Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions t…Check if you run itEPSS 1.16%Apr 28, 2026
- Medium6.8A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authent…Check if you run itEPSS 0.85%Apr 28, 2026
- Medium5.5A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A vulnerability was detected in ef10007 MLOps_MCP 1.0.0.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A weakness has been identified in dvladimirov MCP up to 0.1.0.Check if you run itEPSS 1.47%Apr 28, 2026
- Medium5.5A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0.Check if you run itEPSS 0.28%Apr 28, 2026
- Medium5.5A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598.Check if you run itEPSS 0.43%Apr 28, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High8.9A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High8.9A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High7.3A command injection vulnerability exists in the web server of specific firmware versions of Milesight cameras.Check if you run itEPSS 0.86%Apr 28, 2026
- Critical9.2Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.Check if you run itEPSS 0.22%Apr 28, 2026
- High8.6An out-of-bounds memory access vulnerability exists in specific firmware versions of Milesight AIOT cameras.Check if you run itEPSS 0.29%Apr 28, 2026
- Low2.1A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.28%Apr 28, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.27%Apr 28, 2026
- Low2.1A security vulnerability has been detected in CodeAstro Online Classroom 1.0.Check if you run itEPSS 0.20%Apr 28, 2026
- Medium6.9OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections.Check if you run itEPSS 0.25%Apr 28, 2026
- High8.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in chat.send that allows write-scoped gateway callers to trigger admin-only session reset operations.Check if you run itEPSS 0.26%Apr 28, 2026
- High7.1OpenClaw before 2026.3.31 contains a path traversal vulnerability in ACP dispatch that allows attackers to read arbitrary files by manipulating inbound channel attachment paths.Check if you run itEPSS 0.42%Apr 28, 2026
- High7.1OpenClaw before 2026.3.31 contains insufficient environment variable sanitization in host exec operations, failing to filter package, registry, Docker, compiler, and T…Check if you run itEPSS 0.31%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains an environment variable disclosure vulnerability in the jq safe-bin policy that fails to block the $ENV filter.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.3OpenClaw versions 2026.2.14 through 2026.3.24 fail to consistently apply guild and channel policy gates to Discord button and component interactions.Check if you run itEPSS 0.17%Apr 28, 2026
- Medium6.0OpenClaw before 2026.3.31 contains a local roots self-whitelisting vulnerability in appendLocalMediaParentRoots that allows model-initiated arbitrary host file read.Check if you run itEPSS 0.18%Apr 28, 2026
- Medium5.3OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability in MS Teams thread history fetched via Graph API.Check if you run itEPSS 0.18%Apr 28, 2026
Sort