Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 59

Количество 59

redos логотип

ROS-20260819-73-0014

3 месяца назад

Уязвимость mariadb11.8

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-73-0013

3 месяца назад

Уязвимость mariadb11.4

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-73-0012

3 месяца назад

Уязвимость mariadb10.6

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-73-0011

3 месяца назад

Уязвимость mariadb

CVSS3: 7.2
EPSS: Низкий
github логотип

GHSA-rpgv-q6gv-684r

5 месяцев назад

wsrep SST unsafe parameter handling on the donor side (rsync)

CVSS3: 8
EPSS: Низкий
fstec логотип

BDU:2026-14965

6 месяцев назад

Уязвимость механизма передачи состояния узла State Snapshot Transfer (SST) системы управления базами данных MariaDB, позволяющая нарушителю выполнить произвольные команды

CVSS3: 8
EPSS: Низкий
ubuntu логотип

CVE-2026-48165

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 7.2
EPSS: Низкий
redhat логотип

CVE-2026-48165

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 9.1
EPSS: Низкий
nvd логотип

CVE-2026-48165

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 7.2
EPSS: Низкий
debian логотип

CVE-2026-48165

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. From ver ...

CVSS3: 7.2
EPSS: Низкий
ubuntu логотип

CVE-2026-49261

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

CVSS3: 9.8
EPSS: Низкий
redhat логотип

CVE-2026-49261

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

CVSS3: 9
EPSS: Низкий
nvd логотип

CVE-2026-49261

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2026-49261

5 месяцев назад

MariaDB server is a community developed fork of MySQL server. Versions ...

CVSS3: 9.8
EPSS: Низкий
redos логотип

ROS-20260819-80-0010

3 месяца назад

Уязвимость mariadb11.8

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-80-0009

3 месяца назад

Уязвимость mariadb11.4

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-80-0008

3 месяца назад

Уязвимость mariadb10.6

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-80-0007

3 месяца назад

Уязвимость mariadb

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-73-0010

3 месяца назад

Уязвимость mariadb11.8

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260819-73-0009

3 месяца назад

Уязвимость mariadb11.4

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redos логотип
ROS-20260819-73-0014

Уязвимость mariadb11.8

CVSS3: 7.2
1%
Низкий
3 месяца назад
redos логотип
ROS-20260819-73-0013

Уязвимость mariadb11.4

CVSS3: 7.2
1%
Низкий
3 месяца назад
redos логотип
ROS-20260819-73-0012

Уязвимость mariadb10.6

CVSS3: 7.2
1%
Низкий
3 месяца назад
redos логотип
ROS-20260819-73-0011

Уязвимость mariadb

CVSS3: 7.2
1%
Низкий
3 месяца назад
github логотип
GHSA-rpgv-q6gv-684r

wsrep SST unsafe parameter handling on the donor side (rsync)

CVSS3: 8
1%
Низкий
5 месяцев назад
fstec логотип
BDU:2026-14965

Уязвимость механизма передачи состояния узла State Snapshot Transfer (SST) системы управления базами данных MariaDB, позволяющая нарушителю выполнить произвольные команды

CVSS3: 8
1%
Низкий
6 месяцев назад
ubuntu логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 7.2
2%
Низкий
5 месяцев назад
redhat логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 9.1
2%
Низкий
5 месяцев назад
nvd логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11.18, 11.4.1 to before 11.4.12, 11.8.1 to before 11.8.8, and 12.3.1, a high-privileged MariaDB user could've used wsrep_sst_receive_address or wsrep_sst_donor global system variables to execute shell commands as the uid of the mariadbd process on the galera joiner node. This issue has been patched in versions 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2.

CVSS3: 7.2
2%
Низкий
5 месяцев назад
debian логотип
CVE-2026-48165

MariaDB server is a community developed fork of MySQL server. From ver ...

CVSS3: 7.2
2%
Низкий
5 месяцев назад
ubuntu логотип
CVE-2026-49261

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

CVSS3: 9.8
2%
Низкий
5 месяцев назад
redhat логотип
CVE-2026-49261

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

CVSS3: 9
2%
Низкий
5 месяцев назад
nvd логотип
CVE-2026-49261

MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6.26, 10.11.1 through 10.11.17, 11.4.1 through 11.4.11, 11.8.1 through 11.8.7, and 12.3.1 with `wsrep_notify_cmd` enabled would execute shell commands embedded in the name of the joiner node. This is fixed in 10.6.27, 10.11.18, 11.4.12, 11.8.8, and 12.3.2. As a workaround, anyone who cannot upgrade now should disable `wsrep_notify_cmd`.

CVSS3: 9.8
2%
Низкий
5 месяцев назад
debian логотип
CVE-2026-49261

MariaDB server is a community developed fork of MySQL server. Versions ...

CVSS3: 9.8
2%
Низкий
5 месяцев назад
redos логотип
ROS-20260819-80-0010

Уязвимость mariadb11.8

CVSS3: 7.2
2%
Низкий
3 месяца назад
redos логотип
ROS-20260819-80-0009

Уязвимость mariadb11.4

CVSS3: 7.2
2%
Низкий
3 месяца назад
redos логотип
ROS-20260819-80-0008

Уязвимость mariadb10.6

CVSS3: 7.2
2%
Низкий
3 месяца назад
redos логотип
ROS-20260819-80-0007

Уязвимость mariadb

CVSS3: 7.2
2%
Низкий
3 месяца назад
redos логотип
ROS-20260819-73-0010

Уязвимость mariadb11.8

CVSS3: 7.2
2%
Низкий
3 месяца назад
redos логотип
ROS-20260819-73-0009

Уязвимость mariadb11.4

CVSS3: 7.2
2%
Низкий
3 месяца назад

Уязвимостей на страницу