Browse CVEs by Ecosystem and Severity
798 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2015-10018
DBRisinajumi d2files SQL Injection vulnerability
CRITICAL
CVE-2015-10009
nterchange Code Injection vulnerability
CRITICAL
CVE-2017-20157
Ariadne Component Library vulnerable to Server-Side Request Forgery
CRITICAL
CVE-2022-47945
ThinkPHP Framework vulnerable to remote code execution
CRITICAL
CVE-2021-4262
laravel-jqgrid vulnerable to SQL Injection
CRITICAL
CVE-2022-47406
TYPO3 vulnerable to Insufficient Session Expiration
MEDIUM
CVE-2022-23494
Cross-site scripting vulnerability in TinyMCE alerts
CRITICAL
CVE-2022-44136
Zenario CMS is vulnerable to Remote Code Execution (RCE).
CRITICAL
CVE-2022-41705
Badaso vulnerable to Remote Code Execution (RCE)
CRITICAL
CVE-2022-4093
SQL injection in Dolibarr
CRITICAL
CVE-2022-4070
Insufficient Session Expiration in librenms/librenms
CRITICAL
CVE-2022-43138
Dolibarr vulnerable to privilege escalation
CRITICAL
CVE-2022-3827
Centreon vulnerable to SQL Injection
CRITICAL
CVE-2022-3771
easyii CMS's File Upload Management vulnerable to unrestricted upload
CRITICAL
CVE-2022-3754
phpMyFAQ contains Weak Password Requirements
CRITICAL
CVE-2022-39365
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
CRITICAL
CVE-2022-41711
Badaso vulnerable to Remote Code Execution via malicious file upload
HIGH
CVE-2022-35698
Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)
CRITICAL
CVE-2022-40871
Dolibarr vulnerable to Eval Injection
CRITICAL
CVE-2018-17057
TCPDF vulnerable to attackers triggering deserialization of arbitrary data
CRITICAL
CVE-2022-40314
Moodle remote code execution
CRITICAL
CVE-2022-40315
Moodle Minor SQL injection risk in admin user browsing
CRITICAL
CVE-2022-38916
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
CRITICAL
CVE-2022-36376
Rank Math SEO plugin vulnerable to Server-Side Request Forgery
CRITICAL
CVE-2020-21516
FeehiCMS has an arbitrary file upload vulnerability
CRITICAL
CVE-2022-2713
Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration
CRITICAL
CVE-2022-31181
PrestaShop eval injection possible if shop vulnerable to SQL injection
CRITICAL
CVE-2022-35649
Moodle PostScript Code Injection
CRITICAL
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
CRITICAL
CVE-2022-33107
Deserialization of Untrusted Data in topthink/framework
CRITICAL
CVE-2019-8149
Magento Broken authentication and session managememt
CRITICAL
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
CRITICAL
CVE-2021-36028
Magento has an XML Injection vulnerability
CRITICAL
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
CRITICAL
CVE-2021-36040
Magento has a file extension restrictions bypass
CRITICAL
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
CRITICAL
CVE-2020-21808
NukeViet SQL Injection vulnerability via topicsid parameter
CRITICAL
CVE-2020-21809
NukeViet SQL Injection vulnerability
HIGH
CVE-2020-13663
Drupal Core Cross-Site Request Forgery (CSRF) vulnerability
CRITICAL
CVE-2020-13665
Drupal Core Access bypass vulnerability
HIGH
CVE-2020-13664
Drupal Core Arbitrary PHP code execution vulnerability
CRITICAL
CVE-2020-24913
qcubed SQL injection vulnerability in profile.php via the strQuery parameter
CRITICAL
CVE-2020-23653
ThinkAdmin insecure unserialize vulnerability
CRITICAL
CVE-2020-26935
phpMyAdmin SQL injection vulnerability
CRITICAL
CVE-2020-9691
Magento DOM-based Cross-site scripting vulnerability
CRITICAL
CVE-2020-9664
Magento php object injection vulnerability
CRITICAL
CVE-2020-9630
Magento business logic error vulnerability
CRITICAL
CVE-2020-9632
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9631
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9585
Magento Defense-in-depth security mitigation vulnerability