CWE-838

CVEs per yearBy the year they were published

1. 20181
2. 20192
3. 20203
4. 20232
5. 20243
6. 20251
7. 20267

Newest CVEs

• CVE-2026-119281

  MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

  mariadb-corporation · mariadb-connector-j

  Medium5.9
• CVE-2026-114650

  Plaintext exposure of encrypted fields via ANSI code-page corruption of database name

  MongoDB · C# Driver

  Medium6.9
• CVE-2026-84463

  Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute

  zammad · zammad

  Medium6.3
• CVE-2026-55859

  MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb

  mariadb-corporation · mariadb-connector-r2dbc

  Medium5.9
• CVE-2026-55858

  MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

  mariadb-corporation · mariadb-connector-j

  Medium5.9
• CVE-2026-47079

  Round-trip Corruption via Improper Entity Escaping in xml_builder

  joshnuss · xml_builder

  Low2.1
• CVE-2026-53641

  FOSSBilling has stored XSS in client email views via unescaped content in JavaScript template literal

  FOSSBilling · FOSSBilling

  Medium4.8
• CVE-2025-4052

  Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI…

  Google · Chrome

  Critical9.8
• CVE-2024-11702

  Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history…

  Mozilla · Firefox

  High7.5
• CVE-2024-34006

  moodle: unsanitized HTML in site log for config_log_created

  Moodle

  Medium4.3

Vendors it comes up for most

1. Google3
2. mariadb-corporation3
3. FOSSBilling1
4. McAfee1
5. MongoDB1
6. Mozilla1
7. Proofpoint1
8. joshnuss1
9. org.mariadb1
10. zammad1