Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function.Patch nowKEVEPSS 0.81%May 7, 2026
- Medium6.1Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.Patch nowKEVEPSS 0.24%May 7, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 1.59%May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.Check if you run itEPSS 0.34%May 6, 2026
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.Check if you run itEPSS 0.32%May 6, 2026
- Medium5.3Netty allows request-line validation to be bypassed when a or is created first and its URI is later changed via .Check if you run itEPSS 0.32%May 6, 2026
- Medium5.3OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry.Check if you run itEPSS 0.31%May 6, 2026
- Medium5.4PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.22%May 6, 2026
- Medium6.9Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices.Check if you run itEPSS 0.10%May 6, 2026
- Medium5.3Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs.Check if you run itEPSS 0.33%May 6, 2026
- Critical9.1Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 2.26%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.41%May 6, 2026
- Low2.3Incus is a system container and virtual machine manager.Check if you run itEPSS 0.17%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.39%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.40%May 6, 2026
- Medium5.5A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7.Check if you run itEPSS 0.29%May 6, 2026
- Medium5.5A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7.Check if you run itEPSS 0.28%May 6, 2026
- High8.5OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers.Check if you run itEPSS 0.14%May 6, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation.Check if you run itEPSS 0.24%May 6, 2026
- Medium6.9OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs throu…Check if you run itEPSS 0.29%May 6, 2026
- High8.7OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies.Check if you run itEPSS 0.43%May 6, 2026
- High8.5OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override criti…Check if you run itEPSS 0.13%May 6, 2026
- High8.3OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intend…Check if you run itEPSS 0.25%May 6, 2026
- High8.4OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside t…Check if you run itEPSS 7.31%May 6, 2026
- Low2.3OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memory_get function that allows callers to read any Markdown files within th…Check if you run itEPSS 0.23%May 6, 2026
Sort