cve.li

Recent

CVE-2026-41012CWE-295

BOSH vSphere CPI Improper Cert Validation

Published 2026-08-29 by vmware

CVE-2026-55860CWE-319CWE-522

MariaDB Connector/R2DBC: Cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)

Published 2026-08-28 by GitHub_M

CVE-2026-55859CWE-116CWE-838

MariaDB Connector/R2DBC: Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output in org.mariadb:r2dbc-mariadb

Published 2026-08-28 by GitHub_M

CVE-2026-55858CWE-838

MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

Published 2026-08-28 by GitHub_M

CVE-2026-55857CWE-319CWE-522

MariaDB Connector/J: Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Published 2026-08-28 by GitHub_M

CVE-2026-55856CWE-522

MariaDB Connector/J: Cleartext password disclosure to a MITM on the initial-handshake

Published 2026-08-28 by GitHub_M

CVE-2026-55848CWE-611

mapfish-print: XXE on MapFish Print allows reading arbitrary files of certain types

Published 2026-08-28 by GitHub_M

CVE-2026-55785CWE-208CWE-385CWE-532

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Published 2026-08-28 by GitHub_M

CVE-2026-55784CWE-362

free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

Published 2026-08-28 by GitHub_M

CVE-2026-55779CWE-79

Silverstripe Versioned: XSS in archive admin restore

Published 2026-08-28 by GitHub_M

Load more ↓