Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2017-1000353KEV
Deserialization of Untrusted Data in Jenkins
CRITICAL
CVE-2018-1000861KEV
Deserialization of Untrusted Data in Jenkins
CRITICAL
CVE-2022-23066
Incorrect Calculation in solana_rbpf
CRITICAL
CVE-2021-23592
Deserialization of Untrusted Data in topthink/framework
CRITICAL
CVE-2013-1607
PDFKit Improper Input Validation vulnerability
CRITICAL
CVE-2013-2095
RubyGem openshift-origin-controller is vulnerable to command injection
CRITICAL
CVE-2022-24877
Improper path handling in kustomization files allows path traversal
CRITICAL
CVE-2012-0391KEV
Apache Struts Remote Java Code Execution
CRITICAL
CVE-2022-28481
CSV-Safe improperly filters special characters potentially leading to CSV injection
CRITICAL
CVE-2022-28056
Incorrect Permission Assignment for Critical Resource in ShopXO
CRITICAL
CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
CRITICAL
CVE-2022-27311
Server side request forgery in gibbon
CRITICAL
CVE-2022-24826
Git LFS can execute a binary from the current directory on Windows
CRITICAL
CVE-2011-3583
Typo3 SQL injection due to faulty prepared statements
CRITICAL
CVE-2011-4628
Typo3 Authentication Bypass
CRITICAL
CVE-2022-25648
Command injection in ruby-git
CRITICAL
CVE-2022-28346EPSS 2.0%
SQL Injection in Django
CRITICAL
CVE-2022-28347EPSS 1.0%
SQL Injection in Django
CRITICAL
CVE-2022-27818
Insecure temporary file usage in SWHKD
CRITICAL
CVE-2022-26612
Path traversal in Hadoop
CRITICAL
CVE-2022-24803
Command Injection vulnerability in asciidoctor-include-ext
CRITICAL
CVE-2022-22965KEV
Remote Code Execution in Spring Framework
CRITICAL
CVE-2022-27815
Insecure Temporary File in SWHKD
CRITICAL
CVE-2022-24790
Puma vulnerable to HTTP Request Smuggling
CRITICAL
CVE-2022-24783
Sandbox bypass leading to arbitrary code execution in Deno
CRITICAL
CVE-2021-46433
Sandbox bypass in fenom
CRITICAL
CVE-2017-9841KEV
Code Injection in PHPUnit
CRITICAL
CVE-2020-13756
Sabberworm PHP CSS Parser Code injection vulnerability in allSelectors()
CRITICAL
CVE-2022-1025
Improper access control allows admin privilege escalation in Argo CD
CRITICAL
CVE-2022-0749
Deserialization of Untrusted Data in SinGooCMS.Utility
CRITICAL
CVE-2021-44906EPSS 0.9%
Prototype Pollution in minimist
CRITICAL
CVE-2022-21831
Possible code injection vulnerability in Rails / Active Storage
CRITICAL
CVE-2021-46703
Code injection in RazorEngine
CRITICAL
CVE-2022-22947KEV
Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured
CRITICAL
CVE-2022-24720
Remote shell execution vulnerability in image_processing
CRITICAL
CVE-2021-23682
Prototype Pollution in litespeed.js and appwrite/server-ce
CRITICAL
CVE-2022-24086KEV
Magento improper input validation vulnerability
CRITICAL
CVE-2018-1002105
Privilege Escalation in Kubernetes
CRITICAL
CVE-2022-24988
Buffer Overflow in galois_2p8
CRITICAL
CVE-2020-13675
Unrestricted Upload of File with Dangerous Type in Drupal core
CRITICAL
CVE-2021-43297
Deserialization of Untrusted Data in Dubbo
CRITICAL
CVE-2019-6339
Arbitrary PHP code execution in Drupal
CRITICAL
CVE-2018-25024
Out-of-bounds Write in actix-web
CRITICAL
CVE-2021-45684
Use of Uninitialized Resource in flumedb.
CRITICAL
CVE-2020-36513
Use of Uninitialized Resource in acc_reader.
CRITICAL
CVE-2020-36512
Use of Uninitialized Resource in buffoon.
CRITICAL
CVE-2021-45682
Use of Uninitialized Resource in bronzedb-protocol.
CRITICAL
CVE-2021-45683
Use of Uninitialized Resource in binjs_io.
CRITICAL
CVE-2021-45686
Use of Uninitialized Resource in csv-sniffer.
CRITICAL
CVE-2021-45685
columnar: Read on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())