Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- MediumUnauthenticated User Enumeration via reset_passwordCheck if you run itEPSS 0.59%Jun 19, 2026
- High8.7Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitra…Check if you run itEPSS 0.61%May 5, 2026
- Critical9.8An issue was discovered in Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.38%Dec 15, 2025
- Critical9.8An issue was discovered in Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.38%Dec 15, 2025
- Critical9.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.Check if you run itEPSS 0.50%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.60%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.34%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.Check if you run itEPSS 0.59%Dec 15, 2025
- High8.6SQL Injection in Frappe HelpDesk in the dashboard get_dashboard_data due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.This issue affects FrappeCheck if you run itEPSS 0.56%Dec 9, 2025
- High7.1Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.Check if you run itEPSS 0.37%Nov 26, 2025
- Medium4.8A vulnerability was determined in Frappe LMS 2.35.0.Check if you run itEPSS 0.41%Oct 5, 2025
- Medium4.8A vulnerability was found in Frappe LMS 2.34.x/2.35.0.Check if you run itEPSS 0.39%Oct 5, 2025
- Low2.3A vulnerability has been found in Frappe LMS 2.35.0.Check if you run itEPSS 0.37%Oct 5, 2025
- Medium6.3A flaw has been found in Frappe LMS 2.35.0.Check if you run itEPSS 0.48%Oct 5, 2025
Sort