Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.40%Mar 31, 2026
- High8.6A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows.Check if you run itEPSS 0.10%Mar 31, 2026
- Critical9.3HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.42%Mar 31, 2026
- Medium5.8HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.32%Mar 31, 2026
- Critical9.1HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.20%Mar 31, 2026
- High8.1In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations ag…Check if you run itEPSS 0.33%Mar 31, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.43%Mar 31, 2026
- Medium5.9Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.47%Mar 31, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.24%Mar 31, 2026
- High7.5mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.44%Mar 31, 2026
- Low2.8go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.15%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve node…Check if you run itEPSS 0.42%Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.16%Mar 31, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.13%Mar 31, 2026
- Critical9.8Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.16%Mar 31, 2026
- Medium5.8OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in the fs-bridge writeFile commit step that uses an unanchored container path during the fin…Check if you run itEPSS 0.11%Mar 31, 2026
- High7.3OpenClaw before 2026.3.11 contains an approval-integrity vulnerability in node-host system.run approvals that displays extracted shell payloads instead of the executed argv.Check if you run itEPSS 0.38%Mar 31, 2026
- Medium5.3OpenClaw before 2026.3.8 contains an approval bypass vulnerability in system.run where mutable script operands are not bound across approval and execution phases.Check if you run itEPSS 0.33%Mar 31, 2026
- Critical9.2OpenClaw before 2026.3.13 contains a remote command injection vulnerability in the iMessage attachment staging flow that allows attackers to execute arbitrary commands…Check if you run itEPSS 3.20%Mar 31, 2026
- Critical9.2OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic oper…Check if you run itEPSS 0.63%Mar 31, 2026
- High8.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI)…Check if you run itEPSS 0.98%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 0.70%Mar 31, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.16%Mar 30, 2026
- High8.8OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication.Check if you run itEPSS 0.53%Mar 30, 2026
- Critical9.8Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.16%Mar 30, 2026