Browse CVEs by Ecosystem and Severity
5,773 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
HIGH
CVE-2022-31173
Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow
CRITICAL
CVE-2022-31181
PrestaShop eval injection possible if shop vulnerable to SQL injection
CRITICAL
CVE-2022-31183
fs2-io skips mTLS client verification
CRITICAL
CVE-2022-35649
Moodle PostScript Code Injection
HIGH
CVE-2022-31163
TZInfo relative path traversal vulnerability allows loading of arbitrary files
CRITICAL
CVE-2022-35912
Grails framework Remote Code Execution via Data Binding
CRITICAL
CVE-2016-1000273
Java Melody vulnerable to cross-site scripting
HIGH
CVE-2022-31162
Slack Morphism for Rust before 0.41.0 can leak Slack OAuth client information in application debug logs
MEDIUM
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
MEDIUM
CVE-2020-35305
Gollum Cross-site Scripting vulnerability via filename parameter to New Page dialog
CRITICAL
CVE-2022-35628
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
CRITICAL
CVE-2022-32224
Active Record RCE bug with Serialized Columns
HIGH
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
CRITICAL
CVE-2022-2321
Improper Restriction of Excessive Authentication Attempts
HIGH
CVE-2022-31115
opensearch-ruby 2.x before 2.0.2 vulnerable to unsafe YAML deserialization
CRITICAL
CVE-2022-34265EPSS 92.8%
Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
CRITICAL
CVE-2022-2274
openssl-src heap memory corruption with RSA private key operation
MEDIUM
CVE-2013-4170
Ember.js Potential XSS Exploit When Binding `tagName` to User-Supplied Data
CRITICAL
CVE-2014-0156
OS Command Injection in awesome spawn
CRITICAL
CVE-2022-33107
Deserialization of Untrusted Data in topthink/framework
MEDIUM
CVE-2021-3779
Externally Controlled Reference to a Resource in Another Sphere in ruby-mysql
MEDIUM
CVE-2022-32209
Rails::Html::Sanitizer vulnerable to Cross-site Scripting
CRITICAL
CVE-2022-33127
Improper handling of double quotes in file name in Diffy in Windows environment
HIGH
CVE-2024-21907
Improper Handling of Exceptional Conditions in Newtonsoft.Json
CRITICAL
CVE-2022-31035
Argo CD's external URLs for Deployments can include JavaScript
HIGH
CVE-2022-29863
Memory Allocation with Excessive Size Value in OPCFoundation.NetStandard.Opc.Ua.Core
HIGH
CVE-2022-29864
Uncontrolled Resource Consumption in OPCFoundation.NetStandard.Opc.Ua.Core
HIGH
CVE-2022-29865
Incorrect Implementation of Authentication Algorithm in OPCFoundation.NetStandard.Opc.Ua.Core
HIGH
CVE-2022-29862
Security Update for the OPC UA .NET Standard Stack
CRITICAL
CVE-2022-31053
Signature forgery in Biscuit
CRITICAL
GHSA-x4mq-m75f-mx8m
Delegate functions are missing `Send` bound
CRITICAL
GHSA-3jch-9qgp-4844
Generated code can read and write out of bounds in safe code
CRITICAL
CVE-2019-25010
Type confusion if __private_get_type_id__ is overriden
CRITICAL
CVE-2021-37404
Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2
HIGH
CVE-2021-41641
Link Following in Deno
MEDIUM
CVE-2022-31033
Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect
CRITICAL
CVE-2022-1986
OS Command Injection in file editor in Gogs
CRITICAL
CVE-2022-32511
JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable
MEDIUM
CVE-2022-31026
Use of Uninitialized Variable in trilogy
CRITICAL
CVE-2022-30324
Privilege escalation in Hashicorp Nomad
CRITICAL
CVE-2021-33473
Arbitrary file write in dragonfly
HIGH
CVE-2022-30122
Denial of Service Vulnerability in Rack Multipart Parsing
CRITICAL
CVE-2022-30123
Possible shell escape sequence injection vulnerability in Rack
CRITICAL
CVE-2022-26945
HashiCorp go-getter command injection
HIGH
CVE-2021-42655
SQL injection in SiteServer CMS
MEDIUM
CVE-2021-25969
Camaleon CMS Stored Cross-site Scripting vulnerability
HIGH
CVE-2020-0813
ChakraCore information disclosure vulnerability
HIGH
CVE-2021-25970
Camaleon CMS Insufficient Session Expiration vulnerability
CRITICAL
CVE-2020-25816
Token leases could outlive their TTL in HashiCorp Vault
MEDIUM
CVE-2014-0083
net-ldap has weak salt when generating passwords