Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.7A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a rem…May 21, 2026
- Medium5.9Undefined behavior may result due to a race condition leading to a use-after-free violation.May 20, 2026
- High7.3Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outsid…May 20, 2026
- High7.2Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink…May 20, 2026
- High7.0VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary.May 15, 2026
- Low2.0A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked ioctl handl…EPSS 0.1%May 15, 2026
- Low1.8A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition potentially leading to a…May 15, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.May 14, 2026
- Medium5.1csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.May 13, 2026
- High7.0Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.May 12, 2026
- Medium6.3FastGPT is an AI Agent building platform.May 8, 2026
- High7.2n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.May 8, 2026
- High7.4Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation.May 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rust_binder: avoid reading the written value in offsets array When sending a transaction, its offse…May 8, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink During async unlink, we drop the counter before we r…May 8, 2026
- Medium5.3Due to multiple time-of-check time-of-use race conditions in the resource count check and increment logic, as well as missing validations, users of the platform are ab…May 8, 2026
- High7.8The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel m…May 8, 2026
- High8.1The base directory ( ) used by the Spring Cloud Config Server to clone Git repositories to is susceptible to time-of-check-time-of-use (TOCTOU) attacks.May 7, 2026
- High8.3OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intend…May 6, 2026
- High8.4OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside t…May 6, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through…May 6, 2026
- Medium5.4Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- Low1.2A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.May 5, 2026
- Low2.0OpenClaw before 2026.4.10 contains a time-of-check-time-of-use vulnerability in the validateScriptFileForShellBleed function that allows local attackers to bypass work…May 5, 2026
- Medium4.1A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices.May 5, 2026