Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityKEVEPSS 99.1%Jul 8, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityKEVEPSS 100.0%Jul 8, 2025
- High7.8Sudo Inclusion of Functionality from Untrusted Control Sphere VulnerabilityKEVEPSS 55.5%Jun 30, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityKEVEPSS 87.0%Jun 10, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.0%Jun 1, 2025
- High8.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 87.0%May 13, 2025
- High7.5Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityKEVEPSS 99.9%May 13, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityKEVEPSS 99.8%Apr 25, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.8%Apr 16, 2025
- Critical9.8Langflow Missing Authentication VulnerabilityKEVEPSS 100.0%Apr 7, 2025
- Critical9.8Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityKEVEPSS 94.3%Apr 3, 2025
- Critical9.8Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityKEVEPSS 100.0%Apr 3, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityKEVEPSS 99.9%Mar 10, 2025
- Critical9.8XWiki Platform Eval Injection VulnerabilityKEVEPSS 99.9%Feb 20, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 93.8%Feb 10, 2025
- High7.5SimpleHelp Path Traversal VulnerabilityKEVEPSS 96.6%Jan 15, 2025
- Critical9.3Craft CMS Code Injection VulnerabilityKEVEPSS 97.4%Dec 18, 2024
- Critical9.8BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityKEVEPSS 87.3%Dec 16, 2024
- Critical9.8Cleo Multiple Products Unauthenticated File Upload VulnerabilityKEVEPSS 94.0%Dec 13, 2024
- Critical9.8ProjectSend Improper Authentication VulnerabilityKEVEPSS 91.8%Nov 26, 2024
- Medium6.9Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityKEVEPSS 94.8%Nov 18, 2024
- Critical9.3Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityKEVEPSS 99.9%Nov 18, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityKEVEPSS 86.6%Oct 29, 2024
- Critical9.8CyberPanel Incorrect Default Permissions VulnerabilityKEVEPSS 94.7%Oct 29, 2024
- Critical9.8Cleo Multiple Products Unrestricted File Upload VulnerabilityKEVEPSS 98.6%Oct 27, 2024