Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint…Check if you run itEPSS 0.27%Apr 10, 2026
- Medium5.3GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permiss…Check if you run itEPSS 0.37%Apr 10, 2026
- High7.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.40%Apr 10, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 2.72%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Check if you run itEPSS 0.40%Apr 10, 2026
- High7.1PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.40%Apr 10, 2026
- Medium5.1OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service re…Check if you run itEPSS 0.18%Apr 10, 2026
- Medium6.9OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata.Check if you run itEPSS 0.41%Apr 10, 2026
- Medium5.3OpenClaw versions 2026.2.13 through 2026.3.24 contain an ANSI escape sequence injection vulnerability in approval prompts that allows attackers to spoof terminal output.Check if you run itEPSS 0.36%Apr 10, 2026
- Medium5.3OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements.Check if you run itEPSS 0.38%Apr 10, 2026
- High7.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.55%Apr 10, 2026
- Medium6.4The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the , , and post meta values in all versions up to, and including,…Check if you run itEPSS 0.20%Apr 10, 2026
- Medium4.3The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to Improper Access Control in all versions u…Check if you run itEPSS 0.40%Apr 10, 2026
- Medium5.3The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0.Check if you run itEPSS 0.57%Apr 10, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the and functions in all versions up…Check if you run itEPSS 0.36%Apr 10, 2026
- Medium5.3PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.40%Apr 9, 2026
- Medium6.5PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.38%Apr 9, 2026
- Critical10.0PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.34%Apr 9, 2026
- Critical9.3PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.34%Apr 9, 2026
- Medium6.9A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 3.46%Apr 9, 2026
- Medium5.5A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 3.46%Apr 9, 2026
- Medium5.5A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 3.49%Apr 9, 2026
- Critical9.6PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.60%Apr 9, 2026
- Medium5.5A flaw has been found in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.71%Apr 9, 2026
- Medium5.5A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.71%Apr 9, 2026