Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Kirby is an open-source content management system.Check if you run itEPSS 0.27%Apr 24, 2026
- High7.6Kirby is an open-source content management system.Check if you run itEPSS 0.33%Apr 24, 2026
- Medium6.9Kirby is an open-source content management system.Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.27%Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.28%Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.14%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement.Check if you run itEPSS 0.73%Apr 24, 2026
- High7.2A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation…Check if you run itEPSS 0.32%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorizati…Check if you run itEPSS 0.55%Apr 24, 2026
- Medium6.9A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication.Check if you run itEPSS 0.19%Apr 24, 2026
- Critical9.3A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes…Check if you run itEPSS 0.39%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values with…Check if you run itEPSS 0.55%Apr 24, 2026
- High8.7A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identif…Check if you run itEPSS 0.46%Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.25%Apr 24, 2026
- Medium4.3In versions <8.4.0, <8.3.2, <8.2.2, <8.1.3, <8.0.4, <7.13.6, <7.12.7, <7.11.7, and <7.10.10, the endpoints /api/apps/logs and /api/apps/:id/logs have a typo in the req…Check if you run itEPSS 0.18%Apr 24, 2026
- Low3.3melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.17%Apr 24, 2026
- Medium6.1melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.14%Apr 24, 2026
- Critical9.2A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or…Check if you run itEPSS 0.52%Apr 24, 2026
- High8.4A vulnerability in SenseLive X3050's web management interface allows state-changing operations to be triggered without proper Cross-Site Request Forgery (CSRF) protections.Check if you run itEPSS 0.16%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization.Check if you run itEPSS 0.40%Apr 24, 2026
- Medium6.9A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for…Check if you run itEPSS 0.28%Apr 24, 2026
- Medium6.9A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecti…Check if you run itEPSS 0.29%Apr 24, 2026
- High7.5A flaw was found in libxml2.Check if you run itEPSS 0.63%Apr 23, 2026
- Medium5.1OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges.Check if you run itEPSS 0.20%Apr 23, 2026
- Medium5.4OpenClaw before 2026.4.2 contains an approval integrity vulnerability in pnpm dlx that fails to bind local script operands consistently with pnpm exec flows.Check if you run itEPSS 0.09%Apr 23, 2026
Sort