https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:12:51.761262+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:5500 ALSA-2020:5500 — Important: mariadb:10.3 security, bug fix, and enhancement update 2026-10-03T03:12:51.924967+00:00

Affected: AlmaLinux:8: Judy

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera (25.3.31). (BZ#1899082, BZ#1899086)

Security Fix(es):

* mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

* mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

* mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

* mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

* mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

* mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

* mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

For more details about the security issue(s), including the impact, a CVSS score, acknowle…

 https://cve.radiocsirt.org/vuln/bdu:2020-05020 bdu:2020-05020 2026-10-03T03:12:51.925089+00:00 bdu:2020-05020 https://cve.radiocsirt.org/vuln/bell-cve-2020-14765 Withdrawn: BELL-CVE-2020-14765 — CVE-2020-14765 does not affect BellSoft software 2026-10-03T03:12:51.925108+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-mariadb-2020-14765 BIT-mariadb-2020-14765 2026-10-03T03:12:51.925125+00:00

Affected: Bitnami: mariadb

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-664 certfr-2020-avi-664 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Elles permettent à un attaquant de provoquer une exé… 2026-10-03T03:12:51.925149+00:00 certfr-2020-avi-664 https://cve.radiocsirt.org/vuln/cnvd-2020-59071 cnvd-2020-59071 2026-10-03T03:12:51.925165+00:00 cnvd-2020-59071 https://cve.radiocsirt.org/vuln/euvd-2026-189349 EUVD-2026-189349 2026-10-03T03:12:51.925177+00:00 EUVD-2026-189349 https://cve.radiocsirt.org/vuln/fkie_cve-2020-14765 fkie_cve-2020-14765 2026-10-03T03:12:51.925187+00:00

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/ghsa-386x-hp87-5862 GHSA-386x-hp87-5862 2026-10-03T03:12:51.925210+00:00

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/gsd-2020-14765 gsd-2020-14765 2026-10-03T03:12:51.925227+00:00 gsd-2020-14765 https://cve.radiocsirt.org/vuln/msrc_cve-2020-14765 msrc_CVE-2020-14765 — Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affecte… 2026-10-03T03:12:51.925237+00:00 msrc_CVE-2020-14765 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2090-1 openSUSE-SU-2020:2090-1 — Security update for mariadb-connector-c 2026-10-03T03:12:51.925255+00:00

Security update for mariadb-connector-c

 https://cve.radiocsirt.org/vuln/rhsa-2020:5246 RHSA-2020:5246 — Red Hat Security Advisory: rh-mariadb103-mariadb and rh-mariadb103-galera security update 2026-10-03T03:12:51.925274+00:00

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) mysql: InnoDB unspecified vulnerability (CPU Apr 2019) mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) mysql: Server: XML unspecified vulnerability (CPU Jul 2019) mysql: InnoDB unspecified vulnerability (CPU Jul 2019) mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) mysql: InnoDB unspecified vulnerability (CPU Oct 2019) mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) mysql: C API unspecified vulnerability (CPU Jan 2020) mysql: C API unspecified vulnerability (CPU Apr 2020) mysql: InnoDB unspecified vulnerability (CPU Apr 2020) mysql: Server: DML unspecified vulnerability (CPU Apr 2020) mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) mysql: InnoDB unspecified vulnerability (CPU Apr 2020) mysql: C API unspecified vulnerability (CPU Apr 2020) mariadb-connector-c: Improper validation of content in a OK packet received from server mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) mysql: InnoDB unspecified vulnerability (CPU Oct 2020) mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep mysql: C API unspecified vulnerabil…

 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 SUSE-RU-2023:3956-1 — Recommended update for mariadb104 2026-10-03T03:12:51.925334+00:00

Recommended update for mariadb104

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-14765 UBUNTU-CVE-2020-14765 2026-10-03T03:12:51.925480+00:00

Affected: Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:16.04:LTS: percona-server-5.6, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:18.04:LTS: mysql-5.7, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mysql-8.0, Ubuntu:20.04:LTS: mariadb-10.3

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0205 WID-SEC-W-2026-0205 — Oracle MySQL: Mehrere Schwachstellen 2026-10-03T03:12:51.925518+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.