Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through…Check if you run itEPSS 0.20%May 6, 2026
- Critical9.0OpenClaw before 2026.4.10 contains an improper network binding vulnerability in the sandbox browser CDP relay that exposes Chrome DevTools Protocol on 0.0.0.0.Check if you run itEPSS 0.21%May 6, 2026
- Medium4.9OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement.Check if you run itEPSS 0.26%May 6, 2026
- Medium6.0OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to per…Check if you run itEPSS 0.22%May 6, 2026
- Critical9.1OpenClaw versions 2026.3.31 before 2026.4.10 contain a privilege escalation vulnerability where heartbeat owner downgrade detection misses local background async exec…Check if you run itEPSS 0.29%May 6, 2026
- High7.1OpenClaw before 2026.4.9 contains a file read vulnerability allowing attackers to bypass navigation guards through browser act/evaluate interactions.Check if you run itEPSS 0.25%May 6, 2026
- Medium4.9OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted s…Check if you run itEPSS 0.27%May 6, 2026
- Critical9.2OpenClaw versions 2026.2.21 before 2026.4.10 contain an authentication bypass vulnerability in the sandbox noVNC helper route that exposes interactive browser session credentials.Check if you run itEPSS 0.40%May 6, 2026
- High7.1Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.16%May 6, 2026
- High8.7Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.15%May 6, 2026
- High7.2Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.17%May 6, 2026
- High7.1Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.17%May 6, 2026
- High8.4In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-ex…Check if you run itEPSS 0.48%May 6, 2026
- Critical9.4OpenMRS Core is an open source electronic medical record system platform.Check if you run itEPSS 0.85%May 6, 2026
- Medium5.5A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7.Check if you run itEPSS 0.39%May 6, 2026
- Low3.1Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak…Check if you run itEPSS 0.15%May 6, 2026
- Medium4.2Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scr…Check if you run itEPSS 0.15%May 6, 2026
- Medium5.3Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially se…Check if you run itEPSS 0.21%May 6, 2026
- Medium5.4Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.16%May 6, 2026
- High8.1Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via malicious network traffic.Check if you run itEPSS 0.26%May 6, 2026
- Low3.1Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.14%May 6, 2026
- High8.8Use after free in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.31%May 6, 2026
- Medium5.4Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.16%May 6, 2026
- Medium4.3Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.16%May 6, 2026
- Medium4.3Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.16%May 6, 2026
Sort