Skip to content
Noroxi

CWE-226 · 36 records

Sensitive Information in Resource Not Removed Before Reuse

CVEs in this class

36 records

  • CVE-2026-74791
    36Monitor

    Scriban before 7.0.0 Authorization Bypass via Stale Include Cache

    CriticalCVSS 9.2No exploitEPSS 0%

    scriban · scribanAug 16, 2026

  • CVE-2022-39393
    34Monitor

    Wasmtime vulnerable to data leakage between instances in the pooling allocator

    HighCVSS 8.6No exploitEPSS 0%

    bytecodealliance · wasmtimeNov 10, 2022

  • CVE-2019-25560
    34Monitor

    Lyric Video Creator 2.1 Denial of Service via MP3 File

    HighCVSS 8.7No exploitEPSS 0%

    lyricvideocreator · lyric video creatorMar 21, 2026

  • CVE-2024-21850
    33Monitor

    Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow a

    HighCVSS 8.3No exploitEPSS 0%

    Nov 13, 2024

  • CVE-2026-13585
    32Monitor

    Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Cont

    HighCVSS 8.2Proof of conceptEPSS 0%

    asus · system control interface v3Jul 14, 2026

  • CVE-2018-7166
    31Monitor

    In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory.

    HighCVSS 7.5No exploitEPSS 3%

    nodejs · node.jsAug 21, 2018

  • CVE-2025-0647
    31Monitor

    In certain Arm CPUs, a CPP RCTX instruction executed on one Processing Element (PE) may inhibit TLB invalidation when a TLBI is issued to th

    HighCVSS 7.9No exploitEPSS 0%

    arm · c1-ultra firmwareJan 14, 2026

  • CVE-2024-38275
    30Monitor

    moodle: HTTP authorization header is preserved between "emulated redirects"

    HighCVSS 7.5No exploitEPSS 0%

    moodle · moodleJun 18, 2024

  • CVE-2025-13108
    30Monitor

    Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows

    HighCVSS 7.5No exploitEPSS 0%

    ibm · db2 merge backupFeb 17, 2026

  • CVE-2026-5795
    29Monitor

    In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.

    HighCVSS 7.4No exploitEPSS 0%

    eclipse · jettyApr 8, 2026

  • CVE-2026-32960
    28Monitor

    SD-330AC and AMC Manager provided by silex technology, Inc.

    HighCVSS 7.1No exploitEPSS 0%

    silextechnology · sd-330ac firmwareApr 20, 2026

  • CVE-2019-25657
    27Monitor

    AnyBurn 4.3 x86 Denial of Service via Image Conversion

    MediumCVSS 6.8No exploitEPSS 0%

    anyburn · anyburnApr 5, 2026

  • CVE-2019-25571
    27Monitor

    MediaMonkey 4.1.23 Denial of Service via Malformed URL

    MediumCVSS 6.9No exploitEPSS 0%

    ventismedia · mediamonkeyMar 21, 2026

  • CVE-2019-25563
    27Monitor

    PCHelpWareV2 1.0.0.5 Denial of Service via SC Creation

    MediumCVSS 6.9No exploitEPSS 0%

    uvnc · pchelpwarev2Mar 21, 2026

  • CVE-2019-25645
    27Monitor

    WinAVI iPod 3GP MP4 PSP Converter 4.4.2 Denial of Service

    MediumCVSS 6.9No exploitEPSS 0%

    winavi · winavi ipod/3gp/mp4/psp converterMar 24, 2026

  • CVE-2019-25553
    27Monitor

    CEWE PHOTO IMPORTER 6.4.3 Denial of Service via Malformed Image

    MediumCVSS 6.9No exploitEPSS 0%

    cewe · photo importerMar 21, 2026

  • CVE-2019-25617
    27Monitor

    Ease Audio Converter 5.30 Denial of Service via Audio Cutter

    MediumCVSS 6.9No exploitEPSS 0%

    audiotool · ease audio converterMar 22, 2026

  • CVE-2024-32036
    26Monitor

    SixLabors.ImageSharp vulnerable to data leakage

    MediumCVSS 6.5No exploitEPSS 0%

    sixlabors · imagesharpApr 15, 2024

  • CVE-2025-2522
    26Monitor

    Lack of buffer clearing before reuse may result in incorrect system behavior.

    MediumCVSS 6.5No exploitEPSS 0%

    honeywell · c300 pcnt02Jul 10, 2025

  • CVE-2023-41138
    26Monitor

    The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user p

    MediumCVSS 6.7No exploitEPSS 0%

    appsanywhere · appsanywhere clientNov 9, 2023

  • CVE-2026-114501
    25Monitor

    Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1

    MediumCVSS 6.3No exploitEPSS 0%

    python-pillow · pillow4 days ago

  • CVE-2025-11602
    25Monitor

    Untargeted information leak in Bolt protocol handshake

    MediumCVSS 6.3No exploitEPSS 0%

    neo4j · enterprise editionOct 31, 2025

  • CVE-2026-74250
    25Monitor

    In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing t

    MediumCVSS 6.3No exploitEPSS 0%

    openstack · ironicAug 14, 2026

  • CVE-2023-3006
    22Monitor

    A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereO

    MediumCVSS 5.5No exploitEPSS 0%

    linux · linux kernelMay 31, 2023

  • CVE-2023-1637
    22Monitor

    A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management

    MediumCVSS 5.5No exploitEPSS 0%

    linux · linux kernelMar 27, 2023

All vulnerability classes