Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownGitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier.EPSS 0.2%Oct 14, 2026
- Medium6.5In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.EPSS 0.6%May 14, 2026
- High8.5GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.EPSS 0.4%May 13, 2026
- Medium5.3Tor before 0.4.9.7 mishandles accounting of the conflux out-of-order queue during the clearing of a queue, aka TROVE-2026-010.EPSS 0.5%May 7, 2026
- Medium5.3An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3.EPSS 0.6%May 5, 2026
- High8.8UltraDAG is a minimal DAG-BFT blockchain in Rust.EPSS 0.6%Apr 21, 2026
- High7.5Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.EPSS 0.4%Apr 18, 2026
- Medium6.9OpenClaw before 2026.3.22 contains an authorization bypass vulnerability in interactive callback dispatch that allows non-allowlisted senders to execute action handlers.EPSS 0.6%Apr 10, 2026
- Medium5.5In systemd 258 before 260, a local unprivileged user can trigger an assert when a Delegate=yes and User= unit exists and is running.EPSS 0.1%Apr 10, 2026
- Medium6.9OpenClaw before 2026.3.25 parses JSON request bodies before validating webhook signatures, allowing unauthenticated attackers to force resource-intensive parsing operations.EPSS 0.8%Apr 9, 2026
- Medium6.9OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions.EPSS 0.4%Apr 9, 2026
- High7.1OpenClaw versions 2026.3.11 through 2026.3.24 contain a session isolation bypass vulnerability where session_status resolves sessionId to canonical session keys before…EPSS 0.5%Apr 9, 2026
- Medium6.9OpenClaw before 2026.3.22 performs cryptographic and dispatch operations on inbound Nostr direct messages before enforcing sender and pairing policy validation.EPSS 0.7%Apr 9, 2026
- High8.1In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line.Apr 2, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.EPSS 0.3%Mar 19, 2026
15 records · page 1 of 1
PreviousNext