Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via…Check if you run itEPSS 0.13%Mar 11, 2026
- Low3.3Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files.Check if you run itEPSS 0.16%Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.29%Mar 11, 2026
- High8.1An issue in ClasroomIO before v.0.2.6 allows a remote attacker to escalate privileges via the endpoints /api/verify and /rest/v1/profileCheck if you run itEPSS 0.23%Mar 11, 2026
- Medium6.2Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x86_64 systems,…Check if you run itEPSS 0.15%Mar 11, 2026
- High7.5The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3.Check if you run itEPSS 0.29%Mar 11, 2026
- Medium6.9OpenClaw version 2026.2.19-2 prior to 2026.2.21 contains a command injection vulnerability in systemd unit file generation where attacker-controlled environment values…Check if you run itEPSS 1.12%Mar 11, 2026
- High8.7OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream…Check if you run itEPSS 0.44%Mar 11, 2026
- Medium6.7OpenClaw versions prior to 2026.2.17 contain a path traversal vulnerability in the $include directive resolution that allows reading arbitrary local files outside the…Check if you run itEPSS 0.15%Mar 11, 2026
- High8.7OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in apply_patch that allows attackers to write or delete files outside the configured worksp…Check if you run itEPSS 0.77%Mar 11, 2026
- High8.7OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing atta…Check if you run itEPSS 0.38%Mar 11, 2026
- Medium5.5A vulnerability was determined in itsourcecode University Management System 1.0.Check if you run itEPSS 0.45%Mar 11, 2026
- Medium5.5A vulnerability was found in H3C ACG1000-AK230 up to 20260227.Check this weekEPSS 40.70%Mar 11, 2026
- High7.2The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_directory_name' parameter in all versions up to, and including, 1.32…Check if you run itEPSS 0.27%Mar 11, 2026
- High7.5When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.Check if you run itEPSS 0.84%Mar 11, 2026
- Medium6.5curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy.Check if you run itEPSS 0.43%Mar 11, 2026
- Medium5.3When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some cirCheck if you run itEPSS 0.47%Mar 11, 2026
- Medium6.5libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request.Check if you run itEPSS 0.27%Mar 11, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityPatch nowKEVEPSS 20.29%Mar 11, 2026
- Medium4.3WordPress core is vulnerable to unauthorized access in versions 6.9 through 6.9.1.Check if you run itEPSS 0.32%Mar 11, 2026
- Medium6.4The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.28.1.Check if you run itEPSS 0.21%Mar 11, 2026
- High7.2The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field…Check if you run itEPSS 0.33%Mar 11, 2026
- High8.8The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Improper Privilege Management in versions 7.1.0 through 9.0.2.Check if you run itEPSS 0.40%Mar 11, 2026
- High8.8The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2.Check if you run itEPSS 0.66%Mar 11, 2026
- High7.2The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.…Check if you run itEPSS 0.25%Mar 11, 2026
Sort