Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2025-25362
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
HIGH
CVE-2025-26319
FlowiseAI Flowise arbitrary file upload vulnerability
HIGH
CVE-2025-23389
Rancher does not Properly Validate Account Bindings in SAML Authentication Enables User Impersonation on First Login
HIGH
CVE-2025-26525
Moodle has an arbitrary file read risk through pdfTeX
HIGH
CVE-2025-26530
Moodle allows reflected XSS via question bank filter
HIGH
CVE-2025-26533
Moodle has a SQL injection risk in course search module list filter
HIGH
CVE-2025-26529
Moodle has a stored XSS risk in admin live log
HIGH
CVE-2025-27088
S3-Proxy allows Reflected Cross-site Scripting (XSS) in template implementation
HIGH
CVE-2025-1302
JSONPath Plus allows Remote Code Execution
HIGH
CVE-2025-26511
Instaclustr Cassandra-Lucene-Index allows bypass of Cassandra RBAC
HIGH
CVE-2025-1247
Quarkus REST Endpoint Request Parameter Leakage Due to Shared Instance
HIGH
CVE-2025-24438
Magento stored Cross-Site Scripting (XSS) vulnerability
HIGH
CVE-2025-24411
Magento Improper Access Control vulnerability
HIGH
CVE-2025-24406
Adobe Commerce Path Traversal
HIGH
CVE-2025-24414
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24417
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24415
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24410
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24412
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24416
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-24409
Adobe Commerce Improper Authorization vulnerability
HIGH
CVE-2025-24413
Magento Stored Cross-Site Scripting (XSS) Vulnerability
HIGH
CVE-2025-23015
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
HIGH
CVE-2025-24802
Soundness issue with Plonky2 look up tables
HIGH
CVE-2025-24814
Apache Solr vulnerable to Execution with Unnecessary Privileges
HIGH
CVE-2024-11218
Buildah allows build breakout using malicious Containerfiles and concurrent builds
HIGH
CVE-2024-52281
Rancher UI has Stored Cross-site Scripting vulnerability
HIGH
CVE-2025-21176
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
HIGH
CVE-2025-21172
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
HIGH
CVE-2025-21171
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
HIGH
CVE-2024-50338
Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials
HIGH
CVE-2024-55225
Vaultwarden vulnerable to user impersonation
HIGH
CVE-2025-21620
fetch: Authorization headers not dropped when redirecting cross-origin
HIGH
CVE-2024-56513
Karmada PULL Mode Cluster Privilege Escalation
HIGH
CVE-2024-25133
OpenShift Hive RCE through AWS/Kubernetes client configuration leads to privilege escalation
HIGH
CVE-2024-56734
Better Auth has an Open Redirect Vulnerability in Verify Email Endpoint
HIGH
CVE-2024-55947
Path Traversal in file update API in gogs
HIGH
CVE-2024-54148
Remote Command Execution in file editing in gogs
HIGH
CVE-2024-56337
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
HIGH
CVE-2024-55470
Oqtane Framework Incorrect Access Control vulnerability
HIGH
CVE-2024-56329
Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
HIGH
CVE-2024-25131
OpenShift Must Gather Operator Improper Input Validation vulnerability
HIGH
CVE-2024-56327
pyrage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
HIGH
CVE-2024-56159
Astro's server source code is exposed to the public if sourcemaps are enabled
HIGH
GHSA-hvm9-wc8j-mgrc
TShock Security Escalation Exploit
HIGH
CVE-2024-21546
UniSharp Laravel Filemanager Code Injection vulnerability
HIGH
CVE-2024-50379
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
HIGH
CVE-2024-55661
Laravel Pulse Allows Remote Code Execution via Unprotected Query Method
HIGH
CVE-2024-55638
Drupal core contains a potential PHP Object Injection vulnerability
HIGH
CVE-2024-55637
Drupal core contains a potential PHP Object Injection vulnerability