MC
Vendor
Mchange
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-27727 | MC Mchange Commons Java Mchange | 9.8 | Feb 25 | mchange-commons-java: Remote Code Execution via JNDI Reference Resolution |
| CVE-2019-5427 | C3 C3p0 Mchange | 7.5 | Apr 22 | c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading… |
| CVE-2018-20433 | C3 C3p0 Mchange | 9.8 | Dec 24 | c3p0 0.9.5.2 allows XXE in extractXmlConfigFromInputStream in com/mchange/v2/c3p0/cfg/C3P0ConfigXmlUtils.java during initialization |