Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.3OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipu…EPSS 0.7%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due t…EPSS 0.5%Mar 19, 2026
- High8.2OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when iMessage remot…EPSS 0.5%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.24 contain an improper path validation vulnerability in sandbox media handling that allows absolute paths under the host temporary di…EPSS 0.5%Mar 19, 2026
- Medium4.8OpenClaw versions prior to 2026.2.22 contain a path traversal vulnerability in the static file handler that follows symbolic links, allowing out-of-root file reads.EPSS 0.2%Mar 19, 2026
- High7.6OpenClaw versions prior to 2026.2.23 contain a path traversal vulnerability in the experimental apply_patch tool that allows attackers with sandbox access to modify fi…EPSS 0.5%Mar 19, 2026
- Critical9.1SiYuan is a personal knowledge management system.EPSS 0.6%Mar 19, 2026
- Medium4.9SiYuan is a personal knowledge management system.EPSS 0.5%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.EPSS 0.7%Mar 19, 2026
- Medium6.5A path traversal vulnerability in /ftl/web/setup.cgi in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote authenticat…EPSS 0.4%Mar 19, 2026
- High7.5There is an arbitrary file read vulnerability in the test connection function of backend database management in wgcloud v3.6.3 and before, which can be used to read an…EPSS 0.5%Mar 19, 2026
- High7.5A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.EPSS 0.4%Mar 19, 2026
- Critical10.0A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to access files on the underlying syst…EPSS 28.1%Mar 19, 2026
- High8.3Romeo gives the capability to reach high code coverage of Go ≥1.20 apps by helping to measure code coverage for functional and integration tests within GitHub Actions.EPSS 0.6%Mar 18, 2026
- Critical9.9ApostropheCMS is an open-source content management framework.EPSS 0.6%Mar 18, 2026
- Critical9.1A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries.EPSS 0.9%Mar 18, 2026
- None0.0DISPUTED: The project has clarified that the documentation was incorrect, and that pkgutil.get_data() has the same security model as open().Mar 18, 2026
- High8.8Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives…EPSS 1.2%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked pa…EPSS 0.4%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset.EPSS 0.4%Mar 18, 2026
- High8.8OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into…EPSS 0.3%Mar 18, 2026
- High8.7A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1.EPSS 1.1%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.EPSS 1.0%Mar 17, 2026
- Medium6.5A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated.Mar 17, 2026
- Low2.1A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10.Mar 17, 2026