Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Jexactyl is a customisable game management panel and billing system.Check if you run itEPSS 0.25%Mar 20, 2026
- Medium5.7CKAN MCP Server is a tool for querying CKAN open data portals.Check if you run itEPSS 0.31%Mar 20, 2026
- Medium4.7Tillitis TKey Client package is a Go package for a TKey client.Check if you run itEPSS 0.22%Mar 20, 2026
- Medium6.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.48%Mar 20, 2026
- High8.2phpseclib is a PHP secure communications library.Check if you run itEPSS 0.44%Mar 20, 2026
- Medium5.3ewe is a Gleam web server.Check if you run itEPSS 0.52%Mar 20, 2026
- High7.5ewe is a Gleam web server.Check if you run itEPSS 0.67%Mar 20, 2026
- Medium5.4Admidio is an open-source user management solution.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium5.7Admidio is an open-source user management solution.Check if you run itEPSS 0.18%Mar 19, 2026
- Medium5.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.55%Mar 19, 2026
- Critical9.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.64%Mar 19, 2026
- Medium5.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.85%Mar 19, 2026
- Medium6.3OpenClaw versions prior to 2026.2.21 improperly parse the left-most X-Forwarded-For header value when requests originate from configured trusted proxies, allowing atta…Check if you run itEPSS 0.36%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.2.25 contain an authentication hardening gap in browser-origin WebSocket clients that allows attackers to bypass origin checks and auth…Check if you run itEPSS 0.54%Mar 19, 2026
- High8.6OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and deviceFamily fields are accepted from the client without be…Check if you run itEPSS 0.31%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.2.22 contain an authentication bypass vulnerability that allows clients authenticated with a shared gateway token to connect as role=no…Check if you run itEPSS 0.39%Mar 19, 2026
- Medium6.9Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config.Check if you run itEPSS 0.79%Mar 19, 2026
- Low1.2Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protect…Check if you run itEPSS 0.37%Mar 19, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.68%Mar 19, 2026
- Medium4.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.59%Mar 19, 2026
- Medium5.5In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation.Check if you run itEPSS 0.21%Mar 19, 2026
- Critical9.8OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attacker…Check if you run itEPSS 1.27%Mar 19, 2026
- Medium6.4The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnUrl' parameter within the Info Cards…Check if you run itEPSS 0.37%Mar 19, 2026
- Medium4.3The Add Custom Fields to Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.3.Check if you run itEPSS 0.20%Mar 19, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.52%Mar 18, 2026