Browse CVEs by Ecosystem and Severity
317 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2025-64102
Zitadel allows brute-forcing authentication factors
HIGH
CVE-2025-62725
Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations
HIGH
CVE-2025-54470
NeuVector telemetry sender is vulnerable to MITM and DoS
HIGH
CVE-2025-58073
Mattermost has a Missing Authorization vulnerability
HIGH
CVE-2025-58075
Mattermost has a Missing Authorization vulnerability
HIGH
CVE-2025-61688
Omni vulnerable to information leak via API
HIGH
CVE-2025-54286
Canonical LXD CSRF Vulnerability When Using Client Certificate Authentication with the LXD-UI
HIGH
CVE-2025-61595
github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks
HIGH
CVE-2024-58267
Rancher CLI SAML authentication is vulnerable to phishing attacks
HIGH
CVE-2025-9079
Mattermost Path Traversal vulnerability
HIGH
CVE-2025-58158
Harness Allows Arbitrary File Write in Gitness LFS server
HIGH
CVE-2024-58259
Rancher affected by unauthenticated Denial of Service
HIGH
CVE-2025-57801
gnark is vulnerable to signature malleability in EdDSA and ECDSA due to missing scalar checks
HIGH
CVE-2025-53534
RatPanel can perform remote command execution without authorization
HIGH
CVE-2025-54379
eKuiper API endpoints handling SQL queries with user-controlled table names.
HIGH
CVE-2025-53942
Authentik has insufficient check for account active status when authenticating with OAuth/SAML Sources
HIGH
CVE-2025-23267
NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook
HIGH
CVE-2025-53632
Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip archive
HIGH
CVE-2025-0928
Juju allows arbitrary executable uploads via authenticated endpoint without authorization
HIGH
CVE-2025-53513
Juju zip slip vulnerability via authenticated endpoint
HIGH
CVE-2025-53547
Helm vulnerable to Code Injection through malicious chart.yaml content
HIGH
CVE-2025-52477
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens
HIGH
CVE-2025-48948
Navidrome Transcoding Permission Bypass Vulnerability Report
HIGH
CVE-2025-48949
Navidrome allows SQL Injection via role parameter
HIGH
CVE-2025-48936
ZITADEL Allows Account Takeover via Malicious X-Forwarded-Proto Header Injection
HIGH
CVE-2025-47290
containerd allows host filesystem access on pull
HIGH
CVE-2025-46569
OPA server Data API HTTP path injection of Rego
HIGH
CVE-2025-32777
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
HIGH
CVE-2025-46342
Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements
HIGH
CVE-2024-22031
Rancher users who can create Projects can gain access to arbitrary projects
HIGH
CVE-2025-32431
Traefik has a possible vulnerability with its path matchers
HIGH
CVE-2025-1097
ngress-nginx controller - configuration injection via unsanitized auth-tls-match-cn annotation
HIGH
CVE-2025-24514
ingress-nginx controller - configuration injection via unsanitized auth-url annotation
HIGH
CVE-2025-1098
ingress-nginx controller - configuration injection via unsanitized mirror annotations
HIGH
CVE-2024-53351
PipeCD Vulnerable to Privilege Escalation
HIGH
CVE-2025-27403
Ratify Azure authentication providers can leak authentication tokens to non-Azure container registries
HIGH
CVE-2025-27616
Vela Server Has Insufficient Webhook Payload Data Verification
HIGH
CVE-2025-23389
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login
HIGH
CVE-2025-27088
S3-Proxy allows Reflected Cross-site Scripting (XSS) in template implementation
HIGH
CVE-2024-11218
Buildah allows build breakout using malicious Containerfiles and concurrent builds
HIGH
CVE-2024-52281
Rancher UI has Stored Cross-site Scripting vulnerability
HIGH
CVE-2024-56513
Karmada PULL Mode Cluster Privilege Escalation
HIGH
CVE-2024-25133
OpenShift Hive RCE through AWS/Kubernetes client configuration leads to privilege escalation
HIGH
CVE-2024-55947
Path Traversal in file update API in gogs
HIGH
CVE-2024-54148
Remote Command Execution in file editing in gogs
HIGH
CVE-2024-25131
OpenShift Must Gather Operator Improper Input Validation vulnerability
HIGH
CVE-2024-52009
Git credentials are exposed in Atlantis logs
HIGH
CVE-2024-49381
Plenti arbitrary file deletion vulnerability
HIGH
CVE-2024-49380
Plenti arbitrary file write vulnerability
HIGH
CVE-2022-45157
Exposure of vSphere's CPI and CSI credentials in Rancher