كل ثغرات CVE في الأشهر الستة الماضية، محدَّثة يوميًا.

عرض 4 من 4

• متوسطةCVE-2026-55859درجة CVSS 5.928‏/08‏/2026

  MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mi

  CWE-116CWE-838
• متوسطةCVE-2026-55858درجة CVSS 5.928‏/08‏/2026

  MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the conn

  CWE-838
• منخفضةCVE-2026-47079درجة CVSS 2.121‏/08‏/2026

  Inappropriate Encoding for Output Context vulnerability in joshnuss xml_builder (XmlBuilder module) allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xml_builder.ex and program routines XmlBuilder.generate/1

  CWE-838
• متوسطةCVE-2026-53641درجة CVSS 4.806‏/07‏/2026

  FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cross-site scripting (XSS) vulnerability in the client-facing email history views of FOSSBilling. Email HTML content (`content_html`) is rendere

  CWE-79CWE-838