Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.Check if you run itEPSS 0.66%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g.Check if you run itEPSS 0.52%Jun 1, 2026
- High7.5A bug in Apache Airflow's bulk Task Instances API ( ) evaluated authorization against the resolved from the URL path while operating on the / extracted from request-bo…Check if you run itEPSS 0.76%Jun 1, 2026
- High7.2A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the check, enabling redirection from a trusted Airflow doma…Check if you run itEPSS 0.76%Jun 1, 2026
- Medium6.5A bug in the GET REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's…Check if you run itEPSS 0.66%Jun 1, 2026
- Medium5.5A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
- Low1.9A vulnerability has been found in Assimp up to 6.0.4.Check if you run itEPSS 0.12%May 31, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- Critical9.9Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries witho…Check if you run itEPSS 0.55%May 29, 2026
- High8.7OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands.Check if you run itEPSS 0.45%May 29, 2026
- Low2.3OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals through…Check if you run itEPSS 0.29%May 29, 2026
- High8.7OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows non-owner authorized chat senders to issue device…Check if you run itEPSS 0.40%May 29, 2026
- Medium4.1Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with acce…Check if you run itEPSS 0.24%May 29, 2026
- Medium4.1Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the mo…Check if you run itEPSS 0.27%May 29, 2026
- High8.1n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.41%May 29, 2026
- Medium6.5n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.46%May 29, 2026
- Medium4.1Weak authentication between the Wireless Control Module (WCM) and the Engine Control Module (ECM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a…Check if you run itEPSS 0.14%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026
- Critical9.3Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall…Check if you run itEPSS 1.38%May 29, 2026