Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3OpenClaw before 2026.3.31 contains an allowlist bypass vulnerability in Matrix thread root and reply context handling that fails to properly validate message senders.Check if you run itEPSS 0.16%Apr 28, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the /phone arm and /phone disarm endpoints that fails to properly enforce operator.admin sc…Check if you run itEPSS 0.33%Apr 28, 2026
- Medium6.9OpenClaw before 2026.3.31 performs Discord audio preflight transcription before validating member authorization, allowing unauthenticated attackers to consume resources.Check if you run itEPSS 0.47%Apr 28, 2026
- Medium5.8OpenClaw before 2026.3.31 contains an incomplete host-env-security-policy.json that fails to restrict compiler binary environment variables, allowing untrusted models…Check if you run itEPSS 0.13%Apr 28, 2026
- Critical9.4The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and opera…Check if you run itEPSS 0.37%Apr 28, 2026
- High8.9Cross-Site Scripting (XSS) vulnerability exists in HTMLy version 3.1.1 in the content creation functionality at the /add/content?type=image endpoint.Check if you run itEPSS 0.36%Apr 28, 2026
- Medium6.3NVIDIA NemoClaw contains a vulnerability in the validateEndpointUrl() SSRF protection component, where an attacker could cause a server-side request forgery by supplyi…Check if you run itEPSS 0.13%Apr 28, 2026
- High8.6NVIDIA NeMoClaw contains a vulnerability in the sandbox environment initialization component, where a remote attacker could cause improper access control by sending pr…Check if you run itEPSS 0.40%Apr 28, 2026
- Medium6.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing.Check if you run itEPSS 0.36%Apr 28, 2026
- High8.8NVIDIA FLARE SDK contains a vulnerability in FOBS, where an attacker may cause deserialization of untrusted data by sending a malicious FOBS- encoded message.Check if you run itEPSS 0.48%Apr 28, 2026
- Critical9.8NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass thr…Check if you run itEPSS 0.57%Apr 28, 2026
- Critical9.8** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Pony Mail leading to admin account takeover.Check if you run itEPSS 0.44%Apr 28, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in FUEL CMS v1.5.2 and before within the asset upload functionality.Check if you run itEPSS 0.17%Apr 28, 2026
- High8.2Authentication Bypass vulnerability exists in Netmaker versions prior to 1.5.0.Check if you run itEPSS 0.30%Apr 28, 2026
- Critical9.8Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary code or other unspecified impacts.Check if you run itEPSS 0.48%Apr 28, 2026
- Medium5.3An issue was discovered in Cista v0.15 and below.Check if you run itEPSS 0.23%Apr 28, 2026
- High7.3Memory safety bugs present in Thunderbird 150.0.0.Check if you run itEPSS 0.30%Apr 28, 2026
- High7.3Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0.Check if you run itEPSS 0.38%Apr 28, 2026
- High7.3Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0.Check if you run itEPSS 0.32%Apr 28, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component.Check if you run itEPSS 0.26%Apr 28, 2026
- High7.5Information disclosure due to incorrect boundary conditions in the Audio/Video component.Check if you run itEPSS 0.32%Apr 28, 2026
- High7.4A vulnerability was found in D-Link DIR-825M 1.1.12.Check if you run itEPSS 0.71%Apr 28, 2026
- High7.4A vulnerability has been found in D-Link DIR-825M 1.1.12.Check if you run itEPSS 0.69%Apr 28, 2026
- Low2.0A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.0A vulnerability was identified in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.21%Apr 28, 2026
Sort