Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.40%Apr 10, 2026
- High7.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.40%Apr 10, 2026
- Medium5.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.41%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.43%Apr 10, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.56%Apr 10, 2026
- Medium5.4Chamilo LMS is a learning management system.Check if you run itEPSS 0.24%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Check if you run itEPSS 0.40%Apr 10, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.45%Apr 10, 2026
- High8.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.53%Apr 10, 2026
- High7.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.23%Apr 10, 2026
- Medium5.3Rembg is a tool to remove images background.Check if you run itEPSS 0.59%Apr 10, 2026
- High8.2SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Check if you run itEPSS 0.95%Apr 10, 2026
- Medium6.9OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-32011 where the Feishu webhook handler accepts request bodies with permissive limits of 1MB and 30-se…Check if you run itEPSS 0.46%Apr 10, 2026
- High8.7OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect.Check if you run itEPSS 0.52%Apr 10, 2026
- High7.1OpenClaw before 2026.3.25 contains an authorization bypass vulnerability in the HTTP /sessions/:sessionKey/history route that skips operator.read scope validation.Check if you run itEPSS 0.41%Apr 10, 2026
- High7.2OpenClaw before 2026.3.24 contains an incorrect authorization vulnerability in the POST /reset-profile endpoint that allows authenticated callers with operator.write a…Check if you run itEPSS 0.74%Apr 10, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.58%Apr 10, 2026
- High8.6CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list…Check if you run itEPSS 0.66%Apr 10, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The f…Check if you run itEPSS 0.17%Apr 10, 2026
- High7.1The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4.Check if you run itEPSS 0.35%Apr 10, 2026
- High7.4A vulnerability was found in Tenda AC9 15.03.02.13.Check if you run itEPSS 1.01%Apr 10, 2026
- High7.4A vulnerability has been found in Tenda AC9 15.03.02.13.Check if you run itEPSS 1.01%Apr 10, 2026
- High7.4A flaw has been found in D-Link DIR-513 1.10.Check if you run itEPSS 1.16%Apr 10, 2026
- High7.4A vulnerability was detected in D-Link DIR-513 1.10.Check if you run itEPSS 1.20%Apr 10, 2026
- High7.4A security vulnerability has been detected in D-Link DIR-513 1.10.Check if you run itEPSS 1.17%Apr 10, 2026