Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.45%Apr 10, 2026
- High8.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.53%Apr 10, 2026
- High7.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.23%Apr 10, 2026
- Medium5.3Rembg is a tool to remove images background.Check if you run itEPSS 0.59%Apr 10, 2026
- High8.2SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Check if you run itEPSS 0.95%Apr 10, 2026
- Medium6.9OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-32011 where the Feishu webhook handler accepts request bodies with permissive limits of 1MB and 30-se…Check if you run itEPSS 0.46%Apr 10, 2026
- High8.7OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect.Check if you run itEPSS 0.52%Apr 10, 2026
- High7.1OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sessionKey/history route that skips operator.read scope validation.Check if you run itEPSS 0.41%Apr 10, 2026
- High7.2OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write a…Check if you run itEPSS 0.74%Apr 10, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.58%Apr 10, 2026
- High8.6CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list…Check if you run itEPSS 0.66%Apr 10, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The f…Check if you run itEPSS 0.17%Apr 10, 2026
- High7.1The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4.Check if you run itEPSS 0.35%Apr 10, 2026
- High7.4A vulnerability was found in Tenda AC9 15.03.02.13.Check if you run itEPSS 1.01%Apr 10, 2026
- High7.4A vulnerability has been found in Tenda AC9 15.03.02.13.Check if you run itEPSS 1.01%Apr 10, 2026
- High7.4A flaw has been found in D-Link DIR-513 1.10.Check if you run itEPSS 1.16%Apr 10, 2026
- High7.4A vulnerability was detected in D-Link DIR-513 1.10.Check if you run itEPSS 1.20%Apr 10, 2026
- High7.4A security vulnerability has been detected in D-Link DIR-513 1.10.Check if you run itEPSS 1.17%Apr 10, 2026
- Low2.9A weakness has been identified in OpenClaw up to 2026.1.26.Check if you run itEPSS 0.62%Apr 10, 2026
- High7.5The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.62%Apr 10, 2026
- Medium4.3The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4.Check if you run itEPSS 0.18%Apr 10, 2026
- High7.4A vulnerability was identified in D-Link DIR-605L 2.13B01.Check if you run itEPSS 1.17%Apr 9, 2026
- High7.4A vulnerability was determined in D-Link DIR-605L 2.13B01.Check if you run itEPSS 1.17%Apr 9, 2026
- High7.4A vulnerability was found in D-Link DIR-605L 2.13B01.Check if you run itEPSS 1.17%Apr 9, 2026
- High7.4A vulnerability has been found in D-Link DIR-605L 2.13B01.Check if you run itEPSS 1.17%Apr 9, 2026