Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9OpenTelemetry dotnet is a dotnet telemetry framework.Check if you run itEPSS 0.22%Apr 23, 2026
- Medium5.3OpenTelemetry dotnet is a dotnet telemetry framework.Check if you run itEPSS 0.46%Apr 23, 2026
- High7.7Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.38%Apr 23, 2026
- Medium6.1TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key pre…Check if you run itEPSS 0.13%Apr 23, 2026
- Medium5.3OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act…Check if you run itEPSS 0.17%Apr 23, 2026
- Low2.3OpenClaw before 2026.4.20 contains a scope enforcement bypass vulnerability in the assistant-media route that allows trusted-proxy callers without operator.read scope…Check if you run itEPSS 0.22%Apr 23, 2026
- Medium5.3OpenTelemetry dotnet is a dotnet telemetry framework.Check if you run itEPSS 0.19%Apr 23, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do…Check if you run itEPSS 0.40%Apr 23, 2026
- High7.8A flaw was found in the X.Org X server's XKB key types request validation.Check if you run itEPSS 0.25%Apr 23, 2026
- Critical9.8Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Check if you run itEPSS 0.70%Apr 23, 2026
- Medium6.3SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via…Check if you run itEPSS 0.30%Apr 23, 2026
- Critical9.3SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text…Check if you run itEPSS 0.97%Apr 23, 2026
- High8.7An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establ…Check if you run itEPSS 0.41%Apr 23, 2026
- Medium4.7An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests.Check if you run itEPSS 0.23%Apr 23, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filter…Check if you run itEPSS 0.17%Apr 23, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() When querying a nexthop object via RTM…Check if you run itEPSS 0.16%Apr 23, 2026
- Medium4.3Missing Authorization vulnerability in Navneil Naicker ACF Galerie 4 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Gal…Check if you run itEPSS 0.20%Apr 23, 2026
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Check if you run itEPSS 0.34%Apr 23, 2026
- High7.1A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform all…Check if you run itEPSS 0.23%Apr 23, 2026
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.74%Apr 23, 2026
- High7.0IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.Check if you run itEPSS 0.14%Apr 23, 2026
- Medium5.1EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory.Check if you run itEPSS 0.16%Apr 23, 2026
- Medium5.4Froxlor is open source server administration software.Check if you run itEPSS 0.26%Apr 23, 2026
- Medium5.0Froxlor is open source server administration software.Check if you run itEPSS 0.23%Apr 23, 2026
- Medium5.1CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.Check if you run itEPSS 0.16%Apr 23, 2026
Sort