Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it…Check if you run itEPSS 0.18%Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down When the nl80211 socket that origina…Check if you run itEPSS 0.18%Apr 24, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: NFC: nxp-nci: allow GPIOs to sleep Allow the firmware and enable GPIOs to sleep.Check if you run itEPSS 0.16%Apr 24, 2026
- Medium4.3The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with…Check if you run itEPSS 0.57%Apr 24, 2026
- High7.7Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.57%Apr 24, 2026
- High7.2A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation…Check if you run itEPSS 0.59%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorizati…Check if you run itEPSS 0.83%Apr 24, 2026
- Medium6.9A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication.Check if you run itEPSS 0.31%Apr 24, 2026
- High8.4A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections.Check if you run itEPSS 0.25%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization.Check if you run itEPSS 0.75%Apr 24, 2026
- Medium5.4OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows.Check if you run itEPSS 0.12%Apr 23, 2026
- High7.1OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configur…Check if you run itEPSS 0.43%Apr 23, 2026
- High8.7OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter.Check if you run itEPSS 0.84%Apr 23, 2026
- Low2.3OpenClaw before 2026.3.31 lacks browser-origin validation in HTTP operator endpoints when operating in trusted-proxy mode, allowing cross-site request forgery attacks.Check if you run itEPSS 0.17%Apr 23, 2026
- Medium4.3OpenClaw before 2026.3.31 contains a time-of-check-time-of-use vulnerability in sandbox file operations that allows attackers to bypass fd-based defenses.Check if you run itEPSS 0.12%Apr 23, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured projec…Check if you run itEPSS 0.21%Apr 23, 2026
- High7.6Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.48%Apr 23, 2026
- Medium5.3OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act…Check if you run itEPSS 0.30%Apr 23, 2026
- Low2.3OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope…Check if you run itEPSS 0.37%Apr 23, 2026
- High7.3Yadea T5 Electric Bicycles (models manufactured in/after 2024) have a weak authentication mechanism in their keyless entry system.Check if you run itEPSS 0.27%Apr 23, 2026
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Check if you run itEPSS 0.31%Apr 23, 2026
- High7.5CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.Check if you run itEPSS 0.51%Apr 23, 2026
- High7.5Froxlor is open source server administration software.Check if you run itEPSS 0.52%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Patch nowKEVEPSS 3.22%Apr 23, 2026
- High8.7A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier.Check if you run itEPSS 0.71%Apr 23, 2026