Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8OpenClaw before 2026.3.12 contains an authentication bypass vulnerability in Feishu webhook mode when only verificationToken is configured without encryptKey, allowing acceptance oCheck if you run itEPSS 0.25%Mar 29, 2026
- High8.8OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that oCheck if you run itEPSS 0.41%Mar 29, 2026
- High7.1OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only browser profile mCheck if you run itEPSS 0.29%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations instead of groupCheck if you run itEPSS 0.32%Mar 29, 2026
- Medium5.3OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in Discord guild reaction ingestion that fails to enforce member users and roles allowlist checks.Check if you run itEPSS 0.15%Mar 29, 2026
- Critical9.4OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes byCheck if you run itEPSS 0.73%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic.Check if you run itEPSS 0.10%Mar 29, 2026
- Critical9.2OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandboxed subagents to access parent or sibling session state.Check if you run itEPSS 0.10%Mar 29, 2026
- Critical9.3OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagents control surface and resolve against parent requester scopCheck if you run itEPSS 0.14%Mar 29, 2026
- High8.7OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handlers that allows command-authorized non-owners to access ownerCheck if you run itEPSS 0.26%Mar 29, 2026
- High7.4A weakness has been identified in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.82%Mar 29, 2026
- High7.4A security flaw has been discovered in Belkin F9K1122 1.00.33.Check if you run itEPSS 0.70%Mar 29, 2026
- Low2.0A vulnerability was identified in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 2.16%Mar 29, 2026
- Low1.9A vulnerability was determined in mxml up to 4.0.4.Check if you run itEPSS 0.13%Mar 29, 2026
- High7.4A vulnerability was found in Tenda 4G06 04.06.01.29.Check if you run itEPSS 0.57%Mar 29, 2026
- Medium5.5A vulnerability has been found in code-projects Accounting System 1.0.Check if you run itEPSS 0.40%Mar 29, 2026
- Medium5.5A flaw has been found in code-projects Accounting System 1.0.Check if you run itEPSS 0.33%Mar 29, 2026
- Medium5.5A vulnerability was detected in code-projects Accounting System 1.0.Check if you run itEPSS 0.35%Mar 29, 2026
- Low2.1A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20.Check if you run itEPSS 0.23%Mar 29, 2026
- Low2.1A vulnerability has been found in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 2.55%Mar 29, 2026
- High7.4A vulnerability was found in D-Link DIR-513 1.10.Check if you run itEPSS 0.78%Mar 29, 2026
- Low1.9A vulnerability has been found in DeDeveloper23 codebase-mcp up to 3ec749d237dd8eabbeef48657cf917275792fde6.Check if you run itEPSS 0.72%Mar 29, 2026
- High7.4A flaw has been found in Tenda F453 1.0.0.3.Check if you run itEPSS 0.64%Mar 29, 2026
- Medium6.4The Twentig plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'featuredImageSizeWidth' parameter in versions up to, and including, 1.9.7 due to insufficientCheck if you run itEPSS 0.17%Mar 29, 2026
- Low2.1A vulnerability was detected in Totolink A3600R 4.1.2cu.5182_B20201102.Check if you run itEPSS 2.55%Mar 29, 2026
Sort