https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:01:15 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-138 certfr-2016-avi-138 https://cve.radiocsirt.org/vuln/certfr-2016-avi-138 https://cve.radiocsirt.org/vuln/cnvd-2016-00802 cnvd-2016-00802 https://cve.radiocsirt.org/vuln/cnvd-2016-00802 https://cve.radiocsirt.org/vuln/euvd-2026-82703 EUVD-2026-82703 https://cve.radiocsirt.org/vuln/euvd-2026-82703 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2047 <p>The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;/CN=&#34; string in a field in a certificate, as demonstrated by &#34;/OU=/CN=bar.com/CN=foo.com.&#34;</p> <p>The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;/CN=&#34; string in a field in a certificate, as demonstrated by &#34;/OU=/CN=bar.com/CN=foo.com.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-2047 https://cve.radiocsirt.org/vuln/ghsa-gw5g-54qg-7583 <p>The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;/CN=&#34; string in a field in a certificate, as demonstrated by &#34;/OU=/CN=bar.com/CN=foo.com.&#34;</p> <p>The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;/CN=&#34; string in a field in a certificate, as demonstrated by &#34;/OU=/CN=bar.com/CN=foo.com.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-gw5g-54qg-7583 https://cve.radiocsirt.org/vuln/gsd-2016-2047 gsd-2016-2047 https://cve.radiocsirt.org/vuln/gsd-2016-2047 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10200-1 <p>libmysql56client18-32bit-5.6.34-1.1 on GA media</p> <p>libmysql56client18-32bit-5.6.34-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10200-1 https://cve.radiocsirt.org/vuln/rhsa-2016:0705 <p>mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015) mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) mysql: unspecified vulnerability related to Server:DDL (CPU October 2015) mysql: unspecified vulnerability related to Server:Types (CPU October 2015) mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) mysql: unspecified vulnerability related to Server:SP (CPU October 2015) mysql: unspecified vulnerability related to Server:DML (CPU October 2015) mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) mysql: unspecified vulnerability related to Server:DML (CPU October 2015) mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) mysql: unspecified vulnerability related to Server:Replication (CPU October 2015) mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015) mysql: unspecified vulnerability related to Server:DML (CPU October 2015) mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) mysq…</p> <p>mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) mysql: unspecified vulnerability related to Server:Optimizer (CPU October 2015) mysql: unspecified vulnerability related to Server:Partition (CPU October 2015) mysql: unspecified vulnerability related to Server:DDL (CPU October 2015) mysql: unspecified vulnerability related to Server:Types (CPU October 2015) mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015) mysql: unspecified vulnerability related to Server:SP (CPU October 2015) mysql: unspecified vulnerability related to Server:DML (CPU October 2015) mysql: unspecified vulnerability related to Server:InnoDB (CPU October 2015) mysql: unspecified vulnerability related to Server:DML (CPU October 2015) mysql: unspecified vulnerability related to Server:Parser (CPU October 2015) mysql: unspecified vulnerability related to Server:Replication (CPU October 2015) mysql: unspecified vulnerability related to Server:Memcached (CPU October 2015) mysql: unspecified vulnerability related to Server:DML (CPU October 2015) mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Client (CPU January 2016) mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016) mysq…</p> https://cve.radiocsirt.org/vuln/rhsa-2016:0705 https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 <p>Recommended update for mariadb104</p> <p>Recommended update for mariadb104</p> https://cve.radiocsirt.org/vuln/suse-ru-2023:3956-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2047 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: mariadb-5.5, Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:14.04:LTS: mysql-5.6, Ubuntu:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:16.04:LTS: percona-server-5.6</p> <p>The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;/CN=&#34; string in a field in a certificate, as demonstrated by &#34;/OU=/CN=bar.com/CN=foo.com.&#34;</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: mariadb-5.5, Ubuntu:14.04:LTS: mysql-5.5, Ubuntu:14.04:LTS: mysql-5.6, Ubuntu:16.04:LTS: mysql-5.7, Ubuntu:16.04:LTS: percona-xtradb-cluster-5.6, Ubuntu:16.04:LTS: percona-server-5.6</p> <p>The ssl_verify_server_cert function in sql-common/client.c in MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10; Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and earlier; and Percona Server do not properly verify that the server hostname matches a domain name in the subject&#39;s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a &#34;/CN=&#34; string in a field in a certificate, as demonstrated by &#34;/OU=/CN=bar.com/CN=foo.com.&#34;</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2047