Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A flaw has been found in Tenda F451 1.0.0.7.Check if you run itEPSS 0.95%Apr 12, 2026
- High7.4A vulnerability was detected in Tenda F451 1.0.0.7.Check if you run itEPSS 0.95%Apr 12, 2026
- Medium6.1The Optimole – Optimize Images in Real Time plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL paths in versions up to, and including, 4.2.3…Check if you run itEPSS 0.45%Apr 11, 2026
- Medium6.4The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute in all versions up to, and including, 2.2.15.Check if you run itEPSS 0.33%Apr 11, 2026
- Critical9.8aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 2.32%Apr 11, 2026
- Medium5.3OpenClaw Client PKCE Verifier Information Disclosure Vulnerability.Check if you run itEPSS 0.41%Apr 11, 2026
- Low3.7phpseclib is a PHP secure communications library.Check if you run itEPSS 0.37%Apr 10, 2026
- Critical9.8LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.Check if you run itEPSS 0.39%Apr 10, 2026
- High7.7Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.Check if you run itEPSS 0.51%Apr 10, 2026
- High8.1Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 2.02%Apr 10, 2026
- Medium5.7CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host.Check if you run itEPSS 0.56%Apr 10, 2026
- High7.1PraisonAIAgents is a multi-agent teams system.Check if you run itEPSS 0.40%Apr 10, 2026
- Medium5.5PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.18%Apr 10, 2026
- Critical9.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.53%Apr 10, 2026
- Medium5.1OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service re…Check if you run itEPSS 0.18%Apr 10, 2026
- Medium6.3OpenClaw before 2026.3.22 contains an authentication bypass vulnerability in the X-Forwarded-For header processing when trustedProxies is configured, allowing attacker…Check if you run itEPSS 0.55%Apr 10, 2026
- High7.1OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, a…Check if you run itEPSS 0.33%Apr 10, 2026
- High7.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.Check if you run itEPSS 1.06%Apr 10, 2026
- High8.1A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to…Check if you run itEPSS 0.32%Apr 10, 2026
- Medium6.5A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the ins…Check if you run itEPSS 0.19%Apr 10, 2026
- Medium6.8The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access).Check if you run itEPSS 0.10%Apr 10, 2026
- Medium6.1The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpr_pending_template' parameter in all versio…Check if you run itEPSS 0.35%Apr 10, 2026
- Medium4.3The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4.Check if you run itEPSS 0.18%Apr 10, 2026
- Medium6.3A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.Check if you run itEPSS 0.34%Apr 10, 2026
- Medium6.9In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL.Check if you run itEPSS 0.45%Apr 9, 2026