#cwe-838

共收录 7 条相关情报。

← 返回所有主题
漏洞预警2026-10-29 发布MEDIUM

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result byt...

CVE-2026-119281

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-08-28 发布INFO

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under th...

CVE-2026-55859

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2db

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-28 发布INFO

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes...

CVE-2026-55858

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3

历史摘要 · 未重新核验 · NVD

安全公告2026-08-28 发布INFO

org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output

CVE-2026-55859

### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-28 发布INFO

org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

CVE-2026-55858

### Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A serv

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-21 发布INFO

Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting. This vulnerability is associa...

CVE-2026-47079

Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoof

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-06 发布INFO

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cross-site scripting (XSS) vulnerability in the client-facing...

CVE-2026-53641

FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cros

历史摘要 · 未重新核验 · NVD