Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1OpenClaw before 2026.3.23 contains an authentication bypass vulnerability in the Canvas gateway where authorizeCanvasRequest() unconditionally allows local-direct requ…Check if you run itEPSS 0.21%Apr 9, 2026
- Medium5.3OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks.Check if you run itEPSS 0.34%Apr 9, 2026
- Medium6.9OpenClaw before 2026.3.22 contains an unauthenticated resource exhaustion vulnerability in voice call webhook handling that buffers request bodies before provider signature checks.Check if you run itEPSS 0.70%Apr 9, 2026
- High8.5OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired…Check if you run itEPSS 0.26%Apr 9, 2026
- High8.3OpenClaw before 2026.3.23 contains a replay identity vulnerability in Plivo V2 signature verification that allows attackers to bypass replay protection by modifying qu…Check if you run itEPSS 0.37%Apr 9, 2026
- High7.2OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to i…Check if you run itEPSS 0.50%Apr 9, 2026
- Medium6.3A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific c…Check if you run itEPSS 0.14%Apr 9, 2026
- High7.1An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low pr…Check if you run itEPSS 0.23%Apr 9, 2026
- High7.4A flaw has been found in D-Link DIR-605L 2.13B01.Check if you run itEPSS 1.17%Apr 9, 2026
- High7.4A vulnerability was detected in D-Link DIR-605L 2.13B01.Check if you run itEPSS 1.17%Apr 9, 2026
- Low3.1Flux notification-controller is the event forwarder and notification dispatcher for the GitOps Toolkit controllers.Check if you run itEPSS 0.18%Apr 9, 2026
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.27%Apr 9, 2026
- Medium6.9A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 3.46%Apr 9, 2026
- Medium5.5A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 3.46%Apr 9, 2026
- Critical9.9Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.Check if you run itEPSS 0.37%Apr 9, 2026
- High8.1Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools.Check if you run itEPSS 0.34%Apr 9, 2026
- High7.8The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged us…Check if you run itEPSS 0.14%Apr 9, 2026
- High7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat via invalid chunk extension.Check if you run itEPSS 0.68%Apr 9, 2026
- Critical9.3An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.Check if you run itEPSS 0.44%Apr 9, 2026
- Medium5.5A flaw has been found in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.71%Apr 9, 2026
- Medium5.5A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.71%Apr 9, 2026
- High7.2web3.py allows you to interact with the Ethereum blockchain using Python.Check if you run itEPSS 0.31%Apr 9, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in…Check if you run itEPSS 0.23%Apr 9, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.43%Apr 9, 2026
- High7.7Plane is an an open-source project management tool.Check if you run itEPSS 0.35%Apr 9, 2026