2026

The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) s

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting

The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during fil

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass

The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly treats character and block device

The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are init

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -

The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during f

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils coreutils during cross-device m

The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory wit

A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mkfifo utility of uutils coreutils. The utility cre

The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries.

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. Wh

A vulnerability in the rm utility of uutils coreutils allows a bypass of the --preserve-root protection. The implementat

The sort utility in uutils coreutils is vulnerable to a process panic when using the --files0-from option with inputs co

The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison

The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. Th

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when usin

The dd utility in uutils coreutils suppresses errors during file truncation operations by unconditionally calling Result

The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is speci

The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp,

A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files. Wh

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit co

The recursive mode (-R) of the chmod utility in uutils coreutils incorrectly handles exit codes when processing multiple

A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. Th

DDEV is an open-source tool for running local web development environments for PHP and Node.js. Versions prior to 1.25.2

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.3 before 18.9.6, 18.10 before 18.10.4, and

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.2 before 18.9.6, 18.10 before 18.10.4, and

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.2 before 18.9.6, 18.10 before 18.10.4, and

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.4 before 18.9.6, 18.10 before 18.10.4, and

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.6 before 18.9.6, 18.10 before 18.10.4, and

A reflected cross-site scripting (XSS) vulnerability in the AdvancedSearch functionality of Silverpeas Core before versi

Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affect

Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to

ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and exec

Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplyi

ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrar

ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction point

UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image

Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execu

Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the app

Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism

MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local att

Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allo

An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix

A flaw was found in libefiboot, a component of efivar. The device path node parser in libefiboot fails to validate that

A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially craf

A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from