https://vulnogram.org/ Most recent CVEs assigned by Wiz, Inc. (wiz). https://vulnogram.org/seaview/icons/wiz.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2025-8110 https://vulnogram.org/CVE-2025-8110 Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. High Known Exploited Wed, 10 Dec 2025 13:23:46 GMT https://vulnogram.org/CVE-2025-53692 https://vulnogram.org/CVE-2025-53692 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cross-Site Scripting (XSS).This issue affects Sitecore Ex… High Network Exploitable Sun, 21 Sep 2025 19:42:46 GMT https://vulnogram.org/CVE-2025-53690 https://vulnogram.org/CVE-2025-53690 Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0. Critical Known Exploited Network Exploitable Wed, 03 Sep 2025 20:04:48 GMT https://vulnogram.org/CVE-2025-53691 https://vulnogram.org/CVE-2025-53691 Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experi… High Wed, 03 Sep 2025 12:36:59 GMT https://vulnogram.org/CVE-2025-53693 https://vulnogram.org/CVE-2025-53693 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM… Critical Network Exploitable Wed, 03 Sep 2025 12:36:53 GMT https://vulnogram.org/CVE-2025-53694 https://vulnogram.org/CVE-2025-53694 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (… High Network Exploitable Wed, 03 Sep 2025 12:36:37 GMT https://vulnogram.org/CVE-2024-9145 https://vulnogram.org/CVE-2024-9145 Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extension in versions 0.13.0 up to 0.17.8 are vulnerable to local command injection if the user opens a maliciously crafted Dockerfile located in… High Tue, 01 Oct 2024 07:23:03 GMT