Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitr…Check if you run itEPSS 0.60%Apr 29, 2026
- Low2.0A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.33%Apr 29, 2026
- Low2.0A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.38%Apr 29, 2026
- Low2.0A weakness has been identified in EyouCMS up to 1.7.9.Check if you run itEPSS 0.41%Apr 29, 2026
- Medium4.8Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.Check if you run itEPSS 0.26%Apr 29, 2026
- Medium5.1Helpy contains a stored cross-site scripting vulnerability in the post author display logic.Check if you run itEPSS 0.26%Apr 29, 2026
- Low2.9A security vulnerability has been detected in Xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.42%Apr 28, 2026
- Low2.1A weakness has been identified in Xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.37%Apr 28, 2026
- Low2.9A security flaw has been discovered in Xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.66%Apr 28, 2026
- Low1.9A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low1.9A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low1.9A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low1.9A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.35%Apr 28, 2026
- Low2.0A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.33%Apr 28, 2026
- High7.3OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without the operator.ad…Check if you run itEPSS 0.19%Apr 28, 2026
- High7.7OpenClaw before 2026.3.31 contains an incomplete scope-clearing vulnerability in trusted-proxy authentication mode that allows operator.admin privilege escalation.Check if you run itEPSS 0.64%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Talk Voice config…Check if you run itEPSS 0.34%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin sc…Check if you run itEPSS 0.48%Apr 28, 2026
- Critical9.8** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover.Check if you run itEPSS 0.74%Apr 28, 2026
- Medium6.9Multiple BinSoft products are vulnerable to Privilege Escalation due to excessive database privileges assigned to the user used by the application.Check if you run itEPSS 0.17%Apr 28, 2026
- High8.5An authorization vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/moUser/update' endpoint, could allow an authenticated user with user modificati…Check if you run itEPSS 0.42%Apr 28, 2026
- Low2.1A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.33%Apr 28, 2026
- Low2.1A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.32%Apr 28, 2026
- Low2.1A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.32%Apr 28, 2026
- Low2.0A flaw has been found in code-projects Online Music Site 1.0.Check if you run itEPSS 0.38%Apr 28, 2026