CWE-127

CVEs per yearBy the year they were published

1. 20201
2. 20211
3. 20241
4. 20253
5. 20265

Newest CVEs

• CVE-2025-71450

  inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop

  benhoyt · inih

  Medium4.8
• CVE-2026-103119

  Apache Tomcat: AJP response mix-up

  Apache Software Foundation · Apache Tomcat

  Critical9.1
• CVE-2026-110758

  Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace

  Text-CSV_XS

  High7.5
• CVE-2026-45683

  OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure

  open-telemetry · opentelemetry-ebpf-instrumentation

  Low3.8
• CVE-2026-5928

  Potential buffer under-read in ungetwc

  The GNU C Library · glibc

  High7.5
• CVE-2025-20359

  Multiple Cisco Products Snort 3 MIME Information Disclosure or Denial of Service Vulnerability

  Cisco · Cisco Cyber Vision

  Medium6.5
• CVE-2025-32050

  Libsoup: integer overflow in append_param_quoted

  libsoup

  Medium5.9
• CVE-2024-10395

  net: lib: http_server: Buffer Under-read

  zephyrproject-rtos · Zephyr

  High8.6
• CVE-2024-25629

  c-ares out of bounds read in ares__read_line()

  c-ares · c-ares

  Medium4.4
• CVE-2020-1918

  In-memory file operations (ie: using fopen on a data URI) did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory…

  Facebook · HHVM

  High7.5

Vendors it comes up for most

1. Apache Software Foundation1
2. Cisco1
3. Dell1
4. Facebook1
5. Red Hat1
6. The GNU C Library1
7. benhoyt1
8. c-ares1
9. open-telemetry1
10. zephyrproject-rtos1