https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:23:52 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:43505 <p><strong>Affected:</strong> AlmaLinux:10: mariadb-connector-c, AlmaLinux:10: mariadb-connector-c-config, AlmaLinux:10: mariadb-connector-c-devel, AlmaLinux:10: mariadb-connector-c-doc, AlmaLinux:10: mariadb-connector-c-test</p> <p>The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.</p> <p>Security Fix(es):</p> <p>* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: mariadb-connector-c, AlmaLinux:10: mariadb-connector-c-config, AlmaLinux:10: mariadb-connector-c-devel, AlmaLinux:10: mariadb-connector-c-doc, AlmaLinux:10: mariadb-connector-c-test</p> <p>The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.</p> <p>Security Fix(es):</p> <p>* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:43505 https://cve.radiocsirt.org/vuln/bdu:2026-14964 bdu:2026-14964 https://cve.radiocsirt.org/vuln/bdu:2026-14964 https://cve.radiocsirt.org/vuln/bell-cve-2026-44172 <p><strong>Affected:</strong> Alpaquita:23: mariadb, Alpaquita:25: mariadb, Alpaquita:stream: mariadb</p> <p><strong>Affected:</strong> Alpaquita:23: mariadb, Alpaquita:25: mariadb, Alpaquita:stream: mariadb</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-44172 https://cve.radiocsirt.org/vuln/bit-mariadb-2026-44172 <p><strong>Affected:</strong> Bitnami: mariadb</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> <p><strong>Affected:</strong> Bitnami: mariadb</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> https://cve.radiocsirt.org/vuln/bit-mariadb-2026-44172 https://cve.radiocsirt.org/vuln/euvd-2026-370202 EUVD-2026-370202 https://cve.radiocsirt.org/vuln/euvd-2026-370202 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44172 <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44172 https://cve.radiocsirt.org/vuln/oesa-2026-3197 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: mariadb-connector-c, openEuler:24.03-LTS-SP1: mariadb-connector-c, openEuler:24.03-LTS-SP3: mariadb-connector-c, openEuler:24.03-LTS-SP4: mariadb-connector-c, openEuler:20.03-LTS-SP4: mariadb-connector-c</p> <p>This package is used for connecting C/C++ programs to MariaDB and MySQL database. Security Fix(es):</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.(CVE-2026-44172)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: mariadb-connector-c, openEuler:24.03-LTS-SP1: mariadb-connector-c, openEuler:24.03-LTS-SP3: mariadb-connector-c, openEuler:24.03-LTS-SP4: mariadb-connector-c, openEuler:20.03-LTS-SP4: mariadb-connector-c</p> <p>This package is used for connecting C/C++ programs to MariaDB and MySQL database. Security Fix(es):</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.(CVE-2026-44172)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3197 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10897-1 <p>libmariadbd-devel-11.8.7-1.1 on GA media</p> <p>libmariadbd-devel-11.8.7-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10897-1 https://cve.radiocsirt.org/vuln/pysec-2026-217 <p><strong>Affected:</strong> PyPI: mariadb</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> <p><strong>Affected:</strong> PyPI: mariadb</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> https://cve.radiocsirt.org/vuln/pysec-2026-217 https://cve.radiocsirt.org/vuln/rhsa-2026:30135 <p>mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()</p> <p>mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()</p> https://cve.radiocsirt.org/vuln/rhsa-2026:30135 https://cve.radiocsirt.org/vuln/rlsa-2026:43505 <p><strong>Affected:</strong> Rocky Linux:10: mariadb-connector-c</p> <p>The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.</p> <p>Security Fix(es):</p> <p>* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: mariadb-connector-c</p> <p>The MariaDB Native Client library (C driver) is used to connect applications developed in C/C++ to MariaDB and MySQL databases.</p> <p>Security Fix(es):</p> <p>* mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() (CVE-2026-44172)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:43505 https://cve.radiocsirt.org/vuln/suse-su-2026:22095-1 <p>Security update for mariadb</p> <p>Security update for mariadb</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22095-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44172 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb, Ubuntu:26.04:LTS: mariadb</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mariadb-10.0, Ubuntu:18.04:LTS: mariadb-10.1, Ubuntu:20.04:LTS: mariadb-10.3, Ubuntu:22.04:LTS: mariadb-10.6, Ubuntu:24.04:LTS: mariadb, Ubuntu:25.10: mariadb, Ubuntu:26.04:LTS: mariadb</p> <p>MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44172 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1597 <p>Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in MariaDB ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1597