Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
MEDIUM
CVE-2023-50724
Resque vulnerable to Reflected Cross Site Scripting through pathnames
MEDIUM
CVE-2023-50725
Resque vulnerable to reflected XSS in resque-web failed and queues lists
MEDIUM
CVE-2023-50727
Resque vulnerable to reflected XSS in Queue Endpoint
MEDIUM
CVE-2022-44303
Resque Scheduler Reflected XSS In Delayed Jobs View
CRITICAL
CVE-2023-50723
Remote code execution/programming rights with configuration section from any user account
CRITICAL
CVE-2023-50722
XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass
CRITICAL
CVE-2023-50721
Remote code execution from account through SearchAdmin
HIGH
CVE-2023-50448
Potential CSV export data leak
CRITICAL
CVE-2023-29234
Bypass serialize checks in Apache Dubbo
CRITICAL
CVE-2023-46279
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
HIGH
CVE-2023-54366
SurrealDB: Full Table Permissions by Default
HIGH
CVE-2023-50461
Configuration Injection in extension "Direct Mail" (direct_mail)
CRITICAL
CVE-2023-50422
Improper JWT Signature Validation in SAP Security Services Library
HIGH
CVE-2023-51661
Wasmer filesystem sandbox not enforced
CRITICAL
CVE-2023-46498
Code execution in evershop
HIGH
CVE-2023-6245
Candid infinite decoding loop through specially crafted payload
CRITICAL
CVE-2023-50164
Apache Struts vulnerable to path traversal
MEDIUM
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
CRITICAL
CVE-2023-49093
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
CRITICAL
CVE-2023-48910
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
CRITICAL
CVE-2023-48967
Solon is vulnerable to Deserialization of Untrusted Data
CRITICAL
CVE-2023-48887
Jupiter allows attackers to execute arbitrary commands via sending a crafted RPC request
CRITICAL
CVE-2023-49371
RuoYi vulnerable to SQL injection vulnerability
CRITICAL
CVE-2023-6026
PHPMemcachedAdmin Path Traversal vulnerability
CRITICAL
CVE-2023-49733
Apache Cocoon Improper Restriction of XML External Entity Reference vulnerability
CRITICAL
CVE-2022-45135
Apache Cocoon SQL Injection vulnerability
MEDIUM
CVE-2023-49090
CarrierWave Content-Type allowlist bypass vulnerability, possibly leading to XSS
CRITICAL
CVE-2023-48312
Capsule Proxy Authentication bypass using an empty token
CRITICAL
CVE-2023-49210
openssl npm package vulnerable to command execution
CRITICAL
CVE-2023-48292
Run Shell Command allows Cross-Site Request Forgery
CRITICAL
CVE-2023-48240
Cookies are sent to external images in rendered diff (and server side request forgery)
CRITICAL
CVE-2022-46337
Apache Derby: LDAP injection vulnerability in authenticator
CRITICAL
CVE-2023-47797
Liferay Portal XSS with `p_l_back_url_title` on edit content page
MEDIUM
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
HIGH
CVE-2023-5528
Kubernetes Improper Input Validation vulnerability
HIGH
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
MEDIUM
CVE-2023-36558
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
CRITICAL
CVE-2023-6069
Froxlor Improper Input Validation vulnerability
MEDIUM
CVE-2023-45857EPSS 0.1%
Axios Cross-Site Request Forgery Vulnerability
CRITICAL
CVE-2023-46732
XWiki Platform vulnerable to reflected cross-site scripting through revision parameter in content menu
CRITICAL
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
CRITICAL
CVE-2023-46242
XWiki Platform vulnerable to remote code execution via the edit action because it lacks CSRF token
HIGH
CVE-2023-3893
Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation
HIGH
CVE-2023-3676
Kubernetes privilege escalation vulnerability
HIGH
CVE-2023-3955
Kubernetes privilege escalation vulnerability
CRITICAL
CVE-2023-46502
OpenCRX allows a remote attacker to execute arbitrary code via a crafted request
MEDIUM
CVE-2023-5349
memory leak flaw was found in ruby-magick
CRITICAL
CVE-2023-46604KEV
Apache ActiveMQ is vulnerable to Remote Code Execution
CRITICAL
CVE-2023-45137
XWiki Platform vulnerable to XSS with edit right in the create document form for existing pages
CRITICAL
CVE-2023-45136
XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled