Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed iControl REST endpoint on the BIG-IQ system.EPSS 0.4%May 13, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…May 12, 2026
- High8.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) is vulnerable…May 12, 2026
- Critical9.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitr…May 12, 2026
- Critical9.8The torch-checkpoint-shrink.py script in the ml-engineering project in commit 0099885db36a8f06556efe1faf552518852cb1e0 (2025-20-27) contains an insecure deserializatio…May 12, 2026
- Low2.1A flaw has been found in omec-project amf up to 2.1.1.May 12, 2026
- High7.7WWBN AVideo is an open source video platform.May 11, 2026
- Medium5.4WWBN AVideo is an open source video platform.May 11, 2026
- High7.5WWBN AVideo is an open source video platform.May 11, 2026
- Medium5.5A weakness has been identified in aiwaves-cn agents up to e8c4e3c2d19739d3dff59e577d1c97090cc15f59.May 11, 2026
- Medium5.5A security flaw has been discovered in VectifyAI PageIndex up to f50e52975313c6716c02b20a119577a1929decba.May 11, 2026
- Medium5.5A vulnerability was detected in OpenClaw up to 2026.1.24.May 11, 2026
- Critical9.9Open edX Platform enables the authoring and delivery of online learning at any scale.May 11, 2026
- Medium6.5GPT-Pilot thru commit 0819827ce20346ef5f25b3fe29293cb448840565 (2025-09-03) contains a command injection vulnerability (CWE-78) in the Executor.run() method.May 11, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix race bug in nvme_poll_irqdisable() In the following scenario, pdev can be disabled be…May 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable…May 8, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ceph: add a bunch of missing ceph_path_info initializers ceph_mdsc_build_path() must be called with…May 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: net: Fix rcu_tasks stall in threaded busypoll I was debugging a NIC driver when I noticed that when…May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amd: Fix a few more NULL pointer dereference in device cleanup I found a few more paths that cl…May 8, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized l_iclog_roundoff values If the superblock doesn't list a log stripe unit, we se…May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt to create se…May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid uninit-value access in f2fs_sanity_check_node_footer syzbot reported a f2fs bug…May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request Since commit 15f73f5b3e59 ("blk-mq: move failure inje…May 8, 2026
- High8.3In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for packet data Since commit 9c328f54741b ("net: nfc: nci:…May 8, 2026
- High8.8UltraDAG is a minimal DAG-BFT blockchain in Rust.May 8, 2026