Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0OpenClaw before 2026.3.31 contains a credential exposure vulnerability in media download functionality that forwards Authorization headers across cross-origin redirects.Check if you run itEPSS 0.37%Apr 23, 2026
- Medium6.9OpenClaw before 2026.3.31 lacks a shared pre-auth concurrency budget on the public LINE webhook path, allowing attackers to cause transient availability loss.Check if you run itEPSS 0.81%Apr 23, 2026
- Medium5.8OpenClaw before 2026.3.28 contains an environment variable sanitization vulnerability where GIT_TEMPLATE_DIR and AWS_CONFIG_FILE are not blocked in the host-env blocklist.Check if you run itEPSS 0.14%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.90%Apr 23, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.73%Apr 23, 2026
- Medium5.3A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic.Check if you run itEPSS 0.32%Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.08%Apr 23, 2026
- High8.2SWUpdate contains an integer underflow vulnerability in the multipart upload parser in mongoose_multipart.c that allows unauthenticated attackers to cause a denial of…Check if you run itEPSS 0.55%Apr 23, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.40%Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.65%Apr 23, 2026
- High7.1Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.35%Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.34%Apr 23, 2026
- High8.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.33%Apr 23, 2026
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 1.25%Apr 23, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.84%Apr 23, 2026
- Medium5.9The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray.Check if you run itEPSS 0.38%Apr 23, 2026
- Medium5.3OpenClaw before 2026.4.20 contains an improper authorization vulnerability in paired-device pairing management that allows limited-scope sessions to enumerate and act…Check if you run itEPSS 0.30%Apr 23, 2026
- Medium5.9OpenTelemetry dotnet is a dotnet telemetry framework.Check if you run itEPSS 0.56%Apr 23, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption The -EBUSY handling in tls_do…Check if you run itEPSS 0.73%Apr 23, 2026
- High7.8A flaw was found in the X.Org X server's XKB key types request validation.Check if you run itEPSS 0.19%Apr 23, 2026
- Medium6.3SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via…Check if you run itEPSS 0.46%Apr 23, 2026
- Medium4.7An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests.Check if you run itEPSS 0.23%Apr 23, 2026
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Check if you run itEPSS 0.31%Apr 23, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 0.69%Apr 23, 2026
- Critical9.9Froxlor is open source server administration software.Check if you run itEPSS 0.75%Apr 23, 2026