Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3AliasVault is a privacy-first password manager with built-in email aliasing.Oct 15, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Oct 15, 2026
- Medium5.5When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.EPSS 0.1%Oct 15, 2026
- High7.5A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter.EPSS 0.2%Oct 15, 2026
- Medium6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser.EPSS 0.2%Oct 14, 2026
- High8.8A flaw was found in DPDK lib/vhost vhost-crypto.EPSS 0.1%Oct 14, 2026
- Medium6.4A flaw was found in the DPDK vhost library.EPSS 0.1%Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.EPSS 0.1%Oct 14, 2026
- High7.0Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedEPSS 0.1%Oct 13, 2026
- High7.0Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally.EPSS 0.2%Oct 13, 2026
- High7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.EPSS 0.1%Oct 12, 2026
- High8.1Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain mul…Oct 9, 2026
- High8.5PraisonAI: Crawl4AI/Chromium backend is also affected by the SSRF validation bypassOct 7, 2026
- Medium4.3Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated…EPSS 0.2%Oct 6, 2026
- High7.0A flaw was found in the admin backend of gvfs.EPSS 0.2%Sep 10, 2026
- Medium6.8In ONNX before 1.21.0, the 'save_external_data' function builds the external-data file path from the model's external_data location field and opens it for writing with…Aug 21, 2026
- High7.0util-linux is a random collection of Linux utilities.EPSS 0.1%Jun 17, 2026
- High7.8ZDI-26-689: Linux Kernel SCTP Subsystem Race Condition Information Disclosure VulnerabilityEPSS 0.1%May 28, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak btrfs_ioctl_space…EPSS 0.1%May 28, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.May 26, 2026
- High7.8NVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time-of-check time-of-use issue.May 26, 2026
- High7.8A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.May 21, 2026
- High7.8A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local attacker to escalate privileges on affected installations.EPSS 0.3%May 21, 2026
- High7.0A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification could allow a local attacker to escalate privile…EPSS 0.3%May 21, 2026
131 records · page 1 of 6
PreviousNext