Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8OpenClaw versions prior to 2026.3.2 contain a path-confinement bypass vulnerability in browser output handling that allows writes outside intended root directories.Check if you run itEPSS 0.14%Mar 18, 2026
- High7.1OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary traili…Check if you run itEPSS 0.42%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.51%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.89%Mar 18, 2026
- High8.3Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass rol…Check if you run itEPSS 0.39%Mar 17, 2026
- High7.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.72%Mar 17, 2026
- High8.6Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH.Check if you run itEPSS 1.57%Mar 17, 2026
- Medium6.5A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated.Check if you run itEPSS 0.84%Mar 17, 2026
- Medium6.0The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete.Check if you run itEPSS 0.50%Mar 16, 2026
- High7.8HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment.Check if you run itEPSS 0.10%Mar 16, 2026
- High8.8Unraid Update Request Path Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.44%Mar 16, 2026
- Low2.7AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.34%Mar 16, 2026
- Medium6.5PX4 autopilot is a flight control solution for drones.Check if you run itEPSS 0.31%Mar 16, 2026
- Medium6.8PX4 autopilot is a flight control solution for drones.Check if you run itEPSS 0.34%Mar 16, 2026
- Critical9.9Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Check if you run itEPSS 0.62%Mar 16, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.49%Mar 16, 2026
- High7.5IceWarp collaboration Directory Traversal Information Disclosure Vulnerability.Check if you run itEPSS 4.92%Mar 16, 2026
- High8.6"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.Check if you run itEPSS 0.49%Mar 16, 2026
- Medium5.3soroban-sdk is a Rust SDK for Soroban contracts.Check if you run itEPSS 0.34%Mar 13, 2026
- High8.1OpenClaw is a personal AI assistant.Check if you run itEPSS 0.24%Mar 13, 2026
- High7.5FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium6.8JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.54%Mar 13, 2026
- Critical9.3FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.67%Mar 13, 2026
- Medium5.0JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.13%Mar 13, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper renderin…Check if you run itEPSS 0.38%Mar 13, 2026