Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1OpenClaw before 2026.3.31 contains a decompression bomb vulnerability in image processing that fails to properly enforce pixel-limit guards on sips.Check if you run itEPSS 0.32%Apr 23, 2026
- Medium6.3OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumvent shared authentication protections using fak…Check if you run itEPSS 0.39%Apr 23, 2026
- Medium5.8OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist.Check if you run itEPSS 0.10%Apr 23, 2026
- Critical9.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.51%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.51%Apr 23, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.84%Apr 23, 2026
- Critical9.3Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.40%Apr 23, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.58%Apr 23, 2026
- High8.0Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.34%Apr 23, 2026
- Medium5.3A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic.Check if you run itEPSS 0.32%Apr 23, 2026
- Critical9.3KTransformers through 0.5.3 contains an unsafe deserialization vulnerability in the balance_serve backend mode where the scheduler RPC server binds a ZMQ ROUTER socket…Check if you run itEPSS 0.70%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.57%Apr 23, 2026
- Critical9.6Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.39%Apr 23, 2026
- Critical9.3radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the comman…Check if you run itEPSS 1.92%Apr 23, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured projec…Check if you run itEPSS 0.22%Apr 23, 2026
- Medium6.9radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying…Check if you run itEPSS 0.22%Apr 23, 2026
- High8.7A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or…Check if you run itEPSS 0.50%Apr 23, 2026
- High8.7A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without any access controls.Check if you run itEPSS 0.31%Apr 23, 2026
- High8.2SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of…Check if you run itEPSS 0.32%Apr 23, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.26%Apr 23, 2026
- High8.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.42%Apr 23, 2026
- High7.6Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 3.11%Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 6.87%Apr 23, 2026
- High7.5Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.18%Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.31%Apr 23, 2026
Sort