Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.16%Mar 30, 2026
- Medium5.3A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable n…Check if you run itEPSS 0.18%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.55%Mar 30, 2026
- High8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.32%Mar 30, 2026
- Critical9.2Gigabyte Control Center developed by GIGABYTE has an Arbitrary File Write vulnerability.Check if you run itEPSS 0.94%Mar 30, 2026
- Low2.1Hardcoded Password Vulnerability have been found in CENTUM.Check if you run itEPSS 0.17%Mar 30, 2026
- Medium5.8OpenClaw before 2026.3.8 contains a path traversal vulnerability in the skills download installer that validates the tools root lexically but reuses the mutable path d…Check if you run itEPSS 0.12%Mar 29, 2026
- High8.7OpenClaw before 2026.3.11 contains an authorization bypass vulnerability in the gateway agent RPC that allows authenticated operators with operator.write permission to…Check if you run itEPSS 0.53%Mar 29, 2026
- Critical9.3OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts.Check if you run itEPSS 0.61%Mar 29, 2026
- Critical9.4OpenClaw before 2026.3.11 contains an approval integrity vulnerability where system.run approvals fail to bind mutable file operands for certain script runners like tsx and jiti.Check if you run itEPSS 0.32%Mar 29, 2026
- High8.8OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob ma…Check if you run itEPSS 0.72%Mar 29, 2026
- High7.1OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only brow…Check if you run itEPSS 0.40%Mar 29, 2026
- Critical9.4OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broa…Check if you run itEPSS 0.69%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic.Check if you run itEPSS 0.14%Mar 29, 2026
- Critical9.8GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization.Check if you run itEPSS 0.78%Mar 29, 2026
- Critical9.9Hackage package metadata stored XSS vulnerabilityCheck if you run itEPSS 0.43%Mar 28, 2026
- Medium5.4The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability checks, allowing any logged-in user, like subscr…Check if you run itEPSS 0.30%Mar 28, 2026
- Medium6.5Mobile Next is an MCP server for mobile development and automation.Check if you run itEPSS 0.52%Mar 27, 2026
- High7.2Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.56%Mar 27, 2026
- Low2.7Federated Learning and Interoperability Platform (FLIP) is an open-source platform for federated training and evaluation of medical imaging AI models across healthcare…Check if you run itEPSS 0.48%Mar 27, 2026
- Medium5.5A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44.Check if you run itEPSS 0.41%Mar 27, 2026
- Medium6.3Cocos AI is a confidential computing system for AI.Check if you run itEPSS 0.07%Mar 27, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.27%Mar 27, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.38%Mar 27, 2026
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.38%Mar 27, 2026