Browse CVEs by Ecosystem and Severity
278 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2020-15015
GleamTech FileUltimate Cross-site Scripting
MEDIUM
CVE-2018-8356
Improper Certificate Validation in Microsoft .NET Framework components
MEDIUM
CVE-2019-0657
Improper Input Validation in .Net Framework API's
MEDIUM
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
MEDIUM
CVE-2022-24849
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
MEDIUM
CVE-2022-0274
Cross-site Scripting OrchardCore.Application.Cms.Targets
MEDIUM
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
MEDIUM
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
MEDIUM
CVE-2021-41184
XSS in the `of` option of the `.position()` util in jquery-ui
MEDIUM
CVE-2021-41182
XSS in the `altField` option of the Datepicker widget in jquery-ui
MEDIUM
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
MEDIUM
CVE-2020-9472
Unrestricted Upload of File with Dangerous Type in Umbraco CMS
MEDIUM
CVE-2020-8867
Insufficient Session Expiration and TOCTOU Race Condition in OPC FOundation UA .Net Standard
MEDIUM
CVE-2020-5811
Authenticated path traversal in Umbraco CMS
MEDIUM
CVE-2020-11023KEV
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-11022
Potential XSS vulnerability in jQuery
MEDIUM
CVE-2020-5268
Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
MEDIUM
CVE-2020-5234
Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack
MEDIUM
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
MEDIUM
CVE-2019-0746
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
MEDIUM
CVE-2019-8331
Bootstrap Vulnerable to Cross-Site Scripting
MEDIUM
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-20676
XSS vulnerability that affects bootstrap
MEDIUM
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2017-0256
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
MEDIUM
CVE-2018-14042
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-14041
Bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2016-7103
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText