CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- uutils coreutilsuutils coreutils split Local Data Integrity Issue via Lossy Filename Encoding3.3 Low
- uutils coreutilsuutils coreutils split Arbitrary File Truncation via Time-of-Check to Time-of-Use (TOCTOU) Race Condition6.3 Medium
- uutils coreutilsuutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames3.3 Low
- uutils coreutilsuutils coreutils ln Security Bypass via Improper Handling of the --no-dereference Flag5.0 Medium
- uutils coreutilsuutils coreutils id Misleading Identity Reporting in Pretty Print Mode3.3 Low
- uutils coreutilsuutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership4.4 Medium
- uutils coreutilsuutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation5.5 Medium
- uutils coreutilsuutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection7.2 High
- uutils coreutilsuutils coreutils nohup Information Disclosure via Insecure Default Output Permissions3.3 Low
- uutils coreutilsuutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement4.4 Medium
- uutils coreutilsuutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion6.6 Medium
- uutils coreutilsuutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition6.3 Medium
- uutils coreutilsuutils coreutils rm Safeguard Bypass via Improper Path Normalization5.6 Medium
- uutils coreutilsuutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module3.6 Low
- uutils coreutilsuutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems3.4 Low
- uutils coreutilsuutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition6.3 Medium
- uutils coreutilsuutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap4.7 Medium
- uutils coreutilsuutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading4.4 Medium
- uutils coreutilsuutils coreutils cp Information Disclosure via Permission Handling Race4.7 Medium
- uutils coreutilsuutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race6.3 Medium
- uutils coreutilsuutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race6.3 Medium
- uutils coreutilsuutils coreutils mv Security Xattr TOCTOU Race in Cross-Device4.7 Medium
- uutils coreutilsuutils coreutils mkdir Permission Exposure Race Condition with -m3.3 Low
- uutils coreutilsuutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition7.0 High
- uutils coreutilsuutils coreutils mv Silent Ownership Loss in Cross-Device Operations4.2 Medium
- uutils coreutilsuutils coreutils cp Unexpected Privileged Executable Creation with -p6.6 Medium
- uutils coreutilsuutils coreutils Path-Based Safety Bypass with --preserve-root6.7 Medium
- uutils coreutilsuutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing5.5 Medium
- uutils coreutilsuutils coreutils comm Silent Data Loss or Denial of Service via Improper Input Validation4.4 Medium
- uutils coreutilsuutils coreutils comm Silent Data Corruption via Lossy UTF-8 Normalization3.3 Low
- uutils coreutilsuutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race5.3 Medium
- uutils coreutilsuutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression3.3 Low
- uutils coreutilsuutils coreutils cut Inconsistent Output Suppression with Newline Delimiters3.3 Low
- uutils coreutilsuutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIR3.3 Low
- uutils coreutilsuutils coreutils mkfifo Unauthorized Permission Change on Existing Files7.1 High
- uutils coreutilsuutils coreutils chown and chgrp False Success Exit Code in Recursive Mode5.5 Medium
- uutils coreutilsuutils coreutils chmod False Success Exit Code in Recursive Mode5.5 Medium
- uutils coreutilsuutils coreutils chmod Path Traversal Bypass of --preserve-root7.3 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabIncorrect Authorization in GitLab2.7 Low
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- gitlabImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab8.0 High
- gitlabIncorrect Authorization in GitLab4.3 Medium
- gitlabImproper Resolution of Path Equivalence in GitLab8.0 High
- gitlabInsufficient Session Expiration in GitLab5.4 Medium
- themefusion avadaWordPress Avada theme < 7.13.2 - Cross Site Request Forgery (CSRF) vulnerability4.3 Medium
- 94cb carbon forumCarbon Forum 5.9.0 Persistent XSS via Forum Name Field5.1 Medium
- elba elba5ELBA5 5.8.0 Remote Code Execution via Database Access9.3 Critical
- Show moreLoading…