Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.21%Apr 28, 2026
- Low1.9A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.21%Apr 28, 2026
- Low2.0A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.21%Apr 28, 2026
- Low2.9A security vulnerability has been detected in o2oa up to 10.0.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.1A weakness has been identified in o2oa up to 10.0.Check if you run itEPSS 0.21%Apr 28, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.20%Apr 28, 2026
- Medium5.5A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to trigger improper handling of XML input, which may result in unintended exposure of sensitive information.Check if you run itEPSS 0.20%Apr 28, 2026
- Medium6.5The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA…Check if you run itEPSS 0.36%Apr 28, 2026
- Medium4.9A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specia…Check if you run itEPSS 0.26%Apr 28, 2026
- High7.3OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without the operator.ad…Check if you run itEPSS 0.13%Apr 28, 2026
- High7.6OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles.Check if you run itEPSS 0.26%Apr 28, 2026
- Medium4.8OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks.Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.0OpenClaw before 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that escalates identity-bearing operator.rea…Check if you run itEPSS 0.24%Apr 28, 2026
- High7.5OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives.Check if you run itEPSS 0.14%Apr 28, 2026
- Medium5.8OpenClaw before 2026.4.8 contains a remote code execution vulnerability caused by missing environment variable denylist entries for HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.7OpenClaw before 2026.4.8 contains an improper authorization vulnerability where the node.pair.approve method accepts operator.write scope instead of the narrower opera…Check if you run itEPSS 0.28%Apr 28, 2026
- Medium5.9OpenClaw before 2026.4.8 treats shared reply MEDIA paths as trusted, allowing crafted references to trigger cross-channel local file exfiltration.Check if you run itEPSS 0.18%Apr 28, 2026
- High7.7OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts.Check if you run itEPSS 0.32%Apr 28, 2026
- High7.7OpenClaw before 2026.4.8 contains a role bypass vulnerability in the device.token.rotate function that allows minting tokens for unapproved roles.Check if you run itEPSS 0.28%Apr 28, 2026
- Low2.3OpenClaw before 2026.4.8 contains a session management vulnerability where existing WebSocket sessions survive shared gateway token rotation.Check if you run itEPSS 0.19%Apr 28, 2026
- Medium5.3OpenClaw before 2026.4.8 contains improper input validation in base64 decode paths that allocate memory before enforcing decoded-size limits.Check if you run itEPSS 0.30%Apr 28, 2026
- Low2.3OpenClaw before 2026.4.8 contains an authentication state management vulnerability where the resolvedAuth closure becomes stale after configuration reload.Check if you run itEPSS 0.21%Apr 28, 2026
- Medium5.8OpenClaw before 2026.4.8 fails to remove git plumbing environment variables from the execution environment before host exec operations.Check if you run itEPSS 0.11%Apr 28, 2026
- Medium5.1OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in QQ Bot media download paths that bypass SSRF protection.Check if you run itEPSS 0.22%Apr 28, 2026
- Medium6.3OpenClaw before 2026.4.4 contains a race condition vulnerability in shared-secret authentication that allows concurrent asynchronous requests to bypass the per-key rat…Check if you run itEPSS 0.21%Apr 28, 2026
Sort