Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped, so that multiple modifications done under the s…Mar 23, 2026
- Medium5.9OpenClaw versions prior to 2026.2.25 contain a time-of-check-time-of-use vulnerability in approval-bound system.run execution where the cwd parameter is validated at a…Mar 21, 2026
- Medium4.4OpenClaw versions prior to 2026.3.1 fail to pin executable identity for non-path-like argv[0] tokens in system.run approvals, allowing post-approval executable rebind attacks.Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.3.2 contain a race condition vulnerability in ZIP extraction that allows local attackers to write files outside the intended destination directory.Mar 19, 2026
- Low2.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesys…Mar 18, 2026
- Medium5.6Time-of-check time-of-use race condition in the UEFI PdaSmm module for some Intel(R) reference platforms may allow an information disclosure.EPSS 0.1%Mar 10, 2026
- High7.1Time-of-check time-of-use race condition in the WheaERST SMM module for some Intel(R) reference platforms may allow an escalation of privilege.EPSS 0.1%Mar 10, 2026
- Medium5.9Sylius is an Open Source eCommerce Framework on Symfony.Mar 10, 2026
- High7.3If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated right…Mar 10, 2026
- Medium6.3ImageMagick is free and open-source software used for editing and manipulating digital images.Mar 10, 2026
- Medium6.3CoreDNS is a DNS server that chains plugins.Mar 6, 2026
- High7.0Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component.Mar 5, 2026
- Medium4.4In MDDP, there is a possible system crash due to a race condition.EPSS 0.1%Mar 2, 2026
- Medium6.4In MAE, there is a possible out of bounds write due to a race condition.EPSS 0.1%Mar 2, 2026
- Low2.0A time-of-create-to-time-of-use (TOCTOU) vulnerability lets recently deleted-then-recreated data sources be re-deleted without permission to do so.EPSS 0.2%Feb 25, 2026
- Medium6.9Craft is a content management system (CMS).Feb 24, 2026
- High7.0Craft is a content management system (CMS).Feb 24, 2026
- Medium5.8OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Feb 21, 2026
- Medium4.4A path traversal vulnerability has been reported to affect several product versions.EPSS 0.1%Jan 2, 2026
- High7.8Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition VulnerabilityKEVEPSS 1.3%Jul 22, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: Prevent parser TCAM memory corruption Protect the parser TCAM/SRAM memory, and the cach…EPSS 0.2%Apr 16, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityKEVEPSS 1.6%Mar 4, 2025
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 problems during shutdown with the…EPSS 0.2%Oct 21, 2024
- High7.0In the Linux kernel, the following vulnerability has been resolved: exec: Fix ToCToU between perm check and set-uid/gid usage When opening a file for exec via do_filp_open(), permiEPSS 0.2%Aug 21, 2024