Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences.Check if you run itEPSS 0.17%Apr 22, 2026
- Medium6.6The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries.Check if you run itEPSS 0.16%Apr 22, 2026
- Medium5.6A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the current directory.Check if you run itEPSS 0.17%Apr 22, 2026
- Low3.6The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using file-descriptor-relative sys…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium4.4The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium4.7The cp utility in uutils coreutils is vulnerable to an information disclosure race condition.Check if you run itEPSS 0.09%Apr 22, 2026
- Medium4.2The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium6.6The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium5.5The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs containing non-UTF-8 filenames.Check if you run itEPSS 0.13%Apr 22, 2026
- Medium4.4The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.3A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option.Check if you run itEPSS 0.10%Apr 22, 2026
- Low3.3The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result::ok() on truncation attempts.Check if you run itEPSS 0.11%Apr 22, 2026
- Low3.3The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is specified as the delimiter.Check if you run itEPSS 0.14%Apr 22, 2026
- Low3.3The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable.Check if you run itEPSS 0.13%Apr 22, 2026
- High7.1A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files.Check if you run itEPSS 0.17%Apr 22, 2026
- Medium5.5A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.5The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple files.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.1Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Fo…Check if you run itEPSS 0.20%Apr 22, 2026
- Critical9.3ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.9Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through th…Check if you run itEPSS 0.18%Apr 22, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Medium5.1ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encod…Check if you run itEPSS 0.23%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.9UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium6.9Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessiv…Check if you run itEPSS 0.18%Apr 22, 2026
Sort