Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Netty allows request-line validation to be bypassed when a or is created first and its URI is later changed via .Check if you run itEPSS 0.32%May 6, 2026
- Medium5.3OpenTelemetry.Exporter.Zipkin is the .NET Zipkin exporter for OpenTelemetry.Check if you run itEPSS 0.31%May 6, 2026
- Medium5.4PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.22%May 6, 2026
- Medium6.9Samsung Print Service Plugin for Android is potentially vulnerable to information disclosure when using an outdated version of the application via mobile devices.Check if you run itEPSS 0.10%May 6, 2026
- Medium5.3Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs.Check if you run itEPSS 0.33%May 6, 2026
- Critical9.1Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 2.26%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.41%May 6, 2026
- Low2.3Incus is a system container and virtual machine manager.Check if you run itEPSS 0.17%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.39%May 6, 2026
- High7.1Incus is a system container and virtual machine manager.Check if you run itEPSS 0.40%May 6, 2026
- Medium5.5A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7.Check if you run itEPSS 0.29%May 6, 2026
- Medium5.5A flaw has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7.Check if you run itEPSS 0.28%May 6, 2026
- High8.5OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers.Check if you run itEPSS 0.14%May 6, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation.Check if you run itEPSS 0.24%May 6, 2026
- Medium6.9OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs throu…Check if you run itEPSS 0.29%May 6, 2026
- High8.7OpenClaw before 2026.4.22 contains an exec allowlist analysis vulnerability allowing shell expansion hiding in unquoted heredoc bodies.Check if you run itEPSS 0.43%May 6, 2026
- High8.5OpenClaw before 2026.4.20 fails to properly reserve the OPENCLAW_ runtime-control environment namespace in workspace dotenv files, allowing attackers to override criti…Check if you run itEPSS 0.13%May 6, 2026
- High8.3OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intend…Check if you run itEPSS 0.25%May 6, 2026
- High8.4OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in OpenShell sandbox filesystem writes that allows attackers to redirect writes outside t…Check if you run itEPSS 7.31%May 6, 2026
- Low2.3OpenClaw before 2026.4.15 contains an arbitrary file read vulnerability in the QMD backend memory_get function that allows callers to read any Markdown files within th…Check if you run itEPSS 0.23%May 6, 2026
- High7.7OpenClaw before 2026.4.15 contains an authorization bypass vulnerability in Matrix room control-command authorization that trusts DM pairing-store entries.Check if you run itEPSS 0.29%May 6, 2026
- Critical9.2OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated requests to reach co…Check if you run itEPSS 0.72%May 6, 2026
- Critical9.2OpenClaw before 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation.Check if you run itEPSS 0.54%May 6, 2026
- High8.7OpenClaw before 2026.4.10 contains an insufficient environment variable denylist vulnerability in its exec environment policy that allows operator-supplied overrides o…Check if you run itEPSS 0.39%May 6, 2026
- Medium6.0OpenClaw versions 2026.4.10 before 2026.4.14 fail to persist session context during delivery queue recovery for media replay.Check if you run itEPSS 0.21%May 6, 2026
Sort