OpenClaw Encryption Problem Vulnerability (CNVD-2026-15057)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. A cryptographic issue vulnerability exists in versions prior to OpenClaw 2026.2.22. The vulnerability stems from the double use of authentication keys across security domains and can be exploited by an attacker to cause a...

CVE-2026-27969 affecting package vitess for versions less than 17.0.7-15

CVE-2026-27969 affecting package vitess for versions less than 17.0.7-15. A patched version of the package is available...

CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3

CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...

CVE-2025-38712 affecting package kernel for versions less than 5.15.200.1-1

CVE-2025-38712 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

CVE-2025-68809 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68809 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-69195 affecting package wget for versions less than 2.1.0-7

CVE-2025-69195 affecting package wget for versions less than 2.1.0-7. A patched version of the package is available...

CVE-2025-68231 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-68231 affecting package kernel for versions less than 6.6.119.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11

CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11. A patched version of the package is available...

CVE-2025-40288 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40288 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-40280 affecting package kernel for versions less than 6.6.117.1-1

CVE-2025-40280 affecting package kernel for versions less than 6.6.117.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64329 affecting package containerd2 for versions less than 2.0.0-16

CVE-2025-64329 affecting package containerd2 for versions less than 2.0.0-16. A patched version of the package is available...

AZL-71404 CVE-2025-40264 affecting package kernel for versions less than 6.6.119.3-1

In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrbparams in case of OS2BMC beinsertvlaninpkt is called with the wrbparams argument being NULL at besendpkttobmc call site. This may lead to dereferencing a NULL pointer when processing a workaround for specific...

CVE-2025-59777 affecting package libmicrohttpd for versions less than 0.9.77-4

CVE-2025-59777 affecting package libmicrohttpd for versions less than 0.9.77-4. A patched version of the package is available...

CVE-2025-12480

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete...

EUVD-2025-33671

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

EUVD-2025-24438

Malicious code in bioql PyPI...

CVE-2025-38348 affecting package kernel for versions less than 6.6.96.1-1

CVE-2025-38348 affecting package kernel for versions less than 6.6.96.1-1. A patched version of the package is available...

Simplehelp security vulnerabilities

SimpleHelp is a remote support software from SimpleHelp, Inc. A security vulnerability exists in Simplehelp versions prior to 5.5.11 that stems from vulnerability to cross-site request forgery attacks...

PAVO Pay Trust Management Vulnerability

PAVO Pay is a mobile payment management platform from PAVO Turkey. A trust management issue vulnerability exists in PAVO Pay versions prior to 13.05.2025, which stems from the use of hard-coded credentials that could result in reading sensitive constants...