Known Vulnerabilities for Scram by Ongres
Listed below are 10 of the newest known vulnerabilities associated with "Scram" by "Ongres".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-54291 json | pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can b... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-53712 json | SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer ... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-42256 json | Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. From versions 0.4.0 to before 0.4.... | Not Provided | 2026-05-09 | 2026-05-11 |
| CVE-2026-42198 json | pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a cli... | Not Provided | 2026-04-29 | 2026-07-15 |
| CVE-2026-41319 json | MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versi... | Not Provided | 2026-04-24 | 2026-04-25 |
| CVE-2026-40542 json | Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-2... | Not Provided | 2026-04-22 | 2026-07-15 |
| CVE-2026-33603 json | Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding. This requi... | Not Provided | 2026-05-12 | 2026-05-12 |
| CVE-2026-10143 json | kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicio... | Not Provided | 2026-06-10 | 2026-07-17 |
| CVE-2026-6665 json | The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of... | Not Provided | 2026-05-09 | 2026-05-12 |
| CVE-2026-6664 json | An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a cra... | Not Provided | 2026-05-09 | 2026-05-11 |