Vulnerabilities > Mariadb > Mariadb > 10.2.42

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-5157 A vulnerability was found in MariaDB.
network
low complexity
mariadb fedoraproject redhat
7.5
7.5
2022-07-01 CVE-2022-32083 MariaDB v10.2 to v10.6.1 was discovered to contain a segmentation fault via the component Item_subselect::init_expr_cache_tracker.
network
low complexity
mariadb debian
7.5
7.5
2022-07-01 CVE-2022-32085 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Item_func_in::cleanup/Item::cleanup_processor.
network
low complexity
mariadb debian
7.5
7.5
2022-07-01 CVE-2022-32088 MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component Exec_time_tracker::get_loops/Filesort_tracker::report_use/filesort.
network
low complexity
mariadb debian
7.5
7.5
2022-04-19 CVE-2022-21427 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).
network
low complexity
oracle netapp mariadb debian
4.9
4.9
2022-04-14 CVE-2022-27445 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.
network
low complexity
mariadb debian
7.5
7.5
2022-04-14 CVE-2022-27449 MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.
network
low complexity
mariadb debian
7.5
7.5
2022-04-12 CVE-2022-27377 Use After Free vulnerability in multiple products
MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component Item_func_in::cleanup(), which is exploited via specially crafted SQL statements.
network
low complexity
mariadb debian CWE-416
7.5
7.5
2022-04-12 CVE-2022-27378 SQL Injection vulnerability in multiple products
An issue in the component Create_tmp_table::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
network
low complexity
mariadb debian CWE-89
7.5
7.5
2022-04-12 CVE-2022-27380 SQL Injection vulnerability in multiple products
An issue in the component my_decimal::operator= of MariaDB Server v10.6.3 and below was discovered to allow attackers to cause a Denial of Service (DoS) via specially crafted SQL statements.
network
low complexity
mariadb debian CWE-89
7.5
7.5