Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.5 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.31%Mar 11, 2026
- Medium6.8In JetBrains Hub before 2026.1 possible on sign-in account mismatch with non-SSO auth and 2FA disabledCheck if you run itEPSS 0.18%Mar 11, 2026
- Critical9.8External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of priv…Check if you run itEPSS 0.34%Mar 11, 2026
- High7.8Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.12%Mar 11, 2026
- High7.8Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via…Check if you run itEPSS 0.13%Mar 11, 2026
- Low3.3Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files.Check if you run itEPSS 0.16%Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.29%Mar 11, 2026
- Medium6.9OpenClaw version 2026.2.19-2 prior to 2026.2.21 contains a command injection vulnerability in systemd unit file generation where attacker-controlled environment values…Check if you run itEPSS 1.12%Mar 11, 2026
- High8.7OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream…Check if you run itEPSS 0.44%Mar 11, 2026
- Medium6.7OpenClaw versions prior to 2026.2.17 contain a path traversal vulnerability in the $include directive resolution that allows reading arbitrary local files outside the…Check if you run itEPSS 0.15%Mar 11, 2026
- High8.7OpenClaw versions prior to 2026.2.14 contain a path traversal vulnerability in apply_patch that allows attackers to write or delete files outside the configured worksp…Check if you run itEPSS 0.77%Mar 11, 2026
- High8.7OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing atta…Check if you run itEPSS 0.38%Mar 11, 2026
- High7.5When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.Check if you run itEPSS 0.84%Mar 11, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityPatch nowKEVEPSS 20.29%Mar 11, 2026
- Medium6.4The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.28.1.Check if you run itEPSS 0.21%Mar 11, 2026
- High7.2The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field…Check if you run itEPSS 0.33%Mar 11, 2026
- High7.2The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.…Check if you run itEPSS 0.25%Mar 11, 2026
- Medium6.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the AJAX action.Check if you run itEPSS 0.20%Mar 11, 2026
- Medium5.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the admin action…Check if you run itEPSS 0.20%Mar 11, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and inc…Check if you run itEPSS 0.42%Mar 11, 2026
- Low2.0A command injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.65%Mar 11, 2026
- Low0.1An SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.14%Mar 11, 2026
- Low0.1An improper certificate validation vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.08%Mar 11, 2026
- Low2.0Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert for each…Check if you run itEPSS 0.16%Mar 11, 2026
- High8.1The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stor…Check if you run itEPSS 0.16%Mar 11, 2026
Sort