MariaDB Program Statistics

View program

18 total issues disclosed

$0 total paid publicly

Most disclosed (3 disclosures) — CRLF Injection

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Grafana LFI on https://grafana.mariadb.org Remote File Inclusion tess Medium 2022-01-06
Path Traversal CVE-2021-26086 CVE-2021-26085 Path Traversal kljunowsky Medium 2021-11-05
Git Config None supplied dtattoedhackers Medium 2021-05-27
Named pipe connection inteception Business Logic Errors gabriel_sztejnworcel High 2020-12-17
Path traversal in command line client Path Traversal lixtelnis Medium 2020-05-28
scripts loader (denial of service) vulnerability Denial of Service badis Low 2020-03-19
Ubuntu/Debian installation method allows key poisoning and code execution for network attacker Cryptographic Issues - Generic hanno Medium 2020-01-21
Exposed debug.log file leads to information disclosure Information Disclosure muhammaddaffa Medium 2020-01-15
smtp service vulnerable to POODLE SSLv3 Cryptographic Issues - Generic rudrahacks007 Low 2019-05-11
CRLF injection at https://mariadb.org/. CRLF Injection sergeybelove Medium 2019-02-21
[downloads.mariadb.org] CRLF injection in case of encoded query mark CRLF Injection s_p_q_r Medium 2019-02-14
CRLF injection on https://buildbot.mariadb.org CRLF Injection mik317 Medium 2019-02-04
Github wiki is editable by anyone Improper Access Control - Generic xiridium Medium 2018-12-10
Incorrect Permission Assignment for Critical Resource Privilege Escalation dhiraj-mishra Medium 2018-11-14
Vulnerability Report - Missing Certificate Authority Authorization rule Cryptographic Issues - Generic jaimaakali Low 2018-11-11
xmlrpc.php on mariadb.org can lead to DDOS and brute force attacks Denial of Service vijay_kumar1110 Low 2018-10-13
SSRF on jira.mariadb.org Server-Side Request Forgery (SSRF) putsi Medium 2018-10-13
vulnerable to Cross-site Request Forgery | Jira Cross-Site Request Forgery (CSRF) niteshpande Low 2018-10-12