Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: nvme-pci: ensure we're polling a polled queue A user can change the polled queue count at run time.Apr 22, 2026
- Medium4.8Vulnerability in Spring Spring Security.EPSS 0.1%Apr 21, 2026
- High8.8OpenClaw before 2026.3.31 contains a time-of-check-time-of-use race condition in the remote filesystem bridge readFile function that allows sandbox escape.Apr 21, 2026
- High7.1OpenProject is open-source, web-based project management software.Apr 20, 2026
- Low2.1When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1.Apr 20, 2026
- Medium5.4A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Admin…Apr 16, 2026
- Medium5.4An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of r…EPSS 0.1%Apr 16, 2026
- Medium6.5Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to enforce atomic single-use consumption of guest magic link tokens,…Apr 15, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Function Discovery Service (fdwsd.dll) allows an authorized attacker to…EPSS 0.2%Apr 14, 2026
- High7.0Time-of-check time-of-use (toctou) race condition in Windows LUAFV allows an authorized attacker to elevate privileges locally.EPSS 0.2%Apr 14, 2026
- Low3.1EspoCRM is an open source customer relationship management application.Apr 13, 2026
- Low2.3OpenClaw before 2026.3.22 contains a policy bypass vulnerability where queued node actions are not revalidated against current command policy when delivered.Apr 10, 2026
- High7.0Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()EPSS 0.1%Apr 9, 2026
- Medium4.2Homarr is an open-source dashboard.Apr 6, 2026
- Medium4.7util-linux is a random collection of Linux utilities.Apr 3, 2026
- High7.5A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute a…Apr 2, 2026
- Medium5.8The Claude SDK for Python provides access to the Claude API from Python applications.Mar 31, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 31, 2026
- Medium5.8OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a…Mar 31, 2026
- Medium5.8OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the fin…Mar 31, 2026
- Medium5.3OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases.Mar 31, 2026
- Medium5.8A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges tha…Mar 30, 2026
- Medium5.8OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path d…Mar 29, 2026
- High7.0OpenClaw before 2026.3.11 contains an approval integrity vulnerability allowing attackers to execute rewritten local code by modifying scripts between approval and exe…Mar 29, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 24, 2026