Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows.Check if you run itEPSS 0.45%Apr 21, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared cl…Check if you run itEPSS 0.35%Apr 21, 2026
- High8.8OpenClaw before 2026.3.31 contains a time-of-check-time-of-use race condition in the remote filesystem bridge readFile function that allows sandbox escape.Check if you run itEPSS 0.33%Apr 21, 2026
- High7.1XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handl…Check if you run itEPSS 0.17%Apr 20, 2026
- High7.5Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodi…Check if you run itEPSS 0.49%Apr 20, 2026
- High7.8A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode).Check if you run itEPSS 0.15%Apr 20, 2026
- Critical9.2Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler all…Check if you run itEPSS 0.91%Apr 20, 2026
- High8.7Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system…Check if you run itEPSS 0.83%Apr 20, 2026
- Medium6.7Dell PowerProtect Data Domain appliances, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release vers…Check if you run itEPSS 0.13%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Check if you run itEPSS 1.47%Apr 20, 2026
- Low2.1When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1.Check if you run itEPSS 0.14%Apr 20, 2026
- Critical9.4A command injection vulnerability was found in the PPTP VPN Clients on the ADM.Check if you run itEPSS 2.08%Apr 20, 2026
- High8.8An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate p…Check if you run itEPSS 1.05%Apr 18, 2026
- Critical9.0NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly.Check if you run itEPSS 0.18%Apr 18, 2026
- Critical9.3NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly.Check if you run itEPSS 0.20%Apr 18, 2026
- Low3.5libgphoto2 is a camera access and control library.Check if you run itEPSS 0.21%Apr 18, 2026
- Critical9.1Hot Chocolate is an open-source GraphQL server.Check if you run itEPSS 1.05%Apr 18, 2026
- High8.8FastGPT is an AI Agent building platform.Check if you run itEPSS 0.53%Apr 17, 2026
- Critical9.8FastGPT is an AI Agent building platform.Check if you run itEPSS 0.60%Apr 17, 2026
- High8.1HomeBox is a home inventory and organization system.Check if you run itEPSS 0.40%Apr 17, 2026
- Low2.3mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases.Check if you run itEPSS 0.39%Apr 17, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.Check if you run itEPSS 0.24%Apr 17, 2026
- Medium6.3xrdp is an open source RDP server.Check if you run itEPSS 0.59%Apr 17, 2026
- Medium5.3Anviz CX7 Firmware is vulnerable to the most recently captured test photo that can be retrieved without authentication, revealing sensitive operational imagery.Check if you run itEPSS 0.52%Apr 17, 2026
- High8.7PAC4J is vulnerable to LDAP Injection in multiple methods.Check if you run itEPSS 0.68%Apr 17, 2026