Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2024-58264
serde-json-wasm stack overflow during recursive JSON parsing
HIGH
CVE-2024-25817
eza Potential Heap Overflow Vulnerability for AArch64
HIGH
GHSA-8v28-3g86-chj5
PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
HIGH
GHSA-259p-rvjx-ffwg
Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
HIGH
CVE-2024-24810
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
CRITICAL
CVE-2024-25145
Liferay Portal stored cross-site scripting (XSS) vulnerability
MEDIUM
CVE-2022-34716
.NET Information Disclosure Vulnerability
HIGH
GHSA-jcmq-5rrv-j2g4
PowerShell is subject to remote code execution vulnerability
CRITICAL
CVE-2024-1143
Central Dogma Authentication Bypass Vulnerability via Session Leakage
CRITICAL
CVE-2024-22533
Beetl Server-Side Template Injection vulnerability
CRITICAL
CVE-2024-23652
BuildKit vulnerable to possible host system access from mount stub cleaner
CRITICAL
CVE-2024-23653
Buildkit's interactive containers API does not validate entitlements check
MEDIUM
CVE-2021-29511
Memory over-allocation in evm crate
HIGH
CVE-2024-23838
TrueLayer.Client SSRF when fetching payment or payment provider
CRITICAL
CVE-2023-51837
Ylianst MeshCentral Missing SSL Certificate Validation
CRITICAL
CVE-2024-23827
Nginx-UI vulnerable to arbitrary file write through the Import Certificate feature
HIGH
CVE-2024-23649
Any authenticated user may obtain private message details from other users on the same instance
MEDIUM
CVE-2024-23644
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in trillium-http and trillium-client
CRITICAL
CVE-2024-23897KEV
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
CRITICAL
CVE-2024-23636
Remote Command Execution in SOFARPC
CRITICAL
CVE-2017-20189
Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization
HIGH
CVE-2024-58368
Uncaught Exception processing HTTP Headers in SurrealDB
MEDIUM
CVE-2024-22411
Cross-site scripting (XSS) in Action messages on Avo
CRITICAL
CVE-2024-22406
Blind SQL injection in shopware
MEDIUM
CVE-2024-21670
CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential
MEDIUM
CVE-2024-22192
Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders
HIGH
CVE-2024-22191
avo vulnerable to stored cross-site scripting (XSS) in key_value field
HIGH
CVE-2023-46226
Remote Code Execution vulnerability in Apache IoTDB via UDF
CRITICAL
CVE-2024-22199
Django Template Engine Vulnerable to XSS
CRITICAL
CVE-2019-6342
Drupal Improper Access Control
CRITICAL
CVE-2023-49599
WWBN AVideo Insufficient Entropy vulnerbaility
CRITICAL
CVE-2023-49569
Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients
CRITICAL
CVE-2024-21669
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
MEDIUM
CVE-2024-21319
Microsoft ASP.NET Core project templates vulnerable to denial of service
HIGH
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass
HIGH
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
CRITICAL
CVE-2024-21650
XWiki Remote Code Execution Vulnerability via User Registration
MEDIUM
CVE-2024-21647
Puma HTTP Request/Response Smuggling vulnerability
MEDIUM
CVE-2024-21636
view_component Cross-site Scripting vulnerability
HIGH
CVE-2024-21632
Omniauth::MicrosoftGraph Account takeover (nOAuth)
CRITICAL
CVE-2023-51784
Apache InLong Manager Remote Code Execution vulnerability
CRITICAL
CVE-2023-46308
plotly.js prototype pollution vulnerability
MEDIUM
CVE-2023-51652
OWASP.AntiSamy mXSS when preserving comments
CRITICAL
CVE-2023-41542
Jeecg Boot SQL injection vulnerability
CRITICAL
CVE-2023-41543
Jeecg Boot SQL Injection
MEDIUM
CVE-2023-51763
ActiveAdmin CSV Injection leading to sensitive information disclosure
CRITICAL
CVE-2023-51084
hyavijava stack overflow vulnerability
MEDIUM
CVE-2023-51662
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
CRITICAL
CVE-2023-51656
Apache IoTDB: Unsafe deserialize map in Sync Tool
CRITICAL
CVE-2019-25158
Pedroetb TTS-API OS Command Injection