Browse CVEs by Ecosystem and Severity
87 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2024-45389
DOM clobbering could escalate to Cross-site Scripting (XSS)
MEDIUM
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
MEDIUM
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
MEDIUM
CVE-2024-35255
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
MEDIUM
CVE-2024-34341
Trix Editor Arbitrary Code Execution Vulnerability
MEDIUM
CVE-2024-29041EPSS 0.1%
Express.js Open Redirect in malformed URLs
MEDIUM
CVE-2024-28863EPSS 0.4%
Denial of service while parsing a tar file due to lack of folders count validation
MEDIUM
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
MEDIUM
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
MEDIUM
CVE-2023-45857EPSS 0.1%
Axios Cross-Site Request Forgery Vulnerability
MEDIUM
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
MEDIUM
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
MEDIUM
CVE-2022-23494
Cross-site scripting vulnerability in TinyMCE alerts
MEDIUM
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
MEDIUM
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
MEDIUM
CVE-2020-28500EPSS 0.2%
Regular Expression Denial of Service (ReDoS) in lodash
MEDIUM
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
MEDIUM
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
MEDIUM
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
MEDIUM
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
MEDIUM
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
MEDIUM
CVE-2021-23343EPSS 0.3%
Regular Expression Denial of Service in path-parse
MEDIUM
CVE-2020-11023KEV
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-11022
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-7598EPSS 0.3%
Prototype Pollution in minimist
MEDIUM
CVE-2020-5243
Denial of Service in uap-core when processing crafted User-Agent strings
MEDIUM
CVE-2019-1010266
Regular Expression Denial of Service (ReDoS) in lodash
MEDIUM
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
MEDIUM
CVE-2019-8331
Bootstrap Vulnerable to Cross-Site Scripting
MEDIUM
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-20676
XSS vulnerability that affects bootstrap
MEDIUM
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2017-1000043
Content Injection via TileJSON Name in mapbox.js
MEDIUM
CVE-2017-1000042
Content Injection via TileJSON attribute in mapbox.js
MEDIUM
CVE-2018-14042
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-14041
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2016-7103
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText