Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 31, 2026
- High8.1SciTokens C++ is a minimal library for creating and using SciTokens from C or C++.Check if you run itEPSS 0.38%Mar 31, 2026
- Medium5.4A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0.Check if you run itEPSS 0.26%Mar 31, 2026
- Low2.1A vulnerability was identified in chatwoot up to 4.11.2.Check if you run itEPSS 0.44%Mar 31, 2026
- Critical9.3HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.42%Mar 31, 2026
- Medium5.8HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.32%Mar 31, 2026
- Critical9.1HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.20%Mar 31, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.34%Mar 31, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.86%Mar 31, 2026
- Medium4.3In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.Check if you run itEPSS 0.29%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetc…Check if you run itEPSS 0.39%Mar 31, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.24%Mar 31, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.34%Mar 31, 2026
- High7.7Nhost is an open source Firebase alternative with GraphQL.Check if you run itEPSS 0.60%Mar 31, 2026
- High7.7FastGPT is an AI Agent building platform.Check if you run itEPSS 0.42%Mar 31, 2026
- Critical10.0FastGPT is an AI Agent building platform.Check if you run itEPSS 0.62%Mar 31, 2026
- High7.1OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl…Check if you run itEPSS 0.64%Mar 31, 2026
- Critical9.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check.Check if you run itEPSS 0.51%Mar 31, 2026
- High7.2The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ para…Check if you run itEPSS 0.40%Mar 31, 2026
- Medium5.4The Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.12.Check if you run itEPSS 0.18%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets.Check if you run itEPSS 0.36%Mar 31, 2026
- Critical9.2OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic oper…Check if you run itEPSS 0.63%Mar 31, 2026
- High7.5An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code.Check if you run itEPSS 1.34%Mar 31, 2026
- High7.5An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName me…Check if you run itEPSS 1.50%Mar 31, 2026
- High8.7Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (form…Check if you run itEPSS 0.45%Mar 31, 2026