Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A stored cross‑site scripting (XSS) vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to create a trunk entry con…Check if you run itEPSS 0.26%Mar 18, 2026
- Medium5.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input.Check if you run itEPSS 0.38%Mar 18, 2026
- Medium6.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by…Check if you run itEPSS 0.33%Mar 18, 2026
- Low2.4A vulnerability found in Dahua NVR/XVR device.Check if you run itEPSS 0.29%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.25%Mar 18, 2026
- Medium5.9The Get Use APIs WordPress plugin before 2.0.10 executes imported JSON, which could allow users with a role as low as contributor to perform Cross-Site Scripting attac…Check if you run itEPSS 0.14%Mar 18, 2026
- High7.6IncusOS is an immutable OS image dedicated to running Incus.Check if you run itEPSS 0.15%Mar 18, 2026
- High8.7Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 1.55%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.1Kube-router is a turnkey solution for Kubernetes networking.Check if you run itEPSS 0.31%Mar 18, 2026
- High7.5pyasn1 is a generic ASN.1 library for Python.Check if you run itEPSS 0.82%Mar 18, 2026
- Critical9.6mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser.Check if you run itEPSS 0.17%Mar 18, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.65%Mar 18, 2026
- Medium6.1The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insuff…Check if you run itEPSS 0.18%Mar 18, 2026
- Critical9.1Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.32%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.26 contain an approval bypass vulnerability in system.run execution that allows attackers to execute commands from unintended filesys…Check if you run itEPSS 0.10%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.24 contain a sandbox bind validation vulnerability allowing attackers to bypass allowed-root and blocked-path checks via symlinked pa…Check if you run itEPSS 0.26%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset.Check if you run itEPSS 0.39%Mar 18, 2026
- Medium5.8OpenClaw version 2026.2.22 prior to 2026.2.23 contains an arbitrary code execution vulnerability in shell-env that allows attackers to execute attacker-controlled bina…Check if you run itEPSS 0.13%Mar 18, 2026
- Medium6.1OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environme…Check if you run itEPSS 0.24%Mar 18, 2026
- Medium4.8OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories.Check if you run itEPSS 0.14%Mar 18, 2026
- High7.5OpenClaw versions prior to 2026.2.22 in macOS node-host system.run contain an allowlist bypass vulnerability that allows remote attackers to execute non-allowlisted co…Check if you run itEPSS 0.65%Mar 18, 2026
- Medium6.9OpenClaw versions prior to 2026.2.21 fail to filter dangerous process-control environment variables from config env.vars, allowing startup-time code execution.Check if you run itEPSS 0.39%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.23 contain an exec approval bypass vulnerability in allowlist mode where allow-always grants could be circumvented through unrecogniz…Check if you run itEPSS 0.35%Mar 18, 2026
- High8.8OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into…Check if you run itEPSS 0.34%Mar 18, 2026
Sort