Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.32%Mar 18, 2026
- Low2.4The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS.Check if you run itEPSS 0.39%Mar 18, 2026
- Medium6.9The Amazon S3 for Craft CMS plugin provides an Amazon S3 integration for Craft CMS.Check if you run itEPSS 0.39%Mar 18, 2026
- High7.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.45%Mar 18, 2026
- High7.1Kube-router is a turnkey solution for Kubernetes networking.Check if you run itEPSS 0.34%Mar 18, 2026
- Medium6.5Cockpit is a headless content management system.Check if you run itEPSS 0.44%Mar 18, 2026
- Medium5.3Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication.Check if you run itEPSS 0.27%Mar 18, 2026
- Critical9.6mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser.Check if you run itEPSS 0.19%Mar 18, 2026
- High7.5DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.39%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.27%Mar 18, 2026
- Medium5.3The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, aCheck if you run itEPSS 0.36%Mar 18, 2026
- Medium6.1The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insufficient inputCheck if you run itEPSS 0.20%Mar 18, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.71%Mar 18, 2026
- Critical9.6jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.32%Mar 18, 2026
- High8.1jsPDF is a library to generate PDFs in JavaScript.Check if you run itEPSS 0.43%Mar 18, 2026
- High7.5pyasn1 is a generic ASN.1 library for Python.Check if you run itEPSS 0.89%Mar 18, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.0Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.44%Mar 18, 2026
- Medium6.9LeafKit is a templating language with Swift-inspired syntax.Check if you run itEPSS 0.31%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesystem locationsCheck if you run itEPSS 0.11%Mar 18, 2026
- Low2.3OpenClaw versions prior to 2026.2.21 accept prototype-reserved keys in runtime /debug set override object values, allowing prototype pollution attacks.Check if you run itEPSS 0.28%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked parent directorCheck if you run itEPSS 0.29%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset.Check if you run itEPSS 0.42%Mar 18, 2026
- Medium5.8OpenClaw version 2026.2.22 prior to 2026.2.23 contains an arbitrary code execution vulnerability in shell-env that allows attackers to execute attacker-controlled binaries by exploCheck if you run itEPSS 0.14%Mar 18, 2026
- Medium6.1OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environment proxy variCheck if you run itEPSS 0.27%Mar 18, 2026
Sort