MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITION

MariaDB: Insufficient quoting in mariadb-dump and SHOW commands

MariaDB: Out-of-bound buffer read on in `ST_Area` of a multipolygon.

MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

MariaDB: GRANT PROXY with empty password incorrectly checks grantor's privileges

MariaDB: Unauthorized file access via CONNECT engine UDFs

MariaDB: privilege escalation via incorrect view frm parsing

MariaDB: database privilege escalation via user / role name collision in the acl cache

MariaDB: insufficient validation of binary frm data when opening a table

MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure

MariaDB: environment injection via wsrep bootstrap in the mariadb.service file

MariaDB: mysql_json plugin OOB reads

MariaDB: `qc_info` plugin can do OOB reads if query contains \0

MariaDB: one byte OOB write in DOS tables of the CONNECT engine

MariaDB: Insecure $HOME in MariaDB rpm packages

MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side

MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync)

MariaDB: FILE privilege was not checked for subqueries in the FROM clause

MariaDB: mysql_real_escape_string() incorrectly handled big5

MariaDB: path traversal in mbstream

MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB: wsrep SST unsafe parameter handling on the donor side

MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2. If the caching_sha2_password authentication plugin is installed, and some user accounts are configur…

Heap-based Buffer Overflow in MariaDB

MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability

MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.