Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5Admidio is an open-source user management solution.Check if you run itEPSS 0.12%May 7, 2026
- Medium5.2Admidio is an open-source user management solution.Check if you run itEPSS 0.29%May 7, 2026
- Medium4.5Admidio is an open-source user management solution.Check if you run itEPSS 0.36%May 7, 2026
- Medium6.5Admidio is an open-source user management solution.Check if you run itEPSS 0.31%May 7, 2026
- High8.8NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 1.88%May 7, 2026
- Critical9.1CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.33%May 7, 2026
- Medium4.4When enabling trace logging in Spring Cloud Config Server sensitive information was placed in plain text in the logs.Check if you run itEPSS 0.17%May 7, 2026
- High7.8There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview.Check if you run itEPSS 0.14%May 7, 2026
- Medium6.5The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.6.10.6.Check if you run itEPSS 0.49%May 7, 2026
- Medium6.8ZTE ZX297520V3 BootROM contains a vulnerability that allows arbitrary memory writes via USB.Check if you run itEPSS 0.30%May 7, 2026
- Critical9.6Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.65%May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityPatch nowKEVEPSS 34.45%May 7, 2026
- Medium5.3OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry.Check if you run itEPSS 0.31%May 6, 2026
- Medium5.4PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.22%May 6, 2026
- Medium5.3Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs.Check if you run itEPSS 0.33%May 6, 2026
- Critical9.1Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 2.26%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.41%May 6, 2026
- Low2.3Incus is a system container and virtual machine manager.Check if you run itEPSS 0.17%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.39%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.40%May 6, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation.Check if you run itEPSS 0.24%May 6, 2026
- Medium6.9OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs throu…Check if you run itEPSS 0.29%May 6, 2026
- High8.7OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies.Check if you run itEPSS 0.43%May 6, 2026
- High8.5OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override criti…Check if you run itEPSS 0.13%May 6, 2026
- High8.3OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intend…Check if you run itEPSS 0.25%May 6, 2026
Sort