Sensitive Information in Resource Not Removed Before Reuse

Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests fr…CVE-2020-27218The Eclipse Foundation · 8.3% likely

   Eclipse Foundation

2. In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory. This method is intended to be safe and only r…CVE-2018-7166The Node.js Project · 3.3% likely

   Node.js

3. Wasmtime vulnerable to data leakage between instances in the pooling allocatorCVE-2022-39393bytecodealliance · CVSS 8.6 · 0.9% likely

   Bytecodealliance

4. SixLabors.ImageSharp vulnerable to data leakageCVE-2024-32036SixLabors · CVSS 5.3 · 0.6% likely

   SixLabors

5. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable. Upon returning from the initial checks, there are condition…CVE-2026-5795Eclipse Foundation · CVSS 7.4 · 0.5% likely

   Eclipse Foundation

6. Lyric Video Creator 2.1 Denial of Service via MP3 FileCVE-2019-25560Lyricvideocreator · CVSS 7.5 · 0.5% likely
7. CMSE secure state may leak from stack to floating-point registersCVE-2024-7883Arm Ltd · CVSS 3.7 · 0.5% likely

   Arm

8. moodle: HTTP authorization header is preserved between "emulated redirects"CVE-2024-38275Moodle · CVSS 7.5 · 0.4% likely

   Moodle

9. Scriban before 7.0.0 Authorization Bypass via Stale Include CacheCVE-2026-74791scriban · CVSS 8.6 · 0.4% likely

   Scriban

10. Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt FrameworkCVE-2026-114366qt · CVSS 2.3 · 0.4% likely

    Qt

11. Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1CVE-2026-114501python-pillow · CVSS 6.3 · 0.4% likely

    Python-Pillow

12. Untargeted information leak in Bolt protocol handshakeCVE-2025-11602neo4j · CVSS 6.3 · 0.3% likely

    Neo4j

13. MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's dataCVE-2026-119179MongoDB · CVSS 7 · 0.3% likely

    MongoDB

14. In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.CVE-2026-74250OpenStack · CVSS 6.3 · 0.3% likely

    Openstack

15. ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflateCVE-2026-106111SixLabors · CVSS 5.9 · 0.3% likely

    SixLabors

16. Information Disclosure in GlobalProtect AgentCVE-2019-1573Palo Alto Networks · CVSS 2.5 · 0.3% likely

    Palo Alto Networks

17. Lack of buffer clearing before reuse may result in incorrect system behavior.CVE-2025-2522Honeywell · CVSS 6.5 · 0.3% likely

    Honeywell

18. A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v…CVE-2023-3006Linux · CVSS 5.5 · 0.3% likely

    Linux

19. SD-330AC and AMC Manager provided by silex technology, Inc. contain an issue with a sensitive information in resource not removed before reuse. An attacker may login to the device…CVE-2026-32960silex technology, Inc. · CVSS 6.5 · 0.3% likely

    silex technology, Inc.

20. A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionality was found in the…CVE-2023-1637Linux · CVSS 5.5 · 0.2% likely

    Linux

21. Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-13108IBM · CVSS 5.5 · 0.2% likely

    IBM

22. pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)CVE-2026-107315pgjdbc · CVSS 5.3 · 0.2% likely

    Pgjdbc

23. Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable…CVE-2024-21850Intel(R) TDX Seamldr module software · CVSS 6 · 0.2% likely
24. AnyBurn 4.3 x86 Denial of Service via Image ConversionCVE-2019-25657Anyburn · CVSS 5.5 · 0.2% likely
25. The AppsAnywhere macOS client-privileged helper can be tricked into executing arbitrary commands with elevated permissions by a local user process.CVE-2023-41138AppsAnywhere · CVSS 7.5 · 0.2% likely
26. MediaMonkey 4.1.23 Denial of Service via Malformed URLCVE-2019-25571Mediamonkey · CVSS 6.2 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.