Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.22%May 11, 2026
- High7.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%May 11, 2026
- Medium4.3Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition.Check if you run itEPSS 0.28%May 11, 2026
- Low2.0A security vulnerability has been detected in jishenghua jshERP up to 3.6.Check if you run itEPSS 0.38%May 11, 2026
- Medium4.3Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.27%May 11, 2026
- Medium6.5Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.34%May 11, 2026
- Critical9.4oxyno-zeta/s3-proxy is an aws s3 proxy written in go.Check if you run itEPSS 0.72%May 11, 2026
- Medium4.9External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.26%May 11, 2026
- High7.5lfprojects mlflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.21%May 11, 2026
- High8.7Uncontrolled Resource Consumption vulnerability in ninenines cowlib (cow_http_te module) allows Excessive Allocation.Check if you run itEPSS 0.79%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 1.05%May 11, 2026
- Medium5.5A vulnerability was detected in OpenClaw up to 2026.1.24.Check if you run itEPSS 1.11%May 11, 2026
- Medium5.9OpenClaw before 2026.4.23 caches resolved webhook route secrets backed by SecretRef values, allowing stale secrets to remain valid after rotation and reload.Check if you run itEPSS 0.51%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction.Check if you run itEPSS 0.47%May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.Check if you run itEPSS 0.42%May 11, 2026
- Medium4.1OpenClaw versions 2026.4.5 before 2026.4.20 contain an environment variable injection vulnerability allowing workspace dotenv to override MINIMAX_API_HOST.Check if you run itEPSS 0.16%May 11, 2026
- Medium5.3pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.41%May 11, 2026
- High8.5The Open edx Enterprise Service app provides enterprise features to the Open edX platform.Check if you run itEPSS 0.30%May 11, 2026
- Critical9.9Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.45%May 11, 2026
- High8.7Network-AI is a TypeScript/Node.js multi-agent orchestrator.Check if you run itEPSS 0.54%May 11, 2026
- Medium6.8pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.19%May 11, 2026
- High7.8Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE c…Check if you run itEPSS 0.16%May 11, 2026
- High8.1HireFlow v1.2 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.41%May 11, 2026
- None0.0Vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.28%May 11, 2026
- High7.1A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.Check if you run itEPSS 0.29%May 11, 2026