Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code.Check if you run itEPSS 1.10%May 29, 2026
- High8.7OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands.Check if you run itEPSS 0.45%May 29, 2026
- Medium5.9OpenClaw before 2026.4.29 contains an SSRF policy bypass vulnerability in browser debug and export routes that allows reuse of already-open blocked tabs.Check if you run itEPSS 0.26%May 29, 2026
- High7.5OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity.Check if you run itEPSS 0.36%May 29, 2026
- Low2.3OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks.Check if you run itEPSS 0.25%May 29, 2026
- Low2.3OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals through…Check if you run itEPSS 0.29%May 29, 2026
- High8.7OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows non-owner authorized chat senders to issue device…Check if you run itEPSS 0.40%May 29, 2026
- Medium6.3ACM/MCE assisted-service writes raw referenced pull-secret contents into when pull-secret validation fails.Check if you run itEPSS 0.18%May 29, 2026
- Medium5.1XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupt…Check if you run itEPSS 0.13%May 29, 2026
- High8.7A vulnerability has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- Medium6.9A flaw has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.28%May 29, 2026
- High8.7A vulnerability was detected in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- High8.7A security vulnerability has been detected in Shibby Tomato up to 1.28.Check if you run itEPSS 0.44%May 29, 2026
- High8.7A weakness has been identified in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- Low2.1A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.40%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- Medium6.9PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms.Check if you run itEPSS 0.16%May 29, 2026
- High8.7Heatmiser Wifi Thermostat 1.7 contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve administrative credentials by accessing…Check if you run itEPSS 0.31%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
Sort