Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2023-43669
Tungstenite allows remote attackers to cause a denial of service
HIGH
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
HIGH
CVE-2023-4853
Quarkus HTTP vulnerable to incorrect evaluation of permissions
CRITICAL
CVE-2023-38888
Cross Site Scripting vulnerability in Dolibarr ERP CRM
CRITICAL
CVE-2022-24816KEV
Improper Control of Generation of Code ('Code Injection') in jai-ext
CRITICAL
CVE-2022-28357
NATS nats-server allows directory traversal via unintended path to a management action
CRITICAL
CVE-2023-33831
A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
MEDIUM
CVE-2023-26141
sidekiq Denial of Service vulnerability
HIGH
CVE-2023-4785
Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
CRITICAL
CVE-2023-41892
Craft CMS Remote Code Execution vulnerability
CRITICAL
CVE-2023-39916
NLnet Labs’ Routinator vulnerable to path traversal
HIGH
CVE-2023-39914
BER/CER/DER decoder panics on invalid input
HIGH
CVE-2023-36792
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-36794
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-36793
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-36796
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
MEDIUM
CVE-2023-36799
Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability
HIGH
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
CRITICAL
CVE-2023-41887
OpenRefine Remote Code execution in project import with mysql jdbc url attack
CRITICAL
CVE-2023-40029
Argo CD cluster secret might leak in cluster details page
CRITICAL
CVE-2023-42277
hutool Buffer Overflow vulnerability
CRITICAL
CVE-2023-42276
hutool Buffer Overflow vulnerability
CRITICAL
CVE-2023-42268
Jeecg boot SQL Injection vulnerability
CRITICAL
CVE-2023-41330
Snappy PHAR deserialization vulnerability
CRITICAL
CVE-2021-36021
Magento affected by remote code execution vulnerability in the CMS page scheduled update feature
CRITICAL
CVE-2021-36023
Magento XML Injection vulnerability in the Widgets Update Layout
CRITICAL
CVE-2021-36036
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow
CRITICAL
CVE-2023-40743
Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService
CRITICAL
CVE-2023-4696
Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos
CRITICAL
CVE-2023-40582
Command Injection Vulnerability in find-exec
MEDIUM
CVE-2023-38037
Active Support Possibly Discloses Locally Encrypted Files
CRITICAL
CVE-2023-40177
XWiki Platform privilege escalation (PR) from account through AWM content fields
CRITICAL
CVE-2023-37914
XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message
CRITICAL
CVE-2023-40175
Puma HTTP Request/Response Smuggling vulnerability
CRITICAL
CVE-2023-38894
tree-kit Prototype Pollution vulnerability
CRITICAL
CVE-2023-38889
Alluxio vulnerable to arbitrary code execution
CRITICAL
CVE-2023-40013
external-svg-loader Cross-site Scripting vulnerability
HIGH
CVE-2023-40274
zola Path Traversal vulnerability
HIGH
CVE-2023-35391
.NET Information Disclosure Vulnerability
CRITICAL
CVE-2021-26505
MrSwitch hello.js vulnerable to prototype pollution
HIGH
CVE-2023-33953
Excessive Iteration in gRPC
CRITICAL
CVE-2023-39532
SES's dynamic import and spread operator provides possible path to arbitrary exfiltration and execution
CRITICAL
CVE-2023-39526
PrestaShop SQL manager vulnerability
HIGH
CVE-2023-4241
lol-html panics on certain HTML inputs
HIGH
CVE-2023-35390
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-38178
.NET Denial of Service Vulnerability
HIGH
CVE-2023-38180KEV
.NET Denial of Service Vulnerability
HIGH
CVE-2023-38208
Magento Open Source allows Improper Neutralization of Special Elements Used
CRITICAL
CVE-2023-4195
Cockpit PHP Remote File Inclusion vulnerability
CRITICAL
CVE-2023-29689
PyroCMS remote code execution vulnerability