Miggo Predictive Vulnerability Database

Comprehensive vulnerability intelligence for security teams to gain clarity into CVEs to prioritize and respond with precision.

Concerned about an active attack path? Talk to our security experts and see Miggo in action

Top 10 CVEs

CVE-2021-44228

Remote code injection in Log4j

2 Vulnerable Functions

CVE-2022-22965

Remote Code Execution in Spring Framework

2 Vulnerable Functions

CVE-2022-1471

SnakeYaml Constructor Deserialization Remote Code Execution

6 Vulnerable Functions

CVE-2023-50164

Apache Struts vulnerable to path traversal

4 Vulnerable Functions

CVE-2024-27348

Apache HugeGraph-Server: Command execution in gremlin

2 Vulnerable Functions

CVE-2024-53677

Apache Struts file upload logic is flawed

2 Vulnerable Functions

CVE-2025-1974

ingress-nginx admission controller RCE escalation

2 Vulnerable Functions

CVE-2025-24813

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

2 Vulnerable Functions

CVE-2025-29927

Authorization Bypass in Next.js Middleware

3 Vulnerable Functions

CVE-2025-3248

Langflow Vulnerable to Code Injection via the `/api/v1/validate/code` endpoint

2 Vulnerable Functions

New vulnerabilities last 30 days

CVE-2025-62519: phpMyFAQ has Authenticated SQL Injection in Configuration Update Functionality

phpMyFAQ authenticated SQLi in configuration updates grants privileged users arbitrary SQL execution via unsanitized form keys injected into raw UPDATE queries.

CVE-2025-13261: lsFusion Platform has Path Traversal vulnerability

lsFusion Platform path traversal in DownloadFileRequestHandler via Version argument manipulation grants remote attackers arbitrary file system read access.

CVE-2025-55449: AstrBot is vulnerable to RCE with hard-coded JWT signing keys

AstrBot RCE via hard-coded JWT signing key grants attackers auth bypass to install malicious Python plugins for arbitrary command execution on the host.

GHSA-m8jr-fxqx-8xx6: Apollo Federation has Improper Enforcement of Access Control on Transitive Fields

Apollo Federation authorization bypass grants access to protected data by querying fields with @requires or @fromContext that bypass transitive field policies.

Resources