Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leadi…Check if you run itEPSS 0.69%Mar 31, 2026
- Medium5.3An incorrect startup configuration of affected versions of Zscaler Client Connector on Windows may cause a limited amount of traffic from being inspected under rare circumstances.Check if you run itEPSS 0.18%Mar 31, 2026
- Medium4.7Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL sear…Check if you run itEPSS 0.18%Mar 31, 2026
- Medium4.3In Search Guard FLX up to version 4.0.1, it is possible to use specially crafted requests to redirect the user to an untrusted URL.Check if you run itEPSS 0.18%Mar 31, 2026
- Critical9.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.28%Mar 31, 2026
- Medium6.9OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-provider.ts component that allows attackers to fetc…Check if you run itEPSS 0.23%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked.Check if you run itEPSS 0.34%Mar 31, 2026
- High8.4ZEBRA is a Zcash node written entirely in Rust.Check if you run itEPSS 0.26%Mar 31, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.21%Mar 31, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.37%Mar 31, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.32%Mar 31, 2026
- Medium6.5Trino is a distributed SQL query engine for big data analytics.Check if you run itEPSS 0.20%Mar 31, 2026
- Medium6.0mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.51%Mar 31, 2026
- High7.5mppx is a TypeScript interface for machine payments protocol.Check if you run itEPSS 0.37%Mar 31, 2026
- Critical9.2ZEBRA is a Zcash node written entirely in Rust.Check if you run itEPSS 0.79%Mar 31, 2026
- High7.7Nhost is an open source Firebase alternative with GraphQL.Check if you run itEPSS 0.38%Mar 31, 2026
- High7.7Giskard is an open-source Python library for testing and evaluating agentic systems.Check if you run itEPSS 0.64%Mar 31, 2026
- Medium5.0go-git is an extensible git implementation library written in pure Go.Check if you run itEPSS 0.15%Mar 31, 2026
- High7.7FastGPT is an AI Agent building platform.Check if you run itEPSS 0.29%Mar 31, 2026
- Critical10.0FastGPT is an AI Agent building platform.Check if you run itEPSS 0.42%Mar 31, 2026
- High7.1OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl…Check if you run itEPSS 0.58%Mar 31, 2026
- Medium6.3OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication that allows attackers to brute-force weak shared secrets.Check if you run itEPSS 0.37%Mar 31, 2026
- Critical9.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check.Check if you run itEPSS 0.84%Mar 31, 2026
- Medium5.3OpenClaw before 2026.3.28 contains a sender policy bypass vulnerability in the Google Chat and Zalouser extensions where route-level group allowlist policies silently…Check if you run itEPSS 0.30%Mar 31, 2026
- High8.6OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve node…Check if you run itEPSS 0.39%Mar 31, 2026
Sort