Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2017-4992
Cloud Foundry UAA privilege escalation with user invitations
HIGH
CVE-2018-0875
.NET Core Denial of Service Vulnerability
HIGH
CVE-2015-5237
protobuf susceptible to buffer overflow
CRITICAL
CVE-2016-2785
Puppet Improper Access Control
MEDIUM
CVE-2018-18260
Camaleon CMS vulnerable to Stored Cross-site Scripting
CRITICAL
CVE-2017-8046
Remote code execution in PATCH requests in Spring Data REST
HIGH
CVE-2017-16932
Nokogiri gem, via libxml, is affected by DoS vulnerabilities
CRITICAL
CVE-2016-5018
Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat
CRITICAL
CVE-2017-5641
Apache Flex BlazeDS unsafe deserialization
CRITICAL
CVE-2017-1000353KEV
Deserialization of Untrusted Data in Jenkins
CRITICAL
CVE-2018-1000861KEV
Deserialization of Untrusted Data in Jenkins
CRITICAL
CVE-2022-23066
Incorrect Calculation in solana_rbpf
CRITICAL
CVE-2021-23592
Deserialization of Untrusted Data in topthink/framework
CRITICAL
CVE-2013-1607
PDFKit Improper Input Validation vulnerability
HIGH
CVE-2013-4593
omniauth-facebook Improper Authentication vulnerability
CRITICAL
CVE-2013-2095
RubyGem openshift-origin-controller is vulnerable to command injection
MEDIUM
CVE-2013-6460
Nokogiri vulnerable to DoS while parsing XML documents
MEDIUM
CVE-2013-6461
Nokogiri vulnerable to DoS while parsing XML entities
CRITICAL
CVE-2022-24877
Improper path handling in kustomization files allows path traversal
CRITICAL
CVE-2012-0391KEV
Apache Struts Remote Java Code Execution
HIGH
CVE-2022-1473
Resource leakage when decoding certificates and keys
CRITICAL
CVE-2022-28481
CSV-Safe improperly filters special characters potentially leading to CSV injection
HIGH
CVE-2022-29970
sinatra does not validate expanded path matches
CRITICAL
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
HIGH
CVE-2010-1153
TYPO3 PHP remote file inclusion vulnerability
HIGH
CVE-2010-0329
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
HIGH
CVE-2009-4803
Accessibility Glossary (a21glossary) SQL injection vulnerability
CRITICAL
CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
MEDIUM
CVE-2022-27777
XSS Vulnerability in Action View tag helpers
MEDIUM
CVE-2022-22577
Cross-site Scripting Vulnerability in Action Pack
CRITICAL
CVE-2022-27311
Server side request forgery in gibbon
HIGH
CVE-2012-6685
Nokogiri is vulnerable to XML External Entity (XXE) attack
HIGH
CVE-2012-6135
RubyGems passenger gem allows remote attackers to delete files
MEDIUM
CVE-2022-24849
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
HIGH
CVE-2022-26924
YARP Denial of Service Vulnerability
CRITICAL
CVE-2022-24826
Git LFS can execute a binary from the current directory on Windows
MEDIUM
CVE-2011-1497
Cross site scripting in actionpack Rubygem
CRITICAL
CVE-2011-3583
Typo3 SQL injection due to faulty prepared statements
CRITICAL
CVE-2011-4628
Typo3 Authentication Bypass
HIGH
CVE-2022-29498
SQL injection in blazer
CRITICAL
CVE-2022-25648
Command injection in ruby-git
HIGH
CVE-2022-26788
PowerShell Elevation of Privilege Vulnerability
CRITICAL
CVE-2022-28346EPSS 2.0%
SQL Injection in Django
CRITICAL
CVE-2022-28347EPSS 1.0%
SQL Injection in Django
HIGH
CVE-2017-11770
Improper Certificate Validation
HIGH
CVE-2022-24836
Nokogiri Inefficient Regular Expression Complexity
CRITICAL
CVE-2022-27818
Insecure temporary file usage in SWHKD
CRITICAL
CVE-2022-26612
Path traversal in Hadoop
HIGH
CVE-2022-24785
Path Traversal: 'dir/../../filename' in moment.locale
HIGH
CVE-2022-24440
Command injection in cocoapods-downloader