Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local…May 4, 2026
- High7.0Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.May 4, 2026
- Low1.3A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1.May 4, 2026
- Critical9.8AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow.May 1, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format ex…May 1, 2026
- Medium6.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Apr 29, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: openvswitch: defer tunnel netdev_put to RCU release ovs_netdev_tunnel_destroy() may run after NETDE…Apr 25, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: smb: client: make use of smbdirect_socket.recv_io.credits.available The logic off managing recv cre…Apr 24, 2026
- Medium5.4OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows.Apr 23, 2026
- Medium4.3OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses.Apr 23, 2026
- Medium6.3OpenClaw before 2026.3.31 contains a callback origin mutation vulnerability in Plivo voice-call replay that allows attackers to mutate in-process callback origin befor…Apr 23, 2026
- Medium5.8A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutils during recursive operations.Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutils.Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils coreutils during cross-device operations.Apr 22, 2026
- Low3.6The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-descriptor-relative sys…Apr 22, 2026
- Medium6.3The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file creation.Apr 22, 2026
- Medium4.7A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent.Apr 22, 2026
- Medium4.7The cp utility in uutils coreutils is vulnerable to an information disclosure race condition.Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -D flag.Apr 22, 2026
- Medium6.3The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file installation.Apr 22, 2026
- Medium4.7A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils coreutils during cross-device moves.Apr 22, 2026
- Low3.3The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions (typically 0755) be…Apr 22, 2026
- High7.0A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils.Apr 22, 2026
- Medium5.3A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option.Apr 22, 2026
- High8.8PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API.Apr 22, 2026