Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.22%Mar 23, 2026
- High8.5Improper input handling in a modem-management administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Check if you run itEPSS 0.62%Mar 23, 2026
- High8.5Improper input handling in a wireless-control administrative CLI command on TP-Link Archer NX200, NX210, NX500 and NX600 allows crafted input to be executed as part of…Check if you run itEPSS 0.62%Mar 23, 2026
- High8.6A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for a…Check if you run itEPSS 2.97%Mar 23, 2026
- Medium6.9cgltf version 1.15 and prior contain an integer overflow vulnerability in the cgltf_validate() function when validating sparse accessors that allows attackers to trigg…Check if you run itEPSS 0.20%Mar 23, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.27%Mar 23, 2026
- Low2.0Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPow…Check if you run itEPSS 0.11%Mar 23, 2026
- Critical10.0GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system.Check if you run itEPSS 0.41%Mar 23, 2026
- High8.6Iperius Backup 6.1.0 contains a privilege escalation vulnerability that allows low-privilege users to execute arbitrary programs with elevated privileges by creating backup jobs.Check if you run itEPSS 0.14%Mar 22, 2026
- Medium6.9BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field.Check if you run itEPSS 0.17%Mar 21, 2026
- Low2.1A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1.Check if you run itEPSS 0.43%Mar 21, 2026
- Medium6.5The ElementCamp plugin for WordPress is vulnerable to time-based SQL Injection via the 'meta_query[compare]' parameter in the 'tcg_select2_search_post' AJAX action in…Check if you run itEPSS 0.24%Mar 21, 2026
- Medium6.4The Tour & Activity Operator Plugin for TourCMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'target' parameter of the tourcms_doc_link sh…Check if you run itEPSS 0.24%Mar 21, 2026
- Medium5.3OpenClaw versions prior to 2026.2.23 contain an authorization bypass vulnerability in the ACP client that auto-approves tool calls based on untrusted toolCall.kind met…Check if you run itEPSS 0.35%Mar 21, 2026
- High7.2OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace…Check if you run itEPSS 0.49%Mar 21, 2026
- High8.7OpenClaw versions prior to 2026.3.1 contain an authorization mismatch vulnerability that allows authenticated callers with operator.write scope to invoke owner-only to…Check if you run itEPSS 0.54%Mar 21, 2026
- High7.7OpenClaw versions prior to 2026.3.1 fail to enforce sandbox inheritance during cross-agent sessions_spawn operations, allowing sandboxed sessions to create child proce…Check if you run itEPSS 0.41%Mar 21, 2026
- High8.7OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired device identities to bypass operator pairing requirements…Check if you run itEPSS 0.65%Mar 21, 2026
- High7.5HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.Check if you run itEPSS 0.49%Mar 20, 2026
- Low1.9A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880.Check if you run itEPSS 1.47%Mar 20, 2026
- Critical9.4OpenClaw versions prior to 2026.3.12 contain an authorization bypass vulnerability in the WebSocket connect path that allows shared-token or password-authenticated con…Check if you run itEPSS 0.57%Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.Check if you run itEPSS 0.40%Mar 20, 2026
- High8.6WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.69%Mar 20, 2026
- Medium5.3The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17.Check if you run itEPSS 0.55%Mar 20, 2026