Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

HIGH 7.5 CVE-2026-40395 Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The headerplus.write_req0() functi… Varnish Enterprise after 6.0.15 Fix from $1,9502026-04-12 HIGH 7.5 CVE-2026-40394 Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amoun… Varnish Enterprise after 6.0.15 Fix from $1,9502026-04-12 CRITICAL 9.8 CVE-2026-34475 Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/… Varnish Enterprise 8.0.1+ Fix from $2,3002026-03-27 HIGH 7.5 CVE-2025-30347 Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral… Varnish Enterprise Mitigation only Fix from $1,9502025-03-21 MEDIUM 6.5 CVE-2023-41104 libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading … Varnish Enterprise 1.0.3 / 6.0.11+ Fix from $1,6002023-08-23