019031415
SB2018120831
and 6 more
#VU33747 - Improper input validation
CVE-2018-3174
CWE-20 Low
No
No
- 17.10.2018 SB2018101721
SB2019031415
SB2018120836
and 4 more
#VU33737 - Improper input validation
CVE-2018-3058
CWE-20 Low
No
No
10.0.0 18.07.2018 SB2018071822
SB2019031415
SB2019010716
and 4 more
#VU33739 - Improper input validation
CVE-2018-3063
CWE-20 Medium
No
No
10.0.0 18.07.2018 SB2018071823
SB2019031415
SB2019010718
and 4 more
#VU33741 - Improper input validation
CVE-2018-3066
CWE-20 Low
No
No
10.0.0 18.07.2018 SB2018071824
SB2019031415
SB2019010720
and 4 more
#VU33742 - Improper input validation
CVE-2018-3081
CWE-20 Medium
No
No
10.0.0 18.07.2018 SB2018071825
SB2019020420
SB2022111901
and 3 more
#VU33765 - Improper input validation
CVE-2017-15365
CWE-20 High
No
No
10.1.30, 10.2.10 25.01.2018 SB2018012532
SB2018041121
SB2018010929
#VU33793 - Improper input validation
CVE-2017-3312
CWE-20 Low
No
No
5.5.54 28.01.2017 SB2017012815
SB2017012417
#VU33767 - Improper input validation
CVE-2017-3317
CWE-20 Low
No
No
5.5.54 28.01.2017 SB2017012809
SB2017012407
SB2017012632
#VU33768 - Improper input validation
CVE-2017-3318
CWE-20 Low
No
No
5.5.54 28.01.2017 SB2017012810
SB2017012408
SB2017012632
#VU33792 - Improper input validation
CVE-2017-3291
CWE-20 Low
No
No
5.5.54 28.01.2017 SB2017012814
SB2017012416
#VU32165 - Improper input validation
CVE-2017-3258
CWE-20 Medium
No
No
5.5.54 28.01.2017 SB2017012807
SB2017012414
SB2017012632
#VU33789 - Improper input validation
CVE-2017-3238
CWE-20 Medium
No
No
5.5.54 28.01.2017 SB2017012811
SB2017012410
SB2017012632
#VU33790 - Improper input validation
CVE-2017-3243
CWE-20 Low
No
No
5.5.54 28.01.2017 SB2017012812
SB2017012411
SB2017012632
#VU33791 - Improper input validation
CVE-2017-3244
CWE-20 Medium
No
No
5.5.54 28.01.2017 SB2017012813
SB2017012412
SB2017012632
#VU32164 - Improper Link Resolution Before File Access ('Link Following')
CVE-2016-6664
CWE-59 Low
No
Exploited
5.5.41, 5.5.51 13.12.2016 SB2016121357
SB2017012409
#VU33601 - Cryptographic Issues
CVE-2016-7440
CWE-310 Low
No
No
- 13.12.2016 SB2016121381
SB2016111205
SB2016112402
#VU32224 - Exposure of sensitive information to an unauthorized actor
CVE-2016-5584
CWE-200 Low
No
No
5.5.53 25.10.2016 SB2016102506
SB2016111205
SB2016112401
#VU33807 - Improper input validation
CVE-2016-5444
CWE-20 Low
No
No
5.5.49, 10.0.25, 10.1.14 21.07.2016 SB2016072114
SB2016101715


Showing elements 41 - 60 out of 70