Browse CVEs by Ecosystem and Severity
340 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2025-48205
The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference
HIGH
CVE-2025-46347
YesWiki Remote Code Execution via Arbitrary PHP File Write and Execution
HIGH
CVE-2025-3641
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
HIGH
CVE-2025-3642
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
HIGH
CVE-2025-31691
Drupal OAuth2 Server Missing Authorization vulnerability
HIGH
CVE-2025-31681
Drupal Authenticator Login Missing Authorization vulnerability
HIGH
CVE-2025-27773
The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding
HIGH
CVE-2025-26525
Moodle has an arbitrary file read risk through pdfTeX
HIGH
CVE-2025-26530
Moodle allows reflected XSS via question bank filter
HIGH
CVE-2025-26533
Moodle has a SQL injection risk in course search module list filter
HIGH
CVE-2025-26529
Moodle has a stored XSS risk in admin live log
HIGH
CVE-2025-24438
Magento stored Cross-Site Scripting (XSS) vulnerability
HIGH
CVE-2025-24411
Magento Improper Access Control vulnerability
HIGH
CVE-2025-24406
Adobe Commerce Path Traversal
HIGH
CVE-2025-24414
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24417
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24415
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24410
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24412
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24416
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24409
Adobe Commerce Improper Authorization vulnerability
HIGH
CVE-2025-24413
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2024-56329
Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
HIGH
CVE-2024-21546
UniSharp Laravel Filemanager Code Injection vulnerability
HIGH
CVE-2024-55661
Laravel Pulse Allows Remote Code Execution via Unprotected Query Method
HIGH
CVE-2024-55638
Drupal core contains a potential PHP Object Injection vulnerability
HIGH
CVE-2024-55637
Drupal core contains a potential PHP Object Injection vulnerability
HIGH
CVE-2024-54149
Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion
HIGH
CVE-2024-52596
SimpleSAMLphp xml-common XXE vulnerability
HIGH
CVE-2024-51736
Symfony vulnerable to command execution hijack on Windows with Process class
HIGH
CVE-2024-51478
YesWiki Uses a Broken or Risky Cryptographic Algorithm
HIGH
CVE-2024-48112
ThinkPHP deserialization vulnerability
HIGH
CVE-2024-48230
SQL injection in funadmin
HIGH
CVE-2024-48229
SQL injection in funadmin
HIGH
CVE-2024-48222
SQL injection in funadmin
HIGH
CVE-2024-48226
SQL injection in funadmin
HIGH
CVE-2024-48218
SQL injection in funadmin
HIGH
CVE-2024-48225
SQL injection in funadmin
HIGH
CVE-2024-48223
SQL injection in funadmin
HIGH
CVE-2024-48514
Remote code execution in php-heic-to-jpg
HIGH
CVE-2024-45048
XXE in PHPSpreadsheet encoding is returned
HIGH
CVE-2024-41964
Kirby has insufficient permission checks in the language settings
HIGH
CVE-2024-39402
Magento OS Command ('OS Command Injection') vulnerability
HIGH
CVE-2024-39400
Magento DOM-based Cross-Site Scripting (XSS) vulnerability
HIGH
CVE-2024-39399
Magento Path Traversal vulnerability
HIGH
CVE-2024-39401
Magento OS Command ('OS Command Injection') vulnerability
HIGH
CVE-2024-39403
Magento Stored Cross-Site Scripting (XSS) vulnerability
HIGH
CVE-2024-39398
Magento does not properly restrict excessive authentication attempts
HIGH
CVE-2024-42356
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
HIGH
CVE-2024-42355
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag