Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass.EPSS 0.2%Dec 12, 2025
- High7.8An issue was discovered in Foxit PDF and Editor for Windows and macOS before 13.2 and 2025 before 2025.2.EPSS 0.2%Dec 11, 2025
- Critical9.8@vitejs/plugin-rs provides React Server Components (RSC) support for Vite.EPSS 0.8%Dec 9, 2025
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.EPSS 0.8%Dec 9, 2025
- Low1.9A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.EPSS 0.2%Dec 8, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.EPSS 0.3%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.EPSS 0.2%Dec 7, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityKEVEPSS 62.5%Nov 26, 2025
- High8.0Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityKEVEPSS 79.3%Aug 4, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityKEVEPSS 97.3%Jul 17, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityKEVEPSS 100.0%Jul 8, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 87.0%May 13, 2025
- High8.7Commvault Web Server Unspecified VulnerabilityKEVEPSS 2.5%Apr 25, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityKEVEPSS 99.8%Apr 25, 2025
- High8.6Broadcom Brocade Fabric OS Code Injection VulnerabilityKEVEPSS 0.7%Apr 23, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityKEVEPSS 100.0%Apr 7, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityKEVEPSS 99.9%Feb 20, 2025
- High8.1Craft CMS Code Injection VulnerabilityKEVEPSS 21.8%Jan 17, 2025
- Critical9.3Craft CMS Code Injection VulnerabilityKEVEPSS 97.4%Dec 18, 2024
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityKEVEPSS 99.8%Jul 1, 2024
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityKEVEPSS 99.5%May 31, 2024
- Medium6.0Cisco ASA and FTD Privilege Escalation VulnerabilityKEVEPSS 19.4%Apr 24, 2024
- Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityKEVEPSS 99.5%Apr 22, 2024
- High7.6Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityKEVEPSS 27.8%Feb 13, 2024
- High8.8Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityKEVEPSS 3.2%Jan 17, 2024