Browse CVEs by Ecosystem and Severity
5,778 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2019-0592
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0611
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0769
High severity vulnerability that affects Microsoft.ChakraCore
MEDIUM
CVE-2019-0746
Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
HIGH
CVE-2019-0773
High severity vulnerability that affects Microsoft.ChakraCore
HIGH
CVE-2019-0771
High severity vulnerability that affects Microsoft.ChakraCore
CRITICAL
CVE-2019-10842
Bootstrap-sass contains code execution backdoor
HIGH
CVE-2018-6517
Improper Certificate Validation in chloride
MEDIUM
CVE-2019-9837
Doorkeeper-openid_connect contains Open Redirect
CRITICAL
CVE-2019-5420
Use of Insufficiently Random Values in Railties Allows Remote Code Execution
HIGH
CVE-2019-5418KEV
Path Traversal in Action View
HIGH
CVE-2019-5419
Denial of Service Vulnerability in Action View
MEDIUM
CVE-2019-8331
Bootstrap Vulnerable to Cross-Site Scripting
CRITICAL
CVE-2019-3773
Vulnerability that affects org.springframework.ws:spring-ws and org.springframework.ws:spring-xml
HIGH
CVE-2018-14404
Nokogiri NULL Pointer Dereference
MEDIUM
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
MEDIUM
CVE-2018-20676
XSS vulnerability that affects bootstrap
MEDIUM
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
CRITICAL
CVE-2018-14721
Server-Side Request Forgery (SSRF) in jackson-databind
CRITICAL
CVE-2018-19362
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
CRITICAL
CVE-2018-14718
Arbitrary Code Execution in jackson-databind
MEDIUM
CVE-2018-1000855
Cross Site Scripting (XSS) vulnerability in easymon
MEDIUM
CVE-2018-1000842
Fat Free CRM vulnerable to Cross-site Scripting
HIGH
CVE-2018-20999
Flaw in streaming state reset() functions can create incorrect results.
HIGH
CVE-2018-16476
Improper Access Control in activejob
MEDIUM
CVE-2018-16477
Exposure of Sensitive Information to an Unauthorized Actor in activestorage
HIGH
CVE-2018-16470
Rack vulnerable to Denial of Service
MEDIUM
CVE-2017-1000043
Content Injection via TileJSON Name in mapbox.js
MEDIUM
CVE-2017-1000042
Content Injection via TileJSON attribute in mapbox.js
CRITICAL
CVE-2018-18476
mysql-bunuuid-rails vulnerable to SQL injection
CRITICAL
CVE-2018-1260
Spring Security OAuth vulnerable to remote code execution (RCE)
CRITICAL
CVE-2017-15095
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
CRITICAL
CVE-2018-8014
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
HIGH
CVE-2018-0786
Improper Certificate Validation in Microsoft .NET Framework components
HIGH
CVE-2018-8269
Denial of service in ASP.NET Core
HIGH
CVE-2017-0247
ASP.NET Core fails to properly validate web requests
MEDIUM
CVE-2017-0256
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc
HIGH
CVE-2017-0249
High severity vulnerability that affects Microsoft.AspNetCore.Mvc
HIGH
CVE-2018-0787
ASP.NET Core allow an elevation of privilege
HIGH
CVE-2018-8171
Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated
HIGH
CVE-2018-8409
Denial of service vulnerability exists when System.IO.Pipelines improperly handles requests
HIGH
CVE-2018-0765
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
HIGH
CVE-2018-12086
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
HIGH
CVE-2017-9822KEV
DNN (aka DotNetNuke) has Remote Code Execution via a cookie
CRITICAL
CVE-2015-2794
The installation wizard in DotNetNuke (DNN) allows privilege escalation
CRITICAL
CVE-2018-7489
FasterXML jackson-databind allows unauthenticated remote code execution
HIGH
CVE-2018-0764
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
HIGH
CVE-2017-0929
High severity vulnerability that affects DotNetNuke.Core
HIGH
CVE-2018-1000210
High severity vulnerability that affects YamlDotNet and YamlDotNet.Signed
CRITICAL
CVE-2018-14643
smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature