Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Tenda W30E V2.0 V16.01.0.21 was found to contain a command injection vulnerability in the do_ping_action function via the hostName parameter.Check if you run itEPSS 1.59%Apr 21, 2026
- High8.2NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request.Check if you run itEPSS 0.32%Apr 21, 2026
- High8.9FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.73%Apr 21, 2026
- Critical9.3SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- Medium6.3Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF).Check if you run itEPSS 0.14%Apr 21, 2026
- High8.2HCL BigFix Service Management is susceptible to HTTP Request Smuggling.Check if you run itEPSS 0.18%Apr 21, 2026
- High8.2Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made.Check if you run itEPSS 0.25%Apr 21, 2026
- Low2.0OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.14%Apr 21, 2026
- High7.5Signal K Server is a server application that runs on a central hub in a boat.Check if you run itEPSS 0.66%Apr 21, 2026
- High8.7OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals.Check if you run itEPSS 0.55%Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows remote attackers to make ar…Check if you run itEPSS 0.40%Apr 21, 2026
- Medium5.3OpenClaw before 2026.4.2 fails to enforce write scopes on the POST /sessions/:sessionKey/kill endpoint in identity-bearing HTTP modes.Check if you run itEPSS 0.31%Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows attackers to access interna…Check if you run itEPSS 0.40%Apr 21, 2026
- High7.3Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.47%Apr 21, 2026
- High7.7Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.47%Apr 21, 2026
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.65%Apr 21, 2026
- Low2.3Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request.Check if you run itEPSS 0.17%Apr 20, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Patch nowKEVEPSS 1.51%Apr 20, 2026
- High8.7Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system…Check if you run itEPSS 0.83%Apr 20, 2026
- High7.7NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.94%Apr 20, 2026
- Medium6.5A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated…Check if you run itEPSS 0.32%Apr 20, 2026
- High8.3Vvveb prior to 1.0.8.1 contains a server-side request forgery vulnerability in the oEmbedProxy action of the editor/editor module where the url parameter is passed dir…Check if you run itEPSS 0.44%Apr 20, 2026
- High8.7Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged field…Check if you run itEPSS 0.96%Apr 20, 2026
- Medium5.8Vexa is an open-source, self-hostable meeting bot API and meeting transcription API.Check if you run itEPSS 0.34%Apr 20, 2026