Browse All CVEs
9,543 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-35340 |
medium | 5.5 | 0.0014 | 2026-10-29 | A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities | |
CVE-2026-35345 |
medium | 5.3 | 0.0010 | 2026-10-29 | A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sen | |
CVE-2026-35347 |
medium | 4.4 | 0.0014 | 2026-10-29 | The comm utility in uutils coreutils incorrectly consumes data from non-regular file input | |
CVE-2026-35348 |
medium | 5.5 | 0.0013 | 2026-10-29 | The sort utility in uutils coreutils is vulnerable to a process panic when using the --fil | |
CVE-2026-35350 |
medium | 6.6 | 0.0013 | 2026-10-29 | The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ow | |
CVE-2026-35351 |
medium | 4.2 | 0.0013 | 2026-10-29 | The mv utility in uutils coreutils fails to preserve file ownership during moves across di | |
CVE-2026-35354 |
medium | 4.7 | 0.0011 | 2026-10-29 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv utility of uutils c | |
CVE-2026-35355 |
medium | 6.3 | 0.0012 | 2026-10-29 | The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (T | |
CVE-2026-35356 |
medium | 6.3 | 0.0011 | 2026-10-29 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uut | |
CVE-2026-35357 |
medium | 4.7 | 0.0009 | 2026-10-29 | The cp utility in uutils coreutils is vulnerable to an information disclosure race conditi | |
CVE-2026-35358 |
medium | 5.5 | 0.0018 | 2026-10-29 | The cp utility in uutils coreutils, when performing recursive copies (-R), incorrectly tre | |
CVE-2026-35359 |
medium | 4.7 | 0.0013 | 2026-10-29 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutil | |
CVE-2026-35360 |
medium | 6.3 | 0.0010 | 2026-10-29 | The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOC | |
CVE-2026-35361 |
medium | 4.4 | 0.0014 | 2026-10-29 | The mknod utility in uutils coreutils fails to handle security labels atomically by creati | |
CVE-2026-35363 |
medium | 5.6 | 0.0017 | 2026-10-29 | A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mecha | |
CVE-2026-35364 |
medium | 6.3 | 0.0009 | 2026-10-29 | A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils | |
CVE-2026-35365 |
medium | 6.6 | 0.0016 | 2026-10-29 | The mv utility in uutils coreutils improperly handles directory trees containing symbolic | |
CVE-2026-35366 |
medium | 4.4 | 0.0017 | 2026-10-29 | The printenv utility in uutils coreutils fails to display environment variables containing | |
CVE-2026-35369 |
medium | 5.5 | 0.0013 | 2026-10-29 | An argument parsing error in the kill utility of uutils coreutils incorrectly interprets k | |
CVE-2026-35370 |
medium | 4.4 | 0.0011 | 2026-10-29 | The id utility in uutils coreutils miscalculates the groups= section of its output. The im | |
CVE-2026-35372 |
medium | 5.0 | 0.0014 | 2026-10-29 | A logic error in the ln utility of uutils coreutils allows the utility to dereference a sy | |
CVE-2026-35373 |
medium | 5.5 | 0.0012 | 2026-10-29 | A logic error in the ln utility of uutils coreutils causes the program to reject source pa | |
CVE-2026-35374 |
medium | 6.3 | 0.0007 | 2026-10-29 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the split utility of uutil | |
CVE-2026-35376 |
medium | 5.8 | 0.0011 | 2026-10-29 | A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the chcon utility of uutil | |
CVE-2026-35380 |
medium | 5.5 | 0.0016 | 2026-10-29 | A logic error in the cut utility of uutils coreutils causes the program to incorrectly int | |
CVE-2026-28950 |
medium | 6.2 | 0.0288 | 2026-10-29 | A logging issue was addressed with improved data redaction. This issue is fixed in iOS 15. | |
CVE-2026-41459 |
medium | 6.9 | 0.0080 | 2026-10-29 | Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerab | |
CVE-2026-41469 |
medium | 5.1 | 0.0020 | 2026-10-29 | Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestric | |
CVE-2026-34062 |
medium | 5.3 | 0.0030 | 2026-10-29 | nimiq-libp2p is a Nimiq network implementation based on libp2p. Prior to version 1.3.0, `M | |
CVE-2026-34066 |
medium | 5.3 | 0.0024 | 2026-10-29 | nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation. Prior | |
CVE-2026-34067 |
medium | 6.5 | 0.0032 | 2026-10-29 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementa | |
CVE-2026-34068 |
medium | 6.8 | 0.0020 | 2026-10-29 | nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementa | |
CVE-2026-1272 |
medium | 4.3 | 0.0020 | 2026-10-29 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfigurati | |
CVE-2026-1274 |
medium | 4.9 | 0.0030 | 2026-10-29 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a Bypass Business Logic | |
CVE-2026-1352 |
medium | 6.5 | 0.0033 | 2026-10-29 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (incl | |
CVE-2026-1726 |
medium | 4.8 | 0.0019 | 2026-10-29 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 enables privilege | |
CVE-2026-3621 |
medium | 5.9 | 0.0028 | 2026-10-29 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Applica | |
CVE-2026-4917 |
medium | 4.9 | 0.0036 | 2026-10-29 | IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directori | |
CVE-2026-4918 |
medium | 4.8 | 0.0014 | 2026-10-29 | IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting. This vulne | |
CVE-2026-4919 |
medium | 4.8 | 0.0019 | 2026-10-29 | IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting. This vulnerabilit | |
CVE-2026-5926 |
medium | 6.5 | 0.0018 | 2026-10-29 | IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Co | |
CVE-2026-41182 |
medium | 5.3 | 0.0021 | 2026-10-29 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to | |
CVE-2026-41206 |
medium | 6.9 | 0.0019 | 2026-10-29 | PySpector is a static analysis security testing (SAST) Framework engineered for modern Pyt | |
CVE-2026-41243 |
medium | 6.9 | 0.0018 | 2026-10-29 | OpenLearn is open-source educational forum software. Prior to commit 844b2a40a69d0c4911580 | |
CVE-2026-3007 |
medium | 5.4 | 0.0017 | 2026-10-29 | Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow | |
CVE-2026-40529 |
medium | 5.1 | 0.0016 | 2026-10-29 | CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability. Information | |
CVE-2026-41989 |
medium | 6.7 | 0.0018 | 2026-10-29 | Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of servic | |
CVE-2026-41990 |
medium | 4.0 | 0.0023 | 2026-10-29 | Libgcrypt before 1.12.2 mishandles Dilithium signing. Writes to a static array lack a boun | |
CVE-2026-28040 |
medium | 6.5 | 0.0016 | 2026-10-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulne | |
CVE-2026-41238 |
medium | 6.9 | 0.0027 | 2026-10-29 | DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Versions |