Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during pro…Check if you run itEPSS 0.20%May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.Check if you run itEPSS 0.42%May 11, 2026
- High8.5The Open edx Enterprise Service app provides enterprise features to the Open edX platform.Check if you run itEPSS 0.30%May 11, 2026
- Critical9.9Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.45%May 11, 2026
- Medium6.5kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer (Kusto).Check if you run itEPSS 0.48%May 11, 2026
- High7.1A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.Check if you run itEPSS 0.29%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.35%May 11, 2026
- High8.7OS command injection (CWE-78) vulnerability in pgAdmin 4 Import/Export query export.Check if you run itEPSS 2.18%May 11, 2026
- Medium6.0Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.Check if you run itEPSS 0.28%May 11, 2026
- High8.1Grav is a file-based Web platform.Check if you run itEPSS 0.58%May 11, 2026
- High8.0A flaw was found in Cockpit.Check if you run itEPSS 1.19%May 11, 2026
- Medium6.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the metaphone() function in ext/standard/metaphone.c uses a sign…Check if you run itEPSS 0.84%May 10, 2026
- High7.8pyp2spec generates working Fedora RPM spec file for Python projects.Check if you run itEPSS 0.23%May 9, 2026
- High7.7FastGPT is an AI Agent building platform.Check if you run itEPSS 0.36%May 8, 2026
- High8.9Ray is an AI compute engine.Check if you run itEPSS 0.70%May 8, 2026
- Medium6.5Lemmy is a link aggregator and forum for the fediverse.Check if you run itEPSS 0.35%May 8, 2026
- Medium5.3n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.41%May 8, 2026
- High8.2In the Linux kernel, the following vulnerability has been resolved: xfs: fix undersized l_iclog_roundoff values If the superblock doesn't list a log stripe unit, we se…Check if you run itEPSS 0.59%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/apic: Disable x2apic on resume if the kernel expects so When resuming from s2ram, firmware may…Check if you run itEPSS 0.12%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl f…Check if you run itEPSS 0.16%May 8, 2026
- High7.8PHPUnit is a testing framework for PHP.Check if you run itEPSS 0.28%May 8, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: arm64: dts: qcom: monaco: Reserve full Gunyah metadata region We observe spurious "Synchronous Exte…Check if you run itEPSS 0.61%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't reserve…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md raid: fix hang when stopping arrays with metadata through dm-raid When using device-mapper's dm-…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() [BUG] There is a bug r…Check if you run itEPSS 0.13%May 8, 2026