Browse CVEs by Ecosystem and Severity
18 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2026-34486KEV
Apache Tomcat Missing Encryption of Sensitive Data vulnerability
HIGH
CVE-2026-34197KEV
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
HIGH
CVE-2025-8110KEV
Gogs vulnerable to a bypass of CVE-2024-55947
HIGH
CVE-2025-58360KEV
GeoServer is vulnerable to Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
HIGH
CVE-2023-38180KEV
.NET Denial of Service Vulnerability
HIGH
CVE-2020-1147KEV
.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
HIGH
CVE-2016-7201KEV
ChakraCore RCE Vulnerability
HIGH
CVE-2016-7200KEV
ChakraCore RCE Vulnerability
HIGH
CVE-2018-8298KEV
ChakraCore RCE Vulnerability
HIGH
CVE-2022-0609KEV
Use after free in Animation
HIGH
CVE-2020-13671KEV
Drupal core Unrestricted Upload of File with Dangerous Type
HIGH
CVE-2020-16009KEV
Inappropriate implementation in V8
HIGH
CVE-2018-15811KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2018-18325KEV
Inadequate Encryption Strength in DotNetNuke
HIGH
CVE-2019-5418KEV
Path Traversal in Action View
HIGH
CVE-2017-9822KEV
DNN (aka DotNetNuke) has Remote Code Execution via a cookie
HIGH
CVE-2014-0130KEV
actionpack Path Traversal vulnerability
HIGH
CVE-2016-0752KEV
Directory traversal vulnerability in Action View in Ruby on Rails