Browse CVEs by Ecosystem and Severity
842 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2025-59821
DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile
CRITICAL
CVE-2025-59545
DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module
MEDIUM
CVE-2025-59539
DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field
MEDIUM
CVE-2025-59535
DNN allows loading unused themes on anonymous clients through query parameters
MEDIUM
CVE-2025-9708
Kubernetes C# client accepts certificates from any CA without properly verifying the trust chain
LOW
CVE-2025-57807
ImageMagick BlobStream Forward-Seek Under-Allocation
MEDIUM
CVE-2025-56236
FormCms avatar upload feature has a stored cross-site scripting (XSS) vulnerability
HIGH
CVE-2025-57803
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
HIGH
CVE-2025-55298
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
LOW
CVE-2025-55212
ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
MEDIUM
CVE-2025-55160
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
HIGH
CVE-2025-55154
imagemagick: integer overflows in MNG magnification
HIGH
CVE-2025-55004
imagemagick: heap-buffer overflow read in MNG magnification with alpha
LOW
CVE-2025-53019
ImageMagick has a Memory Leak in magick stream
LOW
CVE-2025-53014
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
HIGH
CVE-2025-53101
ImageMagick has a Stack Buffer Overflow in image.c
MEDIUM
CVE-2025-54575
SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks
MEDIUM
CVE-2025-54425
Umbraco Delivery API allows for cached requests to be returned with an invalid API key
HIGH
CVE-2025-53015
ImageMagick has XMP profile write that triggers hang due to unbounded loop
HIGH
CVE-2025-6965
SQLitePCLRaw.lib.e_sqlite3 has a vulnerable dependency on SQLite
MEDIUM
CVE-2025-49147
Umbraco CMS disclosure of configured password requirements
HIGH
CVE-2025-52488
DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input
HIGH
CVE-2025-52487
DNN.PLATFORM possibly allows bypass of IP Filters
MEDIUM
CVE-2025-52485
DNN.PLATFORM Allows Stored Cross-Site Scripting (XSS) in Activity Feed
MEDIUM
CVE-2025-52486
DNN.PLATFORM Allows Reflected Cross-Site Scripting (XSS) in some TokenReplace situations with SkinObjects
HIGH
GHSA-6q65-j4jw-9cg8
DotVVM allows path traversal when deployed in Debug mode
MEDIUM
CVE-2025-49015
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
HIGH
CVE-2025-30399
Microsoft Security Advisory CVE-2025-30399 | .NET Remote Code Vulnerability
MEDIUM
CVE-2025-48953
Umbraco Vulnerable to By-Pass of Configured Allowed Extensions for File Uploads
MEDIUM
CVE-2025-48378
DNN allows Stored Cross-Site Scripting (XSS) with svg files rendered inline
MEDIUM
CVE-2025-48377
Reflected Cross-Site Scripting (XSS) in module actions in edit mode
HIGH
CVE-2025-26646
Microsoft.Build.Tasks.Core .NET Spoofing Vulnerability
MEDIUM
CVE-2025-46736
Umbraco Makes User Enumeration Feasible Based on Timing of Login Response
CRITICAL
CVE-2025-43858
YoutubeDLSharp allows command injection on windows system due to non sanitized arguments
HIGH
CVE-2025-3857
Infinite loop condition in Amazon.IonDotnet
CRITICAL
CVE-2025-29953
Apache ActiveMQ NMS OpenWire Client Deserialization of Untrusted Data vulnerability
HIGH
GHSA-f87w-3j5w-v58p
CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows
MEDIUM
CVE-2025-32016
Microsoft Identity Web Exposes Client Secrets and Certificate Information in Service Logs
MEDIUM
CVE-2025-32372
DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)
HIGH
CVE-2025-32017
Umbraco has a Management API Vulnerability to Path Traversal With Authenticated Users
HIGH
CVE-2025-24070
Microsoft Security Advisory CVE-2025-24070: .NET Elevation of Privilege Vulnerability
MEDIUM
CVE-2025-27602
Umbraco Allows a Restricted Editor User to Delete Media Item or Access Unauthorized Content
HIGH
CVE-2025-24043
Microsoft Security Advisory CVE-2025-24043 | WinDbg Remote Code Execution Vulnerability
HIGH
GHSA-vc29-vg52-6643
DoS Vulnerability in TraceContextPropagator.Extract - OpenTelemetry.Api
HIGH
CVE-2025-27598
Out-of-bounds Write in SixLabors ImageSharp
MEDIUM
CVE-2025-27513
OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package
MEDIUM
CVE-2024-42512
Security Update for the OPC UA .NET Standard Stack
MEDIUM
CVE-2024-42513
Security Update for the OPC UA .NET Standard Stack
MEDIUM
CVE-2024-57716
AutoQueryable leaks sensitive information
MEDIUM
CVE-2025-26620
Duende.AccessTokenManagement race condition when concurrently retrieving customized Client Credentials Access Tokens