Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7ISPConfig 3.3.0 is vulnerable to Cross Site Scripting (XSS) via the system status webpage.Check if you run itEPSS 0.21%May 5, 2026
- High8.9A security vulnerability has been detected in EFM ipTIME NAS1dual 1.5.24.Check if you run itEPSS 0.63%May 5, 2026
- Medium5.0An issue that could allow a dashboard configuration to be viewed from outside of the authorized organization scope has been resolved.Check if you run itEPSS 0.17%May 5, 2026
- High7.5The WeePie Cookie Allow plugin for WordPress is vulnerable to SQL Injection via the 'consent' parameter in all versions up to, and including, 3.4.11 due to insufficien…Check if you run itEPSS 0.29%May 5, 2026
- Critical9.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 20.35%May 5, 2026
- High7.7The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (…Check if you run itEPSS 0.67%May 5, 2026
- Critical9.1An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0).Check if you run itEPSS 0.26%May 5, 2026
- High7.3Allocation of Resources Without Limits or Throttling vulnerability in Apache HTTP Server's mod_md via OCSP response data.Check if you run itEPSS 0.63%May 5, 2026
- High7.7Redis is an in-memory data structure store.Patch nowKEVEPSS 4.03%May 5, 2026
- High7.7Redis is an in-memory data structure store.Check if you run itEPSS 2.61%May 5, 2026
- High7.3A weakness has been identified in EFM ipTIME C200 up to 1.092.Check if you run itEPSS 3.16%May 5, 2026
- Medium6.4A security flaw has been discovered in IObit Advanced SystemCare 19.Check if you run itEPSS 0.13%May 5, 2026
- High8.7In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.Check if you run itEPSS 0.52%May 5, 2026
- Medium6.5Fiber is a web framework for Go.Check if you run itEPSS 0.25%May 5, 2026
- Medium5.9eLabFTW is an open source electronic lab notebook.Check if you run itEPSS 0.25%May 5, 2026
- Medium5.4Traccar is an open source GPS tracking system.Check if you run itEPSS 0.16%May 5, 2026
- Medium5.4Traccar is an open source GPS tracking system.Check if you run itEPSS 0.18%May 5, 2026
- Medium6.5Traccar is an open source GPS tracking system.Check if you run itEPSS 0.23%May 5, 2026
- Medium6.5The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4.Check if you run itEPSS 0.35%May 5, 2026
- High8.8The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4.Check if you run itEPSS 0.61%May 5, 2026
- Medium6.0OpenClaw before 2026.4.12 contains an improper authorization vulnerability in helper-backed channels where empty resolved approver lists are interpreted as explicit ap…Check if you run itEPSS 0.24%May 5, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes.Check if you run itEPSS 0.25%May 5, 2026
- Medium6.3OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks.Check if you run itEPSS 0.23%May 5, 2026
- High7.7OpenClaw before 2026.4.10 contains a plugin trust bypass vulnerability that allows channel setup catalog lookups to resolve workspace plugin shadows before bundled channel plugins.Check if you run itEPSS 0.39%May 5, 2026
- Medium6.0OpenClaw versions 2026.3.22 before 2026.4.5 contain a symlink traversal vulnerability in remote marketplace repository path handling that allows attackers to escape th…Check if you run itEPSS 0.32%May 5, 2026
Sort