Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Critical10.0Craft CMS Code Injection VulnerabilityVuln · CVE-2025-32432 · craftcms · CMS · CISA KEV · CVE.org · FIRST EPSS · Craft CMSPatch nowKEVEPSS 99.79%Apr 18, 2025
Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityVuln · CVE-2024-58136 · Yiiframework · Yii · AttackerKB · CISA KEV · CVE.org · Craft CMSPatch nowKEVEPSS 87.76%Apr 9, 2025