Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass.Check if you run itEPSS 0.21%Dec 12, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.Check if you run itEPSS 0.18%Dec 11, 2025
- Critical9.8@vitejs/plugin-rs provides React Server Components (RSC) support for Vite.Check if you run itEPSS 0.81%Dec 9, 2025
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.81%Dec 9, 2025
- Low1.9A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
- Low1.9A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 0.22%Dec 8, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.28%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.23%Dec 7, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityPatch nowKEVEPSS 62.46%Nov 26, 2025
- High8.0Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityPatch nowKEVEPSS 79.34%Aug 4, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityPatch nowKEVEPSS 97.32%Jul 17, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityPatch nowKEVEPSS 100.00%Jul 8, 2025
- High7.3Yeti Server Side Template Injection VulnerabilityPatch nowKEVEPSS 3.92%Jun 7, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 86.98%May 13, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityPatch nowKEVEPSS 69.00%Apr 17, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityPatch nowKEVEPSS 99.99%Apr 7, 2025
- High8.7Commvault Web Server Unspecified VulnerabilityPatch nowKEVEPSS 2.48%Mar 7, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityPatch nowKEVEPSS 99.86%Feb 20, 2025
- High8.1Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 21.78%Jan 17, 2025
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 1, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 99.48%May 31, 2024
- Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityPatch nowKEVEPSS 19.43%Apr 24, 2024
- Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityPatch nowKEVEPSS 99.54%Apr 19, 2024