Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2023-33965
Brook's tproxy server is vulnerable to a drive-by command injection.
HIGH
CVE-2023-34411
xml-rs vulnerable to denial of service via invalid token in XML document
HIGH
CVE-2023-33966
Missing "--allow-net" permission check for built-in Node modules
HIGH
CVE-2023-1521
sccache vulnerable to privilege escalation if server is run as root
CRITICAL
CVE-2015-20108
ruby-saml vulnerable to XPath injection
CRITICAL
CVE-2023-33189
Pomerium vulnerable to Incorrect Authorization with specially crafted requests
CRITICAL
CVE-2023-30145
Server-Side Template Injection in Camaleon CMS
HIGH
CVE-2023-33192
Improper handling of NTS cookie length that could crash the ntpd-rs server
MEDIUM
CVE-2023-2862
SSCMS vulnerable to Cross Site Scripting
CRITICAL
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
CRITICAL
CVE-2023-31890
glazedlists XML Deserialization vulnerability
CRITICAL
CVE-2022-47937
Apache Sling Commons JSON bundle vulnerable to Improper Input Validation
CRITICAL
CVE-2023-27238
LavaLite vulnerable to web cache poisoning
HIGH
CVE-2023-2515
Mattermost Incorrect Authorization vulnerability
CRITICAL
CVE-2023-32070
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
CRITICAL
CVE-2023-32069
Privilege escalation (PR)/RCE from account through class sheet
MEDIUM
CVE-2023-25309
Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui gem
CRITICAL
CVE-2023-31047EPSS 0.1%
Django bypasses validation when using one form field to upload multiple files
CRITICAL
CVE-2023-2531
AzuraCast missing brute force prevention
HIGH
CVE-2023-27321
Uncontrolled Resource Consumption in OPC UA .NET Standard Reference Server
MEDIUM
CVE-2023-31048
Exposure of Sensitive Information in OPC UA .NET Standard Reference Server
CRITICAL
CVE-2023-30331
Server-side template injection in beetl
CRITICAL
CVE-2023-25826
Command injection in OpenTSDB
CRITICAL
CVE-2023-2479
appium-desktop OS Command Injection vulnerability
CRITICAL
CVE-2023-28473
Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
CRITICAL
CVE-2023-30349
Remote code execution in JFinal CMS
HIGH
CVE-2023-31287
Insufficient token expiration in Serenity
CRITICAL
CVE-2020-36070
Remote code execution in Voyager
CRITICAL
CVE-2022-37454
Buffer overflow in sponge queue functions
MEDIUM
CVE-2023-30610
AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending
CRITICAL
CVE-2023-30839
SQL filter bypass leading to arbitrary write requests using "SQL Manager"
HIGH
CVE-2023-30626
Directory traversal + file write causing arbitrary code execution
CRITICAL
CVE-2023-22651
Rancher Webhook is misconfigured during upgrade process
CRITICAL
CVE-2023-29924
PowerJob vulnerable to incorrect access control
HIGH
CVE-2023-1892
sidekiq vulnerable to cross-site scripting
CRITICAL
CVE-2023-29525
XWiki Platform vulnerable to privilege escalation from view right on XWiki.Notifications.Code.LegacyNotificationAdministration
CRITICAL
CVE-2023-29527
XWiki Platform vulnerable to code injection from account through AWM view sheet
CRITICAL
CVE-2023-29526
XWiki Platform's async and display macro allow displaying and interacting with any document in restricted mode
CRITICAL
CVE-2023-29524
XWiki Platform vulnerable to code injection from account through XWiki.SchedulerJobSheet
CRITICAL
CVE-2023-29523
XWiki Platform vulnerable to code injection in display method used in user profiles
CRITICAL
CVE-2023-29516
XWiki Platform vulnerable to privilege escalation from view right on XWiki.AttachmentSelector
CRITICAL
CVE-2023-29514
XWiki vulnerable to Code Injection in template provider administration
CRITICAL
CVE-2023-29512
xwiki-platform-web-templates vulnerable to Eval Injection
CRITICAL
CVE-2023-20873
Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry
HIGH
CVE-2023-30614
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay
CRITICAL
CVE-2023-29926
PowerJob vulnerable to remote code execution
CRITICAL
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
CRITICAL
CVE-2023-29510
Code injection via unescaped translations in xwiki-platform
CRITICAL
CVE-2023-2138
@nuxtlabs/github-module made Use of Hard-coded Credentials
CRITICAL
CVE-2023-24831
Apache IoTDB Grafana Connector vulnerable to Improper Authentication