Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Open Source Social Network (OSSN) is open-source social networking software developed in PHP.Check if you run itEPSS 0.66%Apr 24, 2026
- Medium6.1FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.23%Apr 24, 2026
- High8.8Actual is a local-first personal finance tool.Check if you run itEPSS 0.59%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorizati…Check if you run itEPSS 0.83%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values with…Check if you run itEPSS 0.84%Apr 24, 2026
- Medium5.3OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients.Check if you run itEPSS 0.37%Apr 23, 2026
- Medium5.8OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist.Check if you run itEPSS 0.14%Apr 23, 2026
- High7.6Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.48%Apr 23, 2026
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.48%Apr 23, 2026
- Critical9.3LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over u…Check if you run itEPSS 0.95%Apr 23, 2026
- High8.9elFinder is an open-source file manager for web, written in JavaScript using jQuery UI.Check if you run itEPSS 2.65%Apr 23, 2026
- High8.1Contour is a Kubernetes ingress controller using Envoy proxy.Check if you run itEPSS 0.83%Apr 23, 2026
- Medium5.9The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray.Check if you run itEPSS 0.38%Apr 23, 2026
- Critical9.3Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via t…Check if you run itEPSS 0.88%Apr 23, 2026
- Critical9.8Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Check if you run itEPSS 0.70%Apr 23, 2026
- High8.7An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establ…Check if you run itEPSS 0.57%Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Patch nowKEVEPSS 7.36%Apr 23, 2026
- High8.8Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Check if you run itEPSS 0.83%Apr 23, 2026
- High8.5STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems.Check if you run itEPSS 0.62%Apr 23, 2026
- Critical9.0Luanti (formerly Minetest) is an open source voxel game-creation platform.Check if you run itEPSS 0.68%Apr 23, 2026
- Medium5.3LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.Check if you run itEPSS 0.36%Apr 23, 2026
- High8.4The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (Can…Check if you run itEPSS 0.18%Apr 23, 2026
- High7.3Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.36%Apr 22, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Check if you run itEPSS 0.35%Apr 22, 2026
- Medium4.6An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk.Check if you run itEPSS 0.34%Apr 22, 2026