Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.16%Mar 10, 2026
- UnknownSangfor operation_and_maintenance_security_management_system Improper Access ControlPatch nowKEVEPSS 2.04%Mar 10, 2026
- High7.5Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives.Check if you run itEPSS 0.37%Mar 9, 2026
- High7.5If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed pro…Check if you run itEPSS 0.11%Mar 9, 2026
- Critical9.8WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.77%Mar 7, 2026
- Low2.1Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.54%Mar 7, 2026
- High8.6Netmaker makes networks with WireGuard.Check if you run itEPSS 0.47%Mar 7, 2026
- Critical9.3XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows u…Check if you run itEPSS 3.05%Mar 7, 2026
- Unknownzimaspace zimaos Improper AuthenticationPatch nowKEVEPSS 2.32%Mar 7, 2026
- High8.6Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.58%Mar 6, 2026
- Medium6.9Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.38%Mar 6, 2026
- High8.8TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension.Check if you run itEPSS 0.20%Mar 6, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.Check if you run itEPSS 0.51%Mar 6, 2026
- High7.5Navtor NavBox exposes sensitive configuration and operational data due to missing authentication on HTTP API endpoints.Check if you run itEPSS 0.67%Mar 6, 2026
- High8.8ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter.Check if you run itEPSS 0.29%Mar 6, 2026
- Critical9.8An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions.Check if you run itEPSS 0.90%Mar 6, 2026
- High7.8Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Check if you run itEPSS 0.18%Mar 6, 2026
- Medium6.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.36%Mar 6, 2026
- High8.2OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles (optional plugin) webhook handler in which it authenticates requests based solely on lo…Check if you run itEPSS 0.63%Mar 5, 2026
- High7.5OpenClaw versions 2026.1.5 prior to 2026.2.12 fail to enforce mandatory authentication on the /agent/act browser-control HTTP route, allowing unauthorized local caller…Check if you run itEPSS 0.30%Mar 5, 2026
- High7.2OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by…Check if you run itEPSS 0.52%Mar 5, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 contain a vulnerability in the gateway WebSocket connect handshake in which it allows skipping device identity checks when auth.tok…Check if you run itEPSS 0.65%Mar 5, 2026
- Medium6.7OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the extractArchive function within src/infra/archive.ts that allows attackers to cons…Check if you run itEPSS 0.46%Mar 5, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing att…Check if you run itEPSS 0.92%Mar 5, 2026
- High8.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.42%Mar 5, 2026