https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:03:41.998807+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2025:0737 ALSA-2025:0737 — Moderate: mariadb:10.11 security update 2026-10-03T09:03:42.360584+00:00

Affected: AlmaLinux:8: Judy, AlmaLinux:8: galera, AlmaLinux:8: mariadb, AlmaLinux:8: mariadb-backup, AlmaLinux:8: mariadb-common, AlmaLinux:8: mariadb-devel, AlmaLinux:8: mariadb-embedded, AlmaLinux:8: mariadb-embedded-devel, AlmaLinux:8: mariadb-errmsg, AlmaLinux:8: mariadb-gssapi-server and 6 more

MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

Security Fix(es):

* mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) (CVE-2024-21096)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-04356 bdu:2024-04356 2026-10-03T09:03:42.360668+00:00 bdu:2024-04356 https://cve.radiocsirt.org/vuln/bell-cve-2024-21096 BELL-CVE-2024-21096 2026-10-03T09:03:42.360686+00:00

Affected: Alpaquita:23: mariadb, Alpaquita:stream: mariadb

 https://cve.radiocsirt.org/vuln/bit-mariadb-2024-21096 BIT-mariadb-2024-21096 2026-10-03T09:03:42.360705+00:00

Affected: Bitnami: mariadb

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0326 certfr-2024-avi-0326 — De multiples vulnérabilités ont été découvertes dans Oracle MySQL. Elles permettent à un attaquant de provoquer un déni… 2026-10-03T09:03:42.360729+00:00 certfr-2024-avi-0326 https://cve.radiocsirt.org/vuln/cnvd-2024-34925 cnvd-2024-34925 2026-10-03T09:03:42.360745+00:00 cnvd-2024-34925 https://cve.radiocsirt.org/vuln/euvd-2026-217173 EUVD-2026-217173 2026-10-03T09:03:42.360756+00:00 EUVD-2026-217173 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21096 fkie_cve-2024-21096 2026-10-03T09:03:42.360766+00:00

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

 https://cve.radiocsirt.org/vuln/ghsa-3vx9-2ch5-m6r6 GHSA-3vx9-2ch5-m6r6 2026-10-03T09:03:42.360790+00:00

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

 https://cve.radiocsirt.org/vuln/gsd-2024-21096 gsd-2024-21096 2026-10-03T09:03:42.360807+00:00 gsd-2024-21096 https://cve.radiocsirt.org/vuln/msrc_cve-2024-21096 msrc_CVE-2024-21096 — Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are… 2026-10-03T09:03:42.360818+00:00 msrc_CVE-2024-21096 https://cve.radiocsirt.org/vuln/oesa-2024-1558 OESA-2024-1558 — mysql security update 2026-10-03T09:03:42.360835+00:00

Affected: openEuler:22.03-LTS-SP2: mysql

The MySQL(TM) software delivers a very fast, multi-threaded, multi-user, and robust SQL (Structured Query Language) database server. MySQL Server is intended for mission-critical, heavy-load production systems as well as for embedding into mass-deployed software. MySQL is a trademark of Oracle and/or its affiliates Security Fix(es): Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications running on PowerPC CPU based platforms if the CPU provides vector instructions. Impact summary: If an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application dependent consequences. The POLY1305 MAC (message authentication code) implementation in OpenSSL for PowerPC CPUs restores the contents of vector registers in a different order than they are saved. Thus the contents of some of these vector registers are corrupted when returning to the caller. The vulnerable code is used only on newer PowerPC processors supporting the PowerISA 2.07 instructions. The consequences of this kind of internal application state corruption can be various - from no consequences, if the calling application does not depend on the contents of non-volatile XMM registers at all, to the worst consequences, where the attacker could get complete control of the application process. However unless the compiler uses the vector registers for stor…

 https://cve.radiocsirt.org/vuln/rhsa-2025:0737 RHSA-2025:0737 — Red Hat Security Advisory: mariadb:10.11 security update 2026-10-03T09:03:42.360945+00:00

mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024)

 https://cve.radiocsirt.org/vuln/rhsa-2026:0335 RHSA-2026:0335 — Red Hat Security Advisory: mariadb:10.11 security update 2026-10-03T09:03:42.360971+00:00

mariadb: MariaDB Server Crash Due to Empty Backtrace Log mariadb: MariaDB Server Crash via Item_direct_view_ref mariadb: MariaDB Server Crash mysql: Client: mysqldump unspecified vulnerability (CPU Apr 2024) mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation mysql: mariadb: High Privilege Denial of Service Vulnerability in MySQL Server (CPU Jan 2025) mysql: mariadb: InnoDB unspecified vulnerability (CPU Apr 2025) mysql: mariadb: mysqldump unspecified vulnerability (CPU Apr 2025) mysql: Optimizer unspecified vulnerability (CPU Jan 2026)

 https://cve.radiocsirt.org/vuln/suse-su-2024:2032-1 SUSE-SU-2024:2032-1 — Security update for mariadb 2026-10-03T09:03:42.361000+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-21096 UBUNTU-CVE-2024-21096 2026-10-03T09:03:42.361014+00:00

Affected: Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:Pro:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:16.04:LTS: percona-server-5.6, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:Pro:18.04:LTS: mysql-5.7, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mysql-8.0, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6 and 3 more

Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0894 WID-SEC-W-2024-0894 — Oracle MySQL: Mehrere Schwachstellen 2026-10-03T09:03:42.361054+00:00

Ein Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.