Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-54149
Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion
HIGH
CVE-2024-53908
Django SQL injection in HasKey(lhs, rhs) on Oracle
HIGH
CVE-2024-53857
rPGP Potential Resource Exhaustion when handling Untrusted Messages
HIGH
CVE-2024-53856
rPGP Panics on Malformed Untrusted Input
HIGH
GHSA-wwq9-3cpr-mm53
Borsh serialization of HashMap is non-canonical
HIGH
CVE-2024-53900
Mongoose search injection vulnerability
HIGH
CVE-2024-52596
SimpleSAMLphp xml-common XXE vulnerability
HIGH
CVE-2024-49203
Querydsl vulnerable to HQL injection through orderBy
HIGH
CVE-2024-48510
DotNetZip Directory Traversal vulnerability
HIGH
CVE-2024-43499
.NET Denial of Service Vulnerability
HIGH
CVE-2024-43415
Decidim-Awesome has SQL injection in AdminAccountability
HIGH
CVE-2024-51135
powertac-server XML External Entity vulnerability
HIGH
CVE-2024-52009
Git credentials are exposed in Atlantis logs
HIGH
CVE-2024-52007
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
HIGH
CVE-2024-51504
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
HIGH
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
HIGH
CVE-2024-51736
Symfony vulnerable to command execution hijack on Windows with Process class
HIGH
CVE-2024-51132
HAPI FHIR XML External Entity (XXE) vulnerability
HIGH
CVE-2024-51127
hornetq vulnerable to file overwrite, sensitive information disclosure
HIGH
CVE-2024-23590
Apache Kylin Session Fixation vulnerability
HIGH
CVE-2024-49381
Plenti arbitrary file deletion vulnerability
HIGH
CVE-2024-49380
Plenti arbitrary file write vulnerability
HIGH
CVE-2024-51478
YesWiki Uses a Broken or Risky Cryptographic Algorithm
HIGH
CVE-2024-42835
langflow has vulnerability in PythonCodeTool component
HIGH
CVE-2024-43383
Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability
HIGH
CVE-2024-48307
JeecgBoot SQL Injection vulnerability
HIGH
CVE-2024-48112
ThinkPHP deserialization vulnerability
HIGH
CVE-2024-48230
SQL injection in funadmin
HIGH
CVE-2024-48229
SQL injection in funadmin
HIGH
CVE-2024-48222
SQL injection in funadmin
HIGH
CVE-2024-48226
SQL injection in funadmin
HIGH
CVE-2024-48218
SQL injection in funadmin
HIGH
CVE-2024-48225
SQL injection in funadmin
HIGH
CVE-2024-48223
SQL injection in funadmin
HIGH
CVE-2022-45157
Exposure of vSphere's CPI and CSI credentials in Rancher
HIGH
CVE-2024-49376
Autolab Misconfigured Reset Password Permissions
HIGH
CVE-2024-48514
Remote code execution in php-heic-to-jpg
HIGH
CVE-2024-26271
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the My Account Widget
HIGH
CVE-2024-26273
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor
HIGH
CVE-2024-26272
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery (CSRF) via the Content Page Editor
HIGH
GHSA-qm9f-c3v9-wphv
Security Update for the OPC UA .NET Standard Stack
HIGH
CVE-2024-47875
DOMpurify has a nesting-based mXSS
HIGH
CVE-2024-58367
SurrealDB: Improper Authorization in Select Permissions
HIGH
CVE-2024-58361
SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings
HIGH
CVE-2024-43485
Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability
HIGH
CVE-2024-43484
Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability
HIGH
CVE-2024-43483
Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability
HIGH
CVE-2024-38229
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
HIGH
CVE-2024-47614
async-graphql Directive Overload
HIGH
CVE-2024-9313
PAM module may allow accessing with the credentials of another user