Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3OpenClaw before 2026.4.20 contains a message classification vulnerability in Feishu card-action callbacks that misclassifies direct messages as group conversations.Check if you run itEPSS 0.27%May 11, 2026
- Medium4.1OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST.Check if you run itEPSS 0.12%May 11, 2026
- Low2.3OpenClaw before 2026.4.21 contains an authorization bypass vulnerability in command-auth.ts that allows non-owner senders to execute owner-enforced slash commands when…Check if you run itEPSS 0.24%May 11, 2026
- Medium5.4jq is a command-line JSON processor.Check if you run itEPSS 0.16%May 11, 2026
- Medium4.7Zen is a firefox-based browser.Check if you run itEPSS 0.16%May 11, 2026
- Low2.4Zen is a firefox-based browser.Check if you run itEPSS 0.16%May 11, 2026
- High7.5In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised accessCheck if you run itEPSS 0.27%May 11, 2026
- Medium5.3pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.34%May 11, 2026
- Medium5.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.40%May 11, 2026
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.15%May 11, 2026
- Medium4.4jq is a command-line JSON processor.Check if you run itEPSS 0.16%May 11, 2026
- Medium5.5jq is a command-line JSON processor.Check if you run itEPSS 0.16%May 11, 2026
- High8.6Bitwarden Server prior to v2026.4.1 does not require master-password re-authentication when retrieving or rotating an organization's SCIM API key, allowing an authenti…Check if you run itEPSS 0.50%May 11, 2026
- High8.9Bitwarden Server prior to v2026.4.0 contains a missing authorization vulnerability that allows a provider service user to add an arbitrary organization to their provid…Check if you run itEPSS 0.60%May 11, 2026
- Medium5.3Bitwarden Server prior to v2026.4.1 contains a missing authorization vulnerability that allows any authenticated user to write ciphers into an arbitrary organization v…Check if you run itEPSS 0.19%May 11, 2026
- Low2.3Inbox Zero is an AI personal assistant for email.Check if you run itEPSS 0.23%May 11, 2026
- High8.5The Open edx Enterprise Service app provides enterprise features to the Open edX platform.Check if you run itEPSS 0.30%May 11, 2026
- High8.1Neat VNC is a VNC server library.Check if you run itEPSS 0.63%May 11, 2026
- Critical9.9Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.37%May 11, 2026
- Medium5.4Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.18%May 11, 2026
- High8.7Network-AI is a TypeScript/Node.js multi-agent orchestrator.Check if you run itEPSS 0.55%May 11, 2026
- Medium6.5kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer (Kusto).Check if you run itEPSS 0.34%May 11, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.40%May 11, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.34%May 11, 2026
- High8.3pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.40%May 11, 2026
Sort