Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.41%Mar 6, 2026
- High8.9Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.Check if you run itEPSS 3.38%Mar 6, 2026
- Critical9.3oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards.Check if you run itEPSS 1.25%Mar 6, 2026
- Critical9.0OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.40%Mar 6, 2026
- Medium5.3OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.43%Mar 6, 2026
- High7.2OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by…Check if you run itEPSS 0.52%Mar 5, 2026
- Critical9.4OpenClaw versions prior to 2026.2.14 contain a vulnerability in the gateway in which it fails to sanitize internal approval fields in node.invoke parameters, allowing…Check if you run itEPSS 0.70%Mar 5, 2026
- High7.1OpenClaw versions prior to 2026.2.12 fail to validate the sessionFile path parameter, allowing authenticated gateway clients to write transcript data to arbitrary loca…Check if you run itEPSS 0.55%Mar 5, 2026
- High7.0Incorrect Authorization vulnerability in hexpm hexpm/hexpm ('Elixir.HexpmWeb.API.OAuthController' module) allows Privilege Escalation.Check if you run itEPSS 0.34%Mar 5, 2026
- High8.8A flaw was found in org.keycloak.broker.saml.Check if you run itEPSS 0.89%Mar 5, 2026
- High7.5Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.64%Mar 5, 2026
- Medium5.0Twenty is an open source CRM.Check if you run itEPSS 0.33%Mar 5, 2026
- High7.5Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.73%Mar 5, 2026
- High7.5Missing authentication and authorization in the web API of Tata Consultancy Services Cognix Recon Client v3.0 allows remote attackers to access application functionali…Check if you run itEPSS 0.76%Mar 5, 2026
- High8.1A broken access control vulnerability in the password reset functionality of Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to reset pas…Check if you run itEPSS 0.40%Mar 5, 2026
- High8.8An authorization bypass vulnerability in Tata Consultancy Services Cognix Recon Client v3.0 allows authenticated users to escalate privileges across role boundaries vi…Check if you run itEPSS 0.59%Mar 5, 2026
- Critical9.8An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server.Check if you run itEPSS 0.64%Mar 5, 2026
- Critical9.8Rakuten Viber Cloak mode in Android v25.7.2.0g and Windows v25.6.0.0–v25.8.1.0 uses a static and predictable TLS ClientHello fingerprint lacking extension diversity, a…Check if you run itEPSS 0.36%Mar 5, 2026
- High8.2Insufficient Verification of Data Authenticity, Improper Handling of Exceptional Conditions vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows…Check if you run itEPSS 0.34%Mar 5, 2026
- Critical9.3Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler, config impor…Check if you run itEPSS 0.58%Mar 5, 2026
- Medium6.9Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacO…Check if you run itEPSS 0.51%Mar 5, 2026
- High8.7Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Heartbeat sync…Check if you run itEPSS 0.33%Mar 5, 2026
- Critical9.3Cross-Site Request Forgery (CSRF) vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android (Flutter URI scheme handler,…Check if you run itEPSS 0.35%Mar 5, 2026
- High8.3A vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android, WebClient (Strategy sync, HTTP API client, config options en…Check if you run itEPSS 0.31%Mar 5, 2026
- Medium5.7Use of Password Hash With Insufficient Computational Effort, Improper Restriction of Excessive Authentication Attempts vulnerability in rustdesk-client RustDesk Client…Check if you run itEPSS 0.34%Mar 5, 2026