Vulnerability index

Browse CVEs

10,000+ matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Out-of-bounds WriteCWE-787 × clear
Unclassified MEDIUM 5.3
CVE-2026-62291

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 au…

Fix unknown
Fix from $4,000 2026-08-18
Unclassified MEDIUM 6.4
CVE-2026-12520

The Sierra Wireless HL7800 cellular modem driver (drivers/modem/vendor_standalone/hl7800.c, located at drivers/modem/hl7800.c in v4.4.0 and earlier) …

Fix unknown
Fix from $4,000 2026-08-18
Unclassified CRITICAL 9.3
CVE-2026-50161

libre is a generic library for real-time communications with asynchronous input and output support. Prior to 4.8.1, the websock_decode() function in …

Fix unknown
Fix from $5,750 2026-08-18
Unclassified CRITICAL 9.8
CVE-2026-67271

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentiall…

Fix unknown
Fix from $5,750 2026-08-18
Unclassified HIGH 7.8
CVE-2026-54758

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the expandNppEnvironmentStrs function in PowerEditor/src/WinControls/StaticDi…

Fix unknown
Fix from $4,900 2026-08-17
Unclassified HIGH 8.9
CVE-2026-12553

HP has identified a potential vulnerability in HP Web Jetadmin (WJA) that may allow an unauthenticated actor to read from or write to arbitrary files…

Fix unknown
Fix from $4,900 2026-08-17
Unclassified MEDIUM 5.0
CVE-2026-12519

The WNC-M14A2A LTE-M modem driver mishandles unsolicited %NOTIFYEV: events in on_cmd_socknotifyev() (drivers/modem/vendor_standalone/wncm14a2a.c). Th…

Fix unknown
Fix from $4,000 2026-08-17
Unclassified CRITICAL 9.8
CVE-2026-73193

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by pr…

Fix unknown
Fix from $5,750 2026-08-15
Unclassified CRITICAL 9.1
CVE-2026-73194

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. …

Fix unknown
Fix from $5,750 2026-08-15
Unclassified HIGH 7.3
CVE-2026-13196

Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in ver…

No fix yet
Fix from $4,900 2026-08-14
I HIGH 7.8
CVE-2026-18511

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, …

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 7.5
CVE-2026-18077

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 8.6
CVE-2026-17502

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 8.2
CVE-2026-17272

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.

No fix yet
Fix from $4,900 2026-08-13
I HIGH 8.8
CVE-2026-17223

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.

No fix yet
Fix from $4,900 2026-08-13
I HIGH 7.5
CVE-2026-18846

IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the ho…

No fix yet
Fix from $4,900 2026-08-13
I CRITICAL 9.8
CVE-2026-17206

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

No fix yet
Fix from $5,750 2026-08-13
I HIGH 8.8
CVE-2026-16975

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.

No fix yet
Fix from $4,900 2026-08-13
I HIGH 7.5
CVE-2026-16982

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow.

No fix yet
Fix from $4,900 2026-08-13
I HIGH 8.8
CVE-2026-17029

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.

No fix yet
Fix from $4,900 2026-08-13
I HIGH 7.5
CVE-2026-16887

IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

No fix yet
Fix from $4,900 2026-08-13
I MEDIUM 6.5
CVE-2026-16929

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow.

No fix yet
Fix from $4,000 2026-08-13
I CRITICAL 9.1
CVE-2026-16815

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-b…

No fix yet
Fix from $5,750 2026-08-13
I MEDIUM 6.5
CVE-2026-16692

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 8.8
CVE-2026-73514

The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a da…

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 8.2
CVE-2026-70461

rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-control…

No fix yet
Fix from $4,900 2026-08-13
Unclassified HIGH 8.2
CVE-2026-70456

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent…

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-70457

rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a…

No fix yet
Fix from $4,000 2026-08-13
Unclassified HIGH 8.2
CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on…

No fix yet
Fix from $4,900 2026-08-13
Unclassified MEDIUM 6.5
CVE-2026-53792

rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger m…

No fix yet
Fix from $4,000 2026-08-13