Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Admidio is an open-source user management solution.Check if you run itEPSS 0.43%May 7, 2026
- High8.2Admidio is an open-source user management solution.Check if you run itEPSS 0.31%May 7, 2026
- High8.2Admidio is an open-source user management solution.Check if you run itEPSS 0.22%May 7, 2026
- Low3.5Admidio is an open-source user management solution.Check if you run itEPSS 0.14%May 7, 2026
- Medium5.2Admidio is an open-source user management solution.Check if you run itEPSS 0.37%May 7, 2026
- Medium6.5Admidio is an open-source user management solution.Check if you run itEPSS 0.31%May 7, 2026
- Medium4.9Admidio is an open-source user management solution.Check if you run itEPSS 0.42%May 7, 2026
- High8.8NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 2.42%May 7, 2026
- Critical9.1Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.Check if you run itEPSS 0.82%May 7, 2026
- High7.5When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from u…Check if you run itEPSS 0.48%May 7, 2026
- Medium6.5The Appointment Booking Calendar plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.6.10.6.Check if you run itEPSS 0.48%May 7, 2026
- Medium5.3The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.51.1.Check if you run itEPSS 0.42%May 7, 2026
- Medium5.9OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP.Check if you run itEPSS 0.43%May 6, 2026
- Medium5.9OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments.Check if you run itEPSS 0.38%May 6, 2026
- Medium5.3Netty allows request-line validation to be bypassed when a or is created first and its URI is later changed via .Check if you run itEPSS 0.34%May 6, 2026
- High8.5OpenClaw before 2026.4.22 derives loopback MCP owner context from spoofable server-issued bearer tokens in request headers.Check if you run itEPSS 0.16%May 6, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation.Check if you run itEPSS 0.40%May 6, 2026
- Medium6.9OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to validate outbound photo URLs throu…Check if you run itEPSS 0.47%May 6, 2026
- Critical9.2OpenClaw before 2026.4.15 contains an authentication bypass vulnerability in Feishu webhook and card-action validation that allows unauthenticated requests to reach co…Check if you run itEPSS 1.09%May 6, 2026
- Critical9.2OpenClaw before 2026.4.15 captures resolved bearer-auth configuration at startup, allowing revoked tokens to remain valid after SecretRef rotation.Check if you run itEPSS 0.80%May 6, 2026
- Medium4.9OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through…Check if you run itEPSS 0.31%May 6, 2026
- Medium4.9OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows attackers to pivot to untrusted s…Check if you run itEPSS 0.44%May 6, 2026
- High7.1Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.22%May 6, 2026
- High8.7Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.21%May 6, 2026
- High7.2Masa CMS is a content management system forked from Mura CMS.Check if you run itEPSS 0.21%May 6, 2026