Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2RAUC controls the update process on embedded Linux systems.Check if you run itEPSS 0.15%Mar 31, 2026
- High7.5An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code.Check if you run itEPSS 0.49%Mar 31, 2026
- High7.5An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custCheck if you run itEPSS 0.51%Mar 31, 2026
- High7.5An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service.Check if you run itEPSS 0.56%Mar 31, 2026
- Medium6.5When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing alCheck if you run itEPSS 0.15%Mar 31, 2026
- High8.2An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets.Check if you run itEPSS 1.07%Mar 31, 2026
- Medium4.3When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extrCheck if you run itEPSS 0.17%Mar 31, 2026
- Medium4.3An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enaCheck if you run itEPSS 0.14%Mar 31, 2026
- High8.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute aCheck if you run itEPSS 0.93%Mar 31, 2026
- High8.1Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.Check if you run itEPSS 0.36%Mar 31, 2026
- High8.1Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.Check if you run itEPSS 0.36%Mar 31, 2026
- High7.2The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ parameter in allCheck if you run itEPSS 0.31%Mar 31, 2026
- Medium5.4The Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.12.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium4.3The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions upCheck if you run itEPSS 0.17%Mar 31, 2026
- Low2.3OpenClaw before 2026.3.8 contains a sender allowlist bypass vulnerability in its Microsoft Teams plugin that allows unauthorized senders to bypass intended authorization checks.Check if you run itEPSS 0.27%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.12 applies rate limiting only after successful webhook authentication, allowing attackers to bypass rate limits and brute-force webhook secrets.Check if you run itEPSS 0.28%Mar 31, 2026
- Medium5.8OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified pareCheck if you run itEPSS 0.08%Mar 31, 2026
- High8.7OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages.Check if you run itEPSS 0.43%Mar 31, 2026
- Medium5.8OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the final move operaCheck if you run itEPSS 0.08%Mar 31, 2026
- High7.1OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing channel commands to mutate protected sibling-account configuration despite configWrites restrictioCheck if you run itEPSS 0.20%Mar 31, 2026
- High7.3OpenClaw before 2026.3.11 contains an approval-integrity vulnerability in node-host system.run approvals that displays extracted shell payloads instead of the executed argv.Check if you run itEPSS 0.28%Mar 31, 2026
- Low2.0OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as unset, allowinCheck if you run itEPSS 0.11%Mar 31, 2026
- Medium5.3OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases.Check if you run itEPSS 0.20%Mar 31, 2026
- High8.6OpenClaw before 2026.3.12 automatically discovers and loads plugins from .OpenClaw/extensions/ without explicit trust verification, allowing arbitrary code execution.Check if you run itEPSS 0.34%Mar 31, 2026
- Critical9.2OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the iMessage attachment staging flow that allows attackers to execute arbitrary commands on configureCheck if you run itEPSS 2.01%Mar 31, 2026
Sort