Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.15%Apr 13, 2026
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.18%Apr 13, 2026
- High7.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.20%Apr 13, 2026
- High7.5jq is a command-line JSON processor.Check if you run itEPSS 0.79%Apr 13, 2026
- High8.1simple-git enables running native Git commands from JavaScript.Check if you run itEPSS 0.93%Apr 13, 2026
- High7.1A vulnerability exists in the command handling of the IEC 61850 communication stack included in the product revisions listed as affected in this CVE.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.4Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization componen…Check if you run itEPSS 0.59%Apr 13, 2026
- High7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user…Check if you run itEPSS 0.35%Apr 13, 2026
- High7.5Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.Check if you run itEPSS 0.45%Apr 12, 2026
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR maybe_fork_scalars() is called f…Check if you run itEPSS 0.18%Apr 12, 2026
- High8.3Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.Check if you run itEPSS 0.22%Apr 11, 2026
- Medium5.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request F…Check if you run itEPSS 0.45%Apr 11, 2026
- Medium6.4The GreenShift - Animation and Page Builder Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 12.8.9 This is d…Check if you run itEPSS 0.35%Apr 11, 2026
- High7.8NoMachine External Control of File Path Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.17%Apr 11, 2026
- High7.1NoMachine External Control of File Path Arbitrary File Deletion Vulnerability.Check if you run itEPSS 0.15%Apr 11, 2026
- Medium6.5OpenClaw Canvas Path Traversal Information Disclosure Vulnerability.Check if you run itEPSS 0.96%Apr 11, 2026
- Medium6.5Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass.Check if you run itEPSS 0.40%Apr 10, 2026
- High7.5Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass.Check if you run itEPSS 0.51%Apr 10, 2026
- Low3.7phpseclib is a PHP secure communications library.Check if you run itEPSS 0.37%Apr 10, 2026
- Medium6.8ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.15%Apr 10, 2026
- High8.7OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in gateway-authenticated plugin HTTP routes that incorrectly mint operator.admin runtime scope…Check if you run itEPSS 0.52%Apr 10, 2026
- Medium6.9OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command uses an unpatched killProcessTree function from shell-utils.ts tha…Check if you run itEPSS 0.15%Apr 10, 2026
- High8.7OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect.Check if you run itEPSS 0.52%Apr 10, 2026