Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization.Check if you run itEPSS 0.75%Apr 24, 2026
- Medium6.9A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecti…Check if you run itEPSS 0.29%Apr 24, 2026
- Medium6.3OpenClaw before 2026.3.31 contains a replay detection bypass vulnerability in webhook signature handling that treats Base64 and Base64URL encoded signatures as distinct requests.Check if you run itEPSS 0.44%Apr 23, 2026
- Low2.3OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks.Check if you run itEPSS 0.17%Apr 23, 2026
- Medium6.3OpenClaw 2026.2.26 before 2026.3.31 enforces pending pairing-request caps per channel file instead of per account, allowing attackers to exhaust the shared pending window.Check if you run itEPSS 0.76%Apr 23, 2026
- Medium6.0OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Authorization headers across cross-origin redirects.Check if you run itEPSS 0.37%Apr 23, 2026
- Medium6.9OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers to cause transient availability loss.Check if you run itEPSS 0.81%Apr 23, 2026
- Medium5.8OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist.Check if you run itEPSS 0.14%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.90%Apr 23, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.73%Apr 23, 2026
- Medium5.3A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic.Check if you run itEPSS 0.32%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.08%Apr 23, 2026
- High8.2SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of…Check if you run itEPSS 0.55%Apr 23, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.40%Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.65%Apr 23, 2026
- High7.1Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.35%Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.34%Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.33%Apr 23, 2026
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 1.25%Apr 23, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.84%Apr 23, 2026
- Medium5.9The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray.Check if you run itEPSS 0.38%Apr 23, 2026
- Medium5.3OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act…Check if you run itEPSS 0.30%Apr 23, 2026
- Medium5.9OpenTelemetry dotnet is a dotnet telemetry framework.Check if you run itEPSS 0.56%Apr 23, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do…Check if you run itEPSS 0.73%Apr 23, 2026
- High7.8A flaw was found in the X.Org X server's XKB key types request validation.Check if you run itEPSS 0.19%Apr 23, 2026