Browse CVEs by Ecosystem and Severity
393 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2018-7269
Yii SQL injection vulnerability
CRITICAL
CVE-2019-16699
sr_freecap for Typo3 RCE Vulnerability
CRITICAL
CVE-2019-16700
slub_events for Typo3 Arbitrary File Upload
CRITICAL
CVE-2019-15521
Spoon Library as used in Fork CMS allows PHP object injection
CRITICAL
CVE-2019-12468
Wikimedia MediaWiki Incorrect Access Control vulnerability
CRITICAL
CVE-2019-11512
Contao SQL injection in the file manager
CRITICAL
CVE-2015-3907
CodeIgniter Rest Server XXE Vulnerability
CRITICAL
CVE-2019-12149
silverstripe restfulserver and registry modules SQL injection vulnerability
CRITICAL
CVE-2019-11768
phpMyAdmin SQL injection in Designer feature
CRITICAL
CVE-2017-11365
Symfony Incorrect Access Control
CRITICAL
CVE-2019-11830
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
CRITICAL
CVE-2017-16558
Contao SQL injection in the backend and listing module
CRITICAL
CVE-2018-20434
LibreNMS arbitrary OS commands execution
CRITICAL
CVE-2022-30600
Incorrect Calculation in moodle
CRITICAL
CVE-2022-30599
SQL injection in moodle
CRITICAL
CVE-2014-4172
Jasig Java CAS Client, .NET CAS Client, and phpCAS contain URL parameter injection vulnerability
CRITICAL
CVE-2013-6288
Apache Solr for TYPO3 (solr) extension is vulnerable to Insecure Unserialize
CRITICAL
CVE-2015-7695
Zend Framework SQL injection vector using null byte for PDO
CRITICAL
CVE-2017-7888
Dolibarr ERP and CRM Insecure Encryption
CRITICAL
CVE-2017-7886
Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter
CRITICAL
CVE-2017-9436
TeamPass SQL injection in users.queries.php
CRITICAL
CVE-2016-5734
phpMyAdmin Code Injection vulnerability
CRITICAL
CVE-2016-6629
phpMyAdmin Authentication Bypass
CRITICAL
CVE-2016-9866
phpMyAdmin CSRF Vulnerability
CRITICAL
CVE-2017-2641
Moodle SQL injection via user preferences
CRITICAL
CVE-2017-14242
Dolibarr SQL injection vulnerability in don/list.php
CRITICAL
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
CRITICAL
CVE-2014-8684
CodeIgniter and Kohana vulnerable to PHP Object Injection
CRITICAL
CVE-2016-10074
Swift Mailer mail transport Command Injection
CRITICAL
CVE-2015-3933
MetalGenix GeniXCMS vulnerable to SQL Injection
CRITICAL
CVE-2017-17897
Dolibarr SQL injection vulnerability in comm/multiprix.php
CRITICAL
CVE-2017-17900
Dolibarr SQL injection vulnerability in fourn/index.php
CRITICAL
CVE-2017-17899
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
CRITICAL
CVE-2018-8073
yii2-redis Potential Remote code execution
CRITICAL
CVE-2018-10225
thinkphp SQL Injection via the index.php s parameter
CRITICAL
CVE-2017-12868
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
CRITICAL
CVE-2018-11407
Symfony Authentication Bypass
CRITICAL
CVE-2016-2403
Symfony Authentication Bypass
CRITICAL
CVE-2018-12071
CodeIgniter Session Fixation Vulnerability
CRITICAL
CVE-2018-13448
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13447
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-11587
Centreon RCE Vulnerability
CRITICAL
CVE-2018-13450
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13449
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-14065
PHPOffice Common Improper Restriction of XML External Entity Reference
CRITICAL
CVE-2017-6920
Drupal PECL YAML parser unsafe object handling
CRITICAL
CVE-2017-15367
Bacula-web SQL Injection Vulnerabilities
CRITICAL
CVE-2016-3109
Shopware RCE Vulnerability
CRITICAL
CVE-2016-10034
zend-mail remote code execution via Sendmail adapter
CRITICAL
CVE-2016-6233
Zend Framework Allows SQL Injection