Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ para…Check if you run itEPSS 0.40%Mar 31, 2026
- Medium5.4The Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.12.Check if you run itEPSS 0.18%Mar 31, 2026
- Low2.0OpenClaw before 2026.3.11 contains a credential fallback vulnerability where unavailable local gateway.auth.token and gateway.auth.password SecretRefs are treated as u…Check if you run itEPSS 0.15%Mar 31, 2026
- Critical9.2OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic oper…Check if you run itEPSS 0.63%Mar 31, 2026
- Medium6.5When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped…Check if you run itEPSS 0.15%Mar 31, 2026
- Critical9.3SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute…Check if you run itEPSS 0.40%Mar 31, 2026
- Medium6.1The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84.Check if you run itEPSS 0.20%Mar 31, 2026
- Medium6.1The Loco Translate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘update_href’ parameter in all versions up to, and including, 2.8.2 due…Check if you run itEPSS 0.37%Mar 31, 2026
- Unknown1clickmigration 1_click_migration Exposure of Sensitive System Information Due to Uncleared Debug InformationPatch nowKEVEPSS 0.82%Mar 31, 2026
- Unknown1clickmigration 1_click_migration Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.64%Mar 31, 2026
- Medium5.3FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.49%Mar 30, 2026
- Medium6.9FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.39%Mar 30, 2026
- Medium6.0FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.43%Mar 30, 2026
- High7.5NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.56%Mar 30, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 2.16%Mar 30, 2026
- Medium5.3A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the…Check if you run itEPSS 0.45%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of t…Check if you run itEPSS 0.27%Mar 30, 2026
- High8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.32%Mar 30, 2026
- High7.8TrueConf Client Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 0.33%Mar 30, 2026
- Medium6.9SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.8Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to th…Check if you run itEPSS 0.27%Mar 30, 2026
- Medium6.8Free IP Switcher 3.1 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Compu…Check if you run itEPSS 0.29%Mar 30, 2026
- Medium6.8BulletProof FTP Server 2019.0.0.50 contains a denial of service vulnerability in the SMTP configuration interface that allows local attackers to crash the application…Check if you run itEPSS 0.22%Mar 30, 2026
- High8.8Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when…Check if you run itEPSS 0.77%Mar 29, 2026
- High7.4A vulnerability was detected in Tenda FH1201 1.2.0.14(408).Check if you run itEPSS 1.01%Mar 29, 2026