Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file creation.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium4.7A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.5The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device nodes as stream sources rather than preserving them.Check if you run itEPSS 0.18%Apr 22, 2026
- Medium4.7The cp utility in uutils coreutils is vulnerable to an information disclosure race condition.Check if you run itEPSS 0.09%Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -D flag.Check if you run itEPSS 0.11%Apr 22, 2026
- Medium6.3The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file installation.Check if you run itEPSS 0.12%Apr 22, 2026
- Medium4.7A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils coreutils during cross-device moves.Check if you run itEPSS 0.11%Apr 22, 2026
- Low3.3The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions (typically 0755) be…Check if you run itEPSS 0.10%Apr 22, 2026
- High7.0A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils.Check if you run itEPSS 0.15%Apr 22, 2026
- Medium4.2The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium6.6The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails.Check if you run itEPSS 0.13%Apr 22, 2026
- High7.7A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection.Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.5The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium4.4The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations.Check if you run itEPSS 0.14%Apr 22, 2026
- Low3.3The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines.Check if you run itEPSS 0.18%Apr 22, 2026
- Medium5.3A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option.Check if you run itEPSS 0.10%Apr 22, 2026
- Low3.3The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts.Check if you run itEPSS 0.11%Apr 22, 2026
- Low3.3The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter.Check if you run itEPSS 0.14%Apr 22, 2026
- Low3.3The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable.Check if you run itEPSS 0.13%Apr 22, 2026
- High7.1A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files.Check if you run itEPSS 0.17%Apr 22, 2026
- Medium5.5A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.5The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files.Check if you run itEPSS 0.14%Apr 22, 2026
- High7.3A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism.Check if you run itEPSS 0.18%Apr 22, 2026
- Critical9.1DDEV is an open-source tool for running local web development environments for PHP and Node.js.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before version 6.4.6 allows attackers to execute arbitrary…Check if you run itEPSS 0.19%Apr 22, 2026
Sort