Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.0Dokku is a docker-powered platform as a service.Oct 14, 2026
- High8.6Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation.EPSS 0.2%Oct 8, 2026
- Critical9.9XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc).EPSS 0.6%Sep 18, 2026
- High8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceEPSS 0.7%Sep 7, 2026
- High8.7Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.EPSS 0.9%Sep 1, 2026
- Critical9.3vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime t…EPSS 5.6%Jul 27, 2026
- High8.8Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- High8.8An eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4 allows attackers to overwrite arbitrary files as root via scanning a crafted file.EPSS 0.3%Dec 12, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityKEVEPSS 99.9%Feb 20, 2025
- Critical9.8OSGeo GeoServer GeoTools Eval Injection VulnerabilityKEVEPSS 99.8%Jul 1, 2024
- High7.8Spreadsheet::ParseExcel Remote Code Execution VulnerabilityKEVEPSS 19.1%Dec 24, 2023
- Critical10.0GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityKEVEPSS 99.7%Apr 23, 2021
- High7.8ExifTool Remote Code Execution VulnerabilityKEVEPSS 100.0%Apr 23, 2021
14 records · page 1 of 1
PreviousNext