Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic operator client wCheck if you run itEPSS 0.48%Mar 31, 2026
- Medium6.9A vulnerability was determined in code-projects Student Membership System 1.0.Check if you run itEPSS 0.36%Mar 31, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue affects KubioCheck if you run itEPSS 0.14%Mar 31, 2026
- High7.0Insecure Direct Object Reference (IDOR) vulnerability in 1millionbot Millie chat that allows private conversations of other users being viewed by simply changing the conversation ICheck if you run itEPSS 0.21%Mar 31, 2026
- High8.7Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (formulating a queCheck if you run itEPSS 0.27%Mar 31, 2026
- Critical9.1Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key.Check if you run itEPSS 0.33%Mar 31, 2026
- Medium5.3A vulnerability was found in code-projects Student Membership System 1.0.Check if you run itEPSS 0.20%Mar 31, 2026
- Critical9.3SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQLCheck if you run itEPSS 0.33%Mar 31, 2026
- Medium5.3A vulnerability has been found in code-projects Student Membership System 1.0.Check if you run itEPSS 0.20%Mar 31, 2026
- Critical9.3Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/index.php?page=itCheck if you run itEPSS 0.14%Mar 31, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104.Check if you run itEPSS 0.20%Mar 31, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104.Check if you run itEPSS 0.20%Mar 31, 2026
- Critical9.3Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/Check if you run itEPSS 0.16%Mar 31, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104.Check if you run itEPSS 0.20%Mar 31, 2026
- Critical9.1A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allowsCheck if you run itEPSS 0.28%Mar 31, 2026
- High8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERICheck if you run itEPSS 0.17%Mar 31, 2026
- High8.7A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERICheck if you run itEPSS 0.17%Mar 31, 2026
- High7.5A flaw was found in the gdk-pixbuf library.Check if you run itEPSS 1.15%Mar 31, 2026
- Medium6.9A flaw has been found in code-projects Student Membership System 1.0.Check if you run itEPSS 0.26%Mar 31, 2026
- Medium4.8A weakness has been identified in Nothings stb up to 2.30.Check if you run itEPSS 0.11%Mar 31, 2026
- Medium4.8A security flaw has been discovered in Nothings stb_image up to 2.30.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium5.3A vulnerability was identified in TRENDnet TEW-713RE up to 1.02.Check if you run itEPSS 9.63%Mar 31, 2026
- Medium5.8The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacksCheck if you run itEPSS 0.26%Mar 31, 2026
- Medium5.3A vulnerability was determined in TRENDnet TEW-713RE up to 1.02.Check if you run itEPSS 8.51%Mar 31, 2026
- Medium6.9A vulnerability was found in SourceCodester Teacher Record System 1.0.Check if you run itEPSS 0.26%Mar 31, 2026
Sort