Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3OpenClaw versions prior to 2026.2.22 with the optional BlueBubbles plugin contain an access control bypass vulnerability where empty allowFrom configuration causes dmP…Check if you run itEPSS 0.27%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.22 contain an allowlist bypass vulnerability in the safeBins configuration that allows attackers to invoke external helpers through t…Check if you run itEPSS 0.21%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary traili…Check if you run itEPSS 0.42%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.61%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.69%Mar 18, 2026
- Low2.0A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01.Check if you run itEPSS 2.43%Mar 18, 2026
- Low1.7pyOpenSSL is a Python wrapper around the OpenSSL library.Check if you run itEPSS 0.25%Mar 18, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).Check if you run itEPSS 0.46%Mar 17, 2026
- Medium6.3A vulnerability was determined in Duende IdentityServer4 up to 4.1.2.Check if you run itEPSS 0.42%Mar 17, 2026
- High7.1Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by a…Check if you run itEPSS 0.22%Mar 17, 2026
- Critical9.2Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface.Check if you run itEPSS 0.61%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inje…Check if you run itEPSS 0.22%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrat…Check if you run itEPSS 0.22%Mar 17, 2026
- High7.5IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.Check if you run itEPSS 0.53%Mar 17, 2026
- Medium5.1miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allow…Check if you run itEPSS 0.23%Mar 17, 2026
- Medium6.9dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_a…Check if you run itEPSS 0.19%Mar 17, 2026
- High8.1An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026.Check if you run itEPSS 0.34%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.33%Mar 17, 2026
- High7.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.48%Mar 17, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Food Order System 1.0.Check if you run itEPSS 0.34%Mar 17, 2026
- Medium6.3The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates.Check if you run itEPSS 0.34%Mar 17, 2026
- High7.2Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 1.01%Mar 17, 2026
- Critical9.1Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 8.92%Mar 17, 2026
- Critical9.1### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver.Check if you run itEPSS 0.26%Mar 17, 2026
- Medium4.3Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.24%Mar 17, 2026
Sort