Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2023-22946
Apache Spark vulnerable to Improper Privilege Management
HIGH
CVE-2023-29207
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
CRITICAL
CVE-2023-29205
org.xwiki.platform:xwiki-platform-rendering-xwiki vulnerable to stored cross-site scripting via HTML and raw macro
CRITICAL
CVE-2023-29511
xwiki-platform-administration-ui vulnerable to privilege escalation
CRITICAL
CVE-2023-30537
org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation
CRITICAL
CVE-2023-29509
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
CRITICAL
CVE-2023-29214
org.xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
CRITICAL
CVE-2023-29212
xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability
CRITICAL
CVE-2023-29211
org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki Eval Injection vulnerability
CRITICAL
CVE-2023-29210
org.xwiki.platform:xwiki-platform-notifications-ui Eval Injection vulnerability
CRITICAL
CVE-2023-29209
org.xwiki.platform:xwiki-platform-legacy-notification-activitymacro Eval Injection vulnerability
HIGH
CVE-2023-28260
.NET Remote Code Execution vulnerability
CRITICAL
CVE-2023-26122
safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
CRITICAL
CVE-2023-26121
safe-eval vulnerable to Prototype Pollution via the safeEval function
CRITICAL
CVE-2023-29215
Apache Linkis JDBC EngineConn has deserialization vulnerability
CRITICAL
CVE-2023-29216
Apache Linkis DatasourceManager module has deserialization vulnerability
CRITICAL
CVE-2023-25330
MyBatis-Plus vulnerable to SQL injection via TenantPlugin
CRITICAL
CVE-2021-28235
Etcd-io Improper Authentication vulnerability
CRITICAL
CVE-2020-20913
Ming-Soft MCMS vulnerable to SQL injection
HIGH
CVE-2020-21514
Fluent Fluentd and Fluent-ui use default password
CRITICAL
CVE-2023-1800
sjqzhang go-fastdfs vulnerable to path traversal
CRITICAL
CVE-2023-29141
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
CRITICAL
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
HIGH
CVE-2023-28756
Ruby Time component ReDoS issue
HIGH
CVE-2023-28755
Ruby URI component ReDoS issue
MEDIUM
CVE-2023-28846
unpoly-rails Denial of Service vulnerability
CRITICAL
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
CRITICAL
CVE-2023-28326
Apache OpenMeetings missing authentication and can allow user impersonation
CRITICAL
CVE-2023-20860
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
HIGH
CVE-2023-28638
Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer
HIGH
CVE-2023-28446
Interactive `run` permission prompt spoofing via improper ANSI neutralization
CRITICAL
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
CRITICAL
CVE-2023-28445
Deno improperly handles resizable ArrayBuffer
CRITICAL
CVE-2023-28333
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
CRITICAL
CVE-2023-25655
baserCMS allows any file to be uploaded
CRITICAL
CVE-2023-25654
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
HIGH
CVE-2023-28431
Frontier's modexp precompile is slow for even modulus
CRITICAL
CVE-2023-1537
Answer vulnerable to Authentication Bypass by Capture-replay
CRITICAL
CVE-2023-28609
Ansible Semaphore mishandles authentication
CRITICAL
CVE-2023-28115
PHAR deserialization allowing remote code execution
MEDIUM
CVE-2023-28120
Possible XSS Security Vulnerability in SafeBuffer#bytesplice
CRITICAL
CVE-2022-48367
Access control issue in ezsystems/ezpublish-kernel
CRITICAL
CVE-2023-24774
Funadmin vulnerable to SQL injection
CRITICAL
CVE-2023-1307
Froxlor is vulnerable to authentication bypass
CRITICAL
CVE-2023-24777
SQL Injection in Funadmin
CRITICAL
CVE-2023-26489
wasmtime vulnerable to guest-controlled out-of-bounds read/write on x86_64
CRITICAL
CVE-2023-24782
SQL Injection in Funadmin
CRITICAL
CVE-2023-24773
SQL Injection in Funadmin
HIGH
CVE-2023-27530
Rack has possible DoS Vulnerability in Multipart MIME parsing
CRITICAL
CVE-2023-27479
org.xwiki.platform:xwiki-platform-panels-ui vulnerable to Eval Injection