Browse CVEs by Ecosystem and Severity
16 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2025-24813KEV
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CRITICAL
CVE-2025-24893KEV
XWiki Platform allows remote code execution as guest via SolrSearchMacros request
CRITICAL
CVE-2024-36401KEV
Remote Code Execution (RCE) vulnerability in geoserver
CRITICAL
CVE-2024-27348KEV
Apache HugeGraph-Server: Command execution in gremlin
CRITICAL
CVE-2024-23897KEV
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
CRITICAL
CVE-2023-46604KEV
Apache ActiveMQ is vulnerable to Remote Code Execution
CRITICAL
CVE-2022-24816KEV
Improper Control of Generation of Code ('Code Injection') in jai-ext
CRITICAL
CVE-2023-33246KEV
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
CRITICAL
CVE-2016-8735KEV
Apache Tomcat Improper Access Control vulnerability
CRITICAL
CVE-2017-1000353KEV
Deserialization of Untrusted Data in Jenkins
CRITICAL
CVE-2018-1000861KEV
Deserialization of Untrusted Data in Jenkins
CRITICAL
CVE-2012-0391KEV
Apache Struts Remote Java Code Execution
CRITICAL
CVE-2022-22965KEV
Remote Code Execution in Spring Framework
CRITICAL
CVE-2022-22947KEV
Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured
CRITICAL
CVE-2021-45046KEVEPSS 94.3%
Incomplete fix for Apache Log4j vulnerability
CRITICAL
CVE-2021-44228KEVEPSS 94.4%
Remote code injection in Log4j