Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 50.54%Sep 12, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.66%Sep 9, 2025
- UnknownCVE-2020-8772 is named in a Cloudflare managed-rules release.Check this weekEPSS 88.05%Sep 8, 2025
- Critical10.0argoproj argo_cd Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.66%Sep 4, 2025
- High8.8Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects ExperieCheck if you run itEPSS 1.64%Sep 3, 2025
- Critical9.8Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allCheck this weekEPSS 19.93%Sep 3, 2025
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects SitecoreCheck if you run itEPSS 6.72%Sep 3, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 1, 2025
- Medium6.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 2.58%Aug 29, 2025
- Medium6.2Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.35%Aug 29, 2025
- Medium4.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.60%Aug 29, 2025
- High8.2DataEase is an open source business intelligence and data visualization tool.Check if you run itEPSS 9.69%Aug 25, 2025
- UnknownCVE-2025-6058 is named in a Cloudflare managed-rules release.Check if you run itEPSS 6.22%Aug 25, 2025
- UnknownCVE-2024-55661 is named in a Cloudflare managed-rules release.Check this weekEPSS 29.54%Aug 25, 2025
- UnknownCVE-2024-38474 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.46%Aug 25, 2025
- UnknownCVE-2025-54381 is named in a Cloudflare managed-rules release.Check this weekEPSS 16.15%Aug 18, 2025
- UnknownCVE-2025-51088 is named in a Cloudflare managed-rules release.Check if you run itEPSS 8.63%Aug 18, 2025
- UnknownCVE-2025-51087 is named in a Cloudflare managed-rules release.Check this weekEPSS 12.91%Aug 18, 2025
- UnknownCVE-2025-32820 is named in a Cloudflare managed-rules release.Check if you run itEPSS 2.88%Aug 18, 2025
- UnknownCVE-2024-7959 is named in a Cloudflare managed-rules release.Open the advisoryAug 18, 2025
- UnknownAdobe experience_manager_forms Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 77.46%Aug 12, 2025
- UnknownCVE-2025-54122 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.89%Aug 11, 2025
- UnknownCVE-2025-23084 is named in a Cloudflare managed-rules release.Check if you run itEPSS 1.58%Aug 11, 2025
- UnknownCVE-2024-38018 is named in a Cloudflare managed-rules release.Check this weekEPSS 51.18%Aug 11, 2025
Sort