Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories.Check if you run itEPSS 0.15%Mar 18, 2026
- High7.5OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted commands by expCheck if you run itEPSS 0.73%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection and denial oCheck if you run itEPSS 0.36%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution.Check if you run itEPSS 0.42%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecognized multiplexeCheck if you run itEPSS 0.38%Mar 18, 2026
- Medium5.9OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture the GatewayCheck if you run itEPSS 0.15%Mar 18, 2026
- High8.8OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into temporary fiCheck if you run itEPSS 0.39%Mar 18, 2026
- Medium6.3OpenClaw versions prior to 2026.2.22 with the optional BlueBubbles plugin contain an access control bypass vulnerability where empty allowFrom configuration causes dmPolicy pairingCheck if you run itEPSS 0.30%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke external helpers through the compress-pCheck if you run itEPSS 0.23%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary trailing argumentsCheck if you run itEPSS 0.47%Mar 18, 2026
- Medium6.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to, and includingCheck if you run itEPSS 0.18%Mar 18, 2026
- Medium6.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.50%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.40%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.69%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.78%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.76%Mar 18, 2026
- Critical9.1Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.35%Mar 18, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.50%Mar 18, 2026
- High7.7A flaw was found in Keycloak.Check if you run itEPSS 0.41%Mar 18, 2026
- Low2.0A vulnerability was detected in Portabilis i-Educar 2.11.Check if you run itEPSS 0.23%Mar 18, 2026
- Low2.0A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01.Check if you run itEPSS 2.81%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.23%Mar 18, 2026
- Low2.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.20%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.49%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.44%Mar 18, 2026
Sort