A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as r...

CVE-2026-41045

A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass

历史摘要 · 未重新核验 · NVD

ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer

## Summary ChatterBot's `UbuntuCorpusTrainer.extract()` uses a predictable, home-rooted output directory (`~/ubuntu_dat

历史摘要 · 未重新核验 · GitHub Advisory

Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag

## Summary Crossplane allows package signature verification to be configured via the `ImageConfig` mechanism. When enab

历史摘要 · 未重新核验 · GitHub Advisory

pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, a symlink race condition exists in per-device and per-user pad dir...

CVE-2026-48983

pam_usb provides hardware authentication for Linux using ordinary removable media. In versions prior to 0.9.2, a symlink

历史摘要 · 未重新核验 · NVD

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's...

CVE-2026-54228

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Betwee

历史摘要 · 未重新核验 · GitHub Advisory

A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method. Between dump directory creation and post-create event execution...

CVE-2026-54228

CVE-2026-54228 是存在于 abrt-dbus D-Bus 服务 SetElement 方法中的一个 TOCTOU（检查时间与使用时间）竞态条件漏洞。该漏洞影响系统自动报告错误（ABRT）工具集的 D-Bus 接口。漏洞形成于转

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection...

CVE-2026-53838

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin...

CVE-2026-53831

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that a

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv...

CVE-2026-53822

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between appro

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploi...

CVE-2026-53838

OpenClaw 2026.5.27 之前版本中存在一个状态变异漏洞，位于节点配对重连逻辑中。该漏洞允许已配对的节点在重新连接时混淆审批范围决策，攻击者可以利用重连逻辑恢复或展示比预期更广泛的节点权限，从而可能绕过审批限制。CVSS 评分

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on...

CVE-2026-53831

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that a

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command argument...

CVE-2026-53822

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between appro

历史摘要 · 未重新核验 · NVD

File Browser: Improper Access Control Occurs via Pre-Created Public Share for a Non-existent Path

CVE-2026-54096

### Summary This is similar vulnrability of **`CVE-2026-0035`**, which was fixed in Android `MediaProvider` with **high*

历史摘要 · 未重新核验 · GitHub Advisory

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child ...

CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability ex

历史摘要 · 未重新核验 · NVD

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a ...

CVE-2026-42306

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and

历史摘要 · 未重新核验 · NVD

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a ...

CVE-2026-41568

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and

历史摘要 · 未重新核验 · NVD

A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Token to bypass single-use semantics and generate multiple valid Access Tokens, w...

CVE-2026-50631

A race condition in AbstractOAuthDataProvider allows concurrent requests using the same Refresh Token to bypass single-u

历史摘要 · 未重新核验 · NVD

OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass exec revalidation checks. Attackers can exploit this by ...

CVE-2026-53806

OpenClaw before 2026.5.12 contains a shell option parsing vulnerability that allows combined POSIX shell flags to bypass

历史摘要 · 未重新核验 · NVD

Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allo...

CVE-2026-49958

Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the g

历史摘要 · 未重新核验 · NVD

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.

CVE-2026-45647

Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to el

历史摘要 · 未重新核验 · NVD