Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.51%Mar 19, 2026
- High7.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.19%Mar 19, 2026
- Critical9.1When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.Check if you run itEPSS 0.53%Mar 19, 2026
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.30%Mar 19, 2026
- High8.6LuCI is the OpenWrt Configuration Interface.Check if you run itEPSS 0.26%Mar 19, 2026
- Medium4.9SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.38%Mar 19, 2026
- High7.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.33%Mar 19, 2026
- High8.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.35%Mar 19, 2026
- High8.2Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is declared under a sCheck if you run itEPSS 0.37%Mar 19, 2026
- Low1.8OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.33%Mar 19, 2026
- Low2.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.31%Mar 19, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.24%Mar 19, 2026
- Medium5.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.92%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible without authenticatCheck if you run itEPSS 0.13%Mar 19, 2026
- Low2.4OpenClaw versions prior to 2026.2.23 contain an html injection vulnerability in the HTML session exporter that allows attackers to execute arbitrary javascript by injecting malicioCheck if you run itEPSS 0.18%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated tool permissCheck if you run itEPSS 0.22%Mar 19, 2026
- Critical9.3OpenClaw before 2026.2.24 contains a sandbox network isolation bypass vulnerability that allows trusted operators to join another container's network namespace.Check if you run itEPSS 0.30%Mar 19, 2026
- Low2.3OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads.Check if you run itEPSS 0.20%Mar 19, 2026
- High8.3OpenClaw gateway plugin versions prior to 2026.2.26 contain a path traversal vulnerability that allows remote attackers to bypass route authentication checks by manipulating /api/cCheck if you run itEPSS 0.50%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.3.2 fail to pass the senderIsOwner flag when processing Discord voice transcripts in agentCommand, causing the flag to default to true.Check if you run itEPSS 0.17%Mar 19, 2026
- Medium6.1OpenClaw versions prior to 2026.2.21 contain an authentication bypass vulnerability in the Control UI when allowInsecureAuth is explicitly enabled and the gateway is exposed over pCheck if you run itEPSS 0.44%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.24 contain a path traversal vulnerability where @-prefixed absolute paths bypass workspace-only file-system boundary validation due to canonicalizCheck if you run itEPSS 0.39%Mar 19, 2026
- High7.3OpenClaw versions prior to 2026.2.22 contain an arbitrary shell execution vulnerability in shell environment fallback that trusts the unvalidated SHELL path from the host environmeCheck if you run itEPSS 0.14%Mar 19, 2026
- Medium6.3OpenClaw versions prior to 2026.2.26 server-http contains an authentication bypass vulnerability in gateway authentication for plugin channel endpoints due to path canonicalizationCheck if you run itEPSS 0.22%Mar 19, 2026
Sort