CWE-838

CWE-838 · 3 records · 3 with a public proof-of-concept

Records the NVD classes under CWE-838, highest CVSS first.

  1. MEDIUM 5.9CVE-2026-119281public PoC2026-10-29

    MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0.0 until 3.3.7, 3.4.5, and 3.5.11, the connector assumed result bytes were UTF-8 but guarded only changes to character_set_client. It did not reject n…

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 5.9CVE-2026-114650public PoC2026-10-22

    A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side field-level encryption to be written without encryption. Under certain platform text-encoding configurations, an internal name conversion loses…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-84463public PoC2026-09-25

    Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, a user with Knowledge Base editing rights for a category can embed a video widget in a published answer with a specially crafted value. When the answer is rendered, that value …

    AI risk analysis on Exploit-DB.ai →