A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up ...

CVE-2026-18477

A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local a

来源摘录 · NVD

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This...

CVE-2026-20492

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial

历史摘要 · 未重新核验 · GitHub Advisory

In display, there is a possible escalation of privilege due to a race condition. This could lead...

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of

历史摘要 · 未重新核验 · GitHub Advisory

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial of service with User execution privileges needed. User in...

CVE-2026-20492

In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial

历史摘要 · 未重新核验 · NVD

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege if a malicious actor has already obtained the S...

CVE-2026-20474

In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of

历史摘要 · 未重新核验 · NVD

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the...

CVE-2026-67607

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fres

历史摘要 · 未重新核验 · GitHub Advisory

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fresh connection that reuses the FTP context against an in-pr...

CVE-2026-67607

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fres

历史摘要 · 未重新核验 · NVD

LightFTP 2.3.1 Race Condition DoS via worker_thread_cleanup

CVE-2026-67607

LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fres

历史摘要 · 未重新核验 · OSV.dev

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legacy database migrati...

CVE-2026-67433

Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In

历史摘要 · 未重新核验 · NVD

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have a...

CVE-2026-13113

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.0.5, 19.1 before 19.1.3, and 19.2

历史摘要 · 未重新核验 · NVD

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator forwards the SslHandsh...

CVE-2026-56822

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final,

历史摘要 · 未重新核验 · NVD

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV....

CVE-2026-55391

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Sch

历史摘要 · 未重新核验 · NVD

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

CVE-2026-55391

### Summary `datamodel-code-generator`'s anti-SSRF guard validates the resolved IP of a fetch target once and then lets

历史摘要 · 未重新核验 · GitHub Advisory

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the ref...

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a

历史摘要 · 未重新核验 · NVD

Budibase: SSRF via DNS rebinding in the REST datasource integration

### Summary Budibase's central outbound-fetch guard (`fetchWithBlacklist`) prevents SSRF/DNS-rebinding by resolving the

历史摘要 · 未重新核验 · GitHub Advisory

Netty: TOCTOU in OcspServerCertificateValidator

CVE-2026-56822

### Summary Netty's OcspServerCertificateValidator forwards the SslHandshakeCompletionEvent before the asynchronous OCSP

历史摘要 · 未重新核验 · GitHub Advisory

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows authenticated users to bypass path restrictions by swappin...

CVE-2026-65598

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows a

来源摘录 · NVD

n8n before 1.123.64 Remote Code Execution via Git Clone

CVE-2026-65598

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a TOCTOU race condition in the Git node's clone operation that allows a

历史摘要 · 未重新核验 · OSV.dev

Statamic is a Laravel and Git powered content management system (CMS). Prior to 5.73.24 and 6.20.1, the Glide image proxy's URL validation in src/Imaging/RemoteUrlValidator.php ...

CVE-2026-54242

CVE-2026-54242 影响 Statamic（基于 Laravel 和 Git 的内容管理系统）的 Glide 图片代理组件。在版本 5.73.24 和 6.20.1 之前，Glide 的远程 URL 验证机制存在缺陷，位于 src

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check...

CVE-2026-62212

OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the affected fea

历史摘要 · 未重新核验 · GitHub Advisory