Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2022-29165
Argo CD will blindly trust JWT claims if anonymous access is enabled
CRITICAL
CVE-2021-43350
Apache Traffic Control Traffic Ops Vulnerable to LDAP Injection
CRITICAL
CVE-2021-36028
Magento has an XML Injection vulnerability
CRITICAL
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
CRITICAL
CVE-2021-36040
Magento has a file extension restrictions bypass
CRITICAL
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
CRITICAL
CVE-2021-3711
SM2 Decryption Buffer Overflow
CRITICAL
CVE-2020-21808
NukeViet SQL Injection vulnerability via topicsid parameter
CRITICAL
CVE-2020-21809
NukeViet SQL Injection vulnerability
CRITICAL
CVE-2020-13665
Drupal Core Access bypass vulnerability
CRITICAL
CVE-2021-28305
Fix a use-after-free bug in diesels Sqlite backend
CRITICAL
CVE-2021-28031
move_elements can double-free objects on panic
CRITICAL
CVE-2021-28027
Loading a bgzip block can write out of bounds if size overflows.
CRITICAL
CVE-2020-24913
qcubed SQL injection vulnerability in profile.php via the strQuery parameter
CRITICAL
CVE-2021-3197
SaltStack Salt is vulnerable to shell injection via ProxyCommand argument
CRITICAL
CVE-2021-3148
SaltStack Salt command injection in the Salt-API when using the Salt-SSH client
CRITICAL
CVE-2021-3144
SaltStack Salt eauth tokens can be used once after expiration
CRITICAL
CVE-2021-25283
SaltStack Salt Server Side Template Injection
CRITICAL
CVE-2021-25281
SaltStack Salt Improper Authentication vulnerability
CRITICAL
CVE-2021-24112
.NET Core Remote Code Execution Vulnerability
CRITICAL
CVE-2021-25900
Buffer overflow in SmallVec::insert_many
CRITICAL
CVE-2020-23653
ThinkAdmin insecure unserialize vulnerability
CRITICAL
CVE-2020-20136
QuantConnect Lean vulnerable to insecure deserialization
CRITICAL
CVE-2020-25592
SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
CRITICAL
CVE-2020-16846KEV
SaltStack Salt Command Injection in netapi ssh client
CRITICAL
CVE-2020-2300
Improper Authentication (empty password) in Jenkins Active Directory Plugin
CRITICAL
CVE-2020-2301
Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
CRITICAL
CVE-2020-2299
Improper Authentication in Jenkins Active Directory Plugin
CRITICAL
CVE-2020-26935
phpMyAdmin SQL injection vulnerability
CRITICAL
CVE-2020-2279
Sandbox bypass vulnerability in Jenkins Script Security Plugin
CRITICAL
CVE-2020-9691
Magento DOM-based Cross-site scripting vulnerability
CRITICAL
CVE-2020-15391
DevSpace vulnerable to remote code execution
CRITICAL
CVE-2020-9664
Magento php object injection vulnerability
CRITICAL
CVE-2020-9630
Magento business logic error vulnerability
CRITICAL
CVE-2020-9632
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9631
Magento security mitigation bypass vulnerability
CRITICAL
CVE-2020-9585
Magento Defense-in-depth security mitigation vulnerability
CRITICAL
CVE-2020-9582
Magento command injection vulnerability
CRITICAL
CVE-2020-9583
Magento command injection vulnerability
CRITICAL
CVE-2020-9576
Magento command injection vulnerability
CRITICAL
CVE-2020-9578
Magento command injection vulnerability
CRITICAL
CVE-2020-9580
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2020-9579
Magento Security mitigation bypass vulnerability
CRITICAL
CVE-2017-18915
Mattermost Server server restarts may provide attackers with API access
CRITICAL
CVE-2017-18908
Mattermost Server password reset email requests can be sent to attacker-provided email addresses
CRITICAL
CVE-2017-18900
Mattermost Server is vulnerable CSV Injection
CRITICAL
CVE-2017-18888
Mattermost Server is vulnerable to SQL Injection when executing multiple POST requests
CRITICAL
CVE-2017-18885
Mattermost Server allows attackers to gain privileges by accessing unintended API endpoints with users' credentials
CRITICAL
CVE-2020-13693
bbPress unauthenticated privilege-escalation
CRITICAL
CVE-2019-20627
AutoUpdater.NET allows XXE