https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:12:56.916360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-281 certfr-2015-avi-281 — Une vulnérabilité a été corrigée dans <span class="textit">MariaDB</span>. Elle permet à un attaquant de provoquer une… 2026-10-03T15:12:57.174114+00:00 certfr-2015-avi-281 https://cve.radiocsirt.org/vuln/cnvd-2015-02890 cnvd-2015-02890 2026-10-03T15:12:57.174185+00:00 cnvd-2015-02890 https://cve.radiocsirt.org/vuln/euvd-2026-91742 EUVD-2026-91742 2026-10-03T15:12:57.174202+00:00 EUVD-2026-91742 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3152 fkie_cve-2015-3152 2026-10-03T15:12:57.174215+00:00

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

 https://cve.radiocsirt.org/vuln/ghsa-p7qr-v5jx-7qv3 GHSA-p7qr-v5jx-7qv3 2026-10-03T15:12:57.174247+00:00

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.

 https://cve.radiocsirt.org/vuln/gsd-2015-3152 gsd-2015-3152 2026-10-03T15:12:57.174265+00:00 gsd-2015-3152 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10200-1 openSUSE-SU-2024:10200-1 — libmysql56client18-32bit-5.6.34-1.1 on GA media 2026-10-03T15:12:57.174277+00:00

libmysql56client18-32bit-5.6.34-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:1646 RHSA-2015:1646 — Red Hat Security Advisory: rh-mariadb100-mariadb security update 2026-10-03T15:12:57.174360+00:00

mysql: unspecified vulnerability related to Server:Federated (CPU April 2015) mysql: unspecified vulnerability related to Server:Compiling (CPU April 2015) mysql: unspecified vulnerability related to Server:DDL (CPU April 2015) mysql: unspecified vulnerability related to Server:Optimizer (CPU April 2015) mysql: unspecified vulnerability related to Server:GIS (CPU July 2015) mysql: unspecified vulnerability related to Server:DML (CPU July 2015) mysql: unspecified vulnerability related to Server:Partition (CPU July 2015) mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015) mysql: unspecified vulnerability related to Server:Security:Firewall (CPU July 2015) mysql: unspecified vulnerability related to Server:Security:Privileges (CPU July 2015) mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015) mysql: unspecified vulnerability related to Server:DML (CPU July 2015) mysql: unspecified vulnerability related to Client (CPU July 2015) mysql: use of SSL/TLS can not be enforced in mysql client library (oCERT-2015-003, BACKRONYM) mysql: unspecified vulnerability related to Server:Pluggable Auth (CPU July 2015) mysql: unspecified vulnerability related to Server:I_S (CPU July 2015) mysql: unspecified vulnerability related to Server:InnoDB (CPU July 2015) mysql: unspecified vulnerability related to Server:Optimizer (CPU July 2015) mysql: unspecified vulnerability related to Server:Memcached (CPU July 2015) mysql: unspecified vulner…

 https://cve.radiocsirt.org/vuln/suse-su-2015:1273-1 SUSE-SU-2015:1273-1 — Security update for mariadb 2026-10-03T15:12:57.174426+00:00

Security update for mariadb

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-3152 UBUNTU-CVE-2015-3152 2026-10-03T15:12:57.174452+00:00

Affected: Ubuntu:14.04:LTS: mariadb-5.5, Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:16.04:LTS: percona-server-5.6

Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the --ssl option to mean that SSL is optional, which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, aka a "BACKRONYM" attack.