Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.1OpenClaw before 2026.4.22 allows workspace dotenv files to override connector endpoint hosts for Matrix, Mattermost, IRC, and Synology connectors.May 11, 2026
- High8.1A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to…EPSS 0.3%Apr 10, 2026
- Medium6.5A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the ins…EPSS 0.2%Apr 10, 2026
- Medium6.3OpenClaw before 2026.3.22 contains a webhook path route replacement vulnerability in the Synology Chat extension that allows attackers to collapse multi-account config…Apr 9, 2026
- High8.3OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat channel plugin where dmPolicy set to allowlist with empty…Mar 19, 2026
- High7.3An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of…Feb 24, 2026
- High7.8Sudo Heap-Based Buffer Overflow VulnerabilityKEVEPSS 100.0%Jan 26, 2021
- Medium5.5Microsoft Netlogon Privilege Escalation VulnerabilityKEVEPSS 99.4%Aug 17, 2020
8 records · page 1 of 1
PreviousNext