Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing att…Check if you run itEPSS 0.92%Mar 5, 2026
- Medium5.3OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.37%Mar 5, 2026
- High8.2Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution'), Use of Password Hash With Insufficient Computational Effort vulnerability in…Check if you run itEPSS 0.16%Mar 5, 2026
- Critical10.0A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.Check if you run itEPSS 0.48%Mar 5, 2026
- High8.2Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Pro…Check if you run itEPSS 0.43%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff…Check if you run itEPSS 0.34%Mar 5, 2026
- Critical9.0Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by A…Check if you run itEPSS 0.45%Mar 5, 2026
- Critical9.1Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator.Check if you run itEPSS 0.42%Mar 5, 2026
- Critical9.8Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib.Check if you run itEPSS 0.79%Mar 5, 2026
- Critical9.8UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library.Check if you run itEPSS 0.68%Mar 5, 2026
- Critical9.1Apache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session id.Check if you run itEPSS 0.59%Mar 5, 2026
- Critical9.8Plack::Middleware::Session::Simple versions before 0.05 for Perl generates session ids insecurely.Check if you run itEPSS 0.45%Mar 5, 2026
- High8.4A cache poisoning vulnerability has been found in the Pingora HTTP proxy framework’s default cache key construction.Check if you run itEPSS 0.22%Mar 5, 2026
- Critical9.3An HTTP Request Smuggling vulnerability (CWE-444) has been found in Pingora's parsing of HTTP/1.0 and Transfer-Encoding requests.Check if you run itEPSS 0.58%Mar 5, 2026
- Medium5.9OpenDeck is Linux software for your Elgato Stream Deck.Check if you run itEPSS 0.51%Mar 4, 2026
- Medium4.3A vulnerability in the OSPF protocol of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could…Check if you run itEPSS 0.21%Mar 4, 2026
- High7.5A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusRead…Check if you run itEPSS 0.92%Mar 4, 2026
- Medium6.0A vulnerability in a small subset of CLI commands that are used on Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat De…Check if you run itEPSS 0.14%Mar 4, 2026
- Medium5.3Craft is a content management system (CMS).Check if you run itEPSS 0.30%Mar 4, 2026
- Medium6.02N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.Check if you run itEPSS 0.26%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does no…Check if you run itEPSS 0.21%Mar 4, 2026
- Medium6.6Files or Directories Accessible to External Parties, Incorrect Permission Assignment for Critical Resource vulnerability in Hallo Welt! GmbH BlueSpice (Extension:NSFil…Check if you run itEPSS 0.28%Mar 4, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing.Check if you run itEPSS 0.20%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails.Check if you run itEPSS 0.20%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing.Check if you run itEPSS 0.20%Mar 4, 2026