
Vulnerabilities
CVSS 9.9: MariaDB 10.6-13.0 GIS Flaw Enables Remote Code Execution via Nested Geometry
A critical flaw in MariaDB allows remote attackers to corrupt memory via crafted GIS objects, risking code execution in unpatched server versions.
Everything Firewall Scoop has reported about Database Security: 4 stories, newest first. Part of our Data Breaches coverage.

A critical flaw in MariaDB allows remote attackers to corrupt memory via crafted GIS objects, risking code execution in unpatched server versions.

Database security in DBMS relies on layered controls that stop attackers from bypassing application logic to read or alter raw data structures directly.

Vikunja version 2.4.0 addresses a high-severity flaw where password-reset and other tokens were stored in plaintext, allowing database readers to hijack accounts.

Database security controls often create operational friction that slows legitimate business processes while leaving metadata exposed to determined attackers.