HIGH Severity CVEs

OpenClaw before 2026.3.11 contains a session sandbox escape vulnerability in the session_status tool that allows sandbox

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability allowing leaf subagents to access the subagen

OpenClaw before 2026.3.12 contains an insufficient access control vulnerability in the /config and /debug command handle

A weakness has been identified in Belkin F9K1122 1.00.33. The impacted element is the function formSetPassword of the fi

A security flaw has been discovered in Belkin F9K1122 1.00.33. The affected element is the function formCrossBandSwitch

A vulnerability was found in Tenda 4G06 04.06.01.29. This vulnerability affects the function fromDhcpListClient of the f

A vulnerability has been found in code-projects Accounting System 1.0. This affects an unknown part of the file /view_wo

A flaw has been found in code-projects Accounting System 1.0. Affected by this issue is some unknown functionality of th

A vulnerability was detected in code-projects Accounting System 1.0. Affected by this vulnerability is an unknown functi

A vulnerability was found in D-Link DIR-513 1.10. This issue affects the function formSetEmail of the file /goform/formS

A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromPPTPUserSetting of the file /goform/PPTPUserS

A security vulnerability has been detected in code-projects Simple Food Order System 1.0. Affected by this vulnerability

A weakness has been identified in code-projects Simple Food Order System 1.0. Affected is an unknown function of the fil

A security flaw has been discovered in code-projects Simple Food Order System 1.0. This impacts an unknown function of t

A vulnerability was identified in elecV2 elecV2P up to 3.8.3. This affects the function eAxios of the file /mock of the

A flaw has been found in elecV2 elecV2P up to 3.8.3. This issue affects the function pm2run of the file /rpc. Executing

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin

A vulnerability has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The impacted el

A flaw has been found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. The affected element is

A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054. Impacted is the f

A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor

A vulnerability was identified in Sinaptik AI PandasAI up to 0.1.4. Affected by this issue is the function delete_questi

SIPP 3.3 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arb

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arb

SC v7.16 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by s

Flat Assembler 1.71.21 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbit

Mapscrn 2.0.3 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code

iSelect 1.4.0-2+b1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code

EKG Gadu 1.9~pre+r2855-3+b1 contains a local buffer overflow vulnerability in the username handling that allows local at

zFTP Client 20061220+dfsg3-4.1 contains a buffer overflow vulnerability in the NAME parameter handling of FTP connection

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary

PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by

NRSS RSS Reader 0.3.9-1 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary

TRN 3.6-23 contains a stack buffer overflow vulnerability that allows local attackers to execute arbitrary code by suppl

Yasr 0.6.9-5 contains a buffer overflow vulnerability that allows local attackers to crash the application or execute ar

TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attacke

Multi Emulator Super System 0.154-3.1 contains a buffer overflow vulnerability in the gamma parameter handling that allo

yTree 1.94-1.1 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary cod

xwpe 1.5.30a-2.1 and prior contains a stack-based buffer overflow vulnerability that allows local attackers to execute a

The Oxygen Theme theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including,

The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amo

The eswifi socket offload driver copies user-provided payloads into a fixed buffer without checking available space; ove

The Ultimate Member plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl

WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file `html/socio/sistema/deletar_tag.php

A security vulnerability has been detected in chatwoot up to 4.11.1. The affected element is an unknown function of the

Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Versions prior to 20.8.9

Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp

Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL querie

Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.hea

Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop, a cross-site scripting vulnerability stored in t