Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2OpenClaw before 2026.3.23 contains an insufficient access control vulnerability in the Gateway agent /reset endpoint that allows callers with operator.write permission…Check if you run itEPSS 0.51%Apr 10, 2026
- High7.1OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sessionKey/history route that skips operator.read scope validation.Check if you run itEPSS 0.41%Apr 10, 2026
- High7.2OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write a…Check if you run itEPSS 0.74%Apr 10, 2026
- High7.1OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, a…Check if you run itEPSS 0.33%Apr 10, 2026
- Medium5.3OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers.Check if you run itEPSS 0.53%Apr 10, 2026
- Medium5.3OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements.Check if you run itEPSS 0.38%Apr 10, 2026
- Medium4.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.35%Apr 10, 2026
- Medium5.5HDF5 is software for managing data.Check if you run itEPSS 0.20%Apr 10, 2026
- High7.5An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22.Check if you run itEPSS 0.27%Apr 10, 2026
- High8.8An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22.Check if you run itEPSS 0.40%Apr 10, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The f…Check if you run itEPSS 0.17%Apr 10, 2026
- Medium6.5The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ownership in the save_title() AJAX handler before allowing wishlist re…Check if you run itEPSS 0.27%Apr 10, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the and functions in all versions up…Check if you run itEPSS 0.36%Apr 10, 2026
- Medium5.4The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability checks in the function in in all versions up to, a…Check if you run itEPSS 0.38%Apr 10, 2026
- Low2.3X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore.Check if you run itEPSS 0.13%Apr 10, 2026
- Medium4.1When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation.Check if you run itEPSS 0.24%Apr 9, 2026
- Critical9.3PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.34%Apr 9, 2026
- Medium5.4Dockyard is a Docker container management app.Check if you run itEPSS 0.15%Apr 9, 2026
- Medium6.1OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in the gateway plugin subagent fallback deleteSession function that uses a synthetic operator.a…Check if you run itEPSS 0.51%Apr 9, 2026
- High7.1OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel bas…Check if you run itEPSS 0.33%Apr 9, 2026
- Medium6.9OpenClaw before 2026.3.25 parses JSON request bodies before validating webhook signatures, allowing unauthenticated attackers to force resource-intensive parsing operations.Check if you run itEPSS 0.79%Apr 9, 2026
- High8.7OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending d…Check if you run itEPSS 0.84%Apr 9, 2026
- High7.1OpenClaw before 2026.3.22 fails to enforce operator.admin scope on mutating internal ACP chat commands, allowing unauthorized modifications.Check if you run itEPSS 0.40%Apr 9, 2026
- Medium6.9OpenClaw before 2026.3.22 performs cryptographic and dispatch operations on inbound Nostr direct messages before enforcing sender and pairing policy validation.Check if you run itEPSS 0.67%Apr 9, 2026
- High8.5OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired…Check if you run itEPSS 0.26%Apr 9, 2026