Browse CVEs by Ecosystem and Severity
842 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2020-5261
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
MEDIUM
CVE-2020-5234
Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack
HIGH
CVE-2019-16929
Improper Authentication in Auth0.AuthenticationApi
HIGH
CVE-2019-1301
High severity vulnerability that affects System.Management.Automation
HIGH
CVE-2019-14262
Uncontrolled Resource Consumption in MetadataExtractor
HIGH
CVE-2019-1258
Vulnerability in Azure Active Directory Authentication Library
CRITICAL
CVE-2019-9845
MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation
HIGH
CVE-2018-15811KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2018-18325KEV
Inadequate Encryption Strength in DotNetNuke
MEDIUM
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CRITICAL
CVE-2019-7644
Critical severity vulnerability that affects Auth0-WCF-Service-JWT
HIGH
CVE-2019-0639
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0609
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0592
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0611
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0769
High severity vulnerability that affects Microsoft.ChakraCore
MEDIUM
CVE-2019-0746
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
HIGH
CVE-2019-0773
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0771
High severity vulnerability that affects Microsoft.ChakraCore
MEDIUM
CVE-2019-8331
Bootstrap Vulnerable to Cross-Site Scripting
MEDIUM
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-20676
XSS vulnerability that affects bootstrap
MEDIUM
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
HIGH
CVE-2018-0786
Improper Certificate Validation in Microsoft .NET Framework components
HIGH
CVE-2018-8269
Denial of service in ASP.NET Core
HIGH
CVE-2017-0247
ASP.NET Core fails to properly validate web requests
MEDIUM
CVE-2017-0256
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
HIGH
CVE-2017-0249
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
HIGH
CVE-2018-0787
ASP.NET Core allow an elevation of privilege
HIGH
CVE-2018-8171
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
HIGH
CVE-2018-8409
Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
HIGH
CVE-2018-0765
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
HIGH
CVE-2018-12086
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
HIGH
CVE-2017-9822KEV
DNN (aka DotNetNuke) has Remote Code Execution via a cookie
CRITICAL
CVE-2015-2794
The installation wizard in DotNetNuke (DNN) allows privilege escalation
HIGH
CVE-2018-0764
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
HIGH
CVE-2017-0929
High severity vulnerability that affects DotNetNuke.Core
HIGH
CVE-2018-1000210
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
MEDIUM
CVE-2018-14042
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-14041
Bootstrap Cross-site Scripting vulnerability
HIGH
CVE-2016-10707
Denial of Service in jquery
MEDIUM
CVE-2016-7103
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText