Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityCVE-2025-35939 · craftcms · craft cms · CISA KEV · CVE.org · FIRST EPSS · Craft CMSKEVEPSS 1.3%May 7, 2025
Critical10.0Craft CMS Code Injection VulnerabilityCVE-2025-32432 · Craft CMS · Craft CMS · CISA KEV · CVE.org · FIRST EPSS · Craft CMSKEVEPSS 99.8%Apr 25, 2025
Critical9.8Yiiframework Yii Improper Protection of Alternate Path VulnerabilityCVE-2024-58136 · yiiframework · yii · CISA KEV · CVE.org · FIRST EPSS · Craft CMSKEVEPSS 87.8%Apr 9, 2025
High8.1Craft CMS Code Injection VulnerabilityCVE-2025-23209 · craftcms · craft cms · CISA KEV · CVE.org · FIRST EPSS · Craft CMSKEVEPSS 21.8%Jan 17, 2025
Critical9.3Craft CMS Code Injection VulnerabilityCVE-2024-56145 · craftcms · craft cms · CISA KEV · CVE.org · FIRST EPSS · Craft CMSKEVEPSS 97.4%Dec 18, 2024