Browse CVEs by Ecosystem and Severity
317 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-9313
PAM module may allow accessing with the credentials of another user
HIGH
CVE-2024-47000
ZITADEL's Service Users Deactivation not Working
HIGH
CVE-2024-46999
ZITADEL's User Grant Deactivation not Working
HIGH
CVE-2024-6984
Juju's unprivileged user running on charm node can leak any secret or relation data accessible to the local charm
HIGH
CVE-2024-41121
Woodpecker's custom workspace allow to overwrite plugin entrypoint executable
HIGH
CVE-2023-22650
Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider
HIGH
CVE-2024-37153
Contract balance not updating correctly after interchain transaction
HIGH
CVE-2024-29891
ZITADEL's Improper Content-Type Validation Leads to Account Takeover via Stored XSS + CSP Bypass
HIGH
CVE-2024-28855
Improper HTML sanitization in ZITADEL
HIGH
CVE-2024-27304
pgproto3 SQL Injection via Protocol Message Size Overflow
HIGH
CVE-2023-5528
Kubernetes Improper Input Validation vulnerability
HIGH
CVE-2023-3893
Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation
HIGH
CVE-2023-3676
Kubernetes privilege escalation vulnerability
HIGH
CVE-2023-3955
Kubernetes privilege escalation vulnerability
HIGH
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
HIGH
CVE-2023-2515
Mattermost Incorrect Authorization vulnerability
HIGH
CVE-2015-5237
protobuf susceptible to buffer overflow