Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3OpenClaw versions prior to 2026.2.22 with the optional BlueBubbles plugin contain an access control bypass vulnerability where empty allowFrom configuration causes dmP…Check if you run itEPSS 0.27%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke external helpers through t…Check if you run itEPSS 0.21%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary traili…Check if you run itEPSS 0.42%Mar 18, 2026
- Medium6.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.45%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.36%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.61%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.71%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.69%Mar 18, 2026
- Low2.0A vulnerability was detected in Portabilis i-Educar 2.11.Check if you run itEPSS 0.20%Mar 18, 2026
- Low2.0A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01.Check if you run itEPSS 2.43%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.21%Mar 18, 2026
- Low2.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.18%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.43%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.39%Mar 18, 2026
- High8.8Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 2.07%Mar 18, 2026
- High7.2pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.73%Mar 18, 2026
- Low1.7pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.25%Mar 18, 2026
- Medium5.7Sentry is a developer-first error tracking and performance monitoring tool.Check if you run itEPSS 0.25%Mar 18, 2026
- High8.8The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents.Check if you run itEPSS 0.22%Mar 18, 2026
- Medium6.5GLPI is a free Asset and IT management software package.Check if you run itEPSS 0.30%Mar 18, 2026
- Critical9.1IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the inte…Check if you run itEPSS 0.16%Mar 17, 2026
- High7.5Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed t…Check if you run itEPSS 0.21%Mar 17, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).Check if you run itEPSS 0.46%Mar 17, 2026
- Medium5.4A cross-origin issue in the Navigation API was addressed with improved input validation.Check if you run itEPSS 0.36%Mar 17, 2026
- Medium6.5IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote…Check if you run itEPSS 0.18%Mar 17, 2026
Sort