Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.1A command injection vulnerability has been reported to affect QuNetSwitch.EPSS 1.1%Mar 20, 2026
- High8.6SQLBot is an intelligent data query system based on a large language model and RAG.EPSS 1.0%Mar 20, 2026
- Low2.1A flaw has been found in D-Link DIR-513 1.10.Mar 20, 2026
- Medium6.1OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowInsecureAuth is explicitly enabled and the gateway is e…EPSS 0.8%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safe-bin configuration when sort is manually added to tools.exec.safeBins.EPSS 0.4%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.2.22 contain an environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowli…EPSS 0.8%Mar 19, 2026
- Critical9.8Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.EPSS 1.1%Mar 19, 2026
- Critical9.1OpenEMR is a free and open source electronic health records and medical practice management application.EPSS 2.7%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: tru…EPSS 1.1%Mar 19, 2026
- Medium5.8OpenClaw versions 2026.2.26 prior to 2026.3.1 on Windows contain a current working directory injection vulnerability in wrapper resolution for .cmd/.bat files that all…EPSS 0.4%Mar 19, 2026
- Low2.0OpenClaw versions prior to 2026.2.19 tools.exec.safeBins contains an input validation bypass vulnerability that allows attackers to execute unintended filesystem opera…EPSS 0.2%Mar 19, 2026
- Medium5.8OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attack…EPSS 0.8%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd metachar…EPSS 0.9%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in allow-always wrapper persistence that allows attackers to bypass approval checks…EPSS 0.9%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run that allows attackers to execute non-allowlisted commands by splitting com…EPSS 0.7%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in system.run exec analysis that fails to unwrap env and shell-dispatch wrapper chains.EPSS 0.8%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in Windows Scheduled Task script generation where environment variables are written to g…EPSS 0.7%Mar 19, 2026
- Critical9.8A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02).EPSS 2.1%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.EPSS 0.2%Mar 18, 2026
- High7.5OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted co…EPSS 0.7%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke external helpers through t…EPSS 0.2%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.EPSS 0.9%Mar 18, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.EPSS 3.1%Mar 18, 2026
- High8.5The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.EPSS 0.7%Mar 17, 2026
- High8.6Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH.EPSS 1.6%Mar 17, 2026