Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2017-0223
ChakraCore RCE Vulnerability
CRITICAL
CVE-2017-7664
Apache OpenMeetings does not correctly validate uploaded XML documents
CRITICAL
CVE-2016-6798
XML External Entity Reference in Apache Sling
CRITICAL
CVE-2017-9785
Deserialization of Untrusted Data in NancyFX Nancy
CRITICAL
CVE-2017-1000362
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
CRITICAL
CVE-2016-4436
Apache Struts improper action name cleanup
CRITICAL
CVE-2017-2641
Moodle SQL injection via user preferences
CRITICAL
CVE-2017-8658
ChakraCore RCE Vulnerability
CRITICAL
CVE-2016-3086
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
CRITICAL
CVE-2017-14242
Dolibarr SQL injection vulnerability in don/list.php
CRITICAL
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
CRITICAL
CVE-2014-8684
CodeIgniter and Kohana vulnerable to PHP Object Injection
CRITICAL
CVE-2016-10074
Swift Mailer mail transport Command Injection
CRITICAL
CVE-2012-4449
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
CRITICAL
CVE-2015-3933
MetalGenix GeniXCMS vulnerable to SQL Injection
CRITICAL
CVE-2017-8045
Deserialization of Untrusted Data in Spring AMQP
CRITICAL
CVE-2021-33318
Improper Input Validation in IpMatcher
CRITICAL
CVE-2022-24817
Improper kubeconfig validation allows arbitrary code execution
CRITICAL
CVE-2016-0788
Jenkins allows Execution of Code by Opening a JRMP Listener
CRITICAL
CVE-2017-17897
Dolibarr SQL injection vulnerability in comm/multiprix.php
CRITICAL
CVE-2017-17900
Dolibarr SQL injection vulnerability in fourn/index.php
CRITICAL
CVE-2017-17899
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
CRITICAL
CVE-2018-8073
yii2-redis Potential Remote code execution
CRITICAL
CVE-2018-9057
HashiCorp Terraform Amazon Web Services (AWS) uses an insecure PRNG
CRITICAL
CVE-2018-10225
thinkphp SQL Injection via the index.php s parameter
CRITICAL
CVE-2017-12868
SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module
CRITICAL
CVE-2018-11407
Symfony Authentication Bypass
CRITICAL
CVE-2016-2403
Symfony Authentication Bypass
CRITICAL
CVE-2018-12071
CodeIgniter Session Fixation Vulnerability
CRITICAL
CVE-2018-13448
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13447
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-11587
Centreon RCE Vulnerability
CRITICAL
CVE-2018-13450
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-13449
Dolibarr SQL injection vulnerability in product/card.php
CRITICAL
CVE-2018-14065
PHPOffice Common Improper Restriction of XML External Entity Reference
CRITICAL
CVE-2017-6920
Drupal PECL YAML parser unsafe object handling
CRITICAL
CVE-2017-15367
Bacula-web SQL Injection Vulnerabilities
CRITICAL
CVE-2016-3109
Shopware RCE Vulnerability
CRITICAL
CVE-2016-10034
zend-mail remote code execution via Sendmail adapter
CRITICAL
CVE-2016-6233
Zend Framework Allows SQL Injection
CRITICAL
CVE-2018-16974
Elefant CMS Code Execution Vulnerability
CRITICAL
CVE-2014-10075
karo Metacharacter Handling Remote Command Execution
CRITICAL
CVE-2018-9209
FineUploader php-traditional-server unauthenticated arbitrary file upload vulnerability
CRITICAL
CVE-2019-6798
phpMyAdmin SQL injection in Designer feature
CRITICAL
CVE-2019-9081
Laravel Framework Deserialization Vulnerability
CRITICAL
CVE-2018-7600KEV
Drupal Core Remote Code Execution Vulnerability
CRITICAL
CVE-2018-12026
Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability
CRITICAL
CVE-2018-16809
Dolibarr SQL injection via the integer parameters qty and value_unit
CRITICAL
CVE-2017-10842
baserCMS SQL Injection vulnerability
CRITICAL
CVE-2014-3600
Improper Restriction of XML External Entity Reference in Apache ActiveMQ