Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing attackers to bypCheck if you run itEPSS 0.58%Mar 5, 2026
- Medium6.4The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post meta value and the block attribute in all versionsCheck if you run itEPSS 0.22%Mar 5, 2026
- Critical9.5Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover.Check if you run itEPSS 0.44%Mar 5, 2026
- High7.1File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.Check if you run itEPSS 0.37%Mar 5, 2026
- Critical9.1Chamilo is a learning management system.Check if you run itEPSS 0.36%Mar 5, 2026
- Critical9.1File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.Check if you run itEPSS 0.54%Mar 5, 2026
- Medium6.9OpenReplay is a self-hosted session replay suite.Check if you run itEPSS 0.40%Mar 5, 2026
- Critical10.0NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module.Check if you run itEPSS 0.84%Mar 5, 2026
- Medium6.5Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.Check if you run itEPSS 0.26%Mar 5, 2026
- High8.6ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.35%Mar 5, 2026
- High8.8Frappe is a full-stack web application framework.Check if you run itEPSS 0.31%Mar 5, 2026
- High7.1Frappe is a full-stack web application framework.Check if you run itEPSS 0.22%Mar 5, 2026
- Low1.3Frappe is a full-stack web application framework.Check if you run itEPSS 0.19%Mar 5, 2026
- Medium6.1Products.isurlinportal is a replacement for isURLInPortal method in Plone.Check if you run itEPSS 0.26%Mar 5, 2026
- Medium5.3The Graph is an indexing protocol for querying networks like Ethereum, IPFS, Polygon, and other blockchains.Check if you run itEPSS 0.26%Mar 5, 2026
- High8.0MarkUs is a web application for the submission and grading of student assignments.Check if you run itEPSS 0.26%Mar 5, 2026
- Critical10.0Trivy Vulnerability Scanner is a VS Code extension that helps find vulnerabilities.Check if you run itEPSS 0.51%Mar 5, 2026
- Medium6.1lxml_html_clean is a project for HTML cleaning functionalities copied from .Check if you run itEPSS 0.30%Mar 5, 2026
- Medium6.1lxml_html_clean is a project for HTML cleaning functionalities copied from .Check if you run itEPSS 0.28%Mar 5, 2026
- Medium6.4CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture.Check if you run itEPSS 0.32%Mar 5, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.74%Mar 5, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.45%Mar 5, 2026
- High7.5OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.75%Mar 5, 2026
- High7.0Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows Privilege Escalation.Check if you run itEPSS 0.38%Mar 5, 2026
- Critical9.8An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server.Check if you run itEPSS 0.70%Mar 5, 2026
Sort