Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks.Check if you run itEPSS 0.51%Apr 9, 2026
- High8.5OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permisCheck if you run itEPSS 0.20%Apr 9, 2026
- Low2.3OpenClaw before 2026.3.22 contains a policy confusion vulnerability in room authorization that matches colliding room names instead of stable room tokens.Check if you run itEPSS 0.25%Apr 9, 2026
- Medium6.3OpenClaw before 2026.3.25 contains a missing rate limiting vulnerability in webhook authentication that allows attackers to brute-force weak webhook passwords without throttling.Check if you run itEPSS 0.38%Apr 9, 2026
- Medium6.0OpenClaw before 2026.3.22 contains an improper authentication verification vulnerability in Google Chat app-url webhook handling that accepts add-on principals outside intended depCheck if you run itEPSS 0.30%Apr 9, 2026
- High8.3OpenClaw before 2026.3.23 contains a replay identity vulnerability in Plivo V2 signature verification that allows attackers to bypass replay protection by modifying query parameterCheck if you run itEPSS 0.29%Apr 9, 2026
- Low2.3OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in Google Chat group policy enforcement that relies on mutable space display names.Check if you run itEPSS 0.25%Apr 9, 2026
- High7.2OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to invoke admin-lCheck if you run itEPSS 0.35%Apr 9, 2026
- Medium5.3PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.42%Apr 9, 2026
- High7.1An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cCheck if you run itEPSS 0.24%Apr 9, 2026
- High8.4A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high privileged attackerCheck if you run itEPSS 2.33%Apr 9, 2026
- High7.7PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.28%Apr 9, 2026
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in thCheck if you run itEPSS 0.22%Apr 9, 2026
- High7.1A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper Networks Junos OS EvoCheck if you run itEPSS 0.19%Apr 9, 2026
- High7.9PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.24%Apr 9, 2026
- Medium6.5PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.25%Apr 9, 2026
- High7.5PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.35%Apr 9, 2026
- High7.5PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.39%Apr 9, 2026
- High7.5PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.35%Apr 9, 2026
- Critical10.0PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.24%Apr 9, 2026
- High8.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.24%Apr 9, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.84%Apr 9, 2026
- Medium6.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.22%Apr 9, 2026
- High7.0URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c.Check if you run itEPSS 0.18%Apr 9, 2026
- High8.7A vulnerability has been found in D-Link DIR-605L 2.13B01.Check if you run itEPSS 0.73%Apr 9, 2026
Sort