Browse CVEs by Ecosystem and Severity
85 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
LOW
CVE-2026-56373
mageMagick has a possible use-after-free write in its PDB decoder
LOW
CVE-2026-56376
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
LOW
CVE-2026-25984
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
LOW
CVE-2025-61594
URI Credential Leakage Bypass over CVE-2025-27221
LOW
CVE-2025-67291
Piranha has stored cross-site scripting (XSS) vulnerability
LOW
CVE-2025-67290
Piranha has stored cross-site scripting (XSS) vulnerability
LOW
CVE-2025-55754
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
LOW
CVE-2025-61921
Sinatra is vulnerable to ReDoS through ETag header value generation
LOW
CVE-2025-57807
ImageMagick BlobStream Forward-Seek Under-Allocation
LOW
CVE-2025-55212
ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
LOW
CVE-2025-53019
ImageMagick has a Memory Leak in magick stream
LOW
CVE-2025-53014
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
LOW
CVE-2025-55745
UnoPim has CSV Injection on Quick Export feature
LOW
CVE-2025-54873
RISC Zero Underconstrained Vulnerability: Division
LOW
CVE-2025-45769EPSS 0.0%
php-jwt contains weak encryption
LOW
CVE-2025-50460
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
LOW
CVE-2024-39311
Publify Vulnerable To Cross-Site Scripting (XSS) Via Redirects Requiring User Interaction
LOW
CVE-2024-55186
Oqtane Framework Insecure Direct Object Reference vulnerability
LOW
CVE-2024-54133
Possible Content Security Policy bypass in Action Dispatch
LOW
CVE-2024-55636
Drupal core contains a potential PHP Object Injection vulnerability
LOW
CVE-2024-53947
Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions
LOW
CVE-2024-53989
rails-html-sanitizer has XSS vulnerability with certain configurations
LOW
CVE-2024-53987
rails-html-sanitizer has XSS vulnerability with certain configurations
LOW
CVE-2024-53988
rails-html-sanitizer has XSS vulnerability with certain configurations
LOW
CVE-2024-53986
rails-html-sanitizer has XSS vulnerability with certain configurations
LOW
CVE-2024-53985
rails-html-sanitize has XSS vulnerability with certain configurations
LOW
CVE-2024-52796
Password Pusher rate limiter can be bypassed by forging proxy headers
LOW
CVE-2024-50345EPSS 0.3%
Symfony vulnerable to open redirect via browser-sanitized URLs
LOW
CVE-2024-51756
cap-std doesn't fully sandbox all the Windows device filenames
LOW
CVE-2024-51745
Wasmtime doesn't fully sandbox all the Windows device filenames
LOW
CVE-2024-43796EPSS 0.1%
express vulnerable to XSS via response.redirect()
LOW
CVE-2024-39689EPSS 21.2%
Certifi removes GLOBALTRUST root certificate
LOW
CVE-2024-27281
RDoc RCE vulnerability with .rdoc_options
LOW
CVE-2023-38219
Magento Open Source allows Cross-Site Scripting (XSS)
LOW
CVE-2020-15168EPSS 0.1%
The `size` option isn't honored after following a redirect in node-fetch