Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3OpenClaw versions prior to 2026.3.2 contain an authentication bypass vulnerability in the /api/channels route classification due to canonicalization depth mismatch between auth-patCheck if you run itEPSS 0.34%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.2.22 contain an environment variable injection vulnerability in the system.run function that allows attackers to bypass command allowlist restrictioCheck if you run itEPSS 0.61%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.23 contain a sandbox bypass vulnerability in the sandboxed image tool that fails to enforce tools.fs.workspaceOnly restrictions on mounted sandboxCheck if you run itEPSS 0.37%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=node without deCheck if you run itEPSS 0.31%Mar 19, 2026
- Low2.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.41%Mar 19, 2026
- Medium4.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.29%Mar 19, 2026
- Medium6.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.47%Mar 19, 2026
- Low2.4OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.55%Mar 19, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.18%Mar 19, 2026
- Critical9.5OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 2.50%Mar 19, 2026
- Medium6.5Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 19, 2026
- Critical9.5OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 1.36%Mar 19, 2026
- High8.2Discourse is an open-source discussion platform.Check if you run itEPSS 0.26%Mar 19, 2026
- Low2.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.37%Mar 19, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.42%Mar 19, 2026
- Critical9.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.63%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.31%Mar 19, 2026
- High8.5FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.25%Mar 19, 2026
- High8.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.32%Mar 19, 2026
- Critical9.8Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 1.24%Mar 19, 2026
- Low1.21-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData via zero-length encrypted content.Check if you run itEPSS 0.11%Mar 19, 2026
- High8.7Discourse is an open-source discussion platform.Check if you run itEPSS 1.29%Mar 19, 2026
- High8.3Heap Overflow in TLS 1.3 ECH parsing.Check if you run itEPSS 0.54%Mar 19, 2026
- High8.6SQLBot is an intelligent data query system based on a large language model and RAG.Check if you run itEPSS 0.65%Mar 19, 2026
- Medium6.8SiYuan is a personal knowledge management system.Check if you run itEPSS 0.50%Mar 19, 2026
Sort