Browse CVEs by Ecosystem and Severity
842 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2026-25798
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
MEDIUM
CVE-2026-25797
ImageMagick: Code Injection via PostScript header in ps coders
MEDIUM
CVE-2026-25796
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
MEDIUM
CVE-2026-25795
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
HIGH
CVE-2026-25794
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
MEDIUM
CVE-2026-25638
ImageMagick has memory leak in msl encoder
MEDIUM
CVE-2026-25637
ImageMagick: Possible memory leak in ASHLAR encoder
MEDIUM
CVE-2026-25576
ImageMagick: Out of bounds read in multiple coders read raw pixel data
HIGH
CVE-2026-24485
ImageMagick: Infinite loop vulnerability when parsing a PCD file
MEDIUM
CVE-2026-24484
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
HIGH
CVE-2026-24481
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
HIGH
CVE-2026-21218
Microsoft Security Advisory CVE-2026-21218 | .NET Security Feature Bypass Vulnerability
CRITICAL
CVE-2026-25592
Semantic Kernel has Arbitrary File Write via AI Agent Function Calling in .NET SDK
MEDIUM
CVE-2026-25543
HtmlSanitizer has a bypass via template tag
MEDIUM
CVE-2026-24687
Umbraco.Forms has Path Traversal and File Enumeration Vulnerabilities in Linux/Mac
CRITICAL
CVE-2026-24838
DotNetNuke.Core Vulnerable to Stored XSS via Module Title
HIGH
CVE-2026-24837
DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal
HIGH
CVE-2026-24836
DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes
MEDIUM
CVE-2026-24784
DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer
MEDIUM
CVE-2026-23952
ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load
MEDIUM
CVE-2026-56364
ImageMagick has a Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML
MEDIUM
CVE-2026-23874
ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript
MEDIUM
CVE-2026-22770
ImageMagick releases an invalid pointer in BilateralBlur when memory allocation fails
MEDIUM
CVE-2021-47776
Umbraco CMS contains a server-side request forgery vulnerability
CRITICAL
CVE-2025-68924
UmbracoForms Vulnerable to Remote Code Execution via Untrusted WSDL Compilation in Dynamic SOAP Client Generation
MEDIUM
CVE-2025-68950
ImageMagick's failure to limit MVG mutual causes Stack Overflow
MEDIUM
CVE-2025-68618
ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack
MEDIUM
CVE-2025-67288
Umbraco CMS has an arbitrary file upload vulnerability
LOW
CVE-2025-67291
Piranha has stored cross-site scripting (XSS) vulnerability
LOW
CVE-2025-67290
Piranha has stored cross-site scripting (XSS) vulnerability
MEDIUM
CVE-2025-14759
Amazon S3 Encryption Client for .NET has a Key Commitment Issue
MEDIUM
CVE-2025-65581
ABP Account Module has an Open Redirect through Improper validation in its register function
HIGH
CVE-2025-66628
ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)
MEDIUM
CVE-2025-66625
Umbraco Vulnerable to Improper File Access and Credential Exposure in Dictionary Import Functionality
HIGH
CVE-2025-66631
Csla affected by Remote Code Execution via WcfProxy (NetDataContractSerializer)
CRITICAL
CVE-2025-64095
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite
MEDIUM
CVE-2025-64094
DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload
MEDIUM
CVE-2025-62171
ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)
MEDIUM
CVE-2025-62594
ImageMagick CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS)
MEDIUM
CVE-2025-61413
Piranha CMS vulnerable to stored cross-site scripting (XSS)
MEDIUM
CVE-2025-11849
Mammoth is vulnerable to Directory Traversal
MEDIUM
CVE-2025-11842
Smidge is vulnerable to Path Traversal
CRITICAL
CVE-2025-54539
Apache ActiveMQ NMS AMQP Client has a Deserialization of Untrusted Data vulnerability
MEDIUM
CVE-2025-55248
Microsoft Security Advisory CVE-2025-55248: .NET Information Disclosure Vulnerability
HIGH
CVE-2025-55247
Microsoft Security Advisory CVE-2025-55247 | .NET Denial of Service Vulnerability
CRITICAL
CVE-2025-55315
Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability
HIGH
CVE-2025-11573
Amazon.IonDotnet is vulnerable to Denial of Service attacks
CRITICAL
CVE-2025-61778
Akka.Remote TLS did not properly implement certificate-based authentication
MEDIUM
CVE-2025-55797
FormCMS has an improper access control vulnerability in the /api/schemas/history/[schemaId] endpoint
MEDIUM
CVE-2025-57692
PiranhaCMS stored XSS