Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in the user registration funct…Check if you run itEPSS 0.15%May 29, 2026
- High8.7OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands.Check if you run itEPSS 0.25%May 29, 2026
- Medium5.9OpenClaw before 2026.4.29 contains an SSRF policy bypass vulnerability in browser debug and export routes that allows reuse of already-open blocked tabs.Check if you run itEPSS 0.15%May 29, 2026
- High7.5OpenClaw before 2026.5.18 contains an authorization bypass vulnerability in QQBot native approval buttons that fails to enforce configured approver identity.Check if you run itEPSS 0.21%May 29, 2026
- Low2.3OpenClaw before 2026.4.29 contains a policy bypass vulnerability in QQBot admin commands that allows authenticated senders to skip DM-only and allowFrom policy checks.Check if you run itEPSS 0.15%May 29, 2026
- Low2.3QuickCMS is vulnerable to Cross-Site Scripting (XSS) through its insecure HTTP-based plugin‑fetching mechanism.Check if you run itEPSS 0.18%May 29, 2026
- Medium4.8QuickCMS allows a user's session identifier to be set before authentication.Check if you run itEPSS 0.15%May 29, 2026
- Low2.3OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals through…Check if you run itEPSS 0.17%May 29, 2026
- High8.7OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows non-owner authorized chat senders to issue device…Check if you run itEPSS 0.24%May 29, 2026
- Medium6.3ACM/MCE assisted-service writes raw referenced pull-secret contents into when pull-secret validation fails.Check if you run itEPSS 0.18%May 29, 2026
- Medium5.1XX-Net V5.16.6 contains a WebSocket frame parsing vulnerability in the WebSocket_receive_worker routine of simple_http_server.py that allows attackers to cause corrupt…Check if you run itEPSS 0.13%May 29, 2026
- High8.7A vulnerability has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- Medium6.9A flaw has been found in Shibby Tomato 1.28.Check if you run itEPSS 0.28%May 29, 2026
- High8.7A vulnerability was detected in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- High8.7A security vulnerability has been detected in Shibby Tomato up to 1.28.Check if you run itEPSS 0.44%May 29, 2026
- High8.7A weakness has been identified in Shibby Tomato 1.28.Check if you run itEPSS 0.44%May 29, 2026
- Low2.1A security flaw has been discovered in TRENDnet TEW-432BRP 3.10B20.Check if you run itEPSS 0.40%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- Medium6.9PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms.Check if you run itEPSS 0.16%May 29, 2026
Sort