Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium5.7** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an a…Check if you run itEPSS 0.18%Apr 21, 2026
- High8.8FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.40%Apr 21, 2026
- High8.4OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.45%Apr 21, 2026
- High8.4OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.43%Apr 21, 2026
- High7.1Apktool is a tool for reverse engineering Android APK files.Check if you run itEPSS 0.18%Apr 21, 2026
- Medium5.3OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.Check if you run itEPSS 0.30%Apr 21, 2026
- High7.4Lawnchair is a free, open-source home app for Android.Check if you run itEPSS 2.35%Apr 21, 2026
- Low2.0OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.30%Apr 21, 2026
- Medium4.6OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.24%Apr 21, 2026
- High7.7Claude Code is an agentic coding tool.Check if you run itEPSS 0.71%Apr 21, 2026
- Medium6.5OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.22%Apr 21, 2026
- Low2.0OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.10%Apr 21, 2026
- High8.8Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immedi…Check if you run itEPSS 0.44%Apr 21, 2026
- Medium6.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Check if you run itEPSS 0.31%Apr 21, 2026
- Medium6.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Check if you run itEPSS 0.27%Apr 21, 2026
- High7.5Signal K Server is a server application that runs on a central hub in a boat.Check if you run itEPSS 0.43%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to trigger tra…Check if you run itEPSS 0.30%Apr 21, 2026
- Low2.0OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls.Check if you run itEPSS 0.12%Apr 21, 2026
- Critical9.0OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner paramet…Check if you run itEPSS 0.30%Apr 21, 2026
- High8.7OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals.Check if you run itEPSS 0.41%Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows remote attackers to make ar…Check if you run itEPSS 0.22%Apr 21, 2026
- Medium6.9OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be is…Check if you run itEPSS 0.25%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows.Check if you run itEPSS 0.25%Apr 21, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared cl…Check if you run itEPSS 0.20%Apr 21, 2026
Sort