Vulnerability index

Browse CVEs

1,782 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory LeakCWE-401 × clear
Netty HIGH 7.5
CVE-2026-48006

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the Redis…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-12
Netty HIGH 7.5
CVE-2026-48043

Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-12
Netty HIGH 7.5
CVE-2026-48059

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAPro…

Fix: 4.1.135 / 4.2.15+
Fix from $1,950 2026-06-12
Unclassified MEDIUM 6.3
CVE-2026-20746

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent l…

Mitigation only
Fix from $1,600 2026-06-12
Unclassified HIGH 7.5
CVE-2026-46679

libp2p is a JavaScript Implementation of libp2p networking stack. Prior to version 15.0.23, three cooperating omissions in @libp2p/gossipsub allow an…

Mitigation only
Fix from $1,950 2026-06-10
Linux Kernel MEDIUM 5.5
CVE-2026-52904

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix nvkm_device leak on aperture removal failure When aperture_rem…

Fix: 6.12.86 / 6.18.27+
Fix from $1,600 2026-06-09
Spring Framework MEDIUM 5.9
CVE-2026-41840

Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests. Affected versions: Spring Framework…

Fix: 5.3.49 / 6.1.28+
Fix from $1,600 2026-06-09
Linux Kernel HIGH 7.0
CVE-2026-46309

In the Linux kernel, the following vulnerability has been resolved: drm/xe/uapi: Reject coh_none PAT index for CPU cached memory in madvise Add val…

Fix: 6.18.32 / 7.0.9+
Fix from $1,950 2026-06-08
Linux Kernel HIGH 8.2
CVE-2026-46303

In the Linux kernel, the following vulnerability has been resolved: isofs: validate Rock Ridge CE continuation extent against volume size rock_cont…

Fix: 2.6.33 / 3.3+
Fix from $1,950 2026-06-08
Linux Kernel CRITICAL 9.8
CVE-2026-46289

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract_kvec_to_sg Patch series "Fi…

Fix: 6.6.140 / 6.12.88+
Fix from $2,300 2026-06-08
Ebpf Instrumentation MEDIUM 5.5
CVE-2026-45682

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. Prior to version 0.9.0, the custom CappedConcur…

Fix: 0.9.0+
Fix from $1,600 2026-06-02
Ubuntu Linux MEDIUM 5.5
CVE-2026-47326

Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications. The bug can be tr…

Patch available
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46224

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure When drm_gpu…

Fix: 6.18.32 / 7.0.9+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46228

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix devres lifetime USB drivers bind to USB interfaces and any devi…

Fix: 6.18.32 / 7.0.9+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46221

In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzall…

Fix: 6.18.32 / 7.0.9+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46207

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linea…

Fix: 6.12.90 / 6.18.32+
Fix from $1,600 2026-05-28
Linux Kernel HIGH 7.8
CVE-2026-46201

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() When xe_dma_buf_in…

Fix: 6.12.90 / 6.18.32+
Fix from $1,950 2026-05-28
Linux Kernel HIGH 7.8
CVE-2026-46178

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() Sashiko points ou…

Fix: 5.10.258 / 5.15.209+
Fix from $1,950 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46182

In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace The hdr vari…

Fix: 6.18.30 / 7.0.7+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46171

In the Linux kernel, the following vulnerability has been resolved: riscv: kvm: fix vector context allocation leak When the second kzalloc (host_co…

Fix: 6.18.30 / 7.0.7+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46147

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() Two bug…

Fix: 6.18.30 / 7.0.7+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46151

In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix heap leak in IEEE 1284 device ID via short response usblp_ctrl_…

Fix: 5.10.258 / 5.15.209+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46141

In the Linux kernel, the following vulnerability has been resolved: powerpc/xive: fix kmemleak caused by incorrect chip_data lookup The kmemleak re…

Fix: 6.18.30 / 7.0.7+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46143

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens As prepare can be called …

Fix: 6.1.175 / 6.6.140+
Fix from $1,600 2026-05-28
Linux Kernel MEDIUM 5.5
CVE-2026-46109

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 (…

Fix: 5.10.258 / 5.15.209+
Fix from $1,600 2026-05-28
Ultrajson HIGH 7.5
CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump() writes to a file-lik…

Fix: 5.12.1+
Fix from $1,950 2026-05-27
Linux Kernel HIGH 7.5
CVE-2026-46102

In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser i…

Fix: 5.10.258 / 5.15.209+
Fix from $1,950 2026-05-27
Linux Kernel MEDIUM 5.5
CVE-2026-46103

In the Linux kernel, the following vulnerability has been resolved: can: ucan: fix devres lifetime USB drivers bind to USB interfaces and any devic…

Fix: 5.10.259 / 5.15.210+
Fix from $1,600 2026-05-27
Linux Kernel MEDIUM 5.5
CVE-2026-46087

In the Linux kernel, the following vulnerability has been resolved: mm/damon/stat: fix memory leak on damon_start() failure in damon_stat_start() D…

Fix: 6.18.27 / 7.0.4+
Fix from $1,600 2026-05-27
Linux Kernel MEDIUM 5.5
CVE-2026-46083

In the Linux kernel, the following vulnerability has been resolved: spi: fix resource leaks on device setup failure Make sure to call controller cl…

Fix: 5.5 / 5.11+
Fix from $1,600 2026-05-27