Browse CVEs by Ecosystem and Severity
278 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2026-56364
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
MEDIUM
CVE-2026-23874
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
MEDIUM
CVE-2026-22770
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
MEDIUM
CVE-2021-47776
Umbraco CMS contains a server-side request forgery vulnerability
MEDIUM
CVE-2025-68950
ImageMagick's failure to limit MVG mutual causes Stack Overflow
MEDIUM
CVE-2025-68618
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
MEDIUM
CVE-2025-67288
Umbraco CMS has an arbitrary file upload vulnerability
MEDIUM
CVE-2025-14759
Amazon S3 Encryption Client for .NET has a Key Commitment Issue
MEDIUM
CVE-2025-65581
ABP Account Module has an Open Redirect through Improper validation in its register function
MEDIUM
CVE-2025-66625
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
MEDIUM
CVE-2025-64094
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
MEDIUM
CVE-2025-62171
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
MEDIUM
CVE-2025-62594
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
MEDIUM
CVE-2025-61413
Piranha CMS vulnerable to stored cross-site scripting (XSS)
MEDIUM
CVE-2025-11849
Mammoth is vulnerable to Directory Traversal
MEDIUM
CVE-2025-11842
Smidge is vulnerable to Path Traversal
MEDIUM
CVE-2025-55248
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
MEDIUM
CVE-2025-55797
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
MEDIUM
CVE-2025-57692
PiranhaCMS stored XSS
MEDIUM
CVE-2025-59821
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
MEDIUM
CVE-2025-59539
DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field
MEDIUM
CVE-2025-59535
DNN allows loading unused themes on anonymous clients through query parameters
MEDIUM
CVE-2025-9708
Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain
MEDIUM
CVE-2025-56236
FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability
MEDIUM
CVE-2025-55160
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
MEDIUM
CVE-2025-54575
SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks
MEDIUM
CVE-2025-54425
Umbraco Delivery API allows for cached requests to be returned with an invalid API key
MEDIUM
CVE-2025-49147
Umbraco CMS disclosure of configured password requirements
MEDIUM
CVE-2025-52485
DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
MEDIUM
CVE-2025-52486
DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
MEDIUM
CVE-2025-49015
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
MEDIUM
CVE-2025-48953
Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
MEDIUM
CVE-2025-48378
DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
MEDIUM
CVE-2025-48377
Reflected Cross-Site Scripting (XSS) in module actions in edit mode
MEDIUM
CVE-2025-46736
Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
MEDIUM
CVE-2025-32016
Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs
MEDIUM
CVE-2025-32372
DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)
MEDIUM
CVE-2025-27602
Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
MEDIUM
CVE-2025-27513
OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package
MEDIUM
CVE-2024-42512
Security Update for the OPC UA .NET Standard Stack
MEDIUM
CVE-2024-42513
Security Update for the OPC UA .NET Standard Stack
MEDIUM
CVE-2024-57716
AutoQueryable leaks sensitive information
MEDIUM
CVE-2025-26620
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens
MEDIUM
GHSA-f8mx-cwfh-7hr2
TShock allows chat while not fully connected, possible ban evasion
MEDIUM
CVE-2025-24788
Snowflake.Data has weak temporary files permissions
MEDIUM
CVE-2024-10761
XSS/HTML Injection Vulnerability in Umbraco Preview Badge
MEDIUM
CVE-2025-24011
Umbraco Allows User Enumeration Feasible Based On Management API Timing and Response Codes
MEDIUM
CVE-2025-24012
XSS/HTML Injection Vulnerability in Umbraco Backoffice Components
MEDIUM
CVE-2025-23041
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length
MEDIUM
CVE-2024-55471
Oqtane Framework Insecure Direct Object Reference vulnerability