389901 matches found
CVE-2026-55858
MariaDB Connector/J (org.mariadb.jdbc:mariadb-java-client) is vulnerable to a charset-confusion mismatch in versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9. The connector assumes a UTF-8 connection character set for protocol encoding/decoding and client-side escaping. If the server reports a mi...
CVE-2026-55857
MariaDB Connector/J (versions prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9) is vulnerable to cleartext password transmission during PAM dialog authentication . The PAM handler SendPamAuthPacketFactory (referred to as dialog by the server) does not declare a secure-transport requirement and inherits t...
CVE-2026-55856
MariaDB Connector/J (Java connector for MariaDB/MySQL databases) has a cleartext password disclosure vulnerability on the initial-handshake path. When an application connects with sslMode=verify-full or verify-ca, supplies a password, and does not configure serverSslCert or trustStore, the connec...
CVE-2026-9186
This CVE has been reserved for future announcement. No technical details, affected products, or impact information are currently available. Monitor for updates as the responsible party publicizes the vulnerability.
CVE-2026-8447
Technical details for CVE-2026-8447 are not yet publicly available. The entry has been reserved by an organization or individual pending announcement of a new security problem. Action: monitor for updates when details are publicized.
CVE-2026-12765
CVE-2026-12765 is currently reserved with no public technical details available. The affected product, root cause, and impact are not yet disclosed. Monitor for updates as the responsible party publicizes the vulnerability.
CVE-2026-17631
CVE-2026-17631 is currently in a reserved state with no public technical details available about the affected product, root cause, or impact. Monitor for updates when the reserving organization publishes the full disclosure.
CVE-2026-9138
CVE-2026-9138 is currently reserved with no public technical details available in the provided documents. Monitor for updates when the assigning organization publicizes the vulnerability.
CVE-2026-19303
CVE-2026-19303 is currently in reserved status with no public technical details available. The candidate is held for an organization or individual to disclose a new security problem. Monitor for updates once details are publicized.
CVE-2026-55848
MapFish Print (a component of the MapFish cartographic printing platform) is vulnerable to XML External Entity (XXE) injection in versions prior to 3.28.30, 3.30.32, 3.31.24, 3.33.16, and 4.0.5. The vulnerability exists in the /api/print3/print endpoint, where an attacker-controlled GML layer URL...
CVE-2025-63607
Technical details for CVE-2025-63607 are not yet publicly available; the entry is reserved and awaiting publication. A single sighting reference exists but provides no concrete product, cause, or impact information. Monitor for updates.
CVE-2026-12763
CVE-2026-12763 is a reserved candidate with no public technical details yet. The affected product, vulnerability type, and impact remain unknown. Action: monitor for future updates when the details are published.
CVE-2026-19300
This CVE has been reserved as a placeholder; no technical details (affected product, root cause, or impact) are publicly available in the provided documents. Monitor for updates when the candidate is publicized.
CVE-2026-19299
CVE-2026-19299 is a reserved candidate with no public technical details yet. The underlying vulnerability, affected products, and impact remain unspecified. Monitor for updates once the reserving organization publicizes the issue.
CVE-2026-19302
CVE-2026-19302 is currently a reserved candidate with no public technical details available. The affected product, root cause, and impact remain unknown. Action: monitor for updates as details are expected to be published when the candidate is publicized.
CVE-2026-19306
CVE-2026-19306 is currently a reserved candidate with no public technical details available. No connected documents provide further information about affected products, root cause, or impact. Monitor for updates as the reserving organization publicizes the vulnerability.
CVE-2026-19298
CVE-2026-19298 is currently a reserved CVE candidate with no public technical details available in the provided documents. No affected product, root cause, or impact has been disclosed yet. Action: monitor for updates once the reserving organization publishes details.
CVE-2026-19301
CVE-2026-19301 is currently a reserved candidate with no public technical details. Affected product, root cause, and impact remain unspecified. Action: monitor for updates when the announcing organization publishes details.