Browse CVEs by Ecosystem and Severity
798 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2017-7886
Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter
CRITICAL
CVE-2017-9436
TeamPass SQL injection in users.queries.php
CRITICAL
CVE-2016-5734
phpMyAdmin Code Injection vulnerability
CRITICAL
CVE-2016-6629
phpMyAdmin Authentication Bypass
CRITICAL
CVE-2016-9866
phpMyAdmin CSRF Vulnerability
CRITICAL
CVE-2017-2641
Moodle SQL injection via user preferences
HIGH
CVE-2010-4961
Webkit PDFs for TYPO3 has SQL Injection vulnerability
HIGH
CVE-2010-4962
Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands
HIGH
CVE-2013-4748
News system (news) extension for TYPO3 vulnerable to SQL Injection
HIGH
CVE-2013-5322
CoolURI extension for TYPO3 vulnerable to SQL Injection
CRITICAL
CVE-2017-14242
Dolibarr SQL injection vulnerability in don/list.php
CRITICAL
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
CRITICAL
CVE-2014-8684
CodeIgniter and Kohana vulnerable to PHP Object Injection
CRITICAL
CVE-2016-10074
Swift Mailer mail transport Command Injection
CRITICAL
CVE-2015-3933
MetalGenix GeniXCMS vulnerable to SQL Injection
CRITICAL
CVE-2017-17897
Dolibarr SQL injection vulnerability in comm/multiprix.php
CRITICAL
CVE-2017-17900
Dolibarr SQL injection vulnerability in fourn/index.php
CRITICAL
CVE-2017-17899
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
CRITICAL
CVE-2018-8073
yii2-redis Potential Remote code execution
CRITICAL
CVE-2018-10225
thinkphp SQL Injection via the index.php s parameter
CRITICAL
CVE-2017-12868
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
CRITICAL
CVE-2018-11407
Symfony Authentication Bypass
CRITICAL
CVE-2016-2403
Symfony Authentication Bypass
CRITICAL
CVE-2018-12071
CodeIgniter Session Fixation Vulnerability
CRITICAL
CVE-2018-13448
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13447
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-11587
Centreon RCE Vulnerability
CRITICAL
CVE-2018-13450
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13449
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-14065
PHPOffice Common Improper Restriction of XML External Entity Reference
CRITICAL
CVE-2017-6920
Drupal PECL YAML parser unsafe object handling
CRITICAL
CVE-2017-15367
Bacula-web SQL Injection Vulnerabilities
CRITICAL
CVE-2016-3109
Shopware RCE Vulnerability
CRITICAL
CVE-2016-10034
zend-mail remote code execution via Sendmail adapter
CRITICAL
CVE-2016-6233
Zend Framework Allows SQL Injection
CRITICAL
CVE-2018-16974
Elefant CMS Code Execution Vulnerability
CRITICAL
CVE-2018-9209
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
CRITICAL
CVE-2019-6798
phpMyAdmin SQL injection in Designer feature
CRITICAL
CVE-2019-9081
Laravel Framework Deserialization Vulnerability
CRITICAL
CVE-2018-7600KEV
Drupal Core Remote Code Execution Vulnerability
CRITICAL
CVE-2018-16809
Dolibarr SQL injection via the integer parameters qty and value_unit
CRITICAL
CVE-2017-10842
baserCMS SQL Injection vulnerability
HIGH
CVE-2018-11406
Symfony CSRF Token Fixation
CRITICAL
CVE-2019-5715
Silverstripe Framework SQLi Vulnerability
CRITICAL
CVE-2019-10641
Contao Does Not Invalidate Existing Sessions When Password Changes
CRITICAL
CVE-2015-5243
phpWhois arbitrary code execution via a crafted whois record
CRITICAL
CVE-2018-19281
Centreon allows SNMP trap SQL Injection
CRITICAL
CVE-2018-6521
SimpleSAMLphp Use of insecure connection charset (sqlauth module)
CRITICAL
CVE-2017-6925
Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions
CRITICAL
CVE-2017-18264
phpMyAdmin Improper Privilege Management