Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser.Check if you run itEPSS 0.17%Mar 18, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.65%Mar 18, 2026
- High7.5DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.35%Mar 18, 2026
- Medium5.3The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all vers…Check if you run itEPSS 0.32%Mar 18, 2026
- Medium6.1The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insuff…Check if you run itEPSS 0.18%Mar 18, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.21%Mar 18, 2026
- Medium6.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to,…Check if you run itEPSS 0.16%Mar 18, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.44%Mar 18, 2026
- High7.7A flaw was found in Keycloak.Check if you run itEPSS 0.38%Mar 18, 2026
- High7.0Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.39%Mar 18, 2026
- Critical9.1Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.32%Mar 18, 2026
- Medium6.9LeafKit is a templating language with Swift-inspired syntax.Check if you run itEPSS 0.27%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesys…Check if you run itEPSS 0.10%Mar 18, 2026
- Low2.3OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks.Check if you run itEPSS 0.24%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked pa…Check if you run itEPSS 0.26%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset.Check if you run itEPSS 0.39%Mar 18, 2026
- Medium5.8OpenClaw version 2026.2.22 prior to 2026.2.23 contains an arbitrary code execution vulnerability in shell-env that allows attackers to execute attacker-controlled bina…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium6.1OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environme…Check if you run itEPSS 0.24%Mar 18, 2026
- Medium4.8OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories.Check if you run itEPSS 0.14%Mar 18, 2026
- High7.5OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted co…Check if you run itEPSS 0.65%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection…Check if you run itEPSS 0.32%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution.Check if you run itEPSS 0.39%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecogniz…Check if you run itEPSS 0.35%Mar 18, 2026
- Medium5.9OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture…Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into…Check if you run itEPSS 0.34%Mar 18, 2026
Sort