Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability.Check if you run itEPSS 0.22%Apr 29, 2026
- Medium4.3Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.Check if you run itEPSS 0.24%Apr 29, 2026
- Medium5.5A vulnerability has been found in eiliyaabedini aider-mcp up to 667b914301aada695aab0e46d1fb3a7d5e32c8af.Check if you run itEPSS 1.47%Apr 28, 2026
- Low2.9A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.33%Apr 28, 2026
- Low2.1A weakness has been identified in Xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.21%Apr 28, 2026
- Low2.9A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.42%Apr 28, 2026
- High7.7Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.29%Apr 28, 2026
- Critical9.2Snap One WattBox 800 and 820 series firmware versions prior to 2.10.0.0 contain undisclosed diagnostic HTTP endpoints that require only the device MAC address and serv…Check if you run itEPSS 0.43%Apr 28, 2026
- Medium6.1A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript…Check if you run itEPSS 0.37%Apr 28, 2026
- Medium5.9Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise…Check if you run itEPSS 0.14%Apr 28, 2026
- Low2.9A security vulnerability has been detected in o2oa up to 10.0.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.1A weakness has been identified in o2oa up to 10.0.Check if you run itEPSS 0.21%Apr 28, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.20%Apr 28, 2026
- Medium6.5The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA…Check if you run itEPSS 0.36%Apr 28, 2026
- Medium4.9A vulnerability affecting the detailed versions of Cryptobox allows a legitimate user to prevent another to login by triggering an account lockout via sending a specia…Check if you run itEPSS 0.26%Apr 28, 2026
- High7.3OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without the operator.ad…Check if you run itEPSS 0.13%Apr 28, 2026
- High7.6OpenClaw before 2026.4.8 contains a security bypass vulnerability in node.invoke(browser.proxy) that allows mutation of persistent browser profiles.Check if you run itEPSS 0.26%Apr 28, 2026
- Medium4.8OpenClaw before 2026.4.8 contains a server-side request forgery vulnerability in Playwright redirect handling that allows attackers to bypass strict SSRF checks.Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.0OpenClaw before 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that escalates identity-bearing operator.rea…Check if you run itEPSS 0.24%Apr 28, 2026
- High7.5OpenClaw versions before 2026.4.8 fail to enforce integrity verification on downloaded plugin archives.Check if you run itEPSS 0.14%Apr 28, 2026
- Medium5.8OpenClaw before 2026.4.8 contains a remote code execution vulnerability caused by missing environment variable denylist entries for HGRCPATH, CARGO_BUILD_RUSTC_WRAPPER…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.7OpenClaw before 2026.4.8 contains an improper authorization vulnerability where the node.pair.approve method accepts operator.write scope instead of the narrower opera…Check if you run itEPSS 0.28%Apr 28, 2026
- High7.7OpenClaw before 2026.4.8 contains an approval-timeout fallback mechanism that bypasses strictInlineEval explicit-approval requirements on gateway and node exec hosts.Check if you run itEPSS 0.32%Apr 28, 2026
- High7.7OpenClaw before 2026.4.8 contains a role bypass vulnerability in the device.token.rotate function that allows minting tokens for unapproved roles.Check if you run itEPSS 0.28%Apr 28, 2026
Sort