Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.36%Mar 20, 2026
- Medium6.8Admidio is an open-source user management solution.Check if you run itEPSS 0.48%Mar 20, 2026
- Medium5.1Kargo manages and automates the promotion of software artifacts.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.55%Mar 19, 2026
- High8.2OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the stageSandboxMedia function that accepts arbitrary absolute paths when iMessage remot…Check if you run itEPSS 0.53%Mar 19, 2026
- High8.6OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and deviceFamily fields are accepted from the client without be…Check if you run itEPSS 0.31%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.49%Mar 19, 2026
- High7.5Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.21%Mar 19, 2026
- Medium6.4The Simple Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' post meta (Custom Field) in all versions up to and including 2.6.2.Check if you run itEPSS 0.36%Mar 19, 2026
- Medium5.8OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension tool execution that uses Windows shell fallback with shell: tru…Check if you run itEPSS 1.11%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd metachar…Check if you run itEPSS 0.94%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in Windows Scheduled Task script generation where environment variables are written to g…Check if you run itEPSS 0.66%Mar 19, 2026
- High8.6Kan is an open-source project management tool.Patch nowKEVEPSS 1.74%Mar 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: xfs: check for deleted cursors when revalidating two btrees The free space and inode btree repair f…Check if you run itEPSS 0.15%Mar 18, 2026
- Medium6.4The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all versions up to, and including, 2.5.1.Check if you run itEPSS 0.21%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata We found an infinite…Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.53%Mar 18, 2026
- High8.6A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to bypass metadata-based access controls through crafted…Check if you run itEPSS 0.54%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.21%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.41%Mar 18, 2026
- High7.5music-metadata is a metadata parser for audio and video media files.Check if you run itEPSS 0.51%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 construct RegExp objects directly from unescaped Feishu mention metadata in the stripBotMention function, allowing regex injection…Check if you run itEPSS 0.32%Mar 18, 2026
- Medium5.1miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allow…Check if you run itEPSS 0.18%Mar 17, 2026
- Medium6.9dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_a…Check if you run itEPSS 0.18%Mar 17, 2026
- Medium4.3Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.34%Mar 17, 2026