Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
403,124CVE records
2,768Published, last 7 days
1,734In CISA KEV
1,570Critical, last 30 days
5,599Analysed
15:49 UTCLast NVD sync
Filters Show:
16 results. Infiniflow Ragflow.
Page 1 of 1| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-28797 | High | 8.7 |  Infiniflow Ragflow | Improper input validation | - | 1 ref | 0.56% | Apr 3, 2026 |
| CVE-2026-24770 | Critical | 9.8 | Infiniflow Ragflow | Path traversal | - | 1 ref | 1.4% | Jan 27, 2026 |
| CVE-2025-69286 | High | 8.9 | Infiniflow Ragflow | CWE-340 | - | 2 refs | 0.80% | Dec 31, 2025 |
| CVE-2025-68700 | High | 8.6 | Infiniflow Ragflow | OS command injection | - | 2 refs | 0.72% | Dec 31, 2025 |
| CVE-2025-51462 | Medium | 6.1 | Infiniflow Ragflow | Cross-site scripting | - | 2 refs | 0.29% | Jul 22, 2025 |
| CVE-2025-48187 | Critical | 9.8 | Infiniflow Ragflow | Improper restriction of authentica | - | 2 refs | 0.54% | May 17, 2025 |
| CVE-2024-12880 | Medium | 6.5 | Infiniflow Ragflow | Insecure direct object reference | - | 1 ref | 0.68% | Mar 20, 2025 |
| CVE-2024-12871 | Medium | 5.4 | Infiniflow Ragflow | Cross-site scripting | - | 2 refs | 0.39% | Mar 20, 2025 |
| CVE-2024-12869 | Medium | 4.3 | Infiniflow Ragflow | Missing authentication for critica | - | 2 refs | 0.54% | Mar 20, 2025 |
| CVE-2024-12779 | High | 7.5 | Infiniflow Ragflow | Server-side request forgery (SSRF) | - | 2 refs | 0.65% | Mar 20, 2025 |
| CVE-2024-12450 | Critical | 9.8 | Infiniflow Ragflow | Server-side request forgery (SSRF) | - | 2 refs | 1.3% | Mar 20, 2025 |
| CVE-2024-12433 | Critical | 9.8 | Infiniflow Ragflow | Deserialization of untrusted data | - | 1 ref | 1.7% | Mar 20, 2025 |
| CVE-2025-27135 | High | 8.9 | Infiniflow Ragflow | SQL injection | - | 2 refs | 0.62% | Feb 25, 2025 |
| CVE-2025-25282 | High | 8.1 | Infiniflow Ragflow | Insecure direct object reference | - | 2 refs | 0.49% | Feb 21, 2025 |
| CVE-2024-53450 | High | 7.5 | Infiniflow Ragflow | Out-of-bounds read | - | 1 ref | 0.54% | Dec 9, 2024 |
| CVE-2024-10131 | High | 8.8 | Infiniflow Ragflow | Code injection | - | 1 ref | 1.1% | Oct 19, 2024 |
