Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.37%Mar 31, 2026
- Critical9.6A command injection vulnerability exists in mlflow/mlflow when serving a model with .Check if you run itEPSS 1.39%Mar 31, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.32%Mar 31, 2026
- High7.8An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow…Check if you run itEPSS 0.22%Mar 31, 2026
- High7.7Trino is a distributed SQL query engine for big data analytics.Check if you run itEPSS 0.20%Mar 31, 2026
- High7.5mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.37%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetch internal URCheck if you run itEPSS 0.23%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked.Check if you run itEPSS 0.34%Mar 31, 2026
- High7.1OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl alias parameCheck if you run itEPSS 0.58%Mar 31, 2026
- Medium6.3OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets.Check if you run itEPSS 0.37%Mar 31, 2026
- Critical9.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check.Check if you run itEPSS 0.84%Mar 31, 2026
- Medium5.3OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently downgrade toCheck if you run itEPSS 0.30%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broadeCheck if you run itEPSS 0.39%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.28 downloads and stores inbound media from Zalo channels before validating sender authorization.Check if you run itEPSS 0.36%Mar 31, 2026
- Medium6.0mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.51%Mar 31, 2026
- High8.4ZEBRA is a Zcash node written entirely in Rust.Check if you run itEPSS 0.26%Mar 31, 2026
- Critical9.2ZEBRA is a Zcash node written entirely in Rust.Check if you run itEPSS 0.79%Mar 31, 2026
- High7.7Nhost is an open source Firebase alternative with GraphQL.Check if you run itEPSS 0.38%Mar 31, 2026
- High8.5Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicious JavaScriptCheck if you run itEPSS 0.15%Mar 31, 2026
- High7.7Giskard is an open-source Python library for testing and evaluating agentic systems.Check if you run itEPSS 0.64%Mar 31, 2026
- Medium5.0go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.15%Mar 31, 2026
- High8.6Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary JavaScript in tCheck if you run itEPSS 0.15%Mar 31, 2026
- Critical10.0FastGPT is an AI Agent building platform.Check if you run itEPSS 0.42%Mar 31, 2026
- High7.7FastGPT is an AI Agent building platform.Check if you run itEPSS 0.29%Mar 31, 2026
- Critical10.0NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check this weekEPSS 34.97%Mar 31, 2026
Sort