Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path can…Check if you run itEPSS 0.34%Mar 19, 2026
- Medium6.3OpenClaw versions prior to 2026.2.21 improperly parse the left-most X-Forwarded-For header value when requests originate from configured trusted proxies, allowing atta…Check if you run itEPSS 0.36%Mar 19, 2026
- Medium6.8OpenClaw versions prior to 2026.2.22 contain a symlink traversal vulnerability in avatar handling that allows attackers to read arbitrary files outside the configured…Check if you run itEPSS 0.50%Mar 19, 2026
- Low2.3OpenClaw versions prior to 2026.2.22 contain incomplete IPv4 special-use range validation in the isPrivateIpv4() function, allowing requests to RFC-reserved ranges to…Check if you run itEPSS 0.38%Mar 19, 2026
- High8.7OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before perf…Check if you run itEPSS 0.76%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.2.22 contain an environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowli…Check if you run itEPSS 0.84%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.23 contain a sandbox bypass vulnerability in the sandboxed image tool that fails to enforce tools.fs.workspaceOnly restrictions on mo…Check if you run itEPSS 0.45%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=no…Check if you run itEPSS 0.39%Mar 19, 2026
- Critical9.5OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 1.14%Mar 19, 2026
- Critical9.5OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.70%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.36%Mar 19, 2026
- Low1.2Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protect…Check if you run itEPSS 0.37%Mar 19, 2026
- High7.2OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.34%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.46%Mar 19, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.94%Mar 19, 2026
- Critical9.0qui is a web interface for managing qBittorrent instances.Check if you run itEPSS 0.46%Mar 19, 2026
- Critical9.8ormar is a async mini ORM for Python.Check if you run itEPSS 1.17%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.35%Mar 19, 2026
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.99%Mar 19, 2026
- High8.6Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.01%Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.13%Mar 19, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.74%Mar 19, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.83%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.40%Mar 19, 2026
- Critical9.2OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.Check if you run itEPSS 0.54%Mar 19, 2026