Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-58366
Externally Controlled Format String in Scripting Functions
HIGH
CVE-2024-20719
Magento Open Source allows Cross-Site Scripting (XSS)
HIGH
CVE-2024-20720
Magento Open Source allows OS Command Injection
HIGH
CVE-2024-21386
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
HIGH
CVE-2023-46950
XSS sidekiq-unique-jobs UI server vulnerability
HIGH
CVE-2024-58264
serde-json-wasm stack overflow during recursive JSON parsing
HIGH
CVE-2024-25817
eza Potential Heap Overflow Vulnerability for AArch64
HIGH
GHSA-8v28-3g86-chj5
PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
HIGH
GHSA-259p-rvjx-ffwg
Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
HIGH
CVE-2024-24810
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
HIGH
GHSA-jcmq-5rrv-j2g4
PowerShell is subject to remote code execution vulnerability
HIGH
CVE-2024-23838
TrueLayer.Client SSRF when fetching payment or payment provider
HIGH
CVE-2024-23649
Any authenticated user may obtain private message details from other users on the same instance
HIGH
CVE-2024-58368
Uncaught Exception processing HTTP Headers in SurrealDB
HIGH
CVE-2024-22191
avo vulnerable to stored cross-site scripting (XSS) in key_value field
HIGH
CVE-2023-46226
Remote Code Execution vulnerability in Apache IoTDB via UDF
HIGH
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass
HIGH
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
HIGH
CVE-2024-21632
Omniauth::MicrosoftGraph Account takeover (nOAuth)
HIGH
CVE-2023-50448
Potential CSV export data leak
HIGH
CVE-2023-54366
SurrealDB: Full Table Permissions by Default
HIGH
CVE-2023-50461
Configuration Injection in extension "Direct Mail" (direct_mail)
HIGH
CVE-2023-51661
Wasmer filesystem sandbox not enforced
HIGH
CVE-2023-6245
Candid infinite decoding loop through specially crafted payload
HIGH
CVE-2023-5528
Kubernetes Improper Input Validation vulnerability
HIGH
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
HIGH
CVE-2023-3893
Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation
HIGH
CVE-2023-3676
Kubernetes privilege escalation vulnerability
HIGH
CVE-2023-3955
Kubernetes privilege escalation vulnerability
HIGH
CVE-2024-0241
encoded_id-rails potential DOS vulnerability due to URIs with extremely long encoded IDs
HIGH
CVE-2023-46115
Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables
HIGH
CVE-2023-46277
Pleaser privilege escalation vulnerability
HIGH
CVE-2023-45812
Apollo Router vulnerable to Improper Check or Handling of Exceptional Conditions
HIGH
CVE-2023-36435
MsQuic Remote Denial of Service Vulnerability
HIGH
CVE-2023-38171
Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel
HIGH
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability
HIGH
GHSA-wqcr-xm43-hpqr
Vulnerable version of libwebp and can be exploited with a malicious source image
HIGH
CVE-2023-36465
Decidim has broken access control in templates
HIGH
GHSA-7vpr-3ppw-qrpj
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
HIGH
CVE-2023-42805
Denial of Service issue in quinn-proto
HIGH
CVE-2023-42444
phonenumber panics on parsing crafted RFC3966 inputs
HIGH
CVE-2023-42447
blurhash panics on parsing crafted inputs
HIGH
CVE-2023-43669
Tungstenite allows remote attackers to cause a denial of service
HIGH
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
HIGH
CVE-2023-4853
Quarkus HTTP vulnerable to incorrect evaluation of permissions
HIGH
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
HIGH
CVE-2023-39914
BER/CER/DER decoder panics on invalid input
HIGH
CVE-2023-36792
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-36794
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-36793
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability