Поиск уязвимостей
Количество 23
Количество 23
BDU:2026-07584
Уязвимость плагина server audit plugin системы управления базами данных MariaDB, позволяющая нарушителю обойти существующие механизмы безопасности
ROS-20260524-73-0043
Уязвимость mariadb
ROS-20260524-73-0042
Уязвимость mariadb10.6
ROS-20260524-73-0041
Уязвимость mariadb11.4
ROS-20260524-73-0040
Уязвимость mariadb11.8
ALT-PU-2026-2658
ALT-PU-2026-2658: package `mariadb` update to version 10.6.25-alt1
ALT-PU-2026-8415
ALT-PU-2026-8415: package `mariadb` update to version 10.6.26-alt1
ALT-PU-2026-2460
ALT-PU-2026-2460: package `mariadb` update to version 11.8.6-alt1
CVE-2026-3494
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
CVE-2026-3494
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
CVE-2026-3494
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
CVE-2026-3494
MariaDB Server Audit Plugin Comment Handling Bypass
CVE-2026-3494
In MariaDB server version through 11.8.5, when server audit plugin is ...
ALT-PU-2026-8237
ALT-PU-2026-8237: package `mariadb` update to version 11.8.7-alt1
ROS-20260524-80-0034
Уязвимость mariadb10.6
ROS-20260524-80-0033
Уязвимость mariadb
ROS-20260524-80-0032
Уязвимость mariadb11.4
ROS-20260524-80-0031
Уязвимость mariadb11.8
GHSA-qmjm-438j-w485
In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged.
SUSE-SU-2026:2282-1
Security update for mariadb
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-07584 Уязвимость плагина server audit plugin системы управления базами данных MariaDB, позволяющая нарушителю обойти существующие механизмы безопасности | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
 | ROS-20260524-73-0043 Уязвимость mariadb | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260524-73-0042 Уязвимость mariadb10.6 | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260524-73-0041 Уязвимость mariadb11.4 | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260524-73-0040 Уязвимость mariadb11.8 | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ALT-PU-2026-2658 ALT-PU-2026-2658: package `mariadb` update to version 10.6.25-alt1 | CVSS3: 6.5 | 9 месяцев назад | |
| ALT-PU-2026-8415 ALT-PU-2026-8415: package `mariadb` update to version 10.6.26-alt1 | CVSS3: 9.9 | 6 месяцев назад | |
| ALT-PU-2026-2460 ALT-PU-2026-2460: package `mariadb` update to version 11.8.6-alt1 | CVSS3: 6.8 | 9 месяцев назад | |
 | CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged. | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged. | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged. | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
 | CVE-2026-3494 MariaDB Server Audit Plugin Comment Handling Bypass | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| CVE-2026-3494 In MariaDB server version through 11.8.5, when server audit plugin is ... | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
| ALT-PU-2026-8237 ALT-PU-2026-8237: package `mariadb` update to version 11.8.7-alt1 | CVSS3: 9.9 | 6 месяцев назад | |
| ROS-20260524-80-0034 Уязвимость mariadb10.6 | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260524-80-0033 Уязвимость mariadb | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260524-80-0032 Уязвимость mariadb11.4 | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| ROS-20260524-80-0031 Уязвимость mariadb11.8 | CVSS3: 4.3 | 0% Низкий | 6 месяцев назад |
| GHSA-qmjm-438j-w485 In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged. | CVSS3: 4.3 | 0% Низкий | 8 месяцев назад |
 | SUSE-SU-2026:2282-1 Security update for mariadb | 5 месяцев назад |
Уязвимостей на страницу