Miggo Logo
Book a Demo

Miggo Predictive Vulnerability Database

Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.

Concerned about an active attack path? Talk to our security experts and see Miggo in action

Contact UsArrow Right
Hero Image
New Vulnerabilities

Top 10 CVEs

CVE-2025-1974

9.8
critical
ingress-nginx admission controller RCE escalation
Public FixNo Fix
-
Vulnerable Functions2 Vulnerable Functions
Published
3/25/2025
Updated
3/25/2025

CVE-2025-24813

9.8
critical
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
3/10/2025
Updated
3/19/2025

CVE-2025-29927

9.1
critical
Authorization Bypass in Next.js Middleware
Public FixFix Available
-
Vulnerable Functions3 Vulnerable Functions
Published
3/21/2025
Updated
3/24/2025

CVE-2025-3248

9.8
critical
Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
4/7/2025
Updated
4/10/2025

CVE-2021-44228

10
critical
Remote code injection in Log4j
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
12/10/2021
Updated
5/9/2025

CVE-2022-1471

8.3
high
SnakeYaml Constructor Deserialization Remote Code Execution
Public FixFix Available
-
Vulnerable Functions6 Vulnerable Functions
Published
12/12/2022
Updated
2/6/2025

CVE-2022-22965

9.8
critical
Remote Code Execution in Spring Framework
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
3/31/2022
Updated
1/29/2025

CVE-2023-50164

9.8
critical
Apache Struts vulnerable to path traversal
Public FixFix Available
-
Vulnerable Functions4 Vulnerable Functions
Published
12/7/2023
Updated
2/13/2025

CVE-2024-27348

9.8
critical
Apache HugeGraph-Server: Command execution in gremlin
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
4/22/2024
Updated
2/13/2025

CVE-2024-53677

-
critical
Apache Struts file upload logic is flawed
Public FixFix Available
-
Vulnerable Functions2 Vulnerable Functions
Published
12/11/2024
Updated
1/3/2025
New Vulnerabilities

New vulnerabilities last 30 days

CVE-2025-53890: pyLoad vulnerable to XSS through insecure CAPTCHA
#### Summary An unsafe JavaScript evaluation vulnerability in pyLoad’s CAPTCHA processing code allow...
Miggo AI
Analysis:
Available
9.8
critical
7/15/2025
CVE-2025-53889: Directus' insufficient permission checks can enable unauthenticated users to manually trigger Flows
### Summary Directus Flows with a manual trigger are not validating whether the user triggering the...
Miggo AI
Analysis:
Available
6.5
medium
7/15/2025
CVE-2025-53836: XWiki Rendering is vulnerable to RCE attacks when processing nested macros
### Impact The default macro content parser didn't preserve the restricted attribute of the transfo...
Miggo AI
Analysis:
Available
10
critical
7/14/2025
CVE-2025-53835: XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax
### Impact The XHTML syntax depended on the `xdom+xml/current` syntax which allows the creation of r...
Miggo AI
Analysis:
Available
9.1
critical
7/14/2025

Resources