Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.21%Feb 24, 2026
- High7.0Craft is a content management system (CMS).Check if you run itEPSS 0.42%Feb 24, 2026
- Medium5.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Feb 24, 2026
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- High7.3Craft is a content management system.Check if you run itEPSS 1.52%May 5, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityPatch nowKEVEPSS 87.76%Apr 9, 2025
- High8.1Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 21.78%Jan 17, 2025
- Critical9.3Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 97.41%Dec 18, 2024
- Unknowncraftcms Craft CMS Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 72.82%Sep 19, 2024
- Unknowncraftcms Craft CMS Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 94.22%Apr 15, 2024
61 records · page 3 of 3
PreviousNext