Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Check if you run itEPSS 0.31%Apr 23, 2026
- High7.5CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.Check if you run itEPSS 0.51%Apr 23, 2026
- High7.5Froxlor is open source server administration software.Check if you run itEPSS 0.52%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Patch nowKEVEPSS 3.22%Apr 23, 2026
- High8.7A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier.Check if you run itEPSS 0.71%Apr 23, 2026
- Medium4.8IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege escalation, allowing unauthorized users to perform administrative operations…Check if you run itEPSS 0.19%Apr 23, 2026
- High8.4radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by cra…Check if you run itEPSS 1.72%Apr 22, 2026
- Critical9.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.60%Apr 22, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins.Check if you run itEPSS 0.32%Apr 22, 2026
- Critical9.3Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives.Check if you run itEPSS 0.65%Apr 22, 2026
- Critical9.3Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executa…Check if you run itEPSS 4.43%Apr 22, 2026
- High8.8Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php…Check if you run itEPSS 3.07%Apr 22, 2026
- Critical9.8Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.10, L…Check if you run itEPSS 0.68%Apr 22, 2026
- Low3.3A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during the parsing phase rather than at the execution phase.Check if you run itEPSS 0.16%Apr 22, 2026
- Low3.3A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when utilizing the -S (split-string) option.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.8A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutils coreutils during recursive operations.Check if you run itEPSS 0.11%Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutils coreutils.Check if you run itEPSS 0.09%Apr 22, 2026
- Medium5.5A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms (e.…Check if you run itEPSS 0.14%Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils coreutils during cross-device operations.Check if you run itEPSS 0.10%Apr 22, 2026
- Low3.6The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-descriptor-relative sys…Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.3A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -D flag.Check if you run itEPSS 0.11%Apr 22, 2026
- Medium6.3The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file installation.Check if you run itEPSS 0.11%Apr 22, 2026
- Medium4.7A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils coreutils during cross-device moves.Check if you run itEPSS 0.09%Apr 22, 2026
- High7.0A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils.Check if you run itEPSS 0.12%Apr 22, 2026
- Medium6.6The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails.Check if you run itEPSS 0.13%Apr 22, 2026