Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9A weakness has been identified in OpenClaw up to 2026.1.26.Check if you run itEPSS 0.42%Apr 10, 2026
- Medium6.8The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems (users have read and execute access).Check if you run itEPSS 0.07%Apr 10, 2026
- Low2.1A security flaw has been discovered in CodeAstro Online Classroom 1.0/2.php.Check if you run itEPSS 0.20%Apr 10, 2026
- Low2.1A vulnerability was found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.20%Apr 10, 2026
- Low2.1A vulnerability has been found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.20%Apr 10, 2026
- Low2.1A flaw has been found in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.20%Apr 10, 2026
- High8.6wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker supplies an untru…Check if you run itEPSS 0.32%Apr 10, 2026
- High8.7wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check.Check if you run itEPSS 0.48%Apr 10, 2026
- High7.6In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails to verify the authe…Check if you run itEPSS 0.19%Apr 10, 2026
- High7.6wolfSSL's ECCSI signature verifier decodes the and scalars from the signature blob via with no check that they lie in .Check if you run itEPSS 0.19%Apr 10, 2026
- Low2.3An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates.Check if you run itEPSS 0.14%Apr 10, 2026
- Medium6.4The AddFunc Head & Footer Code plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the , , and post meta values in all versions up to, and including,…Check if you run itEPSS 0.20%Apr 10, 2026
- Medium5.5A vulnerability was detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.25%Apr 10, 2026
- Low1.9A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.20%Apr 10, 2026
- Low2.1A vulnerability was found in code-projects Online Library Management System 1.0.Check if you run itEPSS 0.26%Apr 10, 2026
- Low2.1A vulnerability has been found in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.21%Apr 10, 2026
- Medium5.3An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0.Check if you run itEPSS 0.22%Apr 10, 2026
- Medium5.5A flaw has been found in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.Check if you run itEPSS 0.63%Apr 10, 2026
- High8.9A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.80%Apr 10, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.82%Apr 10, 2026
- Medium4.3The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress is vulnerable to Improper Access Control in all versions u…Check if you run itEPSS 0.30%Apr 10, 2026
- Medium5.3The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0.Check if you run itEPSS 0.67%Apr 10, 2026
- High8.1The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9.Check if you run itEPSS 0.41%Apr 10, 2026
- Medium6.1The Royal WordPress Backup & Restore Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpr_pending_template' parameter in all versio…Check if you run itEPSS 0.28%Apr 10, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the and functions in all versions up…Check if you run itEPSS 0.37%Apr 10, 2026
Sort