Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to i…Check if you run itEPSS 0.50%Apr 9, 2026
- Medium6.3A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific c…Check if you run itEPSS 0.14%Apr 9, 2026
- Critical9.1A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exp…Check if you run itEPSS 0.39%Apr 9, 2026
- High7.0A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate t…Check if you run itEPSS 0.13%Apr 9, 2026
- Critical9.9Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.Check if you run itEPSS 0.37%Apr 9, 2026
- High7.1flatpak-builder is a tool to build flatpaks from source.Check if you run itEPSS 0.38%Apr 9, 2026
- High8.1Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools.Check if you run itEPSS 0.34%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.37%Apr 9, 2026
- Critical9.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.39%Apr 9, 2026
- Low2.3Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.38%Apr 9, 2026
- Medium5.4pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium4.9Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster.Check if you run itEPSS 0.48%Apr 9, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.43%Apr 9, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.33%Apr 9, 2026
- High7.1A heap buffer overflow vulnerability exists in the PAM image parsing logic.Check if you run itEPSS 0.22%Apr 9, 2026
- High7.5HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL.Check if you run itEPSS 0.55%Apr 9, 2026
- Medium5.4The Ziggeo plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.49%Apr 9, 2026
- UnknownLangflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Apr 9, 2026
- Medium5.3A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c.Check if you run itEPSS 0.49%Apr 8, 2026
- High8.6LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.38%Apr 8, 2026
- High7.5Saleor is an e-commerce platform.Check if you run itEPSS 0.79%Apr 8, 2026
- Medium4.3Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122).Check if you run itEPSS 0.29%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026
- UnknownCabal deletes project source files during configureOpen the advisoryApr 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].Check if you run itEPSS 0.13%Apr 8, 2026