Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.8OpenClaw versions 2026.1.21 prior to 2026.2.19 contain a command injection vulnerability in the Lobster extension's Windows shell fallback mechanism that allows attack…Check if you run itEPSS 0.83%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a local command injection vulnerability in Windows scheduled task script generation due to unsafe handling of cmd metachar…Check if you run itEPSS 0.94%Mar 19, 2026
- Medium6.9OpenClaw versions prior to 2026.2.19 contain a command injection vulnerability in Windows Scheduled Task script generation where environment variables are written to g…Check if you run itEPSS 0.66%Mar 19, 2026
- High7.1OpenClaw versions prior to 2026.2.21 contain an approval-integrity mismatch vulnerability in system.run that allows authenticated operators to execute arbitrary traili…Check if you run itEPSS 0.42%Mar 18, 2026
- Critical9.1IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the inte…Check if you run itEPSS 0.19%Mar 17, 2026
- Medium6.7Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.17%Mar 17, 2026
- Medium6.8Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.11%Mar 17, 2026
- Medium4.8Improper Neutralization of Input During Web Page Generation in Forcepoint Web Security (On-Prem) on Windows allows Stored XSS.This issue affects Web Security through 8.5.6.Check if you run itEPSS 0.17%Mar 16, 2026
- High8.4A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.Check if you run itEPSS 0.21%Mar 16, 2026
- High8.5Serviio PRO 1.8 contains an unquoted search path vulnerability in the Windows service that allows local users to execute arbitrary code with elevated privileges by pla…Check if you run itEPSS 0.14%Mar 16, 2026
- UnknownRisk of Buffer Overflow Vulnerability when installed from source on Windows R < 4.2Open the advisoryMar 13, 2026
- High8.8A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.Check if you run itEPSS 0.23%Mar 12, 2026
- Medium6.8A potential divide by zero vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to cause a Win…Check if you run itEPSS 0.10%Mar 11, 2026
- Medium6.9A potential buffer overflow vulnerability was reported in the Lenovo Virtual Bus driver used in Smart Connect that could allow a local authenticated user to corrupt me…Check if you run itEPSS 0.10%Mar 11, 2026
- Medium6.9R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections.Check if you run itEPSS 0.12%Mar 11, 2026
- Critical9.8External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of priv…Check if you run itEPSS 0.46%Mar 11, 2026
- High7.8Improper Privilege Management in certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.15%Mar 11, 2026
- High7.8Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.Check if you run itEPSS 0.15%Mar 11, 2026
- High7.8Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an authenticated user to conduct an escalation of privilege via…Check if you run itEPSS 0.17%Mar 11, 2026
- Medium6.5Git for Windows is the Windows port of Git.Check if you run itEPSS 0.28%Mar 10, 2026
- Medium5.8Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline…Check if you run itEPSS 0.16%Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026
- High7.8Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.35%Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.39%Mar 10, 2026
- High7.8Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.31%Mar 10, 2026