Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2025-54574 is named in an emergency Cloudflare managed-rules release.Check this weekEPSS 23.96%Aug 7, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- Critical9.1Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityPatch nowKEVEPSS 73.67%Aug 4, 2025
- UnknownImproper Neutralization of Special Elements Used in a Template EnginePatch nowKEVEPSS 9.14%Aug 4, 2025
- Critical9.0CWP Control Web Panel OS Command Injection VulnerabilityPatch nowKEVEPSS 99.66%Aug 4, 2025
- UnknownCVE-2023-5561 is named in a Cloudflare managed-rules release.Check if you run itEPSS 4.33%Aug 4, 2025
- Critical9.8A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (veCheck if you run itEPSS 2.69%Aug 1, 2025
- UnknownOSGeo GeoServer Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.30%Jul 31, 2025
- UnknownCVE-2025-23061 is named in a Cloudflare managed-rules release.Check if you run itEPSS 7.24%Jul 28, 2025
- Unknownmongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.98%Jul 28, 2025
- Medium6.1A Reflected cross-site scripting (XSS) vulnerability exists in the SMA100 series web interface, allowing a remote unauthenticated attacker to potentially execute arbitrary JavaScriCheck this weekEPSS 46.15%Jul 23, 2025
- Unknownakamai cloudtest Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 2.14%Jul 21, 2025
- UnknownGrafana Labs Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 97.08%Jul 21, 2025
- High7.5An incomplete fix has been identified for CVE-2025-23084 in Node.js, specifically affecting Windows device names like CON, PRN, and AUX.Check this weekEPSS 14.34%Jul 18, 2025
- Critical9.4Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).Check if you run itEPSS 1.81%Jul 18, 2025
- Critical9.8CrushFTP Unprotected Alternate Channel VulnerabilityPatch nowKEVEPSS 93.47%Jul 18, 2025
- UnknownMicrosoft SharePoint Improper AuthenticationPatch nowKEVEPSS 99.89%Jul 18, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2025
- Critical9.8Missing AuthorizationPatch nowKEVEPSS 51.29%Jul 15, 2025
- Critical9.8simplefilelist simple_file_list Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 43.52%Jul 12, 2025
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityPatch nowKEVEPSS 99.92%Jul 11, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- None0.0This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as it is a duplicate of CVE-2020-36847.Open the advisoryJul 9, 2025
- High7.2OS command injection in Ivanti Endpoint Manager Mobile (EPMM) before version 12.5.0.2,12.4.0.3 and 12.3.0.3 allows a remote authenticated attacker with high privileges to achieve rCheck this weekEPSS 23.02%Jul 8, 2025
- Medium6.7In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute systemCheck this weekEPSS 23.08%Jul 5, 2025
Sort