Browse CVEs by Ecosystem and Severity
870 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2020-11022
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-7598EPSS 0.3%
Prototype Pollution in minimist
MEDIUM
CVE-2020-5243
Denial of Service in uap-core when processing crafted User-Agent strings
CRITICAL
CVE-2019-19919
Prototype Pollution in handlebars
HIGH
CVE-2019-18841
Prototype Pollution in chartkick
MEDIUM
CVE-2019-1010266
Regular Expression Denial of Service (ReDoS) in lodash
CRITICAL
CVE-2019-10744
Prototype Pollution in lodash
MEDIUM
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
MEDIUM
CVE-2019-8331
Bootstrap Vulnerable to Cross-Site Scripting
MEDIUM
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-20676
XSS vulnerability that affects bootstrap
MEDIUM
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2017-1000043
Content Injection via TileJSON Name in mapbox.js
MEDIUM
CVE-2017-1000042
Content Injection via TileJSON attribute in mapbox.js
MEDIUM
CVE-2018-14042
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-14041
Bootstrap Cross-site Scripting vulnerability
CRITICAL
CVE-2017-16082
Remote Code Execution in pg
HIGH
CVE-2016-10707
Denial of Service in jquery
CRITICAL
CVE-2015-8857
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
MEDIUM
CVE-2016-7103
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText