Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.61%May 5, 2026
- Medium5.3FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.41%May 5, 2026
- Medium6.8Tunnelblick is an open source graphic user interface for OpenVPN on macOS.Check if you run itEPSS 0.19%May 5, 2026
- High7.4A vulnerability was detected in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 1.19%May 5, 2026
- High7.7An issue was discovered in idrac in OpenStack Ironic before 35.0.1.Check if you run itEPSS 0.54%May 5, 2026
- Medium5.3An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3.Check if you run itEPSS 0.60%May 5, 2026
- High8.6In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests.Check if you run itEPSS 0.55%May 5, 2026
- Low2.3An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.Check if you run itEPSS 0.44%May 5, 2026
- Medium6.3An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.Check if you run itEPSS 0.52%May 5, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/vc4: platform_get_irq_byname() returns an int platform_get_irq_byname() will return a negative…Check if you run itEPSS 0.16%May 5, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_ll: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hci_ll.c:587 d…Check if you run itEPSS 0.16%May 5, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() There's issue as follows: ...Check if you run itEPSS 0.16%May 5, 2026
- Critical9.1A flaw was found in the X.Org X server.Check if you run itEPSS 0.53%May 5, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in phoenixframework phoenix allows a denial of service via the long-poll transport's NDJSON body handling.Check if you run itEPSS 0.52%May 5, 2026
- Medium6.5Fiber is a web framework for Go.Check if you run itEPSS 0.37%May 5, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes.Check if you run itEPSS 0.45%May 5, 2026
- Medium6.3OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks.Check if you run itEPSS 0.40%May 5, 2026
- Medium6.3OpenClaw before 2026.4.14 contains a server-side request forgery vulnerability in browser SSRF policy that allows private-network navigation by default.Check if you run itEPSS 0.50%May 5, 2026
- High8.3OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content.Check if you run itEPSS 0.43%May 5, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes.Check if you run itEPSS 0.40%May 5, 2026
- High8.7OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the…Check if you run itEPSS 0.54%May 5, 2026
- High7.5fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization.Check if you run itEPSS 0.68%May 5, 2026
- High7.3Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HT…Check if you run itEPSS 0.38%May 5, 2026
- Medium6.4The Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 3…Check if you run itEPSS 0.26%May 5, 2026
- Medium6.1The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.18%May 5, 2026