https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:46:19 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:0136 <p><strong>Affected:</strong> AlmaLinux:10: mariadb-common, AlmaLinux:10: mariadb-errmsg</p> <p>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.</p> <p>Security Fix(es):</p> <p>* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash (CVE-2023-52971) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: mariadb-common, AlmaLinux:10: mariadb-errmsg</p> <p>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities.</p> <p>Security Fix(es):</p> <p>* mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490) * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969) * mariadb: MariaDB Server Crash (CVE-2023-52971) * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970) * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722) * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693) * mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation (CVE-2025-13699)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:0136 https://cve.radiocsirt.org/vuln/bdu:2026-00803 bdu:2026-00803 https://cve.radiocsirt.org/vuln/bdu:2026-00803 https://cve.radiocsirt.org/vuln/bell-cve-2025-13699 <p><strong>Affected:</strong> Alpaquita:23: mariadb</p> <p><strong>Affected:</strong> Alpaquita:23: mariadb</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-13699 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0004 certfr-2026-avi-0004 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0004 https://cve.radiocsirt.org/vuln/euvd-2026-264344 EUVD-2026-264344 https://cve.radiocsirt.org/vuln/euvd-2026-264344 https://cve.radiocsirt.org/vuln/fkie_cve-2025-13699 <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.</p> <p>The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.</p> <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.</p> <p>The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-13699 https://cve.radiocsirt.org/vuln/ghsa-rqf2-8625-4vgv <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.</p> <p>The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.</p> <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.</p> <p>The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.</p> https://cve.radiocsirt.org/vuln/ghsa-rqf2-8625-4vgv https://cve.radiocsirt.org/vuln/msrc_cve-2025-13699 msrc_CVE-2025-13699 https://cve.radiocsirt.org/vuln/msrc_cve-2025-13699 https://cve.radiocsirt.org/vuln/oesa-2026-1383 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: mariadb</p> <p>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es):</p> <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.</p> <p>The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.(CVE-2025-13699)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: mariadb</p> <p>MariaDB is a community developed fork from MySQL - a multi-user, multi-threaded SQL database server. It is a client/server implementation consisting of a server daemon (mariadbd) and many different client programs and libraries. The base package contains the standard MariaDB/MySQL client programs and utilities. Security Fix(es):</p> <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation.</p> <p>The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.(CVE-2025-13699)</p> https://cve.radiocsirt.org/vuln/oesa-2026-1383 https://cve.radiocsirt.org/vuln/opensuse-su-2025:20175-1 <p>Security update for mariadb</p> <p>Security update for mariadb</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:20175-1 https://cve.radiocsirt.org/vuln/rhsa-2026:0061 <p>mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation</p> <p>mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation</p> https://cve.radiocsirt.org/vuln/rhsa-2026:0061 https://cve.radiocsirt.org/vuln/suse-su-2025:4491-1 <p>Security update for mariadb</p> <p>Security update for mariadb</p> https://cve.radiocsirt.org/vuln/suse-su-2025:4491-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13699 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb</p> <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb</p> <p>MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MariaDB. Interaction with the mariadb-dump utility is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of view names. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-27000.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-13699 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2694 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MariaDB ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in MariaDB ausnutzen, um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2694