Skip to content
Noroxi

CWE-838 · 15 records

Inappropriate Encoding for Output Context

CVEs in this class

15 records

  • CVE-2019-18981
    39Monitor

    Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification.

    CriticalCVSS 9.8No exploitEPSS 1%

    pimcore · pimcoreNov 15, 2019

  • CVE-2025-4052
    39Monitor

    Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in

    CriticalCVSS 9.8No exploitEPSS 0%

    google · chromeMay 5, 2025

  • CVE-2019-6110
    34Monitor

    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker)

    MediumCVSS 6.8Proof of conceptEPSS 24%

    openbsd · opensshJan 31, 2019

  • CVE-2018-9862
    31Monitor

    util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an

    HighCVSS 7.8No exploitEPSS 0%

    hyper · runvApr 9, 2018

  • CVE-2024-11702
    30Monitor

    Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-base

    HighCVSS 7.5No exploitEPSS 0%

    mozilla · firefoxNov 26, 2024

  • CVE-2026-114650
    27Monitor

    Plaintext exposure of encrypted fields via ANSI code-page corruption of database name

    MediumCVSS 6.9No exploitEPSS 0%

    mongodb · c# driverOct 22, 2026

  • CVE-2023-6512
    26Monitor

    Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the co

    MediumCVSS 6.5No exploitEPSS 1%

    google · chromeDec 5, 2023

  • CVE-2026-55858
    23Monitor

    MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

    MediumCVSS 5.9No exploitEPSS 0%

    mariadb-corporation · mariadb-connector-jAug 28, 2026

  • CVE-2026-119281
    23Monitor

    MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing

    MediumCVSS 5.9No exploitEPSS 0%

    mariadb-corporation · mariadb-connector-j2 days ago

  • CVE-2023-5770
    21Monitor

    HTML injection in email body through email subject

    MediumCVSS 5.4No exploitEPSS 0%

    proofpoint · enterprise protectionJan 9, 2024

  • CVE-2020-7292
    17Monitor

    Web Gateway (MWG) - Inappropriate Encoding for output context

    MediumCVSS 4.3No exploitEPSS 0%

    mcafee · web gatewayJul 15, 2020

  • CVE-2023-3735
    17Monitor

    Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate se

    MediumCVSS 4.3No exploitEPSS 0%

    google · chromeAug 1, 2023

  • CVE-2024-34006
    17Monitor

    moodle: unsanitized HTML in site log for config_log_created

    MediumCVSS 4.3No exploitEPSS 0%

    moodle · moodleMay 31, 2024

  • CVE-2020-29135
    16Monitor

    cPanel before 90.0.17 has multiple instances of URL parameter injection (SEC-567).

    MediumCVSS 4.1No exploitEPSS 0%

    cpanel · cpanelNov 26, 2020

  • CVE-2026-47079
    8Monitor

    Round-trip Corruption via Improper Entity Escaping in xml_builder

    LowCVSS 2.1No exploitEPSS 0%

    joshnuss · xml_builderAug 21, 2026

All vulnerability classes