Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution that allows attackers to supply absolute or relative path…Check if you run itEPSS 0.19%May 11, 2026
- High7.7Crabbox before 0.9.0 contains an authentication bypass vulnerability in the coordinator user-token verification path where the verifyUserToken() function fails to reje…Check if you run itEPSS 0.69%May 11, 2026
- High7.7OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised mode…Check if you run itEPSS 0.93%May 11, 2026
- Medium6.0OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trus…Check if you run itEPSS 0.39%May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.Check if you run itEPSS 0.42%May 11, 2026
- Medium5.4OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code.Check if you run itEPSS 0.20%May 11, 2026
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.15%May 11, 2026
- Medium4.4jq is a command-line JSON processor.Check if you run itEPSS 0.15%May 11, 2026
- High7.5In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication…Check if you run itEPSS 0.50%May 11, 2026
- High7.3Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager.Check if you run itEPSS 0.35%May 11, 2026
- High8.7SQL injection vulnerability in pgAdmin 4 Maintenance Tool.Check if you run itEPSS 0.64%May 11, 2026
- High7.2Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be trigge…Check if you run itEPSS 0.37%May 11, 2026
- High8.8The software fails to enforce role-based access controls for certain Gateway API invocations.Check if you run itEPSS 0.17%May 11, 2026
- Medium6.3Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.Check if you run itEPSS 0.66%May 9, 2026
- Medium5.3An improper authorization vulnerability in HCL BigFix WebUI allows an authenticated user without Master Operator privileges to access internal data (site names, versio…Check if you run itEPSS 0.22%May 9, 2026
- High8.7Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 1.47%May 9, 2026
- High8.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.53%May 9, 2026
- High8.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.40%May 9, 2026
- High8.7bubblewrap is a low-level unprivileged sandboxing tool.Check if you run itEPSS 0.36%May 9, 2026
- High8.7Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.Check if you run itEPSS 1.55%May 8, 2026
- High7.2n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.31%May 8, 2026
- Medium4.3n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.43%May 8, 2026
- Medium6.7Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.43%May 8, 2026
- Medium5.3n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.41%May 8, 2026
- Critical9.2ZEBRA is a Zcash node written entirely in Rust.Check if you run itEPSS 0.38%May 8, 2026