Browse CVEs by Ecosystem and Severity
2,313 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2023-36796
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
HIGH
CVE-2023-40274
zola Path Traversal vulnerability
HIGH
CVE-2023-35391
.NET Information Disclosure Vulnerability
HIGH
CVE-2023-33953
Excessive Iteration in gRPC
HIGH
CVE-2023-4241
lol-html panics on certain HTML inputs
HIGH
CVE-2023-35390
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-38178
.NET Denial of Service Vulnerability
HIGH
CVE-2023-38180KEV
.NET Denial of Service Vulnerability
HIGH
CVE-2023-38208
Magento Open Source allows Improper Neutralization of Special Elements Used
HIGH
CVE-2023-38497
Cargo not respecting umask when extracting crate archives
HIGH
CVE-2023-38688
twitch-tui's connection is not encrypted
HIGH
CVE-2023-36542
Apache NiFi Code Injection vulnerability
HIGH
CVE-2023-38337
rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
HIGH
CVE-2023-37267
Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions
HIGH
CVE-2023-34089
Decidim Cross-site Scripting vulnerability in the processes filter
HIGH
CVE-2023-34090
Decidim vulnerable to sensitive data disclosure
HIGH
CVE-2023-33127
Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-33170
Microsoft Security Advisory CVE-2023-33170: .NET Security Feature Bypass Vulnerability
HIGH
CVE-2023-1428
gRPC Reachable Assertion issue
HIGH
CVE-2023-36823
Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
HIGH
CVE-2023-32731
Connection confusion in gRPC
HIGH
CVE-2023-36053EPSS 8.9%
Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
HIGH
CVE-2023-26134
git-commit-info vulnerable to Command Injection
HIGH
CVE-2023-33141
YARP Denial of Service Vulnerability
HIGH
CVE-2023-29297
Magento Open Source allows Improper Neutralization of Special Elements Used
HIGH
CVE-2023-33126
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-33128
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-29331
.NET Denial of Service vulnerability
HIGH
CVE-2023-24936
.NET Elevation of Privilege Vulnerability
HIGH
CVE-2023-24895
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-24897
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-29337
NuGet Client Remote Code Execution Vulnerability
HIGH
CVE-2018-17107
tgstation-server cached user logins in legacy server
HIGH
CVE-2023-34230
Snowflake Connector .Net Command Injection
HIGH
CVE-2023-31606
RedCloth Regular Expression Denial of Service issue
HIGH
CVE-2023-34102
avo possible unsafe reflection / partial DoS vulnerability
HIGH
CVE-2023-34103
avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fields
HIGH
CVE-2023-34411
xml-rs vulnerable to denial of service via invalid token in XML document
HIGH
CVE-2023-33966
Missing "--allow-net" permission check for built-in Node modules
HIGH
CVE-2023-1521
sccache vulnerable to privilege escalation if server is run as root
HIGH
CVE-2023-33192
Improper handling of NTS cookie length that could crash the ntpd-rs server
HIGH
CVE-2023-2515
Mattermost Incorrect Authorization vulnerability
HIGH
CVE-2023-27321
Uncontrolled Resource Consumption in OPC UA .NET Standard Reference Server
HIGH
CVE-2023-31287
Insufficient token expiration in Serenity
HIGH
CVE-2023-30626
Directory traversal + file write causing arbitrary code execution
HIGH
CVE-2023-1892
sidekiq vulnerable to cross-site scripting
HIGH
CVE-2023-30614
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay
HIGH
CVE-2023-29207
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
HIGH
CVE-2023-28260
.NET Remote Code Execution vulnerability