CWE-838
19 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 19Published CVEs19 of them scored
- 7Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-119281
MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
mariadb-corporation · mariadb-connector-j
Medium5.9 - CVE-2026-114650
Plaintext exposure of encrypted fields via ANSI code-page corruption of database name
MongoDB · C# Driver
Medium6.9 - CVE-2026-84463
Zammad: Stored HTML injection in Knowledge Base video widget enables forced session switching via unescaped iframe attribute
zammad · zammad
Medium6.3 - CVE-2026-55859
MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb
mariadb-corporation · mariadb-connector-r2dbc
Medium5.9 - CVE-2026-55858
MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client
mariadb-corporation · mariadb-connector-j
Medium5.9 - CVE-2026-47079
Round-trip Corruption via Improper Entity Escaping in xml_builder
joshnuss · xml_builder
Low2.1 - CVE-2026-53641
FOSSBilling has stored XSS in client email views via unescaped content in JavaScript template literal
FOSSBilling · FOSSBilling
Medium4.8 - CVE-2025-4052
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI…
Google · Chrome
Critical9.8 - CVE-2024-11702
Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history…
Mozilla · Firefox
High7.5 - CVE-2024-34006
moodle: unsanitized HTML in site log for config_log_created
Moodle
Medium4.3