Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user can access unauthorized course-level informati…Check if you run itEPSS 0.21%Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cgwb_release_workfn() calls css_put(wb-…Check if you run itEPSS 0.18%Apr 24, 2026
- High7.4Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.91%Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.48%Apr 24, 2026
- Medium5.3OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients.Check if you run itEPSS 0.37%Apr 23, 2026
- Critical9.3radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the comman…Check if you run itEPSS 2.98%Apr 23, 2026
- High8.7A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or…Check if you run itEPSS 0.56%Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.33%Apr 23, 2026
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.48%Apr 23, 2026
- Low2.3OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope…Check if you run itEPSS 0.37%Apr 23, 2026
- Medium6.4The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta value in versions up to, and including, 2.2.261…Check if you run itEPSS 0.26%Apr 23, 2026
- High7.3Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.36%Apr 22, 2026
- High7.2Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.40%Apr 22, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Check if you run itEPSS 0.35%Apr 22, 2026
- Medium4.7A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utility of uutils coreutils allows an attacker to bypass no-dereference intent.Check if you run itEPSS 0.11%Apr 22, 2026
- Medium4.2The mv utility in uutils coreutils fails to preserve file ownership during moves across different filesystem boundaries.Check if you run itEPSS 0.14%Apr 22, 2026
- Critical9.4In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical bl…Check if you run itEPSS 0.50%Apr 22, 2026
- Medium6.4The Switch CTA Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wppw_cta_box' shortcode in all versions up to, and including, 1.1.Check if you run itEPSS 0.41%Apr 22, 2026
- Medium6.6Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Sourc…Check if you run itEPSS 0.14%Apr 22, 2026
- High8.9WWBN AVideo is an open source video platform.Check if you run itEPSS 2.69%Apr 22, 2026
- Critical9.2Oxia is a metadata store and coordination system.Check if you run itEPSS 0.41%Apr 21, 2026
- High8.7Oxia is a metadata store and coordination system.Check if you run itEPSS 0.54%Apr 21, 2026
- Medium6.9Oxia is a metadata store and coordination system.Check if you run itEPSS 0.26%Apr 21, 2026
- High8.7Oxia is a metadata store and coordination system.Check if you run itEPSS 0.33%Apr 21, 2026
- Medium6.3The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards.Check if you run itEPSS 0.51%Apr 21, 2026