Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access priv…Check if you run itEPSS 0.48%Apr 21, 2026
- High8.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.48%Apr 21, 2026
- High8.7goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.59%Apr 21, 2026
- Medium6.5blueprintUE is a tool to help Unreal Engine developers.Check if you run itEPSS 0.42%Apr 21, 2026
- Critical9.4excel-mcp-server is a Model Context Protocol server for Excel file manipulation.Check if you run itEPSS 0.64%Apr 21, 2026
- Low3.7BACnet Stack is a BACnet open source protocol stack C library for embedded systems.Check if you run itEPSS 0.33%Apr 21, 2026
- Low3.3October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium6.6October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.39%Apr 21, 2026
- Critical10.0Storable versions before 3.05 for Perl has a stack overflow.Check if you run itEPSS 0.64%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 1.02%Apr 21, 2026
- High8.6FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are p…Check if you run itEPSS 2.42%Apr 21, 2026
- High7.1Apktool is a tool for reverse engineering Android APK files.Check if you run itEPSS 0.19%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to trigger tra…Check if you run itEPSS 0.51%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows.Check if you run itEPSS 0.45%Apr 21, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared cl…Check if you run itEPSS 0.35%Apr 21, 2026
- High8.8OpenClaw before 2026.3.31 contains a time-of-check-time-of-use race condition in the remote filesystem bridge readFile function that allows sandbox escape.Check if you run itEPSS 0.33%Apr 21, 2026
- High7.1XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handl…Check if you run itEPSS 0.17%Apr 20, 2026
- High7.5Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodi…Check if you run itEPSS 0.49%Apr 20, 2026
- High7.8A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode).Check if you run itEPSS 0.15%Apr 20, 2026
- Critical9.2Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler all…Check if you run itEPSS 0.91%Apr 20, 2026
- High8.7Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system…Check if you run itEPSS 0.83%Apr 20, 2026
- Medium6.7Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release vers…Check if you run itEPSS 0.13%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Check if you run itEPSS 1.47%Apr 20, 2026
- Low2.1When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1.Check if you run itEPSS 0.14%Apr 20, 2026
- Critical9.4A command injection vulnerability was found in the PPTP VPN Clients on the ADM.Check if you run itEPSS 2.08%Apr 20, 2026