Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions…Check if you run itEPSS 2.39%Mar 7, 2026
- High8.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.53%Mar 7, 2026
- Low2.5On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in whic…Check if you run itEPSS 0.12%Mar 6, 2026
- Low2.0dbt-common is the shared common utilities for dbt-core and adapter implementations use.Check if you run itEPSS 0.39%Mar 6, 2026
- High8.2Zarf is an Airgap Native Packager Manager for Kubernetes.Check if you run itEPSS 0.23%Mar 6, 2026
- High8.8Nominas 0.27 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the use…Check if you run itEPSS 0.32%Mar 6, 2026
- Medium6.9Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter.Check if you run itEPSS 0.81%Mar 6, 2026
- High8.7Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter.Check if you run itEPSS 0.64%Mar 6, 2026
- High8.7Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter.Check if you run itEPSS 0.59%Mar 6, 2026
- Medium6.9Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Patch nowKEVEPSS 2.12%Mar 6, 2026
- High8.8changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.58%Mar 6, 2026
- High8.0Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Check if you run itEPSS 0.35%Mar 6, 2026
- High8.7OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze, and visualize data through natural language conversations.Check if you run itEPSS 0.70%Mar 6, 2026
- High7.5Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos.Check if you run itEPSS 0.56%Mar 6, 2026
- High8.8OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.63%Mar 6, 2026
- High7.5Talishar is a fan-made Flesh and Blood project.Check if you run itEPSS 0.95%Mar 6, 2026
- Medium6.7'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.40%Mar 5, 2026
- Medium6.8OpenClaw versions 2026.1.16-2 prior to 2026.2.14 contain a path traversal vulnerability in archive extraction during installation commands that allows arbitrary file w…Check if you run itEPSS 0.20%Mar 5, 2026
- High8.4OpenClaw versions prior to 2026.2.12 construct transcript file paths using unsanitized sessionId parameters and sessionFile paths without enforcing directory containment.Check if you run itEPSS 0.19%Mar 5, 2026
- High8.7OpenClaw versions prior to 2026.2.13 contain a vulnerability in the browser control API in which it accepts user-supplied output paths for trace and download files wit…Check if you run itEPSS 0.68%Mar 5, 2026
- Medium5.7OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in sandbox skill mirroring (must be enabled) that uses the skill frontmatter name parameter…Check if you run itEPSS 0.18%Mar 5, 2026
- High8.3OpenClaw versions prior to 2026.2.14 fail to validate TAR archive entry paths during extraction, allowing path traversal sequences to write files outside the intended directory.Check if you run itEPSS 0.56%Mar 5, 2026
- High7.0OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.1 contain a path traversal vulnerability in plugin installation that allows malicious plugin package names to escape…Check if you run itEPSS 0.51%Mar 5, 2026
- High8.3OpenClaw versions 2.0.0-beta3 prior to 2026.2.14 contain a path traversal vulnerability in hook transform module loading that allows arbitrary JavaScript execution.Check if you run itEPSS 0.56%Mar 5, 2026
- Critical9.8An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server.Check if you run itEPSS 0.64%Mar 5, 2026