Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 3.25%Apr 10, 2026
- Medium4.3The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to Improper Access Control in all versions u…Check if you run itEPSS 0.40%Apr 10, 2026
- Medium6.1The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpr_pending_template' parameter in all versio…Check if you run itEPSS 0.35%Apr 10, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the and functions in all versions up…Check if you run itEPSS 0.36%Apr 10, 2026
- Medium5.4The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability checks in the function in in all versions up to, a…Check if you run itEPSS 0.38%Apr 10, 2026
- Medium4.3The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4.Check if you run itEPSS 0.18%Apr 10, 2026
- Medium6.4The Webling plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.9.0 due to insufficient input sanitization, insuf…Check if you run itEPSS 0.28%Apr 10, 2026
- Medium5.4Dockyard is a Docker container management app.Check if you run itEPSS 0.15%Apr 9, 2026
- Medium6.1OpenClaw before 2026.3.25 contains a privilege escalation vulnerability in the gateway plugin subagent fallback deleteSession function that uses a synthetic operator.a…Check if you run itEPSS 0.51%Apr 9, 2026
- High8.7OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending d…Check if you run itEPSS 0.84%Apr 9, 2026
- High7.1OpenClaw before 2026.3.22 fails to enforce operator.admin scope on mutating internal ACP chat commands, allowing unauthorized modifications.Check if you run itEPSS 0.40%Apr 9, 2026
- High8.5OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired…Check if you run itEPSS 0.26%Apr 9, 2026
- High7.2OpenClaw before 2026.3.25 contains an improper access control vulnerability in the HTTP /sessions/:sessionKey/kill route that allows any bearer-authenticated user to i…Check if you run itEPSS 0.50%Apr 9, 2026
- Critical9.1A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exp…Check if you run itEPSS 0.39%Apr 9, 2026
- Medium5.1An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject scri…Check if you run itEPSS 0.21%Apr 9, 2026
- High8.7OpenPLC_V3 REST API endpoint checks for JWT presence but never verifies the caller's role.Check if you run itEPSS 0.43%Apr 9, 2026
- Critical9.1V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_li…Check if you run itEPSS 0.70%Apr 9, 2026
- Medium4.9Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster.Check if you run itEPSS 0.48%Apr 9, 2026
- High8.7Hashgraph Guardian through version 3.5.1, fixed in commit 45fbe2f, contains an unsandboxed JavaScript execution vulnerability in the Custom Logic policy block worker t…Check if you run itEPSS 0.79%Apr 9, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.33%Apr 9, 2026
- High7.5Use of Hard-coded Cryptographic Key vulnerability in Apache OpenMeetings.Check if you run itEPSS 0.34%Apr 9, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces.Check if you run itEPSS 0.13%Apr 9, 2026
- High8.8An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Check if you run itEPSS 0.74%Apr 9, 2026
- High7.2Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with…Check if you run itEPSS 0.53%Apr 9, 2026