Browse CVEs by Ecosystem and Severity
393 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2022-40871
Dolibarr vulnerable to Eval Injection
CRITICAL
CVE-2018-17057
TCPDF vulnerable to attackers triggering deserialization of arbitrary data
CRITICAL
CVE-2022-40314
Moodle remote code execution
CRITICAL
CVE-2022-40315
Moodle Minor SQL injection risk in admin user browsing
CRITICAL
CVE-2022-38916
Pagekit vulnerable to Unrestricted Upload of File with Dangerous Type
CRITICAL
CVE-2022-36376
Rank Math SEO plugin vulnerable to Server-Side Request Forgery
CRITICAL
CVE-2020-21516
FeehiCMS has an arbitrary file upload vulnerability
CRITICAL
CVE-2022-2713
Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration
CRITICAL
CVE-2022-31181
PrestaShop eval injection possible if shop vulnerable to SQL injection
CRITICAL
CVE-2022-35649
Moodle PostScript Code Injection
CRITICAL
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
CRITICAL
CVE-2022-33107
Deserialization of Untrusted Data in topthink/framework
CRITICAL
CVE-2019-8149
Magento Broken authentication and session managememt
CRITICAL
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
CRITICAL
CVE-2021-36028
Magento has an XML Injection vulnerability
CRITICAL
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
CRITICAL
CVE-2021-36040
Magento has a file extension restrictions bypass
CRITICAL
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
CRITICAL
CVE-2020-21808
NukeViet SQL Injection vulnerability via topicsid parameter
CRITICAL
CVE-2020-21809
NukeViet SQL Injection vulnerability
CRITICAL
CVE-2020-13665
Drupal Core Access bypass vulnerability
CRITICAL
CVE-2020-24913
qcubed SQL injection vulnerability in profile.php via the strQuery parameter
CRITICAL
CVE-2020-23653
ThinkAdmin insecure unserialize vulnerability
CRITICAL
CVE-2020-26935
phpMyAdmin SQL injection vulnerability
CRITICAL
CVE-2020-9691
Magento DOM-based Cross-site scripting vulnerability
CRITICAL
CVE-2020-9664
Magento php object injection vulnerability
CRITICAL
CVE-2020-9630
Magento business logic error vulnerability
CRITICAL
CVE-2020-9632
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9631
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9585
Magento Defense-in-depth security mitigation vulnerability
CRITICAL
CVE-2020-9582
Magento command injection vulnerability
CRITICAL
CVE-2020-9583
Magento command injection vulnerability
CRITICAL
CVE-2020-9576
Magento command injection vulnerability
CRITICAL
CVE-2020-9578
Magento command injection vulnerability
CRITICAL
CVE-2020-9580
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2020-9579
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2020-13693
bbPress unauthenticated privilege-escalation
CRITICAL
CVE-2020-10806
eZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type
CRITICAL
CVE-2019-19212
Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php
CRITICAL
CVE-2020-5203
Fat-Free Framework arbitrary code execution
CRITICAL
CVE-2020-9757
SEOmatic for CraftCMS allows Server-Side Template Injection
CRITICAL
CVE-2020-3716
Magento deserialization vulnerability
CRITICAL
CVE-2020-3718
Magento security bypass vulnerability
CRITICAL
CVE-2020-7995
Dolibarr Improper Restriction of Excessive Authentication Attempts
CRITICAL
CVE-2019-10774
php-shellcommand command injection vulnerability
CRITICAL
CVE-2019-8158
Magento 2 Community Edition XML Injection
CRITICAL
CVE-2019-8144
Magento 2 Community Edition RCE Vulnerability
CRITICAL
CVE-2019-8136
Magento 2 Community Edition Insecure Component
CRITICAL
CVE-2015-0270
Zend Framework Allows SQL Injection
CRITICAL
CVE-2019-15929
Craft CMS possibility of brute force attempts