Browse CVEs by Ecosystem and Severity
596 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2023-36053EPSS 8.9%
Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
CRITICAL
CVE-2023-31047EPSS 0.1%
Django bypasses validation when using one form field to upload multiple files
CRITICAL
CVE-2022-37454
Buffer overflow in sponge queue functions
CRITICAL
CVE-2023-24831
Apache IoTDB Grafana Connector vulnerable to Improper Authentication
CRITICAL
CVE-2023-22946
Apache Spark vulnerable to Improper Privilege Management
HIGH
CVE-2023-24580EPSS 22.1%
Resource exhaustion in Django
HIGH
CVE-2023-0286
Vulnerable OpenSSL included in cryptography wheels
HIGH
CVE-2023-23969EPSS 6.1%
Django contains Uncontrolled Resource Consumption via cached header
HIGH
CVE-2022-41323EPSS 8.1%
Django denial-of-service vulnerability in internationalized URLs
HIGH
CVE-2022-39974
WASM3 Improper Input Validation vulnerability
HIGH
CVE-2022-36359EPSS 0.8%
Django vulnerable to Reflected File Download attack
CRITICAL
CVE-2022-34265EPSS 92.8%
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
CRITICAL
CVE-2021-3197
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
CRITICAL
CVE-2021-3148
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
CRITICAL
CVE-2021-3144
SaltStack Salt eauth tokens can be used once after expiration
HIGH
CVE-2021-25282
SaltStack Salt Directory Traversal vulnerability
CRITICAL
CVE-2021-25283
SaltStack Salt Server Side Template Injection
CRITICAL
CVE-2021-25281
SaltStack Salt Improper Authentication vulnerability
CRITICAL
CVE-2020-25592
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
CRITICAL
CVE-2020-16846KEV
SaltStack Salt Command Injection in netapi ssh client
MEDIUM
CVE-2020-8927
Integer overflow in the bundled Brotli C library
HIGH
CVE-2019-12408
Missing Initialization of Resource in Apache Arrow
HIGH
CVE-2019-12410
Missing Initialization of Resource in Apache Arrow
HIGH
CVE-2015-5237
protobuf susceptible to buffer overflow
CRITICAL
CVE-2022-28346EPSS 2.0%
SQL Injection in Django
CRITICAL
CVE-2022-28347EPSS 1.0%
SQL Injection in Django
MEDIUM
CVE-2022-22818EPSS 0.6%
Cross-site Scripting in Django
HIGH
CVE-2022-23833EPSS 3.6%
Infinite Loop in Django
HIGH
CVE-2021-45116EPSS 0.3%
Information disclosure in Django
MEDIUM
CVE-2021-45452EPSS 0.3%
Directory-traversal in Django
HIGH
CVE-2021-45115EPSS 0.4%
Denial-of-service in Django
MEDIUM
CVE-2021-44420EPSS 0.1%
Potential bypass of an upstream access control based on URL paths in Django
CRITICAL
CVE-2021-41208
Incomplete validation in boosted trees code
MEDIUM
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
CRITICAL
CVE-2021-35042EPSS 89.9%
SQL Injection in Django
CRITICAL
CVE-2018-20998
Potential memory corruption in arrayfire
HIGH
CVE-2021-33571EPSS 0.0%
Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks
MEDIUM
CVE-2021-33203EPSS 0.3%
Path Traversal in Django
MEDIUM
CVE-2021-32052EPSS 2.6%
Header injection possible in Django
HIGH
CVE-2021-31542EPSS 6.4%
Path Traversal in Django
MEDIUM
CVE-2021-28658EPSS 1.5%
Directory Traversal in Django
HIGH
CVE-2020-24583EPSS 3.4%
Django Incorrect Default Permissions
MEDIUM
CVE-2020-24584EPSS 3.3%
Django Incorrect Default Permissions
MEDIUM
CVE-2021-3281EPSS 36.2%
Django Directory Traversal via archive.extract
MEDIUM
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CRITICAL
CVE-2018-7750
Paramiko not properly checking authentication before processing other requests