Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Check if you run itEPSS 0.27%Apr 21, 2026
- High7.5Signal K Server is a server application that runs on a central hub in a boat.Check if you run itEPSS 0.43%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a resource consumption vulnerability in Telegram audio preflight transcription that allows unauthorized group senders to trigger tra…Check if you run itEPSS 0.30%Apr 21, 2026
- Low2.0OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls.Check if you run itEPSS 0.12%Apr 21, 2026
- Critical9.0OpenClaw before 2026.3.31 contains a sandbox bypass vulnerability allowing attackers to escalate privileges via heartbeat context inheritance and senderIsOwner paramet…Check if you run itEPSS 0.30%Apr 21, 2026
- High8.7OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals.Check if you run itEPSS 0.41%Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows remote attackers to make ar…Check if you run itEPSS 0.22%Apr 21, 2026
- Medium6.9OpenClaw versions 2026.3.22 before 2026.3.31 contain a signature verification bypass vulnerability in the Nostr DM ingress path that allows pairing challenges to be is…Check if you run itEPSS 0.25%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows.Check if you run itEPSS 0.25%Apr 21, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared cl…Check if you run itEPSS 0.20%Apr 21, 2026
- Medium5.3OpenClaw before 2026.4.2 fails to enforce write scopes on the POST /sessions/:sessionKey/kill endpoint in identity-bearing HTTP modes.Check if you run itEPSS 0.19%Apr 21, 2026
- Medium4.8OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows attackers to access interna…Check if you run itEPSS 0.24%Apr 21, 2026
- High8.8OpenClaw before 2026.3.31 contains a time-of-check-time-of-use race condition in the remote filesystem bridge readFile function that allows sandbox escape.Check if you run itEPSS 0.20%Apr 21, 2026
- High8.5OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login.Check if you run itEPSS 0.13%Apr 21, 2026
- Medium5.9OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections.Check if you run itEPSS 0.12%Apr 21, 2026
- Medium6.3Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.21%Apr 21, 2026
- High7.3Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.40%Apr 21, 2026
- High8.4OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.Check if you run itEPSS 0.23%Apr 21, 2026
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.65%Apr 21, 2026
- Medium4.7The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,…Check if you run itEPSS 0.27%Apr 20, 2026
- Medium5.3HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hij…Check if you run itEPSS 0.20%Apr 20, 2026
- High7.1XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handl…Check if you run itEPSS 0.16%Apr 20, 2026
- High7.5Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodi…Check if you run itEPSS 0.37%Apr 20, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.42%Apr 20, 2026
- Medium5.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.39%Apr 20, 2026
Sort