Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2024-25737
VuFind Server-Side Request Forgery (SSRF) vulnerability
MEDIUM
CVE-2024-35197
gix refs and paths with reserved Windows device names access the devices
HIGH
CVE-2024-35186
gix traversal outside working tree enables arbitrary code execution
CRITICAL
CVE-2024-31989
ArgoCD Vulnerable to Use of Risky or Missing Cryptographic Algorithms in Redis Cache
MEDIUM
CVE-2024-34071
Umbraco CMS Open Redirect Bypass Protection
MEDIUM
CVE-2024-35195EPSS 0.0%
Requests `Session` object does not verify requests after making first request with verify=False
CRITICAL
CVE-2024-24294
Blackprint @blackprint/engine Prototype Pollution issue
HIGH
CVE-2024-28109
veraPDF has potential XSLT injection vulnerability when using policy files
HIGH
CVE-2024-35312
Tor Arti's STUB circuits incorrectly have a length of 2
MEDIUM
CVE-2024-35176
REXML contains a denial of service vulnerability
CRITICAL
CVE-2020-35125
Mautic is vulnerable to XSS vulnerability
CRITICAL
CVE-2024-32888
Amazon JDBC Driver for Redshift SQL Injection via line comment generation
CRITICAL
CVE-2022-39328
Grafana Race condition allowing privilege escalation
CRITICAL
CVE-2021-41244
Grafana Fine-grained access control vulnerability
MEDIUM
CVE-2024-30046
Microsoft Security Advisory CVE-2024-30046 | .NET Denial of Service Vulnerability
MEDIUM
CVE-2024-30045
Microsoft Security Advisory CVE-2024-30045 | .NET Remote code Execution Vulnerability
CRITICAL
CVE-2024-34716
PrestaShop cross-site scripting via customer contact form in FO, through file upload
MEDIUM
CVE-2024-30054
Microsoft Power BI Client JavaScript SDK Information Disclosure Vulnerability
CRITICAL
CVE-2024-4825
Cockpit CMS contains an arbitrary file upload vulenrability
MEDIUM
CVE-2024-29857
Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.
MEDIUM
CVE-2024-30172
Bouncy Castle crafted signature and public key can be used to trigger an infinite loop
MEDIUM
CVE-2024-30171
Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")
CRITICAL
CVE-2024-34706
@valtimo/components exposes access token to form.io
CRITICAL
CVE-2024-34070
Blind XSS Leading to Froxlor Application Compromise
CRITICAL
CVE-2024-4701
Genie Path Traversal vulnerability via File Uploads
HIGH
CVE-2024-32655
Npgsql vulnerable to SQL Injection via Protocol Message Size Overflow
CRITICAL
CVE-2024-32980
Spin applications with specific configuration vulnerable to potential network sandbox escape
CRITICAL
CVE-2024-26579
Apache Inlong Deserialization of Untrusted Data vulnerability
HIGH
CVE-2024-34346
Deno permission escalation vulnerability via open of privileged files with missing `--deny` flag
MEDIUM
CVE-2024-34341
Trix Editor Arbitrary Code Execution Vulnerability
CRITICAL
CVE-2024-30850
tiagorlampert CHAOS vulnerable to arbitrary code execution
CRITICAL
CVE-2024-34461
Zenario uses Twig filters insecurely in the Twig Snippet plugin
CRITICAL
CVE-2024-32971
Apollo Router vulnerable to Critical Regression In Query Plan Cache
CRITICAL
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
HIGH
CVE-2024-32984
Yamux Memory Exhaustion Vulnerability via Active::pending_frames property
HIGH
CVE-2024-32970
Phlex vulnerable to Cross-site Scripting (XSS) via maliciously formed HTML attribute names and values
MEDIUM
CVE-2024-32887
Sidekiq vulnerable to a Reflected XSS in Queues Web Page
CRITICAL
CVE-2020-28991
Improper Access Control in Gitea
CRITICAL
CVE-2020-14316
Privilege Escalation in kubevirt
MEDIUM
CVE-2024-32872
Umbraco Workflow's Backoffice users can execute arbitrary SQL
CRITICAL
CVE-2014-8089
Zend Framework SQL injection vulnerability
CRITICAL
CVE-2018-7602KEV
Drupal Core Remote Code Execution Vulnerability
HIGH
CVE-2024-32866
Conform contains a Prototype Pollution Vulnerability in `parseWith...` function
CRITICAL
CVE-2024-28253
OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)
CRITICAL
CVE-2024-21511
MySQL2 for Node Arbitrary Code Injection
CRITICAL
CVE-2024-27348KEV
Apache HugeGraph-Server: Command execution in gremlin
HIGH
CVE-2024-32650
Denial of Service Vulnerability in Rustls Library
CRITICAL
CVE-2024-30564
@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability
CRITICAL
CVE-2024-3817
HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
HIGH
CVE-2024-21409
.NET Elevation of Privilege Vulnerability