Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.27%Mar 19, 2026
- Medium6.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.44%Mar 19, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.38%Mar 19, 2026
- Critical9.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.56%Mar 19, 2026
- High8.5FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.22%Mar 19, 2026
- High8.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.29%Mar 19, 2026
- Medium5.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.84%Mar 19, 2026
- Medium6.8SiYuan is a personal knowledge management system.Check if you run itEPSS 0.46%Mar 19, 2026
- Medium6.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.32%Mar 19, 2026
- Low2.4OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.51%Mar 19, 2026
- High8.2Discourse is an open-source discussion platform.Check if you run itEPSS 0.24%Mar 19, 2026
- Low2.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.35%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.33%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.29%Mar 19, 2026
- High8.7Discourse is an open-source discussion platform.Check if you run itEPSS 1.22%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible without authenticatCheck if you run itEPSS 0.12%Mar 19, 2026
- Low2.4OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicioCheck if you run itEPSS 0.16%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permissCheck if you run itEPSS 0.20%Mar 19, 2026
- Critical9.3OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators to join another container's network namespace.Check if you run itEPSS 0.28%Mar 19, 2026
- Low2.3OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads.Check if you run itEPSS 0.18%Mar 19, 2026
- High8.3OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipulating /api/cCheck if you run itEPSS 0.46%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true.Check if you run itEPSS 0.15%Mar 19, 2026
- Medium6.1OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowInsecureAuth is explicitly enabled and the gateway is exposed over pCheck if you run itEPSS 0.40%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicalizCheck if you run itEPSS 0.36%Mar 19, 2026
- High7.3OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallback that trusts the unvalidated SHELL path from the host environmeCheck if you run itEPSS 0.13%Mar 19, 2026
Sort