MA
Vendor
mariadb-corporation
20
CVEs
0
On KEV
11
New 30D
Products
MA5.9
mariadb-connector-j
mariadb-corporation
11 CVEs0 on KEV7 new
MA8.1
mariadb-connector-nodejs
mariadb-corporation
7 CVEs0 on KEV4 new
MA5.9
mariadb-connector-r2dbc
mariadb-corporation
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-119281 New | MA mariadb-connector-j mariadb-corporation | 5.9 | Oct 29 | MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing |
| CVE-2026-119280 New | MA mariadb-connector-j mariadb-corporation | 3.7 | Oct 29 | MariaDB Connector/J : XA recover() trusted server-supplied gtrid and bqual lengths |
| CVE-2026-119279 New | MA mariadb-connector-j mariadb-corporation | 5.9 | Oct 29 | MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths |
| CVE-2026-119278 New | MA mariadb-connector-j mariadb-corporation | 5.9 | Oct 29 | MariaDB Connector/J: Rogue server can crash the client during caching_sha2_password authentication |
| CVE-2026-119277 New | MA mariadb-connector-j mariadb-corporation | 5.9 | Oct 29 | MariaDB Connector/J: Rogue server can make the client read past the packet through server-declared lengths |
| CVE-2026-119276 New | MA mariadb-connector-j mariadb-corporation | 5.9 | Oct 29 | MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets |
| CVE-2026-119210 New | MA mariadb-connector-j mariadb-corporation | 5.9 | Oct 29 | MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files |
| CVE-2026-107385 | MA mariadb-connector-nodejs mariadb-corporation | 7.4 | Oct 8 | MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES |
| CVE-2026-107384 | MA mariadb-connector-nodejs mariadb-corporation | 8.1 | Oct 8 | MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries) |
| CVE-2026-107383 | MA mariadb-connector-nodejs mariadb-corporation | 7.5 | Oct 8 | MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters |
| CVE-2026-107382 | MA mariadb-connector-nodejs mariadb-corporation | 5.9 | Oct 8 | MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS |
| CVE-2026-61700 | MA mariadb-connector-j mariadb-corporation | 3.7 | Sep 17 | MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests |
| CVE-2026-55860 | MA mariadb-connector-r2dbc mariadb-corporation | 5.9 | Aug 28 | MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport) |
| CVE-2026-55859 | MA mariadb-connector-r2dbc mariadb-corporation | 5.9 | Aug 28 | MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb |
| CVE-2026-55858 | MA mariadb-connector-j mariadb-corporation | 5.9 | Aug 28 | MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client |
| CVE-2026-55857 | MA mariadb-connector-j mariadb-corporation | 5.9 | Aug 28 | MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials |
| CVE-2026-55856 | MA mariadb-connector-j mariadb-corporation | 5.9 | Aug 28 | MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake |
| CVE-2026-55855 | MA mariadb-connector-nodejs mariadb-corporation | 6.5 | Aug 28 | MariaDB Connector/Node.js: Possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets |
| CVE-2026-55854 | MA mariadb-connector-nodejs mariadb-corporation | 5.9 | Aug 28 | MariaDB Connector/Node.js: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials in mariadb |
| CVE-2026-55215 | MA mariadb-connector-nodejs mariadb-corporation | 7.5 | Aug 28 | MariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true` |