Browse CVEs by Ecosystem and Severity
842 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2022-24785
Path Traversal: 'dir/../../filename' in moment.locale
HIGH
CVE-2022-24789
Server side request forgery in C1 CMS
CRITICAL
CVE-2022-0749
Deserialization of Untrusted Data in SinGooCMS.Utility
CRITICAL
CVE-2021-46703
Code injection in RazorEngine
HIGH
CVE-2022-0609KEV
Use after free in Animation
HIGH
CVE-2022-22691
Umbraco Persistent Password Reset Poison
HIGH
CVE-2022-22690
Umbraco ApplicationURL Overwrite
MEDIUM
CVE-2022-0274
Cross-site Scripting OrchardCore.Application.Cms.Targets
HIGH
CVE-2021-43045
Allocation of Resources Without Limits or Throttling in Apache Avro
HIGH
CVE-2021-43853
AjaxNetProfessional deserializes arbitrary JavaScript objects
CRITICAL
CVE-2021-23758KEV
Remote Code Execution in AjaxNetProfessional
HIGH
CVE-2021-25976
Cross-Site Request Forgery in PiranhaCMS
CRITICAL
CVE-2021-43569
Improper Verification of Cryptographic Signature in starkbank-ecdsa
HIGH
CVE-2021-41238
Missing Authorization with Default Settings in Dashboard UI
MEDIUM
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
MEDIUM
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
MEDIUM
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
MEDIUM
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
MEDIUM
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
CRITICAL
CVE-2021-31819
Remote Code Execution in Halibut
HIGH
CVE-2021-23428
Path traversal in elFinder.NetCore
CRITICAL
CVE-2021-23427
Imporoper path validation in elFinder.NetCore
HIGH
CVE-2019-0820
Regular Expression Denial of Service in System.Text.RegularExpressions
MEDIUM
CVE-2020-9472
Unrestricted Upload of File with Dangerous Type in Umbraco CMS
MEDIUM
CVE-2020-8867
Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
HIGH
CVE-2020-1057
Remote code execution in ChakraCore
CRITICAL
CVE-2020-27998
Missing Authorization in FastReport
HIGH
CVE-2020-17048
Out-of-bounds Write in ChakraCore
HIGH
CVE-2021-27293
Incorrect Regular Expression in RestSharp
CRITICAL
CVE-2021-29508
Insecure deserialization in Wire
CRITICAL
CVE-2021-26701
.NET Core Remote Code Execution Vulnerability
MEDIUM
CVE-2020-5811
Authenticated path traversal in Umbraco CMS
HIGH
CVE-2019-0992
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-1003
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-0989
Chakra Scripting Engine Memory Corruption Vulnerability
HIGH
CVE-2019-1195
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1141
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1139
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-0993
Chakra Scripting Engine Out-of-bounds write
HIGH
CVE-2019-1140
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-1131
Out-of-bounds write in Microsoft.ChakraCore
HIGH
CVE-2019-0991
Chakra Scripting Engine Out-of-bounds write
CRITICAL
CVE-2019-15151
Double Free in Adplug
HIGH
CVE-2018-14550
Out-of-bounds write in libpng
CRITICAL
CVE-2018-1285
XML External Entity attack in log4net
HIGH
CVE-2021-21252
Regular Expression Denial of Service in jquery-validation
HIGH
CVE-2020-16009KEV
Inappropriate implementation in V8
MEDIUM
CVE-2020-11023KEV
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-11022
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-5268
Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET