Browse CVEs by Ecosystem and Severity
798 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2020-9582
Magento command injection vulnerability
CRITICAL
CVE-2020-9583
Magento command injection vulnerability
CRITICAL
CVE-2020-9576
Magento command injection vulnerability
CRITICAL
CVE-2020-9578
Magento command injection vulnerability
CRITICAL
CVE-2020-9580
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2020-9579
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2020-13693
bbPress unauthenticated privilege-escalation
CRITICAL
CVE-2020-10806
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
CRITICAL
CVE-2019-19212
Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
CRITICAL
CVE-2020-5203
Fat-Free Framework arbitrary code execution
CRITICAL
CVE-2020-9757
SEOmatic for CraftCMS allows Server-Side Template Injection
CRITICAL
CVE-2020-3716
Magento deserialization vulnerability
CRITICAL
CVE-2020-3718
Magento security bypass vulnerability
CRITICAL
CVE-2020-7995
Dolibarr Improper Restriction of Excessive Authentication Attempts
CRITICAL
CVE-2019-10774
php-shellcommand command injection vulnerability
HIGH
CVE-2019-19849
TYPO3 Insecure Deserialization in Query Generator & Query View
CRITICAL
CVE-2019-8158
Magento 2 Community Edition XML Injection
CRITICAL
CVE-2019-8144
Magento 2 Community Edition RCE Vulnerability
CRITICAL
CVE-2019-8136
Magento 2 Community Edition Insecure Component
CRITICAL
CVE-2015-0270
Zend Framework Allows SQL Injection
CRITICAL
CVE-2019-15929
Craft CMS possibility of brute force attempts
CRITICAL
CVE-2018-7269
Yii SQL injection vulnerability
CRITICAL
CVE-2019-16699
sr_freecap for Typo3 RCE Vulnerability
CRITICAL
CVE-2019-16700
slub_events for Typo3 Arbitrary File Upload
CRITICAL
CVE-2019-15521
Spoon Library as used in Fork CMS allows PHP object injection
HIGH
CVE-2019-7876
Magento 2 Community Edition RCE Vulnerability
HIGH
CVE-2019-7865
Magento 2 Community Edition CSRF Vulnerability
CRITICAL
CVE-2019-12468
Wikimedia MediaWiki Incorrect Access Control vulnerability
CRITICAL
CVE-2019-11512
Contao SQL injection in the file manager
CRITICAL
CVE-2015-3907
CodeIgniter Rest Server XXE Vulnerability
CRITICAL
CVE-2019-12149
silverstripe restfulserver and registry modules SQL injection vulnerability
CRITICAL
CVE-2019-11768
phpMyAdmin SQL injection in Designer feature
CRITICAL
CVE-2017-11365
Symfony Incorrect Access Control
CRITICAL
CVE-2019-11830
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
CRITICAL
CVE-2017-16558
Contao SQL injection in the backend and listing module
CRITICAL
CVE-2018-20434
LibreNMS arbitrary OS commands execution
CRITICAL
CVE-2022-30600
Incorrect Calculation in moodle
CRITICAL
CVE-2022-30599
SQL injection in moodle
CRITICAL
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
HIGH
CVE-2010-1630
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
HIGH
CVE-2010-3604
powermail extension for TYPO3 vulnerable to SQL Injection
HIGH
CVE-2011-4932
ImpressPages CMS eval injection vulnerability
HIGH
CVE-2010-3313
EGroupware Code Injection vulnerability
CRITICAL
CVE-2013-6288
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize
HIGH
CVE-2014-2921
Pimcore Vulnerable to PHP Object Injection Attacks
HIGH
CVE-2014-6289
yag and pt_extbase extensions for TYPO3 allow remote attackers to bypass access restrictions
HIGH
CVE-2014-6295
WEC Map (wec_map) extension for TYPO3 allows SQL Injection
HIGH
CVE-2014-3947
TYPO3 powermail extension has unrestricted file upload vulnerability
CRITICAL
CVE-2015-7695
Zend Framework SQL injection vector using null byte for PDO
CRITICAL
CVE-2017-7888
Dolibarr ERP and CRM Insecure Encryption