Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2023-36053EPSS 8.9%
Django has regular expression denial of service vulnerability in EmailValidator/URLValidator
CRITICAL
CVE-2023-36812
Remote Code Execution for 2.4.1 and earlier
CRITICAL
CVE-2023-36468
Upgrading doesn't prevent exploiting vulnerable XWiki documents
CRITICAL
CVE-2023-36469
XWiki Platform vulnerable to Code injection through NotificationRSSService
CRITICAL
CVE-2023-36470
XWiki Platform vulnerable to Code Injection in icon themes
CRITICAL
CVE-2023-36475
Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
CRITICAL
CVE-2022-4361
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
CRITICAL
CVE-2023-33190
Improper configuration of RBAC permissions obtaining cluster control permissions
MEDIUM
CVE-2023-36617
URI gem has ReDoS vulnerability
HIGH
CVE-2023-26134
git-commit-info vulnerable to Command Injection
CRITICAL
CVE-2021-31635
jFinal Server-Side Template Injection vulnerability
HIGH
CVE-2023-33141
YARP Denial of Service Vulnerability
CRITICAL
CVE-2023-3128
Grafana vulnerable to Authentication Bypass by Spoofing
CRITICAL
CVE-2023-32571
Dynamic Linq vulnerable to remote code execution
CRITICAL
CVE-2023-35161
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
CRITICAL
CVE-2023-35160
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
CRITICAL
CVE-2023-35159
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
CRITICAL
CVE-2023-35158
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
CRITICAL
CVE-2023-35156
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
CRITICAL
CVE-2023-36097
fuadmin vulnerable to insecure file upload
CRITICAL
CVE-2023-29931
laravel-s vulnerable to Local File Inclusion
CRITICAL
CVE-2023-34340
Apache Accumulo Improper Authentication vulnerability
CRITICAL
CVE-2023-35162
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
CRITICAL
CVE-2023-35152
XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
CRITICAL
CVE-2023-35150
XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
CRITICAL
CVE-2023-34465
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
CRITICAL
CVE-2023-34464
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
CRITICAL
CVE-2020-21489
Liufee CMS File Upload vulnerability
CRITICAL
CVE-2020-21174
liufee CMS File Upload vulnerability
CRITICAL
CVE-2023-35839
Solon vulnerable to deserialization of untrusted data
CRITICAL
CVE-2023-34659
jeecg-boot SQL injection vulnerability
HIGH
CVE-2023-29297
Magento Open Source allows Improper Neutralization of Special Elements Used
HIGH
CVE-2023-33126
Microsoft Security Advisory CVE-2023-33126: .NET Remote Code Execution Vulnerability
HIGH
CVE-2023-33128
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-29331
.NET Denial of Service vulnerability
HIGH
CVE-2023-24936
.NET Elevation of Privilege Vulnerability
HIGH
CVE-2023-24895
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-24897
.NET Remote Code Execution Vulnerability
HIGH
CVE-2023-29337
NuGet Client Remote Code Execution Vulnerability
HIGH
CVE-2018-17107
tgstation-server cached user logins in legacy server
CRITICAL
CVE-2023-35042
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
MEDIUM
CVE-2023-23913
rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
MEDIUM
CVE-2023-27531
Kredis JSON Possible Deserialization of Untrusted Data Vulnerability
HIGH
CVE-2023-34230
Snowflake Connector .Net Command Injection
CRITICAL
CVE-2023-3173
Froxlor vulnerable to Improper Restriction of Excessive Authentication Attempts
CRITICAL
CVE-2023-33496
xxl-rpc deserialization vulnerability
HIGH
CVE-2023-31606
RedCloth Regular Expression Denial of Service issue
HIGH
CVE-2023-34102
avo possible unsafe reflection / partial DoS vulnerability
HIGH
CVE-2023-34103
avo vulnerable to Stored XSS (Cross Site Scripting) in html content based fields
CRITICAL
CVE-2023-22647
Rancher vulnerable to Privilege Escalation via manipulation of Secrets