Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Tookie is a advanced OSINT information gathering tool.Check if you run itEPSS 0.21%May 11, 2026
- Critical9.9FireFighter is an incident management application.Check if you run itEPSS 0.27%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 3.28%May 11, 2026
- Medium5.5A vulnerability was detected in OpenClaw up to 2026.1.24.Check if you run itEPSS 0.66%May 11, 2026
- Medium5.1An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browse…Check if you run itEPSS 0.26%May 11, 2026
- Medium6.3and use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerabili…Check if you run itEPSS 0.67%May 11, 2026
- Low2.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo.Check if you run itEPSS 0.25%May 11, 2026
- High7.3A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, e…Check if you run itEPSS 2.68%May 11, 2026
- Medium5.3An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.Check if you run itEPSS 1.78%May 11, 2026
- High8.4A heap-based out-of-bounds write vulnerability in the DHCPv6 implementation of dnsmasq allows local attackers to execute arbitrary code with root privileges via a craf…Check if you run itEPSS 0.81%May 11, 2026
- Medium5.3A heap-based out-of-bounds read vulnerability in the DNSSEC validation of dnsmasq allows remote attackers to cause a denial of service via a crafted DNS packet.Check if you run itEPSS 6.41%May 11, 2026
- High7.5ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service VulnerabilityCheck if you run itEPSS 8.85%May 11, 2026
- High7.7OpenClaw before 2026.4.23 contains an improper access control vulnerability in the gateway tool's config.apply and config.patch operations that allows compromised mode…Check if you run itEPSS 0.49%May 11, 2026
- Medium5.9OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload.Check if you run itEPSS 0.29%May 11, 2026
- High8.4OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during pro…Check if you run itEPSS 0.14%May 11, 2026
- Medium4.1OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors.Check if you run itEPSS 0.10%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction.Check if you run itEPSS 0.28%May 11, 2026
- Medium6.0OpenClaw before 2026.4.20 contains a guard bypass vulnerability in the agent-facing gateway config.patch and config.apply endpoints that fails to protect operator-trus…Check if you run itEPSS 0.22%May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.Check if you run itEPSS 0.25%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded a…Check if you run itEPSS 0.15%May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a tool policy bypass vulnerability allowing bundled MCP and LSP tools to circumvent configured tool restrictions.Check if you run itEPSS 0.71%May 11, 2026
- Low2.3OpenClaw before 2026.4.22 contains a security envelope constraint bypass vulnerability allowing restricted subagents to spawn ACP child sessions that fail to inherit d…Check if you run itEPSS 0.22%May 11, 2026
- Medium6.3OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks.Check if you run itEPSS 0.30%May 11, 2026
- Medium5.4OpenClaw before 2026.4.20 contains an improper environment variable validation vulnerability in MCP stdio server configuration that allows attackers to execute arbitrary code.Check if you run itEPSS 0.14%May 11, 2026
- Medium6.3OpenClaw before 2026.4.22 contains an authentication bypass vulnerability in the Control UI bootstrap config endpoint that allows unauthenticated attackers to read sen…Check if you run itEPSS 0.32%May 11, 2026
Sort