https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:47:28.297573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:5500 ALSA-2020:5500 — Important: mariadb:10.3 security, bug fix, and enhancement update 2026-10-04T15:47:28.727369+00:00

Affected: AlmaLinux:8: Judy

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

The following packages have been upgraded to a later upstream version: mariadb (10.3.27), galera (25.3.31). (BZ#1899082, BZ#1899086)

Security Fix(es):

* mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep (CVE-2020-15180)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2019) (CVE-2019-2938)

* mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) (CVE-2019-2974)

* mysql: C API unspecified vulnerability (CPU Apr 2020) (CVE-2020-2752)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2760)

* mysql: Server: DML unspecified vulnerability (CPU Apr 2020) (CVE-2020-2780)

* mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) (CVE-2020-2812)

* mysql: InnoDB unspecified vulnerability (CPU Apr 2020) (CVE-2020-2814)

* mariadb-connector-c: Improper validation of content in a OK packet received from server (CVE-2020-13249)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14765)

* mysql: InnoDB unspecified vulnerability (CPU Oct 2020) (CVE-2020-14776)

* mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) (CVE-2020-14789)

* mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) (CVE-2020-14812)

* mysql: C API unspecified vulnerability (CPU Jan 2020) (CVE-2020-2574)

For more details about the security issue(s), including the impact, a CVSS score, acknowle…

 https://cve.radiocsirt.org/vuln/bdu:2021-03502 bdu:2021-03502 2026-10-04T15:47:28.727475+00:00 bdu:2021-03502 https://cve.radiocsirt.org/vuln/bell-cve-2020-15180 Withdrawn: BELL-CVE-2020-15180 — CVE-2020-15180 does not affect BellSoft software 2026-10-04T15:47:28.727494+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-mariadb-2020-15180 BIT-mariadb-2020-15180 2026-10-04T15:47:28.727510+00:00

Affected: Bitnami: mariadb

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.

 https://cve.radiocsirt.org/vuln/euvd-2026-42706 EUVD-2026-42706 2026-10-04T15:47:28.727534+00:00 EUVD-2026-42706 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15180 fkie_cve-2020-15180 2026-10-04T15:47:28.727546+00:00

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.

 https://cve.radiocsirt.org/vuln/gsd-2020-15180 gsd-2020-15180 2026-10-04T15:47:28.727569+00:00 gsd-2020-15180 https://cve.radiocsirt.org/vuln/oesa-2021-1250 OESA-2021-1250 — mariadb security update 2026-10-04T15:47:28.727579+00:00

Affected: openEuler:20.03-LTS-SP1: mariadb

MariaDB turns data into structured information in a wide array of applications, ranging from banking to websites. It is an enhanced, drop-in replacement for MySQL. MariaDB is used because it is fast, scalable and robust, with a rich ecosystem of storage engines, plugins and many other tools make it very versatile for a wide variety of use cases. Security Fix(es): A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product.(CVE-2021-27928) A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.(CVE-2020-15180)

 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2090-1 openSUSE-SU-2020:2090-1 — Security update for mariadb-connector-c 2026-10-04T15:47:28.727608+00:00

Security update for mariadb-connector-c

 https://cve.radiocsirt.org/vuln/rhsa-2020:5246 RHSA-2020:5246 — Red Hat Security Advisory: rh-mariadb103-mariadb and rh-mariadb103-galera security update 2026-10-04T15:47:28.727651+00:00

mysql: Server: Replication unspecified vulnerability (CPU Apr 2019) mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019) mysql: InnoDB unspecified vulnerability (CPU Apr 2019) mysql: Server: Pluggable Auth unspecified vulnerability (CPU Jul 2019) mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019) mysql: Server: XML unspecified vulnerability (CPU Jul 2019) mysql: InnoDB unspecified vulnerability (CPU Jul 2019) mysql: Server: Parser unspecified vulnerability (CPU Jul 2019) mysql: InnoDB unspecified vulnerability (CPU Oct 2019) mysql: Server: Optimizer unspecified vulnerability (CPU Oct 2019) mysql: C API unspecified vulnerability (CPU Jan 2020) mysql: C API unspecified vulnerability (CPU Apr 2020) mysql: InnoDB unspecified vulnerability (CPU Apr 2020) mysql: Server: DML unspecified vulnerability (CPU Apr 2020) mysql: Server: Stored Procedure unspecified vulnerability (CPU Apr 2020) mysql: InnoDB unspecified vulnerability (CPU Apr 2020) mysql: C API unspecified vulnerability (CPU Apr 2020) mariadb-connector-c: Improper validation of content in a OK packet received from server mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) mysql: InnoDB unspecified vulnerability (CPU Oct 2020) mysql: Server: FTS unspecified vulnerability (CPU Oct 2020) mysql: Server: Locking unspecified vulnerability (CPU Oct 2020) mariadb: Insufficient SST method name check leading to code injection in mysql-wsrep mysql: C API unspecified vulnerabil…

 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 SUSE-RU-2023:3956-1 — Recommended update for mariadb104 2026-10-04T15:47:28.727741+00:00

Recommended update for mariadb104

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15180 UBUNTU-CVE-2020-15180 2026-10-04T15:47:28.727883+00:00

Affected: Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` allows for command injection that can be exploited by a remote attacker to execute arbitrary commands on galera cluster nodes. This threatens the system's confidentiality, integrity, and availability. This flaw affects mariadb versions before 10.1.47, before 10.2.34, before 10.3.25, before 10.4.15 and before 10.5.6.