Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.54%May 12, 2026
- Medium6.5webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a non-potentially trustworthy origin such as plain HTTP.Check if you run itEPSS 0.35%May 12, 2026
- Medium6.1Issuing an ICMP ping via the shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue…Check if you run itEPSS 0.14%May 12, 2026
- High7.5** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of th…Check if you run itEPSS 0.55%May 12, 2026
- High8.8** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac…Check if you run itEPSS 2.69%May 12, 2026
- Medium5.4Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended req…Check if you run itEPSS 0.12%May 12, 2026
- Medium5.3Fiber is a web framework for Go.Check if you run itEPSS 0.31%May 11, 2026
- Medium6.5HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.Check if you run itEPSS 0.36%May 11, 2026
- High7.7Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.34%May 11, 2026
- High8.2Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.30%May 11, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.33%May 11, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.22%May 11, 2026
- High7.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%May 11, 2026
- Medium4.3Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition.Check if you run itEPSS 0.28%May 11, 2026
- Low2.0A security vulnerability has been detected in jishenghua jshERP up to 3.6.Check if you run itEPSS 0.38%May 11, 2026
- Medium4.3Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.27%May 11, 2026
- Medium6.5Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.34%May 11, 2026
- Critical9.4oxyno-zeta/s3-proxy is an aws s3 proxy written in go.Check if you run itEPSS 0.72%May 11, 2026
- Medium4.9External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.26%May 11, 2026
- High7.5lfprojects mlflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.21%May 11, 2026
- High8.7Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation.Check if you run itEPSS 0.79%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 1.05%May 11, 2026
- Medium5.5A vulnerability was detected in OpenClaw up to 2026.1.24.Check if you run itEPSS 1.11%May 11, 2026
- Medium5.9OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload.Check if you run itEPSS 0.51%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction.Check if you run itEPSS 0.47%May 11, 2026